weave-typescript 0.42.8 → 0.43.0

package/dist/weaveapi/auth/v1/auth.pb.d.ts

@@ -110,6 +110,14 @@ export declare enum InviteRecoveryStatus {
 }
 export declare function inviteRecoveryStatusFromJSON(object: any): InviteRecoveryStatus;
 export declare function inviteRecoveryStatusToJSON(object: InviteRecoveryStatus): string;
+export declare enum AuthorizationDecision {
+    AUTHORIZATION_DECISION_UNSPECIFIED = 0,
+    AUTHORIZATION_DECISION_ALLOWED = 1,
+    AUTHORIZATION_DECISION_DENIED = 2,
+    UNRECOGNIZED = -1
+}
+export declare function authorizationDecisionFromJSON(object: any): AuthorizationDecision;
+export declare function authorizationDecisionToJSON(object: AuthorizationDecision): string;
 export interface AuthSession {
     sessionId: string;
     user: AuthUser | undefined;
@@ -368,6 +376,31 @@ export interface SupportAccessSession {
     startedAt: Date | undefined;
     endedAt: Date | undefined;
 }
+export interface AuthorizationDecisionEvent {
+    id: string;
+    organizationId: string;
+    actingUserId: string;
+    actorOrganizationMembershipId: string;
+    actorIdentityLinkId: string;
+    rbacRoleIds: string[];
+    orgTeamIds: string[];
+    platformGrantIds: string[];
+    supportAccessSessionId: string;
+    featureFlagKey: string;
+    featureFlagProvider: string;
+    featureFlagVariant: string;
+    resourceId: string;
+    resourceInstanceId: string;
+    action: string;
+    decision: AuthorizationDecision;
+    reasonCode: string;
+    safeMessage: string;
+    usedSupportElevation: boolean;
+    metadata: {
+        [key: string]: any;
+    } | undefined;
+    createdAt: Date | undefined;
+}
 export declare const AuthSession: MessageFns<AuthSession>;
 export declare const AuthUser: MessageFns<AuthUser>;
 export declare const AuthUser_OrganizationPagePositionsEntry: MessageFns<AuthUser_OrganizationPagePositionsEntry>;
@@ -391,6 +424,7 @@ export declare const ScimConnection: MessageFns<ScimConnection>;
 export declare const ScimTokenRotation: MessageFns<ScimTokenRotation>;
 export declare const ScimGroupMapping: MessageFns<ScimGroupMapping>;
 export declare const SupportAccessSession: MessageFns<SupportAccessSession>;
+export declare const AuthorizationDecisionEvent: MessageFns<AuthorizationDecisionEvent>;
 type Builtin = Date | Function | Uint8Array | string | number | boolean | undefined;
 export type DeepPartial<T> = T extends Builtin ? T : T extends globalThis.Array<infer U> ? globalThis.Array<DeepPartial<U>> : T extends ReadonlyArray<infer U> ? ReadonlyArray<DeepPartial<U>> : T extends {} ? {
     [K in keyof T]?: DeepPartial<T[K]>;

package/dist/weaveapi/auth/v1/auth.pb.js

@@ -5,7 +5,7 @@
 //   protoc               unknown
 // source: weaveapi/auth/v1/auth.proto
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.SupportAccessSession = exports.ScimGroupMapping = exports.ScimTokenRotation = exports.ScimConnection = exports.SsoConnection = exports.RbacPermission = exports.RbacRole = exports.RbacResource = exports.RbacPolicySummary = exports.OrganizationTeamMember = exports.OrganizationTeam = exports.OrganizationMember = exports.OrganizationAuthSettings = exports.UserPreferences_OrganizationPagePositionsEntry = exports.UserPreferences = exports.UserOrganizationPagePosition = exports.UserProfile = exports.InviteOnboardingState = exports.DiscoveryOrganization = exports.AuthOrganization = exports.AuthUser_OrganizationPagePositionsEntry = exports.AuthUser = exports.AuthSession = exports.InviteRecoveryStatus = exports.InviteRecoveryReason = exports.InviteOnboardingStatus = exports.AuthProvider = exports.ScimConnectionStatus = exports.SsoConnectionStatus = exports.SsoConnectionType = exports.OrganizationKind = exports.MembershipStatus = exports.DiscoveryOrganizationStatus = exports.AuthMethod = exports.protobufPackage = void 0;
+exports.AuthorizationDecisionEvent = exports.SupportAccessSession = exports.ScimGroupMapping = exports.ScimTokenRotation = exports.ScimConnection = exports.SsoConnection = exports.RbacPermission = exports.RbacRole = exports.RbacResource = exports.RbacPolicySummary = exports.OrganizationTeamMember = exports.OrganizationTeam = exports.OrganizationMember = exports.OrganizationAuthSettings = exports.UserPreferences_OrganizationPagePositionsEntry = exports.UserPreferences = exports.UserOrganizationPagePosition = exports.UserProfile = exports.InviteOnboardingState = exports.DiscoveryOrganization = exports.AuthOrganization = exports.AuthUser_OrganizationPagePositionsEntry = exports.AuthUser = exports.AuthSession = exports.AuthorizationDecision = exports.InviteRecoveryStatus = exports.InviteRecoveryReason = exports.InviteOnboardingStatus = exports.AuthProvider = exports.ScimConnectionStatus = exports.SsoConnectionStatus = exports.SsoConnectionType = exports.OrganizationKind = exports.MembershipStatus = exports.DiscoveryOrganizationStatus = exports.AuthMethod = exports.protobufPackage = void 0;
 exports.authMethodFromJSON = authMethodFromJSON;
 exports.authMethodToJSON = authMethodToJSON;
 exports.discoveryOrganizationStatusFromJSON = discoveryOrganizationStatusFromJSON;
@@ -28,6 +28,8 @@ exports.inviteRecoveryReasonFromJSON = inviteRecoveryReasonFromJSON;
 exports.inviteRecoveryReasonToJSON = inviteRecoveryReasonToJSON;
 exports.inviteRecoveryStatusFromJSON = inviteRecoveryStatusFromJSON;
 exports.inviteRecoveryStatusToJSON = inviteRecoveryStatusToJSON;
+exports.authorizationDecisionFromJSON = authorizationDecisionFromJSON;
+exports.authorizationDecisionToJSON = authorizationDecisionToJSON;
 /* eslint-disable */
 const wire_1 = require("@bufbuild/protobuf/wire");
 const struct_pb_1 = require("../../../google/protobuf/struct.pb");
@@ -572,6 +574,43 @@ function inviteRecoveryStatusToJSON(object) {
             return "UNRECOGNIZED";
     }
 }
+var AuthorizationDecision;
+(function (AuthorizationDecision) {
+    AuthorizationDecision[AuthorizationDecision["AUTHORIZATION_DECISION_UNSPECIFIED"] = 0] = "AUTHORIZATION_DECISION_UNSPECIFIED";
+    AuthorizationDecision[AuthorizationDecision["AUTHORIZATION_DECISION_ALLOWED"] = 1] = "AUTHORIZATION_DECISION_ALLOWED";
+    AuthorizationDecision[AuthorizationDecision["AUTHORIZATION_DECISION_DENIED"] = 2] = "AUTHORIZATION_DECISION_DENIED";
+    AuthorizationDecision[AuthorizationDecision["UNRECOGNIZED"] = -1] = "UNRECOGNIZED";
+})(AuthorizationDecision || (exports.AuthorizationDecision = AuthorizationDecision = {}));
+function authorizationDecisionFromJSON(object) {
+    switch (object) {
+        case 0:
+        case "AUTHORIZATION_DECISION_UNSPECIFIED":
+            return AuthorizationDecision.AUTHORIZATION_DECISION_UNSPECIFIED;
+        case 1:
+        case "AUTHORIZATION_DECISION_ALLOWED":
+            return AuthorizationDecision.AUTHORIZATION_DECISION_ALLOWED;
+        case 2:
+        case "AUTHORIZATION_DECISION_DENIED":
+            return AuthorizationDecision.AUTHORIZATION_DECISION_DENIED;
+        case -1:
+        case "UNRECOGNIZED":
+        default:
+            return AuthorizationDecision.UNRECOGNIZED;
+    }
+}
+function authorizationDecisionToJSON(object) {
+    switch (object) {
+        case AuthorizationDecision.AUTHORIZATION_DECISION_UNSPECIFIED:
+            return "AUTHORIZATION_DECISION_UNSPECIFIED";
+        case AuthorizationDecision.AUTHORIZATION_DECISION_ALLOWED:
+            return "AUTHORIZATION_DECISION_ALLOWED";
+        case AuthorizationDecision.AUTHORIZATION_DECISION_DENIED:
+            return "AUTHORIZATION_DECISION_DENIED";
+        case AuthorizationDecision.UNRECOGNIZED:
+        default:
+            return "UNRECOGNIZED";
+    }
+}
 function createBaseAuthSession() {
     return {
         sessionId: "",
@@ -4635,6 +4674,452 @@ exports.SupportAccessSession = {
         return message;
     },
 };
+function createBaseAuthorizationDecisionEvent() {
+    return {
+        id: "",
+        organizationId: "",
+        actingUserId: "",
+        actorOrganizationMembershipId: "",
+        actorIdentityLinkId: "",
+        rbacRoleIds: [],
+        orgTeamIds: [],
+        platformGrantIds: [],
+        supportAccessSessionId: "",
+        featureFlagKey: "",
+        featureFlagProvider: "",
+        featureFlagVariant: "",
+        resourceId: "",
+        resourceInstanceId: "",
+        action: "",
+        decision: 0,
+        reasonCode: "",
+        safeMessage: "",
+        usedSupportElevation: false,
+        metadata: undefined,
+        createdAt: undefined,
+    };
+}
+exports.AuthorizationDecisionEvent = {
+    encode(message, writer = new wire_1.BinaryWriter()) {
+        if (message.id !== "") {
+            writer.uint32(10).string(message.id);
+        }
+        if (message.organizationId !== "") {
+            writer.uint32(18).string(message.organizationId);
+        }
+        if (message.actingUserId !== "") {
+            writer.uint32(26).string(message.actingUserId);
+        }
+        if (message.actorOrganizationMembershipId !== "") {
+            writer.uint32(34).string(message.actorOrganizationMembershipId);
+        }
+        if (message.actorIdentityLinkId !== "") {
+            writer.uint32(42).string(message.actorIdentityLinkId);
+        }
+        for (const v of message.rbacRoleIds) {
+            writer.uint32(50).string(v);
+        }
+        for (const v of message.orgTeamIds) {
+            writer.uint32(58).string(v);
+        }
+        for (const v of message.platformGrantIds) {
+            writer.uint32(66).string(v);
+        }
+        if (message.supportAccessSessionId !== "") {
+            writer.uint32(74).string(message.supportAccessSessionId);
+        }
+        if (message.featureFlagKey !== "") {
+            writer.uint32(82).string(message.featureFlagKey);
+        }
+        if (message.featureFlagProvider !== "") {
+            writer.uint32(90).string(message.featureFlagProvider);
+        }
+        if (message.featureFlagVariant !== "") {
+            writer.uint32(98).string(message.featureFlagVariant);
+        }
+        if (message.resourceId !== "") {
+            writer.uint32(106).string(message.resourceId);
+        }
+        if (message.resourceInstanceId !== "") {
+            writer.uint32(114).string(message.resourceInstanceId);
+        }
+        if (message.action !== "") {
+            writer.uint32(122).string(message.action);
+        }
+        if (message.decision !== 0) {
+            writer.uint32(128).int32(message.decision);
+        }
+        if (message.reasonCode !== "") {
+            writer.uint32(138).string(message.reasonCode);
+        }
+        if (message.safeMessage !== "") {
+            writer.uint32(146).string(message.safeMessage);
+        }
+        if (message.usedSupportElevation !== false) {
+            writer.uint32(152).bool(message.usedSupportElevation);
+        }
+        if (message.metadata !== undefined) {
+            struct_pb_1.Struct.encode(struct_pb_1.Struct.wrap(message.metadata), writer.uint32(162).fork()).join();
+        }
+        if (message.createdAt !== undefined) {
+            timestamp_pb_1.Timestamp.encode(toTimestamp(message.createdAt), writer.uint32(170).fork()).join();
+        }
+        return writer;
+    },
+    decode(input, length) {
+        const reader = input instanceof wire_1.BinaryReader ? input : new wire_1.BinaryReader(input);
+        const end = length === undefined ? reader.len : reader.pos + length;
+        const message = createBaseAuthorizationDecisionEvent();
+        while (reader.pos < end) {
+            const tag = reader.uint32();
+            switch (tag >>> 3) {
+                case 1: {
+                    if (tag !== 10) {
+                        break;
+                    }
+                    message.id = reader.string();
+                    continue;
+                }
+                case 2: {
+                    if (tag !== 18) {
+                        break;
+                    }
+                    message.organizationId = reader.string();
+                    continue;
+                }
+                case 3: {
+                    if (tag !== 26) {
+                        break;
+                    }
+                    message.actingUserId = reader.string();
+                    continue;
+                }
+                case 4: {
+                    if (tag !== 34) {
+                        break;
+                    }
+                    message.actorOrganizationMembershipId = reader.string();
+                    continue;
+                }
+                case 5: {
+                    if (tag !== 42) {
+                        break;
+                    }
+                    message.actorIdentityLinkId = reader.string();
+                    continue;
+                }
+                case 6: {
+                    if (tag !== 50) {
+                        break;
+                    }
+                    message.rbacRoleIds.push(reader.string());
+                    continue;
+                }
+                case 7: {
+                    if (tag !== 58) {
+                        break;
+                    }
+                    message.orgTeamIds.push(reader.string());
+                    continue;
+                }
+                case 8: {
+                    if (tag !== 66) {
+                        break;
+                    }
+                    message.platformGrantIds.push(reader.string());
+                    continue;
+                }
+                case 9: {
+                    if (tag !== 74) {
+                        break;
+                    }
+                    message.supportAccessSessionId = reader.string();
+                    continue;
+                }
+                case 10: {
+                    if (tag !== 82) {
+                        break;
+                    }
+                    message.featureFlagKey = reader.string();
+                    continue;
+                }
+                case 11: {
+                    if (tag !== 90) {
+                        break;
+                    }
+                    message.featureFlagProvider = reader.string();
+                    continue;
+                }
+                case 12: {
+                    if (tag !== 98) {
+                        break;
+                    }
+                    message.featureFlagVariant = reader.string();
+                    continue;
+                }
+                case 13: {
+                    if (tag !== 106) {
+                        break;
+                    }
+                    message.resourceId = reader.string();
+                    continue;
+                }
+                case 14: {
+                    if (tag !== 114) {
+                        break;
+                    }
+                    message.resourceInstanceId = reader.string();
+                    continue;
+                }
+                case 15: {
+                    if (tag !== 122) {
+                        break;
+                    }
+                    message.action = reader.string();
+                    continue;
+                }
+                case 16: {
+                    if (tag !== 128) {
+                        break;
+                    }
+                    message.decision = reader.int32();
+                    continue;
+                }
+                case 17: {
+                    if (tag !== 138) {
+                        break;
+                    }
+                    message.reasonCode = reader.string();
+                    continue;
+                }
+                case 18: {
+                    if (tag !== 146) {
+                        break;
+                    }
+                    message.safeMessage = reader.string();
+                    continue;
+                }
+                case 19: {
+                    if (tag !== 152) {
+                        break;
+                    }
+                    message.usedSupportElevation = reader.bool();
+                    continue;
+                }
+                case 20: {
+                    if (tag !== 162) {
+                        break;
+                    }
+                    message.metadata = struct_pb_1.Struct.unwrap(struct_pb_1.Struct.decode(reader, reader.uint32()));
+                    continue;
+                }
+                case 21: {
+                    if (tag !== 170) {
+                        break;
+                    }
+                    message.createdAt = fromTimestamp(timestamp_pb_1.Timestamp.decode(reader, reader.uint32()));
+                    continue;
+                }
+            }
+            if ((tag & 7) === 4 || tag === 0) {
+                break;
+            }
+            reader.skip(tag & 7);
+        }
+        return message;
+    },
+    fromJSON(object) {
+        return {
+            id: isSet(object.id) ? globalThis.String(object.id) : "",
+            organizationId: isSet(object.organizationId)
+                ? globalThis.String(object.organizationId)
+                : isSet(object.organization_id)
+                    ? globalThis.String(object.organization_id)
+                    : "",
+            actingUserId: isSet(object.actingUserId)
+                ? globalThis.String(object.actingUserId)
+                : isSet(object.acting_user_id)
+                    ? globalThis.String(object.acting_user_id)
+                    : "",
+            actorOrganizationMembershipId: isSet(object.actorOrganizationMembershipId)
+                ? globalThis.String(object.actorOrganizationMembershipId)
+                : isSet(object.actor_organization_membership_id)
+                    ? globalThis.String(object.actor_organization_membership_id)
+                    : "",
+            actorIdentityLinkId: isSet(object.actorIdentityLinkId)
+                ? globalThis.String(object.actorIdentityLinkId)
+                : isSet(object.actor_identity_link_id)
+                    ? globalThis.String(object.actor_identity_link_id)
+                    : "",
+            rbacRoleIds: globalThis.Array.isArray(object === null || object === void 0 ? void 0 : object.rbacRoleIds)
+                ? object.rbacRoleIds.map((e) => globalThis.String(e))
+                : globalThis.Array.isArray(object === null || object === void 0 ? void 0 : object.rbac_role_ids)
+                    ? object.rbac_role_ids.map((e) => globalThis.String(e))
+                    : [],
+            orgTeamIds: globalThis.Array.isArray(object === null || object === void 0 ? void 0 : object.orgTeamIds)
+                ? object.orgTeamIds.map((e) => globalThis.String(e))
+                : globalThis.Array.isArray(object === null || object === void 0 ? void 0 : object.org_team_ids)
+                    ? object.org_team_ids.map((e) => globalThis.String(e))
+                    : [],
+            platformGrantIds: globalThis.Array.isArray(object === null || object === void 0 ? void 0 : object.platformGrantIds)
+                ? object.platformGrantIds.map((e) => globalThis.String(e))
+                : globalThis.Array.isArray(object === null || object === void 0 ? void 0 : object.platform_grant_ids)
+                    ? object.platform_grant_ids.map((e) => globalThis.String(e))
+                    : [],
+            supportAccessSessionId: isSet(object.supportAccessSessionId)
+                ? globalThis.String(object.supportAccessSessionId)
+                : isSet(object.support_access_session_id)
+                    ? globalThis.String(object.support_access_session_id)
+                    : "",
+            featureFlagKey: isSet(object.featureFlagKey)
+                ? globalThis.String(object.featureFlagKey)
+                : isSet(object.feature_flag_key)
+                    ? globalThis.String(object.feature_flag_key)
+                    : "",
+            featureFlagProvider: isSet(object.featureFlagProvider)
+                ? globalThis.String(object.featureFlagProvider)
+                : isSet(object.feature_flag_provider)
+                    ? globalThis.String(object.feature_flag_provider)
+                    : "",
+            featureFlagVariant: isSet(object.featureFlagVariant)
+                ? globalThis.String(object.featureFlagVariant)
+                : isSet(object.feature_flag_variant)
+                    ? globalThis.String(object.feature_flag_variant)
+                    : "",
+            resourceId: isSet(object.resourceId)
+                ? globalThis.String(object.resourceId)
+                : isSet(object.resource_id)
+                    ? globalThis.String(object.resource_id)
+                    : "",
+            resourceInstanceId: isSet(object.resourceInstanceId)
+                ? globalThis.String(object.resourceInstanceId)
+                : isSet(object.resource_instance_id)
+                    ? globalThis.String(object.resource_instance_id)
+                    : "",
+            action: isSet(object.action) ? globalThis.String(object.action) : "",
+            decision: isSet(object.decision) ? authorizationDecisionFromJSON(object.decision) : 0,
+            reasonCode: isSet(object.reasonCode)
+                ? globalThis.String(object.reasonCode)
+                : isSet(object.reason_code)
+                    ? globalThis.String(object.reason_code)
+                    : "",
+            safeMessage: isSet(object.safeMessage)
+                ? globalThis.String(object.safeMessage)
+                : isSet(object.safe_message)
+                    ? globalThis.String(object.safe_message)
+                    : "",
+            usedSupportElevation: isSet(object.usedSupportElevation)
+                ? globalThis.Boolean(object.usedSupportElevation)
+                : isSet(object.used_support_elevation)
+                    ? globalThis.Boolean(object.used_support_elevation)
+                    : false,
+            metadata: isObject(object.metadata) ? object.metadata : undefined,
+            createdAt: isSet(object.createdAt)
+                ? fromJsonTimestamp(object.createdAt)
+                : isSet(object.created_at)
+                    ? fromJsonTimestamp(object.created_at)
+                    : undefined,
+        };
+    },
+    toJSON(message) {
+        var _a, _b, _c;
+        const obj = {};
+        if (message.id !== "") {
+            obj.id = message.id;
+        }
+        if (message.organizationId !== "") {
+            obj.organizationId = message.organizationId;
+        }
+        if (message.actingUserId !== "") {
+            obj.actingUserId = message.actingUserId;
+        }
+        if (message.actorOrganizationMembershipId !== "") {
+            obj.actorOrganizationMembershipId = message.actorOrganizationMembershipId;
+        }
+        if (message.actorIdentityLinkId !== "") {
+            obj.actorIdentityLinkId = message.actorIdentityLinkId;
+        }
+        if ((_a = message.rbacRoleIds) === null || _a === void 0 ? void 0 : _a.length) {
+            obj.rbacRoleIds = message.rbacRoleIds;
+        }
+        if ((_b = message.orgTeamIds) === null || _b === void 0 ? void 0 : _b.length) {
+            obj.orgTeamIds = message.orgTeamIds;
+        }
+        if ((_c = message.platformGrantIds) === null || _c === void 0 ? void 0 : _c.length) {
+            obj.platformGrantIds = message.platformGrantIds;
+        }
+        if (message.supportAccessSessionId !== "") {
+            obj.supportAccessSessionId = message.supportAccessSessionId;
+        }
+        if (message.featureFlagKey !== "") {
+            obj.featureFlagKey = message.featureFlagKey;
+        }
+        if (message.featureFlagProvider !== "") {
+            obj.featureFlagProvider = message.featureFlagProvider;
+        }
+        if (message.featureFlagVariant !== "") {
+            obj.featureFlagVariant = message.featureFlagVariant;
+        }
+        if (message.resourceId !== "") {
+            obj.resourceId = message.resourceId;
+        }
+        if (message.resourceInstanceId !== "") {
+            obj.resourceInstanceId = message.resourceInstanceId;
+        }
+        if (message.action !== "") {
+            obj.action = message.action;
+        }
+        if (message.decision !== 0) {
+            obj.decision = authorizationDecisionToJSON(message.decision);
+        }
+        if (message.reasonCode !== "") {
+            obj.reasonCode = message.reasonCode;
+        }
+        if (message.safeMessage !== "") {
+            obj.safeMessage = message.safeMessage;
+        }
+        if (message.usedSupportElevation !== false) {
+            obj.usedSupportElevation = message.usedSupportElevation;
+        }
+        if (message.metadata !== undefined) {
+            obj.metadata = message.metadata;
+        }
+        if (message.createdAt !== undefined) {
+            obj.createdAt = message.createdAt.toISOString();
+        }
+        return obj;
+    },
+    create(base) {
+        return exports.AuthorizationDecisionEvent.fromPartial(base !== null && base !== void 0 ? base : {});
+    },
+    fromPartial(object) {
+        var _a, _b, _c;
+        var _d, _e, _f, _g, _h, _j, _k, _l, _m, _o, _p, _q, _r, _s, _t, _u, _v, _w;
+        const message = createBaseAuthorizationDecisionEvent();
+        message.id = (_d = object.id) !== null && _d !== void 0 ? _d : "";
+        message.organizationId = (_e = object.organizationId) !== null && _e !== void 0 ? _e : "";
+        message.actingUserId = (_f = object.actingUserId) !== null && _f !== void 0 ? _f : "";
+        message.actorOrganizationMembershipId = (_g = object.actorOrganizationMembershipId) !== null && _g !== void 0 ? _g : "";
+        message.actorIdentityLinkId = (_h = object.actorIdentityLinkId) !== null && _h !== void 0 ? _h : "";
+        message.rbacRoleIds = ((_a = object.rbacRoleIds) === null || _a === void 0 ? void 0 : _a.map((e) => e)) || [];
+        message.orgTeamIds = ((_b = object.orgTeamIds) === null || _b === void 0 ? void 0 : _b.map((e) => e)) || [];
+        message.platformGrantIds = ((_c = object.platformGrantIds) === null || _c === void 0 ? void 0 : _c.map((e) => e)) || [];
+        message.supportAccessSessionId = (_j = object.supportAccessSessionId) !== null && _j !== void 0 ? _j : "";
+        message.featureFlagKey = (_k = object.featureFlagKey) !== null && _k !== void 0 ? _k : "";
+        message.featureFlagProvider = (_l = object.featureFlagProvider) !== null && _l !== void 0 ? _l : "";
+        message.featureFlagVariant = (_m = object.featureFlagVariant) !== null && _m !== void 0 ? _m : "";
+        message.resourceId = (_o = object.resourceId) !== null && _o !== void 0 ? _o : "";
+        message.resourceInstanceId = (_p = object.resourceInstanceId) !== null && _p !== void 0 ? _p : "";
+        message.action = (_q = object.action) !== null && _q !== void 0 ? _q : "";
+        message.decision = (_r = object.decision) !== null && _r !== void 0 ? _r : 0;
+        message.reasonCode = (_s = object.reasonCode) !== null && _s !== void 0 ? _s : "";
+        message.safeMessage = (_t = object.safeMessage) !== null && _t !== void 0 ? _t : "";
+        message.usedSupportElevation = (_u = object.usedSupportElevation) !== null && _u !== void 0 ? _u : false;
+        message.metadata = (_v = object.metadata) !== null && _v !== void 0 ? _v : undefined;
+        message.createdAt = (_w = object.createdAt) !== null && _w !== void 0 ? _w : undefined;
+        return message;
+    },
+};
 function toTimestamp(date) {
     const seconds = Math.trunc(date.getTime() / 1000);
     const nanos = (date.getTime() % 1000) * 1000000;

package/dist/weaveapi/auth/v1/service.pb.d.ts

@@ -1,5 +1,5 @@
 import { BinaryReader, BinaryWriter } from "@bufbuild/protobuf/wire";
-import { AuthMethod, AuthProvider, AuthSession, DiscoveryOrganization, InviteOnboardingState, InviteRecoveryReason, InviteRecoveryStatus, MembershipStatus, OrganizationAuthSettings, OrganizationMember, OrganizationTeam, RbacPolicySummary, ScimConnection, ScimGroupMapping, ScimTokenRotation, SsoConnection, SsoConnectionStatus, SsoConnectionType, UserOrganizationPagePosition, UserPreferences, UserProfile } from "./auth.pb";
+import { AuthMethod, AuthorizationDecision, AuthorizationDecisionEvent, AuthProvider, AuthSession, DiscoveryOrganization, InviteOnboardingState, InviteRecoveryReason, InviteRecoveryStatus, MembershipStatus, OrganizationAuthSettings, OrganizationMember, OrganizationTeam, RbacPolicySummary, ScimConnection, ScimGroupMapping, ScimTokenRotation, SsoConnection, SsoConnectionStatus, SsoConnectionType, UserOrganizationPagePosition, UserPreferences, UserProfile } from "./auth.pb";
 export declare const protobufPackage = "weaveapi.auth.v1";
 export interface GetSessionRequest {
 }
@@ -298,6 +298,20 @@ export interface UpdateRbacPolicyRequest {
 export interface UpdateRbacPolicyResponse {
     policy: RbacPolicySummary | undefined;
 }
+export interface ListAuthorizationDecisionEventsRequest {
+    organizationSlug: string;
+    actingUserId: string;
+    featureFlagKey: string;
+    resourceId: string;
+    action: string;
+    decision: AuthorizationDecision;
+    pageSize: number;
+    pageToken: string;
+}
+export interface ListAuthorizationDecisionEventsResponse {
+    events: AuthorizationDecisionEvent[];
+    nextPageToken: string;
+}
 export interface ListSsoConnectionsRequest {
     organizationSlug: string;
 }
@@ -462,6 +476,8 @@ export declare const GetRbacPolicyRequest: MessageFns<GetRbacPolicyRequest>;
 export declare const GetRbacPolicyResponse: MessageFns<GetRbacPolicyResponse>;
 export declare const UpdateRbacPolicyRequest: MessageFns<UpdateRbacPolicyRequest>;
 export declare const UpdateRbacPolicyResponse: MessageFns<UpdateRbacPolicyResponse>;
+export declare const ListAuthorizationDecisionEventsRequest: MessageFns<ListAuthorizationDecisionEventsRequest>;
+export declare const ListAuthorizationDecisionEventsResponse: MessageFns<ListAuthorizationDecisionEventsResponse>;
 export declare const ListSsoConnectionsRequest: MessageFns<ListSsoConnectionsRequest>;
 export declare const ListSsoConnectionsResponse: MessageFns<ListSsoConnectionsResponse>;
 export declare const CreateSsoConnectionRequest: MessageFns<CreateSsoConnectionRequest>;
@@ -787,6 +803,7 @@ export interface OrganizationAuthAdminService {
     DeleteOrganizationTeam(request: DeleteOrganizationTeamRequest): Promise<DeleteOrganizationTeamResponse>;
     GetRbacPolicy(request: GetRbacPolicyRequest): Promise<GetRbacPolicyResponse>;
     UpdateRbacPolicy(request: UpdateRbacPolicyRequest): Promise<UpdateRbacPolicyResponse>;
+    ListAuthorizationDecisionEvents(request: ListAuthorizationDecisionEventsRequest): Promise<ListAuthorizationDecisionEventsResponse>;
     ListSsoConnections(request: ListSsoConnectionsRequest): Promise<ListSsoConnectionsResponse>;
     CreateSsoConnection(request: CreateSsoConnectionRequest): Promise<CreateSsoConnectionResponse>;
     UpdateSsoConnection(request: UpdateSsoConnectionRequest): Promise<UpdateSsoConnectionResponse>;
@@ -821,6 +838,7 @@ export declare class OrganizationAuthAdminServiceClientImpl implements Organizat
     DeleteOrganizationTeam(request: DeleteOrganizationTeamRequest): Promise<DeleteOrganizationTeamResponse>;
     GetRbacPolicy(request: GetRbacPolicyRequest): Promise<GetRbacPolicyResponse>;
     UpdateRbacPolicy(request: UpdateRbacPolicyRequest): Promise<UpdateRbacPolicyResponse>;
+    ListAuthorizationDecisionEvents(request: ListAuthorizationDecisionEventsRequest): Promise<ListAuthorizationDecisionEventsResponse>;
     ListSsoConnections(request: ListSsoConnectionsRequest): Promise<ListSsoConnectionsResponse>;
     CreateSsoConnection(request: CreateSsoConnectionRequest): Promise<CreateSsoConnectionResponse>;
     UpdateSsoConnection(request: UpdateSsoConnectionRequest): Promise<UpdateSsoConnectionResponse>;
@@ -1018,6 +1036,18 @@ export declare const OrganizationAuthAdminServiceDefinition: {
                 };
             };
         };
+        readonly listAuthorizationDecisionEvents: {
+            readonly name: "ListAuthorizationDecisionEvents";
+            readonly requestType: typeof ListAuthorizationDecisionEventsRequest;
+            readonly requestStream: false;
+            readonly responseType: typeof ListAuthorizationDecisionEventsResponse;
+            readonly responseStream: false;
+            readonly options: {
+                readonly _unknownFields: {
+                    readonly 578365826: readonly [Uint8Array];
+                };
+            };
+        };
         readonly listSsoConnections: {
             readonly name: "ListSsoConnections";
             readonly requestType: typeof ListSsoConnectionsRequest;

package/dist/weaveapi/auth/v1/service.pb.js

@@ -6,7 +6,8 @@
 // source: weaveapi/auth/v1/service.proto
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.ResendOrganizationMemberInviteRequest = exports.RemoveOrganizationMemberResponse = exports.RemoveOrganizationMemberRequest = exports.UpdateOrganizationMemberResponse = exports.UpdateOrganizationMemberRequest = exports.CreateOrganizationMemberResponse = exports.CreateOrganizationMemberRequest = exports.ListOrganizationMembersResponse = exports.ListOrganizationMembersRequest = exports.UpdateOrganizationAuthSettingsResponse = exports.UpdateOrganizationAuthSettingsRequest = exports.GetOrganizationAuthSettingsResponse = exports.GetOrganizationAuthSettingsRequest = exports.UpdateAvatarResponse = exports.UpdateAvatarRequest = exports.UpdateUserPreferencesResponse = exports.UpdateUserPreferencesRequest = exports.GetUserPreferencesResponse = exports.GetUserPreferencesRequest = exports.UpdateProfileResponse = exports.UpdateProfileRequest = exports.GetProfileResponse = exports.GetProfileRequest = exports.LogoutResponse = exports.LogoutRequest = exports.ExchangeDiscoveryOrganizationResponse = exports.ExchangeDiscoveryOrganizationRequest = exports.RequestInviteRecoveryResponse = exports.RequestInviteRecoveryRequest = exports.CompleteInviteOAuthResponse = exports.CompleteInviteOAuthRequest = exports.StartInviteOAuthResponse = exports.StartInviteOAuthRequest = exports.CompleteInvitePasswordResponse = exports.CompleteInvitePasswordRequest = exports.CompleteInviteMagicLinkResponse = exports.CompleteInviteMagicLinkRequest = exports.CompleteDiscoverySSOResponse = exports.CompleteDiscoverySSORequest = exports.StartDiscoverySSOResponse = exports.StartDiscoverySSORequest = exports.CompleteDiscoveryOAuthResponse = exports.CompleteDiscoveryOAuthRequest = exports.StartDiscoveryOAuthResponse = exports.StartDiscoveryOAuthRequest = exports.StartDiscoveryPasswordResponse = exports.StartDiscoveryPasswordRequest = exports.GetSessionResponse = exports.GetSessionRequest = exports.protobufPackage = void 0;
-exports.OrganizationAuthAdminServiceDefinition = exports.OrganizationAuthAdminServiceClientImpl = exports.OrganizationAuthAdminServiceServiceName = exports.ProfileServiceDefinition = exports.ProfileServiceClientImpl = exports.ProfileServiceServiceName = exports.AuthServiceDefinition = exports.AuthServiceClientImpl = exports.AuthServiceServiceName = exports.AuthError = exports.UpdateScimGroupMappingResponse = exports.UpdateScimGroupMappingRequest = exports.ListScimGroupMappingsResponse = exports.ListScimGroupMappingsRequest = exports.CancelScimTokenRotationResponse = exports.CancelScimTokenRotationRequest = exports.CompleteScimTokenRotationResponse = exports.CompleteScimTokenRotationRequest = exports.StartScimTokenRotationResponse = exports.StartScimTokenRotationRequest = exports.CreateScimConnectionResponse = exports.CreateScimConnectionRequest = exports.GetScimConnectionResponse = exports.GetScimConnectionRequest = exports.DeleteSsoConnectionResponse = exports.DeleteSsoConnectionRequest = exports.UpdateSsoConnectionResponse = exports.UpdateSsoConnectionRequest = exports.CreateSsoConnectionResponse = exports.CreateSsoConnectionRequest = exports.ListSsoConnectionsResponse = exports.ListSsoConnectionsRequest = exports.UpdateRbacPolicyResponse = exports.UpdateRbacPolicyRequest = exports.GetRbacPolicyResponse = exports.GetRbacPolicyRequest = exports.DeleteOrganizationTeamResponse = exports.DeleteOrganizationTeamRequest = exports.UpdateOrganizationTeamResponse = exports.UpdateOrganizationTeamRequest = exports.GetOrganizationTeamResponse = exports.GetOrganizationTeamRequest = exports.CreateOrganizationTeamResponse = exports.CreateOrganizationTeamRequest = exports.ListOrganizationTeamsResponse = exports.ListOrganizationTeamsRequest = exports.RevokeOrganizationMemberInviteResponse = exports.RevokeOrganizationMemberInviteRequest = exports.ResendOrganizationMemberInviteResponse = void 0;
+exports.OrganizationAuthAdminServiceClientImpl = exports.OrganizationAuthAdminServiceServiceName = exports.ProfileServiceDefinition = exports.ProfileServiceClientImpl = exports.ProfileServiceServiceName = exports.AuthServiceDefinition = exports.AuthServiceClientImpl = exports.AuthServiceServiceName = exports.AuthError = exports.UpdateScimGroupMappingResponse = exports.UpdateScimGroupMappingRequest = exports.ListScimGroupMappingsResponse = exports.ListScimGroupMappingsRequest = exports.CancelScimTokenRotationResponse = exports.CancelScimTokenRotationRequest = exports.CompleteScimTokenRotationResponse = exports.CompleteScimTokenRotationRequest = exports.StartScimTokenRotationResponse = exports.StartScimTokenRotationRequest = exports.CreateScimConnectionResponse = exports.CreateScimConnectionRequest = exports.GetScimConnectionResponse = exports.GetScimConnectionRequest = exports.DeleteSsoConnectionResponse = exports.DeleteSsoConnectionRequest = exports.UpdateSsoConnectionResponse = exports.UpdateSsoConnectionRequest = exports.CreateSsoConnectionResponse = exports.CreateSsoConnectionRequest = exports.ListSsoConnectionsResponse = exports.ListSsoConnectionsRequest = exports.ListAuthorizationDecisionEventsResponse = exports.ListAuthorizationDecisionEventsRequest = exports.UpdateRbacPolicyResponse = exports.UpdateRbacPolicyRequest = exports.GetRbacPolicyResponse = exports.GetRbacPolicyRequest = exports.DeleteOrganizationTeamResponse = exports.DeleteOrganizationTeamRequest = exports.UpdateOrganizationTeamResponse = exports.UpdateOrganizationTeamRequest = exports.GetOrganizationTeamResponse = exports.GetOrganizationTeamRequest = exports.CreateOrganizationTeamResponse = exports.CreateOrganizationTeamRequest = exports.ListOrganizationTeamsResponse = exports.ListOrganizationTeamsRequest = exports.RevokeOrganizationMemberInviteResponse = exports.RevokeOrganizationMemberInviteRequest = exports.ResendOrganizationMemberInviteResponse = void 0;
+exports.OrganizationAuthAdminServiceDefinition = void 0;
 /* eslint-disable */
 const wire_1 = require("@bufbuild/protobuf/wire");
 const struct_pb_1 = require("../../../google/protobuf/struct.pb");
@@ -5094,6 +5095,275 @@ exports.UpdateRbacPolicyResponse = {
         return message;
     },
 };
+function createBaseListAuthorizationDecisionEventsRequest() {
+    return {
+        organizationSlug: "",
+        actingUserId: "",
+        featureFlagKey: "",
+        resourceId: "",
+        action: "",
+        decision: 0,
+        pageSize: 0,
+        pageToken: "",
+    };
+}
+exports.ListAuthorizationDecisionEventsRequest = {
+    encode(message, writer = new wire_1.BinaryWriter()) {
+        if (message.organizationSlug !== "") {
+            writer.uint32(10).string(message.organizationSlug);
+        }
+        if (message.actingUserId !== "") {
+            writer.uint32(18).string(message.actingUserId);
+        }
+        if (message.featureFlagKey !== "") {
+            writer.uint32(26).string(message.featureFlagKey);
+        }
+        if (message.resourceId !== "") {
+            writer.uint32(34).string(message.resourceId);
+        }
+        if (message.action !== "") {
+            writer.uint32(42).string(message.action);
+        }
+        if (message.decision !== 0) {
+            writer.uint32(48).int32(message.decision);
+        }
+        if (message.pageSize !== 0) {
+            writer.uint32(56).int32(message.pageSize);
+        }
+        if (message.pageToken !== "") {
+            writer.uint32(66).string(message.pageToken);
+        }
+        return writer;
+    },
+    decode(input, length) {
+        const reader = input instanceof wire_1.BinaryReader ? input : new wire_1.BinaryReader(input);
+        const end = length === undefined ? reader.len : reader.pos + length;
+        const message = createBaseListAuthorizationDecisionEventsRequest();
+        while (reader.pos < end) {
+            const tag = reader.uint32();
+            switch (tag >>> 3) {
+                case 1: {
+                    if (tag !== 10) {
+                        break;
+                    }
+                    message.organizationSlug = reader.string();
+                    continue;
+                }
+                case 2: {
+                    if (tag !== 18) {
+                        break;
+                    }
+                    message.actingUserId = reader.string();
+                    continue;
+                }
+                case 3: {
+                    if (tag !== 26) {
+                        break;
+                    }
+                    message.featureFlagKey = reader.string();
+                    continue;
+                }
+                case 4: {
+                    if (tag !== 34) {
+                        break;
+                    }
+                    message.resourceId = reader.string();
+                    continue;
+                }
+                case 5: {
+                    if (tag !== 42) {
+                        break;
+                    }
+                    message.action = reader.string();
+                    continue;
+                }
+                case 6: {
+                    if (tag !== 48) {
+                        break;
+                    }
+                    message.decision = reader.int32();
+                    continue;
+                }
+                case 7: {
+                    if (tag !== 56) {
+                        break;
+                    }
+                    message.pageSize = reader.int32();
+                    continue;
+                }
+                case 8: {
+                    if (tag !== 66) {
+                        break;
+                    }
+                    message.pageToken = reader.string();
+                    continue;
+                }
+            }
+            if ((tag & 7) === 4 || tag === 0) {
+                break;
+            }
+            reader.skip(tag & 7);
+        }
+        return message;
+    },
+    fromJSON(object) {
+        return {
+            organizationSlug: isSet(object.organizationSlug)
+                ? globalThis.String(object.organizationSlug)
+                : isSet(object.organization_slug)
+                    ? globalThis.String(object.organization_slug)
+                    : "",
+            actingUserId: isSet(object.actingUserId)
+                ? globalThis.String(object.actingUserId)
+                : isSet(object.acting_user_id)
+                    ? globalThis.String(object.acting_user_id)
+                    : "",
+            featureFlagKey: isSet(object.featureFlagKey)
+                ? globalThis.String(object.featureFlagKey)
+                : isSet(object.feature_flag_key)
+                    ? globalThis.String(object.feature_flag_key)
+                    : "",
+            resourceId: isSet(object.resourceId)
+                ? globalThis.String(object.resourceId)
+                : isSet(object.resource_id)
+                    ? globalThis.String(object.resource_id)
+                    : "",
+            action: isSet(object.action) ? globalThis.String(object.action) : "",
+            decision: isSet(object.decision) ? (0, auth_pb_1.authorizationDecisionFromJSON)(object.decision) : 0,
+            pageSize: isSet(object.pageSize)
+                ? globalThis.Number(object.pageSize)
+                : isSet(object.page_size)
+                    ? globalThis.Number(object.page_size)
+                    : 0,
+            pageToken: isSet(object.pageToken)
+                ? globalThis.String(object.pageToken)
+                : isSet(object.page_token)
+                    ? globalThis.String(object.page_token)
+                    : "",
+        };
+    },
+    toJSON(message) {
+        const obj = {};
+        if (message.organizationSlug !== "") {
+            obj.organizationSlug = message.organizationSlug;
+        }
+        if (message.actingUserId !== "") {
+            obj.actingUserId = message.actingUserId;
+        }
+        if (message.featureFlagKey !== "") {
+            obj.featureFlagKey = message.featureFlagKey;
+        }
+        if (message.resourceId !== "") {
+            obj.resourceId = message.resourceId;
+        }
+        if (message.action !== "") {
+            obj.action = message.action;
+        }
+        if (message.decision !== 0) {
+            obj.decision = (0, auth_pb_1.authorizationDecisionToJSON)(message.decision);
+        }
+        if (message.pageSize !== 0) {
+            obj.pageSize = Math.round(message.pageSize);
+        }
+        if (message.pageToken !== "") {
+            obj.pageToken = message.pageToken;
+        }
+        return obj;
+    },
+    create(base) {
+        return exports.ListAuthorizationDecisionEventsRequest.fromPartial(base !== null && base !== void 0 ? base : {});
+    },
+    fromPartial(object) {
+        var _a, _b, _c, _d, _e, _f, _g, _h;
+        const message = createBaseListAuthorizationDecisionEventsRequest();
+        message.organizationSlug = (_a = object.organizationSlug) !== null && _a !== void 0 ? _a : "";
+        message.actingUserId = (_b = object.actingUserId) !== null && _b !== void 0 ? _b : "";
+        message.featureFlagKey = (_c = object.featureFlagKey) !== null && _c !== void 0 ? _c : "";
+        message.resourceId = (_d = object.resourceId) !== null && _d !== void 0 ? _d : "";
+        message.action = (_e = object.action) !== null && _e !== void 0 ? _e : "";
+        message.decision = (_f = object.decision) !== null && _f !== void 0 ? _f : 0;
+        message.pageSize = (_g = object.pageSize) !== null && _g !== void 0 ? _g : 0;
+        message.pageToken = (_h = object.pageToken) !== null && _h !== void 0 ? _h : "";
+        return message;
+    },
+};
+function createBaseListAuthorizationDecisionEventsResponse() {
+    return { events: [], nextPageToken: "" };
+}
+exports.ListAuthorizationDecisionEventsResponse = {
+    encode(message, writer = new wire_1.BinaryWriter()) {
+        for (const v of message.events) {
+            auth_pb_1.AuthorizationDecisionEvent.encode(v, writer.uint32(10).fork()).join();
+        }
+        if (message.nextPageToken !== "") {
+            writer.uint32(18).string(message.nextPageToken);
+        }
+        return writer;
+    },
+    decode(input, length) {
+        const reader = input instanceof wire_1.BinaryReader ? input : new wire_1.BinaryReader(input);
+        const end = length === undefined ? reader.len : reader.pos + length;
+        const message = createBaseListAuthorizationDecisionEventsResponse();
+        while (reader.pos < end) {
+            const tag = reader.uint32();
+            switch (tag >>> 3) {
+                case 1: {
+                    if (tag !== 10) {
+                        break;
+                    }
+                    message.events.push(auth_pb_1.AuthorizationDecisionEvent.decode(reader, reader.uint32()));
+                    continue;
+                }
+                case 2: {
+                    if (tag !== 18) {
+                        break;
+                    }
+                    message.nextPageToken = reader.string();
+                    continue;
+                }
+            }
+            if ((tag & 7) === 4 || tag === 0) {
+                break;
+            }
+            reader.skip(tag & 7);
+        }
+        return message;
+    },
+    fromJSON(object) {
+        return {
+            events: globalThis.Array.isArray(object === null || object === void 0 ? void 0 : object.events)
+                ? object.events.map((e) => auth_pb_1.AuthorizationDecisionEvent.fromJSON(e))
+                : [],
+            nextPageToken: isSet(object.nextPageToken)
+                ? globalThis.String(object.nextPageToken)
+                : isSet(object.next_page_token)
+                    ? globalThis.String(object.next_page_token)
+                    : "",
+        };
+    },
+    toJSON(message) {
+        var _a;
+        const obj = {};
+        if ((_a = message.events) === null || _a === void 0 ? void 0 : _a.length) {
+            obj.events = message.events.map((e) => auth_pb_1.AuthorizationDecisionEvent.toJSON(e));
+        }
+        if (message.nextPageToken !== "") {
+            obj.nextPageToken = message.nextPageToken;
+        }
+        return obj;
+    },
+    create(base) {
+        return exports.ListAuthorizationDecisionEventsResponse.fromPartial(base !== null && base !== void 0 ? base : {});
+    },
+    fromPartial(object) {
+        var _a;
+        var _b;
+        const message = createBaseListAuthorizationDecisionEventsResponse();
+        message.events = ((_a = object.events) === null || _a === void 0 ? void 0 : _a.map((e) => auth_pb_1.AuthorizationDecisionEvent.fromPartial(e))) || [];
+        message.nextPageToken = (_b = object.nextPageToken) !== null && _b !== void 0 ? _b : "";
+        return message;
+    },
+};
 function createBaseListSsoConnectionsRequest() {
     return { organizationSlug: "" };
 }
@@ -7833,6 +8103,7 @@ class OrganizationAuthAdminServiceClientImpl {
         this.DeleteOrganizationTeam = this.DeleteOrganizationTeam.bind(this);
         this.GetRbacPolicy = this.GetRbacPolicy.bind(this);
         this.UpdateRbacPolicy = this.UpdateRbacPolicy.bind(this);
+        this.ListAuthorizationDecisionEvents = this.ListAuthorizationDecisionEvents.bind(this);
         this.ListSsoConnections = this.ListSsoConnections.bind(this);
         this.CreateSsoConnection = this.CreateSsoConnection.bind(this);
         this.UpdateSsoConnection = this.UpdateSsoConnection.bind(this);
@@ -7920,6 +8191,11 @@ class OrganizationAuthAdminServiceClientImpl {
         const promise = this.rpc.request(this.service, "UpdateRbacPolicy", data);
         return promise.then((data) => exports.UpdateRbacPolicyResponse.decode(new wire_1.BinaryReader(data)));
     }
+    ListAuthorizationDecisionEvents(request) {
+        const data = exports.ListAuthorizationDecisionEventsRequest.encode(request).finish();
+        const promise = this.rpc.request(this.service, "ListAuthorizationDecisionEvents", data);
+        return promise.then((data) => exports.ListAuthorizationDecisionEventsResponse.decode(new wire_1.BinaryReader(data)));
+    }
     ListSsoConnections(request) {
         const data = exports.ListSsoConnectionsRequest.encode(request).finish();
         const promise = this.rpc.request(this.service, "ListSsoConnections", data);
@@ -8981,6 +9257,80 @@ exports.OrganizationAuthAdminServiceDefinition = {
                 },
             },
         },
+        listAuthorizationDecisionEvents: {
+            name: "ListAuthorizationDecisionEvents",
+            requestType: exports.ListAuthorizationDecisionEventsRequest,
+            requestStream: false,
+            responseType: exports.ListAuthorizationDecisionEventsResponse,
+            responseStream: false,
+            options: {
+                _unknownFields: {
+                    578365826: [
+                        new Uint8Array([
+                            58,
+                            18,
+                            56,
+                            47,
+                            118,
+                            49,
+                            47,
+                            111,
+                            114,
+                            103,
+                            47,
+                            123,
+                            111,
+                            114,
+                            103,
+                            97,
+                            110,
+                            105,
+                            122,
+                            97,
+                            116,
+                            105,
+                            111,
+                            110,
+                            95,
+                            115,
+                            108,
+                            117,
+                            103,
+                            125,
+                            47,
+                            97,
+                            117,
+                            116,
+                            104,
+                            47,
+                            97,
+                            117,
+                            116,
+                            104,
+                            111,
+                            114,
+                            105,
+                            122,
+                            97,
+                            116,
+                            105,
+                            111,
+                            110,
+                            45,
+                            100,
+                            101,
+                            99,
+                            105,
+                            115,
+                            105,
+                            111,
+                            110,
+                            115,
+                        ]),
+                    ],
+                },
+            },
+        },
         listSsoConnections: {
             name: "ListSsoConnections",
             requestType: exports.ListSsoConnectionsRequest,

package/dist/weavesql/weavedb/auth_identity_sql.d.ts

@@ -455,6 +455,87 @@ export interface InsertAuthAuditEventArgs {
     metadata: any;
 }
 export declare function insertAuthAuditEvent(client: Client, args: InsertAuthAuditEventArgs): Promise<void>;
+export declare const insertAuthorizationDecisionEventQuery = "-- name: InsertAuthorizationDecisionEvent :one\nINSERT INTO weave.authorization_decision_events (\n    organization_id,\n    acting_user_id,\n    actor_organization_membership_id,\n    actor_identity_link_id,\n    rbac_role_ids,\n    org_team_ids,\n    platform_grant_ids,\n    support_access_session_id,\n    feature_flag_key,\n    feature_flag_provider,\n    feature_flag_variant,\n    resource_id,\n    resource_instance_id,\n    action,\n    decision,\n    reason_code,\n    safe_message,\n    used_support_elevation,\n    metadata\n) VALUES (\n    $1,\n    $2::uuid,\n    $3::uuid,\n    $4::uuid,\n    $5,\n    $6,\n    $7,\n    $8::uuid,\n    $9,\n    $10,\n    $11,\n    $12,\n    $13,\n    $14,\n    $15,\n    $16,\n    $17,\n    $18,\n    $19\n)\nRETURNING\n    id,\n    organization_id,\n    acting_user_id,\n    actor_organization_membership_id,\n    actor_identity_link_id,\n    rbac_role_ids,\n    org_team_ids,\n    platform_grant_ids,\n    support_access_session_id,\n    feature_flag_key,\n    feature_flag_provider,\n    feature_flag_variant,\n    resource_id,\n    resource_instance_id,\n    action,\n    decision,\n    reason_code,\n    safe_message,\n    used_support_elevation,\n    metadata,\n    created_at";
+export interface InsertAuthorizationDecisionEventArgs {
+    organizationId: string;
+    actingUserId: string | null;
+    actorOrganizationMembershipId: string | null;
+    actorIdentityLinkId: string | null;
+    rbacRoleIds: string[];
+    orgTeamIds: string[];
+    platformGrantIds: string[];
+    supportAccessSessionId: string | null;
+    featureFlagKey: string;
+    featureFlagProvider: string;
+    featureFlagVariant: string;
+    resourceId: string;
+    resourceInstanceId: string;
+    action: string;
+    decision: string;
+    reasonCode: string;
+    safeMessage: string;
+    usedSupportElevation: boolean;
+    metadata: any;
+}
+export interface InsertAuthorizationDecisionEventRow {
+    id: string;
+    organizationId: string;
+    actingUserId: string | null;
+    actorOrganizationMembershipId: string | null;
+    actorIdentityLinkId: string | null;
+    rbacRoleIds: string[];
+    orgTeamIds: string[];
+    platformGrantIds: string[];
+    supportAccessSessionId: string | null;
+    featureFlagKey: string;
+    featureFlagProvider: string;
+    featureFlagVariant: string;
+    resourceId: string;
+    resourceInstanceId: string;
+    action: string;
+    decision: string;
+    reasonCode: string;
+    safeMessage: string;
+    usedSupportElevation: boolean;
+    metadata: any;
+    createdAt: Date;
+}
+export declare function insertAuthorizationDecisionEvent(client: Client, args: InsertAuthorizationDecisionEventArgs): Promise<InsertAuthorizationDecisionEventRow | null>;
+export declare const listAuthorizationDecisionEventsByOrganizationQuery = "-- name: ListAuthorizationDecisionEventsByOrganization :many\nSELECT\n    id,\n    organization_id,\n    acting_user_id,\n    actor_organization_membership_id,\n    actor_identity_link_id,\n    rbac_role_ids,\n    org_team_ids,\n    platform_grant_ids,\n    support_access_session_id,\n    feature_flag_key,\n    feature_flag_provider,\n    feature_flag_variant,\n    resource_id,\n    resource_instance_id,\n    action,\n    decision,\n    reason_code,\n    safe_message,\n    used_support_elevation,\n    metadata,\n    created_at\nFROM weave.authorization_decision_events\nWHERE organization_id = $1\n  AND (\n      $2::uuid IS NULL\n      OR acting_user_id = $2::uuid\n  )\n  AND (\n      $3::text IS NULL\n      OR feature_flag_key = $3::text\n  )\n  AND (\n      $4::text IS NULL\n      OR resource_id = $4::text\n  )\n  AND (\n      $5::text IS NULL\n      OR action = $5::text\n  )\n  AND (\n      $6::text IS NULL\n      OR decision = $6::text\n  )\nORDER BY created_at DESC, id DESC\nLIMIT $8 OFFSET $7";
+export interface ListAuthorizationDecisionEventsByOrganizationArgs {
+    organizationId: string;
+    actingUserId: string | null;
+    featureFlagKey: string | null;
+    resourceId: string | null;
+    action: string | null;
+    decision: string | null;
+    pageOffset: string;
+    pageSize: string;
+}
+export interface ListAuthorizationDecisionEventsByOrganizationRow {
+    id: string;
+    organizationId: string;
+    actingUserId: string | null;
+    actorOrganizationMembershipId: string | null;
+    actorIdentityLinkId: string | null;
+    rbacRoleIds: string[];
+    orgTeamIds: string[];
+    platformGrantIds: string[];
+    supportAccessSessionId: string | null;
+    featureFlagKey: string;
+    featureFlagProvider: string;
+    featureFlagVariant: string;
+    resourceId: string;
+    resourceInstanceId: string;
+    action: string;
+    decision: string;
+    reasonCode: string;
+    safeMessage: string;
+    usedSupportElevation: boolean;
+    metadata: any;
+    createdAt: Date;
+}
+export declare function listAuthorizationDecisionEventsByOrganization(client: Client, args: ListAuthorizationDecisionEventsByOrganizationArgs): Promise<ListAuthorizationDecisionEventsByOrganizationRow[]>;
 export declare const createApplicationSessionQuery = "-- name: CreateApplicationSession :one\nINSERT INTO weave.application_sessions (\n    user_id,\n    active_organization_id,\n    expires_at\n) VALUES (\n    $1,\n    $2,\n    $3\n)\nRETURNING\n    id,\n    user_id,\n    active_organization_id,\n    status,\n    expires_at,\n    revoked_at,\n    created_at,\n    updated_at";
 export interface CreateApplicationSessionArgs {
     userId: string;

package/dist/weavesql/weavedb/auth_identity_sql.js

@@ -1,7 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.deleteOrgTeamQuery = exports.updateOrgTeamQuery = exports.listOrgTeamsQuery = exports.getOrgTeamQuery = exports.createOrgTeamQuery = exports.deleteExpiredAuthInviteSessionsQuery = exports.revokeAuthInviteSessionsByMemberQuery = exports.markAuthInviteSessionRecoveryRequiredQuery = exports.markAuthInviteSessionCompletedQuery = exports.setAuthInviteSessionOAuthStateQuery = exports.getAuthInviteSessionQuery = exports.createAuthInviteSessionQuery = exports.deleteExpiredApplicationSessionsQuery = exports.markApplicationSessionOrganizationSessionStateQuery = exports.listApplicationSessionOrganizationSessionStatesQuery = exports.getApplicationSessionOrganizationSessionQuery = exports.upsertApplicationSessionOrganizationSessionQuery = exports.revokeApplicationSessionQuery = exports.setApplicationSessionActiveOrganizationQuery = exports.getApplicationSessionQuery = exports.createApplicationSessionQuery = exports.insertAuthAuditEventQuery = exports.endSupportAccessSessionQuery = exports.createSupportAccessSessionQuery = exports.createPlatformAdminGrantQuery = exports.listActivePlatformAdminGrantsForUserQuery = exports.getOrganizationMemberAdminRecordQuery = exports.listOrganizationMembersQuery = exports.listOrganizationMembershipsForUserQuery = exports.getOrganizationMembershipQuery = exports.upsertOrganizationMembershipQuery = exports.upsertOrganizationAuthLinkQuery = exports.getOrganizationAuthLinkByOrganizationIDQuery = exports.getOrganizationAuthLinkByStytchIDQuery = exports.upsertIdentityLinkQuery = exports.getIdentityLinkByStytchMemberQuery = exports.getUserProfileQuery = exports.upsertUserProfileQuery = exports.deleteOrganizationAuthDomainQuery = exports.listOrganizationAuthDomainsQuery = exports.upsertOrganizationAuthDomainQuery = exports.resolvePrimaryOrganizationAuthLinkByDomainQuery = exports.updateUserProfileThemeQuery = exports.setUserOrganizationPagePositionQuery = exports.setUserLastOrganizationQuery = exports.getUserAuthPreferencesQuery = exports.getUserPrimaryOrganizationAuthLinkQuery = exports.setUserPrimaryOrganizationQuery = exports.getUserByIDQuery = exports.createUserQuery = void 0;
-exports.deleteOrgTeamMembershipsForOrganizationMemberQuery = exports.listEffectiveOrganizationRoleIDsQuery = exports.listOrgTeamRoleGrantsQuery = exports.listOrgTeamMembersQuery = exports.addOrgTeamRoleGrantQuery = exports.deleteOrgTeamRoleGrantsQuery = exports.addOrgTeamMembershipQuery = exports.deleteOrgTeamMembershipsQuery = void 0;
+exports.listOrgTeamsQuery = exports.getOrgTeamQuery = exports.createOrgTeamQuery = exports.deleteExpiredAuthInviteSessionsQuery = exports.revokeAuthInviteSessionsByMemberQuery = exports.markAuthInviteSessionRecoveryRequiredQuery = exports.markAuthInviteSessionCompletedQuery = exports.setAuthInviteSessionOAuthStateQuery = exports.getAuthInviteSessionQuery = exports.createAuthInviteSessionQuery = exports.deleteExpiredApplicationSessionsQuery = exports.markApplicationSessionOrganizationSessionStateQuery = exports.listApplicationSessionOrganizationSessionStatesQuery = exports.getApplicationSessionOrganizationSessionQuery = exports.upsertApplicationSessionOrganizationSessionQuery = exports.revokeApplicationSessionQuery = exports.setApplicationSessionActiveOrganizationQuery = exports.getApplicationSessionQuery = exports.createApplicationSessionQuery = exports.listAuthorizationDecisionEventsByOrganizationQuery = exports.insertAuthorizationDecisionEventQuery = exports.insertAuthAuditEventQuery = exports.endSupportAccessSessionQuery = exports.createSupportAccessSessionQuery = exports.createPlatformAdminGrantQuery = exports.listActivePlatformAdminGrantsForUserQuery = exports.getOrganizationMemberAdminRecordQuery = exports.listOrganizationMembersQuery = exports.listOrganizationMembershipsForUserQuery = exports.getOrganizationMembershipQuery = exports.upsertOrganizationMembershipQuery = exports.upsertOrganizationAuthLinkQuery = exports.getOrganizationAuthLinkByOrganizationIDQuery = exports.getOrganizationAuthLinkByStytchIDQuery = exports.upsertIdentityLinkQuery = exports.getIdentityLinkByStytchMemberQuery = exports.getUserProfileQuery = exports.upsertUserProfileQuery = exports.deleteOrganizationAuthDomainQuery = exports.listOrganizationAuthDomainsQuery = exports.upsertOrganizationAuthDomainQuery = exports.resolvePrimaryOrganizationAuthLinkByDomainQuery = exports.updateUserProfileThemeQuery = exports.setUserOrganizationPagePositionQuery = exports.setUserLastOrganizationQuery = exports.getUserAuthPreferencesQuery = exports.getUserPrimaryOrganizationAuthLinkQuery = exports.setUserPrimaryOrganizationQuery = exports.getUserByIDQuery = exports.createUserQuery = void 0;
+exports.deleteOrgTeamMembershipsForOrganizationMemberQuery = exports.listEffectiveOrganizationRoleIDsQuery = exports.listOrgTeamRoleGrantsQuery = exports.listOrgTeamMembersQuery = exports.addOrgTeamRoleGrantQuery = exports.deleteOrgTeamRoleGrantsQuery = exports.addOrgTeamMembershipQuery = exports.deleteOrgTeamMembershipsQuery = exports.deleteOrgTeamQuery = exports.updateOrgTeamQuery = void 0;
 exports.createUser = createUser;
 exports.getUserByID = getUserByID;
 exports.setUserPrimaryOrganization = setUserPrimaryOrganization;
@@ -29,6 +29,8 @@ exports.listActivePlatformAdminGrantsForUser = listActivePlatformAdminGrantsForU
 exports.createPlatformAdminGrant = createPlatformAdminGrant;
 exports.createSupportAccessSession = createSupportAccessSession;
 exports.insertAuthAuditEvent = insertAuthAuditEvent;
+exports.insertAuthorizationDecisionEvent = insertAuthorizationDecisionEvent;
+exports.listAuthorizationDecisionEventsByOrganization = listAuthorizationDecisionEventsByOrganization;
 exports.createApplicationSession = createApplicationSession;
 exports.getApplicationSession = getApplicationSession;
 exports.setApplicationSessionActiveOrganization = setApplicationSessionActiveOrganization;
@@ -1117,6 +1119,183 @@ async function insertAuthAuditEvent(client, args) {
         rowMode: "array"
     });
 }
+exports.insertAuthorizationDecisionEventQuery = `-- name: InsertAuthorizationDecisionEvent :one
+INSERT INTO weave.authorization_decision_events (
+    organization_id,
+    acting_user_id,
+    actor_organization_membership_id,
+    actor_identity_link_id,
+    rbac_role_ids,
+    org_team_ids,
+    platform_grant_ids,
+    support_access_session_id,
+    feature_flag_key,
+    feature_flag_provider,
+    feature_flag_variant,
+    resource_id,
+    resource_instance_id,
+    action,
+    decision,
+    reason_code,
+    safe_message,
+    used_support_elevation,
+    metadata
+) VALUES (
+    $1,
+    $2::uuid,
+    $3::uuid,
+    $4::uuid,
+    $5,
+    $6,
+    $7,
+    $8::uuid,
+    $9,
+    $10,
+    $11,
+    $12,
+    $13,
+    $14,
+    $15,
+    $16,
+    $17,
+    $18,
+    $19
+)
+RETURNING
+    id,
+    organization_id,
+    acting_user_id,
+    actor_organization_membership_id,
+    actor_identity_link_id,
+    rbac_role_ids,
+    org_team_ids,
+    platform_grant_ids,
+    support_access_session_id,
+    feature_flag_key,
+    feature_flag_provider,
+    feature_flag_variant,
+    resource_id,
+    resource_instance_id,
+    action,
+    decision,
+    reason_code,
+    safe_message,
+    used_support_elevation,
+    metadata,
+    created_at`;
+async function insertAuthorizationDecisionEvent(client, args) {
+    const result = await client.query({
+        text: exports.insertAuthorizationDecisionEventQuery,
+        values: [args.organizationId, args.actingUserId, args.actorOrganizationMembershipId, args.actorIdentityLinkId, args.rbacRoleIds, args.orgTeamIds, args.platformGrantIds, args.supportAccessSessionId, args.featureFlagKey, args.featureFlagProvider, args.featureFlagVariant, args.resourceId, args.resourceInstanceId, args.action, args.decision, args.reasonCode, args.safeMessage, args.usedSupportElevation, args.metadata],
+        rowMode: "array"
+    });
+    if (result.rows.length !== 1) {
+        return null;
+    }
+    const row = result.rows[0];
+    return {
+        id: row[0],
+        organizationId: row[1],
+        actingUserId: row[2],
+        actorOrganizationMembershipId: row[3],
+        actorIdentityLinkId: row[4],
+        rbacRoleIds: row[5],
+        orgTeamIds: row[6],
+        platformGrantIds: row[7],
+        supportAccessSessionId: row[8],
+        featureFlagKey: row[9],
+        featureFlagProvider: row[10],
+        featureFlagVariant: row[11],
+        resourceId: row[12],
+        resourceInstanceId: row[13],
+        action: row[14],
+        decision: row[15],
+        reasonCode: row[16],
+        safeMessage: row[17],
+        usedSupportElevation: row[18],
+        metadata: row[19],
+        createdAt: row[20]
+    };
+}
+exports.listAuthorizationDecisionEventsByOrganizationQuery = `-- name: ListAuthorizationDecisionEventsByOrganization :many
+SELECT
+    id,
+    organization_id,
+    acting_user_id,
+    actor_organization_membership_id,
+    actor_identity_link_id,
+    rbac_role_ids,
+    org_team_ids,
+    platform_grant_ids,
+    support_access_session_id,
+    feature_flag_key,
+    feature_flag_provider,
+    feature_flag_variant,
+    resource_id,
+    resource_instance_id,
+    action,
+    decision,
+    reason_code,
+    safe_message,
+    used_support_elevation,
+    metadata,
+    created_at
+FROM weave.authorization_decision_events
+WHERE organization_id = $1
+  AND (
+      $2::uuid IS NULL
+      OR acting_user_id = $2::uuid
+  )
+  AND (
+      $3::text IS NULL
+      OR feature_flag_key = $3::text
+  )
+  AND (
+      $4::text IS NULL
+      OR resource_id = $4::text
+  )
+  AND (
+      $5::text IS NULL
+      OR action = $5::text
+  )
+  AND (
+      $6::text IS NULL
+      OR decision = $6::text
+  )
+ORDER BY created_at DESC, id DESC
+LIMIT $8 OFFSET $7`;
+async function listAuthorizationDecisionEventsByOrganization(client, args) {
+    const result = await client.query({
+        text: exports.listAuthorizationDecisionEventsByOrganizationQuery,
+        values: [args.organizationId, args.actingUserId, args.featureFlagKey, args.resourceId, args.action, args.decision, args.pageOffset, args.pageSize],
+        rowMode: "array"
+    });
+    return result.rows.map(row => {
+        return {
+            id: row[0],
+            organizationId: row[1],
+            actingUserId: row[2],
+            actorOrganizationMembershipId: row[3],
+            actorIdentityLinkId: row[4],
+            rbacRoleIds: row[5],
+            orgTeamIds: row[6],
+            platformGrantIds: row[7],
+            supportAccessSessionId: row[8],
+            featureFlagKey: row[9],
+            featureFlagProvider: row[10],
+            featureFlagVariant: row[11],
+            resourceId: row[12],
+            resourceInstanceId: row[13],
+            action: row[14],
+            decision: row[15],
+            reasonCode: row[16],
+            safeMessage: row[17],
+            usedSupportElevation: row[18],
+            metadata: row[19],
+            createdAt: row[20]
+        };
+    });
+}
 exports.createApplicationSessionQuery = `-- name: CreateApplicationSession :one
 INSERT INTO weave.application_sessions (
     user_id,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "weave-typescript",
-  "version": "0.42.8",
+  "version": "0.43.0",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
   "files": [