@workos-inc/node 8.5.0 → 8.7.0

package/lib/vault/vault.d.cts

@@ -1,2 +1,2 @@
-import { r as Vault } from "../api-keys-OJfN1xfX.cjs";
+import { r as Vault } from "../api-keys-FoD7rQEa.cjs";
 export { Vault };

package/lib/{vault-tqn3i5Ms.cjs → vault-BR8gbCEq.cjs}

@@ -1,7 +1,7 @@
 const require_leb128 = require('./leb128-DvqSoSLE.cjs');
 const require_base64 = require('./base64-DtRxstGt.cjs');
 const require_vault_key_serializer = require('./vault-key.serializer-D5WVcdFV.cjs');
-const require_vault_object_serializer = require('./vault-object.serializer-CwmJwCnO.cjs');
+const require_vault_object_serializer = require('./vault-object.serializer-Cx7rAuca.cjs');
 
 //#region src/vault/vault.ts
 var Vault = class {
@@ -103,4 +103,4 @@ Object.defineProperty(exports, 'Vault', {
     return Vault;
   }
 });
-//# sourceMappingURL=vault-tqn3i5Ms.cjs.map
+//# sourceMappingURL=vault-BR8gbCEq.cjs.map

package/lib/{vault-tqn3i5Ms.cjs.map → vault-BR8gbCEq.cjs.map}

@@ -1 +1 @@
-{"version":3,"file":"vault-tqn3i5Ms.cjs","names":["workos: WorkOS","base64ToUint8Array","decodeUInt32","uint8ArrayToBase64","serializeCreateObjectEntity","deserializeObjectMetadata","deserializeListObjects","desrializeListObjectVersions","deserializeObject","serializeUpdateObjectEntity","deserializeCreateDataKeyResponse","deserializeDecryptDataKeyResponse","encodeUInt32"],"sources":["../src/vault/vault.ts"],"sourcesContent":["import { decodeUInt32, encodeUInt32 } from '../common/utils/leb128';\nimport { CryptoProvider } from '../common/crypto/crypto-provider';\nimport { List, ListResponse } from '../common/interfaces';\nimport { PaginationOptions } from '../index.worker';\nimport { base64ToUint8Array, uint8ArrayToBase64 } from '../common/utils/base64';\nimport type { WorkOS } from '../workos';\nimport {\n  CreateDataKeyOptions,\n  CreateDataKeyResponse,\n  CreateObjectOptions,\n  DataKey,\n  DataKeyPair,\n  DecryptDataKeyOptions,\n  DecryptDataKeyResponse,\n  DeleteObjectOptions,\n  KeyContext,\n  ListObjectVersionsResponse,\n  ObjectDigest,\n  ObjectDigestResponse,\n  ObjectMetadata,\n  ObjectVersion,\n  ReadObjectMetadataResponse,\n  ReadObjectOptions,\n  ReadObjectResponse,\n  UpdateObjectOptions,\n  VaultObject,\n} from './interfaces';\nimport {\n  deserializeCreateDataKeyResponse,\n  deserializeDecryptDataKeyResponse,\n} from './serializers/vault-key.serializer';\nimport {\n  deserializeListObjects,\n  deserializeObject,\n  deserializeObjectMetadata,\n  desrializeListObjectVersions,\n  serializeCreateObjectEntity,\n  serializeUpdateObjectEntity,\n} from './serializers/vault-object.serializer';\n\ninterface Decoded {\n  iv: Uint8Array;\n  tag: Uint8Array;\n  keys: string;\n  ciphertext: Uint8Array;\n}\n\nexport class Vault {\n  private cryptoProvider: CryptoProvider;\n\n  constructor(private readonly workos: WorkOS) {\n    this.cryptoProvider = workos.getCryptoProvider();\n  }\n\n  private decode(payload: string): Decoded {\n    const inputData = base64ToUint8Array(payload);\n    // Use 12 bytes for IV (standard for AES-GCM)\n    const iv = new Uint8Array(inputData.subarray(0, 12));\n    const tag = new Uint8Array(inputData.subarray(12, 28));\n    const { value: keyLen, nextIndex } = decodeUInt32(inputData, 28);\n\n    // Use subarray instead of slice and convert directly to base64\n    const keysBuffer = inputData.subarray(nextIndex, nextIndex + keyLen);\n    const keys = uint8ArrayToBase64(keysBuffer);\n\n    const ciphertext = new Uint8Array(inputData.subarray(nextIndex + keyLen));\n\n    return {\n      iv,\n      tag,\n      keys,\n      ciphertext,\n    };\n  }\n\n  async createObject(options: CreateObjectOptions): Promise<ObjectMetadata> {\n    const { data } = await this.workos.post<ReadObjectMetadataResponse>(\n      `/vault/v1/kv`,\n      serializeCreateObjectEntity(options),\n    );\n    return deserializeObjectMetadata(data);\n  }\n\n  async listObjects(\n    options?: PaginationOptions | undefined,\n  ): Promise<List<ObjectDigest>> {\n    const url = new URL('/vault/v1/kv', this.workos.baseURL);\n    if (options?.after) {\n      url.searchParams.set('after', options.after);\n    }\n    if (options?.limit) {\n      url.searchParams.set('limit', options.limit.toString());\n    }\n\n    const { data } = await this.workos.get<ListResponse<ObjectDigestResponse>>(\n      url.toString(),\n    );\n    return deserializeListObjects(data);\n  }\n\n  async listObjectVersions(\n    options: ReadObjectOptions,\n  ): Promise<ObjectVersion[]> {\n    const { data } = await this.workos.get<ListObjectVersionsResponse>(\n      `/vault/v1/kv/${encodeURIComponent(options.id)}/versions`,\n    );\n    return desrializeListObjectVersions(data);\n  }\n\n  async readObject(options: ReadObjectOptions): Promise<VaultObject> {\n    const { data } = await this.workos.get<ReadObjectResponse>(\n      `/vault/v1/kv/${encodeURIComponent(options.id)}`,\n    );\n    return deserializeObject(data);\n  }\n\n  async readObjectByName(name: string): Promise<VaultObject> {\n    const { data } = await this.workos.get<ReadObjectResponse>(\n      `/vault/v1/kv/name/${encodeURIComponent(name)}`,\n    );\n    return deserializeObject(data);\n  }\n\n  async describeObject(options: ReadObjectOptions): Promise<VaultObject> {\n    const { data } = await this.workos.get<ReadObjectResponse>(\n      `/vault/v1/kv/${encodeURIComponent(options.id)}/metadata`,\n    );\n    return deserializeObject(data);\n  }\n\n  async updateObject(options: UpdateObjectOptions): Promise<VaultObject> {\n    const { data } = await this.workos.put<ReadObjectResponse>(\n      `/vault/v1/kv/${encodeURIComponent(options.id)}`,\n      serializeUpdateObjectEntity(options),\n    );\n    return deserializeObject(data);\n  }\n\n  async deleteObject(options: DeleteObjectOptions): Promise<void> {\n    return this.workos.delete(`/vault/v1/kv/${encodeURIComponent(options.id)}`);\n  }\n\n  async createDataKey(options: CreateDataKeyOptions): Promise<DataKeyPair> {\n    const { data } = await this.workos.post<CreateDataKeyResponse>(\n      `/vault/v1/keys/data-key`,\n      options,\n    );\n    return deserializeCreateDataKeyResponse(data);\n  }\n\n  async decryptDataKey(options: DecryptDataKeyOptions): Promise<DataKey> {\n    const { data } = await this.workos.post<DecryptDataKeyResponse>(\n      `/vault/v1/keys/decrypt`,\n      options,\n    );\n    return deserializeDecryptDataKeyResponse(data);\n  }\n\n  async encrypt(\n    data: string,\n    context: KeyContext,\n    associatedData?: string,\n  ): Promise<string> {\n    const keyPair = await this.createDataKey({\n      context,\n    });\n\n    // Convert base64 key to Uint8Array\n    const encoder = new TextEncoder();\n\n    // Use our cross-runtime base64 utility\n    const key = base64ToUint8Array(keyPair.dataKey.key);\n    const keyBlob = base64ToUint8Array(keyPair.encryptedKeys);\n\n    const prefixLenBuffer = encodeUInt32(keyBlob.length);\n    const aadBuffer = associatedData\n      ? encoder.encode(associatedData)\n      : undefined;\n\n    // Use a 12-byte IV for AES-GCM (industry standard)\n    const iv = this.cryptoProvider.randomBytes(12);\n\n    const {\n      ciphertext,\n      iv: resultIv,\n      tag,\n    } = await this.cryptoProvider.encrypt(\n      encoder.encode(data),\n      key,\n      iv,\n      aadBuffer,\n    );\n\n    // Concatenate all parts into a single array\n    const resultArray = new Uint8Array(\n      resultIv.length +\n        tag.length +\n        prefixLenBuffer.length +\n        keyBlob.length +\n        ciphertext.length,\n    );\n\n    let offset = 0;\n    resultArray.set(resultIv, offset);\n    offset += resultIv.length;\n\n    resultArray.set(tag, offset);\n    offset += tag.length;\n\n    resultArray.set(new Uint8Array(prefixLenBuffer), offset);\n    offset += prefixLenBuffer.length;\n\n    resultArray.set(keyBlob, offset);\n    offset += keyBlob.length;\n\n    resultArray.set(ciphertext, offset);\n\n    // Convert to base64 using our cross-runtime utility\n    return uint8ArrayToBase64(resultArray);\n  }\n\n  async decrypt(\n    encryptedData: string,\n    associatedData?: string,\n  ): Promise<string> {\n    const decoded = this.decode(encryptedData);\n    const dataKey = await this.decryptDataKey({ keys: decoded.keys });\n\n    // Convert base64 key to Uint8Array using our cross-runtime utility\n    const key = base64ToUint8Array(dataKey.key);\n\n    const encoder = new TextEncoder();\n    const aadBuffer = associatedData\n      ? encoder.encode(associatedData)\n      : undefined;\n\n    const decrypted = await this.cryptoProvider.decrypt(\n      decoded.ciphertext,\n      key,\n      decoded.iv,\n      decoded.tag,\n      aadBuffer,\n    );\n\n    return new TextDecoder().decode(decrypted);\n  }\n}\n"],"mappings":";;;;;;AA+CA,IAAa,QAAb,MAAmB;CACjB,AAAQ;CAER,YAAY,AAAiBA,QAAgB;EAAhB;AAC3B,OAAK,iBAAiB,OAAO,mBAAmB;;CAGlD,AAAQ,OAAO,SAA0B;EACvC,MAAM,YAAYC,kCAAmB,QAAQ;EAE7C,MAAM,KAAK,IAAI,WAAW,UAAU,SAAS,GAAG,GAAG,CAAC;EACpD,MAAM,MAAM,IAAI,WAAW,UAAU,SAAS,IAAI,GAAG,CAAC;EACtD,MAAM,EAAE,OAAO,QAAQ,cAAcC,4BAAa,WAAW,GAAG;AAQhE,SAAO;GACL;GACA;GACA,MAPWC,kCADM,UAAU,SAAS,WAAW,YAAY,OAAO,CACzB;GAQzC,YANiB,IAAI,WAAW,UAAU,SAAS,YAAY,OAAO,CAAC;GAOxE;;CAGH,MAAM,aAAa,SAAuD;EACxE,MAAM,EAAE,SAAS,MAAM,KAAK,OAAO,KACjC,gBACAC,4DAA4B,QAAQ,CACrC;AACD,SAAOC,0DAA0B,KAAK;;CAGxC,MAAM,YACJ,SAC6B;EAC7B,MAAM,MAAM,IAAI,IAAI,gBAAgB,KAAK,OAAO,QAAQ;AACxD,MAAI,SAAS,MACX,KAAI,aAAa,IAAI,SAAS,QAAQ,MAAM;AAE9C,MAAI,SAAS,MACX,KAAI,aAAa,IAAI,SAAS,QAAQ,MAAM,UAAU,CAAC;EAGzD,MAAM,EAAE,SAAS,MAAM,KAAK,OAAO,IACjC,IAAI,UAAU,CACf;AACD,SAAOC,uDAAuB,KAAK;;CAGrC,MAAM,mBACJ,SAC0B;EAC1B,MAAM,EAAE,SAAS,MAAM,KAAK,OAAO,IACjC,gBAAgB,mBAAmB,QAAQ,GAAG,CAAC,WAChD;AACD,SAAOC,6DAA6B,KAAK;;CAG3C,MAAM,WAAW,SAAkD;EACjE,MAAM,EAAE,SAAS,MAAM,KAAK,OAAO,IACjC,gBAAgB,mBAAmB,QAAQ,GAAG,GAC/C;AACD,SAAOC,kDAAkB,KAAK;;CAGhC,MAAM,iBAAiB,MAAoC;EACzD,MAAM,EAAE,SAAS,MAAM,KAAK,OAAO,IACjC,qBAAqB,mBAAmB,KAAK,GAC9C;AACD,SAAOA,kDAAkB,KAAK;;CAGhC,MAAM,eAAe,SAAkD;EACrE,MAAM,EAAE,SAAS,MAAM,KAAK,OAAO,IACjC,gBAAgB,mBAAmB,QAAQ,GAAG,CAAC,WAChD;AACD,SAAOA,kDAAkB,KAAK;;CAGhC,MAAM,aAAa,SAAoD;EACrE,MAAM,EAAE,SAAS,MAAM,KAAK,OAAO,IACjC,gBAAgB,mBAAmB,QAAQ,GAAG,IAC9CC,4DAA4B,QAAQ,CACrC;AACD,SAAOD,kDAAkB,KAAK;;CAGhC,MAAM,aAAa,SAA6C;AAC9D,SAAO,KAAK,OAAO,OAAO,gBAAgB,mBAAmB,QAAQ,GAAG,GAAG;;CAG7E,MAAM,cAAc,SAAqD;EACvE,MAAM,EAAE,SAAS,MAAM,KAAK,OAAO,KACjC,2BACA,QACD;AACD,SAAOE,8DAAiC,KAAK;;CAG/C,MAAM,eAAe,SAAkD;EACrE,MAAM,EAAE,SAAS,MAAM,KAAK,OAAO,KACjC,0BACA,QACD;AACD,SAAOC,+DAAkC,KAAK;;CAGhD,MAAM,QACJ,MACA,SACA,gBACiB;EACjB,MAAM,UAAU,MAAM,KAAK,cAAc,EACvC,SACD,CAAC;EAGF,MAAM,UAAU,IAAI,aAAa;EAGjC,MAAM,MAAMV,kCAAmB,QAAQ,QAAQ,IAAI;EACnD,MAAM,UAAUA,kCAAmB,QAAQ,cAAc;EAEzD,MAAM,kBAAkBW,4BAAa,QAAQ,OAAO;EACpD,MAAM,YAAY,iBACd,QAAQ,OAAO,eAAe,GAC9B;EAGJ,MAAM,KAAK,KAAK,eAAe,YAAY,GAAG;EAE9C,MAAM,EACJ,YACA,IAAI,UACJ,QACE,MAAM,KAAK,eAAe,QAC5B,QAAQ,OAAO,KAAK,EACpB,KACA,IACA,UACD;EAGD,MAAM,cAAc,IAAI,WACtB,SAAS,SACP,IAAI,SACJ,gBAAgB,SAChB,QAAQ,SACR,WAAW,OACd;EAED,IAAI,SAAS;AACb,cAAY,IAAI,UAAU,OAAO;AACjC,YAAU,SAAS;AAEnB,cAAY,IAAI,KAAK,OAAO;AAC5B,YAAU,IAAI;AAEd,cAAY,IAAI,IAAI,WAAW,gBAAgB,EAAE,OAAO;AACxD,YAAU,gBAAgB;AAE1B,cAAY,IAAI,SAAS,OAAO;AAChC,YAAU,QAAQ;AAElB,cAAY,IAAI,YAAY,OAAO;AAGnC,SAAOT,kCAAmB,YAAY;;CAGxC,MAAM,QACJ,eACA,gBACiB;EACjB,MAAM,UAAU,KAAK,OAAO,cAAc;EAI1C,MAAM,MAAMF,mCAHI,MAAM,KAAK,eAAe,EAAE,MAAM,QAAQ,MAAM,CAAC,EAG1B,IAAI;EAE3C,MAAM,UAAU,IAAI,aAAa;EACjC,MAAM,YAAY,iBACd,QAAQ,OAAO,eAAe,GAC9B;EAEJ,MAAM,YAAY,MAAM,KAAK,eAAe,QAC1C,QAAQ,YACR,KACA,QAAQ,IACR,QAAQ,KACR,UACD;AAED,SAAO,IAAI,aAAa,CAAC,OAAO,UAAU"}
+{"version":3,"file":"vault-BR8gbCEq.cjs","names":["workos: WorkOS","base64ToUint8Array","decodeUInt32","uint8ArrayToBase64","serializeCreateObjectEntity","deserializeObjectMetadata","deserializeListObjects","desrializeListObjectVersions","deserializeObject","serializeUpdateObjectEntity","deserializeCreateDataKeyResponse","deserializeDecryptDataKeyResponse","encodeUInt32"],"sources":["../src/vault/vault.ts"],"sourcesContent":["import { decodeUInt32, encodeUInt32 } from '../common/utils/leb128';\nimport { CryptoProvider } from '../common/crypto/crypto-provider';\nimport { List, ListResponse } from '../common/interfaces';\nimport { PaginationOptions } from '../index.worker';\nimport { base64ToUint8Array, uint8ArrayToBase64 } from '../common/utils/base64';\nimport type { WorkOS } from '../workos';\nimport {\n  CreateDataKeyOptions,\n  CreateDataKeyResponse,\n  CreateObjectOptions,\n  DataKey,\n  DataKeyPair,\n  DecryptDataKeyOptions,\n  DecryptDataKeyResponse,\n  DeleteObjectOptions,\n  KeyContext,\n  ListObjectVersionsResponse,\n  ObjectDigest,\n  ObjectDigestResponse,\n  ObjectMetadata,\n  ObjectVersion,\n  ReadObjectMetadataResponse,\n  ReadObjectOptions,\n  ReadObjectResponse,\n  UpdateObjectOptions,\n  VaultObject,\n} from './interfaces';\nimport {\n  deserializeCreateDataKeyResponse,\n  deserializeDecryptDataKeyResponse,\n} from './serializers/vault-key.serializer';\nimport {\n  deserializeListObjects,\n  deserializeObject,\n  deserializeObjectMetadata,\n  desrializeListObjectVersions,\n  serializeCreateObjectEntity,\n  serializeUpdateObjectEntity,\n} from './serializers/vault-object.serializer';\n\ninterface Decoded {\n  iv: Uint8Array;\n  tag: Uint8Array;\n  keys: string;\n  ciphertext: Uint8Array;\n}\n\nexport class Vault {\n  private cryptoProvider: CryptoProvider;\n\n  constructor(private readonly workos: WorkOS) {\n    this.cryptoProvider = workos.getCryptoProvider();\n  }\n\n  private decode(payload: string): Decoded {\n    const inputData = base64ToUint8Array(payload);\n    // Use 12 bytes for IV (standard for AES-GCM)\n    const iv = new Uint8Array(inputData.subarray(0, 12));\n    const tag = new Uint8Array(inputData.subarray(12, 28));\n    const { value: keyLen, nextIndex } = decodeUInt32(inputData, 28);\n\n    // Use subarray instead of slice and convert directly to base64\n    const keysBuffer = inputData.subarray(nextIndex, nextIndex + keyLen);\n    const keys = uint8ArrayToBase64(keysBuffer);\n\n    const ciphertext = new Uint8Array(inputData.subarray(nextIndex + keyLen));\n\n    return {\n      iv,\n      tag,\n      keys,\n      ciphertext,\n    };\n  }\n\n  async createObject(options: CreateObjectOptions): Promise<ObjectMetadata> {\n    const { data } = await this.workos.post<ReadObjectMetadataResponse>(\n      `/vault/v1/kv`,\n      serializeCreateObjectEntity(options),\n    );\n    return deserializeObjectMetadata(data);\n  }\n\n  async listObjects(\n    options?: PaginationOptions | undefined,\n  ): Promise<List<ObjectDigest>> {\n    const url = new URL('/vault/v1/kv', this.workos.baseURL);\n    if (options?.after) {\n      url.searchParams.set('after', options.after);\n    }\n    if (options?.limit) {\n      url.searchParams.set('limit', options.limit.toString());\n    }\n\n    const { data } = await this.workos.get<ListResponse<ObjectDigestResponse>>(\n      url.toString(),\n    );\n    return deserializeListObjects(data);\n  }\n\n  async listObjectVersions(\n    options: ReadObjectOptions,\n  ): Promise<ObjectVersion[]> {\n    const { data } = await this.workos.get<ListObjectVersionsResponse>(\n      `/vault/v1/kv/${encodeURIComponent(options.id)}/versions`,\n    );\n    return desrializeListObjectVersions(data);\n  }\n\n  async readObject(options: ReadObjectOptions): Promise<VaultObject> {\n    const { data } = await this.workos.get<ReadObjectResponse>(\n      `/vault/v1/kv/${encodeURIComponent(options.id)}`,\n    );\n    return deserializeObject(data);\n  }\n\n  async readObjectByName(name: string): Promise<VaultObject> {\n    const { data } = await this.workos.get<ReadObjectResponse>(\n      `/vault/v1/kv/name/${encodeURIComponent(name)}`,\n    );\n    return deserializeObject(data);\n  }\n\n  async describeObject(options: ReadObjectOptions): Promise<VaultObject> {\n    const { data } = await this.workos.get<ReadObjectResponse>(\n      `/vault/v1/kv/${encodeURIComponent(options.id)}/metadata`,\n    );\n    return deserializeObject(data);\n  }\n\n  async updateObject(options: UpdateObjectOptions): Promise<VaultObject> {\n    const { data } = await this.workos.put<ReadObjectResponse>(\n      `/vault/v1/kv/${encodeURIComponent(options.id)}`,\n      serializeUpdateObjectEntity(options),\n    );\n    return deserializeObject(data);\n  }\n\n  async deleteObject(options: DeleteObjectOptions): Promise<void> {\n    return this.workos.delete(`/vault/v1/kv/${encodeURIComponent(options.id)}`);\n  }\n\n  async createDataKey(options: CreateDataKeyOptions): Promise<DataKeyPair> {\n    const { data } = await this.workos.post<CreateDataKeyResponse>(\n      `/vault/v1/keys/data-key`,\n      options,\n    );\n    return deserializeCreateDataKeyResponse(data);\n  }\n\n  async decryptDataKey(options: DecryptDataKeyOptions): Promise<DataKey> {\n    const { data } = await this.workos.post<DecryptDataKeyResponse>(\n      `/vault/v1/keys/decrypt`,\n      options,\n    );\n    return deserializeDecryptDataKeyResponse(data);\n  }\n\n  async encrypt(\n    data: string,\n    context: KeyContext,\n    associatedData?: string,\n  ): Promise<string> {\n    const keyPair = await this.createDataKey({\n      context,\n    });\n\n    // Convert base64 key to Uint8Array\n    const encoder = new TextEncoder();\n\n    // Use our cross-runtime base64 utility\n    const key = base64ToUint8Array(keyPair.dataKey.key);\n    const keyBlob = base64ToUint8Array(keyPair.encryptedKeys);\n\n    const prefixLenBuffer = encodeUInt32(keyBlob.length);\n    const aadBuffer = associatedData\n      ? encoder.encode(associatedData)\n      : undefined;\n\n    // Use a 12-byte IV for AES-GCM (industry standard)\n    const iv = this.cryptoProvider.randomBytes(12);\n\n    const {\n      ciphertext,\n      iv: resultIv,\n      tag,\n    } = await this.cryptoProvider.encrypt(\n      encoder.encode(data),\n      key,\n      iv,\n      aadBuffer,\n    );\n\n    // Concatenate all parts into a single array\n    const resultArray = new Uint8Array(\n      resultIv.length +\n        tag.length +\n        prefixLenBuffer.length +\n        keyBlob.length +\n        ciphertext.length,\n    );\n\n    let offset = 0;\n    resultArray.set(resultIv, offset);\n    offset += resultIv.length;\n\n    resultArray.set(tag, offset);\n    offset += tag.length;\n\n    resultArray.set(new Uint8Array(prefixLenBuffer), offset);\n    offset += prefixLenBuffer.length;\n\n    resultArray.set(keyBlob, offset);\n    offset += keyBlob.length;\n\n    resultArray.set(ciphertext, offset);\n\n    // Convert to base64 using our cross-runtime utility\n    return uint8ArrayToBase64(resultArray);\n  }\n\n  async decrypt(\n    encryptedData: string,\n    associatedData?: string,\n  ): Promise<string> {\n    const decoded = this.decode(encryptedData);\n    const dataKey = await this.decryptDataKey({ keys: decoded.keys });\n\n    // Convert base64 key to Uint8Array using our cross-runtime utility\n    const key = base64ToUint8Array(dataKey.key);\n\n    const encoder = new TextEncoder();\n    const aadBuffer = associatedData\n      ? encoder.encode(associatedData)\n      : undefined;\n\n    const decrypted = await this.cryptoProvider.decrypt(\n      decoded.ciphertext,\n      key,\n      decoded.iv,\n      decoded.tag,\n      aadBuffer,\n    );\n\n    return new TextDecoder().decode(decrypted);\n  }\n}\n"],"mappings":";;;;;;AA+CA,IAAa,QAAb,MAAmB;CACjB,AAAQ;CAER,YAAY,AAAiBA,QAAgB;EAAhB;AAC3B,OAAK,iBAAiB,OAAO,mBAAmB;;CAGlD,AAAQ,OAAO,SAA0B;EACvC,MAAM,YAAYC,kCAAmB,QAAQ;EAE7C,MAAM,KAAK,IAAI,WAAW,UAAU,SAAS,GAAG,GAAG,CAAC;EACpD,MAAM,MAAM,IAAI,WAAW,UAAU,SAAS,IAAI,GAAG,CAAC;EACtD,MAAM,EAAE,OAAO,QAAQ,cAAcC,4BAAa,WAAW,GAAG;AAQhE,SAAO;GACL;GACA;GACA,MAPWC,kCADM,UAAU,SAAS,WAAW,YAAY,OAAO,CACzB;GAQzC,YANiB,IAAI,WAAW,UAAU,SAAS,YAAY,OAAO,CAAC;GAOxE;;CAGH,MAAM,aAAa,SAAuD;EACxE,MAAM,EAAE,SAAS,MAAM,KAAK,OAAO,KACjC,gBACAC,4DAA4B,QAAQ,CACrC;AACD,SAAOC,0DAA0B,KAAK;;CAGxC,MAAM,YACJ,SAC6B;EAC7B,MAAM,MAAM,IAAI,IAAI,gBAAgB,KAAK,OAAO,QAAQ;AACxD,MAAI,SAAS,MACX,KAAI,aAAa,IAAI,SAAS,QAAQ,MAAM;AAE9C,MAAI,SAAS,MACX,KAAI,aAAa,IAAI,SAAS,QAAQ,MAAM,UAAU,CAAC;EAGzD,MAAM,EAAE,SAAS,MAAM,KAAK,OAAO,IACjC,IAAI,UAAU,CACf;AACD,SAAOC,uDAAuB,KAAK;;CAGrC,MAAM,mBACJ,SAC0B;EAC1B,MAAM,EAAE,SAAS,MAAM,KAAK,OAAO,IACjC,gBAAgB,mBAAmB,QAAQ,GAAG,CAAC,WAChD;AACD,SAAOC,6DAA6B,KAAK;;CAG3C,MAAM,WAAW,SAAkD;EACjE,MAAM,EAAE,SAAS,MAAM,KAAK,OAAO,IACjC,gBAAgB,mBAAmB,QAAQ,GAAG,GAC/C;AACD,SAAOC,kDAAkB,KAAK;;CAGhC,MAAM,iBAAiB,MAAoC;EACzD,MAAM,EAAE,SAAS,MAAM,KAAK,OAAO,IACjC,qBAAqB,mBAAmB,KAAK,GAC9C;AACD,SAAOA,kDAAkB,KAAK;;CAGhC,MAAM,eAAe,SAAkD;EACrE,MAAM,EAAE,SAAS,MAAM,KAAK,OAAO,IACjC,gBAAgB,mBAAmB,QAAQ,GAAG,CAAC,WAChD;AACD,SAAOA,kDAAkB,KAAK;;CAGhC,MAAM,aAAa,SAAoD;EACrE,MAAM,EAAE,SAAS,MAAM,KAAK,OAAO,IACjC,gBAAgB,mBAAmB,QAAQ,GAAG,IAC9CC,4DAA4B,QAAQ,CACrC;AACD,SAAOD,kDAAkB,KAAK;;CAGhC,MAAM,aAAa,SAA6C;AAC9D,SAAO,KAAK,OAAO,OAAO,gBAAgB,mBAAmB,QAAQ,GAAG,GAAG;;CAG7E,MAAM,cAAc,SAAqD;EACvE,MAAM,EAAE,SAAS,MAAM,KAAK,OAAO,KACjC,2BACA,QACD;AACD,SAAOE,8DAAiC,KAAK;;CAG/C,MAAM,eAAe,SAAkD;EACrE,MAAM,EAAE,SAAS,MAAM,KAAK,OAAO,KACjC,0BACA,QACD;AACD,SAAOC,+DAAkC,KAAK;;CAGhD,MAAM,QACJ,MACA,SACA,gBACiB;EACjB,MAAM,UAAU,MAAM,KAAK,cAAc,EACvC,SACD,CAAC;EAGF,MAAM,UAAU,IAAI,aAAa;EAGjC,MAAM,MAAMV,kCAAmB,QAAQ,QAAQ,IAAI;EACnD,MAAM,UAAUA,kCAAmB,QAAQ,cAAc;EAEzD,MAAM,kBAAkBW,4BAAa,QAAQ,OAAO;EACpD,MAAM,YAAY,iBACd,QAAQ,OAAO,eAAe,GAC9B;EAGJ,MAAM,KAAK,KAAK,eAAe,YAAY,GAAG;EAE9C,MAAM,EACJ,YACA,IAAI,UACJ,QACE,MAAM,KAAK,eAAe,QAC5B,QAAQ,OAAO,KAAK,EACpB,KACA,IACA,UACD;EAGD,MAAM,cAAc,IAAI,WACtB,SAAS,SACP,IAAI,SACJ,gBAAgB,SAChB,QAAQ,SACR,WAAW,OACd;EAED,IAAI,SAAS;AACb,cAAY,IAAI,UAAU,OAAO;AACjC,YAAU,SAAS;AAEnB,cAAY,IAAI,KAAK,OAAO;AAC5B,YAAU,IAAI;AAEd,cAAY,IAAI,IAAI,WAAW,gBAAgB,EAAE,OAAO;AACxD,YAAU,gBAAgB;AAE1B,cAAY,IAAI,SAAS,OAAO;AAChC,YAAU,QAAQ;AAElB,cAAY,IAAI,YAAY,OAAO;AAGnC,SAAOT,kCAAmB,YAAY;;CAGxC,MAAM,QACJ,eACA,gBACiB;EACjB,MAAM,UAAU,KAAK,OAAO,cAAc;EAI1C,MAAM,MAAMF,mCAHI,MAAM,KAAK,eAAe,EAAE,MAAM,QAAQ,MAAM,CAAC,EAG1B,IAAI;EAE3C,MAAM,UAAU,IAAI,aAAa;EACjC,MAAM,YAAY,iBACd,QAAQ,OAAO,eAAe,GAC9B;EAEJ,MAAM,YAAY,MAAM,KAAK,eAAe,QAC1C,QAAQ,YACR,KACA,QAAQ,IACR,QAAQ,KACR,UACD;AAED,SAAO,IAAI,aAAa,CAAC,OAAO,UAAU"}

package/lib/{vault-object.serializer-CwmJwCnO.cjs → vault-object.serializer-Cx7rAuca.cjs}

@@ -12,7 +12,7 @@ const deserializeObjectMetadata = (metadata) => ({
 const deserializeObject = (object) => ({
 	id: object.id,
 	name: object.name,
-	value: object.value,
+	...object.value !== void 0 && { value: object.value },
 	metadata: deserializeObjectMetadata(object.metadata)
 });
 const deserializeObjectDigest = (digest) => ({
@@ -24,8 +24,8 @@ const deserializeListObjects = (list) => ({
 	object: "list",
 	data: list.data.map(deserializeObjectDigest),
 	listMetadata: {
-		after: list.list_metadata.after ?? void 0,
-		before: list.list_metadata.before ?? void 0
+		...list.list_metadata.after !== void 0 && { after: list.list_metadata.after },
+		...list.list_metadata.before !== void 0 && { before: list.list_metadata.before }
 	}
 });
 const desrializeListObjectVersions = (list) => list.data.map(deserializeObjectVersion);
@@ -81,4 +81,4 @@ Object.defineProperty(exports, 'serializeUpdateObjectEntity', {
     return serializeUpdateObjectEntity;
   }
 });
-//# sourceMappingURL=vault-object.serializer-CwmJwCnO.cjs.map
+//# sourceMappingURL=vault-object.serializer-Cx7rAuca.cjs.map

package/lib/vault-object.serializer-Cx7rAuca.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"vault-object.serializer-Cx7rAuca.cjs","names":[],"sources":["../src/vault/serializers/vault-object.serializer.ts"],"sourcesContent":["import { List, ListResponse } from '../../common/interfaces';\nimport {\n  ReadObjectMetadataResponse,\n  ReadObjectResponse,\n  UpdateObjectOptions,\n  UpdateObjectEntity,\n  ObjectMetadata,\n  VaultObject,\n  ObjectVersionResponse,\n  ObjectVersion,\n  CreateObjectOptions,\n  CreateObjectEntity,\n  ObjectDigestResponse,\n  ObjectDigest,\n  ListObjectVersionsResponse,\n} from '../interfaces';\n\nexport const deserializeObjectMetadata = (\n  metadata: ReadObjectMetadataResponse,\n): ObjectMetadata => ({\n  context: metadata.context,\n  environmentId: metadata.environment_id,\n  id: metadata.id,\n  keyId: metadata.key_id,\n  updatedAt: new Date(Date.parse(metadata.updated_at)),\n  updatedBy: metadata.updated_by,\n  versionId: metadata.version_id,\n});\n\nexport const deserializeObject = (object: ReadObjectResponse): VaultObject => ({\n  id: object.id,\n  name: object.name,\n  ...(object.value !== undefined && { value: object.value }),\n  metadata: deserializeObjectMetadata(object.metadata),\n});\n\nconst deserializeObjectDigest = (\n  digest: ObjectDigestResponse,\n): ObjectDigest => ({\n  id: digest.id,\n  name: digest.name,\n  updatedAt: new Date(Date.parse(digest.updated_at)),\n});\n\nexport const deserializeListObjects = (\n  list: ListResponse<ObjectDigestResponse>,\n): List<ObjectDigest> => ({\n  object: 'list',\n  data: list.data.map(deserializeObjectDigest),\n  listMetadata: {\n    ...(list.list_metadata.after !== undefined && {\n      after: list.list_metadata.after,\n    }),\n    ...(list.list_metadata.before !== undefined && {\n      before: list.list_metadata.before,\n    }),\n  },\n});\n\nexport const desrializeListObjectVersions = (\n  list: ListObjectVersionsResponse,\n): ObjectVersion[] => list.data.map(deserializeObjectVersion);\n\nconst deserializeObjectVersion = (\n  version: ObjectVersionResponse,\n): ObjectVersion => ({\n  createdAt: new Date(Date.parse(version.created_at)),\n  currentVersion: version.current_version,\n  id: version.id,\n});\n\nexport const serializeCreateObjectEntity = (\n  options: CreateObjectOptions,\n): CreateObjectEntity => ({\n  name: options.name,\n  value: options.value,\n  key_context: options.context,\n});\n\nexport const serializeUpdateObjectEntity = (\n  options: UpdateObjectOptions,\n): UpdateObjectEntity => ({\n  value: options.value,\n  version_check: options.versionCheck,\n});\n"],"mappings":";;AAiBA,MAAa,6BACX,cACoB;CACpB,SAAS,SAAS;CAClB,eAAe,SAAS;CACxB,IAAI,SAAS;CACb,OAAO,SAAS;CAChB,WAAW,IAAI,KAAK,KAAK,MAAM,SAAS,WAAW,CAAC;CACpD,WAAW,SAAS;CACpB,WAAW,SAAS;CACrB;AAED,MAAa,qBAAqB,YAA6C;CAC7E,IAAI,OAAO;CACX,MAAM,OAAO;CACb,GAAI,OAAO,UAAU,UAAa,EAAE,OAAO,OAAO,OAAO;CACzD,UAAU,0BAA0B,OAAO,SAAS;CACrD;AAED,MAAM,2BACJ,YACkB;CAClB,IAAI,OAAO;CACX,MAAM,OAAO;CACb,WAAW,IAAI,KAAK,KAAK,MAAM,OAAO,WAAW,CAAC;CACnD;AAED,MAAa,0BACX,UACwB;CACxB,QAAQ;CACR,MAAM,KAAK,KAAK,IAAI,wBAAwB;CAC5C,cAAc;EACZ,GAAI,KAAK,cAAc,UAAU,UAAa,EAC5C,OAAO,KAAK,cAAc,OAC3B;EACD,GAAI,KAAK,cAAc,WAAW,UAAa,EAC7C,QAAQ,KAAK,cAAc,QAC5B;EACF;CACF;AAED,MAAa,gCACX,SACoB,KAAK,KAAK,IAAI,yBAAyB;AAE7D,MAAM,4BACJ,aACmB;CACnB,WAAW,IAAI,KAAK,KAAK,MAAM,QAAQ,WAAW,CAAC;CACnD,gBAAgB,QAAQ;CACxB,IAAI,QAAQ;CACb;AAED,MAAa,+BACX,aACwB;CACxB,MAAM,QAAQ;CACd,OAAO,QAAQ;CACf,aAAa,QAAQ;CACtB;AAED,MAAa,+BACX,aACwB;CACxB,OAAO,QAAQ;CACf,eAAe,QAAQ;CACxB"}

package/lib/{verify-challenge-options-Cnd5QHmo.d.cts → verify-challenge-options-CkbCUSJv.d.cts}

@@ -5,4 +5,4 @@ interface VerifyChallengeOptions {
 }
 //#endregion
 export { VerifyChallengeOptions as t };
-//# sourceMappingURL=verify-challenge-options-Cnd5QHmo.d.cts.map
+//# sourceMappingURL=verify-challenge-options-CkbCUSJv.d.cts.map

package/lib/{verify-challenge-response-Cxjr42mg.d.cts → verify-challenge-response-Dlb5HPTC.d.cts}

@@ -1,4 +1,4 @@
-import { n as ChallengeResponse, t as Challenge } from "./challenge.interface-UNMAxHWR.cjs";
+import { n as ChallengeResponse, t as Challenge } from "./challenge.interface-Dm34-dD_.cjs";
 
 //#region src/mfa/interfaces/verify-challenge-response.d.ts
 interface VerifyResponse {
@@ -11,4 +11,4 @@ interface VerifyResponseResponse {
 }
 //#endregion
 export { VerifyResponseResponse as n, VerifyResponse as t };
-//# sourceMappingURL=verify-challenge-response-Cxjr42mg.d.cts.map
+//# sourceMappingURL=verify-challenge-response-Dlb5HPTC.d.cts.map

package/lib/{verify-response.serializer-l6VbQpg3.d.cts → verify-response.serializer-CFug_fb9.d.cts}

@@ -1,7 +1,7 @@
-import { n as VerifyResponseResponse, t as VerifyResponse } from "./verify-challenge-response-Cxjr42mg.cjs";
+import { n as VerifyResponseResponse, t as VerifyResponse } from "./verify-challenge-response-Dlb5HPTC.cjs";
 
 //#region src/mfa/serializers/verify-response.serializer.d.ts
 declare const deserializeVerifyResponse: (verifyResponse: VerifyResponseResponse) => VerifyResponse;
 //#endregion
 export { deserializeVerifyResponse as t };
-//# sourceMappingURL=verify-response.serializer-l6VbQpg3.d.cts.map
+//# sourceMappingURL=verify-response.serializer-CFug_fb9.d.cts.map

package/lib/{warning.interface-D8U1ON2d.d.cts → warning.interface-9qt63wBc.d.cts}

@@ -10,4 +10,4 @@ interface MissingContextKeysWarning extends BaseWarning {
 type Warning = BaseWarning | MissingContextKeysWarning;
 //#endregion
 export { MissingContextKeysWarning as n, Warning as r, BaseWarning as t };
-//# sourceMappingURL=warning.interface-D8U1ON2d.d.cts.map
+//# sourceMappingURL=warning.interface-9qt63wBc.d.cts.map

package/lib/{warrant-op.enum-2bx2ed9X.d.cts → warrant-op.enum-CYwLWhRz.d.cts}

@@ -5,4 +5,4 @@ declare enum WarrantOp {
 }
 //#endregion
 export { WarrantOp as t };
-//# sourceMappingURL=warrant-op.enum-2bx2ed9X.d.cts.map
+//# sourceMappingURL=warrant-op.enum-CYwLWhRz.d.cts.map

package/lib/{warrant-token.interface-NdVyFw9l.d.cts → warrant-token.interface-BhaSf4pQ.d.cts}

@@ -7,4 +7,4 @@ interface WarrantTokenResponse {
 }
 //#endregion
 export { WarrantTokenResponse as n, WarrantToken as t };
-//# sourceMappingURL=warrant-token.interface-NdVyFw9l.d.cts.map
+//# sourceMappingURL=warrant-token.interface-BhaSf4pQ.d.cts.map

package/lib/{warrant-token.serializer-DPrcN4qY.d.cts → warrant-token.serializer-ron-g41a.d.cts}

@@ -1,7 +1,7 @@
-import { n as WarrantTokenResponse, t as WarrantToken } from "./warrant-token.interface-NdVyFw9l.cjs";
+import { n as WarrantTokenResponse, t as WarrantToken } from "./warrant-token.interface-BhaSf4pQ.cjs";
 
 //#region src/fga/serializers/warrant-token.serializer.d.ts
 declare const deserializeWarrantToken: (warrantToken: WarrantTokenResponse) => WarrantToken;
 //#endregion
 export { deserializeWarrantToken as t };
-//# sourceMappingURL=warrant-token.serializer-DPrcN4qY.d.cts.map
+//# sourceMappingURL=warrant-token.serializer-ron-g41a.d.cts.map

package/lib/{warrant.interface-DPnDplf7.d.cts → warrant.interface-5GMD1PlN.d.cts}

@@ -1,6 +1,6 @@
-import { t as GetOptions } from "./get-options.interface-DoL0T9e1.cjs";
-import { c as ResourceInterface, l as ResourceOptions } from "./resource.interface-D-MMSzFn.cjs";
-import { t as WarrantOp } from "./warrant-op.enum-2bx2ed9X.cjs";
+import { t as GetOptions } from "./get-options.interface-BsU2gWu0.cjs";
+import { c as ResourceInterface, l as ResourceOptions } from "./resource.interface-DdilIYi7.cjs";
+import { t as WarrantOp } from "./warrant-op.enum-CYwLWhRz.cjs";
 
 //#region src/fga/interfaces/warrant.interface.d.ts
 interface ListWarrantsOptions {
@@ -11,7 +11,7 @@ interface ListWarrantsOptions {
   subjectId?: string;
   subjectRelation?: string;
   limit?: number;
-  after?: string;
+  after?: string | null;
 }
 interface SerializedListWarrantsOptions {
   resource_type?: string;
@@ -21,7 +21,7 @@ interface SerializedListWarrantsOptions {
   subject_id?: string;
   subject_relation?: string;
   limit?: number;
-  after?: string;
+  after?: string | null;
 }
 interface PolicyContext {
   [key: string]: any;
@@ -68,4 +68,4 @@ interface WarrantResponse {
 }
 //#endregion
 export { SerializedSubject as a, Warrant as c, SerializedListWarrantsOptions as i, WarrantResponse as l, ListWarrantsRequestOptions as n, SerializedWriteWarrantOptions as o, PolicyContext as r, Subject as s, ListWarrantsOptions as t, WriteWarrantOptions as u };
-//# sourceMappingURL=warrant.interface-DPnDplf7.d.cts.map
+//# sourceMappingURL=warrant.interface-5GMD1PlN.d.cts.map

package/lib/{warrant.serializer-DSuf7fH7.d.cts → warrant.serializer-OpTafbUe.d.cts}

@@ -1,7 +1,7 @@
-import { c as Warrant, l as WarrantResponse } from "./warrant.interface-DPnDplf7.cjs";
+import { c as Warrant, l as WarrantResponse } from "./warrant.interface-5GMD1PlN.cjs";
 
 //#region src/fga/serializers/warrant.serializer.d.ts
 declare const deserializeWarrant: (warrant: WarrantResponse) => Warrant;
 //#endregion
 export { deserializeWarrant as t };
-//# sourceMappingURL=warrant.serializer-DSuf7fH7.d.cts.map
+//# sourceMappingURL=warrant.serializer-OpTafbUe.d.cts.map

package/lib/webhooks/webhooks.cjs

@@ -1,3 +1,3 @@
-const require_webhooks = require('../webhooks-BxQxp6AJ.cjs');
+const require_webhooks = require('../webhooks-wNAbF-1o.cjs');
 
 exports.Webhooks = require_webhooks.Webhooks;

package/lib/webhooks/webhooks.d.cts

@@ -1,2 +1,2 @@
-import { t as Webhooks } from "../webhooks-B1jXr6Fj.cjs";
+import { t as Webhooks } from "../webhooks-D2t2W-Z_.cjs";
 export { Webhooks };

package/lib/{webhooks-B1jXr6Fj.d.cts → webhooks-D2t2W-Z_.d.cts}

@@ -1,5 +1,5 @@
 import { t as CryptoProvider } from "./crypto-provider-EnxiazDt.cjs";
-import { ct as Event } from "./index-BIw0X_SV.cjs";
+import { ct as Event } from "./index-zd2lGEmr.cjs";
 
 //#region src/webhooks/webhooks.d.ts
 declare class Webhooks {
@@ -32,4 +32,4 @@ declare class Webhooks {
 }
 //#endregion
 export { Webhooks as t };
-//# sourceMappingURL=webhooks-B1jXr6Fj.d.cts.map
+//# sourceMappingURL=webhooks-D2t2W-Z_.d.cts.map

package/lib/{webhooks-BxQxp6AJ.cjs → webhooks-wNAbF-1o.cjs}

@@ -1,4 +1,4 @@
-const require_event_serializer = require('./event.serializer-sODBRJP0.cjs');
+const require_event_serializer = require('./event.serializer-DQe8qLHH.cjs');
 const require_signature_provider = require('./signature-provider-DBHzmT8N.cjs');
 
 //#region src/webhooks/webhooks.ts
@@ -35,4 +35,4 @@ Object.defineProperty(exports, 'Webhooks', {
     return Webhooks;
   }
 });
-//# sourceMappingURL=webhooks-BxQxp6AJ.cjs.map
+//# sourceMappingURL=webhooks-wNAbF-1o.cjs.map

package/lib/{webhooks-BxQxp6AJ.cjs.map → webhooks-wNAbF-1o.cjs.map}

@@ -1 +1 @@
-{"version":3,"file":"webhooks-BxQxp6AJ.cjs","names":["SignatureProvider","deserializeEvent"],"sources":["../src/webhooks/webhooks.ts"],"sourcesContent":["import { deserializeEvent } from '../common/serializers';\nimport { Event, EventResponse } from '../common/interfaces';\nimport { SignatureProvider } from '../common/crypto/signature-provider';\nimport { CryptoProvider } from '../common/crypto/crypto-provider';\n\nexport class Webhooks {\n  private signatureProvider: SignatureProvider;\n\n  constructor(cryptoProvider: CryptoProvider) {\n    this.signatureProvider = new SignatureProvider(cryptoProvider);\n  }\n\n  get verifyHeader() {\n    return this.signatureProvider.verifyHeader.bind(this.signatureProvider);\n  }\n\n  get computeSignature() {\n    return this.signatureProvider.computeSignature.bind(this.signatureProvider);\n  }\n\n  get getTimestampAndSignatureHash() {\n    return this.signatureProvider.getTimestampAndSignatureHash.bind(\n      this.signatureProvider,\n    );\n  }\n\n  async constructEvent({\n    payload,\n    sigHeader,\n    secret,\n    tolerance = 180000,\n  }: {\n    payload: Record<string, unknown>;\n    sigHeader: string;\n    secret: string;\n    tolerance?: number;\n  }): Promise<Event> {\n    const options = { payload, sigHeader, secret, tolerance };\n    await this.verifyHeader(options);\n\n    const webhookPayload = payload as unknown as EventResponse;\n\n    return deserializeEvent(webhookPayload);\n  }\n}\n"],"mappings":";;;;AAKA,IAAa,WAAb,MAAsB;CACpB,AAAQ;CAER,YAAY,gBAAgC;AAC1C,OAAK,oBAAoB,IAAIA,6CAAkB,eAAe;;CAGhE,IAAI,eAAe;AACjB,SAAO,KAAK,kBAAkB,aAAa,KAAK,KAAK,kBAAkB;;CAGzE,IAAI,mBAAmB;AACrB,SAAO,KAAK,kBAAkB,iBAAiB,KAAK,KAAK,kBAAkB;;CAG7E,IAAI,+BAA+B;AACjC,SAAO,KAAK,kBAAkB,6BAA6B,KACzD,KAAK,kBACN;;CAGH,MAAM,eAAe,EACnB,SACA,WACA,QACA,YAAY,QAMK;EACjB,MAAM,UAAU;GAAE;GAAS;GAAW;GAAQ;GAAW;AACzD,QAAM,KAAK,aAAa,QAAQ;AAIhC,SAAOC,0CAFgB,QAEgB"}
+{"version":3,"file":"webhooks-wNAbF-1o.cjs","names":["SignatureProvider","deserializeEvent"],"sources":["../src/webhooks/webhooks.ts"],"sourcesContent":["import { deserializeEvent } from '../common/serializers';\nimport { Event, EventResponse } from '../common/interfaces';\nimport { SignatureProvider } from '../common/crypto/signature-provider';\nimport { CryptoProvider } from '../common/crypto/crypto-provider';\n\nexport class Webhooks {\n  private signatureProvider: SignatureProvider;\n\n  constructor(cryptoProvider: CryptoProvider) {\n    this.signatureProvider = new SignatureProvider(cryptoProvider);\n  }\n\n  get verifyHeader() {\n    return this.signatureProvider.verifyHeader.bind(this.signatureProvider);\n  }\n\n  get computeSignature() {\n    return this.signatureProvider.computeSignature.bind(this.signatureProvider);\n  }\n\n  get getTimestampAndSignatureHash() {\n    return this.signatureProvider.getTimestampAndSignatureHash.bind(\n      this.signatureProvider,\n    );\n  }\n\n  async constructEvent({\n    payload,\n    sigHeader,\n    secret,\n    tolerance = 180000,\n  }: {\n    payload: Record<string, unknown>;\n    sigHeader: string;\n    secret: string;\n    tolerance?: number;\n  }): Promise<Event> {\n    const options = { payload, sigHeader, secret, tolerance };\n    await this.verifyHeader(options);\n\n    const webhookPayload = payload as unknown as EventResponse;\n\n    return deserializeEvent(webhookPayload);\n  }\n}\n"],"mappings":";;;;AAKA,IAAa,WAAb,MAAsB;CACpB,AAAQ;CAER,YAAY,gBAAgC;AAC1C,OAAK,oBAAoB,IAAIA,6CAAkB,eAAe;;CAGhE,IAAI,eAAe;AACjB,SAAO,KAAK,kBAAkB,aAAa,KAAK,KAAK,kBAAkB;;CAGzE,IAAI,mBAAmB;AACrB,SAAO,KAAK,kBAAkB,iBAAiB,KAAK,KAAK,kBAAkB;;CAG7E,IAAI,+BAA+B;AACjC,SAAO,KAAK,kBAAkB,6BAA6B,KACzD,KAAK,kBACN;;CAGH,MAAM,eAAe,EACnB,SACA,WACA,QACA,YAAY,QAMK;EACjB,MAAM,UAAU;GAAE;GAAS;GAAW;GAAQ;GAAW;AACzD,QAAM,KAAK,aAAa,QAAQ;AAIhC,SAAOC,0CAFgB,QAEgB"}

package/lib/widgets/interfaces/get-token.d.cts

@@ -1,2 +1,2 @@
-import { a as WidgetScope, i as SerializedGetTokenOptions, n as GetTokenResponse, o as deserializeGetTokenResponse, r as GetTokenResponseResponse, s as serializeGetTokenOptions, t as GetTokenOptions } from "../../get-token-xmqdj8Zh.cjs";
+import { a as WidgetScope, i as SerializedGetTokenOptions, n as GetTokenResponse, o as deserializeGetTokenResponse, r as GetTokenResponseResponse, s as serializeGetTokenOptions, t as GetTokenOptions } from "../../get-token-YoisQSFe.cjs";
 export { GetTokenOptions, GetTokenResponse, GetTokenResponseResponse, SerializedGetTokenOptions, WidgetScope, deserializeGetTokenResponse, serializeGetTokenOptions };

package/lib/widgets/widgets.d.cts

@@ -1,2 +1,2 @@
-import { f as Widgets } from "../api-keys-OJfN1xfX.cjs";
+import { f as Widgets } from "../api-keys-FoD7rQEa.cjs";
 export { Widgets };

package/lib/{workos-y5BVhQQQ.cjs → workos-2uUDl0FZ.cjs}

@@ -8,34 +8,37 @@ const require_unauthorized_exception = require('./unauthorized.exception-hTKkIjP
 const require_unprocessable_entity_exception = require('./unprocessable-entity.exception-BdCyQCYX.cjs');
 const require_pkce = require('./pkce-Bu_KcDMw.cjs');
 const require_api_keys = require('./api-keys-DpNACVjB.cjs');
-const require_directory_sync = require('./directory-sync-BGWLeGge.cjs');
-const require_events = require('./events-CgfiCVFD.cjs');
-const require_organizations = require('./organizations-BvnCc0n6.cjs');
-const require_organization_domains = require('./organization-domains-BINLS8SW.cjs');
+const require_directory_sync = require('./directory-sync-DShb6WkQ.cjs');
+const require_events = require('./events-CPdcLR1v.cjs');
+const require_organizations = require('./organizations-Cj9rLRWq.cjs');
+const require_organization_domains = require('./organization-domains-DhcxuHzd.cjs');
 const require_passwordless = require('./passwordless-Cbbfvvgq.cjs');
 const require_pipes = require('./pipes-C6PJAgY4.cjs');
 const require_portal = require('./portal-Bw4FWwRi.cjs');
-const require_sso = require('./sso-FWyObHDp.cjs');
-const require_webhooks = require('./webhooks-BxQxp6AJ.cjs');
+const require_sso = require('./sso-D_9tMqlC.cjs');
+const require_webhooks = require('./webhooks-wNAbF-1o.cjs');
 const require_mfa = require('./mfa-Ck3-dTm_.cjs');
 const require_audit_logs = require('./audit-logs-BXPMHkYl.cjs');
 const require_env = require('./env-CFSscuz_.cjs');
-const require_user_management = require('./user-management-CTQFnn4h.cjs');
-const require_fga = require('./fga-BXWRwaKi.cjs');
-const require_feature_flags = require('./feature-flags-D0BnuozI.cjs');
-const require_http_client = require('./http-client-DZQxEd4J.cjs');
+const require_user_management = require('./user-management-CJj1rMco.cjs');
+const require_fga = require('./fga-BPfLQ33S.cjs');
+const require_feature_flags = require('./feature-flags-2wzyH7on.cjs');
+const require_http_client = require('./http-client-DTfNcqaR.cjs');
 const require_subtle_crypto_provider = require('./subtle-crypto-provider-RQC7QPlf.cjs');
 const require_parse_error = require('./parse-error-Dr-zK4Ai.cjs');
-const require_fetch_client = require('./fetch-client-Br9ipQ8n.cjs');
+const require_fetch_client = require('./fetch-client-BGoo0snw.cjs');
 const require_widgets = require('./widgets-BckzS1Py.cjs');
-const require_actions = require('./actions-CVHQXngv.cjs');
-const require_authorization = require('./authorization-Ccp2pNRF.cjs');
-const require_vault = require('./vault-tqn3i5Ms.cjs');
+const require_actions = require('./actions-DRojhekm.cjs');
+const require_authorization = require('./authorization-CFjcVm0f.cjs');
+const require_vault = require('./vault-BR8gbCEq.cjs');
 const require_conflict_exception = require('./conflict.exception-DNThkhe4.cjs');
 const require_runtime_info = require('./runtime-info-D11Gtx8I.cjs');
 
+//#region package.json
+var version = "8.7.0";
+
+//#endregion
 //#region src/workos.ts
-const VERSION = "8.5.0";
 const DEFAULT_HOSTNAME = "api.workos.com";
 const HEADER_AUTHORIZATION = "Authorization";
 const HEADER_IDEMPOTENCY_KEY = "Idempotency-Key";
@@ -112,12 +115,12 @@ var WorkOS = class {
 		this.client = this.createHttpClient(this.options, userAgent);
 	}
 	createUserAgent(options) {
-		let userAgent = `workos-node/${VERSION}`;
+		let userAgent = `workos-node/${version}`;
 		const { name: runtimeName, version: runtimeVersion } = require_runtime_info.getRuntimeInfo();
 		userAgent += ` (${runtimeName}${runtimeVersion ? `/${runtimeVersion}` : ""})`;
 		if (options.appInfo) {
-			const { name, version } = options.appInfo;
-			userAgent += ` ${name}: ${version}`;
+			const { name, version: version$1 } = options.appInfo;
+			userAgent += ` ${name}: ${version$1}`;
 		}
 		return userAgent;
 	}
@@ -142,7 +145,7 @@ var WorkOS = class {
 		});
 	}
 	get version() {
-		return VERSION;
+		return version;
 	}
 	/**
 	* Require API key for methods that need it.
@@ -341,4 +344,4 @@ Object.defineProperty(exports, 'WorkOS', {
     return WorkOS;
   }
 });
-//# sourceMappingURL=workos-y5BVhQQQ.cjs.map
+//# sourceMappingURL=workos-2uUDl0FZ.cjs.map

package/lib/workos-2uUDl0FZ.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"workos-2uUDl0FZ.cjs","names":["ApiKeys","AuditLogs","Authorization","DirectorySync","Events","FeatureFlags","FGA","Mfa","Organizations","OrganizationDomains","Passwordless","Pipes","Portal","SSO","Vault","Widgets","getEnv","protocol: string","apiHostname: string","port: number | undefined","PKCE","UserManagement","userAgent: string","VERSION","getRuntimeInfo","version","Webhooks","Actions","SubtleCryptoProvider","headers: Record<string, string>","FetchHttpClient","ApiKeyRequiredException","requestHeaders: Record<string, string>","res: HttpClientResponseInterface","ParseError","HttpClientError","UnauthorizedException","ConflictException","UnprocessableEntityException","NotFoundException","RateLimitExceededException","error","OauthException","BadRequestException","GenericServerException"],"sources":["../package.json","../src/workos.ts"],"sourcesContent":["{\n  \"version\": \"8.7.0\",\n  \"name\": \"@workos-inc/node\",\n  \"author\": \"WorkOS\",\n  \"description\": \"A Node wrapper for the WorkOS API\",\n  \"homepage\": \"https://github.com/workos/workos-node\",\n  \"license\": \"MIT\",\n  \"keywords\": [\n    \"workos\"\n  ],\n  \"engines\": {\n    \"node\": \">=20.15.0\"\n  },\n  \"type\": \"module\",\n  \"main\": \"./lib/index.cjs\",\n  \"module\": \"./lib/index.js\",\n  \"types\": \"./lib/index.d.ts\",\n  \"files\": [\n    \"lib/\",\n    \"package.json\"\n  ],\n  \"repository\": {\n    \"type\": \"git\",\n    \"url\": \"git+https://github.com/workos/workos-node.git\"\n  },\n  \"bugs\": {\n    \"url\": \"https://github.com/workos/workos-node/issues\"\n  },\n  \"scripts\": {\n    \"clean\": \"rm -rf lib\",\n    \"build\": \"tsdown\",\n    \"build:watch\": \"tsdown --watch\",\n    \"lint\": \"eslint\",\n    \"test\": \"jest\",\n    \"test:watch\": \"jest --watch\",\n    \"check:runtimes\": \"tsx scripts/ecosystem-check.ts\",\n    \"check:types\": \"attw --pack . --ignore-rules no-resolution\",\n    \"prettier\": \"prettier \\\"src/**/*.{js,ts,tsx}\\\" --check\",\n    \"format\": \"prettier \\\"src/**/*.{js,ts,tsx}\\\" --write\",\n    \"prepublishOnly\": \"npm run build\",\n    \"typecheck\": \"tsc --noEmit\"\n  },\n  \"dependencies\": {\n    \"iron-webcrypto\": \"^2.0.0\",\n    \"jose\": \"~6.1.0\"\n  },\n  \"devDependencies\": {\n    \"@arethetypeswrong/cli\": \"^0.18.2\",\n    \"@babel/plugin-transform-modules-commonjs\": \"^7.26.3\",\n    \"@babel/preset-env\": \"^7.26.9\",\n    \"@babel/preset-typescript\": \"^7.27.0\",\n    \"@eslint/js\": \"^9.37.0\",\n    \"@types/jest\": \"^30.0.0\",\n    \"@types/node\": \"~20\",\n    \"@typescript-eslint/parser\": \"^8.46.0\",\n    \"babel-jest\": \"^30.2.0\",\n    \"eslint\": \"^9.37.0\",\n    \"eslint-plugin-jest\": \"^29.0.1\",\n    \"eslint-plugin-n\": \"^17.23.1\",\n    \"jest\": \"30.2.0\",\n    \"jest-environment-miniflare\": \"^2.14.2\",\n    \"jest-fetch-mock\": \"^3.0.3\",\n    \"miniflare\": \"^4.20251004.0\",\n    \"prettier\": \"^3.5.3\",\n    \"tsdown\": \"^0.17.0\",\n    \"tsx\": \"^4.20.6\",\n    \"typescript\": \"5.9.3\",\n    \"typescript-eslint\": \"^8.46.0\"\n  },\n  \"exports\": {\n    \".\": {\n      \"workerd\": {\n        \"types\": \"./lib/index.worker.d.ts\",\n        \"import\": \"./lib/index.worker.js\",\n        \"require\": \"./lib/index.worker.cjs\"\n      },\n      \"edge-light\": {\n        \"types\": \"./lib/index.worker.d.ts\",\n        \"import\": \"./lib/index.worker.js\",\n        \"require\": \"./lib/index.worker.cjs\"\n      },\n      \"deno\": {\n        \"types\": \"./lib/index.d.ts\",\n        \"default\": \"./lib/index.js\"\n      },\n      \"bun\": {\n        \"types\": \"./lib/index.d.ts\",\n        \"import\": \"./lib/index.js\",\n        \"require\": \"./lib/index.cjs\"\n      },\n      \"convex\": {\n        \"types\": \"./lib/index.worker.d.ts\",\n        \"import\": \"./lib/index.worker.js\",\n        \"default\": \"./lib/index.worker.cjs\"\n      },\n      \"import\": {\n        \"types\": \"./lib/index.d.ts\",\n        \"default\": \"./lib/index.js\"\n      },\n      \"require\": {\n        \"types\": \"./lib/index.d.cts\",\n        \"default\": \"./lib/index.cjs\"\n      },\n      \"default\": \"./lib/index.js\"\n    },\n    \"./worker\": {\n      \"import\": {\n        \"types\": \"./lib/index.worker.d.ts\",\n        \"default\": \"./lib/index.worker.js\"\n      },\n      \"require\": {\n        \"types\": \"./lib/index.worker.d.cts\",\n        \"default\": \"./lib/index.worker.cjs\"\n      },\n      \"default\": \"./lib/index.worker.js\"\n    },\n    \"./package.json\": \"./package.json\"\n  }\n}\n","import {\n  ApiKeyRequiredException,\n  GenericServerException,\n  NotFoundException,\n  UnauthorizedException,\n  UnprocessableEntityException,\n  OauthException,\n  RateLimitExceededException,\n} from './common/exceptions';\nimport { PKCE } from './pkce/pkce';\nimport {\n  GetOptions,\n  HttpClientResponseInterface,\n  PatchOptions,\n  PostOptions,\n  PutOptions,\n  WorkOSOptions,\n  WorkOSResponseError,\n} from './common/interfaces';\nimport { ApiKeys } from './api-keys/api-keys';\nimport { DirectorySync } from './directory-sync/directory-sync';\nimport { Events } from './events/events';\nimport { Organizations } from './organizations/organizations';\nimport { OrganizationDomains } from './organization-domains/organization-domains';\nimport { Passwordless } from './passwordless/passwordless';\nimport { Pipes } from './pipes/pipes';\nimport { Portal } from './portal/portal';\nimport { SSO } from './sso/sso';\nimport { Webhooks } from './webhooks/webhooks';\nimport { Mfa } from './mfa/mfa';\nimport { AuditLogs } from './audit-logs/audit-logs';\nimport { UserManagement } from './user-management/user-management';\nimport { FGA } from './fga/fga';\nimport { BadRequestException } from './common/exceptions/bad-request.exception';\nimport { FeatureFlags } from './feature-flags/feature-flags';\n\nimport { HttpClient, HttpClientError } from './common/net/http-client';\nimport { SubtleCryptoProvider } from './common/crypto/subtle-crypto-provider';\nimport { FetchHttpClient } from './common/net/fetch-client';\nimport { Widgets } from './widgets/widgets';\nimport { Actions } from './actions/actions';\nimport { Authorization } from './authorization/authorization';\nimport { Vault } from './vault/vault';\nimport { ConflictException } from './common/exceptions/conflict.exception';\nimport { CryptoProvider } from './common/crypto/crypto-provider';\nimport { ParseError } from './common/exceptions/parse-error';\nimport { getEnv } from './common/utils/env';\nimport { getRuntimeInfo } from './common/utils/runtime-info';\nimport { version as VERSION } from '../package.json' with { type: 'json' };\n\nconst DEFAULT_HOSTNAME = 'api.workos.com';\n\nconst HEADER_AUTHORIZATION = 'Authorization';\nconst HEADER_IDEMPOTENCY_KEY = 'Idempotency-Key';\nconst HEADER_WARRANT_TOKEN = 'Warrant-Token';\n\nexport class WorkOS {\n  readonly baseURL: string;\n  readonly client: HttpClient;\n  readonly clientId?: string;\n  readonly key?: string;\n  readonly options: WorkOSOptions;\n  readonly pkce: PKCE;\n\n  private readonly hasApiKey: boolean;\n\n  readonly actions: Actions;\n  readonly apiKeys = new ApiKeys(this);\n  readonly auditLogs = new AuditLogs(this);\n  readonly authorization = new Authorization(this);\n  readonly directorySync = new DirectorySync(this);\n  readonly events = new Events(this);\n  readonly featureFlags = new FeatureFlags(this);\n  readonly fga = new FGA(this);\n  readonly mfa = new Mfa(this);\n  readonly organizations = new Organizations(this);\n  readonly organizationDomains = new OrganizationDomains(this);\n  readonly passwordless = new Passwordless(this);\n  readonly pipes = new Pipes(this);\n  readonly portal = new Portal(this);\n  readonly sso = new SSO(this);\n  readonly userManagement: UserManagement;\n  readonly vault = new Vault(this);\n  readonly webhooks: Webhooks;\n  readonly widgets = new Widgets(this);\n\n  /**\n   * Create a new WorkOS client.\n   *\n   * @param keyOrOptions - API key string, or options object\n   * @param maybeOptions - Options when first argument is API key\n   *\n   * @example\n   * // Server-side with API key (string)\n   * const workos = new WorkOS('sk_...');\n   *\n   * @example\n   * // Server-side with API key (object)\n   * const workos = new WorkOS({ apiKey: 'sk_...', clientId: 'client_...' });\n   *\n   * @example\n   * // PKCE/public client (no API key)\n   * const workos = new WorkOS({ clientId: 'client_...' });\n   */\n  constructor(\n    keyOrOptions?: string | WorkOSOptions,\n    maybeOptions?: WorkOSOptions,\n  ) {\n    if (typeof keyOrOptions === 'object') {\n      this.key = keyOrOptions.apiKey;\n      this.options = keyOrOptions;\n    } else {\n      this.key = keyOrOptions;\n      this.options = maybeOptions ?? {};\n    }\n\n    if (!this.key) {\n      this.key = getEnv('WORKOS_API_KEY');\n    }\n\n    this.hasApiKey = !!this.key;\n\n    if (this.options.https === undefined) {\n      this.options.https = true;\n    }\n\n    this.clientId = this.options.clientId;\n    if (!this.clientId) {\n      this.clientId = getEnv('WORKOS_CLIENT_ID');\n    }\n\n    if (!this.hasApiKey && !this.clientId) {\n      throw new Error(\n        'WorkOS requires either an API key or a clientId. ' +\n          'For server-side: new WorkOS(\"sk_...\") or new WorkOS({ apiKey: \"sk_...\" }). ' +\n          'For PKCE/public clients: new WorkOS({ clientId: \"client_...\" })',\n      );\n    }\n\n    const protocol: string = this.options.https ? 'https' : 'http';\n    const apiHostname: string = this.options.apiHostname || DEFAULT_HOSTNAME;\n    const port: number | undefined = this.options.port;\n    this.baseURL = `${protocol}://${apiHostname}`;\n\n    if (port) {\n      this.baseURL = this.baseURL + `:${port}`;\n    }\n\n    this.pkce = new PKCE();\n\n    this.webhooks = this.createWebhookClient();\n    this.actions = this.createActionsClient();\n\n    // Must initialize UserManagement after baseURL is configured\n    this.userManagement = new UserManagement(this);\n\n    const userAgent = this.createUserAgent(this.options);\n\n    this.client = this.createHttpClient(this.options, userAgent);\n  }\n\n  private createUserAgent(options: WorkOSOptions): string {\n    let userAgent: string = `workos-node/${VERSION}`;\n\n    const { name: runtimeName, version: runtimeVersion } = getRuntimeInfo();\n    userAgent += ` (${runtimeName}${runtimeVersion ? `/${runtimeVersion}` : ''})`;\n\n    if (options.appInfo) {\n      const { name, version } = options.appInfo;\n      userAgent += ` ${name}: ${version}`;\n    }\n\n    return userAgent;\n  }\n\n  createWebhookClient() {\n    return new Webhooks(this.getCryptoProvider());\n  }\n\n  createActionsClient() {\n    return new Actions(this.getCryptoProvider());\n  }\n\n  getCryptoProvider(): CryptoProvider {\n    return new SubtleCryptoProvider();\n  }\n\n  createHttpClient(options: WorkOSOptions, userAgent: string) {\n    const headers: Record<string, string> = {\n      'User-Agent': userAgent,\n    };\n\n    const configHeaders = options.config?.headers;\n    if (\n      configHeaders &&\n      typeof configHeaders === 'object' &&\n      !Array.isArray(configHeaders) &&\n      !(configHeaders instanceof Headers)\n    ) {\n      Object.assign(headers, configHeaders);\n    }\n\n    if (this.key) {\n      headers['Authorization'] = `Bearer ${this.key}`;\n    }\n\n    return new FetchHttpClient(this.baseURL, {\n      ...options.config,\n      timeout: options.timeout,\n      headers,\n    }) as HttpClient;\n  }\n\n  get version() {\n    return VERSION;\n  }\n\n  /**\n   * Require API key for methods that need it.\n   * @param methodName - Name of the method requiring API key (for error message)\n   * @throws ApiKeyRequiredException if no API key was provided\n   */\n  requireApiKey(methodName: string): void {\n    if (!this.hasApiKey) {\n      throw new ApiKeyRequiredException(methodName);\n    }\n  }\n\n  async post<Result = any, Entity = any>(\n    path: string,\n    entity: Entity,\n    options: PostOptions = {},\n  ): Promise<{ data: Result }> {\n    if (!options.skipApiKeyCheck) {\n      this.requireApiKey(path);\n    }\n\n    const requestHeaders: Record<string, string> = {};\n\n    if (options.idempotencyKey) {\n      requestHeaders[HEADER_IDEMPOTENCY_KEY] = options.idempotencyKey;\n    }\n\n    if (options.warrantToken) {\n      requestHeaders[HEADER_WARRANT_TOKEN] = options.warrantToken;\n    }\n\n    let res: HttpClientResponseInterface;\n\n    try {\n      res = await this.client.post<Entity>(path, entity, {\n        params: options.query,\n        headers: requestHeaders,\n      });\n    } catch (error) {\n      this.handleHttpError({ path, error });\n      throw error;\n    }\n\n    try {\n      return { data: await res.toJSON() };\n    } catch (error) {\n      await this.handleParseError(error, res);\n      throw error;\n    }\n  }\n\n  async get<Result = any>(\n    path: string,\n    options: GetOptions = {},\n  ): Promise<{ data: Result }> {\n    if (!options.skipApiKeyCheck) {\n      this.requireApiKey(path);\n    }\n\n    const requestHeaders: Record<string, string> = {};\n\n    if (options.accessToken) {\n      requestHeaders[HEADER_AUTHORIZATION] = `Bearer ${options.accessToken}`;\n    }\n\n    if (options.warrantToken) {\n      requestHeaders[HEADER_WARRANT_TOKEN] = options.warrantToken;\n    }\n\n    let res: HttpClientResponseInterface;\n    try {\n      res = await this.client.get(path, {\n        params: options.query,\n        headers: requestHeaders,\n      });\n    } catch (error) {\n      this.handleHttpError({ path, error });\n\n      throw error;\n    }\n\n    try {\n      return { data: await res.toJSON() };\n    } catch (error) {\n      await this.handleParseError(error, res);\n      throw error;\n    }\n  }\n\n  async put<Result = any, Entity = any>(\n    path: string,\n    entity: Entity,\n    options: PutOptions = {},\n  ): Promise<{ data: Result }> {\n    if (!options.skipApiKeyCheck) {\n      this.requireApiKey(path);\n    }\n\n    const requestHeaders: Record<string, string> = {};\n\n    if (options.idempotencyKey) {\n      requestHeaders[HEADER_IDEMPOTENCY_KEY] = options.idempotencyKey;\n    }\n\n    let res: HttpClientResponseInterface;\n\n    try {\n      res = await this.client.put<Entity>(path, entity, {\n        params: options.query,\n        headers: requestHeaders,\n      });\n    } catch (error) {\n      this.handleHttpError({ path, error });\n\n      throw error;\n    }\n\n    try {\n      return { data: await res.toJSON() };\n    } catch (error) {\n      await this.handleParseError(error, res);\n      throw error;\n    }\n  }\n\n  async patch<Result = any, Entity = any>(\n    path: string,\n    entity: Entity,\n    options: PatchOptions = {},\n  ): Promise<{ data: Result }> {\n    if (!options.skipApiKeyCheck) {\n      this.requireApiKey(path);\n    }\n\n    const requestHeaders: Record<string, string> = {};\n\n    if (options.idempotencyKey) {\n      requestHeaders[HEADER_IDEMPOTENCY_KEY] = options.idempotencyKey;\n    }\n\n    let res: HttpClientResponseInterface;\n\n    try {\n      res = await this.client.patch<Entity>(path, entity, {\n        params: options.query,\n        headers: requestHeaders,\n      });\n    } catch (error) {\n      this.handleHttpError({ path, error });\n\n      throw error;\n    }\n\n    try {\n      return { data: await res.toJSON() };\n    } catch (error) {\n      await this.handleParseError(error, res);\n      throw error;\n    }\n  }\n\n  async delete(path: string, query?: any): Promise<void> {\n    this.requireApiKey(path);\n\n    try {\n      await this.client.delete(path, {\n        params: query,\n      });\n    } catch (error) {\n      this.handleHttpError({ path, error });\n\n      throw error;\n    }\n  }\n\n  async deleteWithBody<Entity = any>(\n    path: string,\n    entity: Entity,\n  ): Promise<void> {\n    this.requireApiKey(path);\n\n    try {\n      await this.client.deleteWithBody(path, entity, {});\n    } catch (error) {\n      this.handleHttpError({ path, error });\n\n      throw error;\n    }\n  }\n\n  emitWarning(warning: string) {\n    // tslint:disable-next-line:no-console\n    console.warn(`WorkOS: ${warning}`);\n  }\n\n  private async handleParseError(\n    error: unknown,\n    res: HttpClientResponseInterface,\n  ) {\n    if (error instanceof SyntaxError) {\n      const rawResponse = res.getRawResponse() as Response;\n      const requestID = rawResponse.headers.get('X-Request-ID') ?? '';\n      const rawStatus = rawResponse.status;\n      const rawBody = await rawResponse.text();\n      throw new ParseError({\n        message: error.message,\n        rawBody,\n        rawStatus,\n        requestID,\n      });\n    }\n  }\n\n  private handleHttpError({ path, error }: { path: string; error: unknown }) {\n    if (!(error instanceof HttpClientError)) {\n      throw new Error(`Unexpected error: ${error}`, { cause: error });\n    }\n\n    const { response } = error as HttpClientError<WorkOSResponseError>;\n\n    if (response) {\n      const { status, data, headers } = response;\n\n      const requestID = headers['X-Request-ID'] ?? '';\n      const {\n        code,\n        error_description: errorDescription,\n        error,\n        errors,\n        message,\n      } = data;\n\n      switch (status) {\n        case 401: {\n          throw new UnauthorizedException(requestID);\n        }\n        case 409: {\n          throw new ConflictException({ requestID, message, error });\n        }\n        case 422: {\n          throw new UnprocessableEntityException({\n            code,\n            errors,\n            message,\n            requestID,\n          });\n        }\n        case 404: {\n          throw new NotFoundException({\n            code,\n            message,\n            path,\n            requestID,\n          });\n        }\n        case 429: {\n          const retryAfter = headers.get('Retry-After');\n\n          throw new RateLimitExceededException(\n            data.message,\n            requestID,\n            retryAfter ? Number(retryAfter) : null,\n          );\n        }\n        default: {\n          if (error || errorDescription) {\n            throw new OauthException(\n              status,\n              requestID,\n              error,\n              errorDescription,\n              data,\n            );\n          } else if (code && errors) {\n            // Note: ideally this should be mapped directly with a `400` status code.\n            // However, this would break existing logic for the `OauthException` exception.\n            throw new BadRequestException({\n              code,\n              errors,\n              message,\n              requestID,\n            });\n          } else {\n            throw new GenericServerException(\n              status,\n              data.message,\n              data,\n              requestID,\n            );\n          }\n        }\n      }\n    }\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cACa;;;;ACiDb,MAAM,mBAAmB;AAEzB,MAAM,uBAAuB;AAC7B,MAAM,yBAAyB;AAC/B,MAAM,uBAAuB;AAE7B,IAAa,SAAb,MAAoB;CAClB,AAAS;CACT,AAAS;CACT,AAAS;CACT,AAAS;CACT,AAAS;CACT,AAAS;CAET,AAAiB;CAEjB,AAAS;CACT,AAAS,UAAU,IAAIA,yBAAQ,KAAK;CACpC,AAAS,YAAY,IAAIC,6BAAU,KAAK;CACxC,AAAS,gBAAgB,IAAIC,oCAAc,KAAK;CAChD,AAAS,gBAAgB,IAAIC,qCAAc,KAAK;CAChD,AAAS,SAAS,IAAIC,sBAAO,KAAK;CAClC,AAAS,eAAe,IAAIC,mCAAa,KAAK;CAC9C,AAAS,MAAM,IAAIC,gBAAI,KAAK;CAC5B,AAAS,MAAM,IAAIC,gBAAI,KAAK;CAC5B,AAAS,gBAAgB,IAAIC,oCAAc,KAAK;CAChD,AAAS,sBAAsB,IAAIC,iDAAoB,KAAK;CAC5D,AAAS,eAAe,IAAIC,kCAAa,KAAK;CAC9C,AAAS,QAAQ,IAAIC,oBAAM,KAAK;CAChC,AAAS,SAAS,IAAIC,sBAAO,KAAK;CAClC,AAAS,MAAM,IAAIC,gBAAI,KAAK;CAC5B,AAAS;CACT,AAAS,QAAQ,IAAIC,oBAAM,KAAK;CAChC,AAAS;CACT,AAAS,UAAU,IAAIC,wBAAQ,KAAK;;;;;;;;;;;;;;;;;;;CAoBpC,YACE,cACA,cACA;AACA,MAAI,OAAO,iBAAiB,UAAU;AACpC,QAAK,MAAM,aAAa;AACxB,QAAK,UAAU;SACV;AACL,QAAK,MAAM;AACX,QAAK,UAAU,gBAAgB,EAAE;;AAGnC,MAAI,CAAC,KAAK,IACR,MAAK,MAAMC,mBAAO,iBAAiB;AAGrC,OAAK,YAAY,CAAC,CAAC,KAAK;AAExB,MAAI,KAAK,QAAQ,UAAU,OACzB,MAAK,QAAQ,QAAQ;AAGvB,OAAK,WAAW,KAAK,QAAQ;AAC7B,MAAI,CAAC,KAAK,SACR,MAAK,WAAWA,mBAAO,mBAAmB;AAG5C,MAAI,CAAC,KAAK,aAAa,CAAC,KAAK,SAC3B,OAAM,IAAI,MACR,oMAGD;EAGH,MAAMC,WAAmB,KAAK,QAAQ,QAAQ,UAAU;EACxD,MAAMC,cAAsB,KAAK,QAAQ,eAAe;EACxD,MAAMC,OAA2B,KAAK,QAAQ;AAC9C,OAAK,UAAU,GAAG,SAAS,KAAK;AAEhC,MAAI,KACF,MAAK,UAAU,KAAK,UAAU,IAAI;AAGpC,OAAK,OAAO,IAAIC,mBAAM;AAEtB,OAAK,WAAW,KAAK,qBAAqB;AAC1C,OAAK,UAAU,KAAK,qBAAqB;AAGzC,OAAK,iBAAiB,IAAIC,uCAAe,KAAK;EAE9C,MAAM,YAAY,KAAK,gBAAgB,KAAK,QAAQ;AAEpD,OAAK,SAAS,KAAK,iBAAiB,KAAK,SAAS,UAAU;;CAG9D,AAAQ,gBAAgB,SAAgC;EACtD,IAAIC,YAAoB,eAAeC;EAEvC,MAAM,EAAE,MAAM,aAAa,SAAS,mBAAmBC,qCAAgB;AACvE,eAAa,KAAK,cAAc,iBAAiB,IAAI,mBAAmB,GAAG;AAE3E,MAAI,QAAQ,SAAS;GACnB,MAAM,EAAE,MAAM,uBAAY,QAAQ;AAClC,gBAAa,IAAI,KAAK,IAAIC;;AAG5B,SAAO;;CAGT,sBAAsB;AACpB,SAAO,IAAIC,0BAAS,KAAK,mBAAmB,CAAC;;CAG/C,sBAAsB;AACpB,SAAO,IAAIC,wBAAQ,KAAK,mBAAmB,CAAC;;CAG9C,oBAAoC;AAClC,SAAO,IAAIC,qDAAsB;;CAGnC,iBAAiB,SAAwB,WAAmB;EAC1D,MAAMC,UAAkC,EACtC,cAAc,WACf;EAED,MAAM,gBAAgB,QAAQ,QAAQ;AACtC,MACE,iBACA,OAAO,kBAAkB,YACzB,CAAC,MAAM,QAAQ,cAAc,IAC7B,EAAE,yBAAyB,SAE3B,QAAO,OAAO,SAAS,cAAc;AAGvC,MAAI,KAAK,IACP,SAAQ,mBAAmB,UAAU,KAAK;AAG5C,SAAO,IAAIC,qCAAgB,KAAK,SAAS;GACvC,GAAG,QAAQ;GACX,SAAS,QAAQ;GACjB;GACD,CAAC;;CAGJ,IAAI,UAAU;AACZ,SAAOP;;;;;;;CAQT,cAAc,YAA0B;AACtC,MAAI,CAAC,KAAK,UACR,OAAM,IAAIQ,2DAAwB,WAAW;;CAIjD,MAAM,KACJ,MACA,QACA,UAAuB,EAAE,EACE;AAC3B,MAAI,CAAC,QAAQ,gBACX,MAAK,cAAc,KAAK;EAG1B,MAAMC,iBAAyC,EAAE;AAEjD,MAAI,QAAQ,eACV,gBAAe,0BAA0B,QAAQ;AAGnD,MAAI,QAAQ,aACV,gBAAe,wBAAwB,QAAQ;EAGjD,IAAIC;AAEJ,MAAI;AACF,SAAM,MAAM,KAAK,OAAO,KAAa,MAAM,QAAQ;IACjD,QAAQ,QAAQ;IAChB,SAAS;IACV,CAAC;WACK,OAAO;AACd,QAAK,gBAAgB;IAAE;IAAM;IAAO,CAAC;AACrC,SAAM;;AAGR,MAAI;AACF,UAAO,EAAE,MAAM,MAAM,IAAI,QAAQ,EAAE;WAC5B,OAAO;AACd,SAAM,KAAK,iBAAiB,OAAO,IAAI;AACvC,SAAM;;;CAIV,MAAM,IACJ,MACA,UAAsB,EAAE,EACG;AAC3B,MAAI,CAAC,QAAQ,gBACX,MAAK,cAAc,KAAK;EAG1B,MAAMD,iBAAyC,EAAE;AAEjD,MAAI,QAAQ,YACV,gBAAe,wBAAwB,UAAU,QAAQ;AAG3D,MAAI,QAAQ,aACV,gBAAe,wBAAwB,QAAQ;EAGjD,IAAIC;AACJ,MAAI;AACF,SAAM,MAAM,KAAK,OAAO,IAAI,MAAM;IAChC,QAAQ,QAAQ;IAChB,SAAS;IACV,CAAC;WACK,OAAO;AACd,QAAK,gBAAgB;IAAE;IAAM;IAAO,CAAC;AAErC,SAAM;;AAGR,MAAI;AACF,UAAO,EAAE,MAAM,MAAM,IAAI,QAAQ,EAAE;WAC5B,OAAO;AACd,SAAM,KAAK,iBAAiB,OAAO,IAAI;AACvC,SAAM;;;CAIV,MAAM,IACJ,MACA,QACA,UAAsB,EAAE,EACG;AAC3B,MAAI,CAAC,QAAQ,gBACX,MAAK,cAAc,KAAK;EAG1B,MAAMD,iBAAyC,EAAE;AAEjD,MAAI,QAAQ,eACV,gBAAe,0BAA0B,QAAQ;EAGnD,IAAIC;AAEJ,MAAI;AACF,SAAM,MAAM,KAAK,OAAO,IAAY,MAAM,QAAQ;IAChD,QAAQ,QAAQ;IAChB,SAAS;IACV,CAAC;WACK,OAAO;AACd,QAAK,gBAAgB;IAAE;IAAM;IAAO,CAAC;AAErC,SAAM;;AAGR,MAAI;AACF,UAAO,EAAE,MAAM,MAAM,IAAI,QAAQ,EAAE;WAC5B,OAAO;AACd,SAAM,KAAK,iBAAiB,OAAO,IAAI;AACvC,SAAM;;;CAIV,MAAM,MACJ,MACA,QACA,UAAwB,EAAE,EACC;AAC3B,MAAI,CAAC,QAAQ,gBACX,MAAK,cAAc,KAAK;EAG1B,MAAMD,iBAAyC,EAAE;AAEjD,MAAI,QAAQ,eACV,gBAAe,0BAA0B,QAAQ;EAGnD,IAAIC;AAEJ,MAAI;AACF,SAAM,MAAM,KAAK,OAAO,MAAc,MAAM,QAAQ;IAClD,QAAQ,QAAQ;IAChB,SAAS;IACV,CAAC;WACK,OAAO;AACd,QAAK,gBAAgB;IAAE;IAAM;IAAO,CAAC;AAErC,SAAM;;AAGR,MAAI;AACF,UAAO,EAAE,MAAM,MAAM,IAAI,QAAQ,EAAE;WAC5B,OAAO;AACd,SAAM,KAAK,iBAAiB,OAAO,IAAI;AACvC,SAAM;;;CAIV,MAAM,OAAO,MAAc,OAA4B;AACrD,OAAK,cAAc,KAAK;AAExB,MAAI;AACF,SAAM,KAAK,OAAO,OAAO,MAAM,EAC7B,QAAQ,OACT,CAAC;WACK,OAAO;AACd,QAAK,gBAAgB;IAAE;IAAM;IAAO,CAAC;AAErC,SAAM;;;CAIV,MAAM,eACJ,MACA,QACe;AACf,OAAK,cAAc,KAAK;AAExB,MAAI;AACF,SAAM,KAAK,OAAO,eAAe,MAAM,QAAQ,EAAE,CAAC;WAC3C,OAAO;AACd,QAAK,gBAAgB;IAAE;IAAM;IAAO,CAAC;AAErC,SAAM;;;CAIV,YAAY,SAAiB;AAE3B,UAAQ,KAAK,WAAW,UAAU;;CAGpC,MAAc,iBACZ,OACA,KACA;AACA,MAAI,iBAAiB,aAAa;GAChC,MAAM,cAAc,IAAI,gBAAgB;GACxC,MAAM,YAAY,YAAY,QAAQ,IAAI,eAAe,IAAI;GAC7D,MAAM,YAAY,YAAY;GAC9B,MAAM,UAAU,MAAM,YAAY,MAAM;AACxC,SAAM,IAAIC,+BAAW;IACnB,SAAS,MAAM;IACf;IACA;IACA;IACD,CAAC;;;CAIN,AAAQ,gBAAgB,EAAE,MAAM,SAA2C;AACzE,MAAI,EAAE,iBAAiBC,qCACrB,OAAM,IAAI,MAAM,qBAAqB,SAAS,EAAE,OAAO,OAAO,CAAC;EAGjE,MAAM,EAAE,aAAa;AAErB,MAAI,UAAU;GACZ,MAAM,EAAE,QAAQ,MAAM,YAAY;GAElC,MAAM,YAAY,QAAQ,mBAAmB;GAC7C,MAAM,EACJ,MACA,mBAAmB,kBACnB,gBACA,QACA,YACE;AAEJ,WAAQ,QAAR;IACE,KAAK,IACH,OAAM,IAAIC,qDAAsB,UAAU;IAE5C,KAAK,IACH,OAAM,IAAIC,6CAAkB;KAAE;KAAW;KAAS;KAAO,CAAC;IAE5D,KAAK,IACH,OAAM,IAAIC,oEAA6B;KACrC;KACA;KACA;KACA;KACD,CAAC;IAEJ,KAAK,IACH,OAAM,IAAIC,8CAAkB;KAC1B;KACA;KACA;KACA;KACD,CAAC;IAEJ,KAAK,KAAK;KACR,MAAM,aAAa,QAAQ,IAAI,cAAc;AAE7C,WAAM,IAAIC,iEACR,KAAK,SACL,WACA,aAAa,OAAO,WAAW,GAAG,KACnC;;IAEH,QACE,KAAIC,WAAS,iBACX,OAAM,IAAIC,uCACR,QACA,WACAD,SACA,kBACA,KACD;aACQ,QAAQ,OAGjB,OAAM,IAAIE,kDAAoB;KAC5B;KACA;KACA;KACA;KACD,CAAC;QAEF,OAAM,IAAIC,wDACR,QACA,KAAK,SACL,MACA,UACD"}

package/lib/{workos-options.interface-PcLJpyIn.d.cts → workos-options.interface-BJncPCQs.d.cts}

@@ -1,4 +1,4 @@
-import { t as AppInfo } from "./app-info.interface-C8Yk9_lU.cjs";
+import { t as AppInfo } from "./app-info.interface-DXCu_oOm.cjs";
 
 //#region src/common/interfaces/workos-options.interface.d.ts
 interface WorkOSOptions {
@@ -14,4 +14,4 @@ interface WorkOSOptions {
 }
 //#endregion
 export { WorkOSOptions as t };
-//# sourceMappingURL=workos-options.interface-PcLJpyIn.d.cts.map
+//# sourceMappingURL=workos-options.interface-BJncPCQs.d.cts.map

package/lib/{workos-response-error.interface-u0ZMPUFj.d.cts → workos-response-error.interface-D4GX2qD0.d.cts}

@@ -1,4 +1,4 @@
-import { t as UnprocessableEntityError } from "./unprocessable-entity-error.interface-Cz6BURFm.cjs";
+import { t as UnprocessableEntityError } from "./unprocessable-entity-error.interface-sHivwO3Z.cjs";
 
 //#region src/common/interfaces/workos-response-error.interface.d.ts
 interface WorkOSResponseError {
@@ -10,4 +10,4 @@ interface WorkOSResponseError {
 }
 //#endregion
 export { WorkOSResponseError as t };
-//# sourceMappingURL=workos-response-error.interface-u0ZMPUFj.d.cts.map
+//# sourceMappingURL=workos-response-error.interface-D4GX2qD0.d.cts.map

package/lib/workos.cjs

@@ -1,7 +1,7 @@
 require('./jose-BhyqkBqW.cjs');
 require('./session-Beigw6Nc.cjs');
-require('./user-management-CTQFnn4h.cjs');
+require('./user-management-CJj1rMco.cjs');
 require('./subtle-crypto-provider-RQC7QPlf.cjs');
-const require_workos = require('./workos-y5BVhQQQ.cjs');
+const require_workos = require('./workos-2uUDl0FZ.cjs');
 
 exports.WorkOS = require_workos.WorkOS;

package/lib/workos.d.cts

@@ -1,2 +1,2 @@
-import { n as WorkOS } from "./api-keys-OJfN1xfX.cjs";
+import { n as WorkOS } from "./api-keys-FoD7rQEa.cjs";
 export { WorkOS };

package/lib/workos.js

@@ -33,9 +33,9 @@ import { Authorization } from "./authorization/authorization.js";
 import { Vault } from "./vault/vault.js";
 import { ConflictException } from "./common/exceptions/conflict.exception.js";
 import { getRuntimeInfo } from "./common/utils/runtime-info.js";
+import { version } from "./package.js";
 
 //#region src/workos.ts
-const VERSION = "8.5.0";
 const DEFAULT_HOSTNAME = "api.workos.com";
 const HEADER_AUTHORIZATION = "Authorization";
 const HEADER_IDEMPOTENCY_KEY = "Idempotency-Key";
@@ -112,12 +112,12 @@ var WorkOS = class {
 		this.client = this.createHttpClient(this.options, userAgent);
 	}
 	createUserAgent(options) {
-		let userAgent = `workos-node/${VERSION}`;
+		let userAgent = `workos-node/${version}`;
 		const { name: runtimeName, version: runtimeVersion } = getRuntimeInfo();
 		userAgent += ` (${runtimeName}${runtimeVersion ? `/${runtimeVersion}` : ""})`;
 		if (options.appInfo) {
-			const { name, version } = options.appInfo;
-			userAgent += ` ${name}: ${version}`;
+			const { name, version: version$1 } = options.appInfo;
+			userAgent += ` ${name}: ${version$1}`;
 		}
 		return userAgent;
 	}
@@ -142,7 +142,7 @@ var WorkOS = class {
 		});
 	}
 	get version() {
-		return VERSION;
+		return version;
 	}
 	/**
 	* Require API key for methods that need it.