@workos-inc/node 8.1.0 → 8.2.0

package/lib/{verify-response.serializer-CuPqcouK.d.cts → verify-response.serializer-DLbxaA_Y.d.cts}

@@ -1,7 +1,7 @@
-import { n as VerifyResponseResponse, t as VerifyResponse } from "./verify-challenge-response-CAIHmhRm.cjs";
+import { n as VerifyResponseResponse, t as VerifyResponse } from "./verify-challenge-response-DpXoIuSX.cjs";
 
 //#region src/mfa/serializers/verify-response.serializer.d.ts
 declare const deserializeVerifyResponse: (verifyResponse: VerifyResponseResponse) => VerifyResponse;
 //#endregion
 export { deserializeVerifyResponse as t };
-//# sourceMappingURL=verify-response.serializer-CuPqcouK.d.cts.map
+//# sourceMappingURL=verify-response.serializer-DLbxaA_Y.d.cts.map

package/lib/{warning.interface-BVeaQsw5.d.cts → warning.interface-yJ1XNLbJ.d.cts}

@@ -10,4 +10,4 @@ interface MissingContextKeysWarning extends BaseWarning {
 type Warning = BaseWarning | MissingContextKeysWarning;
 //#endregion
 export { MissingContextKeysWarning as n, Warning as r, BaseWarning as t };
-//# sourceMappingURL=warning.interface-BVeaQsw5.d.cts.map
+//# sourceMappingURL=warning.interface-yJ1XNLbJ.d.cts.map

package/lib/{warrant-op.enum-CBmWDuBs.d.cts → warrant-op.enum-Dj1dkgof.d.cts}

@@ -5,4 +5,4 @@ declare enum WarrantOp {
 }
 //#endregion
 export { WarrantOp as t };
-//# sourceMappingURL=warrant-op.enum-CBmWDuBs.d.cts.map
+//# sourceMappingURL=warrant-op.enum-Dj1dkgof.d.cts.map

package/lib/{warrant-token.interface-D8P4GnoE.d.cts → warrant-token.interface-DPxaBIlh.d.cts}

@@ -7,4 +7,4 @@ interface WarrantTokenResponse {
 }
 //#endregion
 export { WarrantTokenResponse as n, WarrantToken as t };
-//# sourceMappingURL=warrant-token.interface-D8P4GnoE.d.cts.map
+//# sourceMappingURL=warrant-token.interface-DPxaBIlh.d.cts.map

package/lib/{warrant-token.serializer-9f0_Dze3.d.cts → warrant-token.serializer-C66i3W4C.d.cts}

@@ -1,7 +1,7 @@
-import { n as WarrantTokenResponse, t as WarrantToken } from "./warrant-token.interface-D8P4GnoE.cjs";
+import { n as WarrantTokenResponse, t as WarrantToken } from "./warrant-token.interface-DPxaBIlh.cjs";
 
 //#region src/fga/serializers/warrant-token.serializer.d.ts
 declare const deserializeWarrantToken: (warrantToken: WarrantTokenResponse) => WarrantToken;
 //#endregion
 export { deserializeWarrantToken as t };
-//# sourceMappingURL=warrant-token.serializer-9f0_Dze3.d.cts.map
+//# sourceMappingURL=warrant-token.serializer-C66i3W4C.d.cts.map

package/lib/{warrant.interface-D0zCmerc.d.cts → warrant.interface-80A3Pew0.d.cts}

@@ -1,6 +1,6 @@
-import { t as GetOptions } from "./get-options.interface-C7_1wOuz.cjs";
-import { c as ResourceInterface, l as ResourceOptions } from "./resource.interface-BHXuymiW.cjs";
-import { t as WarrantOp } from "./warrant-op.enum-CBmWDuBs.cjs";
+import { t as GetOptions } from "./get-options.interface-DtIaBrYo.cjs";
+import { c as ResourceInterface, l as ResourceOptions } from "./resource.interface-BZ27Ar_A.cjs";
+import { t as WarrantOp } from "./warrant-op.enum-Dj1dkgof.cjs";
 
 //#region src/fga/interfaces/warrant.interface.d.ts
 interface ListWarrantsOptions {
@@ -68,4 +68,4 @@ interface WarrantResponse {
 }
 //#endregion
 export { SerializedSubject as a, Warrant as c, SerializedListWarrantsOptions as i, WarrantResponse as l, ListWarrantsRequestOptions as n, SerializedWriteWarrantOptions as o, PolicyContext as r, Subject as s, ListWarrantsOptions as t, WriteWarrantOptions as u };
-//# sourceMappingURL=warrant.interface-D0zCmerc.d.cts.map
+//# sourceMappingURL=warrant.interface-80A3Pew0.d.cts.map

package/lib/{warrant.serializer-BDtDxpT8.d.cts → warrant.serializer-q9Ra6iEa.d.cts}

@@ -1,7 +1,7 @@
-import { c as Warrant, l as WarrantResponse } from "./warrant.interface-D0zCmerc.cjs";
+import { c as Warrant, l as WarrantResponse } from "./warrant.interface-80A3Pew0.cjs";
 
 //#region src/fga/serializers/warrant.serializer.d.ts
 declare const deserializeWarrant: (warrant: WarrantResponse) => Warrant;
 //#endregion
 export { deserializeWarrant as t };
-//# sourceMappingURL=warrant.serializer-BDtDxpT8.d.cts.map
+//# sourceMappingURL=warrant.serializer-q9Ra6iEa.d.cts.map

package/lib/webhooks/webhooks.d.cts

@@ -1,2 +1,2 @@
-import { t as Webhooks } from "../webhooks-yX64jTg5.cjs";
+import { t as Webhooks } from "../webhooks-BznN9ZsE.cjs";
 export { Webhooks };

package/lib/{webhooks-yX64jTg5.d.cts → webhooks-BznN9ZsE.d.cts}

@@ -1,5 +1,5 @@
-import { t as CryptoProvider } from "./crypto-provider-CIbAgUc-.cjs";
-import { ct as Event } from "./index-6gXqBDB6.cjs";
+import { t as CryptoProvider } from "./crypto-provider-CYvkctEg.cjs";
+import { ct as Event } from "./index-DBcxvLj5.cjs";
 
 //#region src/webhooks/webhooks.d.ts
 declare class Webhooks {
@@ -32,4 +32,4 @@ declare class Webhooks {
 }
 //#endregion
 export { Webhooks as t };
-//# sourceMappingURL=webhooks-yX64jTg5.d.cts.map
+//# sourceMappingURL=webhooks-BznN9ZsE.d.cts.map

package/lib/widgets/interfaces/get-token.d.cts

@@ -1,2 +1,2 @@
-import { a as WidgetScope, i as SerializedGetTokenOptions, n as GetTokenResponse, o as deserializeGetTokenResponse, r as GetTokenResponseResponse, s as serializeGetTokenOptions, t as GetTokenOptions } from "../../get-token-CmiH1VJ9.cjs";
+import { a as WidgetScope, i as SerializedGetTokenOptions, n as GetTokenResponse, o as deserializeGetTokenResponse, r as GetTokenResponseResponse, s as serializeGetTokenOptions, t as GetTokenOptions } from "../../get-token-CRyPuAyd.cjs";
 export { GetTokenOptions, GetTokenResponse, GetTokenResponseResponse, SerializedGetTokenOptions, WidgetScope, deserializeGetTokenResponse, serializeGetTokenOptions };

package/lib/widgets/widgets.d.cts

@@ -1,2 +1,2 @@
-import { d as Widgets } from "../api-keys-DMUGmsZs.cjs";
+import { f as Widgets } from "../api-keys-4KSJ7vul.cjs";
 export { Widgets };

package/lib/{workos-B9-XSQwo.cjs → workos-HBr0yoqZ.cjs}

@@ -26,15 +26,16 @@ const require_feature_flags = require('./feature-flags-w4M2jmZ4.cjs');
 const require_http_client = require('./http-client-8EHeTnVH.cjs');
 const require_subtle_crypto_provider = require('./subtle-crypto-provider-z15sJdtL.cjs');
 const require_parse_error = require('./parse-error-B7u-PJ1K.cjs');
-const require_fetch_client = require('./fetch-client-CSHUm64J.cjs');
+const require_fetch_client = require('./fetch-client-CP0ICYQG.cjs');
 const require_widgets = require('./widgets-UYWIfPS5.cjs');
 const require_actions = require('./actions-DuKUPx9Z.cjs');
-const require_vault = require('./vault-o2v1Hjz7.cjs');
-const require_conflict_exception = require('./conflict.exception-CN3a7Qrw.cjs');
-const require_runtime_info = require('./runtime-info-D1rBs4px.cjs');
+const require_authorization = require('./authorization-BQtSYdHQ.cjs');
+const require_vault = require('./vault-DFZlnEty.cjs');
+const require_conflict_exception = require('./conflict.exception-4m45wGr8.cjs');
+const require_runtime_info = require('./runtime-info-CkgTBGi9.cjs');
 
 //#region src/workos.ts
-const VERSION = "8.1.0";
+const VERSION = "8.2.0";
 const DEFAULT_HOSTNAME = "api.workos.com";
 const HEADER_AUTHORIZATION = "Authorization";
 const HEADER_IDEMPOTENCY_KEY = "Idempotency-Key";
@@ -50,6 +51,7 @@ var WorkOS = class {
 	actions;
 	apiKeys = new require_api_keys.ApiKeys(this);
 	auditLogs = new require_audit_logs.AuditLogs(this);
+	authorization = new require_authorization.Authorization(this);
 	directorySync = new require_directory_sync.DirectorySync(this);
 	events = new require_events.Events(this);
 	featureFlags = new require_feature_flags.FeatureFlags(this);
@@ -224,6 +226,30 @@ var WorkOS = class {
 			throw error;
 		}
 	}
+	async patch(path, entity, options = {}) {
+		if (!options.skipApiKeyCheck) this.requireApiKey(path);
+		const requestHeaders = {};
+		if (options.idempotencyKey) requestHeaders[HEADER_IDEMPOTENCY_KEY] = options.idempotencyKey;
+		let res;
+		try {
+			res = await this.client.patch(path, entity, {
+				params: options.query,
+				headers: requestHeaders
+			});
+		} catch (error) {
+			this.handleHttpError({
+				path,
+				error
+			});
+			throw error;
+		}
+		try {
+			return { data: await res.toJSON() };
+		} catch (error) {
+			await this.handleParseError(error, res);
+			throw error;
+		}
+	}
 	async delete(path, query) {
 		this.requireApiKey(path);
 		try {
@@ -303,4 +329,4 @@ Object.defineProperty(exports, 'WorkOS', {
     return WorkOS;
   }
 });
-//# sourceMappingURL=workos-B9-XSQwo.cjs.map
+//# sourceMappingURL=workos-HBr0yoqZ.cjs.map

package/lib/workos-HBr0yoqZ.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"workos-HBr0yoqZ.cjs","names":["ApiKeys","AuditLogs","Authorization","DirectorySync","Events","FeatureFlags","FGA","Mfa","Organizations","OrganizationDomains","Passwordless","Pipes","Portal","SSO","Vault","Widgets","getEnv","protocol: string","apiHostname: string","port: number | undefined","PKCE","UserManagement","userAgent: string","getRuntimeInfo","Webhooks","Actions","SubtleCryptoProvider","headers: Record<string, string>","FetchHttpClient","ApiKeyRequiredException","requestHeaders: Record<string, string>","res: HttpClientResponseInterface","ParseError","HttpClientError","UnauthorizedException","ConflictException","UnprocessableEntityException","NotFoundException","RateLimitExceededException","error","OauthException","BadRequestException","GenericServerException"],"sources":["../src/workos.ts"],"sourcesContent":["import {\n  ApiKeyRequiredException,\n  GenericServerException,\n  NotFoundException,\n  UnauthorizedException,\n  UnprocessableEntityException,\n  OauthException,\n  RateLimitExceededException,\n} from './common/exceptions';\nimport { PKCE } from './pkce/pkce';\nimport {\n  GetOptions,\n  HttpClientResponseInterface,\n  PatchOptions,\n  PostOptions,\n  PutOptions,\n  WorkOSOptions,\n  WorkOSResponseError,\n} from './common/interfaces';\nimport { ApiKeys } from './api-keys/api-keys';\nimport { DirectorySync } from './directory-sync/directory-sync';\nimport { Events } from './events/events';\nimport { Organizations } from './organizations/organizations';\nimport { OrganizationDomains } from './organization-domains/organization-domains';\nimport { Passwordless } from './passwordless/passwordless';\nimport { Pipes } from './pipes/pipes';\nimport { Portal } from './portal/portal';\nimport { SSO } from './sso/sso';\nimport { Webhooks } from './webhooks/webhooks';\nimport { Mfa } from './mfa/mfa';\nimport { AuditLogs } from './audit-logs/audit-logs';\nimport { UserManagement } from './user-management/user-management';\nimport { FGA } from './fga/fga';\nimport { BadRequestException } from './common/exceptions/bad-request.exception';\nimport { FeatureFlags } from './feature-flags/feature-flags';\n\nimport { HttpClient, HttpClientError } from './common/net/http-client';\nimport { SubtleCryptoProvider } from './common/crypto/subtle-crypto-provider';\nimport { FetchHttpClient } from './common/net/fetch-client';\nimport { Widgets } from './widgets/widgets';\nimport { Actions } from './actions/actions';\nimport { Authorization } from './authorization/authorization';\nimport { Vault } from './vault/vault';\nimport { ConflictException } from './common/exceptions/conflict.exception';\nimport { CryptoProvider } from './common/crypto/crypto-provider';\nimport { ParseError } from './common/exceptions/parse-error';\nimport { getEnv } from './common/utils/env';\nimport { getRuntimeInfo } from './common/utils/runtime-info';\n\nconst VERSION = '8.2.0';\n\nconst DEFAULT_HOSTNAME = 'api.workos.com';\n\nconst HEADER_AUTHORIZATION = 'Authorization';\nconst HEADER_IDEMPOTENCY_KEY = 'Idempotency-Key';\nconst HEADER_WARRANT_TOKEN = 'Warrant-Token';\n\nexport class WorkOS {\n  readonly baseURL: string;\n  readonly client: HttpClient;\n  readonly clientId?: string;\n  readonly key?: string;\n  readonly options: WorkOSOptions;\n  readonly pkce: PKCE;\n\n  private readonly hasApiKey: boolean;\n\n  readonly actions: Actions;\n  readonly apiKeys = new ApiKeys(this);\n  readonly auditLogs = new AuditLogs(this);\n  readonly authorization = new Authorization(this);\n  readonly directorySync = new DirectorySync(this);\n  readonly events = new Events(this);\n  readonly featureFlags = new FeatureFlags(this);\n  readonly fga = new FGA(this);\n  readonly mfa = new Mfa(this);\n  readonly organizations = new Organizations(this);\n  readonly organizationDomains = new OrganizationDomains(this);\n  readonly passwordless = new Passwordless(this);\n  readonly pipes = new Pipes(this);\n  readonly portal = new Portal(this);\n  readonly sso = new SSO(this);\n  readonly userManagement: UserManagement;\n  readonly vault = new Vault(this);\n  readonly webhooks: Webhooks;\n  readonly widgets = new Widgets(this);\n\n  /**\n   * Create a new WorkOS client.\n   *\n   * @param keyOrOptions - API key string, or options object\n   * @param maybeOptions - Options when first argument is API key\n   *\n   * @example\n   * // Server-side with API key (string)\n   * const workos = new WorkOS('sk_...');\n   *\n   * @example\n   * // Server-side with API key (object)\n   * const workos = new WorkOS({ apiKey: 'sk_...', clientId: 'client_...' });\n   *\n   * @example\n   * // PKCE/public client (no API key)\n   * const workos = new WorkOS({ clientId: 'client_...' });\n   */\n  constructor(\n    keyOrOptions?: string | WorkOSOptions,\n    maybeOptions?: WorkOSOptions,\n  ) {\n    if (typeof keyOrOptions === 'object') {\n      this.key = keyOrOptions.apiKey;\n      this.options = keyOrOptions;\n    } else {\n      this.key = keyOrOptions;\n      this.options = maybeOptions ?? {};\n    }\n\n    if (!this.key) {\n      this.key = getEnv('WORKOS_API_KEY');\n    }\n\n    this.hasApiKey = !!this.key;\n\n    if (this.options.https === undefined) {\n      this.options.https = true;\n    }\n\n    this.clientId = this.options.clientId;\n    if (!this.clientId) {\n      this.clientId = getEnv('WORKOS_CLIENT_ID');\n    }\n\n    if (!this.hasApiKey && !this.clientId) {\n      throw new Error(\n        'WorkOS requires either an API key or a clientId. ' +\n          'For server-side: new WorkOS(\"sk_...\") or new WorkOS({ apiKey: \"sk_...\" }). ' +\n          'For PKCE/public clients: new WorkOS({ clientId: \"client_...\" })',\n      );\n    }\n\n    const protocol: string = this.options.https ? 'https' : 'http';\n    const apiHostname: string = this.options.apiHostname || DEFAULT_HOSTNAME;\n    const port: number | undefined = this.options.port;\n    this.baseURL = `${protocol}://${apiHostname}`;\n\n    if (port) {\n      this.baseURL = this.baseURL + `:${port}`;\n    }\n\n    this.pkce = new PKCE();\n\n    this.webhooks = this.createWebhookClient();\n    this.actions = this.createActionsClient();\n\n    // Must initialize UserManagement after baseURL is configured\n    this.userManagement = new UserManagement(this);\n\n    const userAgent = this.createUserAgent(this.options);\n\n    this.client = this.createHttpClient(this.options, userAgent);\n  }\n\n  private createUserAgent(options: WorkOSOptions): string {\n    let userAgent: string = `workos-node/${VERSION}`;\n\n    const { name: runtimeName, version: runtimeVersion } = getRuntimeInfo();\n    userAgent += ` (${runtimeName}${runtimeVersion ? `/${runtimeVersion}` : ''})`;\n\n    if (options.appInfo) {\n      const { name, version } = options.appInfo;\n      userAgent += ` ${name}: ${version}`;\n    }\n\n    return userAgent;\n  }\n\n  createWebhookClient() {\n    return new Webhooks(this.getCryptoProvider());\n  }\n\n  createActionsClient() {\n    return new Actions(this.getCryptoProvider());\n  }\n\n  getCryptoProvider(): CryptoProvider {\n    return new SubtleCryptoProvider();\n  }\n\n  createHttpClient(options: WorkOSOptions, userAgent: string) {\n    const headers: Record<string, string> = {\n      'User-Agent': userAgent,\n    };\n\n    const configHeaders = options.config?.headers;\n    if (\n      configHeaders &&\n      typeof configHeaders === 'object' &&\n      !Array.isArray(configHeaders) &&\n      !(configHeaders instanceof Headers)\n    ) {\n      Object.assign(headers, configHeaders);\n    }\n\n    if (this.key) {\n      headers['Authorization'] = `Bearer ${this.key}`;\n    }\n\n    return new FetchHttpClient(this.baseURL, {\n      ...options.config,\n      timeout: options.timeout,\n      headers,\n    }) as HttpClient;\n  }\n\n  get version() {\n    return VERSION;\n  }\n\n  /**\n   * Require API key for methods that need it.\n   * @param methodName - Name of the method requiring API key (for error message)\n   * @throws ApiKeyRequiredException if no API key was provided\n   */\n  requireApiKey(methodName: string): void {\n    if (!this.hasApiKey) {\n      throw new ApiKeyRequiredException(methodName);\n    }\n  }\n\n  async post<Result = any, Entity = any>(\n    path: string,\n    entity: Entity,\n    options: PostOptions = {},\n  ): Promise<{ data: Result }> {\n    if (!options.skipApiKeyCheck) {\n      this.requireApiKey(path);\n    }\n\n    const requestHeaders: Record<string, string> = {};\n\n    if (options.idempotencyKey) {\n      requestHeaders[HEADER_IDEMPOTENCY_KEY] = options.idempotencyKey;\n    }\n\n    if (options.warrantToken) {\n      requestHeaders[HEADER_WARRANT_TOKEN] = options.warrantToken;\n    }\n\n    let res: HttpClientResponseInterface;\n\n    try {\n      res = await this.client.post<Entity>(path, entity, {\n        params: options.query,\n        headers: requestHeaders,\n      });\n    } catch (error) {\n      this.handleHttpError({ path, error });\n      throw error;\n    }\n\n    try {\n      return { data: await res.toJSON() };\n    } catch (error) {\n      await this.handleParseError(error, res);\n      throw error;\n    }\n  }\n\n  async get<Result = any>(\n    path: string,\n    options: GetOptions = {},\n  ): Promise<{ data: Result }> {\n    if (!options.skipApiKeyCheck) {\n      this.requireApiKey(path);\n    }\n\n    const requestHeaders: Record<string, string> = {};\n\n    if (options.accessToken) {\n      requestHeaders[HEADER_AUTHORIZATION] = `Bearer ${options.accessToken}`;\n    }\n\n    if (options.warrantToken) {\n      requestHeaders[HEADER_WARRANT_TOKEN] = options.warrantToken;\n    }\n\n    let res: HttpClientResponseInterface;\n    try {\n      res = await this.client.get(path, {\n        params: options.query,\n        headers: requestHeaders,\n      });\n    } catch (error) {\n      this.handleHttpError({ path, error });\n\n      throw error;\n    }\n\n    try {\n      return { data: await res.toJSON() };\n    } catch (error) {\n      await this.handleParseError(error, res);\n      throw error;\n    }\n  }\n\n  async put<Result = any, Entity = any>(\n    path: string,\n    entity: Entity,\n    options: PutOptions = {},\n  ): Promise<{ data: Result }> {\n    if (!options.skipApiKeyCheck) {\n      this.requireApiKey(path);\n    }\n\n    const requestHeaders: Record<string, string> = {};\n\n    if (options.idempotencyKey) {\n      requestHeaders[HEADER_IDEMPOTENCY_KEY] = options.idempotencyKey;\n    }\n\n    let res: HttpClientResponseInterface;\n\n    try {\n      res = await this.client.put<Entity>(path, entity, {\n        params: options.query,\n        headers: requestHeaders,\n      });\n    } catch (error) {\n      this.handleHttpError({ path, error });\n\n      throw error;\n    }\n\n    try {\n      return { data: await res.toJSON() };\n    } catch (error) {\n      await this.handleParseError(error, res);\n      throw error;\n    }\n  }\n\n  async patch<Result = any, Entity = any>(\n    path: string,\n    entity: Entity,\n    options: PatchOptions = {},\n  ): Promise<{ data: Result }> {\n    if (!options.skipApiKeyCheck) {\n      this.requireApiKey(path);\n    }\n\n    const requestHeaders: Record<string, string> = {};\n\n    if (options.idempotencyKey) {\n      requestHeaders[HEADER_IDEMPOTENCY_KEY] = options.idempotencyKey;\n    }\n\n    let res: HttpClientResponseInterface;\n\n    try {\n      res = await this.client.patch<Entity>(path, entity, {\n        params: options.query,\n        headers: requestHeaders,\n      });\n    } catch (error) {\n      this.handleHttpError({ path, error });\n\n      throw error;\n    }\n\n    try {\n      return { data: await res.toJSON() };\n    } catch (error) {\n      await this.handleParseError(error, res);\n      throw error;\n    }\n  }\n\n  async delete(path: string, query?: any): Promise<void> {\n    this.requireApiKey(path);\n\n    try {\n      await this.client.delete(path, {\n        params: query,\n      });\n    } catch (error) {\n      this.handleHttpError({ path, error });\n\n      throw error;\n    }\n  }\n\n  emitWarning(warning: string) {\n    // tslint:disable-next-line:no-console\n    console.warn(`WorkOS: ${warning}`);\n  }\n\n  private async handleParseError(\n    error: unknown,\n    res: HttpClientResponseInterface,\n  ) {\n    if (error instanceof SyntaxError) {\n      const rawResponse = res.getRawResponse() as Response;\n      const requestID = rawResponse.headers.get('X-Request-ID') ?? '';\n      const rawStatus = rawResponse.status;\n      const rawBody = await rawResponse.text();\n      throw new ParseError({\n        message: error.message,\n        rawBody,\n        rawStatus,\n        requestID,\n      });\n    }\n  }\n\n  private handleHttpError({ path, error }: { path: string; error: unknown }) {\n    if (!(error instanceof HttpClientError)) {\n      throw new Error(`Unexpected error: ${error}`, { cause: error });\n    }\n\n    const { response } = error as HttpClientError<WorkOSResponseError>;\n\n    if (response) {\n      const { status, data, headers } = response;\n\n      const requestID = headers['X-Request-ID'] ?? '';\n      const {\n        code,\n        error_description: errorDescription,\n        error,\n        errors,\n        message,\n      } = data;\n\n      switch (status) {\n        case 401: {\n          throw new UnauthorizedException(requestID);\n        }\n        case 409: {\n          throw new ConflictException({ requestID, message, error });\n        }\n        case 422: {\n          throw new UnprocessableEntityException({\n            code,\n            errors,\n            message,\n            requestID,\n          });\n        }\n        case 404: {\n          throw new NotFoundException({\n            code,\n            message,\n            path,\n            requestID,\n          });\n        }\n        case 429: {\n          const retryAfter = headers.get('Retry-After');\n\n          throw new RateLimitExceededException(\n            data.message,\n            requestID,\n            retryAfter ? Number(retryAfter) : null,\n          );\n        }\n        default: {\n          if (error || errorDescription) {\n            throw new OauthException(\n              status,\n              requestID,\n              error,\n              errorDescription,\n              data,\n            );\n          } else if (code && errors) {\n            // Note: ideally this should be mapped directly with a `400` status code.\n            // However, this would break existing logic for the `OauthException` exception.\n            throw new BadRequestException({\n              code,\n              errors,\n              message,\n              requestID,\n            });\n          } else {\n            throw new GenericServerException(\n              status,\n              data.message,\n              data,\n              requestID,\n            );\n          }\n        }\n      }\n    }\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAiDA,MAAM,UAAU;AAEhB,MAAM,mBAAmB;AAEzB,MAAM,uBAAuB;AAC7B,MAAM,yBAAyB;AAC/B,MAAM,uBAAuB;AAE7B,IAAa,SAAb,MAAoB;CAClB,AAAS;CACT,AAAS;CACT,AAAS;CACT,AAAS;CACT,AAAS;CACT,AAAS;CAET,AAAiB;CAEjB,AAAS;CACT,AAAS,UAAU,IAAIA,yBAAQ,KAAK;CACpC,AAAS,YAAY,IAAIC,6BAAU,KAAK;CACxC,AAAS,gBAAgB,IAAIC,oCAAc,KAAK;CAChD,AAAS,gBAAgB,IAAIC,qCAAc,KAAK;CAChD,AAAS,SAAS,IAAIC,sBAAO,KAAK;CAClC,AAAS,eAAe,IAAIC,mCAAa,KAAK;CAC9C,AAAS,MAAM,IAAIC,gBAAI,KAAK;CAC5B,AAAS,MAAM,IAAIC,gBAAI,KAAK;CAC5B,AAAS,gBAAgB,IAAIC,oCAAc,KAAK;CAChD,AAAS,sBAAsB,IAAIC,iDAAoB,KAAK;CAC5D,AAAS,eAAe,IAAIC,kCAAa,KAAK;CAC9C,AAAS,QAAQ,IAAIC,oBAAM,KAAK;CAChC,AAAS,SAAS,IAAIC,sBAAO,KAAK;CAClC,AAAS,MAAM,IAAIC,gBAAI,KAAK;CAC5B,AAAS;CACT,AAAS,QAAQ,IAAIC,oBAAM,KAAK;CAChC,AAAS;CACT,AAAS,UAAU,IAAIC,wBAAQ,KAAK;;;;;;;;;;;;;;;;;;;CAoBpC,YACE,cACA,cACA;AACA,MAAI,OAAO,iBAAiB,UAAU;AACpC,QAAK,MAAM,aAAa;AACxB,QAAK,UAAU;SACV;AACL,QAAK,MAAM;AACX,QAAK,UAAU,gBAAgB,EAAE;;AAGnC,MAAI,CAAC,KAAK,IACR,MAAK,MAAMC,mBAAO,iBAAiB;AAGrC,OAAK,YAAY,CAAC,CAAC,KAAK;AAExB,MAAI,KAAK,QAAQ,UAAU,OACzB,MAAK,QAAQ,QAAQ;AAGvB,OAAK,WAAW,KAAK,QAAQ;AAC7B,MAAI,CAAC,KAAK,SACR,MAAK,WAAWA,mBAAO,mBAAmB;AAG5C,MAAI,CAAC,KAAK,aAAa,CAAC,KAAK,SAC3B,OAAM,IAAI,MACR,oMAGD;EAGH,MAAMC,WAAmB,KAAK,QAAQ,QAAQ,UAAU;EACxD,MAAMC,cAAsB,KAAK,QAAQ,eAAe;EACxD,MAAMC,OAA2B,KAAK,QAAQ;AAC9C,OAAK,UAAU,GAAG,SAAS,KAAK;AAEhC,MAAI,KACF,MAAK,UAAU,KAAK,UAAU,IAAI;AAGpC,OAAK,OAAO,IAAIC,mBAAM;AAEtB,OAAK,WAAW,KAAK,qBAAqB;AAC1C,OAAK,UAAU,KAAK,qBAAqB;AAGzC,OAAK,iBAAiB,IAAIC,uCAAe,KAAK;EAE9C,MAAM,YAAY,KAAK,gBAAgB,KAAK,QAAQ;AAEpD,OAAK,SAAS,KAAK,iBAAiB,KAAK,SAAS,UAAU;;CAG9D,AAAQ,gBAAgB,SAAgC;EACtD,IAAIC,YAAoB,eAAe;EAEvC,MAAM,EAAE,MAAM,aAAa,SAAS,mBAAmBC,qCAAgB;AACvE,eAAa,KAAK,cAAc,iBAAiB,IAAI,mBAAmB,GAAG;AAE3E,MAAI,QAAQ,SAAS;GACnB,MAAM,EAAE,MAAM,YAAY,QAAQ;AAClC,gBAAa,IAAI,KAAK,IAAI;;AAG5B,SAAO;;CAGT,sBAAsB;AACpB,SAAO,IAAIC,0BAAS,KAAK,mBAAmB,CAAC;;CAG/C,sBAAsB;AACpB,SAAO,IAAIC,wBAAQ,KAAK,mBAAmB,CAAC;;CAG9C,oBAAoC;AAClC,SAAO,IAAIC,qDAAsB;;CAGnC,iBAAiB,SAAwB,WAAmB;EAC1D,MAAMC,UAAkC,EACtC,cAAc,WACf;EAED,MAAM,gBAAgB,QAAQ,QAAQ;AACtC,MACE,iBACA,OAAO,kBAAkB,YACzB,CAAC,MAAM,QAAQ,cAAc,IAC7B,EAAE,yBAAyB,SAE3B,QAAO,OAAO,SAAS,cAAc;AAGvC,MAAI,KAAK,IACP,SAAQ,mBAAmB,UAAU,KAAK;AAG5C,SAAO,IAAIC,qCAAgB,KAAK,SAAS;GACvC,GAAG,QAAQ;GACX,SAAS,QAAQ;GACjB;GACD,CAAC;;CAGJ,IAAI,UAAU;AACZ,SAAO;;;;;;;CAQT,cAAc,YAA0B;AACtC,MAAI,CAAC,KAAK,UACR,OAAM,IAAIC,2DAAwB,WAAW;;CAIjD,MAAM,KACJ,MACA,QACA,UAAuB,EAAE,EACE;AAC3B,MAAI,CAAC,QAAQ,gBACX,MAAK,cAAc,KAAK;EAG1B,MAAMC,iBAAyC,EAAE;AAEjD,MAAI,QAAQ,eACV,gBAAe,0BAA0B,QAAQ;AAGnD,MAAI,QAAQ,aACV,gBAAe,wBAAwB,QAAQ;EAGjD,IAAIC;AAEJ,MAAI;AACF,SAAM,MAAM,KAAK,OAAO,KAAa,MAAM,QAAQ;IACjD,QAAQ,QAAQ;IAChB,SAAS;IACV,CAAC;WACK,OAAO;AACd,QAAK,gBAAgB;IAAE;IAAM;IAAO,CAAC;AACrC,SAAM;;AAGR,MAAI;AACF,UAAO,EAAE,MAAM,MAAM,IAAI,QAAQ,EAAE;WAC5B,OAAO;AACd,SAAM,KAAK,iBAAiB,OAAO,IAAI;AACvC,SAAM;;;CAIV,MAAM,IACJ,MACA,UAAsB,EAAE,EACG;AAC3B,MAAI,CAAC,QAAQ,gBACX,MAAK,cAAc,KAAK;EAG1B,MAAMD,iBAAyC,EAAE;AAEjD,MAAI,QAAQ,YACV,gBAAe,wBAAwB,UAAU,QAAQ;AAG3D,MAAI,QAAQ,aACV,gBAAe,wBAAwB,QAAQ;EAGjD,IAAIC;AACJ,MAAI;AACF,SAAM,MAAM,KAAK,OAAO,IAAI,MAAM;IAChC,QAAQ,QAAQ;IAChB,SAAS;IACV,CAAC;WACK,OAAO;AACd,QAAK,gBAAgB;IAAE;IAAM;IAAO,CAAC;AAErC,SAAM;;AAGR,MAAI;AACF,UAAO,EAAE,MAAM,MAAM,IAAI,QAAQ,EAAE;WAC5B,OAAO;AACd,SAAM,KAAK,iBAAiB,OAAO,IAAI;AACvC,SAAM;;;CAIV,MAAM,IACJ,MACA,QACA,UAAsB,EAAE,EACG;AAC3B,MAAI,CAAC,QAAQ,gBACX,MAAK,cAAc,KAAK;EAG1B,MAAMD,iBAAyC,EAAE;AAEjD,MAAI,QAAQ,eACV,gBAAe,0BAA0B,QAAQ;EAGnD,IAAIC;AAEJ,MAAI;AACF,SAAM,MAAM,KAAK,OAAO,IAAY,MAAM,QAAQ;IAChD,QAAQ,QAAQ;IAChB,SAAS;IACV,CAAC;WACK,OAAO;AACd,QAAK,gBAAgB;IAAE;IAAM;IAAO,CAAC;AAErC,SAAM;;AAGR,MAAI;AACF,UAAO,EAAE,MAAM,MAAM,IAAI,QAAQ,EAAE;WAC5B,OAAO;AACd,SAAM,KAAK,iBAAiB,OAAO,IAAI;AACvC,SAAM;;;CAIV,MAAM,MACJ,MACA,QACA,UAAwB,EAAE,EACC;AAC3B,MAAI,CAAC,QAAQ,gBACX,MAAK,cAAc,KAAK;EAG1B,MAAMD,iBAAyC,EAAE;AAEjD,MAAI,QAAQ,eACV,gBAAe,0BAA0B,QAAQ;EAGnD,IAAIC;AAEJ,MAAI;AACF,SAAM,MAAM,KAAK,OAAO,MAAc,MAAM,QAAQ;IAClD,QAAQ,QAAQ;IAChB,SAAS;IACV,CAAC;WACK,OAAO;AACd,QAAK,gBAAgB;IAAE;IAAM;IAAO,CAAC;AAErC,SAAM;;AAGR,MAAI;AACF,UAAO,EAAE,MAAM,MAAM,IAAI,QAAQ,EAAE;WAC5B,OAAO;AACd,SAAM,KAAK,iBAAiB,OAAO,IAAI;AACvC,SAAM;;;CAIV,MAAM,OAAO,MAAc,OAA4B;AACrD,OAAK,cAAc,KAAK;AAExB,MAAI;AACF,SAAM,KAAK,OAAO,OAAO,MAAM,EAC7B,QAAQ,OACT,CAAC;WACK,OAAO;AACd,QAAK,gBAAgB;IAAE;IAAM;IAAO,CAAC;AAErC,SAAM;;;CAIV,YAAY,SAAiB;AAE3B,UAAQ,KAAK,WAAW,UAAU;;CAGpC,MAAc,iBACZ,OACA,KACA;AACA,MAAI,iBAAiB,aAAa;GAChC,MAAM,cAAc,IAAI,gBAAgB;GACxC,MAAM,YAAY,YAAY,QAAQ,IAAI,eAAe,IAAI;GAC7D,MAAM,YAAY,YAAY;GAC9B,MAAM,UAAU,MAAM,YAAY,MAAM;AACxC,SAAM,IAAIC,+BAAW;IACnB,SAAS,MAAM;IACf;IACA;IACA;IACD,CAAC;;;CAIN,AAAQ,gBAAgB,EAAE,MAAM,SAA2C;AACzE,MAAI,EAAE,iBAAiBC,qCACrB,OAAM,IAAI,MAAM,qBAAqB,SAAS,EAAE,OAAO,OAAO,CAAC;EAGjE,MAAM,EAAE,aAAa;AAErB,MAAI,UAAU;GACZ,MAAM,EAAE,QAAQ,MAAM,YAAY;GAElC,MAAM,YAAY,QAAQ,mBAAmB;GAC7C,MAAM,EACJ,MACA,mBAAmB,kBACnB,gBACA,QACA,YACE;AAEJ,WAAQ,QAAR;IACE,KAAK,IACH,OAAM,IAAIC,qDAAsB,UAAU;IAE5C,KAAK,IACH,OAAM,IAAIC,6CAAkB;KAAE;KAAW;KAAS;KAAO,CAAC;IAE5D,KAAK,IACH,OAAM,IAAIC,oEAA6B;KACrC;KACA;KACA;KACA;KACD,CAAC;IAEJ,KAAK,IACH,OAAM,IAAIC,8CAAkB;KAC1B;KACA;KACA;KACA;KACD,CAAC;IAEJ,KAAK,KAAK;KACR,MAAM,aAAa,QAAQ,IAAI,cAAc;AAE7C,WAAM,IAAIC,iEACR,KAAK,SACL,WACA,aAAa,OAAO,WAAW,GAAG,KACnC;;IAEH,QACE,KAAIC,WAAS,iBACX,OAAM,IAAIC,uCACR,QACA,WACAD,SACA,kBACA,KACD;aACQ,QAAQ,OAGjB,OAAM,IAAIE,kDAAoB;KAC5B;KACA;KACA;KACA;KACD,CAAC;QAEF,OAAM,IAAIC,wDACR,QACA,KAAK,SACL,MACA,UACD"}

package/lib/{workos-options.interface-CCcp8QzE.d.cts → workos-options.interface-DsrGUZeh.d.cts}

@@ -1,4 +1,4 @@
-import { t as AppInfo } from "./app-info.interface-CETHNJs2.cjs";
+import { t as AppInfo } from "./app-info.interface-DQRHsNPh.cjs";
 
 //#region src/common/interfaces/workos-options.interface.d.ts
 interface WorkOSOptions {
@@ -14,4 +14,4 @@ interface WorkOSOptions {
 }
 //#endregion
 export { WorkOSOptions as t };
-//# sourceMappingURL=workos-options.interface-CCcp8QzE.d.cts.map
+//# sourceMappingURL=workos-options.interface-DsrGUZeh.d.cts.map

package/lib/{workos-response-error.interface-BoJ6j8GQ.d.cts → workos-response-error.interface-CUW8-rVq.d.cts}

@@ -1,4 +1,4 @@
-import { t as UnprocessableEntityError } from "./unprocessable-entity-error.interface-Qwl8rD25.cjs";
+import { t as UnprocessableEntityError } from "./unprocessable-entity-error.interface-CGfXN5Ma.cjs";
 
 //#region src/common/interfaces/workos-response-error.interface.d.ts
 interface WorkOSResponseError {
@@ -10,4 +10,4 @@ interface WorkOSResponseError {
 }
 //#endregion
 export { WorkOSResponseError as t };
-//# sourceMappingURL=workos-response-error.interface-BoJ6j8GQ.d.cts.map
+//# sourceMappingURL=workos-response-error.interface-CUW8-rVq.d.cts.map

package/lib/workos.cjs

@@ -2,6 +2,6 @@ require('./jose-D4-VExnk.cjs');
 require('./session-BspC-lF9.cjs');
 require('./user-management-DCbkjgk8.cjs');
 require('./subtle-crypto-provider-z15sJdtL.cjs');
-const require_workos = require('./workos-B9-XSQwo.cjs');
+const require_workos = require('./workos-HBr0yoqZ.cjs');
 
 exports.WorkOS = require_workos.WorkOS;

package/lib/workos.d.cts

@@ -1,2 +1,2 @@
-import { n as WorkOS } from "./api-keys-DMUGmsZs.cjs";
+import { n as WorkOS } from "./api-keys-4KSJ7vul.cjs";
 export { WorkOS };

package/lib/workos.d.ts

@@ -1,5 +1,6 @@
 import { CryptoProvider } from "./common/crypto/crypto-provider.js";
 import { GetOptions } from "./common/interfaces/get-options.interface.js";
+import { PatchOptions } from "./common/interfaces/patch-options.interface.js";
 import { PostOptions } from "./common/interfaces/post-options.interface.js";
 import { PutOptions } from "./common/interfaces/put-options.interface.js";
 import { WorkOSOptions } from "./common/interfaces/workos-options.interface.js";
@@ -21,6 +22,7 @@ import { FGA } from "./fga/fga.js";
 import { FeatureFlags } from "./feature-flags/feature-flags.js";
 import { HttpClient } from "./common/net/http-client.js";
 import { Widgets } from "./widgets/widgets.js";
+import { Authorization } from "./authorization/authorization.js";
 import { Vault } from "./vault/vault.js";
 import { ApiKeys } from "./api-keys/api-keys.js";
 
@@ -36,6 +38,7 @@ declare class WorkOS {
   readonly actions: Actions;
   readonly apiKeys: ApiKeys;
   readonly auditLogs: AuditLogs;
+  readonly authorization: Authorization;
   readonly directorySync: DirectorySync;
   readonly events: Events;
   readonly featureFlags: FeatureFlags;
@@ -91,6 +94,9 @@ declare class WorkOS {
   put<Result = any, Entity = any>(path: string, entity: Entity, options?: PutOptions): Promise<{
     data: Result;
   }>;
+  patch<Result = any, Entity = any>(path: string, entity: Entity, options?: PatchOptions): Promise<{
+    data: Result;
+  }>;
   delete(path: string, query?: any): Promise<void>;
   emitWarning(warning: string): void;
   private handleParseError;

package/lib/workos.js

@@ -29,12 +29,13 @@ import { ParseError } from "./common/exceptions/parse-error.js";
 import { FetchHttpClient } from "./common/net/fetch-client.js";
 import { Widgets } from "./widgets/widgets.js";
 import { Actions } from "./actions/actions.js";
+import { Authorization } from "./authorization/authorization.js";
 import { Vault } from "./vault/vault.js";
 import { ConflictException } from "./common/exceptions/conflict.exception.js";
 import { getRuntimeInfo } from "./common/utils/runtime-info.js";
 
 //#region src/workos.ts
-const VERSION = "8.1.0";
+const VERSION = "8.2.0";
 const DEFAULT_HOSTNAME = "api.workos.com";
 const HEADER_AUTHORIZATION = "Authorization";
 const HEADER_IDEMPOTENCY_KEY = "Idempotency-Key";
@@ -50,6 +51,7 @@ var WorkOS = class {
 	actions;
 	apiKeys = new ApiKeys(this);
 	auditLogs = new AuditLogs(this);
+	authorization = new Authorization(this);
 	directorySync = new DirectorySync(this);
 	events = new Events(this);
 	featureFlags = new FeatureFlags(this);
@@ -224,6 +226,30 @@ var WorkOS = class {
 			throw error;
 		}
 	}
+	async patch(path, entity, options = {}) {
+		if (!options.skipApiKeyCheck) this.requireApiKey(path);
+		const requestHeaders = {};
+		if (options.idempotencyKey) requestHeaders[HEADER_IDEMPOTENCY_KEY] = options.idempotencyKey;
+		let res;
+		try {
+			res = await this.client.patch(path, entity, {
+				params: options.query,
+				headers: requestHeaders
+			});
+		} catch (error) {
+			this.handleHttpError({
+				path,
+				error
+			});
+			throw error;
+		}
+		try {
+			return { data: await res.toJSON() };
+		} catch (error) {
+			await this.handleParseError(error, res);
+			throw error;
+		}
+	}
 	async delete(path, query) {
 		this.requireApiKey(path);
 		try {

package/lib/workos.js.map

@@ -1 +1 @@
-{"version":3,"file":"workos.js","names":["protocol: string","apiHostname: string","port: number | undefined","userAgent: string","headers: Record<string, string>","requestHeaders: Record<string, string>","res: HttpClientResponseInterface","error"],"sources":["../src/workos.ts"],"sourcesContent":["import {\n  ApiKeyRequiredException,\n  GenericServerException,\n  NotFoundException,\n  UnauthorizedException,\n  UnprocessableEntityException,\n  OauthException,\n  RateLimitExceededException,\n} from './common/exceptions';\nimport { PKCE } from './pkce/pkce';\nimport {\n  GetOptions,\n  HttpClientResponseInterface,\n  PostOptions,\n  PutOptions,\n  WorkOSOptions,\n  WorkOSResponseError,\n} from './common/interfaces';\nimport { ApiKeys } from './api-keys/api-keys';\nimport { DirectorySync } from './directory-sync/directory-sync';\nimport { Events } from './events/events';\nimport { Organizations } from './organizations/organizations';\nimport { OrganizationDomains } from './organization-domains/organization-domains';\nimport { Passwordless } from './passwordless/passwordless';\nimport { Pipes } from './pipes/pipes';\nimport { Portal } from './portal/portal';\nimport { SSO } from './sso/sso';\nimport { Webhooks } from './webhooks/webhooks';\nimport { Mfa } from './mfa/mfa';\nimport { AuditLogs } from './audit-logs/audit-logs';\nimport { UserManagement } from './user-management/user-management';\nimport { FGA } from './fga/fga';\nimport { BadRequestException } from './common/exceptions/bad-request.exception';\nimport { FeatureFlags } from './feature-flags/feature-flags';\n\nimport { HttpClient, HttpClientError } from './common/net/http-client';\nimport { SubtleCryptoProvider } from './common/crypto/subtle-crypto-provider';\nimport { FetchHttpClient } from './common/net/fetch-client';\nimport { Widgets } from './widgets/widgets';\nimport { Actions } from './actions/actions';\nimport { Vault } from './vault/vault';\nimport { ConflictException } from './common/exceptions/conflict.exception';\nimport { CryptoProvider } from './common/crypto/crypto-provider';\nimport { ParseError } from './common/exceptions/parse-error';\nimport { getEnv } from './common/utils/env';\nimport { getRuntimeInfo } from './common/utils/runtime-info';\n\nconst VERSION = '8.1.0';\n\nconst DEFAULT_HOSTNAME = 'api.workos.com';\n\nconst HEADER_AUTHORIZATION = 'Authorization';\nconst HEADER_IDEMPOTENCY_KEY = 'Idempotency-Key';\nconst HEADER_WARRANT_TOKEN = 'Warrant-Token';\n\nexport class WorkOS {\n  readonly baseURL: string;\n  readonly client: HttpClient;\n  readonly clientId?: string;\n  readonly key?: string;\n  readonly options: WorkOSOptions;\n  readonly pkce: PKCE;\n\n  private readonly hasApiKey: boolean;\n\n  readonly actions: Actions;\n  readonly apiKeys = new ApiKeys(this);\n  readonly auditLogs = new AuditLogs(this);\n  readonly directorySync = new DirectorySync(this);\n  readonly events = new Events(this);\n  readonly featureFlags = new FeatureFlags(this);\n  readonly fga = new FGA(this);\n  readonly mfa = new Mfa(this);\n  readonly organizations = new Organizations(this);\n  readonly organizationDomains = new OrganizationDomains(this);\n  readonly passwordless = new Passwordless(this);\n  readonly pipes = new Pipes(this);\n  readonly portal = new Portal(this);\n  readonly sso = new SSO(this);\n  readonly userManagement: UserManagement;\n  readonly vault = new Vault(this);\n  readonly webhooks: Webhooks;\n  readonly widgets = new Widgets(this);\n\n  /**\n   * Create a new WorkOS client.\n   *\n   * @param keyOrOptions - API key string, or options object\n   * @param maybeOptions - Options when first argument is API key\n   *\n   * @example\n   * // Server-side with API key (string)\n   * const workos = new WorkOS('sk_...');\n   *\n   * @example\n   * // Server-side with API key (object)\n   * const workos = new WorkOS({ apiKey: 'sk_...', clientId: 'client_...' });\n   *\n   * @example\n   * // PKCE/public client (no API key)\n   * const workos = new WorkOS({ clientId: 'client_...' });\n   */\n  constructor(\n    keyOrOptions?: string | WorkOSOptions,\n    maybeOptions?: WorkOSOptions,\n  ) {\n    if (typeof keyOrOptions === 'object') {\n      this.key = keyOrOptions.apiKey;\n      this.options = keyOrOptions;\n    } else {\n      this.key = keyOrOptions;\n      this.options = maybeOptions ?? {};\n    }\n\n    if (!this.key) {\n      this.key = getEnv('WORKOS_API_KEY');\n    }\n\n    this.hasApiKey = !!this.key;\n\n    if (this.options.https === undefined) {\n      this.options.https = true;\n    }\n\n    this.clientId = this.options.clientId;\n    if (!this.clientId) {\n      this.clientId = getEnv('WORKOS_CLIENT_ID');\n    }\n\n    if (!this.hasApiKey && !this.clientId) {\n      throw new Error(\n        'WorkOS requires either an API key or a clientId. ' +\n          'For server-side: new WorkOS(\"sk_...\") or new WorkOS({ apiKey: \"sk_...\" }). ' +\n          'For PKCE/public clients: new WorkOS({ clientId: \"client_...\" })',\n      );\n    }\n\n    const protocol: string = this.options.https ? 'https' : 'http';\n    const apiHostname: string = this.options.apiHostname || DEFAULT_HOSTNAME;\n    const port: number | undefined = this.options.port;\n    this.baseURL = `${protocol}://${apiHostname}`;\n\n    if (port) {\n      this.baseURL = this.baseURL + `:${port}`;\n    }\n\n    this.pkce = new PKCE();\n\n    this.webhooks = this.createWebhookClient();\n    this.actions = this.createActionsClient();\n\n    // Must initialize UserManagement after baseURL is configured\n    this.userManagement = new UserManagement(this);\n\n    const userAgent = this.createUserAgent(this.options);\n\n    this.client = this.createHttpClient(this.options, userAgent);\n  }\n\n  private createUserAgent(options: WorkOSOptions): string {\n    let userAgent: string = `workos-node/${VERSION}`;\n\n    const { name: runtimeName, version: runtimeVersion } = getRuntimeInfo();\n    userAgent += ` (${runtimeName}${runtimeVersion ? `/${runtimeVersion}` : ''})`;\n\n    if (options.appInfo) {\n      const { name, version } = options.appInfo;\n      userAgent += ` ${name}: ${version}`;\n    }\n\n    return userAgent;\n  }\n\n  createWebhookClient() {\n    return new Webhooks(this.getCryptoProvider());\n  }\n\n  createActionsClient() {\n    return new Actions(this.getCryptoProvider());\n  }\n\n  getCryptoProvider(): CryptoProvider {\n    return new SubtleCryptoProvider();\n  }\n\n  createHttpClient(options: WorkOSOptions, userAgent: string) {\n    const headers: Record<string, string> = {\n      'User-Agent': userAgent,\n    };\n\n    const configHeaders = options.config?.headers;\n    if (\n      configHeaders &&\n      typeof configHeaders === 'object' &&\n      !Array.isArray(configHeaders) &&\n      !(configHeaders instanceof Headers)\n    ) {\n      Object.assign(headers, configHeaders);\n    }\n\n    if (this.key) {\n      headers['Authorization'] = `Bearer ${this.key}`;\n    }\n\n    return new FetchHttpClient(this.baseURL, {\n      ...options.config,\n      timeout: options.timeout,\n      headers,\n    }) as HttpClient;\n  }\n\n  get version() {\n    return VERSION;\n  }\n\n  /**\n   * Require API key for methods that need it.\n   * @param methodName - Name of the method requiring API key (for error message)\n   * @throws ApiKeyRequiredException if no API key was provided\n   */\n  requireApiKey(methodName: string): void {\n    if (!this.hasApiKey) {\n      throw new ApiKeyRequiredException(methodName);\n    }\n  }\n\n  async post<Result = any, Entity = any>(\n    path: string,\n    entity: Entity,\n    options: PostOptions = {},\n  ): Promise<{ data: Result }> {\n    if (!options.skipApiKeyCheck) {\n      this.requireApiKey(path);\n    }\n\n    const requestHeaders: Record<string, string> = {};\n\n    if (options.idempotencyKey) {\n      requestHeaders[HEADER_IDEMPOTENCY_KEY] = options.idempotencyKey;\n    }\n\n    if (options.warrantToken) {\n      requestHeaders[HEADER_WARRANT_TOKEN] = options.warrantToken;\n    }\n\n    let res: HttpClientResponseInterface;\n\n    try {\n      res = await this.client.post<Entity>(path, entity, {\n        params: options.query,\n        headers: requestHeaders,\n      });\n    } catch (error) {\n      this.handleHttpError({ path, error });\n      throw error;\n    }\n\n    try {\n      return { data: await res.toJSON() };\n    } catch (error) {\n      await this.handleParseError(error, res);\n      throw error;\n    }\n  }\n\n  async get<Result = any>(\n    path: string,\n    options: GetOptions = {},\n  ): Promise<{ data: Result }> {\n    if (!options.skipApiKeyCheck) {\n      this.requireApiKey(path);\n    }\n\n    const requestHeaders: Record<string, string> = {};\n\n    if (options.accessToken) {\n      requestHeaders[HEADER_AUTHORIZATION] = `Bearer ${options.accessToken}`;\n    }\n\n    if (options.warrantToken) {\n      requestHeaders[HEADER_WARRANT_TOKEN] = options.warrantToken;\n    }\n\n    let res: HttpClientResponseInterface;\n    try {\n      res = await this.client.get(path, {\n        params: options.query,\n        headers: requestHeaders,\n      });\n    } catch (error) {\n      this.handleHttpError({ path, error });\n\n      throw error;\n    }\n\n    try {\n      return { data: await res.toJSON() };\n    } catch (error) {\n      await this.handleParseError(error, res);\n      throw error;\n    }\n  }\n\n  async put<Result = any, Entity = any>(\n    path: string,\n    entity: Entity,\n    options: PutOptions = {},\n  ): Promise<{ data: Result }> {\n    if (!options.skipApiKeyCheck) {\n      this.requireApiKey(path);\n    }\n\n    const requestHeaders: Record<string, string> = {};\n\n    if (options.idempotencyKey) {\n      requestHeaders[HEADER_IDEMPOTENCY_KEY] = options.idempotencyKey;\n    }\n\n    let res: HttpClientResponseInterface;\n\n    try {\n      res = await this.client.put<Entity>(path, entity, {\n        params: options.query,\n        headers: requestHeaders,\n      });\n    } catch (error) {\n      this.handleHttpError({ path, error });\n\n      throw error;\n    }\n\n    try {\n      return { data: await res.toJSON() };\n    } catch (error) {\n      await this.handleParseError(error, res);\n      throw error;\n    }\n  }\n\n  async delete(path: string, query?: any): Promise<void> {\n    this.requireApiKey(path);\n\n    try {\n      await this.client.delete(path, {\n        params: query,\n      });\n    } catch (error) {\n      this.handleHttpError({ path, error });\n\n      throw error;\n    }\n  }\n\n  emitWarning(warning: string) {\n    // tslint:disable-next-line:no-console\n    console.warn(`WorkOS: ${warning}`);\n  }\n\n  private async handleParseError(\n    error: unknown,\n    res: HttpClientResponseInterface,\n  ) {\n    if (error instanceof SyntaxError) {\n      const rawResponse = res.getRawResponse() as Response;\n      const requestID = rawResponse.headers.get('X-Request-ID') ?? '';\n      const rawStatus = rawResponse.status;\n      const rawBody = await rawResponse.text();\n      throw new ParseError({\n        message: error.message,\n        rawBody,\n        rawStatus,\n        requestID,\n      });\n    }\n  }\n\n  private handleHttpError({ path, error }: { path: string; error: unknown }) {\n    if (!(error instanceof HttpClientError)) {\n      throw new Error(`Unexpected error: ${error}`, { cause: error });\n    }\n\n    const { response } = error as HttpClientError<WorkOSResponseError>;\n\n    if (response) {\n      const { status, data, headers } = response;\n\n      const requestID = headers['X-Request-ID'] ?? '';\n      const {\n        code,\n        error_description: errorDescription,\n        error,\n        errors,\n        message,\n      } = data;\n\n      switch (status) {\n        case 401: {\n          throw new UnauthorizedException(requestID);\n        }\n        case 409: {\n          throw new ConflictException({ requestID, message, error });\n        }\n        case 422: {\n          throw new UnprocessableEntityException({\n            code,\n            errors,\n            message,\n            requestID,\n          });\n        }\n        case 404: {\n          throw new NotFoundException({\n            code,\n            message,\n            path,\n            requestID,\n          });\n        }\n        case 429: {\n          const retryAfter = headers.get('Retry-After');\n\n          throw new RateLimitExceededException(\n            data.message,\n            requestID,\n            retryAfter ? Number(retryAfter) : null,\n          );\n        }\n        default: {\n          if (error || errorDescription) {\n            throw new OauthException(\n              status,\n              requestID,\n              error,\n              errorDescription,\n              data,\n            );\n          } else if (code && errors) {\n            // Note: ideally this should be mapped directly with a `400` status code.\n            // However, this would break existing logic for the `OauthException` exception.\n            throw new BadRequestException({\n              code,\n              errors,\n              message,\n              requestID,\n            });\n          } else {\n            throw new GenericServerException(\n              status,\n              data.message,\n              data,\n              requestID,\n            );\n          }\n        }\n      }\n    }\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA+CA,MAAM,UAAU;AAEhB,MAAM,mBAAmB;AAEzB,MAAM,uBAAuB;AAC7B,MAAM,yBAAyB;AAC/B,MAAM,uBAAuB;AAE7B,IAAa,SAAb,MAAoB;CAClB,AAAS;CACT,AAAS;CACT,AAAS;CACT,AAAS;CACT,AAAS;CACT,AAAS;CAET,AAAiB;CAEjB,AAAS;CACT,AAAS,UAAU,IAAI,QAAQ,KAAK;CACpC,AAAS,YAAY,IAAI,UAAU,KAAK;CACxC,AAAS,gBAAgB,IAAI,cAAc,KAAK;CAChD,AAAS,SAAS,IAAI,OAAO,KAAK;CAClC,AAAS,eAAe,IAAI,aAAa,KAAK;CAC9C,AAAS,MAAM,IAAI,IAAI,KAAK;CAC5B,AAAS,MAAM,IAAI,IAAI,KAAK;CAC5B,AAAS,gBAAgB,IAAI,cAAc,KAAK;CAChD,AAAS,sBAAsB,IAAI,oBAAoB,KAAK;CAC5D,AAAS,eAAe,IAAI,aAAa,KAAK;CAC9C,AAAS,QAAQ,IAAI,MAAM,KAAK;CAChC,AAAS,SAAS,IAAI,OAAO,KAAK;CAClC,AAAS,MAAM,IAAI,IAAI,KAAK;CAC5B,AAAS;CACT,AAAS,QAAQ,IAAI,MAAM,KAAK;CAChC,AAAS;CACT,AAAS,UAAU,IAAI,QAAQ,KAAK;;;;;;;;;;;;;;;;;;;CAoBpC,YACE,cACA,cACA;AACA,MAAI,OAAO,iBAAiB,UAAU;AACpC,QAAK,MAAM,aAAa;AACxB,QAAK,UAAU;SACV;AACL,QAAK,MAAM;AACX,QAAK,UAAU,gBAAgB,EAAE;;AAGnC,MAAI,CAAC,KAAK,IACR,MAAK,MAAM,OAAO,iBAAiB;AAGrC,OAAK,YAAY,CAAC,CAAC,KAAK;AAExB,MAAI,KAAK,QAAQ,UAAU,OACzB,MAAK,QAAQ,QAAQ;AAGvB,OAAK,WAAW,KAAK,QAAQ;AAC7B,MAAI,CAAC,KAAK,SACR,MAAK,WAAW,OAAO,mBAAmB;AAG5C,MAAI,CAAC,KAAK,aAAa,CAAC,KAAK,SAC3B,OAAM,IAAI,MACR,oMAGD;EAGH,MAAMA,WAAmB,KAAK,QAAQ,QAAQ,UAAU;EACxD,MAAMC,cAAsB,KAAK,QAAQ,eAAe;EACxD,MAAMC,OAA2B,KAAK,QAAQ;AAC9C,OAAK,UAAU,GAAG,SAAS,KAAK;AAEhC,MAAI,KACF,MAAK,UAAU,KAAK,UAAU,IAAI;AAGpC,OAAK,OAAO,IAAI,MAAM;AAEtB,OAAK,WAAW,KAAK,qBAAqB;AAC1C,OAAK,UAAU,KAAK,qBAAqB;AAGzC,OAAK,iBAAiB,IAAI,eAAe,KAAK;EAE9C,MAAM,YAAY,KAAK,gBAAgB,KAAK,QAAQ;AAEpD,OAAK,SAAS,KAAK,iBAAiB,KAAK,SAAS,UAAU;;CAG9D,AAAQ,gBAAgB,SAAgC;EACtD,IAAIC,YAAoB,eAAe;EAEvC,MAAM,EAAE,MAAM,aAAa,SAAS,mBAAmB,gBAAgB;AACvE,eAAa,KAAK,cAAc,iBAAiB,IAAI,mBAAmB,GAAG;AAE3E,MAAI,QAAQ,SAAS;GACnB,MAAM,EAAE,MAAM,YAAY,QAAQ;AAClC,gBAAa,IAAI,KAAK,IAAI;;AAG5B,SAAO;;CAGT,sBAAsB;AACpB,SAAO,IAAI,SAAS,KAAK,mBAAmB,CAAC;;CAG/C,sBAAsB;AACpB,SAAO,IAAI,QAAQ,KAAK,mBAAmB,CAAC;;CAG9C,oBAAoC;AAClC,SAAO,IAAI,sBAAsB;;CAGnC,iBAAiB,SAAwB,WAAmB;EAC1D,MAAMC,UAAkC,EACtC,cAAc,WACf;EAED,MAAM,gBAAgB,QAAQ,QAAQ;AACtC,MACE,iBACA,OAAO,kBAAkB,YACzB,CAAC,MAAM,QAAQ,cAAc,IAC7B,EAAE,yBAAyB,SAE3B,QAAO,OAAO,SAAS,cAAc;AAGvC,MAAI,KAAK,IACP,SAAQ,mBAAmB,UAAU,KAAK;AAG5C,SAAO,IAAI,gBAAgB,KAAK,SAAS;GACvC,GAAG,QAAQ;GACX,SAAS,QAAQ;GACjB;GACD,CAAC;;CAGJ,IAAI,UAAU;AACZ,SAAO;;;;;;;CAQT,cAAc,YAA0B;AACtC,MAAI,CAAC,KAAK,UACR,OAAM,IAAI,wBAAwB,WAAW;;CAIjD,MAAM,KACJ,MACA,QACA,UAAuB,EAAE,EACE;AAC3B,MAAI,CAAC,QAAQ,gBACX,MAAK,cAAc,KAAK;EAG1B,MAAMC,iBAAyC,EAAE;AAEjD,MAAI,QAAQ,eACV,gBAAe,0BAA0B,QAAQ;AAGnD,MAAI,QAAQ,aACV,gBAAe,wBAAwB,QAAQ;EAGjD,IAAIC;AAEJ,MAAI;AACF,SAAM,MAAM,KAAK,OAAO,KAAa,MAAM,QAAQ;IACjD,QAAQ,QAAQ;IAChB,SAAS;IACV,CAAC;WACK,OAAO;AACd,QAAK,gBAAgB;IAAE;IAAM;IAAO,CAAC;AACrC,SAAM;;AAGR,MAAI;AACF,UAAO,EAAE,MAAM,MAAM,IAAI,QAAQ,EAAE;WAC5B,OAAO;AACd,SAAM,KAAK,iBAAiB,OAAO,IAAI;AACvC,SAAM;;;CAIV,MAAM,IACJ,MACA,UAAsB,EAAE,EACG;AAC3B,MAAI,CAAC,QAAQ,gBACX,MAAK,cAAc,KAAK;EAG1B,MAAMD,iBAAyC,EAAE;AAEjD,MAAI,QAAQ,YACV,gBAAe,wBAAwB,UAAU,QAAQ;AAG3D,MAAI,QAAQ,aACV,gBAAe,wBAAwB,QAAQ;EAGjD,IAAIC;AACJ,MAAI;AACF,SAAM,MAAM,KAAK,OAAO,IAAI,MAAM;IAChC,QAAQ,QAAQ;IAChB,SAAS;IACV,CAAC;WACK,OAAO;AACd,QAAK,gBAAgB;IAAE;IAAM;IAAO,CAAC;AAErC,SAAM;;AAGR,MAAI;AACF,UAAO,EAAE,MAAM,MAAM,IAAI,QAAQ,EAAE;WAC5B,OAAO;AACd,SAAM,KAAK,iBAAiB,OAAO,IAAI;AACvC,SAAM;;;CAIV,MAAM,IACJ,MACA,QACA,UAAsB,EAAE,EACG;AAC3B,MAAI,CAAC,QAAQ,gBACX,MAAK,cAAc,KAAK;EAG1B,MAAMD,iBAAyC,EAAE;AAEjD,MAAI,QAAQ,eACV,gBAAe,0BAA0B,QAAQ;EAGnD,IAAIC;AAEJ,MAAI;AACF,SAAM,MAAM,KAAK,OAAO,IAAY,MAAM,QAAQ;IAChD,QAAQ,QAAQ;IAChB,SAAS;IACV,CAAC;WACK,OAAO;AACd,QAAK,gBAAgB;IAAE;IAAM;IAAO,CAAC;AAErC,SAAM;;AAGR,MAAI;AACF,UAAO,EAAE,MAAM,MAAM,IAAI,QAAQ,EAAE;WAC5B,OAAO;AACd,SAAM,KAAK,iBAAiB,OAAO,IAAI;AACvC,SAAM;;;CAIV,MAAM,OAAO,MAAc,OAA4B;AACrD,OAAK,cAAc,KAAK;AAExB,MAAI;AACF,SAAM,KAAK,OAAO,OAAO,MAAM,EAC7B,QAAQ,OACT,CAAC;WACK,OAAO;AACd,QAAK,gBAAgB;IAAE;IAAM;IAAO,CAAC;AAErC,SAAM;;;CAIV,YAAY,SAAiB;AAE3B,UAAQ,KAAK,WAAW,UAAU;;CAGpC,MAAc,iBACZ,OACA,KACA;AACA,MAAI,iBAAiB,aAAa;GAChC,MAAM,cAAc,IAAI,gBAAgB;GACxC,MAAM,YAAY,YAAY,QAAQ,IAAI,eAAe,IAAI;GAC7D,MAAM,YAAY,YAAY;GAC9B,MAAM,UAAU,MAAM,YAAY,MAAM;AACxC,SAAM,IAAI,WAAW;IACnB,SAAS,MAAM;IACf;IACA;IACA;IACD,CAAC;;;CAIN,AAAQ,gBAAgB,EAAE,MAAM,SAA2C;AACzE,MAAI,EAAE,iBAAiB,iBACrB,OAAM,IAAI,MAAM,qBAAqB,SAAS,EAAE,OAAO,OAAO,CAAC;EAGjE,MAAM,EAAE,aAAa;AAErB,MAAI,UAAU;GACZ,MAAM,EAAE,QAAQ,MAAM,YAAY;GAElC,MAAM,YAAY,QAAQ,mBAAmB;GAC7C,MAAM,EACJ,MACA,mBAAmB,kBACnB,gBACA,QACA,YACE;AAEJ,WAAQ,QAAR;IACE,KAAK,IACH,OAAM,IAAI,sBAAsB,UAAU;IAE5C,KAAK,IACH,OAAM,IAAI,kBAAkB;KAAE;KAAW;KAAS;KAAO,CAAC;IAE5D,KAAK,IACH,OAAM,IAAI,6BAA6B;KACrC;KACA;KACA;KACA;KACD,CAAC;IAEJ,KAAK,IACH,OAAM,IAAI,kBAAkB;KAC1B;KACA;KACA;KACA;KACD,CAAC;IAEJ,KAAK,KAAK;KACR,MAAM,aAAa,QAAQ,IAAI,cAAc;AAE7C,WAAM,IAAI,2BACR,KAAK,SACL,WACA,aAAa,OAAO,WAAW,GAAG,KACnC;;IAEH,QACE,KAAIC,WAAS,iBACX,OAAM,IAAI,eACR,QACA,WACAA,SACA,kBACA,KACD;aACQ,QAAQ,OAGjB,OAAM,IAAI,oBAAoB;KAC5B;KACA;KACA;KACA;KACD,CAAC;QAEF,OAAM,IAAI,uBACR,QACA,KAAK,SACL,MACA,UACD"}
+{"version":3,"file":"workos.js","names":["protocol: string","apiHostname: string","port: number | undefined","userAgent: string","headers: Record<string, string>","requestHeaders: Record<string, string>","res: HttpClientResponseInterface","error"],"sources":["../src/workos.ts"],"sourcesContent":["import {\n  ApiKeyRequiredException,\n  GenericServerException,\n  NotFoundException,\n  UnauthorizedException,\n  UnprocessableEntityException,\n  OauthException,\n  RateLimitExceededException,\n} from './common/exceptions';\nimport { PKCE } from './pkce/pkce';\nimport {\n  GetOptions,\n  HttpClientResponseInterface,\n  PatchOptions,\n  PostOptions,\n  PutOptions,\n  WorkOSOptions,\n  WorkOSResponseError,\n} from './common/interfaces';\nimport { ApiKeys } from './api-keys/api-keys';\nimport { DirectorySync } from './directory-sync/directory-sync';\nimport { Events } from './events/events';\nimport { Organizations } from './organizations/organizations';\nimport { OrganizationDomains } from './organization-domains/organization-domains';\nimport { Passwordless } from './passwordless/passwordless';\nimport { Pipes } from './pipes/pipes';\nimport { Portal } from './portal/portal';\nimport { SSO } from './sso/sso';\nimport { Webhooks } from './webhooks/webhooks';\nimport { Mfa } from './mfa/mfa';\nimport { AuditLogs } from './audit-logs/audit-logs';\nimport { UserManagement } from './user-management/user-management';\nimport { FGA } from './fga/fga';\nimport { BadRequestException } from './common/exceptions/bad-request.exception';\nimport { FeatureFlags } from './feature-flags/feature-flags';\n\nimport { HttpClient, HttpClientError } from './common/net/http-client';\nimport { SubtleCryptoProvider } from './common/crypto/subtle-crypto-provider';\nimport { FetchHttpClient } from './common/net/fetch-client';\nimport { Widgets } from './widgets/widgets';\nimport { Actions } from './actions/actions';\nimport { Authorization } from './authorization/authorization';\nimport { Vault } from './vault/vault';\nimport { ConflictException } from './common/exceptions/conflict.exception';\nimport { CryptoProvider } from './common/crypto/crypto-provider';\nimport { ParseError } from './common/exceptions/parse-error';\nimport { getEnv } from './common/utils/env';\nimport { getRuntimeInfo } from './common/utils/runtime-info';\n\nconst VERSION = '8.2.0';\n\nconst DEFAULT_HOSTNAME = 'api.workos.com';\n\nconst HEADER_AUTHORIZATION = 'Authorization';\nconst HEADER_IDEMPOTENCY_KEY = 'Idempotency-Key';\nconst HEADER_WARRANT_TOKEN = 'Warrant-Token';\n\nexport class WorkOS {\n  readonly baseURL: string;\n  readonly client: HttpClient;\n  readonly clientId?: string;\n  readonly key?: string;\n  readonly options: WorkOSOptions;\n  readonly pkce: PKCE;\n\n  private readonly hasApiKey: boolean;\n\n  readonly actions: Actions;\n  readonly apiKeys = new ApiKeys(this);\n  readonly auditLogs = new AuditLogs(this);\n  readonly authorization = new Authorization(this);\n  readonly directorySync = new DirectorySync(this);\n  readonly events = new Events(this);\n  readonly featureFlags = new FeatureFlags(this);\n  readonly fga = new FGA(this);\n  readonly mfa = new Mfa(this);\n  readonly organizations = new Organizations(this);\n  readonly organizationDomains = new OrganizationDomains(this);\n  readonly passwordless = new Passwordless(this);\n  readonly pipes = new Pipes(this);\n  readonly portal = new Portal(this);\n  readonly sso = new SSO(this);\n  readonly userManagement: UserManagement;\n  readonly vault = new Vault(this);\n  readonly webhooks: Webhooks;\n  readonly widgets = new Widgets(this);\n\n  /**\n   * Create a new WorkOS client.\n   *\n   * @param keyOrOptions - API key string, or options object\n   * @param maybeOptions - Options when first argument is API key\n   *\n   * @example\n   * // Server-side with API key (string)\n   * const workos = new WorkOS('sk_...');\n   *\n   * @example\n   * // Server-side with API key (object)\n   * const workos = new WorkOS({ apiKey: 'sk_...', clientId: 'client_...' });\n   *\n   * @example\n   * // PKCE/public client (no API key)\n   * const workos = new WorkOS({ clientId: 'client_...' });\n   */\n  constructor(\n    keyOrOptions?: string | WorkOSOptions,\n    maybeOptions?: WorkOSOptions,\n  ) {\n    if (typeof keyOrOptions === 'object') {\n      this.key = keyOrOptions.apiKey;\n      this.options = keyOrOptions;\n    } else {\n      this.key = keyOrOptions;\n      this.options = maybeOptions ?? {};\n    }\n\n    if (!this.key) {\n      this.key = getEnv('WORKOS_API_KEY');\n    }\n\n    this.hasApiKey = !!this.key;\n\n    if (this.options.https === undefined) {\n      this.options.https = true;\n    }\n\n    this.clientId = this.options.clientId;\n    if (!this.clientId) {\n      this.clientId = getEnv('WORKOS_CLIENT_ID');\n    }\n\n    if (!this.hasApiKey && !this.clientId) {\n      throw new Error(\n        'WorkOS requires either an API key or a clientId. ' +\n          'For server-side: new WorkOS(\"sk_...\") or new WorkOS({ apiKey: \"sk_...\" }). ' +\n          'For PKCE/public clients: new WorkOS({ clientId: \"client_...\" })',\n      );\n    }\n\n    const protocol: string = this.options.https ? 'https' : 'http';\n    const apiHostname: string = this.options.apiHostname || DEFAULT_HOSTNAME;\n    const port: number | undefined = this.options.port;\n    this.baseURL = `${protocol}://${apiHostname}`;\n\n    if (port) {\n      this.baseURL = this.baseURL + `:${port}`;\n    }\n\n    this.pkce = new PKCE();\n\n    this.webhooks = this.createWebhookClient();\n    this.actions = this.createActionsClient();\n\n    // Must initialize UserManagement after baseURL is configured\n    this.userManagement = new UserManagement(this);\n\n    const userAgent = this.createUserAgent(this.options);\n\n    this.client = this.createHttpClient(this.options, userAgent);\n  }\n\n  private createUserAgent(options: WorkOSOptions): string {\n    let userAgent: string = `workos-node/${VERSION}`;\n\n    const { name: runtimeName, version: runtimeVersion } = getRuntimeInfo();\n    userAgent += ` (${runtimeName}${runtimeVersion ? `/${runtimeVersion}` : ''})`;\n\n    if (options.appInfo) {\n      const { name, version } = options.appInfo;\n      userAgent += ` ${name}: ${version}`;\n    }\n\n    return userAgent;\n  }\n\n  createWebhookClient() {\n    return new Webhooks(this.getCryptoProvider());\n  }\n\n  createActionsClient() {\n    return new Actions(this.getCryptoProvider());\n  }\n\n  getCryptoProvider(): CryptoProvider {\n    return new SubtleCryptoProvider();\n  }\n\n  createHttpClient(options: WorkOSOptions, userAgent: string) {\n    const headers: Record<string, string> = {\n      'User-Agent': userAgent,\n    };\n\n    const configHeaders = options.config?.headers;\n    if (\n      configHeaders &&\n      typeof configHeaders === 'object' &&\n      !Array.isArray(configHeaders) &&\n      !(configHeaders instanceof Headers)\n    ) {\n      Object.assign(headers, configHeaders);\n    }\n\n    if (this.key) {\n      headers['Authorization'] = `Bearer ${this.key}`;\n    }\n\n    return new FetchHttpClient(this.baseURL, {\n      ...options.config,\n      timeout: options.timeout,\n      headers,\n    }) as HttpClient;\n  }\n\n  get version() {\n    return VERSION;\n  }\n\n  /**\n   * Require API key for methods that need it.\n   * @param methodName - Name of the method requiring API key (for error message)\n   * @throws ApiKeyRequiredException if no API key was provided\n   */\n  requireApiKey(methodName: string): void {\n    if (!this.hasApiKey) {\n      throw new ApiKeyRequiredException(methodName);\n    }\n  }\n\n  async post<Result = any, Entity = any>(\n    path: string,\n    entity: Entity,\n    options: PostOptions = {},\n  ): Promise<{ data: Result }> {\n    if (!options.skipApiKeyCheck) {\n      this.requireApiKey(path);\n    }\n\n    const requestHeaders: Record<string, string> = {};\n\n    if (options.idempotencyKey) {\n      requestHeaders[HEADER_IDEMPOTENCY_KEY] = options.idempotencyKey;\n    }\n\n    if (options.warrantToken) {\n      requestHeaders[HEADER_WARRANT_TOKEN] = options.warrantToken;\n    }\n\n    let res: HttpClientResponseInterface;\n\n    try {\n      res = await this.client.post<Entity>(path, entity, {\n        params: options.query,\n        headers: requestHeaders,\n      });\n    } catch (error) {\n      this.handleHttpError({ path, error });\n      throw error;\n    }\n\n    try {\n      return { data: await res.toJSON() };\n    } catch (error) {\n      await this.handleParseError(error, res);\n      throw error;\n    }\n  }\n\n  async get<Result = any>(\n    path: string,\n    options: GetOptions = {},\n  ): Promise<{ data: Result }> {\n    if (!options.skipApiKeyCheck) {\n      this.requireApiKey(path);\n    }\n\n    const requestHeaders: Record<string, string> = {};\n\n    if (options.accessToken) {\n      requestHeaders[HEADER_AUTHORIZATION] = `Bearer ${options.accessToken}`;\n    }\n\n    if (options.warrantToken) {\n      requestHeaders[HEADER_WARRANT_TOKEN] = options.warrantToken;\n    }\n\n    let res: HttpClientResponseInterface;\n    try {\n      res = await this.client.get(path, {\n        params: options.query,\n        headers: requestHeaders,\n      });\n    } catch (error) {\n      this.handleHttpError({ path, error });\n\n      throw error;\n    }\n\n    try {\n      return { data: await res.toJSON() };\n    } catch (error) {\n      await this.handleParseError(error, res);\n      throw error;\n    }\n  }\n\n  async put<Result = any, Entity = any>(\n    path: string,\n    entity: Entity,\n    options: PutOptions = {},\n  ): Promise<{ data: Result }> {\n    if (!options.skipApiKeyCheck) {\n      this.requireApiKey(path);\n    }\n\n    const requestHeaders: Record<string, string> = {};\n\n    if (options.idempotencyKey) {\n      requestHeaders[HEADER_IDEMPOTENCY_KEY] = options.idempotencyKey;\n    }\n\n    let res: HttpClientResponseInterface;\n\n    try {\n      res = await this.client.put<Entity>(path, entity, {\n        params: options.query,\n        headers: requestHeaders,\n      });\n    } catch (error) {\n      this.handleHttpError({ path, error });\n\n      throw error;\n    }\n\n    try {\n      return { data: await res.toJSON() };\n    } catch (error) {\n      await this.handleParseError(error, res);\n      throw error;\n    }\n  }\n\n  async patch<Result = any, Entity = any>(\n    path: string,\n    entity: Entity,\n    options: PatchOptions = {},\n  ): Promise<{ data: Result }> {\n    if (!options.skipApiKeyCheck) {\n      this.requireApiKey(path);\n    }\n\n    const requestHeaders: Record<string, string> = {};\n\n    if (options.idempotencyKey) {\n      requestHeaders[HEADER_IDEMPOTENCY_KEY] = options.idempotencyKey;\n    }\n\n    let res: HttpClientResponseInterface;\n\n    try {\n      res = await this.client.patch<Entity>(path, entity, {\n        params: options.query,\n        headers: requestHeaders,\n      });\n    } catch (error) {\n      this.handleHttpError({ path, error });\n\n      throw error;\n    }\n\n    try {\n      return { data: await res.toJSON() };\n    } catch (error) {\n      await this.handleParseError(error, res);\n      throw error;\n    }\n  }\n\n  async delete(path: string, query?: any): Promise<void> {\n    this.requireApiKey(path);\n\n    try {\n      await this.client.delete(path, {\n        params: query,\n      });\n    } catch (error) {\n      this.handleHttpError({ path, error });\n\n      throw error;\n    }\n  }\n\n  emitWarning(warning: string) {\n    // tslint:disable-next-line:no-console\n    console.warn(`WorkOS: ${warning}`);\n  }\n\n  private async handleParseError(\n    error: unknown,\n    res: HttpClientResponseInterface,\n  ) {\n    if (error instanceof SyntaxError) {\n      const rawResponse = res.getRawResponse() as Response;\n      const requestID = rawResponse.headers.get('X-Request-ID') ?? '';\n      const rawStatus = rawResponse.status;\n      const rawBody = await rawResponse.text();\n      throw new ParseError({\n        message: error.message,\n        rawBody,\n        rawStatus,\n        requestID,\n      });\n    }\n  }\n\n  private handleHttpError({ path, error }: { path: string; error: unknown }) {\n    if (!(error instanceof HttpClientError)) {\n      throw new Error(`Unexpected error: ${error}`, { cause: error });\n    }\n\n    const { response } = error as HttpClientError<WorkOSResponseError>;\n\n    if (response) {\n      const { status, data, headers } = response;\n\n      const requestID = headers['X-Request-ID'] ?? '';\n      const {\n        code,\n        error_description: errorDescription,\n        error,\n        errors,\n        message,\n      } = data;\n\n      switch (status) {\n        case 401: {\n          throw new UnauthorizedException(requestID);\n        }\n        case 409: {\n          throw new ConflictException({ requestID, message, error });\n        }\n        case 422: {\n          throw new UnprocessableEntityException({\n            code,\n            errors,\n            message,\n            requestID,\n          });\n        }\n        case 404: {\n          throw new NotFoundException({\n            code,\n            message,\n            path,\n            requestID,\n          });\n        }\n        case 429: {\n          const retryAfter = headers.get('Retry-After');\n\n          throw new RateLimitExceededException(\n            data.message,\n            requestID,\n            retryAfter ? Number(retryAfter) : null,\n          );\n        }\n        default: {\n          if (error || errorDescription) {\n            throw new OauthException(\n              status,\n              requestID,\n              error,\n              errorDescription,\n              data,\n            );\n          } else if (code && errors) {\n            // Note: ideally this should be mapped directly with a `400` status code.\n            // However, this would break existing logic for the `OauthException` exception.\n            throw new BadRequestException({\n              code,\n              errors,\n              message,\n              requestID,\n            });\n          } else {\n            throw new GenericServerException(\n              status,\n              data.message,\n              data,\n              requestID,\n            );\n          }\n        }\n      }\n    }\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAiDA,MAAM,UAAU;AAEhB,MAAM,mBAAmB;AAEzB,MAAM,uBAAuB;AAC7B,MAAM,yBAAyB;AAC/B,MAAM,uBAAuB;AAE7B,IAAa,SAAb,MAAoB;CAClB,AAAS;CACT,AAAS;CACT,AAAS;CACT,AAAS;CACT,AAAS;CACT,AAAS;CAET,AAAiB;CAEjB,AAAS;CACT,AAAS,UAAU,IAAI,QAAQ,KAAK;CACpC,AAAS,YAAY,IAAI,UAAU,KAAK;CACxC,AAAS,gBAAgB,IAAI,cAAc,KAAK;CAChD,AAAS,gBAAgB,IAAI,cAAc,KAAK;CAChD,AAAS,SAAS,IAAI,OAAO,KAAK;CAClC,AAAS,eAAe,IAAI,aAAa,KAAK;CAC9C,AAAS,MAAM,IAAI,IAAI,KAAK;CAC5B,AAAS,MAAM,IAAI,IAAI,KAAK;CAC5B,AAAS,gBAAgB,IAAI,cAAc,KAAK;CAChD,AAAS,sBAAsB,IAAI,oBAAoB,KAAK;CAC5D,AAAS,eAAe,IAAI,aAAa,KAAK;CAC9C,AAAS,QAAQ,IAAI,MAAM,KAAK;CAChC,AAAS,SAAS,IAAI,OAAO,KAAK;CAClC,AAAS,MAAM,IAAI,IAAI,KAAK;CAC5B,AAAS;CACT,AAAS,QAAQ,IAAI,MAAM,KAAK;CAChC,AAAS;CACT,AAAS,UAAU,IAAI,QAAQ,KAAK;;;;;;;;;;;;;;;;;;;CAoBpC,YACE,cACA,cACA;AACA,MAAI,OAAO,iBAAiB,UAAU;AACpC,QAAK,MAAM,aAAa;AACxB,QAAK,UAAU;SACV;AACL,QAAK,MAAM;AACX,QAAK,UAAU,gBAAgB,EAAE;;AAGnC,MAAI,CAAC,KAAK,IACR,MAAK,MAAM,OAAO,iBAAiB;AAGrC,OAAK,YAAY,CAAC,CAAC,KAAK;AAExB,MAAI,KAAK,QAAQ,UAAU,OACzB,MAAK,QAAQ,QAAQ;AAGvB,OAAK,WAAW,KAAK,QAAQ;AAC7B,MAAI,CAAC,KAAK,SACR,MAAK,WAAW,OAAO,mBAAmB;AAG5C,MAAI,CAAC,KAAK,aAAa,CAAC,KAAK,SAC3B,OAAM,IAAI,MACR,oMAGD;EAGH,MAAMA,WAAmB,KAAK,QAAQ,QAAQ,UAAU;EACxD,MAAMC,cAAsB,KAAK,QAAQ,eAAe;EACxD,MAAMC,OAA2B,KAAK,QAAQ;AAC9C,OAAK,UAAU,GAAG,SAAS,KAAK;AAEhC,MAAI,KACF,MAAK,UAAU,KAAK,UAAU,IAAI;AAGpC,OAAK,OAAO,IAAI,MAAM;AAEtB,OAAK,WAAW,KAAK,qBAAqB;AAC1C,OAAK,UAAU,KAAK,qBAAqB;AAGzC,OAAK,iBAAiB,IAAI,eAAe,KAAK;EAE9C,MAAM,YAAY,KAAK,gBAAgB,KAAK,QAAQ;AAEpD,OAAK,SAAS,KAAK,iBAAiB,KAAK,SAAS,UAAU;;CAG9D,AAAQ,gBAAgB,SAAgC;EACtD,IAAIC,YAAoB,eAAe;EAEvC,MAAM,EAAE,MAAM,aAAa,SAAS,mBAAmB,gBAAgB;AACvE,eAAa,KAAK,cAAc,iBAAiB,IAAI,mBAAmB,GAAG;AAE3E,MAAI,QAAQ,SAAS;GACnB,MAAM,EAAE,MAAM,YAAY,QAAQ;AAClC,gBAAa,IAAI,KAAK,IAAI;;AAG5B,SAAO;;CAGT,sBAAsB;AACpB,SAAO,IAAI,SAAS,KAAK,mBAAmB,CAAC;;CAG/C,sBAAsB;AACpB,SAAO,IAAI,QAAQ,KAAK,mBAAmB,CAAC;;CAG9C,oBAAoC;AAClC,SAAO,IAAI,sBAAsB;;CAGnC,iBAAiB,SAAwB,WAAmB;EAC1D,MAAMC,UAAkC,EACtC,cAAc,WACf;EAED,MAAM,gBAAgB,QAAQ,QAAQ;AACtC,MACE,iBACA,OAAO,kBAAkB,YACzB,CAAC,MAAM,QAAQ,cAAc,IAC7B,EAAE,yBAAyB,SAE3B,QAAO,OAAO,SAAS,cAAc;AAGvC,MAAI,KAAK,IACP,SAAQ,mBAAmB,UAAU,KAAK;AAG5C,SAAO,IAAI,gBAAgB,KAAK,SAAS;GACvC,GAAG,QAAQ;GACX,SAAS,QAAQ;GACjB;GACD,CAAC;;CAGJ,IAAI,UAAU;AACZ,SAAO;;;;;;;CAQT,cAAc,YAA0B;AACtC,MAAI,CAAC,KAAK,UACR,OAAM,IAAI,wBAAwB,WAAW;;CAIjD,MAAM,KACJ,MACA,QACA,UAAuB,EAAE,EACE;AAC3B,MAAI,CAAC,QAAQ,gBACX,MAAK,cAAc,KAAK;EAG1B,MAAMC,iBAAyC,EAAE;AAEjD,MAAI,QAAQ,eACV,gBAAe,0BAA0B,QAAQ;AAGnD,MAAI,QAAQ,aACV,gBAAe,wBAAwB,QAAQ;EAGjD,IAAIC;AAEJ,MAAI;AACF,SAAM,MAAM,KAAK,OAAO,KAAa,MAAM,QAAQ;IACjD,QAAQ,QAAQ;IAChB,SAAS;IACV,CAAC;WACK,OAAO;AACd,QAAK,gBAAgB;IAAE;IAAM;IAAO,CAAC;AACrC,SAAM;;AAGR,MAAI;AACF,UAAO,EAAE,MAAM,MAAM,IAAI,QAAQ,EAAE;WAC5B,OAAO;AACd,SAAM,KAAK,iBAAiB,OAAO,IAAI;AACvC,SAAM;;;CAIV,MAAM,IACJ,MACA,UAAsB,EAAE,EACG;AAC3B,MAAI,CAAC,QAAQ,gBACX,MAAK,cAAc,KAAK;EAG1B,MAAMD,iBAAyC,EAAE;AAEjD,MAAI,QAAQ,YACV,gBAAe,wBAAwB,UAAU,QAAQ;AAG3D,MAAI,QAAQ,aACV,gBAAe,wBAAwB,QAAQ;EAGjD,IAAIC;AACJ,MAAI;AACF,SAAM,MAAM,KAAK,OAAO,IAAI,MAAM;IAChC,QAAQ,QAAQ;IAChB,SAAS;IACV,CAAC;WACK,OAAO;AACd,QAAK,gBAAgB;IAAE;IAAM;IAAO,CAAC;AAErC,SAAM;;AAGR,MAAI;AACF,UAAO,EAAE,MAAM,MAAM,IAAI,QAAQ,EAAE;WAC5B,OAAO;AACd,SAAM,KAAK,iBAAiB,OAAO,IAAI;AACvC,SAAM;;;CAIV,MAAM,IACJ,MACA,QACA,UAAsB,EAAE,EACG;AAC3B,MAAI,CAAC,QAAQ,gBACX,MAAK,cAAc,KAAK;EAG1B,MAAMD,iBAAyC,EAAE;AAEjD,MAAI,QAAQ,eACV,gBAAe,0BAA0B,QAAQ;EAGnD,IAAIC;AAEJ,MAAI;AACF,SAAM,MAAM,KAAK,OAAO,IAAY,MAAM,QAAQ;IAChD,QAAQ,QAAQ;IAChB,SAAS;IACV,CAAC;WACK,OAAO;AACd,QAAK,gBAAgB;IAAE;IAAM;IAAO,CAAC;AAErC,SAAM;;AAGR,MAAI;AACF,UAAO,EAAE,MAAM,MAAM,IAAI,QAAQ,EAAE;WAC5B,OAAO;AACd,SAAM,KAAK,iBAAiB,OAAO,IAAI;AACvC,SAAM;;;CAIV,MAAM,MACJ,MACA,QACA,UAAwB,EAAE,EACC;AAC3B,MAAI,CAAC,QAAQ,gBACX,MAAK,cAAc,KAAK;EAG1B,MAAMD,iBAAyC,EAAE;AAEjD,MAAI,QAAQ,eACV,gBAAe,0BAA0B,QAAQ;EAGnD,IAAIC;AAEJ,MAAI;AACF,SAAM,MAAM,KAAK,OAAO,MAAc,MAAM,QAAQ;IAClD,QAAQ,QAAQ;IAChB,SAAS;IACV,CAAC;WACK,OAAO;AACd,QAAK,gBAAgB;IAAE;IAAM;IAAO,CAAC;AAErC,SAAM;;AAGR,MAAI;AACF,UAAO,EAAE,MAAM,MAAM,IAAI,QAAQ,EAAE;WAC5B,OAAO;AACd,SAAM,KAAK,iBAAiB,OAAO,IAAI;AACvC,SAAM;;;CAIV,MAAM,OAAO,MAAc,OAA4B;AACrD,OAAK,cAAc,KAAK;AAExB,MAAI;AACF,SAAM,KAAK,OAAO,OAAO,MAAM,EAC7B,QAAQ,OACT,CAAC;WACK,OAAO;AACd,QAAK,gBAAgB;IAAE;IAAM;IAAO,CAAC;AAErC,SAAM;;;CAIV,YAAY,SAAiB;AAE3B,UAAQ,KAAK,WAAW,UAAU;;CAGpC,MAAc,iBACZ,OACA,KACA;AACA,MAAI,iBAAiB,aAAa;GAChC,MAAM,cAAc,IAAI,gBAAgB;GACxC,MAAM,YAAY,YAAY,QAAQ,IAAI,eAAe,IAAI;GAC7D,MAAM,YAAY,YAAY;GAC9B,MAAM,UAAU,MAAM,YAAY,MAAM;AACxC,SAAM,IAAI,WAAW;IACnB,SAAS,MAAM;IACf;IACA;IACA;IACD,CAAC;;;CAIN,AAAQ,gBAAgB,EAAE,MAAM,SAA2C;AACzE,MAAI,EAAE,iBAAiB,iBACrB,OAAM,IAAI,MAAM,qBAAqB,SAAS,EAAE,OAAO,OAAO,CAAC;EAGjE,MAAM,EAAE,aAAa;AAErB,MAAI,UAAU;GACZ,MAAM,EAAE,QAAQ,MAAM,YAAY;GAElC,MAAM,YAAY,QAAQ,mBAAmB;GAC7C,MAAM,EACJ,MACA,mBAAmB,kBACnB,gBACA,QACA,YACE;AAEJ,WAAQ,QAAR;IACE,KAAK,IACH,OAAM,IAAI,sBAAsB,UAAU;IAE5C,KAAK,IACH,OAAM,IAAI,kBAAkB;KAAE;KAAW;KAAS;KAAO,CAAC;IAE5D,KAAK,IACH,OAAM,IAAI,6BAA6B;KACrC;KACA;KACA;KACA;KACD,CAAC;IAEJ,KAAK,IACH,OAAM,IAAI,kBAAkB;KAC1B;KACA;KACA;KACA;KACD,CAAC;IAEJ,KAAK,KAAK;KACR,MAAM,aAAa,QAAQ,IAAI,cAAc;AAE7C,WAAM,IAAI,2BACR,KAAK,SACL,WACA,aAAa,OAAO,WAAW,GAAG,KACnC;;IAEH,QACE,KAAIC,WAAS,iBACX,OAAM,IAAI,eACR,QACA,WACAA,SACA,kBACA,KACD;aACQ,QAAQ,OAGjB,OAAM,IAAI,oBAAoB;KAC5B;KACA;KACA;KACA;KACD,CAAC;QAEF,OAAM,IAAI,uBACR,QACA,KAAK,SACL,MACA,UACD"}

package/lib/{write-warrant-options.serializer-7ilOHTPE.d.cts → write-warrant-options.serializer-DYf63mng.d.cts}

@@ -1,7 +1,7 @@
-import { o as SerializedWriteWarrantOptions, u as WriteWarrantOptions } from "./warrant.interface-D0zCmerc.cjs";
+import { o as SerializedWriteWarrantOptions, u as WriteWarrantOptions } from "./warrant.interface-80A3Pew0.cjs";
 
 //#region src/fga/serializers/write-warrant-options.serializer.d.ts
 declare const serializeWriteWarrantOptions: (warrant: WriteWarrantOptions) => SerializedWriteWarrantOptions;
 //#endregion
 export { serializeWriteWarrantOptions as t };
-//# sourceMappingURL=write-warrant-options.serializer-7ilOHTPE.d.cts.map
+//# sourceMappingURL=write-warrant-options.serializer-DYf63mng.d.cts.map

package/package.json

@@ -1,5 +1,5 @@
 {
-  "version": "8.1.0",
+  "version": "8.2.0",
   "name": "@workos-inc/node",
   "author": "WorkOS",
   "description": "A Node wrapper for the WorkOS API",

package/lib/directory-user.interface-ctD0z-go.d.cts

@@ -1,48 +0,0 @@
-import { n as DirectoryGroupResponse, t as DirectoryGroup } from "./directory-group.interface-GMCt7YpS.cjs";
-import { s as RoleResponse } from "./role.interface-C76vJyRA.cjs";
-
-//#region src/directory-sync/interfaces/directory-user.interface.d.ts
-type DefaultCustomAttributes = Record<string, unknown>;
-interface DirectoryUser<TCustomAttributes extends object = DefaultCustomAttributes, TRawAttributes = any> {
-  object: 'directory_user';
-  id: string;
-  directoryId: string;
-  organizationId: string | null;
-  rawAttributes: TRawAttributes;
-  customAttributes: TCustomAttributes;
-  idpId: string;
-  firstName: string | null;
-  email: string | null;
-  lastName: string | null;
-  state: 'active' | 'inactive';
-  role?: RoleResponse;
-  roles?: RoleResponse[];
-  createdAt: string;
-  updatedAt: string;
-}
-interface DirectoryUserResponse<TCustomAttributes extends object = DefaultCustomAttributes, TRawAttributes = any> {
-  object: 'directory_user';
-  id: string;
-  directory_id: string;
-  organization_id: string | null;
-  raw_attributes: TRawAttributes;
-  custom_attributes: TCustomAttributes;
-  idp_id: string;
-  first_name: string | null;
-  email: string | null;
-  last_name: string | null;
-  state: 'active' | 'inactive';
-  role?: RoleResponse;
-  roles?: RoleResponse[];
-  created_at: string;
-  updated_at: string;
-}
-interface DirectoryUserWithGroups<TCustomAttributes extends object = DefaultCustomAttributes> extends DirectoryUser<TCustomAttributes> {
-  groups: DirectoryGroup[];
-}
-interface DirectoryUserWithGroupsResponse<TCustomAttributes extends object = DefaultCustomAttributes> extends DirectoryUserResponse<TCustomAttributes> {
-  groups: DirectoryGroupResponse[];
-}
-//#endregion
-export { DirectoryUserWithGroupsResponse as a, DirectoryUserWithGroups as i, DirectoryUser as n, DirectoryUserResponse as r, DefaultCustomAttributes as t };
-//# sourceMappingURL=directory-user.interface-ctD0z-go.d.cts.map

package/lib/fetch-client-CSHUm64J.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"fetch-client-CSHUm64J.cjs","names":["HttpClient","baseURL: string","options?: FetchHttpClientOptions","responseJson: any","ParseError","HttpClientError","response: HttpClientResponseInterface","requestError: any","HttpClientResponse","headersObj: ResponseHeaders"],"sources":["../src/common/net/fetch-client.ts"],"sourcesContent":["import {\n  HttpClientInterface,\n  HttpClientResponseInterface,\n  RequestHeaders,\n  RequestOptions,\n  ResponseHeaders,\n} from '../interfaces/http-client.interface';\nimport { HttpClient, HttpClientError, HttpClientResponse } from './http-client';\nimport { ParseError } from '../exceptions/parse-error';\n\ninterface FetchHttpClientOptions extends RequestInit {\n  timeout?: number;\n}\n\nconst DEFAULT_FETCH_TIMEOUT = 60_000; // 60 seconds\nexport class FetchHttpClient extends HttpClient implements HttpClientInterface {\n  private readonly _fetchFn;\n\n  constructor(\n    readonly baseURL: string,\n    readonly options?: FetchHttpClientOptions,\n    fetchFn?: typeof fetch,\n  ) {\n    super(baseURL, options);\n\n    // Default to global fetch if available\n    if (!fetchFn) {\n      if (!globalThis.fetch) {\n        throw new Error(\n          'Fetch function not defined in the global scope and no replacement was provided.',\n        );\n      }\n      fetchFn = globalThis.fetch;\n    }\n\n    this._fetchFn = fetchFn.bind(globalThis);\n  }\n\n  /** @override */\n  getClientName(): string {\n    return 'fetch';\n  }\n\n  async get(\n    path: string,\n    options: RequestOptions,\n  ): Promise<HttpClientResponseInterface> {\n    const resourceURL = HttpClient.getResourceURL(\n      this.baseURL,\n      path,\n      options.params,\n    );\n\n    if (HttpClient.isPathRetryable(path)) {\n      return await this.fetchRequestWithRetry(\n        resourceURL,\n        'GET',\n        null,\n        options.headers,\n      );\n    } else {\n      return await this.fetchRequest(resourceURL, 'GET', null, options.headers);\n    }\n  }\n\n  async post<Entity = any>(\n    path: string,\n    entity: Entity,\n    options: RequestOptions,\n  ): Promise<HttpClientResponseInterface> {\n    const resourceURL = HttpClient.getResourceURL(\n      this.baseURL,\n      path,\n      options.params,\n    );\n\n    if (HttpClient.isPathRetryable(path)) {\n      return await this.fetchRequestWithRetry(\n        resourceURL,\n        'POST',\n        HttpClient.getBody(entity),\n        {\n          ...HttpClient.getContentTypeHeader(entity),\n          ...options.headers,\n        },\n      );\n    } else {\n      return await this.fetchRequest(\n        resourceURL,\n        'POST',\n        HttpClient.getBody(entity),\n        {\n          ...HttpClient.getContentTypeHeader(entity),\n          ...options.headers,\n        },\n      );\n    }\n  }\n\n  async put<Entity = any>(\n    path: string,\n    entity: Entity,\n    options: RequestOptions,\n  ): Promise<HttpClientResponseInterface> {\n    const resourceURL = HttpClient.getResourceURL(\n      this.baseURL,\n      path,\n      options.params,\n    );\n\n    if (HttpClient.isPathRetryable(path)) {\n      return await this.fetchRequestWithRetry(\n        resourceURL,\n        'PUT',\n        HttpClient.getBody(entity),\n        {\n          ...HttpClient.getContentTypeHeader(entity),\n          ...options.headers,\n        },\n      );\n    } else {\n      return await this.fetchRequest(\n        resourceURL,\n        'PUT',\n        HttpClient.getBody(entity),\n        {\n          ...HttpClient.getContentTypeHeader(entity),\n          ...options.headers,\n        },\n      );\n    }\n  }\n\n  async delete(\n    path: string,\n    options: RequestOptions,\n  ): Promise<HttpClientResponseInterface> {\n    const resourceURL = HttpClient.getResourceURL(\n      this.baseURL,\n      path,\n      options.params,\n    );\n\n    if (HttpClient.isPathRetryable(path)) {\n      return await this.fetchRequestWithRetry(\n        resourceURL,\n        'DELETE',\n        null,\n        options.headers,\n      );\n    } else {\n      return await this.fetchRequest(\n        resourceURL,\n        'DELETE',\n        null,\n        options.headers,\n      );\n    }\n  }\n\n  private async fetchRequest(\n    url: string,\n    method: string,\n    body?: any,\n    headers?: RequestHeaders,\n  ): Promise<HttpClientResponseInterface> {\n    // For methods which expect payloads, we should always pass a body value\n    // even when it is empty. Without this, some JS runtimes (eg. Deno) will\n    // inject a second Content-Length header.\n    const methodHasPayload =\n      method === 'POST' || method === 'PUT' || method === 'PATCH';\n\n    const requestBody = body || (methodHasPayload ? '' : undefined);\n\n    const { 'User-Agent': userAgent } = (this.options?.headers ||\n      {}) as RequestHeaders;\n\n    // Access timeout from the options with default of 60 seconds\n    const timeout = this.options?.timeout ?? DEFAULT_FETCH_TIMEOUT; // Default 60 seconds\n    const abortController = new AbortController();\n    const timeoutId = setTimeout(() => {\n      abortController?.abort();\n    }, timeout);\n\n    try {\n      const res = await this._fetchFn(url, {\n        method,\n        headers: {\n          Accept: 'application/json, text/plain, */*',\n          'Content-Type': 'application/json',\n          ...this.options?.headers,\n          ...headers,\n          'User-Agent': this.addClientToUserAgent(\n            (userAgent || 'workos-node').toString(),\n          ),\n        },\n        body: requestBody,\n        signal: abortController?.signal,\n      });\n\n      // Clear timeout if request completed successfully\n      if (timeoutId) {\n        clearTimeout(timeoutId);\n      }\n\n      if (!res.ok) {\n        const requestID = res.headers.get('X-Request-ID') ?? '';\n        const rawBody = await res.text();\n\n        let responseJson: any;\n\n        try {\n          responseJson = JSON.parse(rawBody);\n        } catch (error) {\n          if (error instanceof SyntaxError) {\n            throw new ParseError({\n              message: error.message,\n              rawBody,\n              requestID,\n              rawStatus: res.status,\n            });\n          }\n          throw error;\n        }\n\n        throw new HttpClientError({\n          message: res.statusText,\n          response: {\n            status: res.status,\n            headers: res.headers,\n            data: responseJson,\n          },\n        });\n      }\n      return new FetchHttpClientResponse(res);\n    } catch (error) {\n      // Clear timeout if request failed\n      if (timeoutId) {\n        clearTimeout(timeoutId);\n      }\n\n      // Handle timeout errors\n      if (error instanceof Error && error.name === 'AbortError') {\n        throw new HttpClientError({\n          message: `Request timeout after ${timeout}ms`,\n          response: {\n            status: 408,\n            headers: {},\n            data: { error: 'Request timeout' },\n          },\n        });\n      }\n\n      throw error;\n    }\n  }\n\n  private async fetchRequestWithRetry(\n    url: string,\n    method: string,\n    body?: any,\n    headers?: RequestHeaders,\n  ): Promise<HttpClientResponseInterface> {\n    let response: HttpClientResponseInterface;\n    let retryAttempts = 1;\n\n    const makeRequest = async (): Promise<HttpClientResponseInterface> => {\n      let requestError: any = null;\n\n      try {\n        response = await this.fetchRequest(url, method, body, headers);\n      } catch (e) {\n        requestError = e;\n      }\n\n      if (this.shouldRetryRequest(requestError, retryAttempts)) {\n        retryAttempts++;\n        await this.sleep(retryAttempts);\n        return makeRequest();\n      }\n\n      if (requestError != null) {\n        throw requestError;\n      }\n\n      return response;\n    };\n\n    return makeRequest();\n  }\n\n  private shouldRetryRequest(requestError: any, retryAttempt: number): boolean {\n    if (retryAttempt > this.MAX_RETRY_ATTEMPTS) {\n      return false;\n    }\n\n    if (requestError != null) {\n      if (requestError instanceof TypeError) {\n        return true;\n      }\n\n      if (\n        requestError instanceof HttpClientError &&\n        this.RETRY_STATUS_CODES.includes(requestError.response.status)\n      ) {\n        return true;\n      }\n    }\n\n    return false;\n  }\n}\n\n// tslint:disable-next-line\nexport class FetchHttpClientResponse\n  extends HttpClientResponse\n  implements HttpClientResponseInterface\n{\n  _res: Response;\n\n  constructor(res: Response) {\n    super(\n      res.status,\n      FetchHttpClientResponse._transformHeadersToObject(res.headers),\n    );\n    this._res = res;\n  }\n\n  getRawResponse(): Response {\n    return this._res;\n  }\n\n  toJSON(): Promise<any> | null {\n    const contentType = this._res.headers.get('content-type');\n    const isJsonResponse = contentType?.includes('application/json');\n\n    return isJsonResponse ? this._res.json() : null;\n  }\n\n  static _transformHeadersToObject(headers: Headers): ResponseHeaders {\n    // Fetch uses a Headers instance so this must be converted to a barebones\n    // JS object to meet the HttpClient interface.\n    const headersObj: ResponseHeaders = {};\n    for (const entry of Object.entries(headers)) {\n      if (!Array.isArray(entry) || entry.length !== 2) {\n        throw new Error(\n          'Response objects produced by the fetch function given to FetchHttpClient do not have an iterable headers map. Response#headers should be an iterable object.',\n        );\n      }\n\n      headersObj[entry[0]] = entry[1];\n    }\n\n    return headersObj;\n  }\n}\n"],"mappings":";;;;AAcA,MAAM,wBAAwB;AAC9B,IAAa,kBAAb,cAAqCA,+BAA0C;CAC7E,AAAiB;CAEjB,YACE,AAASC,SACT,AAASC,SACT,SACA;AACA,QAAM,SAAS,QAAQ;EAJd;EACA;AAMT,MAAI,CAAC,SAAS;AACZ,OAAI,CAAC,WAAW,MACd,OAAM,IAAI,MACR,kFACD;AAEH,aAAU,WAAW;;AAGvB,OAAK,WAAW,QAAQ,KAAK,WAAW;;;CAI1C,gBAAwB;AACtB,SAAO;;CAGT,MAAM,IACJ,MACA,SACsC;EACtC,MAAM,cAAcF,+BAAW,eAC7B,KAAK,SACL,MACA,QAAQ,OACT;AAED,MAAIA,+BAAW,gBAAgB,KAAK,CAClC,QAAO,MAAM,KAAK,sBAChB,aACA,OACA,MACA,QAAQ,QACT;MAED,QAAO,MAAM,KAAK,aAAa,aAAa,OAAO,MAAM,QAAQ,QAAQ;;CAI7E,MAAM,KACJ,MACA,QACA,SACsC;EACtC,MAAM,cAAcA,+BAAW,eAC7B,KAAK,SACL,MACA,QAAQ,OACT;AAED,MAAIA,+BAAW,gBAAgB,KAAK,CAClC,QAAO,MAAM,KAAK,sBAChB,aACA,QACAA,+BAAW,QAAQ,OAAO,EAC1B;GACE,GAAGA,+BAAW,qBAAqB,OAAO;GAC1C,GAAG,QAAQ;GACZ,CACF;MAED,QAAO,MAAM,KAAK,aAChB,aACA,QACAA,+BAAW,QAAQ,OAAO,EAC1B;GACE,GAAGA,+BAAW,qBAAqB,OAAO;GAC1C,GAAG,QAAQ;GACZ,CACF;;CAIL,MAAM,IACJ,MACA,QACA,SACsC;EACtC,MAAM,cAAcA,+BAAW,eAC7B,KAAK,SACL,MACA,QAAQ,OACT;AAED,MAAIA,+BAAW,gBAAgB,KAAK,CAClC,QAAO,MAAM,KAAK,sBAChB,aACA,OACAA,+BAAW,QAAQ,OAAO,EAC1B;GACE,GAAGA,+BAAW,qBAAqB,OAAO;GAC1C,GAAG,QAAQ;GACZ,CACF;MAED,QAAO,MAAM,KAAK,aAChB,aACA,OACAA,+BAAW,QAAQ,OAAO,EAC1B;GACE,GAAGA,+BAAW,qBAAqB,OAAO;GAC1C,GAAG,QAAQ;GACZ,CACF;;CAIL,MAAM,OACJ,MACA,SACsC;EACtC,MAAM,cAAcA,+BAAW,eAC7B,KAAK,SACL,MACA,QAAQ,OACT;AAED,MAAIA,+BAAW,gBAAgB,KAAK,CAClC,QAAO,MAAM,KAAK,sBAChB,aACA,UACA,MACA,QAAQ,QACT;MAED,QAAO,MAAM,KAAK,aAChB,aACA,UACA,MACA,QAAQ,QACT;;CAIL,MAAc,aACZ,KACA,QACA,MACA,SACsC;EAOtC,MAAM,cAAc,SAFlB,WAAW,UAAU,WAAW,SAAS,WAAW,UAEN,KAAK;EAErD,MAAM,EAAE,cAAc,cAAe,KAAK,SAAS,WACjD,EAAE;EAGJ,MAAM,UAAU,KAAK,SAAS,WAAW;EACzC,MAAM,kBAAkB,IAAI,iBAAiB;EAC7C,MAAM,YAAY,iBAAiB;AACjC,oBAAiB,OAAO;KACvB,QAAQ;AAEX,MAAI;GACF,MAAM,MAAM,MAAM,KAAK,SAAS,KAAK;IACnC;IACA,SAAS;KACP,QAAQ;KACR,gBAAgB;KAChB,GAAG,KAAK,SAAS;KACjB,GAAG;KACH,cAAc,KAAK,sBAChB,aAAa,eAAe,UAAU,CACxC;KACF;IACD,MAAM;IACN,QAAQ,iBAAiB;IAC1B,CAAC;AAGF,OAAI,UACF,cAAa,UAAU;AAGzB,OAAI,CAAC,IAAI,IAAI;IACX,MAAM,YAAY,IAAI,QAAQ,IAAI,eAAe,IAAI;IACrD,MAAM,UAAU,MAAM,IAAI,MAAM;IAEhC,IAAIG;AAEJ,QAAI;AACF,oBAAe,KAAK,MAAM,QAAQ;aAC3B,OAAO;AACd,SAAI,iBAAiB,YACnB,OAAM,IAAIC,+BAAW;MACnB,SAAS,MAAM;MACf;MACA;MACA,WAAW,IAAI;MAChB,CAAC;AAEJ,WAAM;;AAGR,UAAM,IAAIC,oCAAgB;KACxB,SAAS,IAAI;KACb,UAAU;MACR,QAAQ,IAAI;MACZ,SAAS,IAAI;MACb,MAAM;MACP;KACF,CAAC;;AAEJ,UAAO,IAAI,wBAAwB,IAAI;WAChC,OAAO;AAEd,OAAI,UACF,cAAa,UAAU;AAIzB,OAAI,iBAAiB,SAAS,MAAM,SAAS,aAC3C,OAAM,IAAIA,oCAAgB;IACxB,SAAS,yBAAyB,QAAQ;IAC1C,UAAU;KACR,QAAQ;KACR,SAAS,EAAE;KACX,MAAM,EAAE,OAAO,mBAAmB;KACnC;IACF,CAAC;AAGJ,SAAM;;;CAIV,MAAc,sBACZ,KACA,QACA,MACA,SACsC;EACtC,IAAIC;EACJ,IAAI,gBAAgB;EAEpB,MAAM,cAAc,YAAkD;GACpE,IAAIC,eAAoB;AAExB,OAAI;AACF,eAAW,MAAM,KAAK,aAAa,KAAK,QAAQ,MAAM,QAAQ;YACvD,GAAG;AACV,mBAAe;;AAGjB,OAAI,KAAK,mBAAmB,cAAc,cAAc,EAAE;AACxD;AACA,UAAM,KAAK,MAAM,cAAc;AAC/B,WAAO,aAAa;;AAGtB,OAAI,gBAAgB,KAClB,OAAM;AAGR,UAAO;;AAGT,SAAO,aAAa;;CAGtB,AAAQ,mBAAmB,cAAmB,cAA+B;AAC3E,MAAI,eAAe,KAAK,mBACtB,QAAO;AAGT,MAAI,gBAAgB,MAAM;AACxB,OAAI,wBAAwB,UAC1B,QAAO;AAGT,OACE,wBAAwBF,uCACxB,KAAK,mBAAmB,SAAS,aAAa,SAAS,OAAO,CAE9D,QAAO;;AAIX,SAAO;;;AAKX,IAAa,0BAAb,MAAa,gCACHG,uCAEV;CACE;CAEA,YAAY,KAAe;AACzB,QACE,IAAI,QACJ,wBAAwB,0BAA0B,IAAI,QAAQ,CAC/D;AACD,OAAK,OAAO;;CAGd,iBAA2B;AACzB,SAAO,KAAK;;CAGd,SAA8B;AAI5B,SAHoB,KAAK,KAAK,QAAQ,IAAI,eAAe,EACrB,SAAS,mBAAmB,GAExC,KAAK,KAAK,MAAM,GAAG;;CAG7C,OAAO,0BAA0B,SAAmC;EAGlE,MAAMC,aAA8B,EAAE;AACtC,OAAK,MAAM,SAAS,OAAO,QAAQ,QAAQ,EAAE;AAC3C,OAAI,CAAC,MAAM,QAAQ,MAAM,IAAI,MAAM,WAAW,EAC5C,OAAM,IAAI,MACR,+JACD;AAGH,cAAW,MAAM,MAAM,MAAM;;AAG/B,SAAO"}

package/lib/index-DLlyc54K.d.cts

@@ -1 +0,0 @@
-export { };

package/lib/index-D_m6yoT-.d.cts

@@ -1 +0,0 @@
-export { };

package/lib/index-Fr9oBTRC.d.cts

@@ -1 +0,0 @@
-export { };

package/lib/organization-membership.interface-NCcAKBR2.d.cts

@@ -1,33 +0,0 @@
-import { s as RoleResponse } from "./role.interface-C76vJyRA.cjs";
-
-//#region src/user-management/interfaces/organization-membership.interface.d.ts
-type OrganizationMembershipStatus = 'active' | 'inactive' | 'pending';
-interface OrganizationMembership {
-  object: 'organization_membership';
-  id: string;
-  organizationId: string;
-  organizationName: string;
-  status: OrganizationMembershipStatus;
-  userId: string;
-  createdAt: string;
-  updatedAt: string;
-  role: RoleResponse;
-  roles?: RoleResponse[];
-  customAttributes: Record<string, unknown>;
-}
-interface OrganizationMembershipResponse {
-  object: 'organization_membership';
-  id: string;
-  organization_id: string;
-  organization_name: string;
-  status: OrganizationMembershipStatus;
-  user_id: string;
-  created_at: string;
-  updated_at: string;
-  role: RoleResponse;
-  roles?: RoleResponse[];
-  custom_attributes: Record<string, unknown>;
-}
-//#endregion
-export { OrganizationMembershipResponse as n, OrganizationMembershipStatus as r, OrganizationMembership as t };
-//# sourceMappingURL=organization-membership.interface-NCcAKBR2.d.cts.map

package/lib/profile-and-token.interface-D8SOsn-s.d.cts

@@ -1,18 +0,0 @@
-import { t as UnknownRecord } from "./unknown-record.interface-C5Ru336Z.cjs";
-import { n as OauthTokensResponse, t as OauthTokens } from "./oauth-tokens.interface-Bvew3EOR.cjs";
-import { n as ProfileResponse, t as Profile } from "./profile.interface-CiNXzRbL.cjs";
-
-//#region src/sso/interfaces/profile-and-token.interface.d.ts
-interface ProfileAndToken<CustomAttributesType extends UnknownRecord> {
-  accessToken: string;
-  profile: Profile<CustomAttributesType>;
-  oauthTokens?: OauthTokens;
-}
-interface ProfileAndTokenResponse<CustomAttributesType extends UnknownRecord> {
-  access_token: string;
-  profile: ProfileResponse<CustomAttributesType>;
-  oauth_tokens?: OauthTokensResponse;
-}
-//#endregion
-export { ProfileAndTokenResponse as n, ProfileAndToken as t };
-//# sourceMappingURL=profile-and-token.interface-D8SOsn-s.d.cts.map