dfns-sdk 0.0.0.dev0__py3-none-any.whl

dfns_sdk/generated/permissions/types.py

@@ -0,0 +1,107 @@
+"""Types for the permissions domain."""
+
+from typing import Any, Literal, NotRequired, Optional, TypedDict, Union
+
+class ListPermissionAssignmentsResponse(TypedDict, total=False):
+    """listPermissionAssignments response."""
+
+    items: list[TypedDict]
+    next_page_token: NotRequired[str]
+
+class AssignPermissionRequest(TypedDict, total=False):
+    """assignPermission request body."""
+
+    identity_id: str
+
+class AssignPermissionResponse(TypedDict, total=False):
+    """assignPermission response."""
+
+    id: str
+    permission_id: str
+    identity_id: str
+    is_immutable: bool
+    date_created: str
+    date_updated: str
+
+class RevokePermissionQuery(TypedDict, total=False):
+    """revokePermission query parameters."""
+
+    force: NotRequired[bool]
+
+class DeletePermissionRequest(TypedDict, total=False):
+    """deletePermission request body."""
+
+    is_archived: bool
+
+class DeletePermissionResponse(TypedDict, total=False):
+    """deletePermission response."""
+
+    id: str
+    name: str
+    operations: list[str]
+    status: Literal["Active"]
+    is_immutable: bool
+    is_archived: bool
+    date_created: str
+    date_updated: str
+
+class ListPermissionsResponse(TypedDict, total=False):
+    """listPermissions response."""
+
+    items: list[TypedDict]
+    next_page_token: NotRequired[str]
+
+class ListPermissionsQuery(TypedDict, total=False):
+    """listPermissions query parameters."""
+
+    limit: NotRequired[str]
+    pagination_token: NotRequired[str]
+
+class CreatePermissionRequest(TypedDict, total=False):
+    """createPermission request body."""
+
+    name: str
+    operations: list[Union[Literal["Registry:Addresses:Create", "Registry:Addresses:Delete", "Registry:Addresses:Read", "Registry:Addresses:Update", "Registry:ContractSchemas:Create", "Registry:ContractSchemas:Delete", "Registry:ContractSchemas:Read", "Auth:Logs:Read", "Auth:Users:Create", "Auth:Users:Read", "Auth:Users:Update", "Auth:Users:Activate", "Auth:Users:Deactivate", "Auth:Users:Delete", "Auth:ServiceAccounts:Create", "Auth:ServiceAccounts:Read", "Auth:ServiceAccounts:Update", "Auth:ServiceAccounts:Deactivate", "Auth:ServiceAccounts:Activate", "Auth:ServiceAccounts:Delete", "Auth:Pats:Create", "Auth:Register:Delegated", "Auth:Login:Delegated", "Auth:Recover:Delegated", "Agreements:Acceptance:Create", "Agreements:Acceptance:Read", "Events:Read", "Exchanges:Create", "Exchanges:Read", "Exchanges:Delete", "Exchanges:Deposits:Create", "Exchanges:Withdrawals:Create", "FeeSponsors:Create", "FeeSponsors:Read", "FeeSponsors:Update", "FeeSponsors:Delete", "FeeSponsors:Use", "Orgs:Read", "Orgs:Update", "Orgs:Settings:Read", "Orgs:Settings:Update", "Permissions:Archive", "Permissions:Create", "Permissions:Read", "Permissions:Update", "Permissions:Assign", "Permissions:Revoke", "Permissions:Assignments:Read", "Policies:Archive", "Policies:Create", "Policies:Read", "Policies:Update", "Policies:Approvals:Read", "Policies:Approvals:Approve", "Signers:ListSigners", "Stakes:Create", "Stakes:Read", "Stakes:Update", "Swaps:Create", "Swaps:Read", "Allocations:Create", "Allocations:Update", "Allocations:Read", "Keys:Create", "Keys:Delete", "Keys:Read", "Keys:Update", "Keys:Reuse", "Keys:Delegate", "Keys:Import", "Keys:Export", "Keys:Derive", "Keys:ChildKeys:Create", "Keys:Signatures:Create", "Keys:Signatures:Read", "KeyStores:Read", "Networks:CantonValidators:Create", "Networks:CantonValidators:Read", "Networks:CantonValidators:Update", "Networks:CantonValidators:Delete", "Wallets:Create", "Wallets:Read", "Wallets:Update", "Wallets:Tags:Add", "Wallets:Tags:Delete", "Wallets:Transactions:Create", "Wallets:Transactions:Read", "Wallets:Transfers:Create", "Wallets:Transfers:Read", "Wallets:Offers:Read", "Wallets:Offers:Settle", "Webhooks:Create", "Webhooks:Read", "Webhooks:Update", "Webhooks:Delete", "Webhooks:Ping", "Webhooks:Events:Read", "Billing:Read", "Billing:Write", "Analytics:Read"], Literal["Alias:Create", "Alias:Delete", "Alias:Read", "Alias:Update", "Wallets:GenerateSignature", "Wallets:BroadcastTransaction", "Auth:Action:Sign", "Auth:Apps:Read", "Auth:Apps:Create", "Auth:Apps:Update", "Auth:Creds:Create", "Auth:Creds:Read", "Auth:Creds:Update", "Auth:Creds:Code:Create", "Auth:Types:Application", "Auth:Types:Employee", "Auth:Types:EndUser", "Auth:Types:Pat", "Auth:Types:ServiceAccount", "Internal:Auth:Types:Staff", "Auth:Users:Delegate", "PermissionAssignments:Create", "PermissionAssignments:Read", "PermissionAssignments:Revoke"]]]
+
+class CreatePermissionResponse(TypedDict, total=False):
+    """createPermission response."""
+
+    id: str
+    name: str
+    operations: list[str]
+    status: Literal["Active"]
+    is_immutable: bool
+    is_archived: bool
+    date_created: str
+    date_updated: str
+
+class GetPermissionResponse(TypedDict, total=False):
+    """getPermission response."""
+
+    id: str
+    name: str
+    operations: list[str]
+    status: Literal["Active"]
+    is_immutable: bool
+    is_archived: bool
+    date_created: str
+    date_updated: str
+    pending_change_request: NotRequired[TypedDict]
+
+class UpdatePermissionRequest(TypedDict, total=False):
+    """updatePermission request body."""
+
+    name: NotRequired[str]
+    operations: NotRequired[list[Union[Literal["Registry:Addresses:Create", "Registry:Addresses:Delete", "Registry:Addresses:Read", "Registry:Addresses:Update", "Registry:ContractSchemas:Create", "Registry:ContractSchemas:Delete", "Registry:ContractSchemas:Read", "Auth:Logs:Read", "Auth:Users:Create", "Auth:Users:Read", "Auth:Users:Update", "Auth:Users:Activate", "Auth:Users:Deactivate", "Auth:Users:Delete", "Auth:ServiceAccounts:Create", "Auth:ServiceAccounts:Read", "Auth:ServiceAccounts:Update", "Auth:ServiceAccounts:Deactivate", "Auth:ServiceAccounts:Activate", "Auth:ServiceAccounts:Delete", "Auth:Pats:Create", "Auth:Register:Delegated", "Auth:Login:Delegated", "Auth:Recover:Delegated", "Agreements:Acceptance:Create", "Agreements:Acceptance:Read", "Events:Read", "Exchanges:Create", "Exchanges:Read", "Exchanges:Delete", "Exchanges:Deposits:Create", "Exchanges:Withdrawals:Create", "FeeSponsors:Create", "FeeSponsors:Read", "FeeSponsors:Update", "FeeSponsors:Delete", "FeeSponsors:Use", "Orgs:Read", "Orgs:Update", "Orgs:Settings:Read", "Orgs:Settings:Update", "Permissions:Archive", "Permissions:Create", "Permissions:Read", "Permissions:Update", "Permissions:Assign", "Permissions:Revoke", "Permissions:Assignments:Read", "Policies:Archive", "Policies:Create", "Policies:Read", "Policies:Update", "Policies:Approvals:Read", "Policies:Approvals:Approve", "Signers:ListSigners", "Stakes:Create", "Stakes:Read", "Stakes:Update", "Swaps:Create", "Swaps:Read", "Allocations:Create", "Allocations:Update", "Allocations:Read", "Keys:Create", "Keys:Delete", "Keys:Read", "Keys:Update", "Keys:Reuse", "Keys:Delegate", "Keys:Import", "Keys:Export", "Keys:Derive", "Keys:ChildKeys:Create", "Keys:Signatures:Create", "Keys:Signatures:Read", "KeyStores:Read", "Networks:CantonValidators:Create", "Networks:CantonValidators:Read", "Networks:CantonValidators:Update", "Networks:CantonValidators:Delete", "Wallets:Create", "Wallets:Read", "Wallets:Update", "Wallets:Tags:Add", "Wallets:Tags:Delete", "Wallets:Transactions:Create", "Wallets:Transactions:Read", "Wallets:Transfers:Create", "Wallets:Transfers:Read", "Wallets:Offers:Read", "Wallets:Offers:Settle", "Webhooks:Create", "Webhooks:Read", "Webhooks:Update", "Webhooks:Delete", "Webhooks:Ping", "Webhooks:Events:Read", "Billing:Read", "Billing:Write", "Analytics:Read"], Literal["Alias:Create", "Alias:Delete", "Alias:Read", "Alias:Update", "Wallets:GenerateSignature", "Wallets:BroadcastTransaction", "Auth:Action:Sign", "Auth:Apps:Read", "Auth:Apps:Create", "Auth:Apps:Update", "Auth:Creds:Create", "Auth:Creds:Read", "Auth:Creds:Update", "Auth:Creds:Code:Create", "Auth:Types:Application", "Auth:Types:Employee", "Auth:Types:EndUser", "Auth:Types:Pat", "Auth:Types:ServiceAccount", "Internal:Auth:Types:Staff", "Auth:Users:Delegate", "PermissionAssignments:Create", "PermissionAssignments:Read", "PermissionAssignments:Revoke"]]]]
+
+class UpdatePermissionResponse(TypedDict, total=False):
+    """updatePermission response."""
+
+    id: str
+    name: str
+    operations: list[str]
+    status: Literal["Active"]
+    is_immutable: bool
+    is_archived: bool
+    date_created: str
+    date_updated: str

dfns_sdk/generated/policies/__init__.py

@@ -0,0 +1,7 @@
+"""Policies domain module."""
+
+from .client import PoliciesClient
+from .delegated_client import DelegatedPoliciesClient
+from . import types
+
+__all__ = ["PoliciesClient", "DelegatedPoliciesClient", "types"]

dfns_sdk/generated/policies/client.py

@@ -0,0 +1,187 @@
+"""Client for the policies domain."""
+
+from typing import Any, Literal, Optional, TypedDict, Union
+
+from ..._internal import HttpClient
+from . import types as T
+
+
+class PoliciesClient:
+    """Client for policies operations."""
+
+    def __init__(self, http_client: HttpClient):
+        self._http = http_client
+
+    def get_policy(self, policy_id: str) -> T.GetPolicyResponse:
+        """
+        Get Policy.
+
+        Retrieve information about a specific policy.
+
+        Args:
+        policy_id: Path parameter.
+
+        Returns:
+            T.GetPolicyResponse: The API response.
+        """
+        return self._http.request(
+            method="GET",
+            path="/v2/policies/{policyId}",
+            path_params={"policyId": policy_id},
+            query_params=None,
+            body=None,
+            requires_signature=False,
+        )
+
+    def update_policy(self, policy_id: str, body: dict[str, Any]) -> TypedDict:
+        """
+        Update Policy.
+
+        Update an existing policy.
+
+        Args:
+        policy_id: Path parameter.
+        body: Request body.
+
+        Returns:
+            TypedDict: The API response.
+        """
+        return self._http.request(
+            method="PUT",
+            path="/v2/policies/{policyId}",
+            path_params={"policyId": policy_id},
+            query_params=None,
+            body=body,
+            requires_signature=True,
+        )
+
+    def delete_policy(self, policy_id: str) -> TypedDict:
+        """
+        Delete Policy.
+
+        Delete an existing policy.
+
+        Args:
+        policy_id: Path parameter.
+
+        Returns:
+            TypedDict: The API response.
+        """
+        return self._http.request(
+            method="DELETE",
+            path="/v2/policies/{policyId}",
+            path_params={"policyId": policy_id},
+            query_params=None,
+            body=None,
+            requires_signature=True,
+        )
+
+    def create_approval_decision(self, approval_id: str, body: T.CreateApprovalDecisionRequest) -> T.CreateApprovalDecisionResponse:
+        """
+        Create Approval Decision.
+
+        Approve or Reject an Approval request.
+
+        Args:
+        approval_id: Path parameter.
+        body: Request body.
+
+        Returns:
+            T.CreateApprovalDecisionResponse: The API response.
+        """
+        return self._http.request(
+            method="POST",
+            path="/v2/policy-approvals/{approvalId}/decisions",
+            path_params={"approvalId": approval_id},
+            query_params=None,
+            body=body,
+            requires_signature=True,
+        )
+
+    def list_policies(self, query: Optional[T.ListPoliciesQuery] = None) -> T.ListPoliciesResponse:
+        """
+        List Policies.
+
+        Retrieve the list of policies on your organization.
+
+        Args:
+        query: Query parameters.
+
+        Returns:
+            T.ListPoliciesResponse: The API response.
+        """
+        return self._http.request(
+            method="GET",
+            path="/v2/policies",
+            path_params={},
+            query_params=query,
+            body=None,
+            requires_signature=False,
+        )
+
+    def create_policy(self, body: dict[str, Any]) -> TypedDict:
+        """
+        Create Policy.
+
+        Setup a new Policy for your organization.
+  
+  Every policy requires a rule to be specified. Upon policy evaluation, the configuration specified in the rule will be used to determine whether the policy should trigger or not for a given activity.
+  
+  By exposing controls on permissions and policies, Dfns enables the specification of an admin quorum to approve sensitive actions which could change system governance.   Note Dfns does not expose a separate "admin quorum" concept like some of our competitors - we simply enable this use case as another configuration of the policy engine itself.   This was chosen to promote flexibility as not every customer will have the same requirements around creating and managing admin quorums.
+
+        Args:
+        body: Request body.
+
+        Returns:
+            TypedDict: The API response.
+        """
+        return self._http.request(
+            method="POST",
+            path="/v2/policies",
+            path_params={},
+            query_params=None,
+            body=body,
+            requires_signature=True,
+        )
+
+    def get_approval(self, approval_id: str) -> T.GetApprovalResponse:
+        """
+        Get Approval.
+
+        Retrieve information about a specific approval request.
+
+        Args:
+        approval_id: Path parameter.
+
+        Returns:
+            T.GetApprovalResponse: The API response.
+        """
+        return self._http.request(
+            method="GET",
+            path="/v2/policy-approvals/{approvalId}",
+            path_params={"approvalId": approval_id},
+            query_params=None,
+            body=None,
+            requires_signature=False,
+        )
+
+    def list_approvals(self, query: Optional[T.ListApprovalsQuery] = None) -> T.ListApprovalsResponse:
+        """
+        List Approvals.
+
+        Retrieve the list of pending approval requests.
+
+        Args:
+        query: Query parameters.
+
+        Returns:
+            T.ListApprovalsResponse: The API response.
+        """
+        return self._http.request(
+            method="GET",
+            path="/v2/policy-approvals",
+            path_params={},
+            query_params=query,
+            body=None,
+            requires_signature=False,
+        )

dfns_sdk/generated/policies/delegated_client.py

@@ -0,0 +1,311 @@
+"""Delegated client for the policies domain."""
+
+import json
+from typing import Any, Literal, Optional, TypedDict, Union
+
+from ..._internal import HttpClient
+from ...base_auth_api import (
+    BaseAuthApi,
+    SignUserActionChallengeRequest,
+    UserActionChallengeResponse,
+)
+from . import types as T
+
+
+class DelegatedPoliciesClient:
+    """
+    Delegated client for policies operations.
+
+    This client separates user action signing into _init() and _complete() method pairs,
+    allowing external systems to handle the signing process.
+    """
+
+    def __init__(self, http_client: HttpClient):
+        self._http = http_client
+
+    def get_policy(self, policy_id: str) -> T.GetPolicyResponse:
+        """
+        Get Policy.
+
+        Retrieve information about a specific policy.
+
+        Args:
+        policy_id: Path parameter.
+
+        Returns:
+            T.GetPolicyResponse: The API response.
+        """
+        return self._http.request(
+            method="GET",
+            path="/v2/policies/{policyId}",
+            path_params={"policyId": policy_id},
+            query_params=None,
+            body=None,
+            requires_signature=False,
+        )
+
+    def update_policy_init(self, policy_id: str, body: dict[str, Any]) -> UserActionChallengeResponse:
+        """
+        Initialize Update Policy.
+
+        Creates a user action challenge for external signing.
+
+        Args:
+        policy_id: Path parameter.
+        body: Request body.
+
+        Returns:
+            UserActionChallengeResponse: The challenge to sign externally.
+        """
+        path = "/v2/policies/{policyId}"
+        path = path.replace("{policyId}", str(policy_id))
+        payload = json.dumps(body, separators=(",", ":")) if body else ""
+
+        return BaseAuthApi.create_user_action_challenge(
+            self._http,
+            user_action_http_method="PUT",
+            user_action_http_path=path,
+            user_action_payload=payload,
+        )
+
+    def update_policy_complete(self, policy_id: str, body: dict[str, Any], signed_challenge: SignUserActionChallengeRequest) -> TypedDict:
+        """
+        Complete Update Policy.
+
+        Submits the signed challenge and makes the API request.
+
+        Args:
+        policy_id: Path parameter.
+        body: Request body.
+        signed_challenge: The signed challenge from external signing.
+
+        Returns:
+            TypedDict: The API response.
+        """
+        user_action_result = BaseAuthApi.sign_user_action_challenge(
+            self._http, signed_challenge
+        )
+        user_action_token = user_action_result["userAction"]
+
+        return self._http.request_with_user_action(
+            method="PUT",
+            path="/v2/policies/{policyId}",
+            path_params={"policyId": policy_id},
+            query_params=None,
+            body=body,
+            user_action=user_action_token,
+        )
+
+    def delete_policy_init(self, policy_id: str) -> UserActionChallengeResponse:
+        """
+        Initialize Delete Policy.
+
+        Creates a user action challenge for external signing.
+
+        Args:
+        policy_id: Path parameter.
+
+        Returns:
+            UserActionChallengeResponse: The challenge to sign externally.
+        """
+        path = "/v2/policies/{policyId}"
+        path = path.replace("{policyId}", str(policy_id))
+        payload = ""
+
+        return BaseAuthApi.create_user_action_challenge(
+            self._http,
+            user_action_http_method="DELETE",
+            user_action_http_path=path,
+            user_action_payload=payload,
+        )
+
+    def delete_policy_complete(self, policy_id: str, signed_challenge: SignUserActionChallengeRequest) -> TypedDict:
+        """
+        Complete Delete Policy.
+
+        Submits the signed challenge and makes the API request.
+
+        Args:
+        policy_id: Path parameter.
+        signed_challenge: The signed challenge from external signing.
+
+        Returns:
+            TypedDict: The API response.
+        """
+        user_action_result = BaseAuthApi.sign_user_action_challenge(
+            self._http, signed_challenge
+        )
+        user_action_token = user_action_result["userAction"]
+
+        return self._http.request_with_user_action(
+            method="DELETE",
+            path="/v2/policies/{policyId}",
+            path_params={"policyId": policy_id},
+            query_params=None,
+            body=None,
+            user_action=user_action_token,
+        )
+
+    def create_approval_decision_init(self, approval_id: str, body: T.CreateApprovalDecisionRequest) -> UserActionChallengeResponse:
+        """
+        Initialize Create Approval Decision.
+
+        Creates a user action challenge for external signing.
+
+        Args:
+        approval_id: Path parameter.
+        body: Request body.
+
+        Returns:
+            UserActionChallengeResponse: The challenge to sign externally.
+        """
+        path = "/v2/policy-approvals/{approvalId}/decisions"
+        path = path.replace("{approvalId}", str(approval_id))
+        payload = json.dumps(body, separators=(",", ":")) if body else ""
+
+        return BaseAuthApi.create_user_action_challenge(
+            self._http,
+            user_action_http_method="POST",
+            user_action_http_path=path,
+            user_action_payload=payload,
+        )
+
+    def create_approval_decision_complete(self, approval_id: str, body: T.CreateApprovalDecisionRequest, signed_challenge: SignUserActionChallengeRequest) -> T.CreateApprovalDecisionResponse:
+        """
+        Complete Create Approval Decision.
+
+        Submits the signed challenge and makes the API request.
+
+        Args:
+        approval_id: Path parameter.
+        body: Request body.
+        signed_challenge: The signed challenge from external signing.
+
+        Returns:
+            T.CreateApprovalDecisionResponse: The API response.
+        """
+        user_action_result = BaseAuthApi.sign_user_action_challenge(
+            self._http, signed_challenge
+        )
+        user_action_token = user_action_result["userAction"]
+
+        return self._http.request_with_user_action(
+            method="POST",
+            path="/v2/policy-approvals/{approvalId}/decisions",
+            path_params={"approvalId": approval_id},
+            query_params=None,
+            body=body,
+            user_action=user_action_token,
+        )
+
+    def list_policies(self, query: Optional[T.ListPoliciesQuery] = None) -> T.ListPoliciesResponse:
+        """
+        List Policies.
+
+        Retrieve the list of policies on your organization.
+
+        Args:
+        query: Query parameters.
+
+        Returns:
+            T.ListPoliciesResponse: The API response.
+        """
+        return self._http.request(
+            method="GET",
+            path="/v2/policies",
+            path_params={},
+            query_params=query,
+            body=None,
+            requires_signature=False,
+        )
+
+    def create_policy_init(self, body: dict[str, Any]) -> UserActionChallengeResponse:
+        """
+        Initialize Create Policy.
+
+        Creates a user action challenge for external signing.
+
+        Args:
+        body: Request body.
+
+        Returns:
+            UserActionChallengeResponse: The challenge to sign externally.
+        """
+        path = "/v2/policies"
+        payload = json.dumps(body, separators=(",", ":")) if body else ""
+
+        return BaseAuthApi.create_user_action_challenge(
+            self._http,
+            user_action_http_method="POST",
+            user_action_http_path=path,
+            user_action_payload=payload,
+        )
+
+    def create_policy_complete(self, body: dict[str, Any], signed_challenge: SignUserActionChallengeRequest) -> TypedDict:
+        """
+        Complete Create Policy.
+
+        Submits the signed challenge and makes the API request.
+
+        Args:
+        body: Request body.
+        signed_challenge: The signed challenge from external signing.
+
+        Returns:
+            TypedDict: The API response.
+        """
+        user_action_result = BaseAuthApi.sign_user_action_challenge(
+            self._http, signed_challenge
+        )
+        user_action_token = user_action_result["userAction"]
+
+        return self._http.request_with_user_action(
+            method="POST",
+            path="/v2/policies",
+            path_params={},
+            query_params=None,
+            body=body,
+            user_action=user_action_token,
+        )
+
+    def get_approval(self, approval_id: str) -> T.GetApprovalResponse:
+        """
+        Get Approval.
+
+        Retrieve information about a specific approval request.
+
+        Args:
+        approval_id: Path parameter.
+
+        Returns:
+            T.GetApprovalResponse: The API response.
+        """
+        return self._http.request(
+            method="GET",
+            path="/v2/policy-approvals/{approvalId}",
+            path_params={"approvalId": approval_id},
+            query_params=None,
+            body=None,
+            requires_signature=False,
+        )
+
+    def list_approvals(self, query: Optional[T.ListApprovalsQuery] = None) -> T.ListApprovalsResponse:
+        """
+        List Approvals.
+
+        Retrieve the list of pending approval requests.
+
+        Args:
+        query: Query parameters.
+
+        Returns:
+            T.ListApprovalsResponse: The API response.
+        """
+        return self._http.request(
+            method="GET",
+            path="/v2/policy-approvals",
+            path_params={},
+            query_params=query,
+            body=None,
+            requires_signature=False,
+        )

dfns_sdk/generated/policies/types.py

@@ -0,0 +1,70 @@
+"""Types for the policies domain."""
+
+from typing import Any, Literal, NotRequired, Optional, TypedDict, Union
+
+class GetPolicyResponse(TypedDict, total=False):
+    """getPolicy response."""
+
+    pending_change_request: NotRequired[TypedDict]
+
+class CreateApprovalDecisionRequest(TypedDict, total=False):
+    """createApprovalDecision request body."""
+
+    value: Literal["Approved", "Denied"]
+    reason: NotRequired[str]
+
+class CreateApprovalDecisionResponse(TypedDict, total=False):
+    """createApprovalDecision response."""
+
+    id: str
+    initiator_id: str
+    activity: TypedDict
+    status: Literal["Pending", "Approved", "Denied", "Expired"]
+    expiration_date: NotRequired[str]
+    date_created: NotRequired[str]
+    date_updated: str
+    date_resolved: NotRequired[str]
+    policy_evaluations: list[TypedDict]
+    decisions: list[TypedDict]
+
+class ListPoliciesResponse(TypedDict, total=False):
+    """listPolicies response."""
+
+    items: list[TypedDict]
+    next_page_token: NotRequired[str]
+
+class ListPoliciesQuery(TypedDict, total=False):
+    """listPolicies query parameters."""
+
+    limit: NotRequired[str]
+    pagination_token: NotRequired[str]
+    status: NotRequired[Literal["Active", "Archived"]]
+
+class GetApprovalResponse(TypedDict, total=False):
+    """getApproval response."""
+
+    id: str
+    initiator_id: str
+    activity: TypedDict
+    status: Literal["Pending", "Approved", "Denied", "Expired"]
+    expiration_date: NotRequired[str]
+    date_created: NotRequired[str]
+    date_updated: str
+    date_resolved: NotRequired[str]
+    policy_evaluations: list[TypedDict]
+    decisions: list[TypedDict]
+
+class ListApprovalsResponse(TypedDict, total=False):
+    """listApprovals response."""
+
+    items: list[TypedDict]
+    next_page_token: NotRequired[str]
+
+class ListApprovalsQuery(TypedDict, total=False):
+    """listApprovals query parameters."""
+
+    limit: NotRequired[str]
+    pagination_token: NotRequired[str]
+    status: NotRequired[Literal["Pending", "Approved", "Denied", "Expired"]]
+    initiator_id: NotRequired[str]
+    approver_id: NotRequired[str]