openxiangda-devkit-core 2.0.0-alpha.12 → 2.0.0-alpha.121

package/dist/control-plane-client.d.ts

@@ -1,20 +1,114 @@
-import { type AppPackage, type ApplicationSecret, type ApplicationSecretAuditEvent, type AppVersion, type Diagnostic, type AuthorizationDecision, type AuthorizationBatchResult, type AuthorizationExplainRequest, type DeploymentKind, type DeploymentRun, type EnvironmentHead, type EventDelivery, type EventSubscription, type DataPage, type DataAggregatePage, type DataAggregateQuery, type DataAuditPage, type DataFileRef, type DataFileUploadPlan, type DataQuery, type DataRecord, type DataResource, type DataTransactionRequest, type DataTransactionResult, type DirectoryEntryKind, type DirectoryResolveRequest, type DirectorySearchResult, type PlatformCapabilities, type OAuthApplicationPrincipal, type OAuthAuditEvent, type OAuthClient, type RuntimeOAuthCredentialStatus, type ProvisionedApplication, type Principal, type ApplicationRole, type RelationshipGrant, type RelationshipGrantSubjectType, type TimerSubscription, type RoleAssignment, type RoleSession, type WorkflowBinding, type WorkflowCommand, type WorkflowDefinition, type WorkflowDelegation, type WorkflowDelegationTarget, type WorkflowAssigneeProvider, type WorkflowInstance, type WorkflowKernelDescriptor, type WorkflowKernelWorkCenter, type WorkflowPreparation, type WorkflowSurface, type WorkflowTask } from "openxiangda-contracts/browser";
+import { type AppPackage, type ApplicationEnvironmentList, type ApplicationSecret, type ApplicationSecretAuditEvent, type AppVersion, type ProductionPromotionPreflight, type Diagnostic, type NativeRelationshipGrant, type NativeRelationshipGrantPage, type NativeAuthorizationProjectionHealth, type NativeAuthorizationProjectionMutationResult, type NativeAuthorizationManagementCatalog, type NativeAuthorizationMutationReceipt, type NativeRoleManagementAction, type NativeRoleManagementGrantMutationResult, type NativeRoleManagementGrantPage, type NativeRoleMembershipMutationResult, type NativeRoleMembershipPage, type NativeScopeGrant, type NativeSuperAdminGrant, type NativeSuperAdminGrantPage, type DeploymentKind, type DeploymentEnvironment, type DeploymentRun, type EnvironmentHead, type EventDelivery, type EventSubscription, type DateTrigger, type DataPage, type DataAggregatePage, type DataAggregateQuery, type DataAuditPage, type DataFileRef, type DataFileUploadPlan, type DataQuery, type DataRecord, type DataResource, type DataTransactionRequest, type DataTransactionResult, type DirectoryEntryKind, type DirectoryResolveRequest, type DirectorySearchResult, type PlatformCapabilities, type ConfigurationValidationRequest, type ConfigurationValidationResult, type OAuthApplicationPrincipal, type OAuthAuditEvent, type OAuthClient, type RuntimeOAuthCredentialStatus, type ProvisionedApplication, type ApplicationRole, type RelationshipGrant, type RelationshipGrantSubjectType, type TimerSubscription, type RoleAssignment, type WorkflowBinding, type WorkflowNodeConfigurations, type ApplicationAdministrationContext, type WorkflowCommand, type WorkflowCommandInput, type WorkflowCommandResult, type WorkflowDefinition, type WorkflowDelegation, type WorkflowDelegationTarget, type WorkflowAssigneeProvider, type WorkflowSurface, type WorkflowWorkCenterItem, type WorkflowTimeline } from "openxiangda-contracts/browser";
 type FetchLike = (input: string | URL | Request, init?: RequestInit) => Promise<Response>;
 export interface ControlPlaneClientOptions {
     baseUrl: string;
     token?: string;
+    tokenProvider?: {
+        getAccessToken(input?: {
+            forceRefresh?: boolean;
+        }): Promise<string>;
+    };
     credentials?: RequestCredentials;
     fetch?: FetchLike;
 }
-export interface IdentityRequest {
-    roleSessionId?: string;
+export interface ConnectedDevelopmentSessionStatus {
+    schemaVersion: "openxiangda.connected-dev-session/v2";
+    sessionId: string;
+    expiresAt: string;
+    expiresIn: number;
+    mode: "published-resources" | "manifest-overlay";
+    manifestOverlay: boolean;
+    additiveSchemaSync: boolean;
+    overlay?: {
+        resources: number;
+        addedFields: Array<{
+            resourceCode: string;
+            fieldCode: string;
+        }>;
+    };
+    environment: {
+        id: string;
+        key: DeploymentEnvironment;
+        activeAppVersionId: string;
+        headRevision: number;
+    };
+    principal: {
+        type: "developer";
+        userId: string;
+        roleCodes: string[];
+        isAppSuperAdmin: boolean;
+        capabilityCodes: string[];
+    };
+    manifestDigest: string | null;
+}
+export interface ConnectedDevelopmentSessionGrant extends ConnectedDevelopmentSessionStatus {
+    /** Returned once by create; never persist or print it. */
+    sessionToken: string;
+}
+export interface ChinaDivisionListItem {
+    adcode: string;
+    citycode?: string;
+    name: string;
+    level?: string;
+    center?: string;
+    parentAdcode?: string;
+    hasChildren: boolean;
+}
+export interface PerspectiveRequest {
+    perspectiveCode?: string;
+}
+export interface NativeAuthorizationPageInput {
+    environmentKey?: DeploymentEnvironment;
+    status?: "active" | "revoked" | "expired";
+    limit?: number;
+    offset?: number;
+}
+export interface CreateNativeRoleMembershipInput {
+    environmentKey: DeploymentEnvironment;
+    operationId: string;
+    userId: string;
+    roleCode: string;
+    scopeGrants?: NativeScopeGrant[];
+    validFrom?: string | null;
+    validTo?: string | null;
+    reason: string;
 }
-export interface RoleSessionRequest extends IdentityRequest {
-    roleSessionId: string;
+export interface UpdateNativeRoleMembershipInput {
+    environmentKey: DeploymentEnvironment;
+    operationId: string;
+    expectedRevision: number;
+    scopeGrants?: NativeScopeGrant[];
+    validFrom?: string | null;
+    validTo?: string | null;
+    reason: string;
+}
+export interface NativeRelationshipGrantFilter extends NativeAuthorizationPageInput {
+    subjectType?: "user" | "role_membership";
+    subjectKey?: string;
+    relationCode?: string;
+    resourceCode?: string;
+    resourceId?: string;
+}
+export interface NativeScopeValuePage {
+    schemaVersion: string;
+    environment: {
+        id: string;
+        key: DeploymentEnvironment;
+        headRevision: number;
+        authzRevisionId: string;
+        scopeDataVersion: string;
+    };
+    dimensionCode: string;
+    items: Array<{
+        id: string;
+        label: string;
+    }>;
+    limit: number;
+    offset: number;
 }
 export type ApplicationApiQuery = Record<string, string | number | boolean | null | undefined>;
 export interface ApplicationApiRequest extends RequestInit {
-    roleSessionId?: string;
+    perspectiveCode?: string;
     query?: ApplicationApiQuery;
 }
 export interface CreateOAuthClientInput {
@@ -64,16 +158,6 @@ export interface RotateApplicationSecretInput {
 export type ApplicationApiJsonRequest<TBody = unknown> = Omit<ApplicationApiRequest, "body"> & {
     body?: TBody;
 };
-export interface RoleSessionBootstrapResult {
-    state: "active" | "selection_required" | "unassigned";
-    assignments: RoleAssignment[];
-    roleSession: RoleSession | null;
-    principal: Principal | null;
-}
-export interface PrincipalResult {
-    roleSession: RoleSession;
-    principal: Principal;
-}
 export interface RelationshipGrantFilter {
     relationCode?: string;
     subjectType?: RelationshipGrantSubjectType;
@@ -107,7 +191,7 @@ export interface CreateRoleAssignmentInput {
 export interface CreateDeploymentInput {
     appCode: string;
     environmentId?: string;
-    environmentKind?: "development" | "preproduction" | "production";
+    environmentKind?: DeploymentEnvironment;
     kind?: DeploymentKind;
     packageDigest: string;
     package: AppPackage;
@@ -123,7 +207,11 @@ export interface DeployExistingVersionInput {
     appCode: string;
     appVersionId: string;
     environmentId?: string;
-    environmentKind?: "development" | "preproduction" | "production";
+    environmentKind?: DeploymentEnvironment;
+    idempotencyKey: string;
+    requestId?: string;
+}
+export interface ChangeEnvironmentRuntimeStateInput {
     idempotencyKey: string;
     requestId?: string;
 }
@@ -135,57 +223,69 @@ export interface UploadArtifactInput {
     content: BlobPart;
     metadata?: Record<string, unknown>;
 }
-export interface CreateEventSubscriptionInput {
-    appCode: string;
-    code: string;
-    description?: string;
-    eventTypes: string[];
-    subjectFilters?: EventSubscription["subjectFilters"];
-    environmentKey?: string;
-    endpointPath: string;
-    timeoutMs?: number;
-    maxAttempts?: number;
-    initialBackoffMs?: number;
-    maxBackoffMs?: number;
-}
-export interface CreateTimerSubscriptionInput {
-    appCode: string;
-    code: string;
-    eventType: string;
-    cronExpression: string;
-    timezone?: string;
-    payload?: Record<string, unknown>;
-    environmentKey?: string;
-}
-export interface PrepareWorkflowStartInput {
-    appCode: string;
-    workflowCode: string;
-    environmentKey?: string;
-    businessKey: string;
-    dataRef: Record<string, unknown>;
-    facts: Record<string, unknown>;
-    answers?: Record<string, unknown>;
-    roleSessionId: string;
-}
-export interface WorkflowTaskCommandInput {
-    expectedTaskVersion: number;
-    expectedInstanceVersion: number;
-    idempotencyKey: string;
-    input?: Record<string, unknown>;
+export interface WorkflowTaskCommandInput extends WorkflowCommandInput {
+    csrfToken: string;
 }
 export declare class ControlPlaneError extends Error {
     readonly status: number;
     readonly code: string;
     readonly data?: unknown | undefined;
-    constructor(status: number, code: string, message: string, data?: unknown | undefined);
+    readonly remote?: {
+        retryable?: boolean;
+        remediation?: string;
+        requestId?: string;
+        path?: string;
+        field?: string;
+    } | undefined;
+    constructor(status: number, code: string, message: string, data?: unknown | undefined, remote?: {
+        retryable?: boolean;
+        remediation?: string;
+        requestId?: string;
+        path?: string;
+        field?: string;
+    } | undefined);
 }
 export declare class OpenXiangdaControlPlaneClient {
     private readonly options;
     private readonly baseUrl;
     private readonly fetch;
+    private readonly artifactUploadFetch;
     constructor(options: ControlPlaneClientOptions);
     capabilities(): Promise<PlatformCapabilities>;
+    validateConfigurationCompatibility(appCode: string, capabilities: PlatformCapabilities, input: ConfigurationValidationRequest): Promise<ConfigurationValidationResult>;
     provisionApplication(input: ProvisionApplicationInput): Promise<ProvisionedApplication>;
+    createConnectedDevelopmentSession(appCode: string, input: {
+        environmentKey: DeploymentEnvironment;
+        manifestDigest?: string;
+        configuration?: unknown;
+    }): Promise<ConnectedDevelopmentSessionGrant>;
+    preparePreproductionAcceptanceIdentities(appCode: string, input: {
+        environmentKey: "preproduction";
+        redirectUri?: string;
+        expiresInMinutes?: number;
+        actors: Array<{
+            key: string;
+            name?: string;
+            roleCodes: string[];
+            departmentIds?: string[];
+        }>;
+    }): Promise<{
+        schemaVersion: "openxiangda.preproduction-acceptance-identities/v2";
+        appCode: string;
+        environmentKey: "preproduction";
+        expiresAt: string;
+        actors: Array<{
+            key: string;
+            userId: string;
+            roleCodes: string[];
+            expiresAt: string;
+            loginUrl: string;
+            loginUrlExpiresAt: string;
+        }>;
+    }>;
+    connectedDevelopmentSession(appCode: string, sessionToken: string): Promise<ConnectedDevelopmentSessionStatus>;
+    refreshConnectedDevelopmentSession(appCode: string, sessionToken: string): Promise<ConnectedDevelopmentSessionStatus>;
+    revokeConnectedDevelopmentSession(appCode: string, sessionToken: string): Promise<void>;
     oauthClients(appCode: string): Promise<{
         items: OAuthClient[];
         total: number;
@@ -218,6 +318,12 @@ export declare class OpenXiangdaControlPlaneClient {
     }): Promise<OAuthTokenResponse>;
     applicationApiResponse(appCode: string, environmentKey: string, runtimePath: string, input: ApplicationApiRequest): Promise<Response>;
     applicationApiJson<TResponse = unknown, TBody = unknown>(appCode: string, environmentKey: string, runtimePath: string, input: ApplicationApiJsonRequest<TBody>): Promise<TResponse>;
+    artifactStatus(appCode: string, digest: string): Promise<{
+        digest: string;
+        kind: string;
+        contentType: string;
+        sizeBytes: number;
+    } | null>;
     uploadArtifact(input: UploadArtifactInput): Promise<Record<string, unknown>>;
     createDeployment(input: CreateDeploymentInput): Promise<DeploymentRun>;
     deployment(appCode: string, deploymentId: string): Promise<DeploymentRun>;
@@ -225,15 +331,21 @@ export declare class OpenXiangdaControlPlaneClient {
         items: DeploymentRun[];
         total: number;
     }>;
+    applicationEnvironments(appCode: string): Promise<ApplicationEnvironmentList>;
+    startEnvironment(appCode: string, environmentKey: DeploymentEnvironment, input: ChangeEnvironmentRuntimeStateInput): Promise<DeploymentRun>;
+    stopEnvironment(appCode: string, environmentKey: DeploymentEnvironment, input: ChangeEnvironmentRuntimeStateInput): Promise<DeploymentRun>;
     retryDeployment(appCode: string, deploymentId: string): Promise<DeploymentRun>;
     cancelDeployment(appCode: string, deploymentId: string): Promise<DeploymentRun>;
     promote(input: DeployExistingVersionInput): Promise<DeploymentRun>;
+    redeploy(input: DeployExistingVersionInput): Promise<DeploymentRun>;
     rollback(input: DeployExistingVersionInput): Promise<DeploymentRun>;
     appVersions(appCode: string, limit?: number): Promise<{
         items: AppVersion[];
         total: number;
     }>;
+    productionPromotionPreflight(appCode: string, sourceDeploymentId: string): Promise<ProductionPromotionPreflight>;
     environmentHead(appCode: string, environmentKey: string): Promise<EnvironmentHead>;
+    private changeEnvironmentRuntimeState;
     applicationSecrets(appCode: string, environmentKey: string): Promise<{
         items: ApplicationSecret[];
         total: number;
@@ -249,7 +361,6 @@ export declare class OpenXiangdaControlPlaneClient {
     applicationSecretAuditEvents(appCode: string, environmentKey: string, name: string, limit?: number): Promise<{
         items: ApplicationSecretAuditEvent[];
     }>;
-    createEventSubscription(input: CreateEventSubscriptionInput): Promise<EventSubscription>;
     eventSubscriptions(appCode: string): Promise<{
         items: EventSubscription[];
     }>;
@@ -257,16 +368,10 @@ export declare class OpenXiangdaControlPlaneClient {
         expectedRevision: number;
         status: "active" | "paused";
     }): Promise<EventSubscription>;
-    rotateEventSubscriptionSecret(appCode: string, subscriptionId: string, input: {
-        expectedRevision: number;
-        idempotencyKey: string;
-        gracePeriodSeconds?: number;
-    }): Promise<EventSubscription>;
     eventDeliveries(appCode: string, limit?: number): Promise<{
         items: EventDelivery[];
     }>;
     replayEventDelivery(appCode: string, deliveryId: string, idempotencyKey?: string): Promise<EventDelivery>;
-    createTimerSubscription(input: CreateTimerSubscriptionInput): Promise<TimerSubscription>;
     timerSubscriptions(appCode: string): Promise<{
         items: TimerSubscription[];
     }>;
@@ -274,6 +379,13 @@ export declare class OpenXiangdaControlPlaneClient {
         expectedRevision: number;
         status: "active" | "paused";
     }): Promise<TimerSubscription>;
+    dateTriggers(appCode: string): Promise<{
+        items: DateTrigger[];
+    }>;
+    setDateTriggerStatus(appCode: string, triggerId: string, input: {
+        expectedRevision: number;
+        status: "active" | "paused";
+    }): Promise<DateTrigger>;
     registerWorkflowDefinition(appCode: string, version: number, definition: WorkflowDefinition): Promise<Record<string, unknown>>;
     registerWorkflowBinding(appCode: string, version: number, binding: WorkflowBinding): Promise<Record<string, unknown>>;
     applyWorkflowAssigneeProvider(appCode: string, input: {
@@ -298,61 +410,171 @@ export declare class OpenXiangdaControlPlaneClient {
         bindingVersion: number;
         expectedRevision?: number;
     }): Promise<Record<string, unknown>>;
-    prepareWorkflowStart(input: PrepareWorkflowStartInput): Promise<WorkflowPreparation>;
-    startWorkflow(appCode: string, input: {
-        preparationToken: string;
-        idempotencyKey: string;
-        roleSessionId: string;
-    }): Promise<WorkflowInstance>;
     createWorkflowDelegation(appCode: string, input: {
+        environmentKey?: string;
         workflowCode?: string;
+        delegatorRoleSubjectKey: string;
         delegateUserId: string;
-        delegateRoleAssignmentId: string;
+        delegateRoleSubjectKey: string;
         validFrom: string;
         validTo: string;
         reason: string;
-    }, request: RoleSessionRequest): Promise<WorkflowDelegation>;
-    workflowDelegationTargets(appCode: string, userId: string, request: RoleSessionRequest): Promise<{
+    }): Promise<WorkflowDelegation>;
+    workflowDelegationTargets(appCode: string, userId: string, environmentKey?: string): Promise<{
         items: WorkflowDelegationTarget[];
         total: number;
     }>;
-    workflowDelegations(appCode: string, request: RoleSessionRequest, input?: {
+    workflowDelegations(appCode: string, input?: {
         all?: boolean;
+        environmentKey?: string;
     }): Promise<{
         items: WorkflowDelegation[];
         total: number;
     }>;
-    revokeWorkflowDelegation(appCode: string, delegationId: string, request: RoleSessionRequest): Promise<WorkflowDelegation>;
-    workflowTaskSurface(appCode: string, taskId: string, request: RoleSessionRequest): Promise<WorkflowSurface>;
-    workflowInstanceSurface(appCode: string, instanceId: string, request: RoleSessionRequest): Promise<WorkflowSurface>;
-    executeWorkflowTaskCommand(appCode: string, taskId: string, command: WorkflowCommand, input: WorkflowTaskCommandInput, request: RoleSessionRequest): Promise<Record<string, unknown>>;
-    executeWorkflowInstanceCommand(appCode: string, instanceId: string, command: "withdraw" | "terminate", input: {
-        expectedInstanceVersion: number;
-        idempotencyKey: string;
-        reason: string;
-    }, request: RoleSessionRequest): Promise<Record<string, unknown>>;
-    workflowAssignmentExplain(appCode: string, taskId: string, request: RoleSessionRequest): Promise<Record<string, unknown>>;
-    workflowTimeline(appCode: string, instanceId: string, request: RoleSessionRequest): Promise<{
-        items: Array<Record<string, unknown>>;
-    }>;
-    workflowWorkCenter(appCode: string, request: RoleSessionRequest, input?: {
+    revokeWorkflowDelegation(appCode: string, delegationId: string, environmentKey?: string): Promise<WorkflowDelegation>;
+    workflowTaskSurface(appCode: string, taskId: string, csrfToken: string): Promise<WorkflowSurface>;
+    workflowInstanceSurface(appCode: string, instanceId: string, csrfToken: string): Promise<WorkflowSurface>;
+    executeWorkflowTaskCommand(appCode: string, taskId: string, command: WorkflowCommand, input: WorkflowTaskCommandInput): Promise<WorkflowCommandResult>;
+    executeWorkflowInstanceCommand(appCode: string, instanceId: string, command: "withdraw" | "terminate", input: WorkflowTaskCommandInput): Promise<WorkflowCommandResult>;
+    workflowAssignmentExplain(appCode: string, taskId: string): Promise<Record<string, unknown>>;
+    workflowTimeline(appCode: string, instanceId: string): Promise<WorkflowTimeline>;
+    workflowWorkCenter(appCode: string, input?: {
         status?: "pending" | "completed";
         limit?: number;
+        environmentKey?: string;
     }): Promise<{
-        items: WorkflowTask[];
+        items: WorkflowWorkCenterItem[];
     }>;
-    workflowKernelInstance(appCode: string, instanceId: string, request: RoleSessionRequest): Promise<WorkflowKernelDescriptor>;
-    workflowKernelWorkCenter(appCode: string, request: RoleSessionRequest, input?: {
-        category?: "pending" | "completed" | "created";
-        limit?: number;
-    }): Promise<WorkflowKernelWorkCenter>;
     workflowDiagnostics(appCode: string, limit?: number): Promise<{
         items: Diagnostic[];
         total: number;
     }>;
-    bootstrapRoleSession(appCode: string): Promise<RoleSessionBootstrapResult>;
-    switchRoleSession(appCode: string, roleAssignmentId: string): Promise<RoleSessionBootstrapResult>;
-    currentPrincipal(appCode: string, request: RoleSessionRequest): Promise<PrincipalResult>;
+    applicationAdministrationContext(appCode: string, environmentKey: DeploymentEnvironment): Promise<ApplicationAdministrationContext>;
+    workflowNodeConfigurations(appCode: string, workflowCode: string, environmentKey: DeploymentEnvironment): Promise<WorkflowNodeConfigurations>;
+    nativeAuthorizationCatalog(appCode: string, input?: {
+        environmentKey?: DeploymentEnvironment;
+    }): Promise<NativeAuthorizationManagementCatalog>;
+    nativeScopeValues(appCode: string, input: {
+        environmentKey?: DeploymentEnvironment;
+        dimensionCode: string;
+        keyword?: string;
+        limit?: number;
+        offset?: number;
+    }): Promise<NativeScopeValuePage>;
+    nativeRoleMemberships(appCode: string, input?: NativeAuthorizationPageInput & {
+        userId?: string;
+        roleCode?: string;
+        keyword?: string;
+    }): Promise<NativeRoleMembershipPage>;
+    createNativeRoleMembership(appCode: string, input: CreateNativeRoleMembershipInput): Promise<NativeRoleMembershipMutationResult>;
+    updateNativeRoleMembership(appCode: string, membershipId: string, input: UpdateNativeRoleMembershipInput): Promise<NativeRoleMembershipMutationResult>;
+    revokeNativeRoleMembership(appCode: string, membershipId: string, input: {
+        environmentKey: DeploymentEnvironment;
+        operationId: string;
+        expectedRevision: number;
+        reason: string;
+    }): Promise<NativeRoleMembershipMutationResult>;
+    nativeRoleManagementGrants(appCode: string, input?: {
+        environmentKey?: DeploymentEnvironment;
+        status?: "active" | "revoked";
+        subjectRoleCode?: string;
+        limit?: number;
+        offset?: number;
+    }): Promise<NativeRoleManagementGrantPage>;
+    createNativeRoleManagementGrant(appCode: string, input: {
+        environmentKey: DeploymentEnvironment;
+        operationId: string;
+        reason: string;
+        subjectRoleCode: string;
+        manageAllRoles: boolean;
+        managedRoleCodes: string[];
+        actions: NativeRoleManagementAction[];
+    }): Promise<NativeRoleManagementGrantMutationResult>;
+    updateNativeRoleManagementGrant(appCode: string, grantId: string, input: {
+        environmentKey: DeploymentEnvironment;
+        operationId: string;
+        reason: string;
+        expectedRevision: number;
+        subjectRoleCode: string;
+        manageAllRoles: boolean;
+        managedRoleCodes: string[];
+        actions: NativeRoleManagementAction[];
+    }): Promise<NativeRoleManagementGrantMutationResult>;
+    revokeNativeRoleManagementGrant(appCode: string, grantId: string, input: {
+        environmentKey: DeploymentEnvironment;
+        operationId: string;
+        reason: string;
+        expectedRevision: number;
+    }): Promise<NativeRoleManagementGrantMutationResult>;
+    nativeAuthorizationMutationReceipt(appCode: string, operationId: string): Promise<NativeAuthorizationMutationReceipt>;
+    nativeSuperAdmins(appCode: string, input?: {
+        environmentKey?: DeploymentEnvironment;
+        status?: "active" | "revoked";
+        userId?: string;
+        keyword?: string;
+        limit?: number;
+        offset?: number;
+    }): Promise<NativeSuperAdminGrantPage>;
+    grantNativeSuperAdmin(appCode: string, input: {
+        environmentKey: DeploymentEnvironment;
+        operationId: string;
+        userId: string;
+    }): Promise<{
+        grant: NativeSuperAdminGrant;
+        environmentSubjectVersions: Array<Record<string, unknown>>;
+        revokedSessionCount: number;
+    }>;
+    revokeNativeSuperAdmin(appCode: string, grantId: string, input: {
+        environmentKey: DeploymentEnvironment;
+        operationId: string;
+        expectedRevision: number;
+    }): Promise<{
+        grant: NativeSuperAdminGrant;
+        environmentSubjectVersions: Array<Record<string, unknown>>;
+        revokedSessionCount: number;
+    }>;
+    nativeRelationshipGrants(appCode: string, input?: NativeRelationshipGrantFilter): Promise<NativeRelationshipGrantPage>;
+    createNativeRelationshipGrant(appCode: string, input: {
+        environmentKey: DeploymentEnvironment;
+        operationId: string;
+        subjectType: "user" | "role_membership";
+        subjectKey: string;
+        relationCode: string;
+        resourceCode: string;
+        resourceId: string;
+        operations?: string[];
+        sourceCode?: string;
+        validFrom?: string | null;
+        validTo?: string | null;
+    }): Promise<{
+        grant: NativeRelationshipGrant;
+    }>;
+    updateNativeRelationshipGrant(appCode: string, grantId: string, input: {
+        environmentKey: DeploymentEnvironment;
+        operationId: string;
+        expectedRevision: number;
+        operations?: string[];
+        validFrom?: string | null;
+        validTo?: string | null;
+    }): Promise<{
+        grant: NativeRelationshipGrant;
+    }>;
+    revokeNativeRelationshipGrant(appCode: string, grantId: string, input: {
+        environmentKey: DeploymentEnvironment;
+        operationId: string;
+        expectedRevision: number;
+    }): Promise<{
+        grant: NativeRelationshipGrant;
+    }>;
+    nativeAuthorizationProjectionHealth(appCode: string, environmentKey?: DeploymentEnvironment): Promise<NativeAuthorizationProjectionHealth>;
+    rebuildNativeAuthorizationProjections(appCode: string, input: {
+        environmentKey: DeploymentEnvironment;
+        operationId: string;
+    }): Promise<NativeAuthorizationProjectionMutationResult>;
+    recoverNativeAuthorizationProjection(appCode: string, jobId: string, input: {
+        environmentKey: DeploymentEnvironment;
+        operationId: string;
+    }): Promise<NativeAuthorizationProjectionMutationResult>;
     myRoleAssignments(appCode: string): Promise<{
         items: RoleAssignment[];
         total: number;
@@ -369,22 +591,21 @@ export declare class OpenXiangdaControlPlaneClient {
         validTo?: string | null;
     }): Promise<RoleAssignment>;
     revokeRoleAssignment(appCode: string, assignmentId: string, expectedRevision: number): Promise<RoleAssignment>;
-    explainAuthorization(appCode: string, input: {
-        capability: string;
-        roleSessionId: string;
-        dataPolicyCode?: string;
-        operation?: string;
-        data?: Record<string, unknown>;
-    }): Promise<AuthorizationDecision>;
-    explainAuthorizations(appCode: string, input: {
-        roleSessionId: string;
-        requests: AuthorizationExplainRequest[];
-    }): Promise<AuthorizationBatchResult>;
     searchDirectoryEntries(appCode: string, kind: DirectoryEntryKind, input: {
         keyword: string;
         limit?: number;
-    }, request: RoleSessionRequest): Promise<DirectorySearchResult>;
-    resolveDirectoryEntries(appCode: string, input: DirectoryResolveRequest, request: RoleSessionRequest): Promise<DirectorySearchResult>;
+    }): Promise<DirectorySearchResult>;
+    browseDepartmentEntries(appCode: string, input: {
+        parentId?: string;
+        offset?: number;
+        limit?: number;
+    }): Promise<DirectorySearchResult>;
+    browseDepartmentUserEntries(appCode: string, input: {
+        departmentId: string;
+        page?: number;
+        limit?: number;
+    }): Promise<DirectorySearchResult>;
+    resolveDirectoryEntries(appCode: string, input: DirectoryResolveRequest): Promise<DirectorySearchResult>;
     applyDataResource(resource: DataResource, input?: {
         expectedRevision?: number;
     }): Promise<DataResource>;
@@ -400,47 +621,56 @@ export declare class OpenXiangdaControlPlaneClient {
         validTo?: string | null;
     }): Promise<RelationshipGrant>;
     revokeRelationshipGrant(appCode: string, grantId: string, expectedRevision: number): Promise<RelationshipGrant>;
-    queryData<T extends Record<string, unknown>>(appCode: string, resourceCode: string, query: DataQuery, request?: IdentityRequest): Promise<DataPage<T>>;
-    getData<T extends Record<string, unknown>>(appCode: string, resourceCode: string, id: string, request?: IdentityRequest): Promise<DataRecord<T>>;
-    aggregateData<T extends Record<string, unknown>>(appCode: string, resourceCode: string, query: DataAggregateQuery, request?: IdentityRequest): Promise<DataAggregatePage<T>>;
+    queryData<T extends Record<string, unknown>>(appCode: string, resourceCode: string, query: DataQuery, request?: PerspectiveRequest): Promise<DataPage<T>>;
+    chinaDivisions(parentAdcode?: string): Promise<ChinaDivisionListItem[]>;
+    getData<T extends Record<string, unknown>>(appCode: string, resourceCode: string, id: string, request?: PerspectiveRequest): Promise<DataRecord<T>>;
+    aggregateData<T extends Record<string, unknown>>(appCode: string, resourceCode: string, query: DataAggregateQuery, request?: PerspectiveRequest): Promise<DataAggregatePage<T>>;
     dataAudit(appCode: string, resourceCode: string, id: string, input?: {
         limit?: number;
         offset?: number;
-    }, request?: IdentityRequest): Promise<DataAuditPage>;
+    }, request?: PerspectiveRequest): Promise<DataAuditPage>;
     initiateDataFileUpload(appCode: string, resourceCode: string, input: {
         fieldCode: string;
         fileName: string;
         fileSize: number;
         contentType?: string;
         recordId?: string;
-    }, request?: IdentityRequest): Promise<DataFileUploadPlan>;
-    completeDataFileUpload(appCode: string, resourceCode: string, fileId: string, request?: IdentityRequest): Promise<DataFileRef>;
-    deleteUnboundDataFile(appCode: string, resourceCode: string, fileId: string, request?: IdentityRequest): Promise<{
+    }, request?: PerspectiveRequest): Promise<DataFileUploadPlan>;
+    completeDataFileUpload(appCode: string, resourceCode: string, fileId: string, request?: PerspectiveRequest): Promise<DataFileRef>;
+    deleteUnreferencedDataFile(appCode: string, resourceCode: string, fileId: string, request?: PerspectiveRequest): Promise<{
         id: string;
         deleted: boolean;
     }>;
-    dataFileContent(appCode: string, resourceCode: string, fileId: string, request?: IdentityRequest): Promise<Response>;
-    createData<T extends Record<string, unknown>>(appCode: string, resourceCode: string, data: Record<string, unknown>, request?: IdentityRequest): Promise<DataRecord<T>>;
+    dataFileContent(appCode: string, resourceCode: string, fileId: string, request?: PerspectiveRequest): Promise<Response>;
+    createData<T extends Record<string, unknown>>(appCode: string, resourceCode: string, data: Record<string, unknown>, request?: PerspectiveRequest): Promise<DataRecord<T>>;
     updateData<T extends Record<string, unknown>>(appCode: string, resourceCode: string, id: string, input: {
         expectedRevision: number;
         data: Record<string, unknown>;
-    }, request?: IdentityRequest): Promise<DataRecord<T>>;
-    deleteData<T extends Record<string, unknown>>(appCode: string, resourceCode: string, id: string, expectedRevision: number, request?: IdentityRequest): Promise<DataRecord<T>>;
-    transactData(appCode: string, transaction: DataTransactionRequest, request?: IdentityRequest): Promise<DataTransactionResult>;
+    }, request?: PerspectiveRequest): Promise<DataRecord<T>>;
+    deleteData<T extends Record<string, unknown>>(appCode: string, resourceCode: string, id: string, expectedRevision: number, request?: PerspectiveRequest): Promise<DataRecord<T>>;
+    transactData(appCode: string, transaction: DataTransactionRequest, request?: PerspectiveRequest): Promise<DataTransactionResult>;
     private dataPath;
     private applicationApiPath;
     private deployExistingVersion;
     private authzPath;
+    private nativeAuthzPath;
+    private nativeAuthzManagementPath;
+    private query;
     private directoryPath;
     private oauthPath;
     private applicationSecretsPath;
     private eventsPath;
+    private connectedDevelopmentSessionsPath;
+    private connectedDevelopmentSessionHeaders;
     private workflowPath;
-    private roleSessionHeaders;
-    private optionalRoleSessionHeaders;
+    private administrationPath;
+    private perspectiveHeaders;
     private basicCredentials;
     private json;
     private request;
+    private requestOnce;
+    private isUnauthorized;
+    private accessToken;
 }
 export {};
 //# sourceMappingURL=control-plane-client.d.ts.map