@zitadel/sdk 4.1.0-beta.10

package/dist/auth/webtoken-authenticator-builder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webtoken-authenticator-builder.js","sourceRoot":"","sources":["../../src/auth/webtoken-authenticator-builder.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,MAAM,kCAAkC,CAAC;AAC7E,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAEpE;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,OAAO,4BAA6B,SAAQ,yBAAyB;IAgBtD;IACA;IACA;IACA;IAlBX,MAAM,GAAW,OAAO,CAAC;IACzB,eAAe,GAAW,IAAI,CAAC;IAC/B,GAAG,CAAU;IAErB;;;;;;;;OAQG;IACH,YACE,IAAY,EACK,SAAiB,EACjB,UAAkB,EAClB,WAAmB,EACnB,UAAkB;QAEnC,KAAK,CAAC,IAAI,CAAC,CAAC;QALK,cAAS,GAAT,SAAS,CAAQ;QACjB,eAAU,GAAV,UAAU,CAAQ;QAClB,gBAAW,GAAX,WAAW,CAAQ;QACnB,eAAU,GAAV,UAAU,CAAQ;IAGrC,CAAC;IAED;;;;;OAKG;IACI,oBAAoB,CAAC,OAAe;QACzC,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC;QAC/B,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;OAKG;IACI,YAAY,CAAC,SAAiB;QACnC,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;QACxB,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;OAKG;IACI,KAAK,CAAC,KAAa;QACxB,IAAI,CAAC,GAAG,GAAG,KAAK,CAAC;QACjB,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;;;;OAQG;IACI,KAAK,CAAC,KAAK;QAChB,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QAC5B,OAAO,qBAAqB,CAAC,MAAM,CACjC,IAAI,CAAC,MAAM,EACX,SAAS,EACT,IAAI,CAAC,UAAU,EACf,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,UAAU,EACf,IAAI,CAAC,WAAW,EAChB,IAAI,CAAC,UAAU,EACf,IAAI,CAAC,eAAe,EACpB,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,GAAG,CACT,CAAC;IACJ,CAAC;CACF"}

package/dist/auth/webtoken-authenticator.d.ts

@@ -0,0 +1,78 @@
+import { OAuthAuthenticator } from './oauth-authenticator.js';
+import * as oauth from 'oauth4webapi';
+import { OpenId } from './openid.js';
+import { WebTokenAuthenticatorBuilder } from './webtoken-authenticator-builder.js';
+/**
+ * JWT-based Authenticator using the JWT Bearer Grant (RFC7523).
+ *
+ * This class creates a JWT assertion and exchanges it for an access token.
+ */
+export declare class WebTokenAuthenticator extends OAuthAuthenticator {
+    private readonly privateKey;
+    private readonly jwtIssuer;
+    private readonly jwtSubject;
+    private readonly jwtAudience;
+    private readonly jwtLifetimeSeconds;
+    private readonly jwtAlgorithm;
+    private readonly keyId?;
+    private readonly clientAuth;
+    private readonly grantType;
+    /**
+     * WebTokenAuthenticator constructor.
+     *
+     * @param authServer The discovered authorization server metadata.
+     * @param client The OAuth2 client metadata.
+     * @param scope The scope for the token request.
+     * @param privateKey The private key to sign the JWT.
+     * @param jwtIssuer The issuer claim for the JWT.
+     * @param jwtSubject The subject claim for the JWT.
+     * @param jwtAudience The audience claim for the JWT.
+     * @param jwtLifetimeSeconds The lifetime of the JWT in seconds.
+     * @param jwtAlgorithm The signing algorithm.
+     * @param keyId The key ID.
+     */
+    private constructor();
+    /**
+     * Initialize a WebTokenAuthenticator instance from a JSON configuration
+     * file.
+     *
+     * The JSON file should have the following structure:
+     * ```
+     * {
+     * "type": "serviceaccount",
+     * "keyId": "100509901696068329",
+     * "key": "-----BEGIN RSA PRIVATE KEY----- [...] -----END RSA PRIVATE KEY-----\n",
+     * "userId": "100507859606888466"
+     * }
+     * ```
+     *
+     * @param host The base URL for the API endpoints.
+     * @param jsonPath The file path to the JSON configuration file.
+     * @returns A builder instance for WebTokenAuthenticator.
+     * @throws {Error} if the file cannot be read or the JSON is invalid.
+     */
+    static fromJson(host: string, jsonPath: string): Promise<WebTokenAuthenticator>;
+    /**
+     * Returns a new builder instance for WebTokenAuthenticator.
+     *
+     * @param host The base URL for API endpoints.
+     * @param userId The user ID.
+     * @param privateKey The PEM-formatted private key.
+     * @returns A new builder instance.
+     */
+    static builder(host: string, userId: string, privateKey: string): WebTokenAuthenticatorBuilder;
+    /**
+     * Normalises any PKCS-1/PKCS-8 PEM string and returns a Node KeyObject.
+     * Works with:
+     *   • one-liner PEMs
+     *   • JSON-escaped “\n” sequences
+     *   • Windows CRLF line-endings
+     */
+    private static parsePem;
+    /**
+     * Creates an instance of WebTokenAuthenticator.
+     * @internal
+     */
+    static create(openId: OpenId, clientId: string, scope: string, jwtIssuer: string, jwtSubject: string, jwtAudience: string, privateKeyPem: string, jwtLifetimeSeconds: number, jwtAlgorithm: string, keyId?: string): Promise<WebTokenAuthenticator>;
+    protected performTokenRequest(authServer: oauth.AuthorizationServer, client: oauth.Client): Promise<oauth.TokenEndpointResponse>;
+}

package/dist/auth/webtoken-authenticator.js

@@ -0,0 +1,168 @@
+import { OAuthAuthenticator } from './oauth-authenticator.js';
+import * as oauth from 'oauth4webapi';
+import * as jose from 'jose';
+import { WebTokenAuthenticatorBuilder } from './webtoken-authenticator-builder.js';
+import * as fs from 'node:fs';
+import { createPrivateKey } from 'node:crypto';
+/**
+ * JWT-based Authenticator using the JWT Bearer Grant (RFC7523).
+ *
+ * This class creates a JWT assertion and exchanges it for an access token.
+ */
+export class WebTokenAuthenticator extends OAuthAuthenticator {
+    privateKey;
+    jwtIssuer;
+    jwtSubject;
+    jwtAudience;
+    jwtLifetimeSeconds;
+    jwtAlgorithm;
+    keyId;
+    clientAuth;
+    grantType = 'urn:ietf:params:oauth:grant-type:jwt-bearer';
+    /**
+     * WebTokenAuthenticator constructor.
+     *
+     * @param authServer The discovered authorization server metadata.
+     * @param client The OAuth2 client metadata.
+     * @param scope The scope for the token request.
+     * @param privateKey The private key to sign the JWT.
+     * @param jwtIssuer The issuer claim for the JWT.
+     * @param jwtSubject The subject claim for the JWT.
+     * @param jwtAudience The audience claim for the JWT.
+     * @param jwtLifetimeSeconds The lifetime of the JWT in seconds.
+     * @param jwtAlgorithm The signing algorithm.
+     * @param keyId The key ID.
+     */
+    constructor(authServer, client, scope, privateKey, jwtIssuer, jwtSubject, jwtAudience, jwtLifetimeSeconds, jwtAlgorithm, keyId) {
+        super(authServer, client, scope);
+        this.privateKey = privateKey;
+        this.jwtIssuer = jwtIssuer;
+        this.jwtSubject = jwtSubject;
+        this.jwtAudience = jwtAudience;
+        this.jwtLifetimeSeconds = jwtLifetimeSeconds;
+        this.jwtAlgorithm = jwtAlgorithm;
+        this.keyId = keyId;
+        this.clientAuth = oauth.None();
+    }
+    /**
+     * Initialize a WebTokenAuthenticator instance from a JSON configuration
+     * file.
+     *
+     * The JSON file should have the following structure:
+     * ```
+     * {
+     * "type": "serviceaccount",
+     * "keyId": "100509901696068329",
+     * "key": "-----BEGIN RSA PRIVATE KEY----- [...] -----END RSA PRIVATE KEY-----\n",
+     * "userId": "100507859606888466"
+     * }
+     * ```
+     *
+     * @param host The base URL for the API endpoints.
+     * @param jsonPath The file path to the JSON configuration file.
+     * @returns A builder instance for WebTokenAuthenticator.
+     * @throws {Error} if the file cannot be read or the JSON is invalid.
+     */
+    static async fromJson(host, jsonPath) {
+        const json = fs.readFileSync(jsonPath, 'utf-8').replaceAll('\\"', '"');
+        const config = JSON.parse(json);
+        const userId = config?.userId;
+        const privateKey = config?.key;
+        const keyId = config?.keyId;
+        if (!userId || !privateKey || !keyId) {
+            throw new Error('Missing required configuration keys in JSON file.');
+        }
+        return WebTokenAuthenticator.builder(host, userId, privateKey)
+            .keyId(keyId)
+            .build();
+    }
+    /**
+     * Returns a new builder instance for WebTokenAuthenticator.
+     *
+     * @param host The base URL for API endpoints.
+     * @param userId The user ID.
+     * @param privateKey The PEM-formatted private key.
+     * @returns A new builder instance.
+     */
+    static builder(host, userId, privateKey) {
+        return new WebTokenAuthenticatorBuilder(host, userId, userId, host, privateKey);
+    }
+    /**
+     * Normalises any PKCS-1/PKCS-8 PEM string and returns a Node KeyObject.
+     * Works with:
+     *   • one-liner PEMs
+     *   • JSON-escaped “\n” sequences
+     *   • Windows CRLF line-endings
+     */
+    static parsePem(pemLike) {
+        // 1 – turn literal “\n” into real LF and unify CRLF → LF
+        let pem = pemLike.replace(/\\n/g, '\n').replace(/\r\n/g, '\n').trim();
+        // 2 – ensure header and footer sit on their own lines
+        pem = pem
+            .replace(/(-----BEGIN [^-]+-----)([A-Za-z0-9+/=]+)/, '$1\n$2')
+            .replace(/([A-Za-z0-9+/=]+)(-----END [^-]+-----)/, '$1\n$2');
+        // 3 – if the body is one long line, wrap it at 64 chars (tidy, not mandatory)
+        const parts = pem.split('\n');
+        if (parts.length === 3) {
+            const [header, bodyRaw, footer] = parts;
+            const bodyWrapped = bodyRaw
+                .replace(/\s+/g, '') // strip stray white-space
+                .match(/.{1,64}/g) // wrap
+                ?.join('\n') ?? bodyRaw;
+            pem = `${header}\n${bodyWrapped}\n${footer}`;
+        }
+        // 4 – pick the correct “type” hint for Node’s decoder
+        const type = /BEGIN RSA PRIVATE KEY/.test(pem) ? 'pkcs1' : 'pkcs8';
+        // 5 – finally build the KeyObject
+        return createPrivateKey({ key: pem, format: 'pem', type });
+    }
+    /**
+     * Creates an instance of WebTokenAuthenticator.
+     * @internal
+     */
+    static async create(openId, clientId, scope, jwtIssuer, jwtSubject, jwtAudience, privateKeyPem, jwtLifetimeSeconds, jwtAlgorithm, keyId) {
+        const privateKey = WebTokenAuthenticator.parsePem(privateKeyPem);
+        const authServer = openId.getAuthorizationServer();
+        const client = { client_id: clientId };
+        return new WebTokenAuthenticator(authServer, client, scope, privateKey, jwtIssuer, jwtSubject, jwtAudience, jwtLifetimeSeconds, jwtAlgorithm, keyId);
+    }
+    async performTokenRequest(authServer, client) {
+        const protectedHeader = {
+            alg: this.jwtAlgorithm,
+        };
+        if (this.keyId) {
+            protectedHeader.kid = this.keyId;
+        }
+        const assertion = await new jose.SignJWT({ sub: this.jwtSubject })
+            .setProtectedHeader(protectedHeader)
+            .setIssuer(this.jwtIssuer)
+            .setAudience(this.jwtAudience)
+            .setIssuedAt()
+            .setExpirationTime(`${this.jwtLifetimeSeconds}s`)
+            .sign(this.privateKey);
+        const parameters = new URLSearchParams({
+            grant_type: this.grantType,
+            assertion: assertion,
+            scope: this.scope,
+        });
+        // noinspection JSDeprecatedSymbols
+        const response = await oauth.genericTokenEndpointRequest(authServer, client, this.clientAuth, this.grantType, parameters, {
+            [oauth.allowInsecureRequests]: process.env.JEST_WORKER_ID !== undefined,
+        });
+        const responseBody = (await response.clone().json());
+        // @ts-expect-error wgsg
+        const idToken = responseBody.id_token;
+        if (!idToken || typeof idToken !== 'string') {
+            return oauth.processGenericTokenEndpointResponse(authServer, client, response);
+        }
+        else {
+            const claims = jose.decodeJwt(idToken);
+            const validationClientId = claims.azp;
+            if (!validationClientId || typeof validationClientId !== 'string') {
+                throw new Error('ID Token is missing a valid `azp` claim for validation.');
+            }
+            return oauth.processGenericTokenEndpointResponse(authServer, { client_id: validationClientId }, response);
+        }
+    }
+}
+//# sourceMappingURL=webtoken-authenticator.js.map

package/dist/auth/webtoken-authenticator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webtoken-authenticator.js","sourceRoot":"","sources":["../../src/auth/webtoken-authenticator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAC9D,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAE7B,OAAO,EAAE,4BAA4B,EAAE,MAAM,qCAAqC,CAAC;AAGnF,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,gBAAgB,EAAa,MAAM,aAAa,CAAC;AAE1D;;;;GAIG;AACH,MAAM,OAAO,qBAAsB,SAAQ,kBAAkB;IAuBxC;IACA;IACA;IACA;IACA;IACA;IACA;IA5BF,UAAU,CAAmB;IAC7B,SAAS,GACxB,6CAA6C,CAAC;IAEhD;;;;;;;;;;;;;OAaG;IACH,YACE,UAAqC,EACrC,MAAoB,EACpB,KAAa,EACI,UAAqB,EACrB,SAAiB,EACjB,UAAkB,EAClB,WAAmB,EACnB,kBAA0B,EAC1B,YAAoB,EACpB,KAAc;QAE/B,KAAK,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;QARhB,eAAU,GAAV,UAAU,CAAW;QACrB,cAAS,GAAT,SAAS,CAAQ;QACjB,eAAU,GAAV,UAAU,CAAQ;QAClB,gBAAW,GAAX,WAAW,CAAQ;QACnB,uBAAkB,GAAlB,kBAAkB,CAAQ;QAC1B,iBAAY,GAAZ,YAAY,CAAQ;QACpB,UAAK,GAAL,KAAK,CAAS;QAG/B,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IACjC,CAAC;IAED;;;;;;;;;;;;;;;;;;OAkBG;IACI,MAAM,CAAC,KAAK,CAAC,QAAQ,CAC1B,IAAY,EACZ,QAAgB;QAEhB,MAAM,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,UAAU,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACvE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAEhC,MAAM,MAAM,GAAG,MAAM,EAAE,MAAM,CAAC;QAC9B,MAAM,UAAU,GAAG,MAAM,EAAE,GAAG,CAAC;QAC/B,MAAM,KAAK,GAAG,MAAM,EAAE,KAAK,CAAC;QAE5B,IAAI,CAAC,MAAM,IAAI,CAAC,UAAU,IAAI,CAAC,KAAK,EAAE,CAAC;YACrC,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;QACvE,CAAC;QAED,OAAO,qBAAqB,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC;aAC3D,KAAK,CAAC,KAAK,CAAC;aACZ,KAAK,EAAE,CAAC;IACb,CAAC;IAED;;;;;;;OAOG;IACI,MAAM,CAAC,OAAO,CACnB,IAAY,EACZ,MAAc,EACd,UAAkB;QAElB,OAAO,IAAI,4BAA4B,CACrC,IAAI,EACJ,MAAM,EACN,MAAM,EACN,IAAI,EACJ,UAAU,CACX,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACK,MAAM,CAAC,QAAQ,CAAC,OAAe;QACrC,yDAAyD;QACzD,IAAI,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;QAEtE,sDAAsD;QACtD,GAAG,GAAG,GAAG;aACN,OAAO,CAAC,0CAA0C,EAAE,QAAQ,CAAC;aAC7D,OAAO,CAAC,wCAAwC,EAAE,QAAQ,CAAC,CAAC;QAE/D,8EAA8E;QAC9E,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,GAAG,KAAK,CAAC;YACxC,MAAM,WAAW,GACf,OAAO;iBACJ,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,0BAA0B;iBAC9C,KAAK,CAAC,UAAU,CAAC,CAAC,OAAO;gBAC1B,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC;YAC5B,GAAG,GAAG,GAAG,MAAM,KAAK,WAAW,KAAK,MAAM,EAAE,CAAC;QAC/C,CAAC;QAED,sDAAsD;QACtD,MAAM,IAAI,GAAG,uBAAuB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;QAEnE,kCAAkC;QAClC,OAAO,gBAAgB,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7D,CAAC;IAED;;;OAGG;IACI,MAAM,CAAC,KAAK,CAAC,MAAM,CACxB,MAAc,EACd,QAAgB,EAChB,KAAa,EACb,SAAiB,EACjB,UAAkB,EAClB,WAAmB,EACnB,aAAqB,EACrB,kBAA0B,EAC1B,YAAoB,EACpB,KAAc;QAEd,MAAM,UAAU,GAAG,qBAAqB,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;QACjE,MAAM,UAAU,GAAG,MAAM,CAAC,sBAAsB,EAAE,CAAC;QACnD,MAAM,MAAM,GAAiB,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;QACrD,OAAO,IAAI,qBAAqB,CAC9B,UAAU,EACV,MAAM,EACN,KAAK,EACL,UAAU,EACV,SAAS,EACT,UAAU,EACV,WAAW,EACX,kBAAkB,EAClB,YAAY,EACZ,KAAK,CACN,CAAC;IACJ,CAAC;IAES,KAAK,CAAC,mBAAmB,CACjC,UAAqC,EACrC,MAAoB;QAEpB,MAAM,eAAe,GAA6B;YAChD,GAAG,EAAE,IAAI,CAAC,YAAY;SACvB,CAAC;QACF,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,eAAe,CAAC,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC;QACnC,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC;aAC/D,kBAAkB,CAAC,eAAe,CAAC;aACnC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC;aACzB,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC;aAC7B,WAAW,EAAE;aACb,iBAAiB,CAAC,GAAG,IAAI,CAAC,kBAAkB,GAAG,CAAC;aAChD,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAEzB,MAAM,UAAU,GAAG,IAAI,eAAe,CAAC;YACrC,UAAU,EAAE,IAAI,CAAC,SAAS;YAC1B,SAAS,EAAE,SAAS;YACpB,KAAK,EAAE,IAAI,CAAC,KAAK;SAClB,CAAC,CAAC;QAEH,mCAAmC;QACnC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,2BAA2B,CACtD,UAAU,EACV,MAAM,EACN,IAAI,CAAC,UAAU,EACf,IAAI,CAAC,SAAS,EACd,UAAU,EACV;YACE,CAAC,KAAK,CAAC,qBAAqB,CAAC,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc,KAAK,SAAS;SACxE,CACF,CAAC;QAEF,MAAM,YAAY,GAAG,CAAC,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,CAAa,CAAC;QACjE,wBAAwB;QACxB,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,CAAC;QAEtC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC5C,OAAO,KAAK,CAAC,mCAAmC,CAC9C,UAAU,EACV,MAAM,EACN,QAAQ,CACT,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YAEvC,MAAM,kBAAkB,GAAG,MAAM,CAAC,GAAG,CAAC;YACtC,IAAI,CAAC,kBAAkB,IAAI,OAAO,kBAAkB,KAAK,QAAQ,EAAE,CAAC;gBAClE,MAAM,IAAI,KAAK,CACb,yDAAyD,CAC1D,CAAC;YACJ,CAAC;YAED,OAAO,KAAK,CAAC,mCAAmC,CAC9C,UAAU,EACV,EAAE,SAAS,EAAE,kBAAkB,EAAE,EACjC,QAAQ,CACT,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}

package/dist/configuration.d.ts

@@ -0,0 +1,15 @@
+import { HTTPHeaders } from './runtime.js';
+import { Authenticator } from './auth/index.js';
+export declare class Configuration {
+    private readonly authenticator;
+    private readonly configuration;
+    readonly userAgent: string;
+    constructor(authenticator?: Authenticator, configuration?: {
+        basePath?: string;
+        headers?: HTTPHeaders;
+        userAgent?: string;
+    });
+    get basePath(): string;
+    get accessToken(): (name?: string, scopes?: string[]) => string | Promise<string>;
+    get headers(): HTTPHeaders | undefined;
+}

package/dist/configuration.js

@@ -0,0 +1,25 @@
+import { NoAuthAuthenticator } from './auth/index.js';
+import { arch, platform, version as nodeVersion } from 'process';
+import { VERSION } from './version.js';
+export class Configuration {
+    authenticator;
+    configuration;
+    userAgent;
+    constructor(authenticator = new NoAuthAuthenticator(), configuration = {}) {
+        this.authenticator = authenticator;
+        this.configuration = configuration;
+        this.userAgent =
+            this.configuration.userAgent ??
+                `zitadel-client/${VERSION} (lang=ts; lang_version=${nodeVersion}; os=${platform}; arch=${arch})`;
+    }
+    get basePath() {
+        return this.authenticator.getHost().toString();
+    }
+    get accessToken() {
+        return async () => this.authenticator.getAuthToken();
+    }
+    get headers() {
+        return this.configuration.headers;
+    }
+}
+//# sourceMappingURL=configuration.js.map

package/dist/configuration.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"configuration.js","sourceRoot":"","sources":["../src/configuration.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAiB,MAAM,iBAAiB,CAAC;AACrE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,SAAS,CAAC;AACjE,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAEvC,MAAM,OAAO,aAAa;IAIL;IACA;IAJH,SAAS,CAAS;IAElC,YACmB,gBAA+B,IAAI,mBAAmB,EAAE,EACxD,gBAIb,EAAE;QALW,kBAAa,GAAb,aAAa,CAA2C;QACxD,kBAAa,GAAb,aAAa,CAIxB;QAEN,IAAI,CAAC,SAAS;YACZ,IAAI,CAAC,aAAa,CAAC,SAAS;gBAC5B,kBAAkB,OAAO,2BAA2B,WAAW,QAAQ,QAAQ,UAAU,IAAI,GAAG,CAAC;IACrG,CAAC;IAED,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC;IACjD,CAAC;IAED,IAAI,WAAW;QAIb,OAAO,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,YAAY,EAAE,CAAC;IACvD,CAAC;IAED,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC;IACpC,CAAC;CACF"}

package/dist/index.d.ts

@@ -0,0 +1,65 @@
+import { ActionServiceApi, BetaActionServiceApi, BetaAppServiceApi, BetaAuthorizationServiceApi, BetaFeatureServiceApi, BetaInstanceServiceApi, BetaInternalPermissionServiceApi, BetaOIDCServiceApi, BetaOrganizationServiceApi, BetaProjectServiceApi, BetaSessionServiceApi, BetaSettingsServiceApi, BetaTelemetryServiceApi, BetaUserServiceApi, BetaWebKeyServiceApi, FeatureServiceApi, IdentityProviderServiceApi, OIDCServiceApi, OrganizationServiceApi, SAMLServiceApi, SessionServiceApi, SettingsServiceApi, UserServiceApi, WebKeyServiceApi } from './apis/index.js';
+import { Authenticator } from './auth/index.js';
+import { Configuration } from './configuration.js';
+export * from './zitadel-exception.js';
+export * from './api-exception.js';
+export * from './configuration.js';
+export * from './models/index.js';
+export * from './auth/index.js';
+export default class Zitadel {
+    readonly actions: ActionServiceApi;
+    readonly betaActions: BetaActionServiceApi;
+    readonly betaApps: BetaAppServiceApi;
+    readonly betaAuthorizations: BetaAuthorizationServiceApi;
+    readonly betaFeatures: BetaFeatureServiceApi;
+    readonly betaInstances: BetaInstanceServiceApi;
+    readonly betaInternalPermissions: BetaInternalPermissionServiceApi;
+    readonly betaOidc: BetaOIDCServiceApi;
+    readonly betaOrganizations: BetaOrganizationServiceApi;
+    readonly betaProjects: BetaProjectServiceApi;
+    readonly betaSessions: BetaSessionServiceApi;
+    readonly betaSettings: BetaSettingsServiceApi;
+    readonly betaTelemetry: BetaTelemetryServiceApi;
+    readonly betaUsers: BetaUserServiceApi;
+    readonly betaWebkeys: BetaWebKeyServiceApi;
+    readonly features: FeatureServiceApi;
+    readonly idps: IdentityProviderServiceApi;
+    readonly oidc: OIDCServiceApi;
+    readonly organizations: OrganizationServiceApi;
+    readonly saml: SAMLServiceApi;
+    readonly sessions: SessionServiceApi;
+    readonly settings: SettingsServiceApi;
+    readonly users: UserServiceApi;
+    readonly webkeys: WebKeyServiceApi;
+    constructor(authenticator: Authenticator, mutateConfig?: (config: Configuration) => void);
+    /**
+     * Initialize the SDK with a Personal Access Token (PAT).
+     *
+     * @param host API URL (e.g. "https://api.zitadel.example.com").
+     * @param accessToken Personal Access Token for Bearer authentication.
+     * @returns Configured Zitadel client instance.
+     * @see https://zitadel.com/docs/guides/integrate/service-users/personal-access-token
+     */
+    static withAccessToken(host: string, accessToken: string): Zitadel;
+    /**
+     * Initialize the SDK using OAuth2 Client Credentials flow.
+     *
+     * @param host API URL.
+     * @param clientId OAuth2 client identifier.
+     * @param clientSecret OAuth2 client secret.
+     * @returns Configured Zitadel client instance with token auto-refresh.
+     * @throws {Error} If token retrieval fails.
+     * @see https://zitadel.com/docs/guides/integrate/service-users/client-credentials
+     */
+    static withClientCredentials(host: string, clientId: string, clientSecret: string): Promise<Zitadel>;
+    /**
+     * Initialize the SDK via Private Key JWT assertion.
+     *
+     * @param host API URL.
+     * @param keyFile Path to service account JSON or PEM key file.
+     * @returns Configured Zitadel client instance using JWT assertion.
+     * @throws {Error} If key parsing or token exchange fails.
+     * @see https://zitadel.com/docs/guides/integrate/service-users/private-key-jwt
+     */
+    static withPrivateKey(host: string, keyFile: string): Promise<Zitadel>;
+}

package/dist/index.js

@@ -0,0 +1,103 @@
+import { ActionServiceApi, BetaActionServiceApi, BetaAppServiceApi, BetaAuthorizationServiceApi, BetaFeatureServiceApi, BetaInstanceServiceApi, BetaInternalPermissionServiceApi, BetaOIDCServiceApi, BetaOrganizationServiceApi, BetaProjectServiceApi, BetaSessionServiceApi, BetaSettingsServiceApi, BetaTelemetryServiceApi, BetaUserServiceApi, BetaWebKeyServiceApi, FeatureServiceApi, IdentityProviderServiceApi, OIDCServiceApi, OrganizationServiceApi, SAMLServiceApi, SessionServiceApi, SettingsServiceApi, UserServiceApi, WebKeyServiceApi, } from './apis/index.js';
+import { ClientCredentialsAuthenticator, PersonalAccessAuthenticator, WebTokenAuthenticator, } from './auth/index.js';
+import { Configuration } from './configuration.js';
+export * from './zitadel-exception.js';
+export * from './api-exception.js';
+export * from './configuration.js';
+export * from './models/index.js';
+export * from './auth/index.js';
+export default class Zitadel {
+    actions;
+    betaActions;
+    betaApps;
+    betaAuthorizations;
+    betaFeatures;
+    betaInstances;
+    betaInternalPermissions;
+    betaOidc;
+    betaOrganizations;
+    betaProjects;
+    betaSessions;
+    betaSettings;
+    betaTelemetry;
+    betaUsers;
+    betaWebkeys;
+    features;
+    idps;
+    oidc;
+    organizations;
+    saml;
+    sessions;
+    settings;
+    users;
+    webkeys;
+    constructor(authenticator, mutateConfig) {
+        const config = new Configuration(authenticator);
+        if (mutateConfig) {
+            mutateConfig(config);
+        }
+        this.actions = new ActionServiceApi(config);
+        this.betaActions = new BetaActionServiceApi(config);
+        this.betaApps = new BetaAppServiceApi(config);
+        this.betaAuthorizations = new BetaAuthorizationServiceApi(config);
+        this.betaFeatures = new BetaFeatureServiceApi(config);
+        this.betaInstances = new BetaInstanceServiceApi(config);
+        this.betaInternalPermissions = new BetaInternalPermissionServiceApi(config);
+        this.betaOidc = new BetaOIDCServiceApi(config);
+        this.betaOrganizations = new BetaOrganizationServiceApi(config);
+        this.betaProjects = new BetaProjectServiceApi(config);
+        this.betaSessions = new BetaSessionServiceApi(config);
+        this.betaSettings = new BetaSettingsServiceApi(config);
+        this.betaTelemetry = new BetaTelemetryServiceApi(config);
+        this.betaUsers = new BetaUserServiceApi(config);
+        this.betaWebkeys = new BetaWebKeyServiceApi(config);
+        this.features = new FeatureServiceApi(config);
+        this.idps = new IdentityProviderServiceApi(config);
+        this.oidc = new OIDCServiceApi(config);
+        this.organizations = new OrganizationServiceApi(config);
+        this.saml = new SAMLServiceApi(config);
+        this.sessions = new SessionServiceApi(config);
+        this.settings = new SettingsServiceApi(config);
+        this.users = new UserServiceApi(config);
+        this.webkeys = new WebKeyServiceApi(config);
+    }
+    /**
+     * Initialize the SDK with a Personal Access Token (PAT).
+     *
+     * @param host API URL (e.g. "https://api.zitadel.example.com").
+     * @param accessToken Personal Access Token for Bearer authentication.
+     * @returns Configured Zitadel client instance.
+     * @see https://zitadel.com/docs/guides/integrate/service-users/personal-access-token
+     */
+    static withAccessToken(host, accessToken) {
+        return new this(new PersonalAccessAuthenticator(host, accessToken));
+    }
+    /**
+     * Initialize the SDK using OAuth2 Client Credentials flow.
+     *
+     * @param host API URL.
+     * @param clientId OAuth2 client identifier.
+     * @param clientSecret OAuth2 client secret.
+     * @returns Configured Zitadel client instance with token auto-refresh.
+     * @throws {Error} If token retrieval fails.
+     * @see https://zitadel.com/docs/guides/integrate/service-users/client-credentials
+     */
+    static async withClientCredentials(host, clientId, clientSecret) {
+        const authenticator = await ClientCredentialsAuthenticator.builder(host, clientId, clientSecret).build();
+        return new this(authenticator);
+    }
+    /**
+     * Initialize the SDK via Private Key JWT assertion.
+     *
+     * @param host API URL.
+     * @param keyFile Path to service account JSON or PEM key file.
+     * @returns Configured Zitadel client instance using JWT assertion.
+     * @throws {Error} If key parsing or token exchange fails.
+     * @see https://zitadel.com/docs/guides/integrate/service-users/private-key-jwt
+     */
+    static async withPrivateKey(host, keyFile) {
+        const authenticator = await WebTokenAuthenticator.fromJson(host, keyFile);
+        return new this(authenticator);
+    }
+}
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gBAAgB,EAChB,oBAAoB,EACpB,iBAAiB,EACjB,2BAA2B,EAC3B,qBAAqB,EACrB,sBAAsB,EACtB,gCAAgC,EAChC,kBAAkB,EAClB,0BAA0B,EAC1B,qBAAqB,EACrB,qBAAqB,EACrB,sBAAsB,EACtB,uBAAuB,EACvB,kBAAkB,EAClB,oBAAoB,EACpB,iBAAiB,EACjB,0BAA0B,EAC1B,cAAc,EACd,sBAAsB,EACtB,cAAc,EACd,iBAAiB,EACjB,kBAAkB,EAClB,cAAc,EACd,gBAAgB,GACjB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAEL,8BAA8B,EAC9B,2BAA2B,EAC3B,qBAAqB,GACtB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAEnD,cAAc,wBAAwB,CAAC;AACvC,cAAc,oBAAoB,CAAC;AACnC,cAAc,oBAAoB,CAAC;AACnC,cAAc,mBAAmB,CAAC;AAClC,cAAc,iBAAiB,CAAC;AAEhC,MAAM,CAAC,OAAO,OAAO,OAAO;IACV,OAAO,CAAmB;IAC1B,WAAW,CAAuB;IAClC,QAAQ,CAAoB;IAC5B,kBAAkB,CAA8B;IAChD,YAAY,CAAwB;IACpC,aAAa,CAAyB;IACtC,uBAAuB,CAAmC;IAC1D,QAAQ,CAAqB;IAC7B,iBAAiB,CAA6B;IAC9C,YAAY,CAAwB;IACpC,YAAY,CAAwB;IACpC,YAAY,CAAyB;IACrC,aAAa,CAA0B;IACvC,SAAS,CAAqB;IAC9B,WAAW,CAAuB;IAClC,QAAQ,CAAoB;IAC5B,IAAI,CAA6B;IACjC,IAAI,CAAiB;IACrB,aAAa,CAAyB;IACtC,IAAI,CAAiB;IACrB,QAAQ,CAAoB;IAC5B,QAAQ,CAAqB;IAC7B,KAAK,CAAiB;IACtB,OAAO,CAAmB;IAE1C,YACE,aAA4B,EAC5B,YAA8C;QAE9C,MAAM,MAAM,GAAG,IAAI,aAAa,CAAC,aAAa,CAAC,CAAC;QAEhD,IAAI,YAAY,EAAE,CAAC;YACjB,YAAY,CAAC,MAAM,CAAC,CAAC;QACvB,CAAC;QAED,IAAI,CAAC,OAAO,GAAG,IAAI,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAC5C,IAAI,CAAC,WAAW,GAAG,IAAI,oBAAoB,CAAC,MAAM,CAAC,CAAC;QACpD,IAAI,CAAC,QAAQ,GAAG,IAAI,iBAAiB,CAAC,MAAM,CAAC,CAAC;QAC9C,IAAI,CAAC,kBAAkB,GAAG,IAAI,2BAA2B,CAAC,MAAM,CAAC,CAAC;QAClE,IAAI,CAAC,YAAY,GAAG,IAAI,qBAAqB,CAAC,MAAM,CAAC,CAAC;QACtD,IAAI,CAAC,aAAa,GAAG,IAAI,sBAAsB,CAAC,MAAM,CAAC,CAAC;QACxD,IAAI,CAAC,uBAAuB,GAAG,IAAI,gCAAgC,CAAC,MAAM,CAAC,CAAC;QAC5E,IAAI,CAAC,QAAQ,GAAG,IAAI,kBAAkB,CAAC,MAAM,CAAC,CAAC;QAC/C,IAAI,CAAC,iBAAiB,GAAG,IAAI,0BAA0B,CAAC,MAAM,CAAC,CAAC;QAChE,IAAI,CAAC,YAAY,GAAG,IAAI,qBAAqB,CAAC,MAAM,CAAC,CAAC;QACtD,IAAI,CAAC,YAAY,GAAG,IAAI,qBAAqB,CAAC,MAAM,CAAC,CAAC;QACtD,IAAI,CAAC,YAAY,GAAG,IAAI,sBAAsB,CAAC,MAAM,CAAC,CAAC;QACvD,IAAI,CAAC,aAAa,GAAG,IAAI,uBAAuB,CAAC,MAAM,CAAC,CAAC;QACzD,IAAI,CAAC,SAAS,GAAG,IAAI,kBAAkB,CAAC,MAAM,CAAC,CAAC;QAChD,IAAI,CAAC,WAAW,GAAG,IAAI,oBAAoB,CAAC,MAAM,CAAC,CAAC;QACpD,IAAI,CAAC,QAAQ,GAAG,IAAI,iBAAiB,CAAC,MAAM,CAAC,CAAC;QAC9C,IAAI,CAAC,IAAI,GAAG,IAAI,0BAA0B,CAAC,MAAM,CAAC,CAAC;QACnD,IAAI,CAAC,IAAI,GAAG,IAAI,cAAc,CAAC,MAAM,CAAC,CAAC;QACvC,IAAI,CAAC,aAAa,GAAG,IAAI,sBAAsB,CAAC,MAAM,CAAC,CAAC;QACxD,IAAI,CAAC,IAAI,GAAG,IAAI,cAAc,CAAC,MAAM,CAAC,CAAC;QACvC,IAAI,CAAC,QAAQ,GAAG,IAAI,iBAAiB,CAAC,MAAM,CAAC,CAAC;QAC9C,IAAI,CAAC,QAAQ,GAAG,IAAI,kBAAkB,CAAC,MAAM,CAAC,CAAC;QAC/C,IAAI,CAAC,KAAK,GAAG,IAAI,cAAc,CAAC,MAAM,CAAC,CAAC;QACxC,IAAI,CAAC,OAAO,GAAG,IAAI,gBAAgB,CAAC,MAAM,CAAC,CAAC;IAC9C,CAAC;IAED;;;;;;;OAOG;IACI,MAAM,CAAC,eAAe,CAAC,IAAY,EAAE,WAAmB;QAC7D,OAAO,IAAI,IAAI,CAAC,IAAI,2BAA2B,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC;IACtE,CAAC;IAED;;;;;;;;;OASG;IACI,MAAM,CAAC,KAAK,CAAC,qBAAqB,CACvC,IAAY,EACZ,QAAgB,EAChB,YAAoB;QAEpB,MAAM,aAAa,GAAG,MAAM,8BAA8B,CAAC,OAAO,CAChE,IAAI,EACJ,QAAQ,EACR,YAAY,CACb,CAAC,KAAK,EAAE,CAAC;QAEV,OAAO,IAAI,IAAI,CAAC,aAAa,CAAC,CAAC;IACjC,CAAC;IAED;;;;;;;;OAQG;IACI,MAAM,CAAC,KAAK,CAAC,cAAc,CAChC,IAAY,EACZ,OAAe;QAEf,MAAM,aAAa,GAAG,MAAM,qBAAqB,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAE1E,OAAO,IAAI,IAAI,CAAC,aAAa,CAAC,CAAC;IACjC,CAAC;CACF"}

package/dist/models/action-service-any.d.ts

@@ -0,0 +1,45 @@
+/**
+ * Zitadel SDK
+ * The Zitadel SDK is a convenience wrapper around the Zitadel APIs to assist you in integrating with your Zitadel environment. This SDK enables you to handle resources, settings, and configurations within the Zitadel platform.
+ *
+ * The version of the OpenAPI document: 1.0.0
+ *
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+/**
+ * Contains an arbitrary serialized message along with a @type that describes the type of the serialized message, with an additional debug field for ConnectRPC error details.
+ * @export
+ * @interface ActionServiceAny
+ */
+export interface ActionServiceAny {
+    [key: string]: any | any;
+    /**
+     * A URL that acts as a globally unique identifier for the type of the serialized message. For example: `type.googleapis.com/google.rpc.ErrorInfo`. This is used to determine the schema of the data in the `value` field and is the discriminator for the `debug` field.
+     * @type {string}
+     * @memberof ActionServiceAny
+     */
+    type?: string;
+    /**
+     * The Protobuf message, serialized as bytes and base64-encoded. The specific message type is identified by the `type` field.
+     * @type {Blob}
+     * @memberof ActionServiceAny
+     */
+    value?: Blob;
+    /**
+     * Deserialized error detail payload. The 'type' field indicates the schema. This field is for easier debugging and should not be relied upon for application logic.
+     * @type {any}
+     * @memberof ActionServiceAny
+     */
+    debug?: any | null;
+}
+/**
+ * Check if a given object implements the ActionServiceAny interface.
+ */
+export declare function instanceOfActionServiceAny(value: object): value is ActionServiceAny;
+export declare function ActionServiceAnyFromJSON(json: any): ActionServiceAny;
+export declare function ActionServiceAnyFromJSONTyped(json: any, ignoreDiscriminator: boolean): ActionServiceAny;
+export declare function ActionServiceAnyToJSON(json: any): ActionServiceAny;
+export declare function ActionServiceAnyToJSONTyped(value?: ActionServiceAny | null, ignoreDiscriminator?: boolean): any;

package/dist/models/action-service-any.js

@@ -0,0 +1,48 @@
+/* tslint:disable */
+/* eslint-disable */
+/**
+ * Zitadel SDK
+ * The Zitadel SDK is a convenience wrapper around the Zitadel APIs to assist you in integrating with your Zitadel environment. This SDK enables you to handle resources, settings, and configurations within the Zitadel platform.
+ *
+ * The version of the OpenAPI document: 1.0.0
+ *
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+/**
+ * Check if a given object implements the ActionServiceAny interface.
+ */
+export function instanceOfActionServiceAny(value) {
+    return true;
+}
+export function ActionServiceAnyFromJSON(json) {
+    return ActionServiceAnyFromJSONTyped(json, false);
+}
+export function ActionServiceAnyFromJSONTyped(json, ignoreDiscriminator) {
+    if (json == null) {
+        return json;
+    }
+    return {
+        ...json,
+        'type': json['type'] == null ? undefined : json['type'],
+        'value': json['value'] == null ? undefined : json['value'],
+        'debug': json['debug'] == null ? undefined : json['debug'],
+    };
+}
+export function ActionServiceAnyToJSON(json) {
+    return ActionServiceAnyToJSONTyped(json, false);
+}
+export function ActionServiceAnyToJSONTyped(value, ignoreDiscriminator = false) {
+    if (value == null) {
+        return value;
+    }
+    return {
+        ...value,
+        'type': value['type'],
+        'value': value['value'],
+        'debug': value['debug'],
+    };
+}
+//# sourceMappingURL=action-service-any.js.map

package/dist/models/action-service-any.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"action-service-any.js","sourceRoot":"","sources":["../../src/models/action-service-any.ts"],"names":[],"mappings":"AAAA,oBAAoB;AACpB,oBAAoB;AACpB;;;;;;;;;;GAUG;AA8BH;;GAEG;AACH,MAAM,UAAU,0BAA0B,CAAC,KAAa;IACpD,OAAO,IAAI,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,IAAS;IAC9C,OAAO,6BAA6B,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,IAAS,EAAE,mBAA4B;IACjF,IAAI,IAAI,IAAI,IAAI,EAAE,CAAC;QACf,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,OAAO;QAEC,GAAG,IAAI;QACX,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;QACvD,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC;QAC1D,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC;KAC7D,CAAC;AACN,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,IAAS;IAC5C,OAAO,2BAA2B,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AACpD,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,KAA+B,EAAE,sBAA+B,KAAK;IAC7G,IAAI,KAAK,IAAI,IAAI,EAAE,CAAC;QAChB,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,OAAO;QAEC,GAAG,KAAK;QACZ,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC;QACrB,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC;QACvB,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC;KAC1B,CAAC;AACN,CAAC"}

package/dist/models/action-service-condition.d.ts

@@ -0,0 +1,54 @@
+/**
+ * Zitadel SDK
+ * The Zitadel SDK is a convenience wrapper around the Zitadel APIs to assist you in integrating with your Zitadel environment. This SDK enables you to handle resources, settings, and configurations within the Zitadel platform.
+ *
+ * The version of the OpenAPI document: 1.0.0
+ *
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+import type { ActionServiceEventExecution } from './action-service-event-execution.js';
+import type { ActionServiceResponseExecution } from './action-service-response-execution.js';
+import type { ActionServiceRequestExecution } from './action-service-request-execution.js';
+import type { ActionServiceFunctionExecution } from './action-service-function-execution.js';
+/**
+ *
+ * @export
+ * @interface ActionServiceCondition
+ */
+export interface ActionServiceCondition {
+    /**
+     *
+     * @type {ActionServiceEventExecution}
+     * @memberof ActionServiceCondition
+     */
+    event?: ActionServiceEventExecution;
+    /**
+     *
+     * @type {ActionServiceFunctionExecution}
+     * @memberof ActionServiceCondition
+     */
+    _function?: ActionServiceFunctionExecution;
+    /**
+     *
+     * @type {ActionServiceRequestExecution}
+     * @memberof ActionServiceCondition
+     */
+    request?: ActionServiceRequestExecution;
+    /**
+     *
+     * @type {ActionServiceResponseExecution}
+     * @memberof ActionServiceCondition
+     */
+    response?: ActionServiceResponseExecution;
+}
+/**
+ * Check if a given object implements the ActionServiceCondition interface.
+ */
+export declare function instanceOfActionServiceCondition(value: object): value is ActionServiceCondition;
+export declare function ActionServiceConditionFromJSON(json: any): ActionServiceCondition;
+export declare function ActionServiceConditionFromJSONTyped(json: any, ignoreDiscriminator: boolean): ActionServiceCondition;
+export declare function ActionServiceConditionToJSON(json: any): ActionServiceCondition;
+export declare function ActionServiceConditionToJSONTyped(value?: ActionServiceCondition | null, ignoreDiscriminator?: boolean): any;