import * as API from "@distilled.cloud/core/api"; import * as C from "@distilled.cloud/core/category"; // AUTO-GENERATED by scripts/generate.ts from .generated-specs (specs/openapi-spec). Do not edit. import * as S from "@distilled.cloud/core/schema-lite"; import * as __L from "@distilled.cloud/core/schema-lite"; import type * as Redacted from "effect/Redacted"; import { UnknownWorkosError } from "../errors.ts"; import { WorkosProtocol, type WorkosOpError, type WorkosOpContext } from "../protocol.ts"; import * as Retry from "../retry.ts"; import * as T from "../traits.ts"; // Schema table, filled on first reach (see __S at the end). const __s: any[] = []; export type { WorkosOpError, WorkosOpContext }; export class BadRequest extends /*@__PURE__*/ T.applyErrorMatchers( /*@__PURE__*/ S.TaggedError()("BadRequest", { code: S.Number, message: S.String, }).pipe(C.withBadRequestError), [{ status: 400 }], ) {} export class Conflict extends /*@__PURE__*/ T.applyErrorMatchers( /*@__PURE__*/ S.TaggedError()("Conflict", { code: S.Number, message: S.String, }).pipe(C.withConflictError), [{ status: 409 }], ) {} export class Forbidden extends /*@__PURE__*/ T.applyErrorMatchers( /*@__PURE__*/ S.TaggedError()("Forbidden", { code: S.Number, message: S.String, }).pipe(C.withAuthError), [{ status: 403 }], ) {} export class NotFound extends /*@__PURE__*/ T.applyErrorMatchers( /*@__PURE__*/ S.TaggedError()("NotFound", { code: S.Number, message: S.String, }).pipe(C.withBadRequestError), [{ status: 404 }], ) {} export class UnprocessableEntity extends /*@__PURE__*/ T.applyErrorMatchers( /*@__PURE__*/ S.TaggedError()("UnprocessableEntity", { code: S.Number, message: S.String, }).pipe(C.withBadRequestError), [{ status: 422 }], ) {} export interface AcceptUserlandUserInvitesControllerRequest { /** The unique ID of the invitation. */ id: string; } /** The state of the invitation. */ export type AcceptUserlandUserInvitesControllerResponseState = | "pending" | "accepted" | "expired" | "revoked"; export interface AcceptUserlandUserInvitesControllerResponse { /** Distinguishes the invitation object. */ object: string; /** The unique ID of the invitation. */ id: string; /** The email address of the recipient. */ email: string; /** The state of the invitation. */ state: AcceptUserlandUserInvitesControllerResponseState; /** The timestamp when the invitation was accepted, or null if not yet accepted. */ accepted_at: string | null; /** The timestamp when the invitation was revoked, or null if not revoked. */ revoked_at: string | null; /** The timestamp when the invitation expires. */ expires_at: string; /** The ID of the [organization](/reference/organization) that the recipient will join. */ organization_id: string | null; /** The ID of the user who invited the recipient, if provided. */ inviter_user_id: string | null; /** The ID of the user who accepted the invitation, once accepted. */ accepted_user_id: string | null; /** Slug of the role the invitee will be assigned on acceptance. Reflects the current role on the invitee's organization membership. null when the invitation has no associated organization. */ role_slug: string | null; /** An ISO 8601 timestamp. */ created_at: string; /** An ISO 8601 timestamp. */ updated_at: string; /** The token used to accept the invitation. */ token: string; /** The URL where the recipient can accept the invitation. */ accept_invitation_url: string; } export interface AddAuthorizationOrganizationRolePermissionsControllerPermissionRequest { /** The ID of the organization. */ organizationId: string; /** The slug of the role. */ slug: string; } /** Whether the role is scoped to the environment or an organization (custom role). */ export type AddAuthorizationOrganizationRolePermissionsControllerPermissionResponseType = | "EnvironmentRole" | "OrganizationRole"; /** The permission slugs assigned to the role. */ export type AddAuthorizationOrganizationRolePermissionsControllerPermissionResponsePermissionsList = Array; export interface AddAuthorizationOrganizationRolePermissionsControllerPermissionResponse { /** A unique slug for the role. */ slug: string; /** Distinguishes the role object. */ object: string; /** Unique identifier of the role. */ id: string; /** A descriptive name for the role. */ name: string; /** An optional description of the role. */ description: string | null; /** Whether the role is scoped to the environment or an organization (custom role). */ type: AddAuthorizationOrganizationRolePermissionsControllerPermissionResponseType; /** The slug of the resource type the role is scoped to. */ resource_type_slug: string; /** The permission slugs assigned to the role. */ permissions: AddAuthorizationOrganizationRolePermissionsControllerPermissionResponsePermissionsList; /** An ISO 8601 timestamp. */ created_at: string; /** An ISO 8601 timestamp. */ updated_at: string; } export interface AddAuthorizationRolePermissionsControllerPermissionRequest { /** The slug of the environment role. */ slug: string; } /** Whether the role is scoped to the environment or an organization (custom role). */ export type AddAuthorizationRolePermissionsControllerPermissionResponseType = | "EnvironmentRole" | "OrganizationRole"; /** The permission slugs assigned to the role. */ export type AddAuthorizationRolePermissionsControllerPermissionResponsePermissionsList = Array; export interface AddAuthorizationRolePermissionsControllerPermissionResponse { /** A unique slug for the role. */ slug: string; /** Distinguishes the role object. */ object: string; /** Unique identifier of the role. */ id: string; /** A descriptive name for the role. */ name: string; /** An optional description of the role. */ description: string | null; /** Whether the role is scoped to the environment or an organization (custom role). */ type: AddAuthorizationRolePermissionsControllerPermissionResponseType; /** The slug of the resource type the role is scoped to. */ resource_type_slug: string; /** The permission slugs assigned to the role. */ permissions: AddAuthorizationRolePermissionsControllerPermissionResponsePermissionsList; /** An ISO 8601 timestamp. */ created_at: string; /** An ISO 8601 timestamp. */ updated_at: string; } export interface AddGroupMembershipsControllerMemberRequest { /** Unique identifier of the Organization. */ organizationId: string; /** Unique identifier of the Group. */ groupId: string; /** The ID of the Organization Membership to add to the group. */ organization_membership_id?: string; } export interface Group { /** The Group object. */ object?: string; /** The unique ID of the Group. */ id?: string; /** The ID of the Organization the Group belongs to. */ organization_id?: string; /** The name of the Group. */ name?: string; /** An optional description of the Group. */ description?: string | null; /** An ISO 8601 timestamp. */ created_at?: string; /** An ISO 8601 timestamp. */ updated_at?: string; } /** The user to attach to the claim attempt, identified by email and external ID. */ export interface AgentAdminControllerLinkClaimAttemptToExternalUserRequestUser { /** The email address of the user. */ email: string; /** The external ID of the user. */ external_id: string; } export interface AgentAdminControllerLinkClaimAttemptToExternalUserRequest { /** The operation to perform on the claim attempt. Currently only `link_external_user` is supported. */ type: string; /** The token identifying the claim attempt. */ claim_attempt_token: string; /** The user to attach to the claim attempt, identified by email and external ID. */ user: AgentAdminControllerLinkClaimAttemptToExternalUserRequestUser; /** The organization to place the agent in. Required when the user belongs to more than one organization. */ organization_id?: string; } /** Current status of the agent registration. */ export type ClaimViewResponseStatus = "unverified" | "verified" | "expired" | "revoked"; export interface ClaimViewResponseOrganizationsItem { /** The organization ID. */ id: string; /** The organization name. */ name: string; } /** Organizations the user belongs to, offered as placement choices. */ export type ClaimViewResponseOrganizationsList = Array; export interface ClaimViewResponse { /** The agent registration ID. */ id: string; /** Current status of the agent registration. */ status: ClaimViewResponseStatus; /** The user code the agent needs to complete the claim. */ user_code: string; /** Organizations the user belongs to, offered as placement choices. */ organizations: ClaimViewResponseOrganizationsList; } export interface AgentBlueprintsTokenControllerMintTokenRequestBodyCase0 { /** How the session is minted: `user_delegated`, `autonomous`, `agent_delegated`, or `refresh`. */ type: string; /** The access token of the user delegating to the agent. The token identifies the user and organization; effective permissions are resolved server-side. */ user_access_token: string; /** Optional caller-supplied context, echoed as an object with a `text` field in the `intent` claim of the minted access token. */ intent?: string; } export interface AgentBlueprintsTokenControllerMintTokenRequestBodyCase1 { /** How the session is minted: `user_delegated`, `autonomous`, `agent_delegated`, or `refresh`. */ type: string; /** The organization the agent acts within when operating as itself. */ organization_id: string; /** Optional caller-supplied context, echoed as an object with a `text` field in the `intent` claim of the minted access token. */ intent?: string; } export interface AgentBlueprintsTokenControllerMintTokenRequestBodyCase2 { /** How the session is minted: `user_delegated`, `autonomous`, `agent_delegated`, or `refresh`. */ type: string; /** The agent's own access token to exchange for a new session on the same instance. The token must have been minted from this blueprint; permissions are re-derived from current authority. */ agent_access_token: string; /** Optional caller-supplied context, echoed as an object with a `text` field in the `intent` claim of the minted access token. */ intent?: string; } export interface AgentBlueprintsTokenControllerMintTokenRequestBodyCase3 { /** How the session is minted: `user_delegated`, `autonomous`, `agent_delegated`, or `refresh`. */ type: string; /** The refresh token issued with a previous agent access token. Refresh tokens are single-use: each refresh rotates it. */ refresh_token: string | Redacted.Redacted; /** Optional caller-supplied context, echoed as an object with a `text` field in the `intent` claim of the minted access token. */ intent?: string; } /** How to mint the agent session, discriminated by `type`. `intent` is optional on every variant. */ export type AgentBlueprintsTokenControllerMintTokenRequestBody = | AgentBlueprintsTokenControllerMintTokenRequestBodyCase0 | AgentBlueprintsTokenControllerMintTokenRequestBodyCase1 | AgentBlueprintsTokenControllerMintTokenRequestBodyCase2 | AgentBlueprintsTokenControllerMintTokenRequestBodyCase3; export interface AgentBlueprintsTokenControllerMintTokenRequest { /** The unique ID of the agent blueprint. */ agent_blueprint_id: string; body: AgentBlueprintsTokenControllerMintTokenRequestBody; } /** The effective permission slugs carried by the token. */ export type AgentTokenPermissionsList = Array; export interface AgentToken { /** The agent access token (a JWT) carrying the effective permissions. */ access_token: string | Redacted.Redacted; /** Always `Bearer`. */ token_type: string; /** Number of seconds until the access token expires. */ expires_in: number; /** Single-use refresh token for rotating the access token within the session lifetime. */ refresh_token: string | Redacted.Redacted; /** The agent instance the session belongs to. */ agent_instance_id: string; /** Whether this mint created the agent instance: `true` only for the mint that inserted the row, `false` when an existing instance was reused (including when a concurrent mint inserted it first). */ new_instance: boolean; /** The backing agent instance session. */ agent_instance_session_id: string; /** The effective permission slugs carried by the token. */ permissions: AgentTokenPermissionsList; } export interface ApiKeysControllerExpireRequest { /** The unique ID of the API key. */ id: string; /** When the API key should expire. If omitted or in the past, the key expires immediately. Use null to clear a scheduled future expiration. */ expires_at?: string | null; } export interface ApiKeyOwnerCase0 { /** The type of the API Key owner. */ type: string; /** Unique identifier of the API Key owner. */ id: string; } export interface ApiKeyOwnerCase1 { /** The type of the API Key owner. */ type: string; /** Unique identifier of the API Key owner. */ id: string; /** Unique identifier of the organization the API Key can access. */ organization_id: string; } /** The entity that owns the API Key. */ export type ApiKeyOwner = ApiKeyOwnerCase0 | ApiKeyOwnerCase1; /** The permission slugs assigned to the API Key. */ export type ApiKeyPermissionsList = Array; export interface ApiKey { /** Distinguishes the API Key object. */ object?: string; /** Unique identifier of the API Key. */ id?: string; /** The entity that owns the API Key. */ owner?: ApiKeyOwner; /** A descriptive name for the API Key. */ name?: string; /** An obfuscated representation of the API Key value. */ obfuscated_value?: string; /** Timestamp of when the API Key was last used. */ last_used_at?: string | null; /** Timestamp when the API Key expires. Null means the key does not expire. */ expires_at?: string | null; /** The permission slugs assigned to the API Key. */ permissions?: ApiKeyPermissionsList; /** An ISO 8601 timestamp. */ created_at?: string; /** An ISO 8601 timestamp. */ updated_at?: string; } export interface ApplicationsControllerFindRequest { /** The application ID or client ID of the Connect Application. */ id: string; } /** The scopes available for this application. */ export type ApplicationsControllerFindResponseScopesList = Array; export interface ApplicationsControllerFindResponseRedirectUrisItem { /** The redirect URI for the application. */ uri: string; /** Whether this is the default redirect URI. */ default: boolean; } /** The redirect URIs configured for this application. */ export type ApplicationsControllerFindResponseRedirectUrisList = Array; export interface ApplicationsControllerFindResponse { /** Distinguishes the connect application object. */ object: string; /** The unique ID of the connect application. */ id: string; /** The client ID of the connect application. */ client_id: string; /** A description of the connect application. */ description: string | null; /** The name of the connect application. */ name: string; /** The scopes available for this application. */ scopes: ApplicationsControllerFindResponseScopesList; /** An ISO 8601 timestamp. */ created_at: string; /** An ISO 8601 timestamp. */ updated_at: string; /** The type of the application. */ application_type?: string; /** The redirect URIs configured for this application. */ redirect_uris?: ApplicationsControllerFindResponseRedirectUrisList; /** Whether the application uses PKCE for authorization. */ uses_pkce?: boolean; /** Whether the application is a first-party application. */ is_first_party?: boolean; /** Whether the application was dynamically registered. */ was_dynamically_registered?: boolean; /** The ID of the organization the application belongs to. */ organization_id?: string; } export interface ApproveWaitlistEntriesControllerRequest { /** The unique ID of the waitlist entry. */ id: string; } /** The state of the waitlist entry. */ export type ApproveWaitlistEntriesControllerResponseState = "pending" | "approved" | "denied"; /** Additional fields submitted when the user joined the waitlist. Values are user-provided -- treat them as untrusted input when rendering or exporting. */ export type ApproveWaitlistEntriesControllerResponseAdditionalFieldsMap = { [key: string]: string | undefined; }; export interface ApproveWaitlistEntriesControllerResponse { /** The unique ID of the waitlist entry. */ id: string; /** The email address of the user on the waitlist. */ email: string; /** The state of the waitlist entry. */ state: ApproveWaitlistEntriesControllerResponseState; /** The timestamp when the entry was approved, or null if not yet approved. */ approved_at: string | null; /** Additional fields submitted when the user joined the waitlist. Values are user-provided -- treat them as untrusted input when rendering or exporting. */ additional_fields?: ApproveWaitlistEntriesControllerResponseAdditionalFieldsMap; /** The unique ID of the waitlist the entry belongs to. */ waitlist_id?: string | null; /** An ISO 8601 timestamp. */ created_at: string; /** An ISO 8601 timestamp. */ updated_at: string; /** Distinguishes the Waitlist Entry object. */ object: string; } export interface AssignAuthorizationRoleAssignmentsControllerRoleRequest { /** The ID of the organization membership. */ organization_membership_id: string; /** The slug of the role to assign. */ role_slug: string; /** The ID of the resource. Mutually exclusive with `resource_external_id` and `resource_type_slug`. */ resource_id?: string; /** The external ID of the resource. Required with `resource_type_slug`. Mutually exclusive with `resource_id`. */ resource_external_id?: string; /** The resource type slug. Required with `resource_external_id`. Mutually exclusive with `resource_id`. */ resource_type_slug?: string; } /** The primary role assigned to the user. */ export interface SlimRole { /** The slug of the assigned role. */ slug?: string; } /** The resource the role is assigned on. */ export interface UserRoleAssignmentResource { /** The unique ID of the Resource. */ id: string; /** An identifier you provide to reference the resource in your system. */ external_id: string; /** The slug of the resource type this resource belongs to. */ resource_type_slug: string; } /** Whether the role was assigned directly or derived from a group. */ export type UserRoleAssignmentSourceType = "direct" | "group"; export interface UserRoleAssignmentSourceGroup { /** The unique ID of the Group the role was derived from. */ id: string; /** The name of the Group the role was derived from. */ name: string; } /** The origin of the role assignment. */ export interface UserRoleAssignmentSource { /** Whether the role was assigned directly or derived from a group. */ type: UserRoleAssignmentSourceType; /** The ID of the group role assignment the role was derived from, or null if direct. */ group_role_assignment_id: string | null; /** The group the role was derived from, or null if direct. */ group: UserRoleAssignmentSourceGroup | null; } export interface UserRoleAssignment { /** Distinguishes the role assignment object. */ object: string; /** Unique identifier of the role assignment. */ id: string; /** The ID of the organization membership the role is assigned to. */ organization_membership_id: string; /** The role included in the assignment. */ role: SlimRole; /** The resource the role is assigned on. */ resource: UserRoleAssignmentResource; /** The origin of the role assignment. */ source: UserRoleAssignmentSource; /** An ISO 8601 timestamp. */ created_at: string; /** An ISO 8601 timestamp. */ updated_at: string; } /** List of actions to filter against. */ export type AuditLogExportsControllerExportsRequestActionsList = Array; /** Deprecated. Use `actor_names` instead. */ export type AuditLogExportsControllerExportsRequestActorsList = Array; /** List of actor names to filter against. */ export type AuditLogExportsControllerExportsRequestActorNamesList = Array; /** List of actor IDs to filter against. */ export type AuditLogExportsControllerExportsRequestActorIdsList = Array; /** List of target types to filter against. */ export type AuditLogExportsControllerExportsRequestTargetsList = Array; export interface AuditLogExportsControllerExportsRequest { /** The unique ID of the Organization. */ organization_id?: string; /** ISO-8601 value for start of the export range. */ range_start?: string; /** ISO-8601 value for end of the export range. */ range_end?: string; /** List of actions to filter against. */ actions?: AuditLogExportsControllerExportsRequestActionsList; /** Deprecated. Use `actor_names` instead. */ actors?: AuditLogExportsControllerExportsRequestActorsList; /** List of actor names to filter against. */ actor_names?: AuditLogExportsControllerExportsRequestActorNamesList; /** List of actor IDs to filter against. */ actor_ids?: AuditLogExportsControllerExportsRequestActorIdsList; /** List of target types to filter against. */ targets?: AuditLogExportsControllerExportsRequestTargetsList; } /** The state of the export. Possible values: pending, ready, error, expired. */ export type AuditLogExportJsonState = "pending" | "ready" | "error" | "expired"; export interface AuditLogExportJson { /** Distinguishes the Audit Log Export object. */ object?: string; /** The unique ID of the Audit Log Export. */ id?: string; /** The state of the export. Possible values: pending, ready, error, expired. */ state?: AuditLogExportJsonState; /** A URL to the CSV file. Only defined when the Audit Log Export is ready. */ url?: string | null; /** An ISO 8601 timestamp. */ created_at?: string; /** An ISO 8601 timestamp. */ updated_at?: string; } export interface AuditLogsRetentionControllerAuditLogsRetentionRequest { /** Unique identifier of the Organization. */ id: string; } export interface AuditLogsRetentionJson { /** The number of days Audit Log events will be retained before being permanently deleted. Valid values are 30 through 330 in 30-day increments and 365 through 3650 in 365-day increments. */ retention_period_in_days?: number | null; } export type PaginationOrder = "normal" | "desc" | "asc"; export interface AuditLogValidatorVersionsControllerSchemasRequest { /** The name of the Audit Log action. */ actionName: string; /** An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. */ before?: string; /** An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. */ after?: string; /** Upper limit on the number of objects to return, between `1` and `100`. */ limit?: number; /** Order the results by the creation time. Defaults to `normal`. */ order?: PaginationOrder | (string & {}); } /** Pagination cursors for navigating between pages of results. */ export interface AuditLogValidatorVersionsControllerSchemasResponseListMetadata { /** An object ID that defines your place in the list. When the ID is not present, you are at the start of the list. */ before: string | null; /** An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. */ after: string | null; } /** The JSON Schema definition for actor metadata. */ export type AuditLogSchemaJsonActorMetadataMap = { [key: string]: unknown | undefined }; /** The metadata schema for the actor. */ export interface AuditLogSchemaJsonActor { /** The JSON Schema definition for actor metadata. */ metadata: AuditLogSchemaJsonActorMetadataMap; } /** Additional data associated with the event or entity. */ export type AuditLogSchemaJsonTargetsItemMetadataMap = { [key: string]: unknown | undefined }; export interface AuditLogSchemaJsonTargetsItem { /** The type of the target resource. */ type: string; /** Additional data associated with the event or entity. */ metadata?: AuditLogSchemaJsonTargetsItemMetadataMap; } /** The list of targets for the schema. */ export type AuditLogSchemaJsonTargetsList = Array; /** Additional data associated with the event or entity. */ export type AuditLogSchemaJsonMetadataMap = { [key: string]: unknown | undefined }; export interface AuditLogSchemaJson { /** Distinguishes the Audit Log Schema object. */ object?: string; /** The version of the schema. */ version?: number; /** The metadata schema for the actor. */ actor?: AuditLogSchemaJsonActor; /** The list of targets for the schema. */ targets?: AuditLogSchemaJsonTargetsList; /** Additional data associated with the event or entity. */ metadata?: AuditLogSchemaJsonMetadataMap; /** The timestamp when the Audit Log Schema was created. */ created_at?: string; } /** The list of records for the current page. */ export type AuditLogValidatorVersionsControllerSchemasResponseDataList = Array; export interface AuditLogValidatorVersionsControllerSchemasResponse { /** Indicates this is a list response. */ object?: string; /** Pagination cursors for navigating between pages of results. */ list_metadata?: AuditLogValidatorVersionsControllerSchemasResponseListMetadata; /** The list of records for the current page. */ data?: AuditLogValidatorVersionsControllerSchemasResponseDataList; } export interface AuthenticationFactorsControllerChallengeRequest { /** The unique ID of the Authentication Factor to be challenged. */ id: string; /** A custom template for the SMS message. Use the {{code}} placeholder to include the verification code. Must not contain URLs or domain names. */ sms_template?: string; } export interface AuthenticationChallenge { /** Distinguishes the authentication challenge object. */ object?: string; /** The unique ID of the authentication challenge. */ id?: string; /** The timestamp when the challenge will expire. Does not apply to TOTP factors. */ expires_at?: string; /** The one-time code for the challenge. */ code?: string; /** The unique ID of the authentication factor the challenge belongs to. */ authentication_factor_id?: string; /** An ISO 8601 timestamp. */ created_at?: string; /** An ISO 8601 timestamp. */ updated_at?: string; } export interface AuthorizationPermissionsControllerFindRequest { /** A unique key to reference the permission. Must be lowercase and contain only letters, numbers, hyphens, underscores, colons, periods, and asterisks. */ slug: string; } export interface AuthorizationPermission { /** Distinguishes the Permission object. */ object?: string; /** Unique identifier of the Permission. */ id?: string; /** A unique key to reference the permission. Must be lowercase and contain only letters, numbers, hyphens, underscores, colons, periods, and asterisks. */ slug?: string; /** A descriptive name for the Permission. */ name?: string; /** An optional description of the Permission. */ description?: string | null; /** Whether the permission is a system permission. System permissions are managed by WorkOS and cannot be deleted. */ system?: boolean; /** The slug of the resource type associated with the permission. */ resource_type_slug?: string; /** An ISO 8601 timestamp. */ created_at?: string; /** An ISO 8601 timestamp. */ updated_at?: string; } export interface AuthorizationResourcesControllerFindByIdRequest { /** The ID of the authorization resource. */ resource_id: string; } export interface AuthorizationResource { /** Distinguishes the Resource object. */ object?: string; /** A human-readable name for the Resource. */ name?: string; /** An optional description of the Resource. */ description?: string | null; /** The ID of the organization that owns the resource. */ organization_id?: string; /** The ID of the parent resource, if this resource is nested. */ parent_resource_id?: string | null; /** The unique ID of the Resource. */ id?: string; /** An identifier you provide to reference the resource in your system. */ external_id?: string; /** The slug of the resource type this resource belongs to. */ resource_type_slug?: string; /** An ISO 8601 timestamp. */ created_at?: string; /** An ISO 8601 timestamp. */ updated_at?: string; } export type AuthorizeSsoControllerRequestProviderScopesList = Array; export type AuthorizeSsoControllerRequestProviderQueryParamsMap = { [key: string]: string | undefined; }; export type AuthorizeSsoControllerRequestProvider = | "AppleOAuth" | "BitbucketOAuth" | "GitHubOAuth" | "GitLabOAuth" | "GoogleOAuth" | "IntuitOAuth" | "LinkedInOAuth" | "MicrosoftOAuth" | "SalesforceOAuth" | "SlackOAuth" | "VercelMarketplaceOAuth" | "VercelOAuth" | "XeroOAuth"; export interface AuthorizeSsoControllerRequest { /** Additional scopes to request from the identity provider. Applicable when using OAuth or OpenID Connect connections. */ provider_scopes?: AuthorizeSsoControllerRequestProviderScopesList; /** Key/value pairs of query parameters to pass to the OAuth provider. Only applicable when using OAuth connections. */ provider_query_params?: AuthorizeSsoControllerRequestProviderQueryParamsMap; /** The unique identifier of the WorkOS environment client. */ client_id: string; /** Deprecated. Use `connection` or `organization` instead. Used to initiate SSO for a connection by domain. The domain must be associated with a connection in your WorkOS environment. */ domain?: string; /** Used to initiate OAuth authentication with various providers. */ provider?: AuthorizeSsoControllerRequestProvider | (string & {}); /** Where to redirect the user after they complete the authentication process. You must use one of the redirect URIs configured via the [Redirects](https://dashboard.workos.com/redirects) page on the dashboard. */ redirect_uri: string; /** The only valid option for the response type parameter is `"code"`. The `"code"` parameter value initiates an [authorization code grant type](https://tools.ietf.org/html/rfc6749#section-4.1). This grant type allows you to exchange an authorization code for an access token during the redirect that takes place after a user has authenticated with an identity provider. */ response_type: string; /** An optional parameter that can be used to encode arbitrary information to help restore application state between redirects. If included, the redirect URI received from WorkOS will contain the exact `state` that was passed. */ state?: string; /** Used to initiate SSO for a connection. The value should be a WorkOS connection ID. You can persist the WorkOS connection ID with application user or team identifiers. WorkOS will use the connection indicated by the connection parameter to direct the user to the corresponding IdP for authentication. */ connection?: string; /** Used to initiate SSO for an organization. The value should be a WorkOS organization ID. You can persist the WorkOS organization ID with application user or team identifiers. WorkOS will use the organization ID to determine the appropriate connection and the IdP to direct the user to for authentication. */ organization?: string; /** Can be used to pre-fill the domain field when initiating authentication with Microsoft OAuth or with a Google SAML connection type. */ domain_hint?: string; /** Can be used to pre-fill the username/email address field of the IdP sign-in page for the user, if you know their username ahead of time. Currently supported for OAuth, OpenID Connect, Okta, Entra ID, and custom SAML connections. */ login_hint?: string; /** A random string generated by the client that is used to mitigate replay attacks. */ nonce?: string; /** If set to `login`, forces re-authentication at the identity provider. For supported SAML providers this sets `ForceAuthn="true"` in the SAML request; providers that don't support it are unaffected. */ prompt?: string; } export interface SsoAuthorizeUrlResponse { /** An OAuth 2.0 authorization URL. */ url?: string; } export type AuthorizeUserlandSsoControllerRequestProviderQueryParamsMap = { [key: string]: string | undefined; }; export type AuthorizeUserlandSsoControllerRequestProviderScopesList = Array; export type AuthorizeUserlandSsoControllerRequestScreenHint = "sign-up" | "sign-in"; export type AuthorizeUserlandSsoControllerRequestProvider = | "authkit" | "AppleOAuth" | "BitbucketOAuth" | "GitHubOAuth" | "GitLabOAuth" | "GoogleOAuth" | "IntuitOAuth" | "LinkedInOAuth" | "MicrosoftOAuth" | "SalesforceOAuth" | "SlackOAuth" | "VercelMarketplaceOAuth" | "VercelOAuth" | "XeroOAuth"; export interface AuthorizeUserlandSsoControllerRequest { /** The only valid PKCE code challenge method is `"S256"`. Required when specifying a `code_challenge`. */ code_challenge_method?: string; /** Code challenge derived from the code verifier used for the PKCE flow. */ code_challenge?: string; /** A domain hint for SSO connection lookup. */ domain_hint?: string; /** The ID of an SSO connection to use for authentication. */ connection_id?: string; /** Key/value pairs of query parameters to pass to the OAuth provider. */ provider_query_params?: AuthorizeUserlandSsoControllerRequestProviderQueryParamsMap; /** Additional OAuth scopes to request from the identity provider. */ provider_scopes?: AuthorizeUserlandSsoControllerRequestProviderScopesList; /** A token representing a user invitation to redeem during authentication. */ invitation_token?: string; /** Maximum allowable elapsed time, in seconds, since the user last actively authenticated. If the last authentication is older than this value, the user is prompted to re-authenticate; a value of `0` forces re-authentication. Only supported when the provider is `authkit`. */ max_age?: number; /** Used to specify which screen to display when the provider is `authkit`. */ screen_hint?: AuthorizeUserlandSsoControllerRequestScreenHint | (string & {}); /** A hint to the authorization server about the login identifier the user might use. */ login_hint?: string; /** The OAuth provider to authenticate with (e.g., GoogleOAuth, MicrosoftOAuth, GitHubOAuth). */ provider?: AuthorizeUserlandSsoControllerRequestProvider | (string & {}); /** Controls the authentication flow behavior for the user. */ prompt?: string; /** An opaque value used to maintain state between the request and the callback. */ state?: string; /** The ID of the organization to authenticate the user against. */ organization_id?: string; /** The response type of the application. */ response_type: string; /** The callback URI where the authorization code will be sent after authentication. */ redirect_uri: string; /** The unique identifier of the WorkOS environment client. */ client_id: string; } export interface AuthorizeUserlandSsoControllerResponse {} export interface CheckAuthorizationControllerRequest { /** The ID of the organization membership to check. */ organization_membership_id: string; /** The slug of the permission to check. */ permission_slug: string; /** The ID of the resource. Mutually exclusive with `resource_external_id` and `resource_type_slug`. */ resource_id?: string; /** The external ID of the resource. Required with `resource_type_slug`. Mutually exclusive with `resource_id`. */ resource_external_id?: string; /** The slug of the resource type. Required with `resource_external_id`. Mutually exclusive with `resource_id`. */ resource_type_slug?: string; } export interface AuthorizationCheck { /** Whether the organization membership has the specified permission on the resource. */ authorized?: boolean; } export interface ClientApiTokenControllerIssueClientApiTokenRequest { /** The ID of the organization to scope the Client API token to. */ organization_id: string; /** The ID of the user to issue the Client API token for. */ user_id: string; } export interface ClientApiTokenResponse { /** The Client API token. */ token: string; } /** A set of key-value pairs to attach to the user. */ export type UserObjectMetadataMap = { [key: string]: string | undefined }; export interface UserObject { /** Your application's user identifier, which will be stored as an [`external_id`](/authkit/metadata/external-identifiers). Used for upserting and deduplication. */ id?: string; /** The user's email address. */ email?: string; /** The user's first name. */ first_name?: string; /** The user's last name. */ last_name?: string; /** The user's full name. */ name?: string; /** A set of key-value pairs to attach to the user. */ metadata?: UserObjectMetadataMap; } export interface UserConsentOptionChoicesItem { /** The value of this choice. */ value?: string; /** A human-readable label for this choice. */ label?: string; } /** The available choices for this consent option. */ export type UserConsentOptionChoicesList = Array; export interface UserConsentOption { /** The claim name for this consent option. */ claim?: string; /** The type of consent option. */ type?: string; /** A human-readable label for this consent option. */ label?: string; /** The available choices for this consent option. */ choices?: UserConsentOptionChoicesList; } /** Array of [User Consent Options](/reference/workos-connect/standalone/user-consent-options) to store with the session. */ export type CompleteExternalAuthControllerLoginRequestUserConsentOptionsList = Array; export interface CompleteExternalAuthControllerLoginRequest { /** Identifier provided when AuthKit redirected to your login page. */ external_auth_id?: string; /** The user to create or update in AuthKit. */ user?: UserObject; /** Array of [User Consent Options](/reference/workos-connect/standalone/user-consent-options) to store with the session. */ user_consent_options?: CompleteExternalAuthControllerLoginRequestUserConsentOptionsList; } export interface ExternalAuthCompleteResponse { /** URI to redirect the user back to AuthKit to complete the OAuth flow. */ redirect_uri?: string; } export interface ConfirmUserlandUsersControllerEmailChangeRequest { /** The unique ID of the user. */ id: string; /** The one-time code used to confirm the email change. */ code?: string; } /** Object containing metadata key/value pairs associated with the user. */ export type ConfirmUserlandUsersControllerEmailChangeResponseUserMetadataMap = { [key: string]: string | undefined; }; /** The user object. */ export interface ConfirmUserlandUsersControllerEmailChangeResponseUser { /** Distinguishes the user object. */ object: string; /** The unique ID of the user. */ id: string; /** The first name of the user. */ first_name: string | null; /** The last name of the user. */ last_name: string | null; /** The user's full name. */ name?: string | null; /** A URL reference to an image representing the user. */ profile_picture_url: string | null; /** The email address of the user. */ email: string; /** Whether the user's email has been verified. */ email_verified: boolean; /** The external ID of the user. */ external_id: string | null; /** Object containing metadata key/value pairs associated with the user. */ metadata?: ConfirmUserlandUsersControllerEmailChangeResponseUserMetadataMap; /** The timestamp when the user last signed in. */ last_sign_in_at: string | null; /** The user's preferred locale. */ locale?: string | null; /** An ISO 8601 timestamp. */ created_at: string; /** An ISO 8601 timestamp. */ updated_at: string; } export interface ConfirmUserlandUsersControllerEmailChangeResponse { /** Distinguishes the email change confirmation object. */ object: string; /** The user object. */ user: ConfirmUserlandUsersControllerEmailChangeResponseUser; } export interface ConnectionsControllerFindRequest { /** Unique identifier for the Connection. */ id: string; } /** The type of the SSO Connection used to authenticate the user. The Connection type may be used to dynamically generate authorization URLs. */ export type ConnectionConnectionType = | "Pending" | "ADFSSAML" | "AdpOidc" | "AppleOAuth" | "Auth0Migration" | "Auth0SAML" | "AzureSAML" | "BitbucketOAuth" | "CasSAML" | "ClassLinkSAML" | "CleverOIDC" | "CloudflareSAML" | "CyberArkSAML" | "DuoSAML" | "EntraIdOIDC" | "GenericOIDC" | "GenericSAML" | "GitHubOAuth" | "GitLabOAuth" | "GoogleOAuth" | "GoogleOIDC" | "GoogleSAML" | "IntuitOAuth" | "JumpCloudSAML" | "KeycloakSAML" | "LastPassSAML" | "LinkedInOAuth" | "LoginGovOidc" | "MagicLink" | "MicrosoftOAuth" | "MiniOrangeSAML" | "NetIqSAML" | "OktaOIDC" | "OktaSAML" | "OneLoginSAML" | "OracleSAML" | "PingFederateSAML" | "PingOneSAML" | "RipplingSAML" | "SalesforceSAML" | "ShibbolethGenericSAML" | "ShibbolethSAML" | "SimpleSamlPhpSAML" | "SalesforceOAuth" | "SlackOAuth" | "TestIdp" | "VercelMarketplaceOAuth" | "VercelOAuth" | "VMwareSAML" | "XeroOAuth"; /** Indicates whether a Connection is able to authenticate users. */ export type ConnectionState = | "requires_type" | "draft" | "active" | "validating" | "inactive" | "deleting"; /** Deprecated. Use `state` instead. */ export type ConnectionStatus = "linked" | "unlinked"; export interface ConnectionDomainsItem { /** Unique identifier for the Connection Domain. */ id: string; /** Distinguishes the Connection Domain object. */ object: string; /** The domain value. */ domain: string; } /** List of Organization Domains. */ export type ConnectionDomainsList = Array; export interface Connection { /** Distinguishes the Connection object. */ object?: string; /** Unique identifier for the Connection. */ id?: string; /** Unique identifier for the Organization in which the Connection resides. */ organization_id?: string; /** The type of the SSO Connection used to authenticate the user. The Connection type may be used to dynamically generate authorization URLs. */ connection_type?: ConnectionConnectionType; /** A human-readable name for the Connection. This will most commonly be the organization's name. */ name?: string; /** Indicates whether a Connection is able to authenticate users. */ state?: ConnectionState; /** Deprecated. Use `state` instead. */ status?: ConnectionStatus; /** List of Organization Domains. */ domains?: ConnectionDomainsList; /** An ISO 8601 timestamp. */ created_at?: string; /** An ISO 8601 timestamp. */ updated_at?: string; } /** Permission slugs forming the ceiling on what sessions minted from this blueprint may do. Each slug must exist in the environment. */ export type CreateAgentBlueprintsControllerRequestPermissionsList = Array; /** Role slugs whose members may mint user-delegated sessions from this blueprint. An empty list allows any member. */ export type CreateAgentBlueprintsControllerRequestInvocableByRoleSlugsList = Array; /** Organizations in which sessions may be minted from this blueprint, enforced on user-delegated, autonomous, and agent-delegated mints. An empty list allows any organization in the environment. */ export type CreateAgentBlueprintsControllerRequestInvocableByOrganizationIdsList = Array; /** Who may mint sessions from this blueprint. */ export interface CreateAgentBlueprintsControllerRequestInvocableBy { /** Role slugs whose members may mint user-delegated sessions from this blueprint. An empty list allows any member. */ role_slugs?: CreateAgentBlueprintsControllerRequestInvocableByRoleSlugsList; /** Organizations in which sessions may be minted from this blueprint, enforced on user-delegated, autonomous, and agent-delegated mints. An empty list allows any organization in the environment. */ organization_ids?: CreateAgentBlueprintsControllerRequestInvocableByOrganizationIdsList; } export type CreateAgentBlueprintsControllerRequestInvocableAsInstanceTypesItem = | "delegated" | "autonomous"; /** Instance types that may be minted from this blueprint: `delegated` (a user-delegated session, minted with a user access token) and/or `autonomous` (a session acting as the agent itself, minted with an agent registration credential). Agent-delegated chaining and refreshes are checked against the type of the presenting instance. Defaults to both. */ export type CreateAgentBlueprintsControllerRequestInvocableAsInstanceTypesList = Array< CreateAgentBlueprintsControllerRequestInvocableAsInstanceTypesItem | (string & {}) >; /** How sessions may be minted from this blueprint. */ export interface CreateAgentBlueprintsControllerRequestInvocableAs { /** Instance types that may be minted from this blueprint: `delegated` (a user-delegated session, minted with a user access token) and/or `autonomous` (a session acting as the agent itself, minted with an agent registration credential). Agent-delegated chaining and refreshes are checked against the type of the presenting instance. Defaults to both. */ instance_types?: CreateAgentBlueprintsControllerRequestInvocableAsInstanceTypesList; } /** Token and session lifetimes for sessions minted from this blueprint. */ export interface CreateAgentBlueprintsControllerRequestSessionSettings { /** Maximum lifetime of a session in seconds; refreshes never extend a session past this. At most 31,536,000 (365 days). */ max_age_seconds: number; /** Lifetime of each minted access token in seconds. At most 3,600 (1 hour). */ access_token_ttl_seconds: number; /** Lifetime of each rotated refresh token in seconds. At most 5,184,000 (60 days). */ refresh_token_ttl_seconds: number; } export interface CreateAgentBlueprintsControllerRequest { /** Human-readable name of the agent blueprint. */ name: string; /** Human-readable description of the agent blueprint. */ description?: string; /** Permission slugs forming the ceiling on what sessions minted from this blueprint may do. Each slug must exist in the environment. */ permissions?: CreateAgentBlueprintsControllerRequestPermissionsList; /** Who may mint sessions from this blueprint. */ invocable_by?: CreateAgentBlueprintsControllerRequestInvocableBy; /** How sessions may be minted from this blueprint. */ invocable_as?: CreateAgentBlueprintsControllerRequestInvocableAs; /** Token and session lifetimes for sessions minted from this blueprint. */ session_settings?: CreateAgentBlueprintsControllerRequestSessionSettings; } /** Permission slugs forming the ceiling on what sessions minted from this blueprint may do. */ export type AgentBlueprintPermissionsList = Array; /** Role slugs whose members may mint user-delegated sessions from this blueprint. */ export type AgentBlueprintInvocableByRoleSlugsList = Array; /** Organizations in which sessions may be minted from this blueprint, enforced on user-delegated, autonomous, and agent-delegated mints. */ export type AgentBlueprintInvocableByOrganizationIdsList = Array; /** Who may mint sessions from this blueprint. */ export interface AgentBlueprintInvocableBy { /** Role slugs whose members may mint user-delegated sessions from this blueprint. */ role_slugs: AgentBlueprintInvocableByRoleSlugsList; /** Organizations in which sessions may be minted from this blueprint, enforced on user-delegated, autonomous, and agent-delegated mints. */ organization_ids: AgentBlueprintInvocableByOrganizationIdsList; } export type AgentBlueprintInvocableAsInstanceTypesItem = "delegated" | "autonomous"; /** Instance types that may be minted from this blueprint: `delegated` and/or `autonomous`. */ export type AgentBlueprintInvocableAsInstanceTypesList = Array; /** How sessions may be minted from this blueprint. */ export interface AgentBlueprintInvocableAs { /** Instance types that may be minted from this blueprint: `delegated` and/or `autonomous`. */ instance_types: AgentBlueprintInvocableAsInstanceTypesList; } /** Token and session lifetimes for sessions minted from this blueprint. */ export interface AgentBlueprintSessionSettings { /** Maximum lifetime of a session in seconds; refreshes never extend a session past this. */ max_age_seconds: number; /** Lifetime of each minted access token in seconds. */ access_token_ttl_seconds: number; /** Lifetime of each rotated refresh token in seconds. */ refresh_token_ttl_seconds: number; } export interface AgentBlueprint { /** Distinguishes the agent blueprint object. */ object: string; /** Unique identifier of the agent blueprint. */ id: string; /** Human-readable name of the agent blueprint. */ name: string; /** Human-readable description of the agent blueprint. */ description: string | null; /** Permission slugs forming the ceiling on what sessions minted from this blueprint may do. */ permissions: AgentBlueprintPermissionsList; /** Who may mint sessions from this blueprint. */ invocable_by: AgentBlueprintInvocableBy; /** How sessions may be minted from this blueprint. */ invocable_as: AgentBlueprintInvocableAs; /** Token and session lifetimes for sessions minted from this blueprint. */ session_settings: AgentBlueprintSessionSettings; /** Timestamp when the agent blueprint was created. */ created_at: string; /** Timestamp when the agent blueprint was last updated. */ updated_at: string; } export interface CreateApplicationCredentialsControllerRequest { /** The application ID or client ID of the Connect Application. */ id: string; } export interface NewConnectApplicationSecret { /** Distinguishes the connect application secret object. */ object?: string; /** The unique ID of the client secret. */ id?: string; /** A hint showing the last few characters of the secret value. */ secret_hint?: string; /** The timestamp when the client secret was last used, or null if never used. */ last_used_at?: string | null; /** An ISO 8601 timestamp. */ created_at?: string; /** An ISO 8601 timestamp. */ updated_at?: string; /** The plaintext secret value. Only returned at creation time and cannot be retrieved later. */ secret?: string | Redacted.Redacted; } /** The OAuth scopes granted to the application. */ export type CreateOAuthApplicationDtoScopesList = Array; export interface RedirectUriDto { /** The redirect URI. */ uri?: string; /** Whether this is the default redirect URI. */ default?: boolean | null; } /** Redirect URIs for the application. */ export type CreateOAuthApplicationDtoRedirectUrisList = Array; export interface CreateOAuthApplicationDto { /** The name of the application. */ name?: string; /** The type of application to create. */ application_type?: string; /** A description for the application. */ description?: string | null; /** The OAuth scopes granted to the application. */ scopes?: CreateOAuthApplicationDtoScopesList | null; /** Redirect URIs for the application. */ redirect_uris?: CreateOAuthApplicationDtoRedirectUrisList | null; /** Whether the application uses PKCE (Proof Key for Code Exchange). */ uses_pkce?: boolean | null; /** Whether this is a first-party application. Third-party applications require an organization_id. */ is_first_party?: boolean; /** The organization ID this application belongs to. Required when is_first_party is false. */ organization_id?: string | null; } /** The OAuth scopes granted to the application. */ export type CreateM2MApplicationDtoScopesList = Array; export interface CreateM2MApplicationDto { /** The name of the application. */ name?: string; /** The type of application to create. */ application_type?: string; /** A description for the application. */ description?: string | null; /** The OAuth scopes granted to the application. */ scopes?: CreateM2MApplicationDtoScopesList | null; /** The organization ID this application belongs to. */ organization_id?: string; } export type CreateApplicationsControllerRequestBody = | CreateOAuthApplicationDto | CreateM2MApplicationDto; export interface CreateApplicationsControllerRequest { body: CreateApplicationsControllerRequestBody; } /** The scopes available for this application. */ export type CreateApplicationsControllerResponseScopesList = Array; export type CreateApplicationsControllerResponseRedirectUrisItem = ApplicationsControllerFindResponseRedirectUrisItem; /** The redirect URIs configured for this application. */ export type CreateApplicationsControllerResponseRedirectUrisList = Array; export interface CreateApplicationsControllerResponse { /** Distinguishes the connect application object. */ object: string; /** The unique ID of the connect application. */ id: string; /** The client ID of the connect application. */ client_id: string; /** A description of the connect application. */ description: string | null; /** The name of the connect application. */ name: string; /** The scopes available for this application. */ scopes: CreateApplicationsControllerResponseScopesList; /** An ISO 8601 timestamp. */ created_at: string; /** An ISO 8601 timestamp. */ updated_at: string; /** The type of the application. */ application_type?: string; /** The redirect URIs configured for this application. */ redirect_uris?: CreateApplicationsControllerResponseRedirectUrisList; /** Whether the application uses PKCE for authorization. */ uses_pkce?: boolean; /** Whether the application is a first-party application. */ is_first_party?: boolean; /** Whether the application was dynamically registered. */ was_dynamically_registered?: boolean; /** The ID of the organization the application belongs to. */ organization_id?: string; } export interface AuditLogEventActorDto { /** Actor identifier. */ id?: string; /** Actor type. */ type?: string; /** Optional actor name. */ name?: string; /** Additional data associated with the event or entity. */ metadata?: unknown; } export interface AuditLogEventTargetDto { /** Target identifier. */ id?: string; /** Target type. */ type?: string; /** Optional target name. */ name?: string; /** Additional data associated with the event or entity. */ metadata?: unknown; } /** The resources affected by the action. */ export type AuditLogEventDtoTargetsList = Array; export interface AuditLogEventContextDto { /** IP Address or some other geolocation identifier. */ location?: string; /** User agent string. */ user_agent?: string; } export interface AuditLogEventDto { /** Identifier of what happened. */ action?: string; /** ISO-8601 value of when the action occurred. */ occurred_at?: string; /** The entity that performed the action. */ actor?: AuditLogEventActorDto; /** The resources affected by the action. */ targets?: AuditLogEventDtoTargetsList; /** Additional context about where and how the action occurred. */ context?: AuditLogEventContextDto; /** Additional data associated with the event or entity. */ metadata?: unknown; /** What schema version the event is associated with. */ version?: number; } export interface CreateAuditLogEventsControllerRequest { /** The unique ID of the Organization. */ organization_id?: string; /** The audit log event to create. */ event?: AuditLogEventDto; } export interface AuditLogEventCreateResponse { /** Whether the Audit Log event was created successfully. */ success?: boolean; } export interface AuditLogSchemaActorDto { /** JSON schema for actor metadata. */ metadata?: unknown; } export interface AuditLogSchemaTargetDto { /** The type of the target resource. */ type?: string; /** Optional JSON schema for target metadata. */ metadata?: unknown; } /** The list of targets for the schema. */ export type CreateAuditLogValidatorVersionsControllerRequestTargetsList = Array; export interface CreateAuditLogValidatorVersionsControllerRequest { /** The name of the Audit Log action. */ actionName: string; /** The metadata schema for the actor. */ actor?: AuditLogSchemaActorDto; /** The list of targets for the schema. */ targets?: CreateAuditLogValidatorVersionsControllerRequestTargetsList; /** Optional JSON schema for event metadata. */ metadata?: unknown; } /** The type of factor to enroll. */ export type CreateAuthenticationFactorsControllerRequestType = "generic_otp" | "sms" | "totp"; export interface CreateAuthenticationFactorsControllerRequest { /** The type of factor to enroll. */ type: CreateAuthenticationFactorsControllerRequestType | (string & {}); /** Required when type is 'sms'. */ phone_number?: string; /** Required when type is 'totp'. */ totp_issuer?: string; /** Required when type is 'totp'. */ totp_user?: string; /** The ID of the user to associate the factor with. */ user_id?: string; } /** The type of the factor to enroll. */ export type AuthenticationFactorEnrolledType = "generic_otp" | "sms" | "totp" | "webauthn"; /** SMS-based authentication factor details. */ export interface AuthenticationFactorEnrolledSms { /** The user's phone number for SMS-based authentication. */ phone_number: string; } /** TOTP-based authentication factor details. Includes enrollment secrets only available at creation time. */ export interface AuthenticationFactorEnrolledTotp { /** Your application or company name displayed in the user's authenticator app. Defaults to your WorkOS team name. */ issuer: string; /** The user's account name displayed in their authenticator app. Defaults to the user's email. */ user: string; /** TOTP secret that can be manually entered into some authenticator apps in place of scanning a QR code. */ secret: string | Redacted.Redacted; /** Base64 encoded image containing scannable QR code. */ qr_code: string; /** The `otpauth` URI that is encoded by the provided `qr_code`. */ uri: string; } export interface AuthenticationFactorEnrolled { /** Distinguishes the authentication factor object. */ object?: string; /** The unique ID of the factor. */ id?: string; /** The type of the factor to enroll. */ type?: AuthenticationFactorEnrolledType; /** The ID of the [user](/reference/authkit/user). */ user_id?: string; /** SMS-based authentication factor details. */ sms?: AuthenticationFactorEnrolledSms; /** TOTP-based authentication factor details. Includes enrollment secrets only available at creation time. */ totp?: AuthenticationFactorEnrolledTotp; /** An ISO 8601 timestamp. */ created_at?: string; /** An ISO 8601 timestamp. */ updated_at?: string; } export interface CreateAuthkitOauthResourcesControllerRequest { /** The resource URI. May be a wildcard pattern with a single `*`, either in the leftmost hostname label or as the final path segment, where enabled for the environment. */ uri: string; /** Whether the resource being created becomes the environment default, clearing any previous default. Applies at creation only -- this API has no update endpoint yet, so changing the default on an existing resource is done from the dashboard. A wildcard pattern cannot be the default. */ default?: boolean; } export interface AuthkitOauthResource { /** The object type. */ object: string; /** The ID of the MCP resource indicator. */ id: string; /** The resource URI. */ uri: string; /** Whether this is the default MCP resource indicator for the environment. */ default: boolean; /** The timestamp when the MCP resource indicator was created. */ created_at: string; /** The timestamp when the MCP resource indicator was last updated. */ updated_at: string; } export interface CreateAuthorizationGroupRoleAssignmentsControllerRequest { /** The ID of the group. */ group_id: string; /** The slug of the role to assign to the group. */ role_slug: string; /** The ID of the resource. Omit along with the external-id fields to target the organization itself. */ resource_id?: string; /** The external ID of the resource. */ resource_external_id?: string; /** The resource type slug. */ resource_type_slug?: string; } /** The resource the role is assigned on. */ export type GroupRoleAssignmentResource = UserRoleAssignmentResource; export interface GroupRoleAssignment { /** Distinguishes the group role assignment object. */ object: string; /** Unique identifier of the group role assignment. */ id: string; /** The ID of the group the role is assigned to. */ group_id: string; /** The role included in the assignment. */ role: SlimRole; /** The resource the role is assigned on. */ resource: UserRoleAssignmentResource; /** An ISO 8601 timestamp. */ created_at: string; /** An ISO 8601 timestamp. */ updated_at: string; } export interface CreateAuthorizationOrganizationRolesControllerRequest { /** The ID of the organization. */ organizationId: string; /** A unique identifier for the role within the organization. When provided, must begin with 'org-' and contain only lowercase letters, numbers, hyphens, and underscores. When omitted, a slug is auto-generated from the role name and a random suffix. */ slug?: string; /** A descriptive name for the role. */ name?: string; /** An optional description of the role's purpose. */ description?: string | null; /** The slug of the resource type the role is scoped to. */ resource_type_slug?: string; } /** Whether the role is scoped to the environment or an organization (custom role). */ export type CreateAuthorizationOrganizationRolesControllerResponseType = | "EnvironmentRole" | "OrganizationRole"; /** The permission slugs assigned to the role. */ export type CreateAuthorizationOrganizationRolesControllerResponsePermissionsList = Array; export interface CreateAuthorizationOrganizationRolesControllerResponse { /** A unique slug for the role. */ slug: string; /** Distinguishes the role object. */ object: string; /** Unique identifier of the role. */ id: string; /** A descriptive name for the role. */ name: string; /** An optional description of the role. */ description: string | null; /** Whether the role is scoped to the environment or an organization (custom role). */ type: CreateAuthorizationOrganizationRolesControllerResponseType; /** The slug of the resource type the role is scoped to. */ resource_type_slug: string; /** The permission slugs assigned to the role. */ permissions: CreateAuthorizationOrganizationRolesControllerResponsePermissionsList; /** An ISO 8601 timestamp. */ created_at: string; /** An ISO 8601 timestamp. */ updated_at: string; } export interface CreateAuthorizationPermissionsControllerRequest { /** A unique key to reference the permission. Must be lowercase and contain only letters, numbers, hyphens, underscores, colons, periods, and asterisks. */ slug?: string; /** A descriptive name for the Permission. */ name?: string; /** An optional description of the Permission. */ description?: string | null; /** The slug of the resource type this permission is scoped to. */ resource_type_slug?: string; } export interface CreateAuthorizationPermissionsControllerResponse { /** Distinguishes the Permission object. */ object: string; /** Unique identifier of the Permission. */ id: string; /** A unique key to reference the permission. Must be lowercase and contain only letters, numbers, hyphens, underscores, colons, periods, and asterisks. */ slug: string; /** A descriptive name for the Permission. */ name: string; /** An optional description of the Permission. */ description: string | null; /** Whether the permission is a system permission. System permissions are managed by WorkOS and cannot be deleted. */ system: boolean; /** The slug of the resource type associated with the permission. */ resource_type_slug: string; /** An ISO 8601 timestamp. */ created_at: string; /** An ISO 8601 timestamp. */ updated_at: string; } export interface CreateAuthorizationResourcesControllerRequest { /** An external identifier for the resource. */ external_id: string; /** A display name for the resource. */ name: string; /** An optional description of the resource. */ description?: string | null; /** The slug of the resource type. */ resource_type_slug: string; /** The ID of the organization this resource belongs to. */ organization_id: string; /** The ID of the parent resource. Mutually exclusive with `parent_resource_external_id` and `parent_resource_type_slug`. */ parent_resource_id?: string | null; /** The external ID of the parent resource. Required with `parent_resource_type_slug`. Mutually exclusive with `parent_resource_id`. */ parent_resource_external_id?: string; /** The resource type slug of the parent resource. Required with `parent_resource_external_id`. Mutually exclusive with `parent_resource_id`. */ parent_resource_type_slug?: string; } export interface CreateAuthorizationResourcesControllerResponse { /** Distinguishes the Resource object. */ object: string; /** A human-readable name for the Resource. */ name: string; /** An optional description of the Resource. */ description: string | null; /** The ID of the organization that owns the resource. */ organization_id: string; /** The ID of the parent resource, if this resource is nested. */ parent_resource_id: string | null; /** The unique ID of the Resource. */ id: string; /** An identifier you provide to reference the resource in your system. */ external_id: string; /** The slug of the resource type this resource belongs to. */ resource_type_slug: string; /** An ISO 8601 timestamp. */ created_at: string; /** An ISO 8601 timestamp. */ updated_at: string; } export interface CreateAuthorizationRolesControllerRequest { /** A unique slug for the role. */ slug?: string; /** A descriptive name for the role. */ name?: string; /** An optional description of the role. */ description?: string | null; /** The slug of the resource type the role is scoped to. */ resource_type_slug?: string; } /** Whether the role is scoped to the environment or an organization (custom role). */ export type CreateAuthorizationRolesControllerResponseType = "EnvironmentRole" | "OrganizationRole"; /** The permission slugs assigned to the role. */ export type CreateAuthorizationRolesControllerResponsePermissionsList = Array; export interface CreateAuthorizationRolesControllerResponse { /** A unique slug for the role. */ slug: string; /** Distinguishes the role object. */ object: string; /** Unique identifier of the role. */ id: string; /** A descriptive name for the role. */ name: string; /** An optional description of the role. */ description: string | null; /** Whether the role is scoped to the environment or an organization (custom role). */ type: CreateAuthorizationRolesControllerResponseType; /** The slug of the resource type the role is scoped to. */ resource_type_slug: string; /** The permission slugs assigned to the role. */ permissions: CreateAuthorizationRolesControllerResponsePermissionsList; /** An ISO 8601 timestamp. */ created_at: string; /** An ISO 8601 timestamp. */ updated_at: string; } export interface CreateConnectionStandardAttributesDto { /** The IdP attribute or claim the profile's `idp_id` is mapped from. When omitted, the default for the connection type is used. */ idp_id?: string; /** The IdP attribute or claim the profile's `email` is mapped from. When omitted, the default for the connection type is used. */ email?: string; /** The IdP attribute or claim the profile's `first_name` is mapped from. When omitted, the default for the connection type is used. */ first_name?: string; /** The IdP attribute or claim the profile's `last_name` is mapped from. When omitted, the default for the connection type is used. */ last_name?: string; /** The IdP attribute or claim the profile's `groups` are mapped from. `null` leaves the mapping unset. */ groups?: string | null; /** The IdP attribute or claim the profile's `name` is mapped from. `null` leaves the mapping unset. */ name?: string | null; } /** How IdP attributes or claims map onto custom attributes, keyed by custom attribute name. Custom attributes must already be defined in the WorkOS dashboard. */ export type CreateConnectionAttributeMapsDtoCustomAttributesMap = { [key: string]: string | undefined; }; export interface CreateConnectionAttributeMapsDto { /** How IdP attributes or claims map onto the standard WorkOS profile fields. Provided fields override the defaults for the connection type. */ standard_attributes?: CreateConnectionStandardAttributesDto; /** How IdP attributes or claims map onto custom attributes, keyed by custom attribute name. Custom attributes must already be defined in the WorkOS dashboard. */ custom_attributes?: CreateConnectionAttributeMapsDtoCustomAttributesMap; } /** The X.509 certificates used to verify signed SAML responses from the Identity Provider. Required when configuring the connection with manual IdP fields. */ export type CreateConnectionSamlOptionsDtoIdpSigningCertsList = Array; export interface CreateConnectionKeyPairDto { /** The PEM-encoded private key. */ key: string; /** The PEM-encoded X.509 certificate for the key. */ cert: string; } /** The customer-owned key pairs used to decrypt encrypted SAML responses from the Identity Provider. When omitted, WorkOS generates and manages the encryption key pair. */ export type CreateConnectionSamlOptionsDtoSpEncryptionKeyPairsList = Array; export interface CreateConnectionSamlOptionsDto { /** The Identity Provider metadata URL. When provided, the IdP fields and signing certificates are imported from the metadata document. Mutually exclusive with the manual IdP fields. */ idp_metadata_url?: string; /** A custom Assertion Consumer Service (ACS) URL override. When omitted, the standard WorkOS-generated ACS URL is used. */ acs_url?: string; /** A custom Service Provider Entity ID (audience) override. When omitted, the connection external key is used. */ sp_entity_id?: string; /** The Identity Provider Entity ID. */ idp_entity_id?: string; /** The Identity Provider SSO URL. Required when configuring the connection with manual IdP fields. */ idp_sso_url?: string; /** The X.509 certificates used to verify signed SAML responses from the Identity Provider. Required when configuring the connection with manual IdP fields. */ idp_signing_certs?: CreateConnectionSamlOptionsDtoIdpSigningCertsList; /** The customer-owned key pair used to sign SAML requests sent to the Identity Provider. When omitted, WorkOS generates and manages the signing key pair. */ sp_signing_key_pair?: CreateConnectionKeyPairDto; /** The customer-owned key pairs used to decrypt encrypted SAML responses from the Identity Provider. When omitted, WorkOS generates and manages the encryption key pair. */ sp_encryption_key_pairs?: CreateConnectionSamlOptionsDtoSpEncryptionKeyPairsList; } /** The token-endpoint client authentication method. */ export type CreateConnectionOidcOptionsDtoTokenAuthenticationMethod = | "client_secret_post" | "client_secret_basic" | "private_key_jwt"; /** The ID-token signing algorithm. */ export type CreateConnectionOidcOptionsDtoIdTokenSignatureAlgorithm = | "ES256" | "ES384" | "ES512" | "EdDSA" | "HS256" | "HS384" | "HS512" | "PS256" | "PS384" | "PS512" | "RS256" | "RS384" | "RS512"; export interface CreateConnectionOidcOptionsDto { /** The OIDC discovery endpoint. */ discovery_endpoint: string; /** The OIDC client ID. */ client_id: string; /** The OIDC client secret. Required for `client_secret_basic` and `client_secret_post`, and rejected for `private_key_jwt`, which authenticates with a key pair instead. This value is write-only and is never returned. */ client_secret?: string | Redacted.Redacted; /** A custom OAuth callback URL override. When omitted, the standard WorkOS-generated redirect URI is used. */ redirect_uri?: string; /** Whether PKCE is enabled for the connection. */ pkce?: boolean; /** The token-endpoint client authentication method. */ token_authentication_method?: | CreateConnectionOidcOptionsDtoTokenAuthenticationMethod | (string & {}); /** A key pair for WorkOS to sign `private_key_jwt` client assertions with. Only accepted when `token_authentication_method` is `private_key_jwt`; when omitted, WorkOS generates one and returns its certificate in `oidc_options.jwt_signing_certs`. */ jwt_signing_key_pair?: CreateConnectionKeyPairDto; /** The ID-token signing algorithm. */ id_token_signature_algorithm?: | CreateConnectionOidcOptionsDtoIdTokenSignatureAlgorithm | (string & {}); /** Whether to fetch additional profile attributes from the userinfo endpoint. */ fetch_user_info?: boolean; } export interface CreateConnectionsControllerRequest { /** Unique identifier for the Organization in which the Connection resides. */ organization_id: string; /** A human-readable name for the Connection. This will most commonly be the organization's name. */ name?: string; /** The customer-owned identifier for the Connection. */ external_id?: string; /** The type of the Connection. Only SAML and OIDC connection types may be created. When omitted, the type is inferred from the provided options. */ connection_type?: string; /** How IdP attributes or claims map onto WorkOS profile fields. Provided fields override the defaults for the connection type. */ attribute_maps?: CreateConnectionAttributeMapsDto; /** Protocol configuration for SAML connections. Mutually exclusive with `oidc_options`. */ saml_options?: CreateConnectionSamlOptionsDto; /** Protocol configuration for OIDC connections. Mutually exclusive with `saml_options`. */ oidc_options?: CreateConnectionOidcOptionsDto; } export interface CreateCorsOriginsControllerCorsOriginRequest { /** The origin URL to allow for CORS requests. */ origin?: string; } export interface CorsOriginResponse { /** Distinguishes the CORS origin object. */ object?: string; /** Unique identifier of the CORS origin. */ id?: string; /** The origin URL. */ origin?: string; /** Timestamp when the CORS origin was created. */ created_at?: string; /** Timestamp when the CORS origin was last updated. */ updated_at?: string; } /** Whose connection to create or rotate. `user` (the default) addresses the connection owned by `user_id`. `organization` addresses the connection shared by every member of `organization_id`; `user_id` then identifies the member performing the request and must be an active member of the organization. */ export type CreateDataIntegrationsControllerApiKeyConnectionRequestConnectionOwner = | "user" | "organization"; export interface CreateDataIntegrationsControllerApiKeyConnectionRequest { /** The identifier of the integration. */ slug: string; /** A mutable, non-unique label. Omit to preserve an existing label; null clears it. Labels are never account identifiers. */ account_display_name?: string | null; /** A developer-attested provider account identifier, never inferred from a label or credential. Omit to preserve an existing identifier; null clears it. */ account_identifier?: string | null; /** A [User](/reference/authkit/user) identifier. */ user_id: string; /** An [Organization](/reference/organization) identifier. Optional parameter to scope the connection to a specific organization. Required when `connection_owner` is `organization`. */ organization_id?: string; /** Whose connection to create or rotate. `user` (the default) addresses the connection owned by `user_id`. `organization` addresses the connection shared by every member of `organization_id`; `user_id` then identifies the member performing the request and must be an active member of the organization. */ connection_owner?: | CreateDataIntegrationsControllerApiKeyConnectionRequestConnectionOwner | (string & {}); /** The API key secret to store for this integration. */ secret: string | Redacted.Redacted; /** Must be `add`: this endpoint only creates another connection. The first connection for an owner shape fills the compatibility slot; later connections are standard. Creating an additional connection is not yet available: until it is, `add` succeeds only when the owner has no connection for this integration and otherwise returns 404 `multiple_connections_unavailable`. */ connection_intent: string; } /** Whether this row is the compatibility connection visible to undeclared clients or a standard peer for plural-aware clients. The role does not indicate preference or creation order. */ export type ConnectedAccountWriteResponseConnectionRole = "compatibility" | "standard"; /** The OAuth scopes granted for this connection. */ export type ConnectedAccountWriteResponseScopesList = Array; /** The authentication method used for this connection (`oauth`, `api_key`, or `client_credentials`). Defaults to `oauth` if absent. */ export type ConnectedAccountWriteResponseAuthMethod = "oauth" | "api_key" | "client_credentials"; /** The connection-level configuration values stored for this connection -- the fields the provider declares at `installation` scope, excluding secret and undeclared fields. Returned for every authentication method; empty when no stored values can be disclosed. */ export type ConnectedAccountWriteResponseConfigMap = { [key: string]: string | undefined }; /** The state of the connected account: - `connected`: The connection is active and tokens are valid. - `needs_reauthorization`: The user needs to reauthorize the connection, typically because required scopes have changed. - `disconnected`: The connection has been disconnected. */ export type ConnectedAccountWriteResponseState = | "connected" | "needs_reauthorization" | "disconnected"; export interface ConnectedAccountWriteResponseWarningsItem { code: string; /** A human-readable explanation of the non-blocking warning. */ message: string; } /** Non-blocking warnings about an explicitly supplied label, omitted when no duplicate exists. Reads do not include this field. */ export type ConnectedAccountWriteResponseWarningsList = Array; export interface ConnectedAccountWriteResponse { /** Distinguishes the connected account object. */ object: string; /** The unique identifier of the connected account. */ id: string; /** Whether this row is the compatibility connection visible to undeclared clients or a standard peer for plural-aware clients. The role does not indicate preference or creation order. */ connection_role: ConnectedAccountWriteResponseConnectionRole; /** A best-effort identifier for the provider account this connection points at. It is correlation metadata, not the connection identifier or a selector. */ account_identifier: string | null; /** A mutable, non-unique display name for the provider account connection. */ account_display_name: string | null; /** The [User](/reference/authkit/user) identifier associated with this connection. */ user_id: string | null; /** The [Organization](/reference/organization) identifier associated with this connection, or `null` if not scoped to an organization. */ organization_id: string | null; /** The OAuth scopes granted for this connection. */ scopes: ConnectedAccountWriteResponseScopesList; /** The authentication method used for this connection (`oauth`, `api_key`, or `client_credentials`). Defaults to `oauth` if absent. */ auth_method?: ConnectedAccountWriteResponseAuthMethod; /** The last four characters of the API key, or `null` for OAuth connections. */ api_key_last_4?: string | null; /** The client ID supplied for this connection. Only present when `auth_method` is `client_credentials`. */ client_id?: string | null; /** The last four characters of the client secret supplied for this connection, or `null` when it can't be read. Only present when `auth_method` is `client_credentials`. */ client_secret_last_4?: string | null; /** The connection-level configuration values stored for this connection -- the fields the provider declares at `installation` scope, excluding secret and undeclared fields. Returned for every authentication method; empty when no stored values can be disclosed. */ config?: ConnectedAccountWriteResponseConfigMap; /** The state of the connected account: - `connected`: The connection is active and tokens are valid. - `needs_reauthorization`: The user needs to reauthorize the connection, typically because required scopes have changed. - `disconnected`: The connection has been disconnected. */ state: ConnectedAccountWriteResponseState; /** The timestamp when the connection was created. */ created_at: string; /** The timestamp when the connection was last updated. */ updated_at: string; /** Non-blocking warnings about an explicitly supplied label, omitted when no duplicate exists. Reads do not include this field. */ warnings?: ConnectedAccountWriteResponseWarningsList; } /** Whose connection to create or rotate. `user` (the default) addresses the connection owned by `user_id`. `organization` addresses the connection shared by every member of `organization_id`; `user_id` then identifies the member performing the request and must be an active member of the organization. */ export type CreateDataIntegrationsControllerClientCredentialsConnectionRequestConnectionOwner = | "user" | "organization"; /** Provider-specific configuration values collected for this installation, keyed by the provider's config field descriptors. */ export type CreateDataIntegrationsControllerClientCredentialsConnectionRequestConfigMap = { [key: string]: string | undefined; }; export interface CreateDataIntegrationsControllerClientCredentialsConnectionRequest { /** The identifier of the integration. */ slug: string; /** A mutable, non-unique label. Omit to preserve an existing label; null clears it. Labels are never account identifiers. */ account_display_name?: string | null; /** A developer-attested provider account identifier, never inferred from a label or credential. Omit to preserve an existing identifier; null clears it. */ account_identifier?: string | null; /** A [User](/reference/authkit/user) identifier. */ user_id: string; /** An [Organization](/reference/organization) identifier. Optional parameter to scope the connection to a specific organization. Required when `connection_owner` is `organization`. */ organization_id?: string; /** Whose connection to create or rotate. `user` (the default) addresses the connection owned by `user_id`. `organization` addresses the connection shared by every member of `organization_id`; `user_id` then identifies the member performing the request and must be an active member of the organization. */ connection_owner?: | CreateDataIntegrationsControllerClientCredentialsConnectionRequestConnectionOwner | (string & {}); /** The OAuth client ID to store for this integration. */ client_id: string; /** The OAuth client secret to store for this integration. */ client_secret: string | Redacted.Redacted; /** Provider-specific configuration values collected for this installation, keyed by the provider's config field descriptors. */ config?: CreateDataIntegrationsControllerClientCredentialsConnectionRequestConfigMap; /** Must be `add`: this endpoint only creates another connection. The first connection for an owner shape fills the compatibility slot; later connections are standard. Creating an additional connection is not yet available: until it is, `add` succeeds only when the owner has no connection for this integration and otherwise returns 404 `multiple_connections_unavailable`. */ connection_intent: string; } /** Who owns the Data Integration. `user` (the default) creates the integration users connect their own accounts to; `organization` creates the root organizations connect to. Ownership is fixed at creation, and one integration of each ownership may exist per provider. Independent of `credentials.type`. */ export type CreateDataIntegrationsManagementControllerDataIntegrationRequestOwnership = | "user" | "organization"; /** The OAuth scopes to request for the Data Integration. Defaults to the provider's configured scopes when omitted. */ export type CreateDataIntegrationsManagementControllerDataIntegrationRequestScopesList = Array; export type CreateDataIntegrationsManagementControllerDataIntegrationRequestAuthMethodsItem = | "oauth" | "api_key" | "client_credentials"; /** How accounts authenticate with the provider. Defaults to `["oauth"]`. Use `["api_key"]` to declare an API key integration; `credentials` is then not required and keys are supplied per-tenant (optionally via `api_key` on this request). Use `["client_credentials"]` to declare a client-credentials integration; `credentials` is likewise not required and client credentials are supplied per-tenant. */ export type CreateDataIntegrationsManagementControllerDataIntegrationRequestAuthMethodsList = Array< CreateDataIntegrationsManagementControllerDataIntegrationRequestAuthMethodsItem | (string & {}) >; /** Provider-specific config values (e.g. a Snowflake `account`), keyed by the config field. Only fields the built-in provider declares are accepted. */ export type CreateDataIntegrationsManagementControllerDataIntegrationRequestConfigMap = { [key: string]: string | undefined; }; /** The credentials type. `custom` uses your own OAuth app credentials; `organization` has each organization supply its own credentials (configured per-organization). */ export type DataIntegrationCredentialsDtoType = "custom" | "organization"; export interface DataIntegrationCredentialsDto { /** The credentials type. `custom` uses your own OAuth app credentials; `organization` has each organization supply its own credentials (configured per-organization). */ type: DataIntegrationCredentialsDtoType | (string & {}); /** OAuth client ID for the provider app. Required when `type` is `custom`; omit for `organization`. */ client_id?: string; /** OAuth client secret for the provider app. Required when `type` is `custom`; omit for `organization`. */ client_secret?: string | Redacted.Redacted; } export interface ApiKeyInstallationDto { /** The API key secret to store for the tenant. */ secret: string | Redacted.Redacted; /** The User identifier the API key is installed for. */ user_id: string; /** An Organization identifier to scope the installation to a specific organization. */ organization_id?: string; } /** Additional static query parameters appended to the authorization request. */ export type CustomProviderDefinitionDtoAdditionalAuthorizationParametersMap = { [key: string]: string | undefined; }; /** How client credentials are sent when exchanging authorization codes and refreshing tokens. */ export type CustomProviderDefinitionDtoAuthenticateVia = "request_body" | "basic_auth_header"; export interface CustomProviderDefinitionDto { /** A descriptive name for the custom provider. */ name: string; /** The provider's OAuth authorization endpoint. Required for OAuth providers; omit for `api_key` providers. Must be a static URL: `${config....}` placeholders are resolved against a provider's declared config fields, which custom providers cannot declare. */ authorization_url?: string; /** The provider's OAuth token endpoint. Required for OAuth and `client_credentials` providers; omit for `api_key` providers. Must be a static URL: `${config....}` placeholders are resolved against a provider's declared config fields, which custom providers cannot declare. */ token_url?: string; /** The endpoint used to refresh tokens, if different from the token endpoint. Must be a static URL, like the other endpoints. */ refresh_token_url?: string | null; /** Whether PKCE is used during the authorization code flow. Defaults to `true`. */ pkce_enabled?: boolean; /** The separator used to join requested scopes. Defaults to a space. */ request_scope_separator?: string; /** Whether at least one scope must be selected when connecting an account. Defaults to `false`. */ scopes_required?: boolean; /** Whether a client secret is required for this provider. Defaults to `true`. */ client_secret_required?: boolean; /** Additional static query parameters appended to the authorization request. */ additional_authorization_parameters?: CustomProviderDefinitionDtoAdditionalAuthorizationParametersMap; /** The Content-Type used when exchanging the token request. */ token_body_content_type?: string; /** How client credentials are sent when exchanging authorization codes and refreshing tokens. */ authenticate_via?: CustomProviderDefinitionDtoAuthenticateVia | (string & {}); } export interface CreateDataIntegrationsManagementControllerDataIntegrationRequest { /** The provider to create a Data Integration for. For a built-in provider use its slug (e.g. `github`, `slack`). For a custom provider, this is the new provider slug and `custom_provider` must be supplied. A custom provider slug cannot shadow an existing global provider slug. */ provider: string; /** Who owns the Data Integration. `user` (the default) creates the integration users connect their own accounts to; `organization` creates the root organizations connect to. Ownership is fixed at creation, and one integration of each ownership may exist per provider. Independent of `credentials.type`. */ ownership?: | CreateDataIntegrationsManagementControllerDataIntegrationRequestOwnership | (string & {}); /** An optional description of the Data Integration. */ description?: string | null; /** Whether the Data Integration is enabled. Defaults to `false`. */ enabled?: boolean; /** The OAuth scopes to request for the Data Integration. Defaults to the provider's configured scopes when omitted. */ scopes?: CreateDataIntegrationsManagementControllerDataIntegrationRequestScopesList | null; /** How accounts authenticate with the provider. Defaults to `["oauth"]`. Use `["api_key"]` to declare an API key integration; `credentials` is then not required and keys are supplied per-tenant (optionally via `api_key` on this request). Use `["client_credentials"]` to declare a client-credentials integration; `credentials` is likewise not required and client credentials are supplied per-tenant. */ auth_methods?: CreateDataIntegrationsManagementControllerDataIntegrationRequestAuthMethodsList; /** Provider-specific config values (e.g. a Snowflake `account`), keyed by the config field. Only fields the built-in provider declares are accepted. */ config?: CreateDataIntegrationsManagementControllerDataIntegrationRequestConfigMap; /** The OAuth credentials to configure for the Data Integration. Required for OAuth integrations; omit when `auth_methods` is `["api_key"]`. */ credentials?: DataIntegrationCredentialsDto; /** An optional API key to install for the first tenant on an `api_key` integration. Omit to declare a keyless integration; tenants can be added later via the per-installation API key path. */ api_key?: ApiKeyInstallationDto; /** The OAuth definition for a custom provider. Supply this to define a custom provider; omit it to create an integration for a built-in provider. */ custom_provider?: CustomProviderDefinitionDto; } /** Who owns the Data Integration: `user` when users connect their own accounts, `organization` when organizations connect. Fixed at creation. */ export type DataIntegrationOwnership = "user" | "organization"; /** The state of the Data Integration. */ export type DataIntegrationState = "valid" | "invalid" | "requested"; export type DataIntegrationScopesList = Array; export type DataIntegrationAuthMethodsItem = "oauth" | "api_key" | "client_credentials"; /** How accounts authenticate with the provider for this Data Integration. */ export type DataIntegrationAuthMethodsList = Array; /** The credentials type. `custom` uses your own OAuth app credentials; `organization` has each organization supply its own credentials (so `client_id`/`redacted_client_secret` are null on the integration itself). */ export type DataIntegrationCredentialsType = "custom" | "organization"; export interface DataIntegrationCredentials { /** The credentials type. `custom` uses your own OAuth app credentials; `organization` has each organization supply its own credentials (so `client_id`/`redacted_client_secret` are null on the integration itself). */ type: DataIntegrationCredentialsType; /** The OAuth client ID configured for the provider app. Null for `organization` credentials. */ client_id: string | null; /** The last four characters of the OAuth client secret. The full secret is never returned. Null for `organization` credentials. */ redacted_client_secret: string | Redacted.Redacted | null; } /** Whether this is the compatibility connection visible to undeclared clients or a standard connection for plural-aware clients. */ export type DataIntegrationInstallationConnectionRole = "compatibility" | "standard"; export interface DataIntegrationInstallation { /** Unique identifier of the installation. */ id: string; /** Whether this is the compatibility connection visible to undeclared clients or a standard connection for plural-aware clients. */ connection_role: DataIntegrationInstallationConnectionRole; /** A best-effort provider account identifier used for correlation, not connection selection. */ account_identifier: string | null; /** A mutable, non-unique display name for this connection. */ account_display_name: string | null; /** The User the API key was installed for. Null on an `organization`-owned integration, whose installations belong to the organization. */ user_id: string | null; /** The Organization the installation is scoped to (or owned by, on an `organization`-owned integration), or null when unscoped. */ organization_id: string | null; /** The last four characters of the stored API key. The full key is never returned. */ api_key_last_4: string | null; } /** Provider-specific config values set on the Data Integration (e.g. a Snowflake `account`), keyed by config field. Only fields the provider declares are accepted. */ export type DataIntegrationConfigMap = { [key: string]: string | undefined }; /** Additional static query parameters appended to the authorization request. */ export type DataIntegrationCustomProviderAdditionalAuthorizationParametersMap = { [key: string]: string | undefined; }; /** How client credentials are sent when exchanging authorization codes and refreshing tokens. */ export type DataIntegrationCustomProviderAuthenticateVia = "request_body" | "basic_auth_header"; export interface DataIntegrationCustomProvider { /** A descriptive name for the custom provider. */ name: string; /** The provider's OAuth authorization endpoint. */ authorization_url: string | null; /** The provider's OAuth token endpoint. */ token_url: string | null; /** The endpoint used to refresh tokens, if different from the token endpoint. */ refresh_token_url: string | null; /** Whether PKCE is used during the authorization code flow. */ pkce_enabled: boolean; /** The separator used to join requested scopes. */ request_scope_separator: string; /** Whether at least one scope must be selected when connecting an account. */ scopes_required: boolean; /** Whether a client secret is required for this provider. */ client_secret_required: boolean; /** Additional static query parameters appended to the authorization request. */ additional_authorization_parameters: DataIntegrationCustomProviderAdditionalAuthorizationParametersMap; /** The Content-Type used when exchanging the token request. */ token_body_content_type: string; /** How client credentials are sent when exchanging authorization codes and refreshing tokens. */ authenticate_via: DataIntegrationCustomProviderAuthenticateVia; } export interface DataIntegration { /** Distinguishes the Data Integration object. */ object: string; /** Unique identifier of the Data Integration. */ id: string; /** The provider slug for this Data Integration. */ slug: string; /** The integration type derived from the provider. */ integration_type: string; /** Who owns the Data Integration: `user` when users connect their own accounts, `organization` when organizations connect. Fixed at creation. */ ownership: DataIntegrationOwnership; /** An optional description of the Data Integration. */ description: string | null; /** Whether the Data Integration is enabled. */ enabled: boolean; /** The state of the Data Integration. */ state: DataIntegrationState; /** The OAuth scopes configured for the Data Integration. `null` when the provider's configured scopes are used. */ scopes: DataIntegrationScopesList | null; /** The OAuth redirect URI to register with the provider when configuring the custom application. Empty for `api_key` and `client_credentials` integrations, which run no authorization redirect. */ redirect_uri: string; /** How accounts authenticate with the provider for this Data Integration. */ auth_methods: DataIntegrationAuthMethodsList; /** The integration-level OAuth app credentials. `null` for `api_key` and `client_credentials` integrations, which hold no integration-level credentials (secrets are installed per-tenant). */ credentials: DataIntegrationCredentials | null; /** The tenant installation created when an API key was supplied at creation time; `null` otherwise. Not populated on list/get responses. */ installation: DataIntegrationInstallation | null; /** Provider-specific config values set on the Data Integration (e.g. a Snowflake `account`), keyed by config field. Only fields the provider declares are accepted. */ config: DataIntegrationConfigMap; /** The OAuth definition when this is a custom provider; `null` for built-in providers. */ custom_provider: DataIntegrationCustomProvider | null; /** An ISO 8601 timestamp. */ created_at: string; /** An ISO 8601 timestamp. */ updated_at: string; } /** The OAuth scopes granted for this connection. */ export type CreateDataIntegrationsOrganizationControllerOrganizationDataInstallationRequestScopesList = Array; /** Explicitly set the state of the connected account. When omitted, the state is derived from the token combination provided. */ export type CreateDataIntegrationsOrganizationControllerOrganizationDataInstallationRequestState = | "connected" | "needs_reauthorization"; export interface CreateDataIntegrationsOrganizationControllerOrganizationDataInstallationRequest { /** An [Organization](/reference/organization) identifier. */ organization_id: string; /** The slug identifier of the provider (e.g., `github`, `slack`, `notion`). */ slug: string; /** A mutable, non-unique connection label; null clears it. Not an account identifier. */ account_display_name?: string | null; /** A developer-attested account identifier; null clears it. */ account_identifier?: string | null; /** The OAuth access token for the connected account. */ access_token?: string | Redacted.Redacted; /** The OAuth refresh token for the connected account. */ refresh_token?: string | Redacted.Redacted; /** The ISO-8601 timestamp when the access token expires. Required when `access_token` is provided for tokens that expire. */ expires_at?: string; /** The OAuth scopes granted for this connection. */ scopes?: CreateDataIntegrationsOrganizationControllerOrganizationDataInstallationRequestScopesList; /** Explicitly set the state of the connected account. When omitted, the state is derived from the token combination provided. */ state?: | CreateDataIntegrationsOrganizationControllerOrganizationDataInstallationRequestState | (string & {}); /** The [User](/reference/authkit/user) identifier of the organization member on whose behalf the connected account is being imported or updated. The user must be an active member of the organization. */ user_id: string; /** Set to `add` to create another connected account. Omit this field for permanent compatibility behavior. Creating an additional connection is not yet available: until it is, `add` succeeds only when the owner has no connection for this integration, which creates the compatibility connection, and otherwise returns 404 `multiple_connections_unavailable`. */ connection_intent?: string; } /** The OAuth scopes granted for this connection. */ export type CreateDataIntegrationsUserManagementControllerUserDataInstallationRequestScopesList = Array; /** Explicitly set the state of the connected account. When omitted, the state is derived from the token combination provided. */ export type CreateDataIntegrationsUserManagementControllerUserDataInstallationRequestState = | "connected" | "needs_reauthorization"; export interface CreateDataIntegrationsUserManagementControllerUserDataInstallationRequest { /** A [User](/reference/authkit/user) identifier. */ user_id: string; /** The slug identifier of the provider (e.g., `github`, `slack`, `notion`). */ slug: string; /** An [Organization](/reference/organization) identifier. Optional parameter if the connection is scoped to an organization. */ organization_id?: string; /** A mutable, non-unique connection label; null clears it. Not an account identifier. */ account_display_name?: string | null; /** A developer-attested account identifier; null clears it. */ account_identifier?: string | null; /** The OAuth access token for the connected account. */ access_token?: string | Redacted.Redacted; /** The OAuth refresh token for the connected account. */ refresh_token?: string | Redacted.Redacted; /** The ISO-8601 timestamp when the access token expires. Required when `access_token` is provided for tokens that expire. */ expires_at?: string; /** The OAuth scopes granted for this connection. */ scopes?: CreateDataIntegrationsUserManagementControllerUserDataInstallationRequestScopesList; /** Explicitly set the state of the connected account. When omitted, the state is derived from the token combination provided. */ state?: | CreateDataIntegrationsUserManagementControllerUserDataInstallationRequestState | (string & {}); /** Set to `add` to create another connected account. Omit this field for permanent compatibility behavior. Creating an additional connection is not yet available: until it is, `add` succeeds only when the owner has no connection for this integration, which creates the compatibility connection, and otherwise returns 404 `multiple_connections_unavailable`. */ connection_intent?: string; } export interface CreateFlagTargetsControllerTargetRequest { /** The unique slug identifier of the feature flag. */ slug: string; /** The resource ID in format "user_" or "org_". */ resourceId: string; } export interface CreateFlagTargetsControllerTargetResponse {} export interface CreateGroupsControllerRequest { /** The ID of the organization. */ organizationId: string; /** The name of the Group. */ name?: string; /** An optional description of the Group. */ description?: string | null; } export interface CreateItContactsControllerRequest { /** The ID of the organization. */ organization_id: string; /** The email address of the IT contact. */ email: string; } export interface ItContact { /** The IT Contact object. */ object: string; /** The unique ID of the IT Contact. */ id: string; /** The email address of the IT Contact. */ email: string; /** An ISO 8601 timestamp. */ created_at: string; /** An ISO 8601 timestamp. */ updated_at: string; } /** Map of values used to determine the encryption key. */ export type CreateJumpWireWebDataVaultControllerRequestKeyContextMap = { [key: string]: string | undefined; }; export interface CreateJumpWireWebDataVaultControllerRequest { /** Map of values used to determine the encryption key. */ key_context: CreateJumpWireWebDataVaultControllerRequestKeyContextMap; /** Unique name for the object. */ name: string; /** Plaintext data to encrypt and store. */ value: string; } /** Map of values used to determine the encryption key. */ export type ObjectMetadataContextMap = { [key: string]: string | undefined }; /** The user or API key that performed an action. */ export interface Actor { /** Unique identifier of the actor. */ id: string; /** Display name of the actor. */ name: string; } /** Metadata for a stored encrypted object. */ export interface ObjectMetadata { /** Map of values used to determine the encryption key. */ context: ObjectMetadataContextMap; /** Environment the object belongs to. */ environment_id: string; /** Unique identifier of the object. */ id: string; /** Encryption key identifier. */ key_id: string; /** Timestamp of the last update. */ updated_at: string; updated_by: Actor; /** Current version identifier of the object. */ version_id?: string | null; } /** The permission slugs to assign to the API key. */ export type CreateOrganizationApiKeysControllerRequestPermissionsList = Array; export interface CreateOrganizationApiKeysControllerRequest { /** Unique identifier of the Organization. */ organizationId: string; /** The name for the API key. */ name?: string; /** The permission slugs to assign to the API key. */ permissions?: CreateOrganizationApiKeysControllerRequestPermissionsList; /** The timestamp when the API key should expire. Must be a future timestamp. If omitted, the key does not expire. */ expires_at?: string; } /** The entity that owns the API Key. */ export type OrganizationApiKeyWithValueOwner = ApiKeyOwnerCase0; /** The permission slugs assigned to the API Key. */ export type OrganizationApiKeyWithValuePermissionsList = Array; export interface OrganizationApiKeyWithValue { /** Distinguishes the API Key object. */ object: string; /** Unique identifier of the API Key. */ id: string; /** The entity that owns the API Key. */ owner: ApiKeyOwnerCase0; /** A descriptive name for the API Key. */ name: string; /** An obfuscated representation of the API Key value. */ obfuscated_value: string; /** Timestamp of when the API Key was last used. */ last_used_at: string | null; /** Timestamp when the API Key expires. Null means the key does not expire. */ expires_at: string | null; /** The permission slugs assigned to the API Key. */ permissions: OrganizationApiKeyWithValuePermissionsList; /** An ISO 8601 timestamp. */ created_at: string; /** An ISO 8601 timestamp. */ updated_at: string; /** The full API Key value. Only returned once at creation time. */ value: string; } export interface CreateOrganizationDomainsControllerRequest { /** The domain to add to the organization. */ domain?: string; /** The ID of the organization to add the domain to. */ organization_id?: string; } /** Verification state of the domain. */ export type CreateOrganizationDomainsControllerResponseState = | "failed" | "legacy_verified" | "pending" | "unverified" | "verified"; /** Strategy used to verify the domain. */ export type CreateOrganizationDomainsControllerResponseVerificationStrategy = "dns" | "manual"; export interface CreateOrganizationDomainsControllerResponse { /** Distinguishes the organization domain object. */ object: string; /** Unique identifier of the organization domain. */ id: string; /** ID of the parent Organization. */ organization_id: string; /** Domain for the organization domain. */ domain: string; /** Verification state of the domain. */ state?: CreateOrganizationDomainsControllerResponseState; /** The prefix used in DNS verification. */ verification_prefix?: string; /** Validation token to be used in DNS TXT record. */ verification_token?: string; /** Strategy used to verify the domain. */ verification_strategy?: CreateOrganizationDomainsControllerResponseVerificationStrategy; /** An ISO 8601 timestamp. */ created_at: string; /** An ISO 8601 timestamp. */ updated_at: string; } /** The domains associated with the organization. Deprecated in favor of `domain_data`. */ export type CreateOrganizationsControllerRequestDomainsList = Array; /** The verification state of the domain. */ export type OrganizationDomainDataDtoState = "pending" | "verified"; export interface OrganizationDomainDataDto { /** The domain value. */ domain?: string; /** The verification state of the domain. */ state?: OrganizationDomainDataDtoState | (string & {}); } /** The domains associated with the organization, including verification state. */ export type CreateOrganizationsControllerRequestDomainDataList = Array; /** Object containing [metadata](/authkit/metadata) key/value pairs associated with the Organization. */ export type CreateOrganizationsControllerRequestMetadataMap = { [key: string]: string | undefined }; export interface CreateOrganizationsControllerRequest { /** The name of the organization. */ name?: string; /** Whether the organization allows profiles from outside the organization to sign in. */ allow_profiles_outside_organization?: boolean; /** The domains associated with the organization. Deprecated in favor of `domain_data`. */ domains?: CreateOrganizationsControllerRequestDomainsList; /** The domains associated with the organization, including verification state. */ domain_data?: CreateOrganizationsControllerRequestDomainDataList; /** Object containing [metadata](/authkit/metadata) key/value pairs associated with the Organization. */ metadata?: CreateOrganizationsControllerRequestMetadataMap | null; /** An external identifier for the Organization. */ external_id?: string | null; } /** Verification state of the domain. */ export type OrganizationDomainsItemState = | "failed" | "legacy_verified" | "pending" | "unverified" | "verified"; /** Strategy used to verify the domain. */ export type OrganizationDomainsItemVerificationStrategy = "dns" | "manual"; export interface OrganizationDomainsItem { /** Distinguishes the organization domain object. */ object: string; /** Unique identifier of the organization domain. */ id: string; /** ID of the parent Organization. */ organization_id: string; /** Domain for the organization domain. */ domain: string; /** Verification state of the domain. */ state?: OrganizationDomainsItemState; /** The prefix used in DNS verification. */ verification_prefix?: string; /** Validation token to be used in DNS TXT record. */ verification_token?: string; /** Strategy used to verify the domain. */ verification_strategy?: OrganizationDomainsItemVerificationStrategy; /** An ISO 8601 timestamp. */ created_at: string; /** An ISO 8601 timestamp. */ updated_at: string; } /** List of Organization Domains. */ export type OrganizationDomainsList = Array; /** Object containing [metadata](/authkit/metadata) key/value pairs associated with the Organization. */ export type OrganizationMetadataMap = { [key: string]: string | undefined }; export interface Organization { /** Distinguishes the Organization object. */ object?: string; /** Unique identifier of the Organization. */ id?: string; /** A descriptive name for the Organization. This field does not need to be unique. */ name?: string; /** List of Organization Domains. */ domains?: OrganizationDomainsList; /** Object containing [metadata](/authkit/metadata) key/value pairs associated with the Organization. */ metadata?: OrganizationMetadataMap; /** The external ID of the Organization. */ external_id?: string | null; /** The Stripe customer ID of the Organization. */ stripe_customer_id?: string; /** An ISO 8601 timestamp. */ created_at?: string; /** An ISO 8601 timestamp. */ updated_at?: string; /** Whether the Organization allows profiles outside of its managed domains. */ allow_profiles_outside_organization?: boolean; } /** The intent of the Admin Portal. - `sso` - Launch Admin Portal for creating SSO connections - `dsync` - Launch Admin Portal for creating Directory Sync connections - `audit_logs` - Launch Admin Portal for viewing Audit Logs - `log_streams` - Launch Admin Portal for creating Log Streams - `domain_verification` - Launch Admin Portal for Domain Verification - `certificate_renewal` - Launch Admin Portal for renewing SAML Certificates - `bring_your_own_key` - Launch Admin Portal for configuring Bring Your Own Key */ export type CreatePortalSessionsControllerRequestIntent = | "sso" | "dsync" | "audit_logs" | "log_streams" | "domain_verification" | "certificate_renewal" | "bring_your_own_key"; /** The email addresses of the IT contacts to grant access to the Admin Portal for the given organization. Accepts up to 20 emails. */ export type CreatePortalSessionsControllerRequestItContactEmailsList = Array; export interface CreatePortalSessionsControllerRequest { /** The URL to go to when an admin clicks on your logo in the Admin Portal. If not specified, the return URL configured on the [Admin Portal](https://dashboard.workos.com/admin-portal) page will be used. */ return_url?: string; /** The URL to redirect the admin to when they finish setup. If not specified, the success URL configured on the [Admin Portal](https://dashboard.workos.com/admin-portal) page will be used. */ success_url?: string; /** An [Organization](/reference/organization) identifier. */ organization?: string; /** The intent of the Admin Portal. - `sso` - Launch Admin Portal for creating SSO connections - `dsync` - Launch Admin Portal for creating Directory Sync connections - `audit_logs` - Launch Admin Portal for viewing Audit Logs - `log_streams` - Launch Admin Portal for creating Log Streams - `domain_verification` - Launch Admin Portal for Domain Verification - `certificate_renewal` - Launch Admin Portal for renewing SAML Certificates - `bring_your_own_key` - Launch Admin Portal for configuring Bring Your Own Key */ intent?: CreatePortalSessionsControllerRequestIntent | (string & {}); /** The email addresses of the IT contacts to grant access to the Admin Portal for the given organization. Accepts up to 20 emails. */ it_contact_emails?: CreatePortalSessionsControllerRequestItContactEmailsList; } export interface PortalLinkResponse { /** An ephemeral link to initiate the Admin Portal. */ link?: string; } export interface CreateRedirectUrisControllerRequest { /** The redirect URI to create. */ uri?: string; } export interface RedirectUri { /** The object type. */ object?: string; /** The ID of the redirect URI. */ id?: string; /** The redirect URI. */ uri?: string; /** Whether this is the default redirect URI. */ default?: boolean; /** The timestamp when the redirect URI was created. */ created_at?: string; /** The timestamp when the redirect URI was last updated. */ updated_at?: string; } export interface CreateSamlIdpSigningCertificatesControllerRequest { /** Unique identifier for the Connection. */ connectionId: string; /** The PEM-encoded X.509 certificate. */ value: string; } export interface SamlIdpSigningCertificate { /** Distinguishes the SAML Identity Provider signing certificate object. */ object: string; /** Unique identifier for the Identity Provider signing certificate. */ id: string; /** The PEM-encoded public X.509 certificate. */ value: string; /** When the certificate becomes valid. */ not_before: string | null; /** When the certificate expires. */ not_after: string | null; /** An ISO 8601 timestamp. */ created_at: string; } export interface CreateSamlSpEncryptionCertificatesControllerRequest { /** Unique identifier for the Connection. */ connectionId: string; } export interface SamlSpEncryptionCertificate { /** Distinguishes the SAML Service Provider encryption certificate object. */ object: string; /** Unique identifier for the Service Provider encryption key pair. WorkOS holds the corresponding private key, which is never exposed. */ id: string; /** The PEM-encoded public X.509 certificate. */ value: string; /** When the certificate becomes valid. */ not_before: string | null; /** When the certificate expires. */ not_after: string | null; /** An ISO 8601 timestamp. */ created_at: string; } export interface CreateSamlSpSigningCertificatesControllerRequest { /** Unique identifier for the Connection. */ connectionId: string; } export interface SamlSpSigningCertificate { /** Distinguishes the SAML Service Provider signing certificate object. */ object: string; /** Unique identifier for the Service Provider signing key pair. WorkOS holds the corresponding private key, which is never exposed. */ id: string; /** The PEM-encoded public X.509 certificate. */ value: string; /** When the certificate becomes valid. */ not_before: string | null; /** When the certificate expires. */ not_after: string | null; /** An ISO 8601 timestamp. */ created_at: string; } export interface CreateTeamsControllerTeamRequest { /** The email address of the person who will administer the team. An invitation is sent to this address. */ admin_email: string; /** Name of the team. */ name: string; } /** Whether the team can host production environments. `Active` means billing is set up. `Inactive` means a team admin must add a payment method in the WorkOS Dashboard. `Suspended` and `Deleting` mean the team can't be provisioned into. */ export type TeamProductionState = "Active" | "Inactive" | "Suspended" | "Deleting"; export interface Team { /** Distinguishes the team object. */ object: string; /** Unique identifier of the team. */ id: string; /** The name of the team. */ name: string; /** Whether the team can host production environments. `Active` means billing is set up. `Inactive` means a team admin must add a payment method in the WorkOS Dashboard. `Suspended` and `Deleting` mean the team can't be provisioned into. */ production_state: TeamProductionState; /** The timestamp when production was enabled for the team, or `null` if it never has been. */ production_enabled_at: string | null; /** The timestamp when the team was created. */ created_at: string; /** The timestamp when the team was last updated. */ updated_at: string; } /** The permission slugs to assign to the API key. Each permission must be enabled for user API keys. */ export type CreateUserApiKeysControllerRequestPermissionsList = Array; export interface CreateUserApiKeysControllerRequest { /** Unique identifier of the user. */ userId: string; /** A descriptive name for the API key. */ name: string; /** The ID of the organization the user API key is associated with. The user must have an active membership in this organization. */ organization_id: string; /** The permission slugs to assign to the API key. Each permission must be enabled for user API keys. */ permissions?: CreateUserApiKeysControllerRequestPermissionsList; /** The timestamp when the API key should expire. Must be a future timestamp. If omitted, the key does not expire. */ expires_at?: string; } /** The entity that owns the API Key. */ export type UserApiKeyWithValueOwner = ApiKeyOwnerCase1; /** The permission slugs assigned to the API Key. */ export type UserApiKeyWithValuePermissionsList = Array; export interface UserApiKeyWithValue { /** Distinguishes the API Key object. */ object: string; /** Unique identifier of the API Key. */ id: string; /** The entity that owns the API Key. */ owner: ApiKeyOwnerCase1; /** A descriptive name for the API Key. */ name: string; /** An obfuscated representation of the API Key value. */ obfuscated_value: string; /** Timestamp of when the API Key was last used. */ last_used_at: string | null; /** Timestamp when the API Key expires. Null means the key does not expire. */ expires_at: string | null; /** The permission slugs assigned to the API Key. */ permissions: UserApiKeyWithValuePermissionsList; /** An ISO 8601 timestamp. */ created_at: string; /** An ISO 8601 timestamp. */ updated_at: string; /** The full API Key value. Only returned once at creation time. */ value: string; } /** The locale to use when rendering the invitation email. See [supported locales](/authkit/hosted-ui/localization). */ export type CreateUserlandUserInvitesControllerRequestLocale = | "af" | "am" | "ar" | "bg" | "bn" | "bs" | "ca" | "cs" | "da" | "de" | "de-DE" | "el" | "en" | "en-AU" | "en-CA" | "en-GB" | "en-US" | "es" | "es-419" | "es-ES" | "es-US" | "et" | "fa" | "fi" | "fil" | "fr" | "fr-BE" | "fr-CA" | "fr-FR" | "fy" | "gl" | "gu" | "ha" | "he" | "hi" | "hr" | "hu" | "hy" | "id" | "is" | "it" | "it-IT" | "ja" | "jv" | "ka" | "kk" | "km" | "kn" | "ko" | "lt" | "lv" | "mk" | "ml" | "mn" | "mr" | "ms" | "my" | "nb" | "ne" | "nl" | "nl-BE" | "nl-NL" | "nn" | "no" | "pa" | "pl" | "pt" | "pt-BR" | "pt-PT" | "ro" | "ru" | "sk" | "sl" | "sq" | "sr" | "sv" | "sw" | "ta" | "te" | "th" | "tr" | "uk" | "ur" | "uz" | "vi" | "zh" | "zh-CN" | "zh-HK" | "zh-TW" | "zu"; export interface CreateUserlandUserInvitesControllerRequest { /** The email address of the recipient. */ email?: string; /** The ID of the [organization](/reference/organization) that the recipient will join. */ organization_id?: string; /** The [role](/authkit/roles) that the recipient will receive when they join the organization in the invitation. */ role_slug?: string; /** How many days the invitations will be valid for. Must be between 1 and 30 days. Defaults to 7 days if not specified. */ expires_in_days?: number; /** The ID of the [user](/reference/authkit/user) who invites the recipient. The invitation email will mention the name of this user. */ inviter_user_id?: string; /** The locale to use when rendering the invitation email. See [supported locales](/authkit/hosted-ui/localization). */ locale?: CreateUserlandUserInvitesControllerRequestLocale | (string & {}); } /** The state of the invitation. */ export type UserlandUserInviteState = "pending" | "accepted" | "expired" | "revoked"; export interface UserlandUserInvite { /** Distinguishes the invitation object. */ object?: string; /** The unique ID of the invitation. */ id?: string; /** The email address of the recipient. */ email?: string; /** The state of the invitation. */ state?: UserlandUserInviteState; /** The timestamp when the invitation was accepted, or null if not yet accepted. */ accepted_at?: string | null; /** The timestamp when the invitation was revoked, or null if not revoked. */ revoked_at?: string | null; /** The timestamp when the invitation expires. */ expires_at?: string; /** The ID of the [organization](/reference/organization) that the recipient will join. */ organization_id?: string | null; /** The ID of the user who invited the recipient, if provided. */ inviter_user_id?: string | null; /** The ID of the user who accepted the invitation, once accepted. */ accepted_user_id?: string | null; /** Slug of the role the invitee will be assigned on acceptance. Reflects the current role on the invitee's organization membership. null when the invitation has no associated organization. */ role_slug?: string | null; /** An ISO 8601 timestamp. */ created_at?: string; /** An ISO 8601 timestamp. */ updated_at?: string; /** The token used to accept the invitation. */ token?: string; /** The URL where the recipient can accept the invitation. */ accept_invitation_url?: string; } /** An array of role identifiers. Limited to one role when Multiple Roles is disabled. Mutually exclusive with `role_slug`. */ export type CreateUserlandUserOrganizationMembershipsControllerRequestRoleSlugsList = Array; export interface CreateUserlandUserOrganizationMembershipsControllerRequest { /** The ID of the [user](/reference/authkit/user). */ user_id: string; /** The ID of the [organization](/reference/organization) which the user belongs to. */ organization_id: string; /** A single role identifier. Defaults to `member` or the explicit default role. Mutually exclusive with `role_slugs`. */ role_slug?: string; /** An array of role identifiers. Limited to one role when Multiple Roles is disabled. Mutually exclusive with `role_slug`. */ role_slugs?: CreateUserlandUserOrganizationMembershipsControllerRequestRoleSlugsList; } /** The status of the organization membership. One of `active`, `inactive`, or `pending`. */ export type CreateUserlandUserOrganizationMembershipsControllerResponseStatus = | "active" | "inactive" | "pending"; /** An object containing IdP-sourced attributes from the linked [Directory User](/reference/directory-sync/directory-user) or [SSO Profile](/reference/sso/profile). Directory User attributes take precedence when both are linked. */ export type CreateUserlandUserOrganizationMembershipsControllerResponseCustomAttributesMap = { [key: string]: unknown | undefined; }; /** The list of roles assigned to the user within the organization. */ export type CreateUserlandUserOrganizationMembershipsControllerResponseRolesList = Array; /** Object containing metadata key/value pairs associated with the user. */ export type UserlandUserMetadataMap = { [key: string]: string | undefined }; /** The user object. */ export interface UserlandUser { /** Distinguishes the user object. */ object?: string; /** The unique ID of the user. */ id?: string; /** The first name of the user. */ first_name?: string | null; /** The last name of the user. */ last_name?: string | null; /** The user's full name. */ name?: string | null; /** A URL reference to an image representing the user. */ profile_picture_url?: string | null; /** The email address of the user. */ email?: string; /** Whether the user's email has been verified. */ email_verified?: boolean; /** The external ID of the user. */ external_id?: string | null; /** Object containing metadata key/value pairs associated with the user. */ metadata?: UserlandUserMetadataMap; /** The timestamp when the user last signed in. */ last_sign_in_at?: string | null; /** The user's preferred locale. */ locale?: string | null; /** An ISO 8601 timestamp. */ created_at?: string; /** An ISO 8601 timestamp. */ updated_at?: string; } export interface CreateUserlandUserOrganizationMembershipsControllerResponse { /** Distinguishes the organization membership object. */ object: string; /** The unique ID of the organization membership. */ id: string; /** The ID of the user. */ user_id: string; /** The ID of the organization which the user belongs to. */ organization_id: string; /** The status of the organization membership. One of `active`, `inactive`, or `pending`. */ status: CreateUserlandUserOrganizationMembershipsControllerResponseStatus; /** Whether this organization membership is managed by a directory sync connection. */ directory_managed: boolean; /** The name of the organization which the user belongs to. */ organization_name?: string; /** An object containing IdP-sourced attributes from the linked [Directory User](/reference/directory-sync/directory-user) or [SSO Profile](/reference/sso/profile). Directory User attributes take precedence when both are linked. */ custom_attributes?: CreateUserlandUserOrganizationMembershipsControllerResponseCustomAttributesMap; /** An ISO 8601 timestamp. */ created_at: string; /** An ISO 8601 timestamp. */ updated_at: string; /** The primary role assigned to the user within the organization. */ role: SlimRole; /** The list of roles assigned to the user within the organization. */ roles: CreateUserlandUserOrganizationMembershipsControllerResponseRolesList; /** The user that belongs to the organization through this membership. */ user: UserlandUser; } /** Object containing additional key/value pairs collected with the waitlist entry. Supports up to 50 string pairs, with keys up to 40 characters and values up to 600 characters. Values are user-provided -- treat them as untrusted input when rendering or exporting. */ export type CreateWaitlistsControllerEntryRequestAdditionalFieldsMap = { [key: string]: string | undefined; }; export interface CreateWaitlistsControllerEntryRequest { /** The unique ID of the waitlist, or the literal `default` for the environment's default waitlist. Use `default` when adding the first entry -- the default waitlist is created automatically. */ id: string; /** The email address of the user joining the waitlist. */ email: string; /** Object containing additional key/value pairs collected with the waitlist entry. Supports up to 50 string pairs, with keys up to 40 characters and values up to 600 characters. Values are user-provided -- treat them as untrusted input when rendering or exporting. */ additional_fields?: CreateWaitlistsControllerEntryRequestAdditionalFieldsMap; /** Whether to send the waitlist confirmation email to the user. Defaults to `false`. No email is sent when the waitlist confirmation email is disabled in the environment, even if `send_confirmation_email` is `true`. */ send_confirmation_email?: boolean; } /** The state of the waitlist entry. */ export type WaitlistEntryState = "pending" | "approved" | "denied"; /** Additional fields submitted when the user joined the waitlist. Values are user-provided -- treat them as untrusted input when rendering or exporting. */ export type WaitlistEntryAdditionalFieldsMap = { [key: string]: string | undefined }; export interface WaitlistEntry { /** The unique ID of the waitlist entry. */ id: string; /** The email address of the user on the waitlist. */ email: string; /** The state of the waitlist entry. */ state: WaitlistEntryState; /** The timestamp when the entry was approved, or null if not yet approved. */ approved_at: string | null; /** Additional fields submitted when the user joined the waitlist. Values are user-provided -- treat them as untrusted input when rendering or exporting. */ additional_fields?: WaitlistEntryAdditionalFieldsMap; /** The unique ID of the waitlist the entry belongs to. */ waitlist_id?: string | null; /** An ISO 8601 timestamp. */ created_at: string; /** An ISO 8601 timestamp. */ updated_at: string; /** Distinguishes the Waitlist Entry object. */ object: string; } export type CreateWebhookEndpointsControllerRequestEventsItem = | "agent.blueprint.created" | "agent.blueprint.deleted" | "agent.blueprint.updated" | "agent.instance.created" | "agent.instance.deleted" | "agent.instance.session.created" | "agent.instance.session.revoked" | "agent.registration.created" | "agent.registration.claim.attempt.created" | "agent.registration.claim.completed" | "agent.registration.credential.issued" | "agent.registration.deleted" | "agent.registration.refreshed" | "agent.registration.expired" | "agent.registration.organization.switched" | "agent.registration.revoked" | "authentication.email_verification_succeeded" | "authentication.magic_auth_failed" | "authentication.magic_auth_succeeded" | "authentication.mfa_succeeded" | "authentication.oauth_failed" | "authentication.oauth_succeeded" | "authentication.password_failed" | "authentication.password_succeeded" | "authentication.passkey_failed" | "authentication.passkey_succeeded" | "authentication.sso_failed" | "authentication.sso_started" | "authentication.sso_succeeded" | "authentication.sso_timed_out" | "radar.challenge_created" | "authentication.radar_risk_detected" | "authentication.reauthentication_succeeded" | "api_key.created" | "api_key.revoked" | "api_key.updated" | "connection.activated" | "connection.deactivated" | "connection.saml_certificate_renewal_required" | "connection.saml_certificate_renewed" | "connection.deleted" | "dsync.activated" | "dsync.deleted" | "dsync.group.created" | "dsync.group.deleted" | "dsync.group.updated" | "dsync.group.user_added" | "dsync.group.user_removed" | "dsync.user.created" | "dsync.user.deleted" | "dsync.user.updated" | "email_verification.created" | "group.created" | "group.deleted" | "group.member_added" | "group.member_removed" | "group.updated" | "flag.created" | "flag.deleted" | "flag.updated" | "flag.rule_updated" | "invitation.accepted" | "invitation.created" | "invitation.resent" | "invitation.revoked" | "magic_auth.created" | "organization.created" | "organization.deleted" | "organization.updated" | "organization_domain.created" | "organization_domain.deleted" | "organization_domain.updated" | "organization_domain.verified" | "organization_domain.verification_failed" | "password_reset.created" | "password_reset.succeeded" | "user.created" | "user.updated" | "user.deleted" | "organization_membership.created" | "organization_membership.deleted" | "organization_membership.updated" | "role.created" | "role.deleted" | "role.updated" | "organization_role.created" | "organization_role.deleted" | "organization_role.updated" | "permission.created" | "permission.deleted" | "permission.updated" | "pipes.account_connection.add_failed" | "pipes.account_connection.connected" | "pipes.account_connection.connection_failed" | "pipes.account_connection.disconnected" | "pipes.account_connection.reauthorization_needed" | "pipes.connected_account.connected" | "pipes.connected_account.connection_failed" | "pipes.connected_account.disconnected" | "pipes.connected_account.reauthorization_needed" | "session.created" | "session.revoked" | "waitlist_user.approved" | "waitlist_user.created" | "waitlist_user.denied"; /** The events that the Webhook Endpoint is subscribed to. */ export type CreateWebhookEndpointsControllerRequestEventsList = Array< CreateWebhookEndpointsControllerRequestEventsItem | (string & {}) >; export interface CreateWebhookEndpointsControllerRequest { /** The HTTPS URL where webhooks will be sent. */ endpoint_url?: string; /** The events that the Webhook Endpoint is subscribed to. */ events?: CreateWebhookEndpointsControllerRequestEventsList; } /** Whether the Webhook Endpoint is enabled or disabled. */ export type WebhookEndpointJsonStatus = "enabled" | "disabled"; /** The events that the Webhook Endpoint is subscribed to. */ export type WebhookEndpointJsonEventsList = Array; export interface WebhookEndpointJson { /** Distinguishes the Webhook Endpoint object. */ object?: string; /** Unique identifier of the Webhook Endpoint. */ id?: string; /** The URL to which webhooks are sent. */ endpoint_url?: string; /** The secret used to sign webhook payloads. */ secret?: string | Redacted.Redacted; /** Whether the Webhook Endpoint is enabled or disabled. */ status?: WebhookEndpointJsonStatus; /** The events that the Webhook Endpoint is subscribed to. */ events?: WebhookEndpointJsonEventsList; /** An ISO 8601 timestamp. */ created_at?: string; /** An ISO 8601 timestamp. */ updated_at?: string; } /** Who will own the connected account. `user` (the default) connects the user's own account. `organization` connects the organization's shared account and requires `organization_id`. */ export type DataIntegrationsControllerGetDataIntegrationAuthorizeUrlRequestBodyCase0ConnectionOwner = | "user" | "organization"; /** Connect-time config values for the provider-declared `installation`-scope fields (e.g. a Zendesk `subdomain`), keyed by the config field. Only fields the provider declares may be supplied, and required fields must be provided unless already pinned on the integration. */ export type DataIntegrationsControllerGetDataIntegrationAuthorizeUrlRequestBodyCase0ConfigMap = { [key: string]: string | undefined; }; export interface DataIntegrationsControllerGetDataIntegrationAuthorizeUrlRequestBodyCase0 { /** A mutable, non-unique label. Omit to preserve an existing label; null clears it. Labels are never account identifiers. */ account_display_name?: string | null; /** The ID of the user to authorize. When `connection_owner` is `organization`, this is the user authorizing on behalf of the organization; they must be an active member of the organization and do not become the owner of the resulting connected account. */ user_id: string; /** An organization ID to scope the authorization to a specific organization. Required when `connection_owner` is `organization`. */ organization_id?: string; /** Who will own the connected account. `user` (the default) connects the user's own account. `organization` connects the organization's shared account and requires `organization_id`. */ connection_owner?: | DataIntegrationsControllerGetDataIntegrationAuthorizeUrlRequestBodyCase0ConnectionOwner | (string & {}); /** The URL to redirect the user to after authorization. */ return_to?: string; /** Connect-time config values for the provider-declared `installation`-scope fields (e.g. a Zendesk `subdomain`), keyed by the config field. Only fields the provider declares may be supplied, and required fields must be provided unless already pinned on the integration. */ config?: DataIntegrationsControllerGetDataIntegrationAuthorizeUrlRequestBodyCase0ConfigMap; } /** Who will own the connected account. `user` (the default) connects the user's own account. `organization` connects the organization's shared account and requires `organization_id`. */ export type DataIntegrationsControllerGetDataIntegrationAuthorizeUrlRequestBodyCase1ConnectionOwner = | "user" | "organization"; /** Connect-time config values for the provider-declared `installation`-scope fields (e.g. a Zendesk `subdomain`), keyed by the config field. Only fields the provider declares may be supplied, and required fields must be provided unless already pinned on the integration. */ export type DataIntegrationsControllerGetDataIntegrationAuthorizeUrlRequestBodyCase1ConfigMap = { [key: string]: string | undefined; }; export interface DataIntegrationsControllerGetDataIntegrationAuthorizeUrlRequestBodyCase1 { /** A mutable, non-unique label. Omit to preserve an existing label; null clears it. Labels are never account identifiers. */ account_display_name?: string | null; /** The ID of the user to authorize. When `connection_owner` is `organization`, this is the user authorizing on behalf of the organization; they must be an active member of the organization and do not become the owner of the resulting connected account. */ user_id: string; /** An organization ID to scope the authorization to a specific organization. Required when `connection_owner` is `organization`. */ organization_id?: string; /** Who will own the connected account. `user` (the default) connects the user's own account. `organization` connects the organization's shared account and requires `organization_id`. */ connection_owner?: | DataIntegrationsControllerGetDataIntegrationAuthorizeUrlRequestBodyCase1ConnectionOwner | (string & {}); /** The URL to redirect the user to after authorization. */ return_to?: string; /** Connect-time config values for the provider-declared `installation`-scope fields (e.g. a Zendesk `subdomain`), keyed by the config field. Only fields the provider declares may be supplied, and required fields must be provided unless already pinned on the integration. */ config?: DataIntegrationsControllerGetDataIntegrationAuthorizeUrlRequestBodyCase1ConfigMap; /** Create another connection. The first connection for an owner shape fills the compatibility slot; later connections are standard. Creating an additional connection is not yet available: until it is, `add` succeeds only when the owner has no connection for this integration and otherwise returns 404 `multiple_connections_unavailable`. Omit `connection_intent` to use the compatibility connection, or send `reauthorize` with `connected_account_id` to reauthorize one exact connection. */ connection_intent: string; } /** Who will own the connected account. `user` (the default) connects the user's own account. `organization` connects the organization's shared account and requires `organization_id`. */ export type DataIntegrationsControllerGetDataIntegrationAuthorizeUrlRequestBodyCase2ConnectionOwner = | "user" | "organization"; /** Connect-time config values for the provider-declared `installation`-scope fields (e.g. a Zendesk `subdomain`), keyed by the config field. Only fields the provider declares may be supplied, and required fields must be provided unless already pinned on the integration. */ export type DataIntegrationsControllerGetDataIntegrationAuthorizeUrlRequestBodyCase2ConfigMap = { [key: string]: string | undefined; }; export interface DataIntegrationsControllerGetDataIntegrationAuthorizeUrlRequestBodyCase2 { /** A mutable, non-unique label. Omit to preserve an existing label; null clears it. Labels are never account identifiers. */ account_display_name?: string | null; /** The ID of the user to authorize. When `connection_owner` is `organization`, this is the user authorizing on behalf of the organization; they must be an active member of the organization and do not become the owner of the resulting connected account. */ user_id: string; /** An organization ID to scope the authorization to a specific organization. Required when `connection_owner` is `organization`. */ organization_id?: string; /** Who will own the connected account. `user` (the default) connects the user's own account. `organization` connects the organization's shared account and requires `organization_id`. */ connection_owner?: | DataIntegrationsControllerGetDataIntegrationAuthorizeUrlRequestBodyCase2ConnectionOwner | (string & {}); /** The URL to redirect the user to after authorization. */ return_to?: string; /** Connect-time config values for the provider-declared `installation`-scope fields (e.g. a Zendesk `subdomain`), keyed by the config field. Only fields the provider declares may be supplied, and required fields must be provided unless already pinned on the integration. */ config?: DataIntegrationsControllerGetDataIntegrationAuthorizeUrlRequestBodyCase2ConfigMap; /** Reauthorize exactly the connection named by `connected_account_id`. */ connection_intent: string; /** The exact connected account to reauthorize. Required with `connection_intent: reauthorize`. */ connected_account_id: string; } export type DataIntegrationsControllerGetDataIntegrationAuthorizeUrlRequestBody = | DataIntegrationsControllerGetDataIntegrationAuthorizeUrlRequestBodyCase0 | DataIntegrationsControllerGetDataIntegrationAuthorizeUrlRequestBodyCase1 | DataIntegrationsControllerGetDataIntegrationAuthorizeUrlRequestBodyCase2; export interface DataIntegrationsControllerGetDataIntegrationAuthorizeUrlRequest { /** The slug identifier of the provider (e.g., `github`, `slack`, `notion`). */ slug: string; body: DataIntegrationsControllerGetDataIntegrationAuthorizeUrlRequestBody; } export interface DataIntegrationAuthorizeUrlResponse { /** The OAuth authorization URL to redirect the user to. */ url?: string; } /** Which connection to vend from. `user` (the default) vends the user's own connection and requires `user_id`. `organization` vends the organization's shared connection and requires `organization_id`. */ export type DataIntegrationsControllerVendCredentialsRequestConnectionOwner = | "user" | "organization"; export interface DataIntegrationsControllerVendCredentialsRequest { /** The identifier of the integration. */ slug: string; /** A [User](/reference/authkit/user) identifier. When `connection_owner` is `organization`, this is the user the credentials are vended on behalf of; they must be an active member of the organization. */ user_id: string; /** An [Organization](/reference/organization) identifier. Optional parameter to scope the connection to a specific organization. Required when `connection_owner` is `organization`. */ organization_id?: string; /** A [connected account](/reference/pipes/connected-account) identifier. Use this to select a specific connection when the user has several for this provider. */ connected_account_id?: string; /** Which connection to vend from. `user` (the default) vends the user's own connection and requires `user_id`. `organization` vends the organization's shared connection and requires `organization_id`. */ connection_owner?: | DataIntegrationsControllerVendCredentialsRequestConnectionOwner | (string & {}); /** Set to `true` to use the plural connection contract. If no `connected_account_id` is supplied and several connections match, the request returns `account_selection_required`. When omitted or `false`, only the compatibility connection is considered. */ supports_multiple_connections?: boolean; } /** The scopes granted to the access token. Present for `oauth` and `client_credentials` credentials; absent for `api_key`. */ export type DataIntegrationVendedCredentialCase0ScopesList = Array; /** If the integration has requested scopes that aren't present on the access token, they're listed here. Present for `oauth` and `client_credentials` credentials; absent for `api_key`. */ export type DataIntegrationVendedCredentialCase0MissingScopesList = Array; /** Provider-declared, non-secret config from the installation snapshot, with current defaults for unset fields. Includes both integration- and installation-scope fields; omits undeclared fields and fields marked secret. Use these values to address a per-tenant host, such as Snowflake's `account` or Zendesk's `subdomain`. Empty when no values are disclosable. Changes to integration or organization pins require reconnecting or explicitly rebinding the connection. Defaults are live and can differ from a cached token's audience until refresh or re-mint. */ export type DataIntegrationVendedCredentialCase0ConfigMap = { [key: string]: string | undefined }; export interface DataIntegrationVendedCredentialCase0 { /** Distinguishes the credential object. */ object: string; /** The authentication method for this credential. Additional values may be added in the future; handle unknown values gracefully. */ auth_method: string; /** The vended secret. An OAuth access token when `auth_method` is `oauth`, the API key when `api_key`, or the client-credentials access token when `client_credentials`. */ value: string; /** The ISO-8601 formatted timestamp indicating when the credential expires, or `null` if it does not expire. Present for `oauth` and `client_credentials` credentials; absent for `api_key`. */ expires_at: string | null; /** The scopes granted to the access token. Present for `oauth` and `client_credentials` credentials; absent for `api_key`. */ scopes: DataIntegrationVendedCredentialCase0ScopesList; /** If the integration has requested scopes that aren't present on the access token, they're listed here. Present for `oauth` and `client_credentials` credentials; absent for `api_key`. */ missing_scopes: DataIntegrationVendedCredentialCase0MissingScopesList; /** Provider-declared, non-secret config from the installation snapshot, with current defaults for unset fields. Includes both integration- and installation-scope fields; omits undeclared fields and fields marked secret. Use these values to address a per-tenant host, such as Snowflake's `account` or Zendesk's `subdomain`. Empty when no values are disclosable. Changes to integration or organization pins require reconnecting or explicitly rebinding the connection. Defaults are live and can differ from a cached token's audience until refresh or re-mint. */ config: DataIntegrationVendedCredentialCase0ConfigMap; } /** Provider-declared, non-secret config from the installation snapshot, with current defaults for unset fields. Includes both integration- and installation-scope fields; omits undeclared fields and fields marked secret. Use these values to address a per-tenant host, such as Snowflake's `account` or Zendesk's `subdomain`. Empty when no values are disclosable. Changes to integration or organization pins require reconnecting or explicitly rebinding the connection. Defaults are live and can differ from a cached token's audience until refresh or re-mint. */ export type DataIntegrationVendedCredentialCase1ConfigMap = { [key: string]: string | undefined }; export interface DataIntegrationVendedCredentialCase1 { /** Distinguishes the credential object. */ object: string; /** The authentication method for this credential. Additional values may be added in the future; handle unknown values gracefully. */ auth_method: string; /** The API key secret. */ value: string; /** Provider-declared, non-secret config from the installation snapshot, with current defaults for unset fields. Includes both integration- and installation-scope fields; omits undeclared fields and fields marked secret. Use these values to address a per-tenant host, such as Snowflake's `account` or Zendesk's `subdomain`. Empty when no values are disclosable. Changes to integration or organization pins require reconnecting or explicitly rebinding the connection. Defaults are live and can differ from a cached token's audience until refresh or re-mint. */ config: DataIntegrationVendedCredentialCase1ConfigMap; } /** The scopes granted to the access token. */ export type DataIntegrationVendedCredentialCase2ScopesList = Array; /** If the integration has requested scopes that aren't present on the access token, they're listed here. The scopes granted to a client-credentials token are governed by the connected organization's client application, so the integration's configured scopes are requests or defaults rather than guarantees. */ export type DataIntegrationVendedCredentialCase2MissingScopesList = Array; /** Non-sensitive fields captured from the provider token response (e.g. Salesforce `instance_url`), as configured for the provider. Only present for `client_credentials` credentials. */ export type DataIntegrationVendedCredentialCase2MetadataMap = { [key: string]: unknown | undefined; }; /** Provider-declared, non-secret config from the installation snapshot, with current defaults for unset fields. Includes both integration- and installation-scope fields; omits undeclared fields and fields marked secret. Use these values to address a per-tenant host, such as Snowflake's `account` or Zendesk's `subdomain`. Empty when no values are disclosable. Changes to integration or organization pins require reconnecting or explicitly rebinding the connection. Defaults are live and can differ from a cached token's audience until refresh or re-mint. */ export type DataIntegrationVendedCredentialCase2ConfigMap = { [key: string]: string | undefined }; export interface DataIntegrationVendedCredentialCase2 { /** Distinguishes the credential object. */ object: string; /** The authentication method for this credential. Additional values may be added in the future; handle unknown values gracefully. */ auth_method: string; /** The client-credentials access token. */ value: string; /** The ISO-8601 formatted timestamp indicating when the credential expires. */ expires_at: string | null; /** The scopes granted to the access token. */ scopes: DataIntegrationVendedCredentialCase2ScopesList; /** If the integration has requested scopes that aren't present on the access token, they're listed here. The scopes granted to a client-credentials token are governed by the connected organization's client application, so the integration's configured scopes are requests or defaults rather than guarantees. */ missing_scopes: DataIntegrationVendedCredentialCase2MissingScopesList; /** Non-sensitive fields captured from the provider token response (e.g. Salesforce `instance_url`), as configured for the provider. Only present for `client_credentials` credentials. */ metadata: DataIntegrationVendedCredentialCase2MetadataMap; /** Provider-declared, non-secret config from the installation snapshot, with current defaults for unset fields. Includes both integration- and installation-scope fields; omits undeclared fields and fields marked secret. Use these values to address a per-tenant host, such as Snowflake's `account` or Zendesk's `subdomain`. Empty when no values are disclosable. Changes to integration or organization pins require reconnecting or explicitly rebinding the connection. Defaults are live and can differ from a cached token's audience until refresh or re-mint. */ config: DataIntegrationVendedCredentialCase2ConfigMap; } export type DataIntegrationVendedCredential = | DataIntegrationVendedCredentialCase0 | DataIntegrationVendedCredentialCase1 | DataIntegrationVendedCredentialCase2; export interface DataIntegrationCredentialsResponseCase0 { /** Indicates credentials are available. */ active: boolean; /** The credential object containing the vended secret. */ credential: DataIntegrationVendedCredential; } /** The reason credentials are unavailable. Additional values may be added in the future; handle unknown values gracefully. - `"not_installed"`: The user does not have the integration installed. - `"needs_reauthorization"`: The user needs to reauthorize the integration. */ export type DataIntegrationCredentialsResponseCase1Error = | "not_installed" | "needs_reauthorization"; export interface DataIntegrationCredentialsResponseCase1 { /** Indicates credentials are not available. */ active: boolean; /** The reason credentials are unavailable. Additional values may be added in the future; handle unknown values gracefully. - `"not_installed"`: The user does not have the integration installed. - `"needs_reauthorization"`: The user needs to reauthorize the integration. */ error: DataIntegrationCredentialsResponseCase1Error; } export type DataIntegrationCredentialsResponse = | DataIntegrationCredentialsResponseCase0 | DataIntegrationCredentialsResponseCase1; export type DataIntegrationsControllerVendCredentialsResponse = DataIntegrationCredentialsResponse; export interface DeactivateUserlandUserOrganizationMembershipsControllerRequest { /** The unique ID of the organization membership. */ id: string; } /** The status of the organization membership. One of `active`, `inactive`, or `pending`. */ export type DeactivateUserlandUserOrganizationMembershipsControllerResponseStatus = | "active" | "inactive" | "pending"; /** An object containing IdP-sourced attributes from the linked [Directory User](/reference/directory-sync/directory-user) or [SSO Profile](/reference/sso/profile). Directory User attributes take precedence when both are linked. */ export type DeactivateUserlandUserOrganizationMembershipsControllerResponseCustomAttributesMap = { [key: string]: unknown | undefined; }; /** The list of roles assigned to the user within the organization. */ export type DeactivateUserlandUserOrganizationMembershipsControllerResponseRolesList = Array; export interface DeactivateUserlandUserOrganizationMembershipsControllerResponse { /** Distinguishes the organization membership object. */ object: string; /** The unique ID of the organization membership. */ id: string; /** The ID of the user. */ user_id: string; /** The ID of the organization which the user belongs to. */ organization_id: string; /** The status of the organization membership. One of `active`, `inactive`, or `pending`. */ status: DeactivateUserlandUserOrganizationMembershipsControllerResponseStatus; /** Whether this organization membership is managed by a directory sync connection. */ directory_managed: boolean; /** The name of the organization which the user belongs to. */ organization_name?: string; /** An object containing IdP-sourced attributes from the linked [Directory User](/reference/directory-sync/directory-user) or [SSO Profile](/reference/sso/profile). Directory User attributes take precedence when both are linked. */ custom_attributes?: DeactivateUserlandUserOrganizationMembershipsControllerResponseCustomAttributesMap; /** An ISO 8601 timestamp. */ created_at: string; /** An ISO 8601 timestamp. */ updated_at: string; /** The primary role assigned to the user within the organization. */ role: SlimRole; /** The list of roles assigned to the user within the organization. */ roles: DeactivateUserlandUserOrganizationMembershipsControllerResponseRolesList; /** The user that belongs to the organization through this membership. */ user: UserlandUser; } export interface DecryptJumpWireWebKeyControllerRequest { /** Base64-encoded encrypted data key to decrypt. */ keys: string; } export interface DecryptResponse { /** Base64-encoded decrypted data key. */ data_key: string; /** Unique identifier of the decrypted data key. */ id: string; } export interface DeleteAgentBlueprintsControllerRequest { /** The unique ID of the agent blueprint. */ agent_blueprint_id: string; } export interface DeleteAgentBlueprintsControllerResponse {} export interface DeleteAgentInstancesControllerRequest { /** The unique ID of the agent instance. */ agent_instance_id: string; } export interface DeleteAgentInstancesControllerResponse {} export interface DeleteApiKeysControllerRequest { /** The unique ID of the API key. */ id: string; } export interface DeleteApiKeysControllerResponse {} export interface DeleteApplicationCredentialsControllerRequest { /** The unique ID of the client secret. */ id: string; } export interface DeleteApplicationCredentialsControllerResponse {} export interface DeleteApplicationsControllerRequest { /** The application ID or client ID of the Connect Application. */ id: string; } export interface DeleteApplicationsControllerResponse {} export interface DeleteAuthenticationFactorsControllerRequest { /** The unique ID of the Factor. */ id: string; } export interface DeleteAuthenticationFactorsControllerResponse {} export interface DeleteAuthkitOauthResourcesControllerRequest { /** The ID of the MCP resource indicator to delete. */ id: string; } export interface DeleteAuthkitOauthResourcesControllerResponse {} export interface DeleteAuthorizationOrganizationRolesControllerRequest { /** The ID of the organization. */ organizationId: string; /** The slug of the role. */ slug: string; } export interface DeleteAuthorizationOrganizationRolesControllerResponse {} export interface DeleteAuthorizationPermissionsControllerRequest { /** A unique key to reference the permission. Must be lowercase and contain only letters, numbers, hyphens, underscores, colons, periods, and asterisks. */ slug: string; } export interface DeleteAuthorizationPermissionsControllerResponse {} export interface DeleteAuthorizationResourcesByExternalIdControllerByExternalIdRequest { /** The ID of the organization that owns the resource. */ organization_id: string; /** The slug of the resource type. */ resource_type_slug: string; /** An identifier you provide to reference the resource in your system. */ external_id: string; /** If true, deletes all descendant resources and role assignments. If not set and the resource has children or assignments, the request will fail. */ cascade_delete?: boolean; } export interface DeleteAuthorizationResourcesByExternalIdControllerByExternalIdResponse {} export interface DeleteAuthorizationResourcesControllerRequest { /** The ID of the authorization resource. */ resource_id: string; /** If true, deletes all descendant resources and role assignments. If not set and the resource has children or assignments, the request will fail. */ cascade_delete?: boolean; } export interface DeleteAuthorizationResourcesControllerResponse {} export interface DeleteAuthorizedApplicationsControllerRequest { /** The ID of the user. */ user_id: string; /** The ID or client ID of the application. */ application_id: string; } export interface DeleteAuthorizedApplicationsControllerResponse {} export interface DeleteConnectionsControllerRequest { /** Unique identifier for the Connection. */ id: string; } export interface DeleteConnectionsControllerResponse {} export interface DeleteDataIntegrationsManagementControllerDataIntegrationRequest { /** The slug identifier of the data integration. */ slug: string; } export interface DeleteDataIntegrationsManagementControllerDataIntegrationResponse {} export interface DeleteDataIntegrationsManagementControllerOrganizationDataIntegrationRequest { /** The slug identifier of the data integration. */ slug: string; } export interface DeleteDataIntegrationsManagementControllerOrganizationDataIntegrationResponse {} export interface DeleteDataIntegrationsOrganizationControllerOrganizationDataInstallationRequest { /** An [Organization](/reference/organization) identifier. */ organization_id: string; /** The slug identifier of the provider (e.g., `github`, `slack`, `notion`). */ slug: string; /** Set to `true` to use the plural connection contract. When omitted or `false`, only the compatibility connection is considered. */ supports_multiple_connections?: boolean; /** A [connected account](/reference/pipes/connected-account) identifier. Use this to select the connection to delete. */ connected_account_id?: string; } export interface DeleteDataIntegrationsOrganizationControllerOrganizationDataInstallationResponse {} export interface DeleteDataIntegrationsUserManagementControllerUserDataInstallationRequest { /** A [User](/reference/authkit/user) identifier. */ user_id: string; /** The slug identifier of the provider (e.g., `github`, `slack`, `notion`). */ slug: string; /** An [Organization](/reference/organization) identifier. Optional parameter if the connection is scoped to an organization. */ organization_id?: string; /** Set to `true` to use the plural connection contract. When omitted or `false`, only the compatibility connection is considered. */ supports_multiple_connections?: boolean; /** A [connected account](/reference/pipes/connected-account) identifier. Use this to select the connection to delete. */ connected_account_id?: string; } export interface DeleteDataIntegrationsUserManagementControllerUserDataInstallationResponse {} export interface DeleteDirectoriesControllerDirectoryRequest { /** Unique identifier for the Directory. */ id: string; } export interface DeleteDirectoriesControllerDirectoryResponse {} export interface DeleteFlagTargetsControllerTargetRequest { /** The unique slug identifier of the feature flag. */ slug: string; /** The resource ID in format "user_" or "org_". */ resourceId: string; } export interface DeleteFlagTargetsControllerTargetResponse {} export interface DeleteGroupsControllerRequest { /** The ID of the organization. */ organizationId: string; /** The ID of the group. */ groupId: string; } export interface DeleteGroupsControllerResponse {} export interface DeleteItContactsControllerRequest { /** The ID of the organization. */ organization_id: string; /** The ID of the IT contact. */ contact_id: string; } export interface DeleteItContactsControllerResponse {} export interface DeleteJumpWireWebDataVaultControllerRequest { /** Unique identifier of the object. */ id: string; /** Expected current version for optimistic locking. */ version_check?: string; } export interface DeleteObjectResponse { /** Name of the deleted object. */ name: string; /** Whether the deletion succeeded. */ success: boolean; } export interface DeleteOrganizationDomainsControllerRequest { /** Unique identifier of the organization domain. */ id: string; } export interface DeleteOrganizationDomainsControllerResponse {} export interface DeleteOrganizationsControllerOrganizationRequest { /** Unique identifier of the Organization. */ id: string; } export interface DeleteOrganizationsControllerOrganizationResponse {} export interface DeleteRedirectUrisControllerRequest { /** The ID of the redirect URI to delete. */ id: string; } export interface DeleteRedirectUrisControllerResponse {} export interface DeleteSamlIdpSigningCertificatesControllerRequest { /** Unique identifier for the Connection. */ connectionId: string; /** Unique identifier for the Identity Provider signing certificate. */ certificateId: string; } export interface DeleteSamlIdpSigningCertificatesControllerResponse {} export interface DeleteSamlSpEncryptionCertificatesControllerRequest { /** Unique identifier for the Connection. */ connectionId: string; /** Unique identifier for the Service Provider encryption key pair. WorkOS holds the corresponding private key, which is never exposed. */ certificateId: string; } export interface DeleteSamlSpEncryptionCertificatesControllerResponse {} export interface DeleteSamlSpSigningCertificatesControllerRequest { /** Unique identifier for the Connection. */ connectionId: string; /** Unique identifier for the Service Provider signing key pair. WorkOS holds the corresponding private key, which is never exposed. */ certificateId: string; } export interface DeleteSamlSpSigningCertificatesControllerResponse {} export interface DeleteUserlandUserOrganizationMembershipsControllerRequest { /** The unique ID of the organization membership. */ id: string; } export interface DeleteUserlandUserOrganizationMembershipsControllerResponse {} export interface DeleteWaitlistEntriesControllerRequest { /** The unique ID of the waitlist entry. */ id: string; } export interface DeleteWaitlistEntriesControllerResponse {} export interface DeleteWebhookEndpointsControllerRequest { /** Unique identifier of the Webhook Endpoint. */ id: string; } export interface DeleteWebhookEndpointsControllerResponse {} export interface DescribeJumpWireWebDataVaultControllerRequest { /** Unique identifier of the object. */ id: string; } /** An encrypted object's metadata (value excluded). */ export interface ObjectWithoutValue { /** Unique identifier of the object. */ id: string; metadata: ObjectMetadata; /** Unique name of the object. */ name: string; } export interface DirectoriesControllerFindRequest { /** Unique identifier for the Directory. */ id: string; } /** The type of external Directory Provider integrated with. */ export type DirectoryType = | "azure scim v2.0" | "bamboohr" | "breathe hr" | "cezanne hr" | "cyberark scim v2.0" | "fourth hr" | "generic scim v2.0" | "gsuite directory" | "hibob" | "sailpoint scim v2.0" | "jump cloud scim v2.0" | "okta scim v2.0" | "onelogin scim v2.0" | "people hr" | "personio" | "pingfederate scim v2.0" | "rippling scim v2.0" | "s3" | "sftp" | "sftp workday" | "workday"; /** Describes whether the Directory has been successfully connected to an external provider. */ export type DirectoryState = | "linked" | "validating" | "invalid_credentials" | "unlinked" | "deleting"; /** Counts of active and inactive directory users. */ export interface DirectoryMetadataUsers { /** Count of active directory users. */ active: number; /** Count of inactive directory users. */ inactive: number; } /** Aggregate counts of directory users and groups synced from the provider. */ export interface DirectoryMetadata { /** Counts of active and inactive directory users. */ users: DirectoryMetadataUsers; /** Count of directory groups. */ groups: number; } export interface Directory { /** Distinguishes the Directory object. */ object?: string; /** Unique identifier for the Directory. */ id?: string; /** The unique identifier for the Organization in which the directory resides. */ organization_id?: string; /** External Key for the Directory. */ external_key?: string; /** The type of external Directory Provider integrated with. */ type?: DirectoryType; /** Describes whether the Directory has been successfully connected to an external provider. */ state?: DirectoryState; /** The name of the directory. */ name?: string; /** The URL associated with an Enterprise Client. */ domain?: string; /** Aggregate counts of directory users and groups synced from the provider. */ metadata?: DirectoryMetadata; /** An ISO 8601 timestamp. */ created_at?: string; /** An ISO 8601 timestamp. */ updated_at?: string; } export interface DirectoryGroupsControllerFindRequest { /** Unique identifier for the Directory Group. */ id: string; } /** The raw attributes received from the directory provider. */ export type DirectoryGroupRawAttributesMap = { [key: string]: unknown | undefined }; export interface DirectoryGroup { /** Distinguishes the Directory Group object. */ object?: string; /** Unique identifier for the Directory Group. */ id?: string; /** Unique identifier for the group, assigned by the Directory Provider. Different Directory Providers use different ID formats. */ idp_id?: string; /** The identifier of the Directory the Directory Group belongs to. */ directory_id?: string; /** The identifier for the Organization in which the Directory resides. */ organization_id?: string; /** The name of the Directory Group. */ name?: string; /** The raw attributes received from the directory provider. */ raw_attributes?: DirectoryGroupRawAttributesMap; /** An ISO 8601 timestamp. */ created_at?: string; /** An ISO 8601 timestamp. */ updated_at?: string; } export interface DirectoryUsersControllerFindRequest { /** Unique identifier for the Directory User. */ id: string; } export interface DirectoryUserWithGroupsEmailsItem { /** Whether this is the primary email address. */ primary?: boolean; /** The type of email address. */ type?: string; /** The email address value. */ value?: string | null; } /** A list of email addresses for the user. */ export type DirectoryUserWithGroupsEmailsList = Array; /** The state of the user. */ export type DirectoryUserWithGroupsState = "active" | "suspended" | "inactive"; /** The raw attributes received from the directory provider. */ export type DirectoryUserWithGroupsRawAttributesMap = { [key: string]: unknown | undefined }; /** An object containing the custom attribute mapping for the Directory Provider. */ export type DirectoryUserWithGroupsCustomAttributesMap = { [key: string]: unknown | undefined }; /** All roles assigned to the user. */ export type DirectoryUserWithGroupsRolesList = Array; /** The directory groups the user belongs to. Deprecated: starting May 1, 2026, this field returns an empty array by default for newly created teams. Existing teams currently depending on this field should migrate to the new access pattern for better throughput performance -- the field is unbounded by user, so users with many group memberships produce large, slow response payloads. Use the List Directory Groups endpoint with a `user` filter to fetch a user's group memberships. */ export type DirectoryUserWithGroupsGroupsList = Array; export interface DirectoryUserWithGroups { /** Distinguishes the Directory User object. */ object?: string; /** Unique identifier for the Directory User. */ id?: string; /** The identifier of the Directory the Directory User belongs to. */ directory_id?: string; /** The identifier for the Organization in which the Directory resides. */ organization_id?: string; /** Unique identifier for the user, assigned by the Directory Provider. Different Directory Providers use different ID formats. */ idp_id?: string; /** The email address of the user. */ email?: string | null; /** The first name of the user. */ first_name?: string | null; /** The last name of the user. */ last_name?: string | null; /** The full name of the user. */ name?: string | null; /** A list of email addresses for the user. */ emails?: DirectoryUserWithGroupsEmailsList; /** The job title of the user. */ job_title?: string | null; /** The username of the user. */ username?: string | null; /** The state of the user. */ state?: DirectoryUserWithGroupsState; /** The raw attributes received from the directory provider. */ raw_attributes?: DirectoryUserWithGroupsRawAttributesMap; /** An object containing the custom attribute mapping for the Directory Provider. */ custom_attributes?: DirectoryUserWithGroupsCustomAttributesMap; role?: SlimRole; /** All roles assigned to the user. */ roles?: DirectoryUserWithGroupsRolesList; /** An ISO 8601 timestamp. */ created_at?: string; /** An ISO 8601 timestamp. */ updated_at?: string; /** The directory groups the user belongs to. Deprecated: starting May 1, 2026, this field returns an empty array by default for newly created teams. Existing teams currently depending on this field should migrate to the new access pattern for better throughput performance -- the field is unbounded by user, so users with many group memberships produce large, slow response payloads. Use the List Directory Groups endpoint with a `user` filter to fetch a user's group memberships. */ groups?: DirectoryUserWithGroupsGroupsList; } export interface DisableFeatureFlagsControllerFlagRequest { /** A unique key to reference the Feature Flag. */ slug: string; } export interface DisableFeatureFlagsControllerFlagResponseOwner { /** The email address of the flag owner. */ email: string; /** The first name of the flag owner. */ first_name: string | null; /** The last name of the flag owner. */ last_name: string | null; } /** Labels assigned to the Feature Flag for categorizing and filtering. */ export type DisableFeatureFlagsControllerFlagResponseTagsList = Array; export interface DisableFeatureFlagsControllerFlagResponse { /** Distinguishes the Feature Flag object. */ object: string; /** Unique identifier of the Feature Flag. */ id: string; /** A unique key to reference the Feature Flag. */ slug: string; /** A descriptive name for the Feature Flag. This field does not need to be unique. */ name: string; /** A description for the Feature Flag. */ description: string | null; /** The owner of the Feature Flag. */ owner: DisableFeatureFlagsControllerFlagResponseOwner | null; /** Labels assigned to the Feature Flag for categorizing and filtering. */ tags: DisableFeatureFlagsControllerFlagResponseTagsList; /** Specifies whether the Feature Flag is active for the current environment. */ enabled: boolean; /** The value returned for users and organizations who don't match any configured targeting rules. */ default_value: boolean; /** An ISO 8601 timestamp. */ created_at: string; /** An ISO 8601 timestamp. */ updated_at: string; } export interface EnableFeatureFlagsControllerFlagRequest { /** A unique key to reference the Feature Flag. */ slug: string; } export type EnableFeatureFlagsControllerFlagResponseOwner = DisableFeatureFlagsControllerFlagResponseOwner; /** Labels assigned to the Feature Flag for categorizing and filtering. */ export type EnableFeatureFlagsControllerFlagResponseTagsList = Array; export interface EnableFeatureFlagsControllerFlagResponse { /** Distinguishes the Feature Flag object. */ object: string; /** Unique identifier of the Feature Flag. */ id: string; /** A unique key to reference the Feature Flag. */ slug: string; /** A descriptive name for the Feature Flag. This field does not need to be unique. */ name: string; /** A description for the Feature Flag. */ description: string | null; /** The owner of the Feature Flag. */ owner: DisableFeatureFlagsControllerFlagResponseOwner | null; /** Labels assigned to the Feature Flag for categorizing and filtering. */ tags: EnableFeatureFlagsControllerFlagResponseTagsList; /** Specifies whether the Feature Flag is active for the current environment. */ enabled: boolean; /** The value returned for users and organizations who don't match any configured targeting rules. */ default_value: boolean; /** An ISO 8601 timestamp. */ created_at: string; /** An ISO 8601 timestamp. */ updated_at: string; } export interface ExportAuditLogExportsControllerRequest { /** The unique ID of the Audit Log Export. */ auditLogExportId: string; } export interface FeatureFlagsControllerFindBySlugRequest { /** A unique key to reference the Feature Flag. */ slug: string; } export type FlagOwner = DisableFeatureFlagsControllerFlagResponseOwner; /** Labels assigned to the Feature Flag for categorizing and filtering. */ export type FlagTagsList = Array; export interface Flag { /** Distinguishes the Feature Flag object. */ object?: string; /** Unique identifier of the Feature Flag. */ id?: string; /** A unique key to reference the Feature Flag. */ slug?: string; /** A descriptive name for the Feature Flag. This field does not need to be unique. */ name?: string; /** A description for the Feature Flag. */ description?: string | null; /** The owner of the Feature Flag. */ owner?: DisableFeatureFlagsControllerFlagResponseOwner | null; /** Labels assigned to the Feature Flag for categorizing and filtering. */ tags?: FlagTagsList; /** Specifies whether the Feature Flag is active for the current environment. */ enabled?: boolean; /** The value returned for users and organizations who don't match any configured targeting rules. */ default_value?: boolean; /** An ISO 8601 timestamp. */ created_at?: string; /** An ISO 8601 timestamp. */ updated_at?: string; } export interface GetAgentAdminControllerRegistrationRequest { /** The unique ID of the agent registration. */ id: string; } /** The agent identity associated with this registration. */ export interface AgentRegistrationAgentIdentity { /** Unique identifier of the agent identity. */ id: string; /** Identifier of the AuthKit user the agent identity is bound to, or `null` when the agent is not associated with a user. */ userland_user_id: string | null; /** The timestamp when the agent identity was created. */ created_at: string; /** The timestamp when the agent identity was last updated. */ updated_at: string; } /** The current verification status of the registration. */ export type AgentRegistrationStatus = "unverified" | "verified" | "expired" | "revoked"; /** The kind of agent registration. */ export type AgentRegistrationKind = "anonymous" | "service_auth" | "identity_assertion"; export interface AgentRegistrationClaimClaimCompletion { /** Unique identifier of the claim completion. */ id: string; /** The timestamp when the claim completion was created. */ created_at: string; /** The timestamp when the claim completion was last updated. */ updated_at: string; /** The timestamp when the claim completion expires. */ expires_at: string; /** The timestamp when the claim was completed. */ claimed_at: string; } export interface AgentRegistrationClaim { /** Unique identifier of the claim. */ id: string; /** The completion record for the claim, or `null` if the claim has not been completed. */ claim_completion: AgentRegistrationClaimClaimCompletion | null; /** The timestamp when the claim was created. */ created_at: string; /** The timestamp when the claim was last updated. */ updated_at: string; /** The timestamp when the claim expires. */ expires_at: string; } export interface AgentRegistration { /** Unique identifier of the agent registration. */ id: string; /** The agent identity associated with this registration. */ agent_identity: AgentRegistrationAgentIdentity; /** Identifier of the organization the agent is registered to. */ organization_id: string; /** The current verification status of the registration. */ status: AgentRegistrationStatus; /** The kind of agent registration. */ kind: AgentRegistrationKind; /** The claim associated with this registration, or `null` if the registration has no claim. */ claim: AgentRegistrationClaim | null; /** The timestamp when the registration was created. */ created_at: string; /** The timestamp when the registration was last updated. */ updated_at: string; } export interface GetAgentBlueprintsControllerRequest { /** The unique ID of the agent blueprint. */ agent_blueprint_id: string; } export interface GetAgentInstancesControllerRequest { /** The unique ID of the agent instance. */ agent_instance_id: string; } /** Whether the instance acts on behalf of a specific user (`delegated`) or as itself (`autonomous`). */ export type AgentInstanceType = "delegated" | "autonomous"; export interface AgentInstance { /** Distinguishes the agent instance object. */ object: string; /** Unique identifier of the agent instance. */ id: string; /** The blueprint this instance was minted from. */ agent_blueprint_id: string; /** The organization the instance acts within. */ organization_id: string; /** The organization membership of the delegating user; `null` for autonomous instances. */ organization_membership_id: string | null; /** Whether the instance acts on behalf of a specific user (`delegated`) or as itself (`autonomous`). */ type: AgentInstanceType; /** Timestamp when the agent instance was created. */ created_at: string; /** Timestamp when the agent instance was last updated. */ updated_at: string; } export interface GetAgentInstanceSessionsControllerRequest { /** The unique ID of the agent instance session. */ agent_instance_session_id: string; } /** Derived from `revoked_at` and `expires_at` at read time; a revoked session stays `revoked` even after it expires. */ export type AgentInstanceSessionStatus = "active" | "revoked" | "expired"; export interface AgentInstanceSession { /** Distinguishes the agent instance session object. */ object: string; /** Unique identifier of the agent instance session. */ id: string; /** The agent instance the session belongs to. */ agent_instance_id: string; /** Derived from `revoked_at` and `expires_at` at read time; a revoked session stays `revoked` even after it expires. */ status: AgentInstanceSessionStatus; /** Timestamp when the session expires. */ expires_at: string; /** Timestamp when the session was revoked; `null` if it has not been revoked. */ revoked_at: string | null; /** Timestamp when the session was created. */ created_at: string; /** Timestamp when the session was last updated. */ updated_at: string; } export interface GetAuthenticationFactorsControllerRequest { /** The unique ID of the Factor. */ id: string; } /** The type of the factor to enroll. */ export type AuthenticationFactorType = "generic_otp" | "sms" | "totp" | "webauthn"; /** SMS-based authentication factor details. */ export type AuthenticationFactorSms = AuthenticationFactorEnrolledSms; /** TOTP-based authentication factor details. */ export interface AuthenticationFactorTotp { /** Your application or company name displayed in the user's authenticator app. Defaults to your WorkOS team name. */ issuer: string; /** The user's account name displayed in their authenticator app. Defaults to the user's email. */ user: string; } export interface AuthenticationFactor { /** Distinguishes the authentication factor object. */ object?: string; /** The unique ID of the factor. */ id?: string; /** The type of the factor to enroll. */ type?: AuthenticationFactorType; /** The ID of the [user](/reference/authkit/user). */ user_id?: string; /** SMS-based authentication factor details. */ sms?: AuthenticationFactorEnrolledSms; /** TOTP-based authentication factor details. */ totp?: AuthenticationFactorTotp; /** An ISO 8601 timestamp. */ created_at?: string; /** An ISO 8601 timestamp. */ updated_at?: string; } export interface GetAuthorizationGroupRoleAssignmentsControllerRequest { /** The ID of the group. */ group_id: string; /** The ID of the group role assignment. */ role_assignment_id: string; } export interface GetAuthorizationOrganizationRolesControllerRequest { /** The ID of the organization. */ organizationId: string; /** The slug of the role. */ slug: string; } /** Whether the role is scoped to the environment or an organization (custom role). */ export type GetAuthorizationOrganizationRolesControllerResponseType = | "EnvironmentRole" | "OrganizationRole"; /** The permission slugs assigned to the role. */ export type GetAuthorizationOrganizationRolesControllerResponsePermissionsList = Array; export interface GetAuthorizationOrganizationRolesControllerResponse { /** A unique slug for the role. */ slug: string; /** Distinguishes the role object. */ object: string; /** Unique identifier of the role. */ id: string; /** A descriptive name for the role. */ name: string; /** An optional description of the role. */ description: string | null; /** Whether the role is scoped to the environment or an organization (custom role). */ type: GetAuthorizationOrganizationRolesControllerResponseType; /** The slug of the resource type the role is scoped to. */ resource_type_slug: string; /** The permission slugs assigned to the role. */ permissions: GetAuthorizationOrganizationRolesControllerResponsePermissionsList; /** An ISO 8601 timestamp. */ created_at: string; /** An ISO 8601 timestamp. */ updated_at: string; } export interface GetAuthorizationResourcesByExternalIdControllerByExternalIdRequest { /** The ID of the organization that owns the resource. */ organization_id: string; /** The slug of the resource type. */ resource_type_slug: string; /** An identifier you provide to reference the resource in your system. */ external_id: string; } export interface GetAuthorizationRolesControllerRequest { /** The slug of the environment role. */ slug: string; } /** Whether the role is scoped to the environment or an organization (custom role). */ export type RoleType = "EnvironmentRole" | "OrganizationRole"; /** The permission slugs assigned to the role. */ export type RolePermissionsList = Array; export interface Role { /** A unique slug for the role. */ slug?: string; /** Distinguishes the role object. */ object?: string; /** Unique identifier of the role. */ id?: string; /** A descriptive name for the role. */ name?: string; /** An optional description of the role. */ description?: string | null; /** Whether the role is scoped to the environment or an organization (custom role). */ type?: RoleType; /** The slug of the resource type the role is scoped to. */ resource_type_slug?: string; /** The permission slugs assigned to the role. */ permissions?: RolePermissionsList; /** An ISO 8601 timestamp. */ created_at?: string; /** An ISO 8601 timestamp. */ updated_at?: string; } /** Which connection to vend from. `user` (the default) vends the user's own connection and requires `user_id`. `organization` vends the organization's shared connection and requires `organization_id`. */ export type GetDataIntegrationsControllerUserlandUserTokenRequestConnectionOwner = | "user" | "organization"; export interface GetDataIntegrationsControllerUserlandUserTokenRequest { /** The identifier of the integration. */ slug: string; /** A [User](/reference/authkit/user) identifier. When `connection_owner` is `organization`, this is the user the credentials are vended on behalf of; they must be an active member of the organization. */ user_id: string; /** An [Organization](/reference/organization) identifier. Optional parameter to scope the connection to a specific organization. Required when `connection_owner` is `organization`. */ organization_id?: string; /** A [connected account](/reference/pipes/connected-account) identifier. Use this to select a specific connection when the user has several for this provider. */ connected_account_id?: string; /** Which connection to vend from. `user` (the default) vends the user's own connection and requires `user_id`. `organization` vends the organization's shared connection and requires `organization_id`. */ connection_owner?: | GetDataIntegrationsControllerUserlandUserTokenRequestConnectionOwner | (string & {}); /** Set to `true` to use the plural connection contract. If no `connected_account_id` is supplied and several connections match, the request returns `account_selection_required`. When omitted or `false`, only the compatibility connection is considered. */ supports_multiple_connections?: boolean; } /** The scopes granted to the access token. */ export type DataIntegrationAccessTokenResponseCase0AccessTokenScopesList = Array; /** If the integration has requested scopes that aren't present on the access token, they're listed here. */ export type DataIntegrationAccessTokenResponseCase0AccessTokenMissingScopesList = Array; /** The [access token](/reference/pipes/access-token) object, present when `active` is `true`. */ export interface DataIntegrationAccessTokenResponseCase0AccessToken { /** Distinguishes the access token object. */ object: string; /** The OAuth access token for the connected integration. */ access_token: string | Redacted.Redacted; /** The ISO-8601 formatted timestamp indicating when the access token expires. */ expires_at: string | null; /** The scopes granted to the access token. */ scopes: DataIntegrationAccessTokenResponseCase0AccessTokenScopesList; /** If the integration has requested scopes that aren't present on the access token, they're listed here. */ missing_scopes: DataIntegrationAccessTokenResponseCase0AccessTokenMissingScopesList; } export interface DataIntegrationAccessTokenResponseCase0 { /** Indicates whether the access token is valid and ready for use, or if reauthorization is required. */ active: boolean; /** The [access token](/reference/pipes/access-token) object, present when `active` is `true`. */ access_token: DataIntegrationAccessTokenResponseCase0AccessToken; } /** - `"not_installed"`: The user does not have the integration installed. - `"needs_reauthorization"`: The user needs to reauthorize the integration. */ export type DataIntegrationAccessTokenResponseCase1Error = | "needs_reauthorization" | "not_installed"; export interface DataIntegrationAccessTokenResponseCase1 { /** Indicates whether the access token is valid and ready for use, or if reauthorization is required. */ active: boolean; /** - `"not_installed"`: The user does not have the integration installed. - `"needs_reauthorization"`: The user needs to reauthorize the integration. */ error: DataIntegrationAccessTokenResponseCase1Error; } export type DataIntegrationAccessTokenResponse = | DataIntegrationAccessTokenResponseCase0 | DataIntegrationAccessTokenResponseCase1; export type GetDataIntegrationsControllerUserlandUserTokenResponse = DataIntegrationAccessTokenResponse; export interface GetDataIntegrationsManagementControllerDataIntegrationRequest { /** The slug identifier of the data integration. */ slug: string; } export interface GetDataIntegrationsManagementControllerOrganizationDataIntegrationRequest { /** The slug identifier of the data integration. */ slug: string; } export interface GetDataIntegrationsOrganizationControllerOrganizationDataInstallationRequest { /** An [Organization](/reference/organization) identifier. */ organization_id: string; /** The slug identifier of the provider (e.g., `github`, `slack`, `notion`). */ slug: string; /** Set to `true` to use the plural connection contract. When omitted or `false`, only the compatibility connection is considered. */ supports_multiple_connections?: boolean; /** A [connected account](/reference/pipes/connected-account) identifier. Use this to select a specific connection when the organization has several for this provider. */ connected_account_id?: string; } /** Whether this row is the compatibility connection visible to undeclared clients or a standard peer for plural-aware clients. The role does not indicate preference or creation order. */ export type ConnectedAccountConnectionRole = "compatibility" | "standard"; /** The OAuth scopes granted for this connection. */ export type ConnectedAccountScopesList = Array; /** The authentication method used for this connection (`oauth`, `api_key`, or `client_credentials`). Defaults to `oauth` if absent. */ export type ConnectedAccountAuthMethod = "oauth" | "api_key" | "client_credentials"; /** The connection-level configuration values stored for this connection -- the fields the provider declares at `installation` scope, excluding secret and undeclared fields. Returned for every authentication method; empty when no stored values can be disclosed. */ export type ConnectedAccountConfigMap = { [key: string]: string | undefined }; /** The state of the connected account: - `connected`: The connection is active and tokens are valid. - `needs_reauthorization`: The user needs to reauthorize the connection, typically because required scopes have changed. - `disconnected`: The connection has been disconnected. */ export type ConnectedAccountState = "connected" | "needs_reauthorization" | "disconnected"; export interface ConnectedAccount { /** Distinguishes the connected account object. */ object?: string; /** The unique identifier of the connected account. */ id?: string; /** Whether this row is the compatibility connection visible to undeclared clients or a standard peer for plural-aware clients. The role does not indicate preference or creation order. */ connection_role?: ConnectedAccountConnectionRole; /** A best-effort identifier for the provider account this connection points at. It is correlation metadata, not the connection identifier or a selector. */ account_identifier?: string | null; /** A mutable, non-unique display name for the provider account connection. */ account_display_name?: string | null; /** The [User](/reference/authkit/user) identifier associated with this connection. */ user_id?: string | null; /** The [Organization](/reference/organization) identifier associated with this connection, or `null` if not scoped to an organization. */ organization_id?: string | null; /** The OAuth scopes granted for this connection. */ scopes?: ConnectedAccountScopesList; /** The authentication method used for this connection (`oauth`, `api_key`, or `client_credentials`). Defaults to `oauth` if absent. */ auth_method?: ConnectedAccountAuthMethod; /** The last four characters of the API key, or `null` for OAuth connections. */ api_key_last_4?: string | null; /** The client ID supplied for this connection. Only present when `auth_method` is `client_credentials`. */ client_id?: string | null; /** The last four characters of the client secret supplied for this connection, or `null` when it can't be read. Only present when `auth_method` is `client_credentials`. */ client_secret_last_4?: string | null; /** The connection-level configuration values stored for this connection -- the fields the provider declares at `installation` scope, excluding secret and undeclared fields. Returned for every authentication method; empty when no stored values can be disclosed. */ config?: ConnectedAccountConfigMap; /** The state of the connected account: - `connected`: The connection is active and tokens are valid. - `needs_reauthorization`: The user needs to reauthorize the connection, typically because required scopes have changed. - `disconnected`: The connection has been disconnected. */ state?: ConnectedAccountState; /** The timestamp when the connection was created. */ created_at?: string; /** The timestamp when the connection was last updated. */ updated_at?: string; } export interface GetDataIntegrationsOrganizationControllerOrganizationDataIntegrationsRequest { /** An [Organization](/reference/organization) identifier to list providers and connected accounts for. */ organization_id: string; /** Set to `true` to use the plural connection contract. When omitted or `false`, only the compatibility connection is considered. */ supports_multiple_connections?: boolean; } export type DataIntegrationsListResponseDataItemScopesList = Array; export type DataIntegrationsListResponseDataItemAuthMethodsItem = | "oauth" | "api_key" | "client_credentials"; /** The authentication methods supported by this provider (`oauth`, `api_key`, `client_credentials`, or a combination). Defaults to `["oauth"]` if absent. */ export type DataIntegrationsListResponseDataItemAuthMethodsList = Array; /** Who owns connections made through this provider: `user` for connections owned by individual users, or `organization` for a connection shared by every member of the organization. A provider row can exist before any connected account does. */ export type DataIntegrationsListResponseDataItemConnectionOwner = "user" | "organization"; /** Use `connection_owner` instead. Legacy spelling of the same value: `userland_user` corresponds to `connection_owner: "user"` and `organization` to `connection_owner: "organization"`. */ export type DataIntegrationsListResponseDataItemOwnership = "userland_user" | "organization"; /** Whether this row is the compatibility connection visible to undeclared clients or a standard peer for plural-aware clients. The role does not indicate preference or creation order. */ export type DataIntegrationsListResponseDataItemConnectedAccountConnectionRole = | "compatibility" | "standard"; /** The OAuth scopes granted for this connection. */ export type DataIntegrationsListResponseDataItemConnectedAccountScopesList = Array; /** The authentication method used for this connection (`oauth`, `api_key`, or `client_credentials`). Defaults to `oauth` if absent. */ export type DataIntegrationsListResponseDataItemConnectedAccountAuthMethod = | "oauth" | "api_key" | "client_credentials"; /** The connection-level configuration values stored for this connection -- the fields the provider declares at `installation` scope, excluding secret and undeclared fields. Returned for every authentication method; empty when no stored values can be disclosed. */ export type DataIntegrationsListResponseDataItemConnectedAccountConfigMap = { [key: string]: string | undefined; }; /** The state of the connected account: - `connected`: The connection is active and tokens are valid. - `needs_reauthorization`: The user needs to reauthorize the connection, typically because required scopes have changed. - `disconnected`: The connection has been disconnected. */ export type DataIntegrationsListResponseDataItemConnectedAccountState = | "connected" | "needs_reauthorization" | "disconnected"; export interface DataIntegrationsListResponseDataItemConnectedAccount { /** Distinguishes the connected account object. */ object: string; /** The unique identifier of the connected account. */ id: string; /** Whether this row is the compatibility connection visible to undeclared clients or a standard peer for plural-aware clients. The role does not indicate preference or creation order. */ connection_role: DataIntegrationsListResponseDataItemConnectedAccountConnectionRole; /** A best-effort identifier for the provider account this connection points at. It is correlation metadata, not the connection identifier or a selector. */ account_identifier: string | null; /** A mutable, non-unique display name for the provider account connection. */ account_display_name: string | null; /** The [User](/reference/authkit/user) identifier associated with this connection. */ user_id: string | null; /** The [Organization](/reference/organization) identifier associated with this connection, or `null` if not scoped to an organization. */ organization_id: string | null; /** The OAuth scopes granted for this connection. */ scopes: DataIntegrationsListResponseDataItemConnectedAccountScopesList; /** The authentication method used for this connection (`oauth`, `api_key`, or `client_credentials`). Defaults to `oauth` if absent. */ auth_method?: DataIntegrationsListResponseDataItemConnectedAccountAuthMethod; /** The last four characters of the API key, or `null` for OAuth connections. */ api_key_last_4?: string | null; /** The client ID supplied for this connection. Only present when `auth_method` is `client_credentials`. */ client_id?: string | null; /** The last four characters of the client secret supplied for this connection, or `null` when it can't be read. Only present when `auth_method` is `client_credentials`. */ client_secret_last_4?: string | null; /** The connection-level configuration values stored for this connection -- the fields the provider declares at `installation` scope, excluding secret and undeclared fields. Returned for every authentication method; empty when no stored values can be disclosed. */ config?: DataIntegrationsListResponseDataItemConnectedAccountConfigMap; /** The state of the connected account: - `connected`: The connection is active and tokens are valid. - `needs_reauthorization`: The user needs to reauthorize the connection, typically because required scopes have changed. - `disconnected`: The connection has been disconnected. */ state: DataIntegrationsListResponseDataItemConnectedAccountState; /** The timestamp when the connection was created. */ created_at: string; /** The timestamp when the connection was last updated. */ updated_at: string; /** Use `user_id` instead. */ userlandUserId: string | null; /** Use `organization_id` instead. */ organizationId: string | null; /** Use `created_at` instead. */ createdAt: string; /** Use `updated_at` instead. */ updatedAt: string; } /** Whether this row is the compatibility connection visible to undeclared clients or a standard peer for plural-aware clients. The role does not indicate preference or creation order. */ export type DataIntegrationsListResponseDataItemConnectedAccountsItemConnectionRole = | "compatibility" | "standard"; /** The OAuth scopes granted for this connection. */ export type DataIntegrationsListResponseDataItemConnectedAccountsItemScopesList = Array; /** The authentication method used for this connection (`oauth`, `api_key`, or `client_credentials`). Defaults to `oauth` if absent. */ export type DataIntegrationsListResponseDataItemConnectedAccountsItemAuthMethod = | "oauth" | "api_key" | "client_credentials"; /** The connection-level configuration values stored for this connection -- the fields the provider declares at `installation` scope, excluding secret and undeclared fields. Returned for every authentication method; empty when no stored values can be disclosed. */ export type DataIntegrationsListResponseDataItemConnectedAccountsItemConfigMap = { [key: string]: string | undefined; }; /** The state of the connected account: - `connected`: The connection is active and tokens are valid. - `needs_reauthorization`: The user needs to reauthorize the connection, typically because required scopes have changed. - `disconnected`: The connection has been disconnected. */ export type DataIntegrationsListResponseDataItemConnectedAccountsItemState = | "connected" | "needs_reauthorization" | "disconnected"; export interface DataIntegrationsListResponseDataItemConnectedAccountsItem { /** Distinguishes the connected account object. */ object: string; /** The unique identifier of the connected account. */ id: string; /** Whether this row is the compatibility connection visible to undeclared clients or a standard peer for plural-aware clients. The role does not indicate preference or creation order. */ connection_role: DataIntegrationsListResponseDataItemConnectedAccountsItemConnectionRole; /** A best-effort identifier for the provider account this connection points at. It is correlation metadata, not the connection identifier or a selector. */ account_identifier: string | null; /** A mutable, non-unique display name for the provider account connection. */ account_display_name: string | null; /** The [User](/reference/authkit/user) identifier associated with this connection. */ user_id: string | null; /** The [Organization](/reference/organization) identifier associated with this connection, or `null` if not scoped to an organization. */ organization_id: string | null; /** The OAuth scopes granted for this connection. */ scopes: DataIntegrationsListResponseDataItemConnectedAccountsItemScopesList; /** The authentication method used for this connection (`oauth`, `api_key`, or `client_credentials`). Defaults to `oauth` if absent. */ auth_method?: DataIntegrationsListResponseDataItemConnectedAccountsItemAuthMethod; /** The last four characters of the API key, or `null` for OAuth connections. */ api_key_last_4?: string | null; /** The client ID supplied for this connection. Only present when `auth_method` is `client_credentials`. */ client_id?: string | null; /** The last four characters of the client secret supplied for this connection, or `null` when it can't be read. Only present when `auth_method` is `client_credentials`. */ client_secret_last_4?: string | null; /** The connection-level configuration values stored for this connection -- the fields the provider declares at `installation` scope, excluding secret and undeclared fields. Returned for every authentication method; empty when no stored values can be disclosed. */ config?: DataIntegrationsListResponseDataItemConnectedAccountsItemConfigMap; /** The state of the connected account: - `connected`: The connection is active and tokens are valid. - `needs_reauthorization`: The user needs to reauthorize the connection, typically because required scopes have changed. - `disconnected`: The connection has been disconnected. */ state: DataIntegrationsListResponseDataItemConnectedAccountsItemState; /** The timestamp when the connection was created. */ created_at: string; /** The timestamp when the connection was last updated. */ updated_at: string; /** Use `user_id` instead. */ userlandUserId: string | null; /** Use `organization_id` instead. */ organizationId: string | null; /** Use `created_at` instead. */ createdAt: string; /** Use `updated_at` instead. */ updatedAt: string; } /** The user's connected accounts for this provider in the requested ownership context. This contains only the compatibility connection unless `supports_multiple_connections` is `true`. */ export type DataIntegrationsListResponseDataItemConnectedAccountsList = Array; export interface DataIntegrationsListResponseDataItem { /** Distinguishes the data provider object. */ object: string; /** The unique identifier of the provider. */ id: string; /** The display name of the provider (e.g., "GitHub", "Slack"). */ name: string; /** A description of the provider explaining how it will be used, if configured. */ description: string | null; /** The slug identifier used in API calls (e.g., `github`, `slack`, `notion`). */ slug: string; /** The type of integration (e.g., `github`, `slack`). */ integration_type: string; /** The type of credentials used by the provider (e.g., `oauth2`). */ credentials_type: string; /** The OAuth scopes configured for this provider, or `null` if none are configured. */ scopes: DataIntegrationsListResponseDataItemScopesList | null; /** The authentication methods supported by this provider (`oauth`, `api_key`, `client_credentials`, or a combination). Defaults to `["oauth"]` if absent. */ auth_methods?: DataIntegrationsListResponseDataItemAuthMethodsList; /** Who owns connections made through this provider: `user` for connections owned by individual users, or `organization` for a connection shared by every member of the organization. A provider row can exist before any connected account does. */ connection_owner: DataIntegrationsListResponseDataItemConnectionOwner; /** Use `connection_owner` instead. Legacy spelling of the same value: `userland_user` corresponds to `connection_owner: "user"` and `organization` to `connection_owner: "organization"`. */ ownership: DataIntegrationsListResponseDataItemOwnership; /** The timestamp when the provider was created. */ created_at: string; /** The timestamp when the provider was last updated. */ updated_at: string; /** Use integration_type instead. */ integrationType: string; /** Use credentials_type instead. */ credentialsType: string; /** Use created_at instead. */ createdAt: string; /** Use updated_at instead. */ updatedAt: string; /** The user's compatibility [connected account](/reference/pipes/connected-account) for this provider, or `null` when the compatibility slot is empty. This legacy field never selects a standard connection. */ connected_account: DataIntegrationsListResponseDataItemConnectedAccount | null; /** The user's connected accounts for this provider in the requested ownership context. This contains only the compatibility connection unless `supports_multiple_connections` is `true`. */ connected_accounts: DataIntegrationsListResponseDataItemConnectedAccountsList; } /** A list of [providers](/reference/pipes/provider), each including the legacy `connected_account` field and the additive `connected_accounts` collection. */ export type DataIntegrationsListResponseDataList = Array; export interface DataIntegrationsListResponse { /** Indicates this is a list response. */ object?: string; /** A list of [providers](/reference/pipes/provider), each including the legacy `connected_account` field and the additive `connected_accounts` collection. */ data?: DataIntegrationsListResponseDataList; } export interface GetDataIntegrationsUserManagementControllerUserDataInstallationRequest { /** A [User](/reference/authkit/user) identifier. */ user_id: string; /** The slug identifier of the provider (e.g., `github`, `slack`, `notion`). */ slug: string; /** An [Organization](/reference/organization) identifier. Optional parameter if the connection is scoped to an organization. */ organization_id?: string; /** Set to `true` to use the plural connection contract. When omitted or `false`, only the compatibility connection is considered. */ supports_multiple_connections?: boolean; /** A [connected account](/reference/pipes/connected-account) identifier. Use this to select a specific connection when the user has several for this provider. */ connected_account_id?: string; } export interface GetDataIntegrationsUserManagementControllerUserDataIntegrationsRequest { /** A [User](/reference/authkit/user) identifier to list providers and connected accounts for. */ user_id: string; /** An [Organization](/reference/organization) identifier. Optional parameter to filter connections for a specific organization. */ organization_id?: string; /** Set to `true` to use the plural connection contract. When omitted or `false`, only the compatibility connection is considered. */ supports_multiple_connections?: boolean; } export interface GetGroupsControllerRequest { /** The ID of the organization. */ organizationId: string; /** The ID of the group. */ groupId: string; } export interface GetJwtTemplatesControllerJwtTemplateRequest {} export interface JwtTemplate { /** The object type. */ object: string; /** The JWT template content as a Liquid template string. */ content: string; /** The timestamp when the JWT template was created. */ created_at: string; /** The timestamp when the JWT template was last updated. */ updated_at: string; } export interface GetOrganizationDomainsControllerRequest { /** Unique identifier of the organization domain. */ id: string; } /** Verification state of the domain. */ export type OrganizationDomainStandAloneState = | "failed" | "legacy_verified" | "pending" | "unverified" | "verified"; /** Strategy used to verify the domain. */ export type OrganizationDomainStandAloneVerificationStrategy = "dns" | "manual"; export interface OrganizationDomainStandAlone { /** Distinguishes the organization domain object. */ object?: string; /** Unique identifier of the organization domain. */ id?: string; /** ID of the parent Organization. */ organization_id?: string; /** Domain for the organization domain. */ domain?: string; /** Verification state of the domain. */ state?: OrganizationDomainStandAloneState; /** The prefix used in DNS verification. */ verification_prefix?: string; /** Validation token to be used in DNS TXT record. */ verification_token?: string; /** Strategy used to verify the domain. */ verification_strategy?: OrganizationDomainStandAloneVerificationStrategy; /** An ISO 8601 timestamp. */ created_at?: string; /** An ISO 8601 timestamp. */ updated_at?: string; } export interface GetOrganizationsControllerAuditLogConfigurationRequest { /** Unique identifier of the Organization. */ id: string; } /** The current state of the audit log configuration for the organization. */ export type AuditLogConfigurationState = "active" | "inactive" | "disabled"; /** The type of the Audit Log Stream destination. */ export type AuditLogConfigurationLogStreamType = | "AzureSentinel" | "Datadog" | "GenericHttps" | "GoogleCloudStorage" | "S3" | "Snowflake" | "Splunk"; /** The current state of the Audit Log Stream. */ export type AuditLogConfigurationLogStreamState = "active" | "inactive" | "error" | "invalid"; /** The Audit Log Stream currently configured for the organization, if any. */ export interface AuditLogConfigurationLogStream { /** Unique identifier of the Audit Log Stream. */ id: string; /** The type of the Audit Log Stream destination. */ type: AuditLogConfigurationLogStreamType; /** The current state of the Audit Log Stream. */ state: AuditLogConfigurationLogStreamState; /** ISO-8601 timestamp of when the last event was successfully synced, or null if no events have been synced. */ last_synced_at: string | null; /** An ISO 8601 timestamp. */ created_at: string; } export interface AuditLogConfiguration { /** Unique identifier of the Organization. */ organization_id?: string; /** The number of days Audit Log events will be retained before being permanently deleted. */ retention_period_in_days?: number; /** The current state of the audit log configuration for the organization. */ state?: AuditLogConfigurationState; /** The Audit Log Stream currently configured for the organization, if any. */ log_stream?: AuditLogConfigurationLogStream; } export interface GetOrganizationsControllerByExternalIdRequest { /** The external ID of the Organization. */ external_id: string; } export interface GetPublicRadarChallengesControllerRequest { /** The unique ID of the Radar Challenge. */ id: string; } export interface RadarChallenge { /** Distinguishes the Radar Challenge object. */ object: string; /** The unique ID of the Radar Challenge. */ id: string; /** The type of the Radar challenge. */ type: string; /** The unique ID of the user. */ user_id: string; /** The email address of the user. */ email: string; /** The timestamp when the Radar Challenge code expires. */ expires_at: string; /** An ISO 8601 timestamp. */ created_at: string; /** An ISO 8601 timestamp. */ updated_at: string; /** The code used to verify the Radar Challenge. */ code: string; } export interface GetSamlSpSigningCertificatesControllerRequest { /** Unique identifier for the Connection. */ connectionId: string; } export interface GetSsoControllerProfileRequest {} /** The type of SSO connection. */ export type ProfileConnectionType = | "Pending" | "ADFSSAML" | "AdpOidc" | "AppleOAuth" | "Auth0Migration" | "Auth0SAML" | "AzureSAML" | "BitbucketOAuth" | "CasSAML" | "ClassLinkSAML" | "CleverOIDC" | "CloudflareSAML" | "CyberArkSAML" | "DuoSAML" | "EntraIdOIDC" | "GenericOIDC" | "GenericSAML" | "GitHubOAuth" | "GitLabOAuth" | "GoogleOAuth" | "GoogleOIDC" | "GoogleSAML" | "IntuitOAuth" | "JumpCloudSAML" | "KeycloakSAML" | "LastPassSAML" | "LinkedInOAuth" | "LoginGovOidc" | "MagicLink" | "MicrosoftOAuth" | "MiniOrangeSAML" | "NetIqSAML" | "OktaOIDC" | "OktaSAML" | "OneLoginSAML" | "OracleSAML" | "PingFederateSAML" | "PingOneSAML" | "RipplingSAML" | "SalesforceSAML" | "ShibbolethGenericSAML" | "ShibbolethSAML" | "SimpleSamlPhpSAML" | "SalesforceOAuth" | "SlackOAuth" | "TestIdp" | "VercelMarketplaceOAuth" | "VercelOAuth" | "VMwareSAML" | "XeroOAuth"; export type ProfileRolesList = Array; /** The groups the user belongs to, as returned by the identity provider. */ export type ProfileGroupsList = Array; /** Custom attribute mappings defined for the connection, returned as key-value pairs. */ export type ProfileCustomAttributesMap = { [key: string]: unknown | undefined }; /** The complete set of raw attributes returned by the identity provider. */ export type ProfileRawAttributesMap = { [key: string]: unknown | undefined }; export interface Profile { /** Distinguishes the profile object. */ object?: string; /** Unique identifier of the profile. */ id?: string; /** The ID of the organization the user belongs to. */ organization_id?: string | null; /** The ID of the SSO connection used for authentication. */ connection_id?: string; /** The type of SSO connection. */ connection_type?: ProfileConnectionType; /** The user's unique identifier from the identity provider. */ idp_id?: string; /** The user's email address. */ email?: string; /** The user's first name. */ first_name?: string | null; /** The user's last name. */ last_name?: string | null; /** The user's full name. */ name?: string | null; /** The role assigned to the user within the organization, if applicable. */ role?: SlimRole | null; /** The roles assigned to the user within the organization, if applicable. */ roles?: ProfileRolesList | null; /** The groups the user belongs to, as returned by the identity provider. */ groups?: ProfileGroupsList; /** Custom attribute mappings defined for the connection, returned as key-value pairs. */ custom_attributes?: ProfileCustomAttributesMap; /** The complete set of raw attributes returned by the identity provider. */ raw_attributes?: ProfileRawAttributesMap; } export interface GetTeamsControllerTeamRequest { /** The ID of the team. */ team_id: string; } export interface GetUserlandMagicAuthControllerRequest { /** The unique ID of the Magic Auth code. */ id: string; } export interface MagicAuth { /** Distinguishes the Magic Auth object. */ object?: string; /** The unique ID of the Magic Auth code. */ id?: string; /** The unique ID of the user. */ user_id?: string; /** The email address of the user. */ email?: string; /** The timestamp when the Magic Auth code expires. */ expires_at?: string; /** An ISO 8601 timestamp. */ created_at?: string; /** An ISO 8601 timestamp. */ updated_at?: string; /** The code used to verify the Magic Auth code. */ code?: string; } export interface GetUserlandUserIdentitiesControllerRequest { /** The unique ID of the user. */ id: string; } /** The type of OAuth provider for the identity. */ export type GetUserlandUserIdentitiesControllerResponseBodyItemProvider = | "AppleOAuth" | "BitbucketOAuth" | "GithubOAuth" | "GitLabOAuth" | "GoogleOAuth" | "IntuitOAuth" | "LinkedInOAuth" | "MicrosoftOAuth" | "SalesforceOAuth" | "SlackOAuth" | "VercelMarketplaceOAuth" | "VercelOAuth" | "XeroOAuth"; export interface GetUserlandUserIdentitiesControllerResponseBodyItem { /** The unique ID of the user in the external identity provider. */ idp_id: string; /** The type of the identity. */ type: string; /** The type of OAuth provider for the identity. */ provider: GetUserlandUserIdentitiesControllerResponseBodyItemProvider; } export type GetUserlandUserIdentitiesControllerResponseBodyList = Array; export type GetUserlandUserIdentitiesControllerResponse = GetUserlandUserIdentitiesControllerResponseBodyList; export interface GetUserlandUserInvitesControllerRequest { /** The unique ID of the invitation. */ id: string; } export interface GetUserlandUserInvitesControllerByTokenRequest { /** The token used to accept the invitation. */ token: string; } export interface GetUserlandUserOrganizationMembershipsControllerRequest { /** The unique ID of the organization membership. */ id: string; } /** The status of the organization membership. One of `active`, `inactive`, or `pending`. */ export type UserlandUserOrganizationMembershipStatus = "active" | "inactive" | "pending"; /** An object containing IdP-sourced attributes from the linked [Directory User](/reference/directory-sync/directory-user) or [SSO Profile](/reference/sso/profile). Directory User attributes take precedence when both are linked. */ export type UserlandUserOrganizationMembershipCustomAttributesMap = { [key: string]: unknown | undefined; }; /** The list of roles assigned to the user within the organization. */ export type UserlandUserOrganizationMembershipRolesList = Array; export interface UserlandUserOrganizationMembership { /** Distinguishes the organization membership object. */ object?: string; /** The unique ID of the organization membership. */ id?: string; /** The ID of the user. */ user_id?: string; /** The ID of the organization which the user belongs to. */ organization_id?: string; /** The status of the organization membership. One of `active`, `inactive`, or `pending`. */ status?: UserlandUserOrganizationMembershipStatus; /** Whether this organization membership is managed by a directory sync connection. */ directory_managed?: boolean; /** The name of the organization which the user belongs to. */ organization_name?: string; /** An object containing IdP-sourced attributes from the linked [Directory User](/reference/directory-sync/directory-user) or [SSO Profile](/reference/sso/profile). Directory User attributes take precedence when both are linked. */ custom_attributes?: UserlandUserOrganizationMembershipCustomAttributesMap; /** An ISO 8601 timestamp. */ created_at?: string; /** An ISO 8601 timestamp. */ updated_at?: string; /** The primary role assigned to the user within the organization. */ role?: SlimRole; /** The list of roles assigned to the user within the organization. */ roles?: UserlandUserOrganizationMembershipRolesList; /** The user that belongs to the organization through this membership. */ user?: UserlandUser; } export interface GetUserlandUsersControllerByExternalIdRequest { /** The external ID of the user. */ external_id: string; } export interface GetUserlandUsersControllerEmailVerificationRequest { /** The ID of the email verification code. */ id: string; } export interface EmailVerification { /** Distinguishes the email verification object. */ object?: string; /** The unique ID of the email verification code. */ id?: string; /** The unique ID of the user. */ user_id?: string; /** The email address of the user. */ email?: string; /** The timestamp when the email verification code expires. */ expires_at?: string; /** An ISO 8601 timestamp. */ created_at?: string; /** An ISO 8601 timestamp. */ updated_at?: string; /** The code used to verify the email. */ code?: string; } export type InviteItContactsControllerRequestIntentsItem = | "sso" | "directory_sync" | "log_streams" | "domain_verification" | "bring_your_own_key"; /** The Admin Portal features that the IT contact can configure. */ export type InviteItContactsControllerRequestIntentsList = Array< InviteItContactsControllerRequestIntentsItem | (string & {}) >; export interface InviteItContactsControllerRequest { /** The ID of the organization. */ organization_id: string; /** The ID of the IT contact. */ contact_id: string; /** The Admin Portal features that the IT contact can configure. */ intents: InviteItContactsControllerRequestIntentsList; } export interface InviteItContactsControllerResponse {} export type JumpWireWebDataVaultControllerIndexRequestOrder = "asc" | "desc"; export interface JumpWireWebDataVaultControllerIndexRequest { /** Upper limit on the number of objects to return. */ limit?: number; /** Cursor for the previous page of results. */ before?: string; /** Cursor for the next page of results. */ after?: string; /** Sort direction for results. */ order?: JumpWireWebDataVaultControllerIndexRequestOrder | (string & {}); /** Filter results by name or structured search JSON. */ search?: string; /** ISO 8601 timestamp to filter by last modified time. */ updatedAfter?: string; } /** Summary of an encrypted object returned in list responses. */ export interface ObjectSummary { /** Unique identifier of the object. */ id: string; /** Unique name of the object. */ name: string; /** Timestamp of the last update. */ updated_at?: string | null; } /** List of object summaries. */ export type ObjectListResponseDataList = Array; /** Cursor-based pagination metadata. */ export interface ListMetadata { /** Cursor for the next page of results. */ after?: string | null; /** Cursor for the previous page of results. */ before?: string | null; } export interface ObjectListResponse { /** List of object summaries. */ data: ObjectListResponseDataList; list_metadata: ListMetadata; } export interface JumpWireWebDataVaultControllerShowByIdRequest { /** Unique identifier of the object. */ id: string; } /** An encrypted object with its decrypted value and metadata. */ export interface Object { /** Unique identifier of the object. */ id: string; metadata: ObjectMetadata; /** Unique name of the object. */ name: string; /** Decrypted plaintext value. */ value: string; } export interface JumpWireWebDataVaultControllerShowByNameRequest { /** Unique name of the object. */ name: string; } export interface JumpWireWebDataVaultControllerVersionsRequest { /** Unique identifier of the object. */ id: string; } /** A static snapshot of an encrypted object. */ export interface ObjectVersion { /** Timestamp when the version was created. */ created_at: string; /** Whether this is the active version. */ current_version: boolean; /** Hash of the object value. */ etag: string; /** Unique identifier of the version. */ id: string; /** Number of bytes of stored data. */ size: number; } /** List of object versions. */ export type VersionListResponseDataList = Array; export interface VersionListResponse { /** List of object versions. */ data: VersionListResponseDataList; list_metadata: ListMetadata; } /** Map of values used to determine the encryption key. */ export type JumpWireWebKeyControllerCreateDataKeyRequestContextMap = { [key: string]: string | undefined; }; export interface JumpWireWebKeyControllerCreateDataKeyRequest { /** Map of values used to determine the encryption key. */ context: JumpWireWebKeyControllerCreateDataKeyRequestContextMap; } /** Map of values used to determine the encryption key. */ export type CreateDataKeyResponseContextMap = { [key: string]: string | undefined }; export interface CreateDataKeyResponse { /** Map of values used to determine the encryption key. */ context: CreateDataKeyResponseContextMap; /** Base64-encoded data encryption key. */ data_key: string; /** Base64-encoded encrypted data key blob. */ encrypted_keys: string; /** Unique identifier for the generated data key. */ id: string; } /** Map of values used to determine the new encryption key. */ export type JumpWireWebKeyControllerRekeyRequestContextMap = { [key: string]: string | undefined }; export interface JumpWireWebKeyControllerRekeyRequest { /** Map of values used to determine the new encryption key. */ context: JumpWireWebKeyControllerRekeyRequestContextMap; /** Base64-encoded encrypted data key blob to re-encrypt. */ encrypted_keys: string; } export interface ListAgentBlueprintsControllerRequest { /** An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `before="obj_123"` to fetch a new batch of objects before `"obj_123"`. */ before?: string; /** An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `after="obj_123"` to fetch a new batch of objects after `"obj_123"`. */ after?: string; /** Upper limit on the number of objects to return, between `1` and `100`. */ limit?: number; /** Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to `normal`. */ order?: PaginationOrder | (string & {}); } /** Pagination cursors for navigating between pages of results. */ export type ListAgentBlueprintsControllerResponseListMetadata = AuditLogValidatorVersionsControllerSchemasResponseListMetadata; /** The list of records for the current page. */ export type ListAgentBlueprintsControllerResponseDataList = Array; export interface ListAgentBlueprintsControllerResponse { /** Indicates this is a list response. */ object?: string; /** Pagination cursors for navigating between pages of results. */ list_metadata?: AuditLogValidatorVersionsControllerSchemasResponseListMetadata; /** The list of records for the current page. */ data?: ListAgentBlueprintsControllerResponseDataList; } export interface ListAgentInstancesControllerRequest { /** An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `before="obj_123"` to fetch a new batch of objects before `"obj_123"`. */ before?: string; /** An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `after="obj_123"` to fetch a new batch of objects after `"obj_123"`. */ after?: string; /** Upper limit on the number of objects to return, between `1` and `100`. */ limit?: number; /** Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to `normal`. */ order?: PaginationOrder | (string & {}); /** Only return instances acting within this organization. */ organization_id?: string; /** Only return instances minted from this blueprint. */ agent_blueprint_id?: string; } /** Pagination cursors for navigating between pages of results. */ export type ListAgentInstancesControllerResponseListMetadata = AuditLogValidatorVersionsControllerSchemasResponseListMetadata; /** The list of records for the current page. */ export type ListAgentInstancesControllerResponseDataList = Array; export interface ListAgentInstancesControllerResponse { /** Indicates this is a list response. */ object?: string; /** Pagination cursors for navigating between pages of results. */ list_metadata?: AuditLogValidatorVersionsControllerSchemasResponseListMetadata; /** The list of records for the current page. */ data?: ListAgentInstancesControllerResponseDataList; } export interface ListAgentInstanceSessionsControllerRequest { /** An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `before="obj_123"` to fetch a new batch of objects before `"obj_123"`. */ before?: string; /** An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `after="obj_123"` to fetch a new batch of objects after `"obj_123"`. */ after?: string; /** Upper limit on the number of objects to return, between `1` and `100`. */ limit?: number; /** Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to `normal`. */ order?: PaginationOrder | (string & {}); /** Only return sessions of instances acting within this organization. */ organization_id?: string; /** Only return sessions of instances minted from this blueprint. */ agent_blueprint_id?: string; /** Only return sessions belonging to this agent instance. */ agent_instance_id?: string; } /** Pagination cursors for navigating between pages of results. */ export type ListAgentInstanceSessionsControllerResponseListMetadata = AuditLogValidatorVersionsControllerSchemasResponseListMetadata; /** The list of records for the current page. */ export type ListAgentInstanceSessionsControllerResponseDataList = Array; export interface ListAgentInstanceSessionsControllerResponse { /** Indicates this is a list response. */ object?: string; /** Pagination cursors for navigating between pages of results. */ list_metadata?: AuditLogValidatorVersionsControllerSchemasResponseListMetadata; /** The list of records for the current page. */ data?: ListAgentInstanceSessionsControllerResponseDataList; } export interface ListApplicationCredentialsControllerRequest { /** The application ID or client ID of the Connect Application. */ id: string; } export interface ListApplicationCredentialsControllerResponseBodyItem { /** Distinguishes the connect application secret object. */ object: string; /** The unique ID of the client secret. */ id: string; /** A hint showing the last few characters of the secret value. */ secret_hint: string; /** The timestamp when the client secret was last used, or null if never used. */ last_used_at: string | null; /** An ISO 8601 timestamp. */ created_at: string; /** An ISO 8601 timestamp. */ updated_at: string; } export type ListApplicationCredentialsControllerResponseBodyList = Array; export type ListApplicationCredentialsControllerResponse = ListApplicationCredentialsControllerResponseBodyList; export type ListApplicationsControllerRequestRegistrationTypesItem = "dynamic" | "authenticated"; export type ListApplicationsControllerRequestRegistrationTypesList = Array< ListApplicationsControllerRequestRegistrationTypesItem | (string & {}) >; export interface ListApplicationsControllerRequest { /** An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `before="obj_123"` to fetch a new batch of objects before `"obj_123"`. */ before?: string; /** An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `after="obj_123"` to fetch a new batch of objects after `"obj_123"`. */ after?: string; /** Upper limit on the number of objects to return, between `1` and `100`. */ limit?: number; /** Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to `normal`. */ order?: PaginationOrder | (string & {}); /** Filter Connect Applications by registration type. Specify multiple as a comma-separated list (e.g. `registration_types=dynamic,authenticated`). Defaults to `authenticated` only when not specified. */ registration_types?: ListApplicationsControllerRequestRegistrationTypesList; /** Filter Connect Applications by organization ID. */ organization_id?: string; } /** The scopes available for this application. */ export type ConnectApplicationScopesList = Array; export type ConnectApplicationRedirectUrisItem = ApplicationsControllerFindResponseRedirectUrisItem; /** The redirect URIs configured for this application. */ export type ConnectApplicationRedirectUrisList = Array; export interface ConnectApplication { /** Distinguishes the connect application object. */ object: string; /** The unique ID of the connect application. */ id: string; /** The client ID of the connect application. */ client_id: string; /** A description of the connect application. */ description: string | null; /** The name of the connect application. */ name: string; /** The scopes available for this application. */ scopes: ConnectApplicationScopesList; /** An ISO 8601 timestamp. */ created_at: string; /** An ISO 8601 timestamp. */ updated_at: string; /** The type of the application. */ application_type?: string; /** The redirect URIs configured for this application. */ redirect_uris?: ConnectApplicationRedirectUrisList; /** Whether the application uses PKCE for authorization. */ uses_pkce?: boolean; /** Whether the application is a first-party application. */ is_first_party?: boolean; /** Whether the application was dynamically registered. */ was_dynamically_registered?: boolean; /** The ID of the organization the application belongs to. */ organization_id?: string; } /** The list of records for the current page. */ export type ConnectApplicationListDataList = Array; /** Pagination cursors for navigating between pages of results. */ export type ConnectApplicationListListMetadata = AuditLogValidatorVersionsControllerSchemasResponseListMetadata; export interface ConnectApplicationList { /** Indicates this is a list response. */ object?: string; /** The list of records for the current page. */ data?: ConnectApplicationListDataList; /** Pagination cursors for navigating between pages of results. */ list_metadata?: AuditLogValidatorVersionsControllerSchemasResponseListMetadata; } export interface ListAuditLogValidatorsControllerRequest { /** An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. */ before?: string; /** An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. */ after?: string; /** Upper limit on the number of objects to return, between `1` and `100`. */ limit?: number; /** Order the results by the creation time. Defaults to `normal`. */ order?: PaginationOrder | (string & {}); } /** Pagination cursors for navigating between pages of results. */ export type ListAuditLogValidatorsControllerResponseListMetadata = AuditLogValidatorVersionsControllerSchemasResponseListMetadata; export interface AuditLogActionJson { /** Distinguishes the Audit Log Action object. */ object?: string; /** Identifier of what action was taken. */ name?: string; /** The schema associated with the action. */ schema?: AuditLogSchemaJson; /** An ISO 8601 timestamp. */ created_at?: string; /** An ISO 8601 timestamp. */ updated_at?: string; } /** The list of records for the current page. */ export type ListAuditLogValidatorsControllerResponseDataList = Array; export interface ListAuditLogValidatorsControllerResponse { /** Indicates this is a list response. */ object?: string; /** Pagination cursors for navigating between pages of results. */ list_metadata?: AuditLogValidatorVersionsControllerSchemasResponseListMetadata; /** The list of records for the current page. */ data?: ListAuditLogValidatorsControllerResponseDataList; } export interface ListAuthkitOauthResourcesControllerRequest { /** An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `before="obj_123"` to fetch a new batch of objects before `"obj_123"`. */ before?: string; /** An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `after="obj_123"` to fetch a new batch of objects after `"obj_123"`. */ after?: string; /** Upper limit on the number of objects to return, between `1` and `100`. */ limit?: number; /** Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to `normal`. */ order?: PaginationOrder | (string & {}); } /** Pagination cursors for navigating between pages of results. */ export type ListAuthkitOauthResourcesControllerResponseListMetadata = AuditLogValidatorVersionsControllerSchemasResponseListMetadata; /** The list of records for the current page. */ export type ListAuthkitOauthResourcesControllerResponseDataList = Array; export interface ListAuthkitOauthResourcesControllerResponse { /** Indicates this is a list response. */ object?: string; /** Pagination cursors for navigating between pages of results. */ list_metadata?: AuditLogValidatorVersionsControllerSchemasResponseListMetadata; /** The list of records for the current page. */ data?: ListAuthkitOauthResourcesControllerResponseDataList; } export interface ListAuthorizationControllerEffectivePermissionsRequest { /** The ID of the organization membership. */ organization_membership_id: string; /** The ID of the authorization resource. */ resource_id: string; /** An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `before="obj_123"` to fetch a new batch of objects before `"obj_123"`. */ before?: string; /** An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `after="obj_123"` to fetch a new batch of objects after `"obj_123"`. */ after?: string; /** Upper limit on the number of objects to return, between `1` and `100`. */ limit?: number; /** Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to `normal`. */ order?: PaginationOrder | (string & {}); } /** The list of records for the current page. */ export type AuthorizationPermissionListDataList = Array; /** Pagination cursors for navigating between pages of results. */ export type AuthorizationPermissionListListMetadata = AuditLogValidatorVersionsControllerSchemasResponseListMetadata; export interface AuthorizationPermissionList { /** Indicates this is a list response. */ object?: string; /** The list of records for the current page. */ data?: AuthorizationPermissionListDataList; /** Pagination cursors for navigating between pages of results. */ list_metadata?: AuditLogValidatorVersionsControllerSchemasResponseListMetadata; } export interface ListAuthorizationControllerEffectivePermissionsByExternalIdRequest { /** The ID of the organization membership. */ organization_membership_id: string; /** The slug of the resource type. */ resource_type_slug: string; /** An identifier you provide to reference the resource in your system. */ external_id: string; /** An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `before="obj_123"` to fetch a new batch of objects before `"obj_123"`. */ before?: string; /** An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `after="obj_123"` to fetch a new batch of objects after `"obj_123"`. */ after?: string; /** Upper limit on the number of objects to return, between `1` and `100`. */ limit?: number; /** Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to `normal`. */ order?: PaginationOrder | (string & {}); } export interface ListAuthorizationControllerResourcesForMembershipRequest { /** The ID of the organization membership. */ organization_membership_id: string; /** An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `before="obj_123"` to fetch a new batch of objects before `"obj_123"`. */ before?: string; /** An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `after="obj_123"` to fetch a new batch of objects after `"obj_123"`. */ after?: string; /** Upper limit on the number of objects to return, between `1` and `100`. */ limit?: number; /** Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to `normal`. */ order?: PaginationOrder | (string & {}); /** The permission slug to filter by. Only child resources where the organization membership has this permission are returned. */ permission_slug: string; /** The WorkOS ID of the parent resource. Provide this or both `parent_resource_external_id` and `parent_resource_type_slug`, but not both. Mutually exclusive with `parent_resource_type_slug` and `parent_resource_external_id`. */ parent_resource_id?: string; /** The slug of the parent resource type. Must be provided together with `parent_resource_external_id`. Required with `parent_resource_external_id`. Mutually exclusive with `parent_resource_id`. */ parent_resource_type_slug?: string; /** The application-specific external identifier of the parent resource. Must be provided together with `parent_resource_type_slug`. Required with `parent_resource_type_slug`. Mutually exclusive with `parent_resource_id`. */ parent_resource_external_id?: string; } /** The list of records for the current page. */ export type AuthorizationResourceListDataList = Array; /** Pagination cursors for navigating between pages of results. */ export type AuthorizationResourceListListMetadata = AuditLogValidatorVersionsControllerSchemasResponseListMetadata; export interface AuthorizationResourceList { /** Indicates this is a list response. */ object?: string; /** The list of records for the current page. */ data?: AuthorizationResourceListDataList; /** Pagination cursors for navigating between pages of results. */ list_metadata?: AuditLogValidatorVersionsControllerSchemasResponseListMetadata; } export interface ListAuthorizationGroupRoleAssignmentsControllerRequest { /** The ID of the group. */ group_id: string; /** An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `before="obj_123"` to fetch a new batch of objects before `"obj_123"`. */ before?: string; /** An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `after="obj_123"` to fetch a new batch of objects after `"obj_123"`. */ after?: string; /** Upper limit on the number of objects to return, between `1` and `100`. */ limit?: number; /** Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to `normal`. */ order?: PaginationOrder | (string & {}); } /** The list of records for the current page. */ export type GroupRoleAssignmentListDataList = Array; /** Pagination cursors for navigating between pages of results. */ export type GroupRoleAssignmentListListMetadata = AuditLogValidatorVersionsControllerSchemasResponseListMetadata; export interface GroupRoleAssignmentList { /** Indicates this is a list response. */ object: string; /** The list of records for the current page. */ data: GroupRoleAssignmentListDataList; /** Pagination cursors for navigating between pages of results. */ list_metadata: AuditLogValidatorVersionsControllerSchemasResponseListMetadata; } export interface ListAuthorizationOrganizationRolesControllerRequest { /** The ID of the organization. */ organizationId: string; } /** The list of records for the current page. */ export type RoleListDataList = Array; export interface RoleList { object?: string; /** The list of records for the current page. */ data?: RoleListDataList; } export interface ListAuthorizationPermissionsControllerRequest { /** An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `before="obj_123"` to fetch a new batch of objects before `"obj_123"`. */ before?: string; /** An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `after="obj_123"` to fetch a new batch of objects after `"obj_123"`. */ after?: string; /** Upper limit on the number of objects to return, between `1` and `100`. */ limit?: number; /** Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to `normal`. */ order?: PaginationOrder | (string & {}); } export type ListAuthorizationResourcesByExternalIdControllerOrganizationMembershipsForResourceByExternalIdRequestAssignment = | "direct" | "indirect"; export interface ListAuthorizationResourcesByExternalIdControllerOrganizationMembershipsForResourceByExternalIdRequest { /** The ID of the organization that owns the resource. */ organization_id: string; /** The slug of the resource type this resource belongs to. */ resource_type_slug: string; /** An identifier you provide to reference the resource in your system. */ external_id: string; /** An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `before="obj_123"` to fetch a new batch of objects before `"obj_123"`. */ before?: string; /** An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `after="obj_123"` to fetch a new batch of objects after `"obj_123"`. */ after?: string; /** Upper limit on the number of objects to return, between `1` and `100`. */ limit?: number; /** Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to `normal`. */ order?: PaginationOrder | (string & {}); /** The permission slug to filter by. Only users with this permission on the resource are returned. */ permission_slug: string; /** Filter by assignment type. Use "direct" for direct assignments only, or "indirect" to include inherited assignments. */ assignment?: | ListAuthorizationResourcesByExternalIdControllerOrganizationMembershipsForResourceByExternalIdRequestAssignment | (string & {}); } /** The status of the organization membership. One of `active`, `inactive`, or `pending`. */ export type UserlandUserOrganizationMembershipBaseWithUserStatus = | "active" | "inactive" | "pending"; /** An object containing IdP-sourced attributes from the linked [Directory User](/reference/directory-sync/directory-user) or [SSO Profile](/reference/sso/profile). Directory User attributes take precedence when both are linked. */ export type UserlandUserOrganizationMembershipBaseWithUserCustomAttributesMap = { [key: string]: unknown | undefined; }; export interface UserlandUserOrganizationMembershipBaseWithUser { /** Distinguishes the organization membership object. */ object: string; /** The unique ID of the organization membership. */ id: string; /** The ID of the user. */ user_id: string; /** The ID of the organization which the user belongs to. */ organization_id: string; /** The status of the organization membership. One of `active`, `inactive`, or `pending`. */ status: UserlandUserOrganizationMembershipBaseWithUserStatus; /** Whether this organization membership is managed by a directory sync connection. */ directory_managed: boolean; /** The name of the organization which the user belongs to. */ organization_name?: string; /** An object containing IdP-sourced attributes from the linked [Directory User](/reference/directory-sync/directory-user) or [SSO Profile](/reference/sso/profile). Directory User attributes take precedence when both are linked. */ custom_attributes?: UserlandUserOrganizationMembershipBaseWithUserCustomAttributesMap; /** An ISO 8601 timestamp. */ created_at: string; /** An ISO 8601 timestamp. */ updated_at: string; /** The user that belongs to the organization through this membership. */ user: UserlandUser; } /** The list of records for the current page. */ export type UserlandUserOrganizationMembershipBaseWithUserListDataList = Array; /** Pagination cursors for navigating between pages of results. */ export type UserlandUserOrganizationMembershipBaseWithUserListListMetadata = AuditLogValidatorVersionsControllerSchemasResponseListMetadata; export interface UserlandUserOrganizationMembershipBaseWithUserList { /** Indicates this is a list response. */ object: string; /** The list of records for the current page. */ data: UserlandUserOrganizationMembershipBaseWithUserListDataList; /** Pagination cursors for navigating between pages of results. */ list_metadata: AuditLogValidatorVersionsControllerSchemasResponseListMetadata; } export interface ListAuthorizationResourcesControllerRequest { /** An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `before="obj_123"` to fetch a new batch of objects before `"obj_123"`. */ before?: string; /** An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `after="obj_123"` to fetch a new batch of objects after `"obj_123"`. */ after?: string; /** Upper limit on the number of objects to return, between `1` and `100`. */ limit?: number; /** Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to `normal`. */ order?: PaginationOrder | (string & {}); /** Filter resources by organization ID. */ organization_id?: string; /** Filter resources by resource type slug. */ resource_type_slug?: string; /** Filter resources by external ID. */ resource_external_id?: string; /** Filter resources by parent resource ID. Mutually exclusive with `parent_resource_type_slug` and `parent_external_id`. */ parent_resource_id?: string; /** Filter resources by parent resource type slug. Required with `parent_external_id`. Mutually exclusive with `parent_resource_id`. */ parent_resource_type_slug?: string; /** Filter resources by parent external ID. Required with `parent_resource_type_slug`. Mutually exclusive with `parent_resource_id`. */ parent_external_id?: string; } export type ListAuthorizationResourcesControllerOrganizationMembershipsForResourceRequestAssignment = | "direct" | "indirect"; export interface ListAuthorizationResourcesControllerOrganizationMembershipsForResourceRequest { /** The ID of the authorization resource. */ resource_id: string; /** An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `before="obj_123"` to fetch a new batch of objects before `"obj_123"`. */ before?: string; /** An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `after="obj_123"` to fetch a new batch of objects after `"obj_123"`. */ after?: string; /** Upper limit on the number of objects to return, between `1` and `100`. */ limit?: number; /** Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to `normal`. */ order?: PaginationOrder | (string & {}); /** The permission slug to filter by. Only users with this permission on the resource are returned. */ permission_slug: string; /** Filter by assignment type. Use `direct` for direct assignments only, or `indirect` to include inherited assignments. */ assignment?: | ListAuthorizationResourcesControllerOrganizationMembershipsForResourceRequestAssignment | (string & {}); } export interface ListAuthorizationRoleAssignmentsControllerRoleAssignmentsRequest { /** The ID of the organization membership. */ organization_membership_id: string; /** An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `before="obj_123"` to fetch a new batch of objects before `"obj_123"`. */ before?: string; /** An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `after="obj_123"` to fetch a new batch of objects after `"obj_123"`. */ after?: string; /** Upper limit on the number of objects to return, between `1` and `100`. */ limit?: number; /** Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to `normal`. */ order?: PaginationOrder | (string & {}); /** Filter assignments by the ID of the resource. */ resource_id?: string; /** Filter assignments by the external ID of the resource. */ resource_external_id?: string; /** Filter assignments by the slug of the resource type. */ resource_type_slug?: string; } /** The list of records for the current page. */ export type UserRoleAssignmentListDataList = Array; /** Pagination cursors for navigating between pages of results. */ export type UserRoleAssignmentListListMetadata = AuditLogValidatorVersionsControllerSchemasResponseListMetadata; export interface UserRoleAssignmentList { /** Indicates this is a list response. */ object: string; /** The list of records for the current page. */ data: UserRoleAssignmentListDataList; /** Pagination cursors for navigating between pages of results. */ list_metadata: AuditLogValidatorVersionsControllerSchemasResponseListMetadata; } export interface ListAuthorizationRoleAssignmentsControllerRoleAssignmentsForResourceRequest { /** The ID of the authorization resource. */ resource_id: string; /** An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `before="obj_123"` to fetch a new batch of objects before `"obj_123"`. */ before?: string; /** An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `after="obj_123"` to fetch a new batch of objects after `"obj_123"`. */ after?: string; /** Upper limit on the number of objects to return, between `1` and `100`. */ limit?: number; /** Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to `normal`. */ order?: PaginationOrder | (string & {}); /** Filter assignments by the slug of the role. */ role_slug?: string; } export interface ListAuthorizationRoleAssignmentsControllerRoleAssignmentsForResourceByExternalIdRequest { /** The ID of the organization that owns the resource. */ organization_id: string; /** The slug of the resource type. */ resource_type_slug: string; /** An identifier you provide to reference the resource in your system. */ external_id: string; /** An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `before="obj_123"` to fetch a new batch of objects before `"obj_123"`. */ before?: string; /** An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `after="obj_123"` to fetch a new batch of objects after `"obj_123"`. */ after?: string; /** Upper limit on the number of objects to return, between `1` and `100`. */ limit?: number; /** Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to `normal`. */ order?: PaginationOrder | (string & {}); /** Filter assignments by the slug of the role. */ role_slug?: string; } export interface ListAuthorizationRolesControllerRequest {} export interface ListAuthorizedApplicationsControllerRequest { /** The ID of the user. */ user_id: string; /** An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `before="obj_123"` to fetch a new batch of objects before `"obj_123"`. */ before?: string; /** An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `after="obj_123"` to fetch a new batch of objects after `"obj_123"`. */ after?: string; /** Upper limit on the number of objects to return, between `1` and `100`. */ limit?: number; /** Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to `normal`. */ order?: PaginationOrder | (string & {}); } /** The scopes granted by the user to the application. */ export type AuthorizedConnectApplicationListDataItemGrantedScopesList = Array; export interface AuthorizedConnectApplicationListDataItem { /** Distinguishes the authorized connect application object. */ object: string; /** The unique ID of the authorized connect application. */ id: string; /** The scopes granted by the user to the application. */ granted_scopes: AuthorizedConnectApplicationListDataItemGrantedScopesList; /** The OAuth resource associated with the authorized connect application, if one was requested. */ oauth_resource?: string; application: ConnectApplication; } /** The list of records for the current page. */ export type AuthorizedConnectApplicationListDataList = Array; /** Pagination cursors for navigating between pages of results. */ export type AuthorizedConnectApplicationListListMetadata = AuditLogValidatorVersionsControllerSchemasResponseListMetadata; export interface AuthorizedConnectApplicationList { /** Indicates this is a list response. */ object?: string; /** The list of records for the current page. */ data?: AuthorizedConnectApplicationListDataList; /** Pagination cursors for navigating between pages of results. */ list_metadata?: AuditLogValidatorVersionsControllerSchemasResponseListMetadata; } export type ListConnectionsControllerRequestConnectionType = | "ADFSSAML" | "AdpOidc" | "AppleOAuth" | "Auth0SAML" | "AzureSAML" | "BitbucketOAuth" | "CasSAML" | "CloudflareSAML" | "ClassLinkSAML" | "CleverOIDC" | "CyberArkSAML" | "DuoSAML" | "EntraIdOIDC" | "GenericOIDC" | "GenericSAML" | "GithubOAuth" | "GitLabOAuth" | "GoogleOAuth" | "GoogleOIDC" | "GoogleSAML" | "IntuitOAuth" | "JumpCloudSAML" | "KeycloakSAML" | "LastPassSAML" | "LinkedInOAuth" | "LoginGovOidc" | "MagicLink" | "MicrosoftOAuth" | "MiniOrangeSAML" | "NetIqSAML" | "OktaOIDC" | "OktaSAML" | "OneLoginSAML" | "OracleSAML" | "PingFederateSAML" | "PingOneSAML" | "RipplingSAML" | "SalesforceSAML" | "ShibbolethGenericSAML" | "ShibbolethSAML" | "SimpleSamlPhpSAML" | "SalesforceOAuth" | "SlackOAuth" | "VercelMarketplaceOAuth" | "VercelOAuth" | "VMwareSAML" | "XeroOAuth"; export interface ListConnectionsControllerRequest { /** An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. */ before?: string; /** An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. */ after?: string; /** Upper limit on the number of objects to return, between `1` and `100`. */ limit?: number; /** Order the results by the creation time. Defaults to `normal`. */ order?: PaginationOrder | (string & {}); /** Filter Connections by their type. */ connection_type?: ListConnectionsControllerRequestConnectionType | (string & {}); /** Filter Connections by their associated domain. */ domain?: string; /** Filter Connections by their associated organization. */ organization_id?: string; /** Searchable text to match against Connection names. */ search?: string; } /** The list of records for the current page. */ export type ConnectionListDataList = Array; /** Pagination cursors for navigating between pages of results. */ export type ConnectionListListMetadata = AuditLogValidatorVersionsControllerSchemasResponseListMetadata; export interface ConnectionList { /** Indicates this is a list response. */ object?: string; /** The list of records for the current page. */ data?: ConnectionListDataList; /** Pagination cursors for navigating between pages of results. */ list_metadata?: AuditLogValidatorVersionsControllerSchemasResponseListMetadata; } export interface ListCorsOriginsControllerRequest { /** An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `before="obj_123"` to fetch a new batch of objects before `"obj_123"`. */ before?: string; /** An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `after="obj_123"` to fetch a new batch of objects after `"obj_123"`. */ after?: string; /** Upper limit on the number of objects to return, between `1` and `100`. */ limit?: number; /** Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to `normal`. */ order?: PaginationOrder | (string & {}); } /** Pagination cursors for navigating between pages of results. */ export type ListCorsOriginsControllerResponseListMetadata = AuditLogValidatorVersionsControllerSchemasResponseListMetadata; /** The list of records for the current page. */ export type ListCorsOriginsControllerResponseDataList = Array; export interface ListCorsOriginsControllerResponse { /** Indicates this is a list response. */ object?: string; /** Pagination cursors for navigating between pages of results. */ list_metadata?: AuditLogValidatorVersionsControllerSchemasResponseListMetadata; /** The list of records for the current page. */ data?: ListCorsOriginsControllerResponseDataList; } export type ListDataIntegrationsManagementControllerDataIntegrationsRequestOwnership = | "user" | "organization"; export interface ListDataIntegrationsManagementControllerDataIntegrationsRequest { /** An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `before="obj_123"` to fetch a new batch of objects before `"obj_123"`. */ before?: string; /** An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `after="obj_123"` to fetch a new batch of objects after `"obj_123"`. */ after?: string; /** Upper limit on the number of objects to return, between `1` and `100`. */ limit?: number; /** Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to `normal`. */ order?: PaginationOrder | (string & {}); /** Only return Data Integrations with this ownership: `user` for the integrations users connect their own accounts to, or `organization` for the roots organizations connect to. Omit to return both. */ ownership?: | ListDataIntegrationsManagementControllerDataIntegrationsRequestOwnership | (string & {}); } /** The list of records for the current page. */ export type DataIntegrationListDataList = Array; /** Pagination cursors for navigating between pages of results. */ export type DataIntegrationListListMetadata = AuditLogValidatorVersionsControllerSchemasResponseListMetadata; export interface DataIntegrationList { /** Indicates this is a list response. */ object: string; /** The list of records for the current page. */ data: DataIntegrationListDataList; /** Pagination cursors for navigating between pages of results. */ list_metadata: AuditLogValidatorVersionsControllerSchemasResponseListMetadata; } export interface ListDirectoriesControllerRequest { /** An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. */ before?: string; /** An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. */ after?: string; /** Upper limit on the number of objects to return, between `1` and `100`. */ limit?: number; /** Order the results by the creation time. Defaults to `normal`. */ order?: PaginationOrder | (string & {}); /** Filter Directories by their associated organization. */ organization_id?: string; /** Searchable text to match against Directory names. */ search?: string; /** Filter Directories by their associated domain. */ domain?: string; } /** The list of records for the current page. */ export type DirectoryListDataList = Array; /** Pagination cursors for navigating between pages of results. */ export type DirectoryListListMetadata = AuditLogValidatorVersionsControllerSchemasResponseListMetadata; export interface DirectoryList { /** Indicates this is a list response. */ object?: string; /** The list of records for the current page. */ data?: DirectoryListDataList; /** Pagination cursors for navigating between pages of results. */ list_metadata?: AuditLogValidatorVersionsControllerSchemasResponseListMetadata; } export interface ListDirectoryGroupsControllerRequest { /** An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `before="obj_123"` to fetch a new batch of objects before `"obj_123"`. */ before?: string; /** An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `after="obj_123"` to fetch a new batch of objects after `"obj_123"`. */ after?: string; /** Upper limit on the number of objects to return, between `1` and `100`. */ limit?: number; /** Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to `normal`. */ order?: PaginationOrder | (string & {}); /** Unique identifier of the WorkOS Directory. This value can be obtained from the WorkOS dashboard or from the WorkOS API. */ directory?: string; /** Unique identifier of the WorkOS Directory User. This value can be obtained from the WorkOS API. */ user?: string; } /** The list of records for the current page. */ export type DirectoryGroupListDataList = Array; /** Pagination cursors for navigating between pages of results. */ export type DirectoryGroupListListMetadata = AuditLogValidatorVersionsControllerSchemasResponseListMetadata; export interface DirectoryGroupList { /** Indicates this is a list response. */ object?: string; /** The list of records for the current page. */ data?: DirectoryGroupListDataList; /** Pagination cursors for navigating between pages of results. */ list_metadata?: AuditLogValidatorVersionsControllerSchemasResponseListMetadata; } export interface ListDirectoryUsersControllerRequest { /** An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `before="obj_123"` to fetch a new batch of objects before `"obj_123"`. */ before?: string; /** An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `after="obj_123"` to fetch a new batch of objects after `"obj_123"`. */ after?: string; /** Upper limit on the number of objects to return, between `1` and `100`. */ limit?: number; /** Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to `normal`. */ order?: PaginationOrder | (string & {}); /** Unique identifier of the WorkOS Directory. This value can be obtained from the WorkOS dashboard or from the WorkOS API. */ directory?: string; /** Unique identifier of the WorkOS Directory Group. This value can be obtained from the WorkOS API. */ group?: string; /** Filter Directory Users by the identity provider's unique identifier (`idp_id`). Requires the `directory` parameter to also be provided. */ idp_id?: string; /** Filter Directory Users by their primary email address. Requires the `directory` parameter to also be provided. */ email?: string; } /** The list of records for the current page. */ export type DirectoryUserListDataList = Array; /** Pagination cursors for navigating between pages of results. */ export type DirectoryUserListListMetadata = AuditLogValidatorVersionsControllerSchemasResponseListMetadata; export interface DirectoryUserList { /** Indicates this is a list response. */ object?: string; /** The list of records for the current page. */ data?: DirectoryUserListDataList; /** Pagination cursors for navigating between pages of results. */ list_metadata?: AuditLogValidatorVersionsControllerSchemasResponseListMetadata; } export type ListEventsControllerRequestEventsList = Array; export interface ListEventsControllerRequest { /** An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `before="obj_123"` to fetch a new batch of objects before `"obj_123"`. */ before?: string; /** An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `after="obj_123"` to fetch a new batch of objects after `"obj_123"`. */ after?: string; /** Upper limit on the number of objects to return, between `1` and `100`. */ limit?: number; /** Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to `normal`. */ order?: PaginationOrder | (string & {}); /** Filter events by one or more event types (e.g. `dsync.user.created`). */ events: ListEventsControllerRequestEventsList; /** ISO-8601 date string to filter events created after this date. */ range_start?: string; /** ISO-8601 date string to filter events created before this date. */ range_end?: string; /** Filter events by the [Organization](/reference/organization) that the event is associated with. */ organization_id?: string; } /** The event payload. */ export type EventSchemaDataMap = { [key: string]: unknown | undefined }; /** Additional context about the event. */ export type EventSchemaContextMap = { [key: string]: unknown | undefined }; /** An event emitted by WorkOS. */ export interface EventSchema { /** Distinguishes the Event object. */ object: string; /** Unique identifier for the Event. */ id: string; /** The type of event that occurred. */ event: string; /** The event payload. */ data: EventSchemaDataMap; /** An ISO 8601 timestamp. */ created_at: string; /** Additional context about the event. */ context?: EventSchemaContextMap; } /** The list of records for the current page. */ export type EventListDataList = Array; /** Pagination cursor for navigating to the next page of results. */ export interface EventListListMetadata { /** An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. */ after: string | null; } export interface EventList { /** Indicates this is a list response. */ object?: string; /** The list of records for the current page. */ data?: EventListDataList; /** Pagination cursor for navigating to the next page of results. */ list_metadata?: EventListListMetadata; } export interface ListFeatureFlagsControllerRequest { /** An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. */ before?: string; /** An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. */ after?: string; /** Upper limit on the number of objects to return, between `1` and `100`. */ limit?: number; /** Order the results by the creation time. Defaults to `normal`. */ order?: PaginationOrder | (string & {}); } /** The list of records for the current page. */ export type FlagListDataList = Array; /** Pagination cursors for navigating between pages of results. */ export type FlagListListMetadata = AuditLogValidatorVersionsControllerSchemasResponseListMetadata; export interface FlagList { /** Indicates this is a list response. */ object?: string; /** The list of records for the current page. */ data?: FlagListDataList; /** Pagination cursors for navigating between pages of results. */ list_metadata?: AuditLogValidatorVersionsControllerSchemasResponseListMetadata; } export interface ListGroupMembershipsControllerMembersRequest { /** Unique identifier of the Organization. */ organizationId: string; /** Unique identifier of the Group. */ groupId: string; /** An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `before="obj_123"` to fetch a new batch of objects before `"obj_123"`. */ before?: string; /** An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `after="obj_123"` to fetch a new batch of objects after `"obj_123"`. */ after?: string; /** Upper limit on the number of objects to return, between `1` and `100`. */ limit?: number; /** Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to `normal`. */ order?: PaginationOrder | (string & {}); } /** The status of the organization membership. One of `active`, `inactive`, or `pending`. */ export type UserlandUserOrganizationMembershipBaseListDataItemStatus = | "active" | "inactive" | "pending"; /** An object containing IdP-sourced attributes from the linked [Directory User](/reference/directory-sync/directory-user) or [SSO Profile](/reference/sso/profile). Directory User attributes take precedence when both are linked. */ export type UserlandUserOrganizationMembershipBaseListDataItemCustomAttributesMap = { [key: string]: unknown | undefined; }; export interface UserlandUserOrganizationMembershipBaseListDataItem { /** Distinguishes the organization membership object. */ object: string; /** The unique ID of the organization membership. */ id: string; /** The ID of the user. */ user_id: string; /** The ID of the organization which the user belongs to. */ organization_id: string; /** The status of the organization membership. One of `active`, `inactive`, or `pending`. */ status: UserlandUserOrganizationMembershipBaseListDataItemStatus; /** Whether this organization membership is managed by a directory sync connection. */ directory_managed: boolean; /** The name of the organization which the user belongs to. */ organization_name?: string; /** An object containing IdP-sourced attributes from the linked [Directory User](/reference/directory-sync/directory-user) or [SSO Profile](/reference/sso/profile). Directory User attributes take precedence when both are linked. */ custom_attributes?: UserlandUserOrganizationMembershipBaseListDataItemCustomAttributesMap; /** An ISO 8601 timestamp. */ created_at: string; /** An ISO 8601 timestamp. */ updated_at: string; } /** The list of records for the current page. */ export type UserlandUserOrganizationMembershipBaseListDataList = Array; /** Pagination cursors for navigating between pages of results. */ export type UserlandUserOrganizationMembershipBaseListListMetadata = AuditLogValidatorVersionsControllerSchemasResponseListMetadata; export interface UserlandUserOrganizationMembershipBaseList { /** Indicates this is a list response. */ object?: string; /** The list of records for the current page. */ data?: UserlandUserOrganizationMembershipBaseListDataList; /** Pagination cursors for navigating between pages of results. */ list_metadata?: AuditLogValidatorVersionsControllerSchemasResponseListMetadata; } export interface ListGroupsControllerRequest { /** The ID of the organization. */ organizationId: string; /** An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `before="obj_123"` to fetch a new batch of objects before `"obj_123"`. */ before?: string; /** An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `after="obj_123"` to fetch a new batch of objects after `"obj_123"`. */ after?: string; /** Upper limit on the number of objects to return, between `1` and `100`. */ limit?: number; /** Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to `normal`. */ order?: PaginationOrder | (string & {}); /** Search groups by name or by group ID. */ search?: string; } /** The list of records for the current page. */ export type GroupListDataList = Array; /** Pagination cursors for navigating between pages of results. */ export type GroupListListMetadata = AuditLogValidatorVersionsControllerSchemasResponseListMetadata; export interface GroupList { /** Indicates this is a list response. */ object?: string; /** The list of records for the current page. */ data?: GroupListDataList; /** Pagination cursors for navigating between pages of results. */ list_metadata?: AuditLogValidatorVersionsControllerSchemasResponseListMetadata; } export interface ListItContactsControllerRequest { /** The ID of the organization. */ organization_id: string; } /** The list of records for the current page. */ export type ItContactListDataList = Array; /** Pagination cursors for navigating between pages of results. */ export type ItContactListListMetadata = AuditLogValidatorVersionsControllerSchemasResponseListMetadata; export interface ItContactList { /** Indicates this is a list response. */ object: string; /** The list of records for the current page. */ data: ItContactListDataList; /** Pagination cursors for navigating between pages of results. */ list_metadata: AuditLogValidatorVersionsControllerSchemasResponseListMetadata; } export interface ListOrganizationApiKeysControllerRequest { /** Unique identifier of the Organization. */ organizationId: string; /** An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. */ before?: string; /** An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. */ after?: string; /** Upper limit on the number of objects to return, between `1` and `100`. */ limit?: number; /** Order the results by the creation time. Defaults to `normal`. */ order?: PaginationOrder | (string & {}); } /** The entity that owns the API Key. */ export type OrganizationApiKeyOwner = ApiKeyOwnerCase0; /** The permission slugs assigned to the API Key. */ export type OrganizationApiKeyPermissionsList = Array; export interface OrganizationApiKey { /** Distinguishes the API Key object. */ object: string; /** Unique identifier of the API Key. */ id: string; /** The entity that owns the API Key. */ owner: ApiKeyOwnerCase0; /** A descriptive name for the API Key. */ name: string; /** An obfuscated representation of the API Key value. */ obfuscated_value: string; /** Timestamp of when the API Key was last used. */ last_used_at: string | null; /** Timestamp when the API Key expires. Null means the key does not expire. */ expires_at: string | null; /** The permission slugs assigned to the API Key. */ permissions: OrganizationApiKeyPermissionsList; /** An ISO 8601 timestamp. */ created_at: string; /** An ISO 8601 timestamp. */ updated_at: string; } /** The list of records for the current page. */ export type OrganizationApiKeyListDataList = Array; /** Pagination cursors for navigating between pages of results. */ export type OrganizationApiKeyListListMetadata = AuditLogValidatorVersionsControllerSchemasResponseListMetadata; export interface OrganizationApiKeyList { /** Indicates this is a list response. */ object: string; /** The list of records for the current page. */ data: OrganizationApiKeyListDataList; /** Pagination cursors for navigating between pages of results. */ list_metadata: AuditLogValidatorVersionsControllerSchemasResponseListMetadata; } export interface ListOrganizationAuthorizedApplicationsControllerRequest { /** The ID of the organization. */ organization_id: string; /** An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `before="obj_123"` to fetch a new batch of objects before `"obj_123"`. */ before?: string; /** An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `after="obj_123"` to fetch a new batch of objects after `"obj_123"`. */ after?: string; /** Upper limit on the number of objects to return, between `1` and `100`. */ limit?: number; /** Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to `normal`. */ order?: PaginationOrder | (string & {}); } /** The scopes granted by the user to the application. */ export type OrganizationAuthorizedConnectApplicationListDataItemGrantedScopesList = Array; export interface OrganizationAuthorizedConnectApplicationListDataItem { /** Distinguishes the authorized connect application object. */ object: string; /** The unique ID of the authorized connect application. */ id: string; /** The scopes granted by the user to the application. */ granted_scopes: OrganizationAuthorizedConnectApplicationListDataItemGrantedScopesList; /** The OAuth resource associated with the authorized connect application, if one was requested. */ oauth_resource?: string; application: ConnectApplication; /** The ID of the user who authorized the application. */ user_id: string; } /** The list of records for the current page. */ export type OrganizationAuthorizedConnectApplicationListDataList = Array; /** Pagination cursors for navigating between pages of results. */ export type OrganizationAuthorizedConnectApplicationListListMetadata = AuditLogValidatorVersionsControllerSchemasResponseListMetadata; export interface OrganizationAuthorizedConnectApplicationList { /** Indicates this is a list response. */ object: string; /** The list of records for the current page. */ data: OrganizationAuthorizedConnectApplicationListDataList; /** Pagination cursors for navigating between pages of results. */ list_metadata: AuditLogValidatorVersionsControllerSchemasResponseListMetadata; } export interface ListOrganizationFeatureFlagsControllerRequest { /** Unique identifier of the Organization. */ organizationId: string; /** An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. */ before?: string; /** An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. */ after?: string; /** Upper limit on the number of objects to return, between `1` and `100`. */ limit?: number; /** Order the results by the creation time. Defaults to `desc`. */ order?: PaginationOrder | (string & {}); } export interface ListOrganizationMembershipGroupsControllerGroupsRequest { /** Unique identifier of the Organization Membership. */ omId: string; /** An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `before="obj_123"` to fetch a new batch of objects before `"obj_123"`. */ before?: string; /** An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `after="obj_123"` to fetch a new batch of objects after `"obj_123"`. */ after?: string; /** Upper limit on the number of objects to return, between `1` and `100`. */ limit?: number; /** Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to `normal`. */ order?: PaginationOrder | (string & {}); } export type ListOrganizationsControllerRequestDomainsList = Array; export interface ListOrganizationsControllerRequest { /** An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `before="obj_123"` to fetch a new batch of objects before `"obj_123"`. */ before?: string; /** An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `after="obj_123"` to fetch a new batch of objects after `"obj_123"`. */ after?: string; /** Upper limit on the number of objects to return, between `1` and `100`. */ limit?: number; /** Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to `normal`. */ order?: PaginationOrder | (string & {}); /** The domains of an Organization. Any Organization with a matching domain will be returned. */ domains?: ListOrganizationsControllerRequestDomainsList; /** Searchable text for an Organization. Matches against the organization name. */ search?: string; } /** The list of records for the current page. */ export type OrganizationListDataList = Array; /** Pagination cursors for navigating between pages of results. */ export type OrganizationListListMetadata = AuditLogValidatorVersionsControllerSchemasResponseListMetadata; export interface OrganizationList { /** Indicates this is a list response. */ object?: string; /** The list of records for the current page. */ data?: OrganizationListDataList; /** Pagination cursors for navigating between pages of results. */ list_metadata?: AuditLogValidatorVersionsControllerSchemasResponseListMetadata; } export interface ListProviderControllerForOrganizationRequest { /** An [Organization](/reference/organization) identifier to list provider configurations for. */ organizationId: string; } export type DataIntegrationConfigurationResponseScopesList = Array; /** The provider-specific config values in effect for this organization, keyed by config field. Reflects the organization override for organization-credential providers, otherwise the provider root. Empty when none are configured. */ export type DataIntegrationConfigurationResponseConfigMap = { [key: string]: string | undefined }; /** The credentials type for this integration (e.g., `shared`, `custom`, or `organization`). */ export type DataIntegrationCredentialsCredentialsType = "shared" | "custom" | "organization"; /** Organization-managed OAuth credential configuration. Present only for integrations whose credentials are supplied by the organization; absent otherwise. */ export interface DataIntegrationCredentials2 { /** The credentials type for this integration (e.g., `shared`, `custom`, or `organization`). */ credentials_type: DataIntegrationCredentialsCredentialsType; /** Whether the organization has supplied OAuth credentials for this integration. */ has_credentials: boolean; /** The OAuth client ID supplied by the organization, or `null` when none is configured. */ client_id: string | null; /** The last four characters of the organization-supplied OAuth client secret, or `null` when none is configured. */ client_secret_last_four: string | null; /** The redirect URI to register with the provider when configuring the organization-managed OAuth application. */ redirect_uri: string; } export interface DataIntegrationConfigurationResponse { /** Distinguishes the data integration configuration object. */ object: string; /** The unique identifier of the data integration. */ id: string; /** The [Organization](/reference/organization) this configuration applies to. */ organization_id: string; /** The slug identifier of the provider (e.g., `github`, `slack`, `notion`). */ slug: string; /** The display name of the data integration. */ name: string; /** Whether the integration is enabled for this organization. Reflects the organization override when one exists, otherwise the provider default. */ enabled: boolean; /** The OAuth scopes in effect for this organization. Reflects the organization override when one is set, otherwise the provider scopes, or `null` when none are configured. */ scopes: DataIntegrationConfigurationResponseScopesList | null; /** The provider-specific config values in effect for this organization, keyed by config field. Reflects the organization override for organization-credential providers, otherwise the provider root. Empty when none are configured. */ config: DataIntegrationConfigurationResponseConfigMap; /** The timestamp when the configuration was created. */ created_at: string; /** The timestamp when the configuration was last updated. */ updated_at: string; credentials?: DataIntegrationCredentials2; } /** A list of data integration configurations for the organization. */ export type DataIntegrationConfigurationListResponseDataList = Array; export interface DataIntegrationConfigurationListResponse { /** Indicates this is a list response. */ object: string; /** A list of data integration configurations for the organization. */ data: DataIntegrationConfigurationListResponseDataList; } export interface ListRedirectUrisControllerRequest { /** An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `before="obj_123"` to fetch a new batch of objects before `"obj_123"`. */ before?: string; /** An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `after="obj_123"` to fetch a new batch of objects after `"obj_123"`. */ after?: string; /** Upper limit on the number of objects to return, between `1` and `100`. */ limit?: number; /** Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to `normal`. */ order?: PaginationOrder | (string & {}); } /** Pagination cursors for navigating between pages of results. */ export type ListRedirectUrisControllerResponseListMetadata = AuditLogValidatorVersionsControllerSchemasResponseListMetadata; /** The list of records for the current page. */ export type ListRedirectUrisControllerResponseDataList = Array; export interface ListRedirectUrisControllerResponse { /** Indicates this is a list response. */ object?: string; /** Pagination cursors for navigating between pages of results. */ list_metadata?: AuditLogValidatorVersionsControllerSchemasResponseListMetadata; /** The list of records for the current page. */ data?: ListRedirectUrisControllerResponseDataList; } export interface ListSamlIdpSigningCertificatesControllerRequest { /** Unique identifier for the Connection. */ connectionId: string; } /** Every Identity Provider signing certificate on the Connection, including expired ones, oldest first. */ export type SamlIdpSigningCertificateListDataList = Array; export interface SamlIdpSigningCertificateList { object: string; /** Every Identity Provider signing certificate on the Connection, including expired ones, oldest first. */ data: SamlIdpSigningCertificateListDataList; } export interface ListSamlSpEncryptionCertificatesControllerRequest { /** Unique identifier for the Connection. */ connectionId: string; } /** Every Service Provider encryption certificate on the Connection, including expired ones. */ export type SamlSpEncryptionCertificateListDataList = Array; export interface SamlSpEncryptionCertificateList { object: string; /** Every Service Provider encryption certificate on the Connection, including expired ones. */ data: SamlSpEncryptionCertificateListDataList; } export interface ListUserApiKeysControllerRequest { /** Unique identifier of the user. */ userId: string; /** An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. */ before?: string; /** An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. */ after?: string; /** Upper limit on the number of objects to return, between `1` and `100`. */ limit?: number; /** Order the results by the creation time. Defaults to `normal`. */ order?: PaginationOrder | (string & {}); /** The ID of the organization to filter user API keys by. When provided, only API keys created against that organization membership are returned. */ organization_id?: string; } /** The entity that owns the API Key. */ export type UserApiKeyOwner = ApiKeyOwnerCase1; /** The permission slugs assigned to the API Key. */ export type UserApiKeyPermissionsList = Array; export interface UserApiKey { /** Distinguishes the API Key object. */ object: string; /** Unique identifier of the API Key. */ id: string; /** The entity that owns the API Key. */ owner: ApiKeyOwnerCase1; /** A descriptive name for the API Key. */ name: string; /** An obfuscated representation of the API Key value. */ obfuscated_value: string; /** Timestamp of when the API Key was last used. */ last_used_at: string | null; /** Timestamp when the API Key expires. Null means the key does not expire. */ expires_at: string | null; /** The permission slugs assigned to the API Key. */ permissions: UserApiKeyPermissionsList; /** An ISO 8601 timestamp. */ created_at: string; /** An ISO 8601 timestamp. */ updated_at: string; } /** The list of records for the current page. */ export type UserApiKeyListDataList = Array; /** Pagination cursors for navigating between pages of results. */ export type UserApiKeyListListMetadata = AuditLogValidatorVersionsControllerSchemasResponseListMetadata; export interface UserApiKeyList { /** Indicates this is a list response. */ object: string; /** The list of records for the current page. */ data: UserApiKeyListDataList; /** Pagination cursors for navigating between pages of results. */ list_metadata: AuditLogValidatorVersionsControllerSchemasResponseListMetadata; } export interface ListUserlandUserFeatureFlagsControllerRequest { /** The ID of the user. */ userId: string; /** An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. */ before?: string; /** An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. */ after?: string; /** Upper limit on the number of objects to return, between `1` and `100`. */ limit?: number; /** Order the results by the creation time. Defaults to `desc`. */ order?: PaginationOrder | (string & {}); } export interface ListUserlandUserInvitesControllerRequest { /** An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `before="obj_123"` to fetch a new batch of objects before `"obj_123"`. */ before?: string; /** An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `after="obj_123"` to fetch a new batch of objects after `"obj_123"`. */ after?: string; /** Upper limit on the number of objects to return, between `1` and `100`. */ limit?: number; /** Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to `desc`. */ order?: PaginationOrder | (string & {}); /** The ID of the [organization](/reference/organization) that the recipient will join. */ organization_id?: string; /** The email address of the recipient. */ email?: string; } /** The list of records for the current page. */ export type UserlandUserInviteListDataList = Array; /** Pagination cursors for navigating between pages of results. */ export type UserlandUserInviteListListMetadata = AuditLogValidatorVersionsControllerSchemasResponseListMetadata; export interface UserlandUserInviteList { /** Indicates this is a list response. */ object: string; /** The list of records for the current page. */ data: UserlandUserInviteListDataList; /** Pagination cursors for navigating between pages of results. */ list_metadata: AuditLogValidatorVersionsControllerSchemasResponseListMetadata; } export type ListUserlandUserOrganizationMembershipsControllerRequestStatusesItem = | "active" | "inactive" | "pending"; export type ListUserlandUserOrganizationMembershipsControllerRequestStatusesList = Array< ListUserlandUserOrganizationMembershipsControllerRequestStatusesItem | (string & {}) >; export interface ListUserlandUserOrganizationMembershipsControllerRequest { /** An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `before="obj_123"` to fetch a new batch of objects before `"obj_123"`. */ before?: string; /** An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `after="obj_123"` to fetch a new batch of objects after `"obj_123"`. */ after?: string; /** Upper limit on the number of objects to return, between `1` and `100`. */ limit?: number; /** Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to `desc`. */ order?: PaginationOrder | (string & {}); /** The ID of the [organization](/reference/organization) which the user belongs to. */ organization_id?: string; /** Filter by the status of the organization membership. Array including any of `active`, `inactive`, or `pending`. */ statuses?: ListUserlandUserOrganizationMembershipsControllerRequestStatusesList; /** The ID of the [user](/reference/authkit/user). */ user_id?: string; } /** The list of records for the current page. */ export type UserlandUserOrganizationMembershipListDataList = Array; /** Pagination cursors for navigating between pages of results. */ export type UserlandUserOrganizationMembershipListListMetadata = AuditLogValidatorVersionsControllerSchemasResponseListMetadata; export interface UserlandUserOrganizationMembershipList { /** Indicates this is a list response. */ object: string; /** The list of records for the current page. */ data: UserlandUserOrganizationMembershipListDataList; /** Pagination cursors for navigating between pages of results. */ list_metadata: AuditLogValidatorVersionsControllerSchemasResponseListMetadata; } export interface ListUserlandUserSessionsControllerRequest { /** The ID of the user. */ id: string; /** An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `before="obj_123"` to fetch a new batch of objects before `"obj_123"`. */ before?: string; /** An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `after="obj_123"` to fetch a new batch of objects after `"obj_123"`. */ after?: string; /** Upper limit on the number of objects to return, between `1` and `100`. */ limit?: number; /** Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to `desc`. */ order?: PaginationOrder | (string & {}); } /** Pagination cursors for navigating between pages of results. */ export type ListUserlandUserSessionsControllerResponseListMetadata = AuditLogValidatorVersionsControllerSchemasResponseListMetadata; /** Information about the impersonator if this session was created via impersonation. */ export interface ListUserlandUserSessionsControllerResponseDataItemImpersonator { /** The email address of the WorkOS Dashboard user who is impersonating the user. */ email: string; /** The justification the impersonator gave for impersonating the user. */ reason: string | null; } /** The authentication method used to create this session. */ export type ListUserlandUserSessionsControllerResponseDataItemAuthMethod = | "cross_app_auth" | "external_auth" | "impersonation" | "magic_code" | "migrated_session" | "oauth" | "passkey" | "password" | "sso" | "unknown"; /** The current status of the session. */ export type ListUserlandUserSessionsControllerResponseDataItemStatus = | "active" | "expired" | "revoked"; export interface ListUserlandUserSessionsControllerResponseDataItem { /** Distinguishes the session object. */ object: string; /** The unique ID of the session. */ id: string; /** Information about the impersonator if this session was created via impersonation. */ impersonator?: ListUserlandUserSessionsControllerResponseDataItemImpersonator; /** The IP address from which the session was created. */ ip_address: string | null; /** The ID of the organization this session is associated with. */ organization_id?: string; /** The user agent string from the device that created the session. */ user_agent: string | null; /** The ID of the user this session belongs to. */ user_id: string; /** The authentication method used to create this session. */ auth_method: ListUserlandUserSessionsControllerResponseDataItemAuthMethod; /** The current status of the session. */ status: ListUserlandUserSessionsControllerResponseDataItemStatus; /** The timestamp when the session expires. */ expires_at: string; /** The timestamp when the session ended. */ ended_at: string | null; /** An ISO 8601 timestamp. */ created_at: string; /** An ISO 8601 timestamp. */ updated_at: string; } /** The list of records for the current page. */ export type ListUserlandUserSessionsControllerResponseDataList = Array; export interface ListUserlandUserSessionsControllerResponse { /** Indicates this is a list response. */ object?: string; /** Pagination cursors for navigating between pages of results. */ list_metadata?: AuditLogValidatorVersionsControllerSchemasResponseListMetadata; /** The list of records for the current page. */ data?: ListUserlandUserSessionsControllerResponseDataList; } export interface ListWaitlistsControllerRequest {} export interface Waitlist { /** Distinguishes the Waitlist object. */ object: string; /** The unique ID of the Waitlist. */ id: string; /** An ISO 8601 timestamp. */ created_at: string; /** An ISO 8601 timestamp. */ updated_at: string; } /** The list of records for the current page. */ export type ListWaitlistsControllerResponseDataList = Array; /** Pagination cursors for navigating between pages of results. */ export type ListWaitlistsControllerResponseListMetadata = AuditLogValidatorVersionsControllerSchemasResponseListMetadata; export interface ListWaitlistsControllerResponse { /** Indicates this is a list response. */ object: string; /** The list of records for the current page. */ data: ListWaitlistsControllerResponseDataList; /** Pagination cursors for navigating between pages of results. */ list_metadata: AuditLogValidatorVersionsControllerSchemasResponseListMetadata; } export type ListWaitlistsControllerEntriesRequestState = "pending" | "approved" | "denied"; export interface ListWaitlistsControllerEntriesRequest { /** The unique ID of the waitlist, or the literal `default` for the environment's default waitlist. The default waitlist is created when its first entry is added, so read requests for `default` return a `404` until then. */ id: string; /** An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `before="obj_123"` to fetch a new batch of objects before `"obj_123"`. */ before?: string; /** An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `after="obj_123"` to fetch a new batch of objects after `"obj_123"`. */ after?: string; /** Upper limit on the number of objects to return, between `1` and `100`. */ limit?: number; /** Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to `normal`. */ order?: PaginationOrder | (string & {}); /** Filter waitlist entries by their state. */ state?: ListWaitlistsControllerEntriesRequestState | (string & {}); /** Filter waitlist entries by their exact email address. */ email?: string; } /** Pagination cursors for navigating between pages of results. */ export type ListWaitlistsControllerEntriesResponseListMetadata = AuditLogValidatorVersionsControllerSchemasResponseListMetadata; /** The list of records for the current page. */ export type ListWaitlistsControllerEntriesResponseDataList = Array; export interface ListWaitlistsControllerEntriesResponse { /** Indicates this is a list response. */ object?: string; /** Pagination cursors for navigating between pages of results. */ list_metadata?: AuditLogValidatorVersionsControllerSchemasResponseListMetadata; /** The list of records for the current page. */ data?: ListWaitlistsControllerEntriesResponseDataList; } export interface ListWebhookEndpointsControllerRequest { /** An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `before="obj_123"` to fetch a new batch of objects before `"obj_123"`. */ before?: string; /** An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `after="obj_123"` to fetch a new batch of objects after `"obj_123"`. */ after?: string; /** Upper limit on the number of objects to return, between `1` and `100`. */ limit?: number; /** Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to `normal`. */ order?: PaginationOrder | (string & {}); } /** The list of records for the current page. */ export type WebhookEndpointListDataList = Array; /** Pagination cursors for navigating between pages of results. */ export type WebhookEndpointListListMetadata = AuditLogValidatorVersionsControllerSchemasResponseListMetadata; export interface WebhookEndpointList { /** Indicates this is a list response. */ object?: string; /** The list of records for the current page. */ data?: WebhookEndpointListDataList; /** Pagination cursors for navigating between pages of results. */ list_metadata?: AuditLogValidatorVersionsControllerSchemasResponseListMetadata; } export interface LogoutSsoControllerRequest { /** The logout token returned from the [Logout Authorize](/reference/sso/logout/authorize) endpoint. */ token: string; } export interface LogoutSsoControllerResponse {} export interface LogoutUserlandSessionsControllerRequest { /** The ID of the session. This can be extracted from the `sid` claim of the access token. */ session_id: string; /** The URL to redirect the user to after logout. */ return_to?: string; } export interface LogoutUserlandSessionsControllerResponse {} export interface OrganizationsControllerFindRequest { /** Unique identifier of the Organization. */ id: string; } export interface PatchConnectionStandardAttributesDto { /** The IdP attribute or claim the profile's `idp_id` is mapped from. */ idp_id?: string; /** The IdP attribute or claim the profile's `email` is mapped from. */ email?: string; /** The IdP attribute or claim the profile's `first_name` is mapped from. */ first_name?: string; /** The IdP attribute or claim the profile's `last_name` is mapped from. */ last_name?: string; /** The IdP attribute or claim the profile's `groups` are mapped from. Set to `null` to unset the mapping. */ groups?: string | null; /** The IdP attribute or claim the profile's `name` is mapped from. Set to `null` to unset the mapping. */ name?: string | null; } /** How IdP attributes or claims map onto custom attributes, keyed by custom attribute name. Custom attributes must already be defined in the WorkOS dashboard. Only the provided keys are updated; a `null` value unsets that mapping. */ export type PatchConnectionAttributeMapsDtoCustomAttributesMap = { [key: string]: string | null | undefined; }; export interface PatchConnectionAttributeMapsDto { /** How IdP attributes or claims map onto the standard WorkOS profile fields. Only the provided fields are updated. */ standard_attributes?: PatchConnectionStandardAttributesDto; /** How IdP attributes or claims map onto custom attributes, keyed by custom attribute name. Custom attributes must already be defined in the WorkOS dashboard. Only the provided keys are updated; a `null` value unsets that mapping. */ custom_attributes?: PatchConnectionAttributeMapsDtoCustomAttributesMap; } export interface PatchConnectionSamlOptionsDto { /** The Identity Provider metadata URL. When provided, the IdP fields and signing certificates are re-imported from the metadata document, replacing the current set. Mutually exclusive with the manual IdP fields. Set to `null` to stop tracking a metadata URL. */ idp_metadata_url?: string | null; /** A custom Assertion Consumer Service (ACS) URL override. Set to `null` to revert to the standard WorkOS-generated ACS URL. */ acs_url?: string | null; /** A custom Service Provider Entity ID (audience) override. Set to `null` to revert to the connection external key. */ sp_entity_id?: string | null; /** The Identity Provider Entity ID. */ idp_entity_id?: string; /** The Identity Provider SSO URL. */ idp_sso_url?: string; } /** The token-endpoint client authentication method. Moving to `private_key_jwt` generates a signing key pair if the connection has none; its certificate is returned in `oidc_options.jwt_signing_certs` and must be registered at the Identity Provider. */ export type PatchConnectionOidcOptionsDtoTokenAuthenticationMethod = | "client_secret_post" | "client_secret_basic" | "private_key_jwt"; /** The ID-token signing algorithm. */ export type PatchConnectionOidcOptionsDtoIdTokenSignatureAlgorithm = | "ES256" | "ES384" | "ES512" | "EdDSA" | "HS256" | "HS384" | "HS512" | "PS256" | "PS384" | "PS512" | "RS256" | "RS384" | "RS512"; export interface PatchConnectionOidcOptionsDto { /** The OIDC discovery endpoint. */ discovery_endpoint?: string; /** The OIDC client ID. */ client_id?: string; /** The OIDC client secret. Required when moving the connection to `client_secret_basic` or `client_secret_post`, and rejected for `private_key_jwt`, which authenticates with a key pair instead. This value is write-only and is never returned. */ client_secret?: string | Redacted.Redacted; /** A custom OAuth callback URL override. Set to `null` to revert to the standard WorkOS-generated redirect URI. */ redirect_uri?: string | null; /** Whether PKCE is enabled for the connection. */ pkce?: boolean; /** The token-endpoint client authentication method. Moving to `private_key_jwt` generates a signing key pair if the connection has none; its certificate is returned in `oidc_options.jwt_signing_certs` and must be registered at the Identity Provider. */ token_authentication_method?: | PatchConnectionOidcOptionsDtoTokenAuthenticationMethod | (string & {}); /** The ID-token signing algorithm. */ id_token_signature_algorithm?: | PatchConnectionOidcOptionsDtoIdTokenSignatureAlgorithm | (string & {}); /** Whether to fetch additional profile attributes from the userinfo endpoint. */ fetch_user_info?: boolean; } export interface PatchConnectionsControllerRequest { /** Unique identifier for the Connection. */ id: string; /** A human-readable name for the Connection. */ name?: string; /** The customer-owned identifier for the Connection. Set to `null` to stop tracking one. */ external_id?: string | null; /** The type of the Connection. Immutable after creation -- it may be sent, but only with the Connection current type. */ connection_type?: string; /** How IdP attributes or claims map onto WorkOS profile fields. Only the provided fields are updated. */ attribute_maps?: PatchConnectionAttributeMapsDto; /** Protocol configuration for SAML connections. Only the provided fields are updated. Mutually exclusive with `oidc_options`. */ saml_options?: PatchConnectionSamlOptionsDto; /** Protocol configuration for OIDC connections. Only the provided fields are updated. Mutually exclusive with `saml_options`. */ oidc_options?: PatchConnectionOidcOptionsDto; } export type ProviderControllerConfigureRequestScopesList = Array; /** Provider-specific config values to set for the organization, keyed by config field. Only fields the provider declares are accepted, and each value must match that field's pattern. Accepted only for providers whose credentials are organization-managed; for shared or custom credential providers, config belongs on the integration itself (via the data-integrations API) and supplying it here is rejected. */ export type ProviderControllerConfigureRequestConfigMap = { [key: string]: string | undefined }; export interface ProviderControllerConfigureRequest { /** An [Organization](/reference/organization) identifier to configure the provider for. */ organizationId: string; /** The slug identifier of the provider to configure (e.g., `github`, `slack`, `notion`). */ slug: string; /** Whether the provider is enabled for the organization. */ enabled?: boolean; /** The OAuth scopes to request for the organization. Pass `null` to inherit the provider scopes. */ scopes?: ProviderControllerConfigureRequestScopesList | null; /** The OAuth client ID of the organization's own application. Must be provided together with `client_secret`, and only for providers whose credentials are supplied by the organization. */ client_id?: string; /** The OAuth client secret of the organization's own application. Must be provided together with `client_id`. */ client_secret?: string | Redacted.Redacted; /** Provider-specific config values to set for the organization, keyed by config field. Only fields the provider declares are accepted, and each value must match that field's pattern. Accepted only for providers whose credentials are organization-managed; for shared or custom credential providers, config belongs on the integration itself (via the data-integrations API) and supplying it here is rejected. */ config?: ProviderControllerConfigureRequestConfigMap; } /** The authentication method being used. */ export type RadarStandaloneControllerAssessRequestAuthMethod = | "Password" | "Passkey" | "Authenticator" | "SMS_OTP" | "Email_OTP" | "Social" | "SSO" | "Other"; /** The action being performed. */ export type RadarStandaloneControllerAssessRequestAction = "sign-up" | "sign-in"; export interface RadarStandaloneControllerAssessRequest { /** The IP address of the request to assess. */ ip_address: string; /** The user agent string of the request to assess. */ user_agent: string; /** The email address of the user making the request. */ email: string; /** The authentication method being used. */ auth_method: RadarStandaloneControllerAssessRequestAuthMethod | (string & {}); /** The action being performed. */ action: RadarStandaloneControllerAssessRequestAction | (string & {}); /** An optional Radar signals ID for the request. */ signals_id?: string; } /** The verdict of the risk assessment. */ export type RadarStandaloneResponseVerdict = "allow" | "block" | "challenge"; /** The Radar control that triggered the verdict. Only present if the verdict is `block` or `challenge`. */ export type RadarStandaloneResponseControl = | "bot_detection" | "brute_force_attack" | "impossible_travel" | "repeat_sign_up" | "stale_account" | "unrecognized_device" | "restriction"; /** The type of blocklist entry that triggered the verdict. Only present if the control is `restriction`. */ export type RadarStandaloneResponseBlocklistType = | "ip_address" | "domain" | "email" | "device" | "user_agent" | "device_fingerprint" | "country"; export interface RadarStandaloneResponse { /** The verdict of the risk assessment. */ verdict?: RadarStandaloneResponseVerdict; /** A human-readable reason for the verdict. */ reason?: string; /** Unique identifier of the authentication attempt. */ attempt_id?: string; /** The Radar control that triggered the verdict. Only present if the verdict is `block` or `challenge`. */ control?: RadarStandaloneResponseControl; /** The type of blocklist entry that triggered the verdict. Only present if the control is `restriction`. */ blocklist_type?: RadarStandaloneResponseBlocklistType; } export type RadarStandaloneControllerDeleteRadarListEntryRequestType = | "ip_address" | "domain" | "email" | "device" | "user_agent" | "device_fingerprint" | "country"; export type RadarStandaloneControllerDeleteRadarListEntryRequestAction = "block" | "allow"; export interface RadarStandaloneControllerDeleteRadarListEntryRequest { /** The type of the Radar list (e.g. ip_address, domain, email). */ type: RadarStandaloneControllerDeleteRadarListEntryRequestType | (string & {}); /** The list action indicating whether to remove the entry from the allow or block list. */ action: RadarStandaloneControllerDeleteRadarListEntryRequestAction | (string & {}); /** The value to remove from the list. Must match an existing entry. */ entry: string; } export interface RadarStandaloneControllerDeleteRadarListEntryResponse {} export type RadarStandaloneControllerUpdateRadarListRequestType = | "ip_address" | "domain" | "email" | "device" | "user_agent" | "device_fingerprint" | "country"; export type RadarStandaloneControllerUpdateRadarListRequestAction = "block" | "allow"; export interface RadarStandaloneControllerUpdateRadarListRequest { /** The type of the Radar list (e.g. ip_address, domain, email). */ type: RadarStandaloneControllerUpdateRadarListRequestType | (string & {}); /** The list action indicating whether to add the entry to the allow or block list. */ action: RadarStandaloneControllerUpdateRadarListRequestAction | (string & {}); /** The value to add to the list. Must match the format of the list type (e.g. a valid IP address for `ip_address`, a valid email for `email`). */ entry: string; } export interface RadarListEntryAlreadyPresentResponse { /** A message indicating the entry already exists. */ message?: string; } export interface RemoveAuthorizationGroupRoleAssignmentsControllerGroupRoleAssignmentRequest { /** The ID of the group. */ group_id: string; /** The ID of the group role assignment to remove. */ role_assignment_id: string; } export interface RemoveAuthorizationGroupRoleAssignmentsControllerGroupRoleAssignmentResponse {} export interface RemoveAuthorizationGroupRoleAssignmentsControllerGroupRoleAssignmentsRequest { /** The ID of the group. */ group_id: string; /** The slug of the role to remove assignments for. */ role_slug: string; /** The ID of the resource. Mutually exclusive with `resource_external_id` and `resource_type_slug`. */ resource_id?: string; /** The external ID of the resource. */ resource_external_id?: string; /** The resource type slug. */ resource_type_slug?: string; } export interface RemoveAuthorizationGroupRoleAssignmentsControllerGroupRoleAssignmentsResponse {} export interface RemoveAuthorizationOrganizationRolePermissionsControllerPermissionRequest { /** The ID of the organization. */ organizationId: string; /** The slug of the role. */ slug: string; /** The slug of the permission to remove. */ permissionSlug: string; } export interface RemoveAuthorizationRoleAssignmentsControllerRoleByCriteriaRequest { /** The ID of the organization membership. */ organization_membership_id: string; /** The slug of the role to remove. */ role_slug: string; /** The ID of the resource. Mutually exclusive with `resource_external_id` and `resource_type_slug`. */ resource_id?: string; /** The external ID of the resource. Required with `resource_type_slug`. Mutually exclusive with `resource_id`. */ resource_external_id?: string; /** The resource type slug. Required with `resource_external_id`. Mutually exclusive with `resource_id`. */ resource_type_slug?: string; } export interface RemoveAuthorizationRoleAssignmentsControllerRoleByCriteriaResponse {} export interface RemoveAuthorizationRoleAssignmentsControllerRoleByIdRequest { /** The ID of the organization membership. */ organization_membership_id: string; /** The ID of the role assignment to remove. */ role_assignment_id: string; } export interface RemoveAuthorizationRoleAssignmentsControllerRoleByIdResponse {} export interface RemoveGroupMembershipsControllerMemberRequest { /** Unique identifier of the Organization. */ organizationId: string; /** Unique identifier of the Group. */ groupId: string; /** Unique identifier of the Organization Membership. */ omId: string; } export interface RemoveGroupMembershipsControllerMemberResponse {} export interface ReplaceGroupRoleAssignmentEntryDto { /** The slug of the role to assign to the group. */ role_slug: string; /** The ID of the resource. Omit along with the external-id fields to target the organization itself. */ resource_id?: string; /** The external ID of the resource. */ resource_external_id?: string; /** The resource type slug. */ resource_type_slug?: string; } /** The list of role assignments that should exist for the group. All existing assignments will be replaced. */ export type ReplaceAuthorizationGroupRoleAssignmentsControllerGroupRoleAssignmentsRequestRoleAssignmentsList = Array; export interface ReplaceAuthorizationGroupRoleAssignmentsControllerGroupRoleAssignmentsRequest { /** The ID of the group. */ group_id: string; /** The list of role assignments that should exist for the group. All existing assignments will be replaced. */ role_assignments: ReplaceAuthorizationGroupRoleAssignmentsControllerGroupRoleAssignmentsRequestRoleAssignmentsList; } /** The locale to use when rendering the invitation email. See [supported locales](/authkit/hosted-ui/localization). */ export type ResendUserlandUserInvitesControllerRequestLocale = | "af" | "am" | "ar" | "bg" | "bn" | "bs" | "ca" | "cs" | "da" | "de" | "de-DE" | "el" | "en" | "en-AU" | "en-CA" | "en-GB" | "en-US" | "es" | "es-419" | "es-ES" | "es-US" | "et" | "fa" | "fi" | "fil" | "fr" | "fr-BE" | "fr-CA" | "fr-FR" | "fy" | "gl" | "gu" | "ha" | "he" | "hi" | "hr" | "hu" | "hy" | "id" | "is" | "it" | "it-IT" | "ja" | "jv" | "ka" | "kk" | "km" | "kn" | "ko" | "lt" | "lv" | "mk" | "ml" | "mn" | "mr" | "ms" | "my" | "nb" | "ne" | "nl" | "nl-BE" | "nl-NL" | "nn" | "no" | "pa" | "pl" | "pt" | "pt-BR" | "pt-PT" | "ro" | "ru" | "sk" | "sl" | "sq" | "sr" | "sv" | "sw" | "ta" | "te" | "th" | "tr" | "uk" | "ur" | "uz" | "vi" | "zh" | "zh-CN" | "zh-HK" | "zh-TW" | "zu"; export interface ResendUserlandUserInvitesControllerRequest { /** The unique ID of the invitation. */ id: string; /** The locale to use when rendering the invitation email. See [supported locales](/authkit/hosted-ui/localization). */ locale?: ResendUserlandUserInvitesControllerRequestLocale | (string & {}); } export interface ResetUserlandUsersControllerPassword0Request { /** The password reset token. */ token?: string; /** The new password to set for the user. */ new_password?: string | Redacted.Redacted; } export interface ResetPasswordResponse { /** The user whose password was reset. */ user?: UserlandUser; } export interface RevokeAgentInstanceSessionsControllerRequest { /** The unique ID of the agent instance session. */ agent_instance_session_id: string; } export interface RevokeItContactsControllerRequest { /** The ID of the organization. */ organization_id: string; /** The ID of the IT contact. */ contact_id: string; } export interface RevokeItContactsControllerResponse {} export interface RevokeUserlandSessionsControllerSessionRequest { /** The ID of the session to revoke. This can be extracted from the `sid` claim of the access token. */ session_id?: string; } export interface RevokeUserlandSessionsControllerSessionResponse {} export interface RevokeUserlandUserInvitesControllerRequest { /** The unique ID of the invitation. */ id: string; } /** The state of the invitation. */ export type RevokeUserlandUserInvitesControllerResponseState = | "pending" | "accepted" | "expired" | "revoked"; export interface RevokeUserlandUserInvitesControllerResponse { /** Distinguishes the invitation object. */ object: string; /** The unique ID of the invitation. */ id: string; /** The email address of the recipient. */ email: string; /** The state of the invitation. */ state: RevokeUserlandUserInvitesControllerResponseState; /** The timestamp when the invitation was accepted, or null if not yet accepted. */ accepted_at: string | null; /** The timestamp when the invitation was revoked, or null if not revoked. */ revoked_at: string | null; /** The timestamp when the invitation expires. */ expires_at: string; /** The ID of the [organization](/reference/organization) that the recipient will join. */ organization_id: string | null; /** The ID of the user who invited the recipient, if provided. */ inviter_user_id: string | null; /** The ID of the user who accepted the invitation, once accepted. */ accepted_user_id: string | null; /** Slug of the role the invitee will be assigned on acceptance. Reflects the current role on the invitee's organization membership. null when the invitation has no associated organization. */ role_slug: string | null; /** An ISO 8601 timestamp. */ created_at: string; /** An ISO 8601 timestamp. */ updated_at: string; /** The token used to accept the invitation. */ token: string; /** The URL where the recipient can accept the invitation. */ accept_invitation_url: string; } export interface SendPublicRadarChallengesControllerRadarSmsChallengeRequest { /** The ID of the user to send the SMS challenge to. */ user_id: string; /** The pending authentication token from a previous authentication attempt that triggered the Radar challenge. */ pending_authentication_token: string; /** The phone number to send the SMS verification code to. */ phone_number: string; /** The IP address of the user's request. */ ip_address?: string; /** The user agent string from the user's request. */ user_agent?: string; } export interface SendRadarSmsChallengeResponse { /** The ID of the SMS verification. Pass this to the authenticate endpoint to verify the code. */ verification_id: string; /** The phone number the verification code was sent to. */ phone_number: string; } export interface SendUserlandUsersControllerEmailChangeRequest { /** The unique ID of the user. */ id: string; /** The new email address to change to. */ new_email?: string; } export interface EmailChange { /** Distinguishes the email change object. */ object?: string; user?: UserlandUser; /** The new email address the user is changing to. */ new_email?: string; /** The timestamp when the email change code expires. */ expires_at?: string; /** The timestamp when the email change challenge was created. */ created_at?: string; } export interface SendUserlandUsersControllerVerificationEmail0Request { /** The ID of the user. */ id: string; } export interface SendVerificationEmailResponse { /** The user to whom the verification email was sent. */ user?: UserlandUser; } /** The permission slugs to assign to the role. */ export type SetAuthorizationOrganizationRolePermissionsControllerPermissionsRequestPermissionsList = Array; export interface SetAuthorizationOrganizationRolePermissionsControllerPermissionsRequest { /** The ID of the organization. */ organizationId: string; /** The slug of the role. */ slug: string; /** The permission slugs to assign to the role. */ permissions?: SetAuthorizationOrganizationRolePermissionsControllerPermissionsRequestPermissionsList; } /** Whether the role is scoped to the environment or an organization (custom role). */ export type SetAuthorizationOrganizationRolePermissionsControllerPermissionsResponseType = | "EnvironmentRole" | "OrganizationRole"; /** The permission slugs assigned to the role. */ export type SetAuthorizationOrganizationRolePermissionsControllerPermissionsResponsePermissionsList = Array; export interface SetAuthorizationOrganizationRolePermissionsControllerPermissionsResponse { /** A unique slug for the role. */ slug: string; /** Distinguishes the role object. */ object: string; /** Unique identifier of the role. */ id: string; /** A descriptive name for the role. */ name: string; /** An optional description of the role. */ description: string | null; /** Whether the role is scoped to the environment or an organization (custom role). */ type: SetAuthorizationOrganizationRolePermissionsControllerPermissionsResponseType; /** The slug of the resource type the role is scoped to. */ resource_type_slug: string; /** The permission slugs assigned to the role. */ permissions: SetAuthorizationOrganizationRolePermissionsControllerPermissionsResponsePermissionsList; /** An ISO 8601 timestamp. */ created_at: string; /** An ISO 8601 timestamp. */ updated_at: string; } /** The permission slugs to assign to the role. */ export type SetAuthorizationRolePermissionsControllerPermissionsRequestPermissionsList = Array; export interface SetAuthorizationRolePermissionsControllerPermissionsRequest { /** The slug of the environment role. */ slug: string; /** The permission slugs to assign to the role. */ permissions?: SetAuthorizationRolePermissionsControllerPermissionsRequestPermissionsList; } /** Whether the role is scoped to the environment or an organization (custom role). */ export type SetAuthorizationRolePermissionsControllerPermissionsResponseType = | "EnvironmentRole" | "OrganizationRole"; /** The permission slugs assigned to the role. */ export type SetAuthorizationRolePermissionsControllerPermissionsResponsePermissionsList = Array; export interface SetAuthorizationRolePermissionsControllerPermissionsResponse { /** A unique slug for the role. */ slug: string; /** Distinguishes the role object. */ object: string; /** Unique identifier of the role. */ id: string; /** A descriptive name for the role. */ name: string; /** An optional description of the role. */ description: string | null; /** Whether the role is scoped to the environment or an organization (custom role). */ type: SetAuthorizationRolePermissionsControllerPermissionsResponseType; /** The slug of the resource type the role is scoped to. */ resource_type_slug: string; /** The permission slugs assigned to the role. */ permissions: SetAuthorizationRolePermissionsControllerPermissionsResponsePermissionsList; /** An ISO 8601 timestamp. */ created_at: string; /** An ISO 8601 timestamp. */ updated_at: string; } export interface SsoControllerJsonWebKeySetRequest { /** Identifies the application making the request to the WorkOS server. You can obtain your client ID from the [API Keys](https://dashboard.workos.com/api-keys) page in the dashboard. */ clientId: string; } /** X.509 certificate chain. */ export type JwksResponseKeysItemX5cList = Array; export interface JwksResponseKeysItem { /** Algorithm. */ alg: string; /** Key type. */ kty: string; /** Key use (signature). */ use: string; /** X.509 certificate chain. */ x5c: JwksResponseKeysItemX5cList; /** RSA modulus. */ n: string; /** RSA exponent. */ e: string; /** Key ID. */ kid: string; /** X.509 certificate SHA-256 thumbprint. */ x5t_S256: string; } /** The public keys used for verifying access tokens. */ export type JwksResponseKeysList = Array; export interface JwksResponse { /** The public keys used for verifying access tokens. */ keys?: JwksResponseKeysList; } export interface SsoControllerLogoutAuthorizeRequest { /** The unique ID of the profile to log out. */ profile_id: string; } export interface SsoLogoutAuthorizeResponse { /** The URL to redirect the user to in order to log out ([Logout Redirect](/reference/sso/logout) endpoint ready to use). */ logout_url?: string; /** The logout token to be used in the [Logout Redirect](/reference/sso/logout) endpoint. */ logout_token?: string; } export type SsoControllerTokenRequestGrantType = | "authorization_code" | "urn:ietf:params:oauth:grant-type:token-exchange"; export interface SsoControllerTokenRequest { /** The client ID of the WorkOS environment. */ client_id: string; /** The client secret of the WorkOS environment. */ client_secret: string; /** The authorization code received from the authorization callback. Required when `grant_type` is `authorization_code`. */ code?: string; /** The grant type for the token request. */ grant_type: SsoControllerTokenRequestGrantType | (string & {}); /** The PKCE code verifier matching the `code_challenge` sent with the authorization request. Required when the authorization request included a `code_challenge`. Must be sent in the request body. */ code_verifier?: string; /** The OIDC ID token to exchange. Required when `grant_type` is `urn:ietf:params:oauth:grant-type:token-exchange`. Must be sent in the request body. */ subject_token?: string; /** The type of the subject token. Required when `grant_type` is `urn:ietf:params:oauth:grant-type:token-exchange`. Must be sent in the request body. */ subject_token_type?: string; /** The ID of the organization whose connection the subject token is validated against. Required when `grant_type` is `urn:ietf:params:oauth:grant-type:token-exchange`. Must be sent in the request body. */ organization_id?: string; } /** A list of OAuth scopes for which the access token is authorized. */ export type SsoTokenResponseOauthTokensScopesList = Array; /** OAuth tokens issued by the identity provider, if available. */ export interface SsoTokenResponseOauthTokens { /** The OAuth provider used for authentication. */ provider: string; /** The refresh token from the OAuth provider. */ refresh_token: string | Redacted.Redacted; /** The access token from the OAuth provider. */ access_token: string | Redacted.Redacted; /** The timestamp at which the access token expires. */ expires_at: number; /** A list of OAuth scopes for which the access token is authorized. */ scopes: SsoTokenResponseOauthTokensScopesList; } export interface SsoTokenResponse { /** The type of token issued. */ token_type?: string; /** An access token that can be exchanged for a user profile. Access tokens are short-lived -- see the `expires_in` field for the exact lifetime. */ access_token?: string | Redacted.Redacted; /** The lifetime of the access token in seconds. */ expires_in?: number; /** The user profile returned by the identity provider. */ profile?: Profile; /** OAuth tokens issued by the identity provider, if available. */ oauth_tokens?: SsoTokenResponseOauthTokens; } export interface SyncDirectoriesControllerDirectoryRequest { /** Unique identifier for the Directory. */ id: string; } export interface SyncDirectoriesControllerDirectoryResponse {} /** Permission slugs forming the ceiling on what sessions minted from this blueprint may do. Each slug must exist in the environment. */ export type UpdateAgentBlueprintsControllerRequestPermissionsList = Array; /** Role slugs whose members may mint user-delegated sessions from this blueprint. An empty list allows any member. */ export type UpdateAgentBlueprintsControllerRequestInvocableByRoleSlugsList = Array; /** Organizations in which sessions may be minted from this blueprint, enforced on user-delegated, autonomous, and agent-delegated mints. An empty list allows any organization in the environment. */ export type UpdateAgentBlueprintsControllerRequestInvocableByOrganizationIdsList = Array; /** Who may mint sessions from this blueprint. Omitted lists are left unchanged. */ export interface UpdateAgentBlueprintsControllerRequestInvocableBy { /** Role slugs whose members may mint user-delegated sessions from this blueprint. An empty list allows any member. */ role_slugs?: UpdateAgentBlueprintsControllerRequestInvocableByRoleSlugsList; /** Organizations in which sessions may be minted from this blueprint, enforced on user-delegated, autonomous, and agent-delegated mints. An empty list allows any organization in the environment. */ organization_ids?: UpdateAgentBlueprintsControllerRequestInvocableByOrganizationIdsList; } export type UpdateAgentBlueprintsControllerRequestInvocableAsInstanceTypesItem = | "delegated" | "autonomous"; /** Instance types that may be minted from this blueprint: `delegated` and/or `autonomous`. At least one is required; existing sessions of a removed type are refused at their next refresh. */ export type UpdateAgentBlueprintsControllerRequestInvocableAsInstanceTypesList = Array< UpdateAgentBlueprintsControllerRequestInvocableAsInstanceTypesItem | (string & {}) >; /** How sessions may be minted from this blueprint. Omitted lists are left unchanged. */ export interface UpdateAgentBlueprintsControllerRequestInvocableAs { /** Instance types that may be minted from this blueprint: `delegated` and/or `autonomous`. At least one is required; existing sessions of a removed type are refused at their next refresh. */ instance_types?: UpdateAgentBlueprintsControllerRequestInvocableAsInstanceTypesList; } /** Token and session lifetimes for sessions minted from this blueprint. Omitted fields are left unchanged. */ export interface UpdateAgentBlueprintsControllerRequestSessionSettings { /** Maximum lifetime of a session in seconds; refreshes never extend a session past this. At most 31,536,000 (365 days). */ max_age_seconds?: number; /** Lifetime of each minted access token in seconds. At most 3,600 (1 hour). */ access_token_ttl_seconds?: number; /** Lifetime of each rotated refresh token in seconds. At most 5,184,000 (60 days). */ refresh_token_ttl_seconds?: number; } export interface UpdateAgentBlueprintsControllerRequest { /** The unique ID of the agent blueprint. */ agent_blueprint_id: string; /** Human-readable name of the agent blueprint. */ name?: string; /** Human-readable description of the agent blueprint. Pass `null` to clear it. */ description?: string | null; /** Permission slugs forming the ceiling on what sessions minted from this blueprint may do. Each slug must exist in the environment. */ permissions?: UpdateAgentBlueprintsControllerRequestPermissionsList; /** Who may mint sessions from this blueprint. Omitted lists are left unchanged. */ invocable_by?: UpdateAgentBlueprintsControllerRequestInvocableBy; /** How sessions may be minted from this blueprint. Omitted lists are left unchanged. */ invocable_as?: UpdateAgentBlueprintsControllerRequestInvocableAs; /** Token and session lifetimes for sessions minted from this blueprint. Omitted fields are left unchanged. */ session_settings?: UpdateAgentBlueprintsControllerRequestSessionSettings; } /** The OAuth scopes granted to the application. */ export type UpdateApplicationsControllerRequestScopesList = Array; /** Updated redirect URIs for the application. OAuth applications only. */ export type UpdateApplicationsControllerRequestRedirectUrisList = Array; export interface UpdateApplicationsControllerRequest { /** The application ID or client ID of the Connect Application. */ id: string; /** The name of the application. */ name?: string; /** A description for the application. */ description?: string | null; /** The OAuth scopes granted to the application. */ scopes?: UpdateApplicationsControllerRequestScopesList | null; /** Updated redirect URIs for the application. OAuth applications only. */ redirect_uris?: UpdateApplicationsControllerRequestRedirectUrisList | null; } /** The scopes available for this application. */ export type UpdateApplicationsControllerResponseScopesList = Array; export type UpdateApplicationsControllerResponseRedirectUrisItem = ApplicationsControllerFindResponseRedirectUrisItem; /** The redirect URIs configured for this application. */ export type UpdateApplicationsControllerResponseRedirectUrisList = Array; export interface UpdateApplicationsControllerResponse { /** Distinguishes the connect application object. */ object: string; /** The unique ID of the connect application. */ id: string; /** The client ID of the connect application. */ client_id: string; /** A description of the connect application. */ description: string | null; /** The name of the connect application. */ name: string; /** The scopes available for this application. */ scopes: UpdateApplicationsControllerResponseScopesList; /** An ISO 8601 timestamp. */ created_at: string; /** An ISO 8601 timestamp. */ updated_at: string; /** The type of the application. */ application_type?: string; /** The redirect URIs configured for this application. */ redirect_uris?: UpdateApplicationsControllerResponseRedirectUrisList; /** Whether the application uses PKCE for authorization. */ uses_pkce?: boolean; /** Whether the application is a first-party application. */ is_first_party?: boolean; /** Whether the application was dynamically registered. */ was_dynamically_registered?: boolean; /** The ID of the organization the application belongs to. */ organization_id?: string; } /** The period Audit Log events will be retained. Valid values are `1_MONTH` through `11_MONTHS` in one-month increments and `1_YEAR` through `10_YEARS` in one-year increments. Mutually exclusive with `retention_period_in_days`. */ export type UpdateAuditLogsRetentionDtoCase0RetentionPeriod = | "1_MONTH" | "2_MONTHS" | "3_MONTHS" | "4_MONTHS" | "5_MONTHS" | "6_MONTHS" | "7_MONTHS" | "8_MONTHS" | "9_MONTHS" | "10_MONTHS" | "11_MONTHS" | "1_YEAR" | "2_YEARS" | "3_YEARS" | "4_YEARS" | "5_YEARS" | "6_YEARS" | "7_YEARS" | "8_YEARS" | "9_YEARS" | "10_YEARS"; export interface UpdateAuditLogsRetentionDtoCase0 { /** The period Audit Log events will be retained. Valid values are `1_MONTH` through `11_MONTHS` in one-month increments and `1_YEAR` through `10_YEARS` in one-year increments. Mutually exclusive with `retention_period_in_days`. */ retention_period: UpdateAuditLogsRetentionDtoCase0RetentionPeriod | (string & {}); } export interface UpdateAuditLogsRetentionDtoCase1 { /** The number of days Audit Log events will be retained. Valid values are `30` through `330` in 30-day increments and `365` through `3650` in 365-day increments. Deprecated: use `retention_period` instead. Mutually exclusive with `retention_period`. */ retention_period_in_days: number; } export type UpdateAuditLogsRetentionDto = | UpdateAuditLogsRetentionDtoCase0 | UpdateAuditLogsRetentionDtoCase1; export interface UpdateAuditLogsRetentionControllerAuditLogsRetentionRequest { /** Unique identifier of the Organization. */ id: string; body: UpdateAuditLogsRetentionDto; } export interface UpdateAuthorizationOrganizationRolesControllerRequest { /** The ID of the organization. */ organizationId: string; /** The slug of the role. */ slug: string; /** A descriptive name for the role. */ name?: string; /** An optional description of the role's purpose. */ description?: string | null; } /** Whether the role is scoped to the environment or an organization (custom role). */ export type UpdateAuthorizationOrganizationRolesControllerResponseType = | "EnvironmentRole" | "OrganizationRole"; /** The permission slugs assigned to the role. */ export type UpdateAuthorizationOrganizationRolesControllerResponsePermissionsList = Array; export interface UpdateAuthorizationOrganizationRolesControllerResponse { /** A unique slug for the role. */ slug: string; /** Distinguishes the role object. */ object: string; /** Unique identifier of the role. */ id: string; /** A descriptive name for the role. */ name: string; /** An optional description of the role. */ description: string | null; /** Whether the role is scoped to the environment or an organization (custom role). */ type: UpdateAuthorizationOrganizationRolesControllerResponseType; /** The slug of the resource type the role is scoped to. */ resource_type_slug: string; /** The permission slugs assigned to the role. */ permissions: UpdateAuthorizationOrganizationRolesControllerResponsePermissionsList; /** An ISO 8601 timestamp. */ created_at: string; /** An ISO 8601 timestamp. */ updated_at: string; } export interface UpdateAuthorizationPermissionsControllerRequest { /** A unique key to reference the permission. Must be lowercase and contain only letters, numbers, hyphens, underscores, colons, periods, and asterisks. */ slug: string; /** A descriptive name for the Permission. */ name?: string; /** An optional description of the Permission. */ description?: string | null; } export interface UpdateAuthorizationResourcesByExternalIdControllerByExternalIdRequest { /** The ID of the organization that owns the resource. */ organization_id: string; /** The slug of the resource type. */ resource_type_slug: string; /** An identifier you provide to reference the resource in your system. */ external_id: string; /** A display name for the resource. */ name?: string; /** An optional description of the resource. */ description?: string | null; /** The ID of the parent resource. Mutually exclusive with `parent_resource_external_id` and `parent_resource_type_slug`. */ parent_resource_id?: string; /** The external ID of the parent resource. Required with `parent_resource_type_slug`. Mutually exclusive with `parent_resource_id`. */ parent_resource_external_id?: string; /** The resource type slug of the parent resource. Required with `parent_resource_external_id`. Mutually exclusive with `parent_resource_id`. */ parent_resource_type_slug?: string; } export interface UpdateAuthorizationResourcesByExternalIdControllerByExternalIdResponse { /** Distinguishes the Resource object. */ object: string; /** A human-readable name for the Resource. */ name: string; /** An optional description of the Resource. */ description: string | null; /** The ID of the organization that owns the resource. */ organization_id: string; /** The ID of the parent resource, if this resource is nested. */ parent_resource_id: string | null; /** The unique ID of the Resource. */ id: string; /** An identifier you provide to reference the resource in your system. */ external_id: string; /** The slug of the resource type this resource belongs to. */ resource_type_slug: string; /** An ISO 8601 timestamp. */ created_at: string; /** An ISO 8601 timestamp. */ updated_at: string; } export interface UpdateAuthorizationResourcesControllerRequest { /** The ID of the authorization resource. */ resource_id: string; /** A display name for the resource. */ name?: string; /** An optional description of the resource. */ description?: string | null; /** The ID of the parent resource. Mutually exclusive with `parent_resource_external_id` and `parent_resource_type_slug`. */ parent_resource_id?: string; /** The external ID of the parent resource. Required with `parent_resource_type_slug`. Mutually exclusive with `parent_resource_id`. */ parent_resource_external_id?: string; /** The resource type slug of the parent resource. Required with `parent_resource_external_id`. Mutually exclusive with `parent_resource_id`. */ parent_resource_type_slug?: string; } export interface UpdateAuthorizationResourcesControllerResponse { /** Distinguishes the Resource object. */ object: string; /** A human-readable name for the Resource. */ name: string; /** An optional description of the Resource. */ description: string | null; /** The ID of the organization that owns the resource. */ organization_id: string; /** The ID of the parent resource, if this resource is nested. */ parent_resource_id: string | null; /** The unique ID of the Resource. */ id: string; /** An identifier you provide to reference the resource in your system. */ external_id: string; /** The slug of the resource type this resource belongs to. */ resource_type_slug: string; /** An ISO 8601 timestamp. */ created_at: string; /** An ISO 8601 timestamp. */ updated_at: string; } export interface UpdateAuthorizationRolesControllerRequest { /** The slug of the environment role. */ slug: string; /** A descriptive name for the role. */ name?: string; /** An optional description of the role. */ description?: string | null; } /** Whether the role is scoped to the environment or an organization (custom role). */ export type UpdateAuthorizationRolesControllerResponseType = "EnvironmentRole" | "OrganizationRole"; /** The permission slugs assigned to the role. */ export type UpdateAuthorizationRolesControllerResponsePermissionsList = Array; export interface UpdateAuthorizationRolesControllerResponse { /** A unique slug for the role. */ slug: string; /** Distinguishes the role object. */ object: string; /** Unique identifier of the role. */ id: string; /** A descriptive name for the role. */ name: string; /** An optional description of the role. */ description: string | null; /** Whether the role is scoped to the environment or an organization (custom role). */ type: UpdateAuthorizationRolesControllerResponseType; /** The slug of the resource type the role is scoped to. */ resource_type_slug: string; /** The permission slugs assigned to the role. */ permissions: UpdateAuthorizationRolesControllerResponsePermissionsList; /** An ISO 8601 timestamp. */ created_at: string; /** An ISO 8601 timestamp. */ updated_at: string; } /** The OAuth scopes to request for the Data Integration. Pass `null` to reset to the provider's configured scopes. */ export type UpdateDataIntegrationsManagementControllerDataIntegrationRequestScopesList = Array; /** Additional static query parameters appended to the authorization request. */ export type UpdateCustomProviderDefinitionDtoAdditionalAuthorizationParametersMap = { [key: string]: string | undefined; }; /** How client credentials are sent when exchanging authorization codes and refreshing tokens. */ export type UpdateCustomProviderDefinitionDtoAuthenticateVia = "request_body" | "basic_auth_header"; export interface UpdateCustomProviderDefinitionDto { /** A descriptive name for the custom provider. */ name?: string; /** The provider's OAuth authorization endpoint. Must be a static URL: `${config....}` placeholders are resolved against a provider's declared config fields, which custom providers cannot declare. */ authorization_url?: string; /** The provider's OAuth token endpoint. Must be a static URL: `${config....}` placeholders are resolved against a provider's declared config fields, which custom providers cannot declare. */ token_url?: string; /** The endpoint used to refresh tokens, if different from the token endpoint. Must be a static URL, like the other endpoints. */ refresh_token_url?: string | null; /** Whether PKCE is used during the authorization code flow. */ pkce_enabled?: boolean; /** The separator used to join requested scopes. */ request_scope_separator?: string; /** Whether at least one scope must be selected when connecting an account. */ scopes_required?: boolean; /** Whether a client secret is required for this provider. */ client_secret_required?: boolean; /** Additional static query parameters appended to the authorization request. */ additional_authorization_parameters?: UpdateCustomProviderDefinitionDtoAdditionalAuthorizationParametersMap; /** The Content-Type used when exchanging the token request. */ token_body_content_type?: string; /** How client credentials are sent when exchanging authorization codes and refreshing tokens. */ authenticate_via?: UpdateCustomProviderDefinitionDtoAuthenticateVia | (string & {}); } export interface UpdateDataIntegrationsManagementControllerDataIntegrationRequest { /** The slug identifier of the data integration. */ slug: string; /** An optional description of the Data Integration. */ description?: string | null; /** Whether the Data Integration is enabled. */ enabled?: boolean; /** The OAuth scopes to request for the Data Integration. Pass `null` to reset to the provider's configured scopes. */ scopes?: UpdateDataIntegrationsManagementControllerDataIntegrationRequestScopesList | null; /** New OAuth credentials for the Data Integration. When provided, rotates the stored client secret. Mutually exclusive with `api_key`. */ credentials?: DataIntegrationCredentialsDto; /** An API key to install or rotate for a tenant on an `api_key` integration. Upserts the tenant installation identified by `user_id` (and optional `organization_id`). */ api_key?: ApiKeyInstallationDto; /** Updates to a custom provider's OAuth definition. Only valid for custom-provider integrations. */ custom_provider?: UpdateCustomProviderDefinitionDto; } /** The OAuth scopes to request for the Data Integration. Pass `null` to reset to the provider's configured scopes. */ export type UpdateDataIntegrationsManagementControllerOrganizationDataIntegrationRequestScopesList = Array; export interface UpdateDataIntegrationsManagementControllerOrganizationDataIntegrationRequest { /** The slug identifier of the data integration. */ slug: string; /** An optional description of the Data Integration. */ description?: string | null; /** Whether the Data Integration is enabled. */ enabled?: boolean; /** The OAuth scopes to request for the Data Integration. Pass `null` to reset to the provider's configured scopes. */ scopes?: UpdateDataIntegrationsManagementControllerOrganizationDataIntegrationRequestScopesList | null; /** New OAuth credentials for the Data Integration. When provided, rotates the stored client secret. Mutually exclusive with `api_key`. */ credentials?: DataIntegrationCredentialsDto; /** An API key to install or rotate for a tenant on an `api_key` integration. Upserts the tenant installation identified by `user_id` (and optional `organization_id`). */ api_key?: ApiKeyInstallationDto; /** Updates to a custom provider's OAuth definition. Only valid for custom-provider integrations. */ custom_provider?: UpdateCustomProviderDefinitionDto; } /** The OAuth scopes granted for this connection. */ export type UpdateDataIntegrationsOrganizationControllerOrganizationDataInstallationRequestScopesList = Array; /** Explicitly set the state of the connected account. When omitted, the state is derived from the token combination provided. */ export type UpdateDataIntegrationsOrganizationControllerOrganizationDataInstallationRequestState = | "connected" | "needs_reauthorization"; export interface UpdateDataIntegrationsOrganizationControllerOrganizationDataInstallationRequest { /** An [Organization](/reference/organization) identifier. */ organization_id: string; /** The slug identifier of the provider (e.g., `github`, `slack`, `notion`). */ slug: string; /** Accepted for compatibility; does not change update targeting. Omit intent and selector to update the compatibility connection, or supply `connected_account_id` to update an exact connection. */ supports_multiple_connections?: boolean; /** A [connected account](/reference/pipes/connected-account) identifier. Use this to select the connection to update. */ connected_account_id?: string; /** Set to `reauthorize` with `connected_account_id` to update one exact connection. The intent may be omitted when supplying an ID. Omit both for permanent compatibility behavior. */ connection_intent?: string; /** A mutable, non-unique connection label; null clears it. Not an account identifier. */ account_display_name?: string | null; /** A developer-attested account identifier; null clears it. */ account_identifier?: string | null; /** The OAuth access token for the connected account. */ access_token?: string | Redacted.Redacted; /** The OAuth refresh token for the connected account. */ refresh_token?: string | Redacted.Redacted; /** The ISO-8601 timestamp when the access token expires. Required when `access_token` is provided for tokens that expire. */ expires_at?: string; /** The OAuth scopes granted for this connection. */ scopes?: UpdateDataIntegrationsOrganizationControllerOrganizationDataInstallationRequestScopesList; /** Explicitly set the state of the connected account. When omitted, the state is derived from the token combination provided. */ state?: | UpdateDataIntegrationsOrganizationControllerOrganizationDataInstallationRequestState | (string & {}); /** The [User](/reference/authkit/user) identifier of the organization member on whose behalf the connected account is being imported or updated. The user must be an active member of the organization. */ user_id: string; } /** The OAuth scopes granted for this connection. */ export type UpdateDataIntegrationsUserManagementControllerUserDataInstallationRequestScopesList = Array; /** Explicitly set the state of the connected account. When omitted, the state is derived from the token combination provided. */ export type UpdateDataIntegrationsUserManagementControllerUserDataInstallationRequestState = | "connected" | "needs_reauthorization"; export interface UpdateDataIntegrationsUserManagementControllerUserDataInstallationRequest { /** A [User](/reference/authkit/user) identifier. */ user_id: string; /** The slug identifier of the provider (e.g., `github`, `slack`, `notion`). */ slug: string; /** An [Organization](/reference/organization) identifier. Optional parameter if the connection is scoped to an organization. */ organization_id?: string; /** Accepted for compatibility; does not change update targeting. Omit intent and selector to update the compatibility connection, or supply `connected_account_id` to update an exact connection. */ supports_multiple_connections?: boolean; /** A [connected account](/reference/pipes/connected-account) identifier. Use this to select the connection to update. */ connected_account_id?: string; /** Set to `reauthorize` with `connected_account_id` to update one exact connection. The intent may be omitted when supplying an ID. Omit both for permanent compatibility behavior. */ connection_intent?: string; /** A mutable, non-unique connection label; null clears it. Not an account identifier. */ account_display_name?: string | null; /** A developer-attested account identifier; null clears it. */ account_identifier?: string | null; /** The OAuth access token for the connected account. */ access_token?: string | Redacted.Redacted; /** The OAuth refresh token for the connected account. */ refresh_token?: string | Redacted.Redacted; /** The ISO-8601 timestamp when the access token expires. Required when `access_token` is provided for tokens that expire. */ expires_at?: string; /** The OAuth scopes granted for this connection. */ scopes?: UpdateDataIntegrationsUserManagementControllerUserDataInstallationRequestScopesList; /** Explicitly set the state of the connected account. When omitted, the state is derived from the token combination provided. */ state?: | UpdateDataIntegrationsUserManagementControllerUserDataInstallationRequestState | (string & {}); } export interface UpdateGroupsControllerRequest { /** The ID of the organization. */ organizationId: string; /** The ID of the group. */ groupId: string; /** The name of the Group. */ name?: string; /** An optional description of the Group. */ description?: string | null; } export interface UpdateJumpWireWebDataVaultControllerRequest { /** Unique identifier of the object. */ id: string; /** New plaintext value. */ value: string; /** ID of the expected current version for optimistic locking. */ version_check?: string | null; } export interface UpdateJwtTemplatesControllerJwtTemplateRequest { /** The JWT template content as a Liquid template string. */ content?: string; } /** The domains associated with the organization. Deprecated in favor of `domain_data`. */ export type UpdateOrganizationsControllerOrganizationRequestDomainsList = Array; /** The domains associated with the organization, including verification state. */ export type UpdateOrganizationsControllerOrganizationRequestDomainDataList = Array; /** Object containing [metadata](/authkit/metadata) key/value pairs associated with the Organization. */ export type UpdateOrganizationsControllerOrganizationRequestMetadataMap = { [key: string]: string | undefined; }; export interface UpdateOrganizationsControllerOrganizationRequest { /** Unique identifier of the Organization. */ id: string; /** The name of the organization. */ name?: string; /** Whether the organization allows profiles from outside the organization to sign in. */ allow_profiles_outside_organization?: boolean; /** The domains associated with the organization. Deprecated in favor of `domain_data`. */ domains?: UpdateOrganizationsControllerOrganizationRequestDomainsList; /** The domains associated with the organization, including verification state. */ domain_data?: UpdateOrganizationsControllerOrganizationRequestDomainDataList; /** The Stripe customer ID associated with the organization. */ stripe_customer_id?: string; /** Object containing [metadata](/authkit/metadata) key/value pairs associated with the Organization. */ metadata?: UpdateOrganizationsControllerOrganizationRequestMetadataMap | null; /** An external identifier for the Organization. */ external_id?: string | null; } export interface UpdateRadarStandaloneControllerRadarAttemptRequest { /** The unique identifier of the Radar attempt to update. */ id: string; /** Set to `"success"` to mark the challenge as completed. */ challenge_status?: string; /** Set to `"success"` to mark the authentication attempt as successful. */ attempt_status?: string; } export interface UpdateRadarStandaloneControllerRadarAttemptResponse {} export interface UpdateUserlandUserOrganizationMembershipDtoCase1 { /** A single role identifier. Defaults to `member` or the explicit default role. Mutually exclusive with `role_slugs`. */ role_slug: string; } /** An array of role identifiers. Limited to one role when Multiple Roles is disabled. Mutually exclusive with `role_slug`. */ export type UpdateUserlandUserOrganizationMembershipDtoCase2RoleSlugsList = Array; export interface UpdateUserlandUserOrganizationMembershipDtoCase2 { /** An array of role identifiers. Limited to one role when Multiple Roles is disabled. Mutually exclusive with `role_slug`. */ role_slugs: UpdateUserlandUserOrganizationMembershipDtoCase2RoleSlugsList; } export type UpdateUserlandUserOrganizationMembershipDto = | unknown | UpdateUserlandUserOrganizationMembershipDtoCase1 | UpdateUserlandUserOrganizationMembershipDtoCase2; export interface UpdateUserlandUserOrganizationMembershipsControllerRequest { /** The unique ID of the organization membership. */ id: string; body: UpdateUserlandUserOrganizationMembershipDto; } /** Whether the Webhook Endpoint is enabled or disabled. */ export type UpdateWebhookEndpointsControllerRequestStatus = "enabled" | "disabled"; export type UpdateWebhookEndpointsControllerRequestEventsItem = | "agent.blueprint.created" | "agent.blueprint.deleted" | "agent.blueprint.updated" | "agent.instance.created" | "agent.instance.deleted" | "agent.instance.session.created" | "agent.instance.session.revoked" | "agent.registration.created" | "agent.registration.claim.attempt.created" | "agent.registration.claim.completed" | "agent.registration.credential.issued" | "agent.registration.deleted" | "agent.registration.refreshed" | "agent.registration.expired" | "agent.registration.organization.switched" | "agent.registration.revoked" | "authentication.email_verification_succeeded" | "authentication.magic_auth_failed" | "authentication.magic_auth_succeeded" | "authentication.mfa_succeeded" | "authentication.oauth_failed" | "authentication.oauth_succeeded" | "authentication.password_failed" | "authentication.password_succeeded" | "authentication.passkey_failed" | "authentication.passkey_succeeded" | "authentication.sso_failed" | "authentication.sso_started" | "authentication.sso_succeeded" | "authentication.sso_timed_out" | "radar.challenge_created" | "authentication.radar_risk_detected" | "authentication.reauthentication_succeeded" | "api_key.created" | "api_key.revoked" | "api_key.updated" | "connection.activated" | "connection.deactivated" | "connection.saml_certificate_renewal_required" | "connection.saml_certificate_renewed" | "connection.deleted" | "dsync.activated" | "dsync.deleted" | "dsync.group.created" | "dsync.group.deleted" | "dsync.group.updated" | "dsync.group.user_added" | "dsync.group.user_removed" | "dsync.user.created" | "dsync.user.deleted" | "dsync.user.updated" | "email_verification.created" | "group.created" | "group.deleted" | "group.member_added" | "group.member_removed" | "group.updated" | "flag.created" | "flag.deleted" | "flag.updated" | "flag.rule_updated" | "invitation.accepted" | "invitation.created" | "invitation.resent" | "invitation.revoked" | "magic_auth.created" | "organization.created" | "organization.deleted" | "organization.updated" | "organization_domain.created" | "organization_domain.deleted" | "organization_domain.updated" | "organization_domain.verified" | "organization_domain.verification_failed" | "password_reset.created" | "password_reset.succeeded" | "user.created" | "user.updated" | "user.deleted" | "organization_membership.created" | "organization_membership.deleted" | "organization_membership.updated" | "role.created" | "role.deleted" | "role.updated" | "organization_role.created" | "organization_role.deleted" | "organization_role.updated" | "permission.created" | "permission.deleted" | "permission.updated" | "pipes.account_connection.add_failed" | "pipes.account_connection.connected" | "pipes.account_connection.connection_failed" | "pipes.account_connection.disconnected" | "pipes.account_connection.reauthorization_needed" | "pipes.connected_account.connected" | "pipes.connected_account.connection_failed" | "pipes.connected_account.disconnected" | "pipes.connected_account.reauthorization_needed" | "session.created" | "session.revoked" | "waitlist_user.approved" | "waitlist_user.created" | "waitlist_user.denied"; /** The events that the Webhook Endpoint is subscribed to. */ export type UpdateWebhookEndpointsControllerRequestEventsList = Array< UpdateWebhookEndpointsControllerRequestEventsItem | (string & {}) >; export interface UpdateWebhookEndpointsControllerRequest { /** Unique identifier of the Webhook Endpoint. */ id: string; /** The HTTPS URL where webhooks will be sent. */ endpoint_url?: string; /** Whether the Webhook Endpoint is enabled or disabled. */ status?: UpdateWebhookEndpointsControllerRequestStatus | (string & {}); /** The events that the Webhook Endpoint is subscribed to. */ events?: UpdateWebhookEndpointsControllerRequestEventsList; } /** Whose connection to create or rotate. `user` (the default) addresses the connection owned by `user_id`. `organization` addresses the connection shared by every member of `organization_id`; `user_id` then identifies the member performing the request and must be an active member of the organization. */ export type UpsertDataIntegrationsControllerApiKeyRequestBodyCase0ConnectionOwner = | "user" | "organization"; export interface UpsertDataIntegrationsControllerApiKeyRequestBodyCase0 { /** A mutable, non-unique label. Omit to preserve an existing label; null clears it. Labels are never account identifiers. */ account_display_name?: string | null; /** A developer-attested provider account identifier, never inferred from a label or credential. Omit to preserve an existing identifier; null clears it. */ account_identifier?: string | null; /** A [User](/reference/authkit/user) identifier. */ user_id: string; /** An [Organization](/reference/organization) identifier. Optional parameter to scope the connection to a specific organization. Required when `connection_owner` is `organization`. */ organization_id?: string; /** Whose connection to create or rotate. `user` (the default) addresses the connection owned by `user_id`. `organization` addresses the connection shared by every member of `organization_id`; `user_id` then identifies the member performing the request and must be an active member of the organization. */ connection_owner?: | UpsertDataIntegrationsControllerApiKeyRequestBodyCase0ConnectionOwner | (string & {}); /** The API key secret to store for this integration. */ secret: string | Redacted.Redacted; } /** Whose connection to create or rotate. `user` (the default) addresses the connection owned by `user_id`. `organization` addresses the connection shared by every member of `organization_id`; `user_id` then identifies the member performing the request and must be an active member of the organization. */ export type UpsertDataIntegrationsControllerApiKeyRequestBodyCase1ConnectionOwner = | "user" | "organization"; export interface UpsertDataIntegrationsControllerApiKeyRequestBodyCase1 { /** A mutable, non-unique label. Omit to preserve an existing label; null clears it. Labels are never account identifiers. */ account_display_name?: string | null; /** A developer-attested provider account identifier, never inferred from a label or credential. Omit to preserve an existing identifier; null clears it. */ account_identifier?: string | null; /** A [User](/reference/authkit/user) identifier. */ user_id: string; /** An [Organization](/reference/organization) identifier. Optional parameter to scope the connection to a specific organization. Required when `connection_owner` is `organization`. */ organization_id?: string; /** Whose connection to create or rotate. `user` (the default) addresses the connection owned by `user_id`. `organization` addresses the connection shared by every member of `organization_id`; `user_id` then identifies the member performing the request and must be an active member of the organization. */ connection_owner?: | UpsertDataIntegrationsControllerApiKeyRequestBodyCase1ConnectionOwner | (string & {}); /** The API key secret to store for this integration. */ secret: string | Redacted.Redacted; /** Reauthorize exactly the connection named by `connected_account_id`. */ connection_intent: string; /** The exact connected account to reauthorize. Required with `connection_intent: reauthorize`. */ connected_account_id: string; } /** Whose connection to create or rotate. `user` (the default) addresses the connection owned by `user_id`. `organization` addresses the connection shared by every member of `organization_id`; `user_id` then identifies the member performing the request and must be an active member of the organization. */ export type UpsertDataIntegrationsControllerApiKeyRequestBodyCase2ConnectionOwner = | "user" | "organization"; export interface UpsertDataIntegrationsControllerApiKeyRequestBodyCase2 { /** A mutable, non-unique label. Omit to preserve an existing label; null clears it. Labels are never account identifiers. */ account_display_name?: string | null; /** A developer-attested provider account identifier, never inferred from a label or credential. Omit to preserve an existing identifier; null clears it. */ account_identifier?: string | null; /** A [User](/reference/authkit/user) identifier. */ user_id: string; /** An [Organization](/reference/organization) identifier. Optional parameter to scope the connection to a specific organization. Required when `connection_owner` is `organization`. */ organization_id?: string; /** Whose connection to create or rotate. `user` (the default) addresses the connection owned by `user_id`. `organization` addresses the connection shared by every member of `organization_id`; `user_id` then identifies the member performing the request and must be an active member of the organization. */ connection_owner?: | UpsertDataIntegrationsControllerApiKeyRequestBodyCase2ConnectionOwner | (string & {}); /** The API key secret to store for this integration. */ secret: string | Redacted.Redacted; /** The exact connected account to reauthorize. The reauthorize intent may be omitted for compatibility. */ connected_account_id: string; } export type UpsertDataIntegrationsControllerApiKeyRequestBody = | UpsertDataIntegrationsControllerApiKeyRequestBodyCase0 | UpsertDataIntegrationsControllerApiKeyRequestBodyCase1 | UpsertDataIntegrationsControllerApiKeyRequestBodyCase2; export interface UpsertDataIntegrationsControllerApiKeyRequest { /** The identifier of the integration. */ slug: string; body: UpsertDataIntegrationsControllerApiKeyRequestBody; } /** Whose connection to create or rotate. `user` (the default) addresses the connection owned by `user_id`. `organization` addresses the connection shared by every member of `organization_id`; `user_id` then identifies the member performing the request and must be an active member of the organization. */ export type UpsertDataIntegrationsControllerClientCredentialsRequestBodyCase0ConnectionOwner = | "user" | "organization"; /** Provider-specific configuration values collected for this installation, keyed by the provider's config field descriptors. */ export type UpsertDataIntegrationsControllerClientCredentialsRequestBodyCase0ConfigMap = { [key: string]: string | undefined; }; export interface UpsertDataIntegrationsControllerClientCredentialsRequestBodyCase0 { /** A mutable, non-unique label. Omit to preserve an existing label; null clears it. Labels are never account identifiers. */ account_display_name?: string | null; /** A developer-attested provider account identifier, never inferred from a label or credential. Omit to preserve an existing identifier; null clears it. */ account_identifier?: string | null; /** A [User](/reference/authkit/user) identifier. */ user_id: string; /** An [Organization](/reference/organization) identifier. Optional parameter to scope the connection to a specific organization. Required when `connection_owner` is `organization`. */ organization_id?: string; /** Whose connection to create or rotate. `user` (the default) addresses the connection owned by `user_id`. `organization` addresses the connection shared by every member of `organization_id`; `user_id` then identifies the member performing the request and must be an active member of the organization. */ connection_owner?: | UpsertDataIntegrationsControllerClientCredentialsRequestBodyCase0ConnectionOwner | (string & {}); /** The OAuth client ID to store for this integration. */ client_id: string; /** The OAuth client secret to store for this integration. */ client_secret: string | Redacted.Redacted; /** Provider-specific configuration values collected for this installation, keyed by the provider's config field descriptors. */ config?: UpsertDataIntegrationsControllerClientCredentialsRequestBodyCase0ConfigMap; } /** Whose connection to create or rotate. `user` (the default) addresses the connection owned by `user_id`. `organization` addresses the connection shared by every member of `organization_id`; `user_id` then identifies the member performing the request and must be an active member of the organization. */ export type UpsertDataIntegrationsControllerClientCredentialsRequestBodyCase1ConnectionOwner = | "user" | "organization"; /** Provider-specific configuration values collected for this installation, keyed by the provider's config field descriptors. */ export type UpsertDataIntegrationsControllerClientCredentialsRequestBodyCase1ConfigMap = { [key: string]: string | undefined; }; export interface UpsertDataIntegrationsControllerClientCredentialsRequestBodyCase1 { /** A mutable, non-unique label. Omit to preserve an existing label; null clears it. Labels are never account identifiers. */ account_display_name?: string | null; /** A developer-attested provider account identifier, never inferred from a label or credential. Omit to preserve an existing identifier; null clears it. */ account_identifier?: string | null; /** A [User](/reference/authkit/user) identifier. */ user_id: string; /** An [Organization](/reference/organization) identifier. Optional parameter to scope the connection to a specific organization. Required when `connection_owner` is `organization`. */ organization_id?: string; /** Whose connection to create or rotate. `user` (the default) addresses the connection owned by `user_id`. `organization` addresses the connection shared by every member of `organization_id`; `user_id` then identifies the member performing the request and must be an active member of the organization. */ connection_owner?: | UpsertDataIntegrationsControllerClientCredentialsRequestBodyCase1ConnectionOwner | (string & {}); /** The OAuth client ID to store for this integration. */ client_id: string; /** The OAuth client secret to store for this integration. */ client_secret: string | Redacted.Redacted; /** Provider-specific configuration values collected for this installation, keyed by the provider's config field descriptors. */ config?: UpsertDataIntegrationsControllerClientCredentialsRequestBodyCase1ConfigMap; /** Reauthorize exactly the connection named by `connected_account_id`. */ connection_intent: string; /** The exact connected account to reauthorize. Required with `connection_intent: reauthorize`. */ connected_account_id: string; } /** Whose connection to create or rotate. `user` (the default) addresses the connection owned by `user_id`. `organization` addresses the connection shared by every member of `organization_id`; `user_id` then identifies the member performing the request and must be an active member of the organization. */ export type UpsertDataIntegrationsControllerClientCredentialsRequestBodyCase2ConnectionOwner = | "user" | "organization"; /** Provider-specific configuration values collected for this installation, keyed by the provider's config field descriptors. */ export type UpsertDataIntegrationsControllerClientCredentialsRequestBodyCase2ConfigMap = { [key: string]: string | undefined; }; export interface UpsertDataIntegrationsControllerClientCredentialsRequestBodyCase2 { /** A mutable, non-unique label. Omit to preserve an existing label; null clears it. Labels are never account identifiers. */ account_display_name?: string | null; /** A developer-attested provider account identifier, never inferred from a label or credential. Omit to preserve an existing identifier; null clears it. */ account_identifier?: string | null; /** A [User](/reference/authkit/user) identifier. */ user_id: string; /** An [Organization](/reference/organization) identifier. Optional parameter to scope the connection to a specific organization. Required when `connection_owner` is `organization`. */ organization_id?: string; /** Whose connection to create or rotate. `user` (the default) addresses the connection owned by `user_id`. `organization` addresses the connection shared by every member of `organization_id`; `user_id` then identifies the member performing the request and must be an active member of the organization. */ connection_owner?: | UpsertDataIntegrationsControllerClientCredentialsRequestBodyCase2ConnectionOwner | (string & {}); /** The OAuth client ID to store for this integration. */ client_id: string; /** The OAuth client secret to store for this integration. */ client_secret: string | Redacted.Redacted; /** Provider-specific configuration values collected for this installation, keyed by the provider's config field descriptors. */ config?: UpsertDataIntegrationsControllerClientCredentialsRequestBodyCase2ConfigMap; /** The exact connected account to reauthorize. The reauthorize intent may be omitted for compatibility. */ connected_account_id: string; } export type UpsertDataIntegrationsControllerClientCredentialsRequestBody = | UpsertDataIntegrationsControllerClientCredentialsRequestBodyCase0 | UpsertDataIntegrationsControllerClientCredentialsRequestBodyCase1 | UpsertDataIntegrationsControllerClientCredentialsRequestBodyCase2; export interface UpsertDataIntegrationsControllerClientCredentialsRequest { /** The identifier of the integration. */ slug: string; body: UpsertDataIntegrationsControllerClientCredentialsRequestBody; } export interface UserlandMagicAuthControllerSendMagicAuthCodeAndReturnRequest { /** The email address to send the magic code to. */ email?: string; /** The invitation token to associate with this magic code. */ invitation_token?: string; /** The IP address of the user's request. */ ip_address?: string; /** The user agent string from the user's request. */ user_agent?: string; /** The ID of an existing Radar authentication attempt to associate with this request. */ radar_auth_attempt_id?: string; /** An optional Radar signals ID to correlate client-side signals with this request. */ signals_id?: string; } export interface UserlandMagicAuthControllerSendMagicAuthCodeAndReturnResponse { /** Distinguishes the Magic Auth object. */ object?: string; /** The unique ID of the Magic Auth code. */ id?: string; /** The unique ID of the user. */ user_id?: string; /** The email address of the user. */ email?: string; /** The timestamp when the Magic Auth code expires. */ expires_at?: string; /** An ISO 8601 timestamp. */ created_at?: string; /** An ISO 8601 timestamp. */ updated_at?: string; /** The code used to verify the Magic Auth code. */ code?: string; /** The ID of the Radar authentication attempt created for this request when Radar is enabled. Pass this value to the authenticate endpoint to associate the subsequent authentication with this Radar attempt. */ radar_auth_attempt_id?: string; } export interface UserlandSessionsControllerAuthenticate0RequestBodyCase0 { /** The client ID of the application. */ client_id: string; /** The client secret of the application. May be omitted by public clients that authenticate through other means, such as a PKCE `code_verifier`. */ client_secret?: string | Redacted.Redacted; grant_type: string; /** The authorization code received from the redirect. */ code: string; /** The PKCE code verifier used to derive the code challenge passed to the authorization URL. */ code_verifier?: string; /** An invitation token to accept during authentication. */ invitation_token?: string; /** The IP address of the user's request. */ ip_address?: string; /** A unique identifier for the device. */ device_id?: string; /** The user agent string from the user's browser. */ user_agent?: string; /** An optional Radar signals ID to correlate client-side signals with this authentication attempt. */ signals_id?: string; } export interface UserlandSessionsControllerAuthenticate0RequestBodyCase1 { /** The client ID of the application. */ client_id: string; /** The client secret of the application. */ client_secret: string | Redacted.Redacted; grant_type: string; /** The user's email address. */ email: string; /** The user's password. */ password: string | Redacted.Redacted; /** An invitation token to accept during authentication. */ invitation_token?: string; /** The IP address of the user's request. */ ip_address?: string; /** A unique identifier for the device. */ device_id?: string; /** The user agent string from the user's browser. */ user_agent?: string; /** An optional Radar signals ID to correlate client-side signals with this authentication attempt. */ signals_id?: string; /** The ID of an existing Radar authentication attempt to associate with this authentication. */ radar_auth_attempt_id?: string; } export interface UserlandSessionsControllerAuthenticate0RequestBodyCase2 { /** The client ID of the application. */ client_id: string; /** The client secret of the application. May be omitted by public clients that authenticate through other means, such as a PKCE `code_verifier`. */ client_secret?: string | Redacted.Redacted; grant_type: string; /** The refresh token to exchange for new tokens. */ refresh_token: string | Redacted.Redacted; /** The ID of the organization to scope the session to. */ organization_id?: string; /** The IP address of the user's request. */ ip_address?: string; /** A unique identifier for the device. */ device_id?: string; /** The user agent string from the user's browser. */ user_agent?: string; } export interface UserlandSessionsControllerAuthenticate0RequestBodyCase3 { /** The client ID of the application. */ client_id: string; /** The client secret of the application. */ client_secret: string | Redacted.Redacted; grant_type: string; /** The one-time code for Magic Auth authentication. */ code: string; /** The user's email address. */ email: string; /** An invitation token to accept during authentication. */ invitation_token?: string; /** The IP address of the user's request. */ ip_address?: string; /** A unique identifier for the device. */ device_id?: string; /** The user agent string from the user's browser. */ user_agent?: string; /** The ID of an existing Radar authentication attempt to associate with this authentication. */ radar_auth_attempt_id?: string; } export interface UserlandSessionsControllerAuthenticate0RequestBodyCase4 { /** The client ID of the application. */ client_id: string; /** The client secret of the application. */ client_secret: string | Redacted.Redacted; grant_type: string; /** The email verification code. */ code: string; /** The pending authentication token from a previous authentication attempt. */ pending_authentication_token: string; /** The IP address of the user's request. */ ip_address?: string; /** A unique identifier for the device. */ device_id?: string; /** The user agent string from the user's browser. */ user_agent?: string; } export interface UserlandSessionsControllerAuthenticate0RequestBodyCase5 { /** The client ID of the application. */ client_id: string; /** The client secret of the application. */ client_secret: string | Redacted.Redacted; grant_type: string; /** The TOTP code from the authenticator app. */ code: string; /** The pending authentication token from a previous authentication attempt. */ pending_authentication_token: string; /** The ID of the MFA authentication challenge. */ authentication_challenge_id: string; /** The IP address of the user's request. */ ip_address?: string; /** A unique identifier for the device. */ device_id?: string; /** The user agent string from the user's browser. */ user_agent?: string; } export interface UserlandSessionsControllerAuthenticate0RequestBodyCase6 { /** The client ID of the application. */ client_id: string; /** The client secret of the application. */ client_secret: string | Redacted.Redacted; grant_type: string; /** The token from the `email_completion_required` response. */ email_completion_token: string; /** The email address the user supplied for a profile the identity provider left without one. */ email: string; /** The IP address of the user's request. */ ip_address?: string; /** A unique identifier for the device. */ device_id?: string; /** The user agent string from the user's browser. */ user_agent?: string; /** An optional Radar signals ID to correlate client-side signals with this authentication attempt. */ signals_id?: string; } export interface UserlandSessionsControllerAuthenticate0RequestBodyCase7 { /** The client ID of the application. */ client_id: string; /** The client secret of the application. */ client_secret: string | Redacted.Redacted; grant_type: string; /** The pending authentication token from a previous authentication attempt. */ pending_authentication_token: string; /** The ID of the organization the user selected. */ organization_id: string; /** The IP address of the user's request. */ ip_address?: string; /** A unique identifier for the device. */ device_id?: string; /** The user agent string from the user's browser. */ user_agent?: string; } export interface UserlandSessionsControllerAuthenticate0RequestBodyCase8 { /** The client ID of the application. */ client_id: string; /** The client secret of the application. */ client_secret: string | Redacted.Redacted; grant_type: string; /** The one-time code from the Radar email challenge. */ code: string; /** The ID of the Radar email challenge being verified. */ radar_challenge_id: string; /** The pending authentication token from a previous authentication attempt. */ pending_authentication_token: string; /** The IP address of the user's request. */ ip_address?: string; /** A unique identifier for the device. */ device_id?: string; /** The user agent string from the user's browser. */ user_agent?: string; } export interface UserlandSessionsControllerAuthenticate0RequestBodyCase9 { /** The client ID of the application. */ client_id: string; /** The client secret of the application. */ client_secret: string | Redacted.Redacted; grant_type: string; /** The one-time code from the Radar SMS challenge. */ code: string; /** The ID of the Radar SMS verification being confirmed. Required for sign-up challenges; omitted for sign-in challenges, where the verification is resolved server-side. */ verification_id?: string; /** The phone number the Radar SMS challenge was sent to. Required for sign-up challenges; omitted for sign-in challenges, where the phone number on file is resolved server-side. */ phone_number?: string; /** The pending authentication token from a previous authentication attempt. */ pending_authentication_token: string; /** The IP address of the user's request. */ ip_address?: string; /** A unique identifier for the device. */ device_id?: string; /** The user agent string from the user's browser. */ user_agent?: string; } export interface UserlandSessionsControllerAuthenticate0RequestBodyCase10 { /** The client ID of the application. */ client_id: string; grant_type: string; /** The device verification code. */ device_code: string; /** The IP address of the user's request. */ ip_address?: string; /** A unique identifier for the device. */ device_id?: string; /** The user agent string from the user's browser. */ user_agent?: string; } export type UserlandSessionsControllerAuthenticate0RequestBody = | UserlandSessionsControllerAuthenticate0RequestBodyCase0 | UserlandSessionsControllerAuthenticate0RequestBodyCase1 | UserlandSessionsControllerAuthenticate0RequestBodyCase2 | UserlandSessionsControllerAuthenticate0RequestBodyCase3 | UserlandSessionsControllerAuthenticate0RequestBodyCase4 | UserlandSessionsControllerAuthenticate0RequestBodyCase5 | UserlandSessionsControllerAuthenticate0RequestBodyCase6 | UserlandSessionsControllerAuthenticate0RequestBodyCase7 | UserlandSessionsControllerAuthenticate0RequestBodyCase8 | UserlandSessionsControllerAuthenticate0RequestBodyCase9 | UserlandSessionsControllerAuthenticate0RequestBodyCase10; export interface UserlandSessionsControllerAuthenticate0Request { body: UserlandSessionsControllerAuthenticate0RequestBody; } /** The authentication method used to initiate the session. */ export type UserlandAuthenticateResponseAuthenticationMethod = | "SSO" | "Password" | "Passkey" | "AppleOAuth" | "BitbucketOAuth" | "CrossAppAuth" | "ExternalAuth" | "GitHubOAuth" | "GitLabOAuth" | "GoogleOAuth" | "IntuitOAuth" | "LinkedInOAuth" | "MicrosoftOAuth" | "SalesforceOAuth" | "SlackOAuth" | "VercelMarketplaceOAuth" | "VercelOAuth" | "XeroOAuth" | "MagicAuth" | "Impersonation" | "MigratedSession"; /** Information about the impersonator if this session was created via impersonation. */ export type UserlandAuthenticateResponseImpersonator = ListUserlandUserSessionsControllerResponseDataItemImpersonator; /** A list of OAuth scopes for which the access token is authorized. */ export type UserlandAuthenticateResponseOauthTokensScopesList = Array; /** The OAuth tokens from the identity provider, if applicable. */ export interface UserlandAuthenticateResponseOauthTokens { /** The OAuth provider used for authentication. */ provider: string; /** The refresh token from the OAuth provider. */ refresh_token: string | Redacted.Redacted; /** The access token from the OAuth provider. */ access_token: string | Redacted.Redacted; /** The timestamp at which the access token expires. */ expires_at: number; /** A list of OAuth scopes for which the access token is authorized. */ scopes: UserlandAuthenticateResponseOauthTokensScopesList; } export interface UserlandAuthenticateResponse { /** The corresponding [user](/reference/authkit/user) object. */ user?: UserlandUser; /** The ID of the organization the user selected to sign in to. */ organization_id?: string; /** An authorization code that can be exchanged for tokens by a different application. */ authkit_authorization_code?: string; /** A JWT containing information about the current session. */ access_token?: string | Redacted.Redacted; /** [Exchange this token](/reference/authkit/authentication/refresh-token) for a new access token. */ refresh_token?: string | Redacted.Redacted; /** The authentication method used to initiate the session. */ authentication_method?: UserlandAuthenticateResponseAuthenticationMethod; /** Information about the impersonator if this session was created via impersonation. */ impersonator?: ListUserlandUserSessionsControllerResponseDataItemImpersonator; /** The OAuth tokens from the identity provider, if applicable. */ oauth_tokens?: UserlandAuthenticateResponseOauthTokens; } export interface UserlandSsoControllerDeviceAuthorizationRequest { /** The WorkOS client ID for your application. */ client_id: string; } export interface DeviceAuthorizationResponse { /** The device verification code. */ device_code?: string; /** The end-user verification code. */ user_code?: string; /** The end-user verification URI. */ verification_uri?: string; /** Verification URI that includes the user code. */ verification_uri_complete?: string; /** Lifetime in seconds of the codes. */ expires_in?: number; /** Minimum polling interval in seconds. */ interval?: number; } export interface UserlandUserAuthenticationFactorsControllerCreate0Request { /** The ID of the [user](/reference/authkit/user). */ userlandUserId: string; /** The type of the factor to enroll. */ type?: string; /** Your application or company name displayed in the user's authenticator app. */ totp_issuer?: string; /** The user's account name displayed in their authenticator app. */ totp_user?: string; /** The Base32-encoded shared secret for TOTP factors. This can be provided when creating the auth factor, otherwise it will be generated. The algorithm used to derive TOTP codes is SHA-1, the code length is 6 digits, and the timestep is 30 seconds - the secret must be compatible with these parameters. */ totp_secret?: string | Redacted.Redacted; } export interface UserlandUserAuthenticationFactorEnrollResponse { /** The [authentication factor](/reference/authkit/mfa/authentication-factor) object that represents the additional authentication method used on top of the existing authentication strategy. */ authentication_factor?: AuthenticationFactorEnrolled; /** The [authentication challenge](/reference/authkit/mfa/authentication-challenge) object that is used to complete the authentication process. */ authentication_challenge?: AuthenticationChallenge; } export interface UserlandUserAuthenticationFactorsControllerList0Request { /** The ID of the [user](/reference/authkit/user). */ userlandUserId: string; /** An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. */ before?: string; /** An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. */ after?: string; /** Upper limit on the number of objects to return, between `1` and `100`. */ limit?: number; /** Order the results by the creation time. Defaults to `normal`. */ order?: PaginationOrder | (string & {}); } /** The list of records for the current page. */ export type UserlandUserAuthenticationFactorListDataList = Array; /** Pagination cursors for navigating between pages of results. */ export type UserlandUserAuthenticationFactorListListMetadata = AuditLogValidatorVersionsControllerSchemasResponseListMetadata; export interface UserlandUserAuthenticationFactorList { /** Indicates this is a list response. */ object?: string; /** The list of records for the current page. */ data?: UserlandUserAuthenticationFactorListDataList; /** Pagination cursors for navigating between pages of results. */ list_metadata?: AuditLogValidatorVersionsControllerSchemasResponseListMetadata; } export interface UserlandUserOrganizationMembershipsControllerReactivateRequest { /** The unique ID of the organization membership. */ id: string; } /** Object containing metadata key/value pairs associated with the user. */ export type UserlandUsersControllerCreate0RequestMetadataMap = { [key: string]: string | undefined; }; /** The algorithm originally used to hash the password, used when providing a `password_hash`. Required with `password_hash`. Mutually exclusive with `password`. */ export type UserlandUsersControllerCreate0RequestPasswordHashType = | "bcrypt" | "firebase-scrypt" | "ssha" | "ssha256" | "scrypt" | "pbkdf2" | "argon2"; /** The position of the salt relative to the password when the `password_hash` digest was computed: `prefix` for `hash(salt + password)` or `suffix` for `hash(password + salt)`. Only supported with the `ssha256` hash type and only valid when a `password_hash` is provided. Defaults to `suffix`. Mutually exclusive with `password`. */ export type UserlandUsersControllerCreate0RequestPasswordSaltPosition = "prefix" | "suffix"; export interface UserlandUsersControllerCreate0Request { /** The email address of the user. WorkOS trims whitespace and converts the address to lowercase before storing it. */ email: string; /** The first name of the user. */ first_name?: string | null; /** The last name of the user. */ last_name?: string | null; /** The user's full name. */ name?: string | null; /** Whether the user's email has been verified. */ email_verified?: boolean | null; /** Object containing metadata key/value pairs associated with the user. */ metadata?: UserlandUsersControllerCreate0RequestMetadataMap | null; /** The external ID of the user. */ external_id?: string | null; /** The IP address of the user's request. */ ip_address?: string | null; /** The user agent string from the user's request. */ user_agent?: string | null; /** An optional Radar signals ID to correlate client-side signals with this request. */ signals_id?: string; /** The password to set for the user. Mutually exclusive with `password_hash`, `password_hash_type`, and `password_salt_position`. */ password?: string | Redacted.Redacted | null; /** The hashed password to set for the user. Required with `password_hash_type`. Mutually exclusive with `password`. */ password_hash?: string | Redacted.Redacted; /** The algorithm originally used to hash the password, used when providing a `password_hash`. Required with `password_hash`. Mutually exclusive with `password`. */ password_hash_type?: UserlandUsersControllerCreate0RequestPasswordHashType | (string & {}); /** The position of the salt relative to the password when the `password_hash` digest was computed: `prefix` for `hash(salt + password)` or `suffix` for `hash(password + salt)`. Only supported with the `ssha256` hash type and only valid when a `password_hash` is provided. Defaults to `suffix`. Mutually exclusive with `password`. */ password_salt_position?: | UserlandUsersControllerCreate0RequestPasswordSaltPosition | (string & {}); } /** Object containing metadata key/value pairs associated with the user. */ export type UserlandUsersControllerCreate0ResponseMetadataMap = { [key: string]: string | undefined; }; export interface UserlandUsersControllerCreate0Response { /** Distinguishes the user object. */ object?: string; /** The unique ID of the user. */ id?: string; /** The first name of the user. */ first_name?: string | null; /** The last name of the user. */ last_name?: string | null; /** The user's full name. */ name?: string | null; /** A URL reference to an image representing the user. */ profile_picture_url?: string | null; /** The email address of the user. */ email?: string; /** Whether the user's email has been verified. */ email_verified?: boolean; /** The external ID of the user. */ external_id?: string | null; /** Object containing metadata key/value pairs associated with the user. */ metadata?: UserlandUsersControllerCreate0ResponseMetadataMap; /** The timestamp when the user last signed in. */ last_sign_in_at?: string | null; /** The user's preferred locale. */ locale?: string | null; /** An ISO 8601 timestamp. */ created_at?: string; /** An ISO 8601 timestamp. */ updated_at?: string; /** The ID of the Radar authentication attempt created for this request when Radar is enabled. Pass this value to the authenticate endpoint to associate the subsequent authentication with this Radar attempt. */ radar_auth_attempt_id?: string; } export interface UserlandUsersControllerCreatePasswordResetTokenRequest { /** The email address of the user requesting a password reset. */ email?: string; } export interface PasswordReset { /** Distinguishes the password reset object. */ object?: string; /** The unique ID of the password reset object. */ id?: string; /** The unique ID of the user. */ user_id?: string; /** The email address of the user. */ email?: string; /** The timestamp when the password reset token expires. */ expires_at?: string; /** The timestamp when the password reset token was created. */ created_at?: string; /** The token used to reset the password. */ password_reset_token?: string | Redacted.Redacted; /** The URL where the user can reset their password. */ password_reset_url?: string | Redacted.Redacted; } export interface UserlandUsersControllerDelete0Request { /** The unique ID of the user. */ id: string; } export interface UserlandUsersControllerDelete0Response {} export interface UserlandUsersControllerEmailVerification0Request { /** The ID of the user. */ id: string; /** The one-time email verification code. */ code?: string; } export interface VerifyEmailResponse { /** The user whose email was verified. */ user?: UserlandUser; } export interface UserlandUsersControllerGet0Request { /** The unique ID of the user. */ id: string; } export interface UserlandUsersControllerGetPasswordResetRequest { /** The ID of the password reset token. */ id: string; } export interface UserlandUsersControllerList0Request { /** An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `before="obj_123"` to fetch a new batch of objects before `"obj_123"`. */ before?: string; /** An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `after="obj_123"` to fetch a new batch of objects after `"obj_123"`. */ after?: string; /** Upper limit on the number of objects to return, between `1` and `100`. */ limit?: number; /** Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to `desc`. */ order?: PaginationOrder | (string & {}); /** Filter users by the organization they are a member of. Deprecated in favor of `organization_id`. */ organization?: string; /** Filter users by the organization they are a member of. */ organization_id?: string; /** Filter users by their email address. */ email?: string; } /** The list of records for the current page. */ export type UserlandUserListDataList = Array; /** Pagination cursors for navigating between pages of results. */ export type UserlandUserListListMetadata = AuditLogValidatorVersionsControllerSchemasResponseListMetadata; export interface UserlandUserList { /** Indicates this is a list response. */ object?: string; /** The list of records for the current page. */ data?: UserlandUserListDataList; /** Pagination cursors for navigating between pages of results. */ list_metadata?: AuditLogValidatorVersionsControllerSchemasResponseListMetadata; } /** Object containing metadata key/value pairs associated with the user. */ export type UserlandUsersControllerUpdate0RequestMetadataMap = { [key: string]: string | undefined; }; /** The algorithm originally used to hash the password, used when providing a `password_hash`. Required with `password_hash`. Mutually exclusive with `password`. */ export type UserlandUsersControllerUpdate0RequestPasswordHashType = | "bcrypt" | "firebase-scrypt" | "ssha" | "ssha256" | "scrypt" | "pbkdf2" | "argon2"; /** The position of the salt relative to the password when the `password_hash` digest was computed: `prefix` for `hash(salt + password)` or `suffix` for `hash(password + salt)`. Only supported with the `ssha256` hash type and only valid when a `password_hash` is provided. Defaults to `suffix`. Mutually exclusive with `password`. */ export type UserlandUsersControllerUpdate0RequestPasswordSaltPosition = "prefix" | "suffix"; export interface UserlandUsersControllerUpdate0Request { /** The unique ID of the user. */ id: string; /** The email address of the user. */ email?: string; /** The first name of the user. */ first_name?: string; /** The last name of the user. */ last_name?: string; /** The user's full name. */ name?: string; /** Whether the user's email has been verified. */ email_verified?: boolean; /** Object containing metadata key/value pairs associated with the user. */ metadata?: UserlandUsersControllerUpdate0RequestMetadataMap | null; /** The external ID of the user. */ external_id?: string | null; /** The user's preferred locale. */ locale?: string | null; /** The password to set for the user. Mutually exclusive with `password_hash`, `password_hash_type`, and `password_salt_position`. */ password?: string | Redacted.Redacted; /** The hashed password to set for the user. Required with `password_hash_type`. Mutually exclusive with `password`. */ password_hash?: string | Redacted.Redacted; /** The algorithm originally used to hash the password, used when providing a `password_hash`. Required with `password_hash`. Mutually exclusive with `password`. */ password_hash_type?: UserlandUsersControllerUpdate0RequestPasswordHashType | (string & {}); /** The position of the salt relative to the password when the `password_hash` digest was computed: `prefix` for `hash(salt + password)` or `suffix` for `hash(password + salt)`. Only supported with the `ssha256` hash type and only valid when a `password_hash` is provided. Defaults to `suffix`. Mutually exclusive with `password`. */ password_salt_position?: | UserlandUsersControllerUpdate0RequestPasswordSaltPosition | (string & {}); } export interface ValidateAgentAdminControllerCredentialRequestBodyCase0 { /** The kind of credential being validated -- an agent API key or an agent access token. */ type: string; /** The credential value to validate: the API key value for `api_key`, or the access token (JWT) for `access_token`. */ credential: string; } export interface ValidateAgentAdminControllerCredentialRequestBodyCase1 { /** The kind of credential being validated -- an agent API key or an agent access token. */ type: string; /** The credential value to validate: the API key value for `api_key`, or the access token (JWT) for `access_token`. */ credential: string; /** When provided, the access token's `aud` claim is verified against this value. Tokens issued for a different resource are rejected. */ audience?: string; } /** The agent credential to validate. Either an `api_key` or an `access_token`, discriminated by `type`. */ export type ValidateAgentAdminControllerCredentialRequestBody = | ValidateAgentAdminControllerCredentialRequestBodyCase0 | ValidateAgentAdminControllerCredentialRequestBodyCase1; export interface ValidateAgentAdminControllerCredentialRequest { body: ValidateAgentAdminControllerCredentialRequestBody; } export interface AgentCredentialValidation { /** Whether the presented credential is valid. */ valid: boolean; /** Identifier of the agent registration the credential belongs to, or `null` when the credential is invalid. */ registration_id: string | null; /** The timestamp when the credential expires, or `null` when the credential is invalid. */ expires_at: string | null; } export interface ValidateAgentBlueprintsTokenControllerTokenRequest { /** The unique ID of the agent blueprint. */ agent_blueprint_id: string; /** The agent access token (a JWT) to validate. */ agent_access_token: string; } /** The effective permission slugs carried by the token. */ export type AgentTokenValidationPermissionsList = Array; export interface AgentTokenValidation { /** Always `true`: an invalid token is reported as an error with a stable code, never as a `200`. */ valid: boolean; /** The agent instance the token was minted for. */ agent_instance_id: string; /** The agent instance session backing the token. */ agent_instance_session_id: string; /** The organization the agent acts within. */ organization_id: string; /** The effective permission slugs carried by the token. */ permissions: AgentTokenValidationPermissionsList; /** The caller-supplied context echoed into the token at mint time, or `null` when none was given. */ intent: string | null; /** The delegating user carried in the `act.sub` claim of the token, or `null` for autonomous sessions. */ acting_user_id: string | null; /** When the backing agent instance session expires. */ session_expires_at: string; } export interface ValidateApiKeysControllerApiKeyRequest { /** The value for an API key. */ value?: string; } export interface ApiKeyValidationResponse { api_key?: ApiKey | null; /** The ID of the agent registration this API Key was issued for. Present only when the API Key is assigned to an agent registration. */ agent_registration_id?: string; } export interface VerifyAuthenticationChallengesControllerRequest { /** The unique ID of the Authentication Challenge. */ id: string; /** The one-time code to verify. */ code: string; } export interface AuthenticationChallengeVerifyResponse { /** The authentication challenge object. */ challenge?: AuthenticationChallenge; /** Whether the code was valid. */ valid?: boolean; } export interface VerifyOrganizationDomainsControllerRequest { /** Unique identifier of the organization domain. */ id: string; } export interface WaitlistEntriesControllerDenyRequest { /** The unique ID of the waitlist entry. */ id: string; } /** The state of the waitlist entry. */ export type WaitlistEntriesControllerDenyResponseState = "pending" | "approved" | "denied"; /** Additional fields submitted when the user joined the waitlist. Values are user-provided -- treat them as untrusted input when rendering or exporting. */ export type WaitlistEntriesControllerDenyResponseAdditionalFieldsMap = { [key: string]: string | undefined; }; export interface WaitlistEntriesControllerDenyResponse { /** The unique ID of the waitlist entry. */ id: string; /** The email address of the user on the waitlist. */ email: string; /** The state of the waitlist entry. */ state: WaitlistEntriesControllerDenyResponseState; /** The timestamp when the entry was approved, or null if not yet approved. */ approved_at: string | null; /** Additional fields submitted when the user joined the waitlist. Values are user-provided -- treat them as untrusted input when rendering or exporting. */ additional_fields?: WaitlistEntriesControllerDenyResponseAdditionalFieldsMap; /** The unique ID of the waitlist the entry belongs to. */ waitlist_id?: string | null; /** An ISO 8601 timestamp. */ created_at: string; /** An ISO 8601 timestamp. */ updated_at: string; /** Distinguishes the Waitlist Entry object. */ object: string; } export interface WaitlistsControllerFindRequest { /** The unique ID of the waitlist, or the literal `default` for the environment's default waitlist. The default waitlist is created when its first entry is added, so read requests for `default` return a `404` until then. */ id: string; } export type WidgetsPublicControllerIssueWidgetSessionTokenRequestScopesItem = | "widgets:users-table:manage" | "widgets:domain-verification:manage" | "widgets:sso:manage" | "widgets:api-keys:manage" | "widgets:dsync:manage" | "widgets:audit-log-streaming:manage" | "widgets:pipes:manage"; /** The scopes to grant the widget session. */ export type WidgetsPublicControllerIssueWidgetSessionTokenRequestScopesList = Array< WidgetsPublicControllerIssueWidgetSessionTokenRequestScopesItem | (string & {}) >; export interface WidgetsPublicControllerIssueWidgetSessionTokenRequest { /** The ID of the organization to scope the widget session to. Required when scopes are provided. Optional when issuing a token for user-only widgets (e.g. `UserProfile`, `UserSecurity`) that do not require organization context. */ organization_id?: string; /** The ID of the user to issue the widget session token for. */ user_id?: string; /** The scopes to grant the widget session. */ scopes?: WidgetsPublicControllerIssueWidgetSessionTokenRequestScopesList; } export interface WidgetSessionTokenResponse { /** The widget session token. */ token?: string; } export type AcceptUserlandUserInvitesControllerError = BadRequest | NotFound | WorkosOpError; /** Accept an invitation Accepts an invitation and, if linked to an organization, activates the user's membership in that organization. */ export const AcceptUserlandUserInvitesController: API.OperationMethod< AcceptUserlandUserInvitesControllerRequest, AcceptUserlandUserInvitesControllerResponse, AcceptUserlandUserInvitesControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(2232, __c279, 0) as any as S.Schema, output: __S(2240, __c280, 0) as any as S.Schema, errors: [BadRequest, NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type AddAuthorizationOrganizationRolePermissionsControllerPermissionError = | BadRequest | Forbidden | NotFound | UnprocessableEntity | WorkosOpError; /** Add a permission to a custom role Add a single permission to a custom role. If the permission is already assigned to the role, this operation has no effect. */ export const AddAuthorizationOrganizationRolePermissionsControllerPermission: API.OperationMethod< AddAuthorizationOrganizationRolePermissionsControllerPermissionRequest, AddAuthorizationOrganizationRolePermissionsControllerPermissionResponse, AddAuthorizationOrganizationRolePermissionsControllerPermissionError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S( 2392, __c299, 0, ) as any as S.Schema, output: __S( 2408, __c301, 0, ) as any as S.Schema, errors: [BadRequest, Forbidden, NotFound, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type AddAuthorizationRolePermissionsControllerPermissionError = | BadRequest | Forbidden | NotFound | UnprocessableEntity | WorkosOpError; /** Add a permission to an environment role Add a single permission to an environment role. If the permission is already assigned to the role, this operation has no effect. */ export const AddAuthorizationRolePermissionsControllerPermission: API.OperationMethod< AddAuthorizationRolePermissionsControllerPermissionRequest, AddAuthorizationRolePermissionsControllerPermissionResponse, AddAuthorizationRolePermissionsControllerPermissionError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S( 2544, __c318, 0, ) as any as S.Schema, output: __S( 2408, __c301, 0, ) as any as S.Schema, errors: [BadRequest, Forbidden, NotFound, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type AddGroupMembershipsControllerMemberError = | BadRequest | Forbidden | NotFound | UnprocessableEntity | WorkosOpError; /** Add a member to a Group Add an organization membership to a group. */ export const AddGroupMembershipsControllerMember: API.OperationMethod< AddGroupMembershipsControllerMemberRequest, Group, AddGroupMembershipsControllerMemberError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(2632, __c329, 0) as any as S.Schema, output: __S(2640, __c330, 0) as any as S.Schema, errors: [BadRequest, Forbidden, NotFound, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type AgentAdminControllerLinkClaimAttemptToExternalUserError = | BadRequest | Forbidden | Conflict | WorkosOpError; /** Link a claim attempt to an external user Link an external user to a claim attempt and retrieve the code needed for the agent to complete the claim. The user is looked up by external ID; if no user exists, one is created. When the user belongs to multiple organizations, an explicit organization must be provided. */ export const AgentAdminControllerLinkClaimAttemptToExternalUser: API.OperationMethod< AgentAdminControllerLinkClaimAttemptToExternalUserRequest, ClaimViewResponse, AgentAdminControllerLinkClaimAttemptToExternalUserError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S( 2729, __c341, 1, ) as any as S.Schema, output: __S(2731, __c341, 3) as any as S.Schema, errors: [BadRequest, Forbidden, Conflict, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type AgentBlueprintsTokenControllerMintTokenError = | BadRequest | Forbidden | NotFound | WorkosOpError; /** Mint an agent token Mint an agent access token (and backing session) from an agent blueprint. The session can be user-delegated (exchanging a user access token), autonomous (the agent acting as itself in an organization), agent-delegated (the agent exchanging its own access token for a new session on the same instance), or a refresh of a previously issued refresh token. */ export const AgentBlueprintsTokenControllerMintToken: API.OperationMethod< AgentBlueprintsTokenControllerMintTokenRequest, AgentToken, AgentBlueprintsTokenControllerMintTokenError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(0, __c0, 0) as any as S.Schema, output: __S(1, __c0, 1) as any as S.Schema, errors: [BadRequest, Forbidden, NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type ApiKeysControllerExpireError = | NotFound | Conflict | UnprocessableEntity | WorkosOpError; /** Expire an API key Expire an API key immediately, schedule a future expiration, or clear a scheduled future expiration. */ export const ApiKeysControllerExpire: API.OperationMethod< ApiKeysControllerExpireRequest, ApiKey, ApiKeysControllerExpireError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(152, __c19, 0) as any as S.Schema, output: __S(160, __c20, 0) as any as S.Schema, errors: [NotFound, Conflict, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type ApplicationsControllerFindError = NotFound | WorkosOpError; /** Get a Connect Application Retrieve details for a specific Connect Application by ID or client ID. */ export const ApplicationsControllerFind: API.OperationMethod< ApplicationsControllerFindRequest, ApplicationsControllerFindResponse, ApplicationsControllerFindError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(280, __c35, 0) as any as S.Schema, output: __S(290, __c36, 2) as any as S.Schema, errors: [NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type ApproveWaitlistEntriesControllerError = NotFound | UnprocessableEntity | WorkosOpError; /** Approve a waitlist entry Approve a waitlist entry, create an invitation for its email address, and send the invitation email. Approving a denied entry reverses the denial. The approval is saved even when the invitation steps fail, so instead of retrying the approval, recover based on the outcome: - `200` -- the entry is approved. If invitation creation failed, no invitation exists yet; [send](/reference/authkit/invitation/send) one. - `422` with code `invitation_email_not_sent` -- the entry is approved and an invitation exists, but its email was not sent; [resend](/reference/authkit/invitation/resend) it. - `422` with code `invalid_state` -- the entry was already approved. */ export const ApproveWaitlistEntriesController: API.OperationMethod< ApproveWaitlistEntriesControllerRequest, ApproveWaitlistEntriesControllerResponse, ApproveWaitlistEntriesControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(408, __c51, 0) as any as S.Schema, output: __S(424, __c53, 0) as any as S.Schema, errors: [NotFound, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type AssignAuthorizationRoleAssignmentsControllerRoleError = | Forbidden | NotFound | UnprocessableEntity | WorkosOpError; /** Assign a role Assign a role to an organization membership on a specific resource. */ export const AssignAuthorizationRoleAssignmentsControllerRole: API.OperationMethod< AssignAuthorizationRoleAssignmentsControllerRoleRequest, UserRoleAssignment, AssignAuthorizationRoleAssignmentsControllerRoleError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S( 536, __c67, 0, ) as any as S.Schema, output: __S(545, __c68, 1) as any as S.Schema, errors: [Forbidden, NotFound, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type AuditLogExportsControllerExportsError = BadRequest | NotFound | WorkosOpError; /** Create Export Create an Audit Log Export. Exports are scoped to a single organization within a specified date range. */ export const AuditLogExportsControllerExports: API.OperationMethod< AuditLogExportsControllerExportsRequest, AuditLogExportJson, AuditLogExportsControllerExportsError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(672, __c84, 0) as any as S.Schema, output: __S(680, __c85, 0) as any as S.Schema, errors: [BadRequest, NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type AuditLogsRetentionControllerAuditLogsRetentionError = NotFound | WorkosOpError; /** Get Retention Get the configured event retention period for the given Organization. */ export const AuditLogsRetentionControllerAuditLogsRetention: API.OperationMethod< AuditLogsRetentionControllerAuditLogsRetentionRequest, AuditLogsRetentionJson, AuditLogsRetentionControllerAuditLogsRetentionError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S( 800, __c100, 0, ) as any as S.Schema, output: __S(808, __c101, 0) as any as S.Schema, errors: [NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type AuditLogValidatorVersionsControllerSchemasError = | NotFound | UnprocessableEntity | WorkosOpError; /** List Schemas Get a list of all schemas for the Audit Logs action identified by `:name`. */ export const AuditLogValidatorVersionsControllerSchemas: API.OperationMethod< AuditLogValidatorVersionsControllerSchemasRequest, AuditLogValidatorVersionsControllerSchemasResponse, AuditLogValidatorVersionsControllerSchemasError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(912, __c114, 0) as any as S.Schema, output: __S( 914, __c114, 2, ) as any as S.Schema, errors: [NotFound, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type AuthenticationFactorsControllerChallengeError = | NotFound | UnprocessableEntity | WorkosOpError; /** Challenge Factor Creates a Challenge for an Authentication Factor. */ export const AuthenticationFactorsControllerChallenge: API.OperationMethod< AuthenticationFactorsControllerChallengeRequest, AuthenticationChallenge, AuthenticationFactorsControllerChallengeError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(1040, __c130, 0) as any as S.Schema, output: __S(1048, __c131, 0) as any as S.Schema, errors: [NotFound, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type AuthorizationPermissionsControllerFindError = NotFound | WorkosOpError; /** Get a permission Retrieve a permission by its unique slug. */ export const AuthorizationPermissionsControllerFind: API.OperationMethod< AuthorizationPermissionsControllerFindRequest, AuthorizationPermission, AuthorizationPermissionsControllerFindError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(1152, __c144, 0) as any as S.Schema, output: __S(1160, __c145, 0) as any as S.Schema, errors: [NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type AuthorizationResourcesControllerFindByIdError = | Forbidden | NotFound | UnprocessableEntity | WorkosOpError; /** Get a resource Retrieve the details of an authorization resource by its ID. */ export const AuthorizationResourcesControllerFindById: API.OperationMethod< AuthorizationResourcesControllerFindByIdRequest, AuthorizationResource, AuthorizationResourcesControllerFindByIdError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(1264, __c158, 0) as any as S.Schema, output: __S(1272, __c159, 0) as any as S.Schema, errors: [Forbidden, NotFound, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type AuthorizeSsoControllerError = WorkosOpError; /** Initiate SSO Initiates the single sign-on flow. */ export const AuthorizeSsoController: API.OperationMethod< AuthorizeSsoControllerRequest, SsoAuthorizeUrlResponse, AuthorizeSsoControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(1360, __c170, 0) as any as S.Schema, output: __S(1368, __c171, 0) as any as S.Schema, errors: [UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type AuthorizeUserlandSsoControllerError = WorkosOpError; /** Get an authorization URL Generates an OAuth 2.0 authorization URL to authenticate a user with AuthKit or SSO. */ export const AuthorizeUserlandSsoController: API.OperationMethod< AuthorizeUserlandSsoControllerRequest, AuthorizeUserlandSsoControllerResponse, AuthorizeUserlandSsoControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(1464, __c183, 0) as any as S.Schema, output: __S(1472, __c184, 0) as any as S.Schema, errors: [UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type CheckAuthorizationControllerError = | Forbidden | NotFound | UnprocessableEntity | WorkosOpError; /** Check authorization Check if an organization membership has a specific permission on a resource. Supports identification by resource_id OR by resource_external_id + resource_type_slug. */ export const CheckAuthorizationController: API.OperationMethod< CheckAuthorizationControllerRequest, AuthorizationCheck, CheckAuthorizationControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(1568, __c196, 0) as any as S.Schema, output: __S(1569, __c196, 1) as any as S.Schema, errors: [Forbidden, NotFound, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type ClientApiTokenControllerIssueClientApiTokenError = | BadRequest | NotFound | UnprocessableEntity | WorkosOpError; /** Generate a Client API token Generate a short-lived, session-bound token for the Client GraphQL API, scoped to an organization and user. */ export const ClientApiTokenControllerIssueClientApiToken: API.OperationMethod< ClientApiTokenControllerIssueClientApiTokenRequest, ClientApiTokenResponse, ClientApiTokenControllerIssueClientApiTokenError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S( 1664, __c208, 0, ) as any as S.Schema, output: __S(1665, __c208, 1) as any as S.Schema, errors: [BadRequest, NotFound, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type CompleteExternalAuthControllerLoginError = | BadRequest | NotFound | UnprocessableEntity | WorkosOpError; /** Complete external authentication Completes an external authentication flow and returns control to AuthKit. This endpoint is used with [Standalone Connect](/authkit/connect/standalone) to bridge your existing authentication system with the Connect OAuth API infrastructure. After successfully authenticating a user in your application, calling this endpoint will: - Create or update the user in AuthKit, using the given `id` as its `external_id`. - Return a `redirect_uri` your application should redirect to in order for AuthKit to complete the flow Users are automatically created or updated based on the `id` and `email` provided. If a user with the same `id` exists, their information is updated. Otherwise, a new user is created. If you provide a new `id` with an `email` that already belongs to an existing user, the request will fail with an error as email addresses are unique to a user. */ export const CompleteExternalAuthControllerLogin: API.OperationMethod< CompleteExternalAuthControllerLoginRequest, ExternalAuthCompleteResponse, CompleteExternalAuthControllerLoginError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(1757, __c219, 5) as any as S.Schema, output: __S(1758, __c219, 6) as any as S.Schema, errors: [BadRequest, NotFound, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type ConfirmUserlandUsersControllerEmailChangeError = | BadRequest | NotFound | Conflict | UnprocessableEntity | WorkosOpError; /** Confirm email change Confirms an email change using the one-time code received by the user. */ export const ConfirmUserlandUsersControllerEmailChange: API.OperationMethod< ConfirmUserlandUsersControllerEmailChangeRequest, ConfirmUserlandUsersControllerEmailChangeResponse, ConfirmUserlandUsersControllerEmailChangeError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(1848, __c231, 0) as any as S.Schema, output: __S( 1850, __c231, 2, ) as any as S.Schema, errors: [BadRequest, NotFound, Conflict, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type ConnectionsControllerFindError = Forbidden | NotFound | WorkosOpError; /** Get a Connection Get the details of an existing connection. */ export const ConnectionsControllerFind: API.OperationMethod< ConnectionsControllerFindRequest, Connection, ConnectionsControllerFindError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(1928, __c241, 0) as any as S.Schema, output: __S(1938, __c242, 2) as any as S.Schema, errors: [Forbidden, NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type CreateAgentBlueprintsControllerError = | BadRequest | Conflict | UnprocessableEntity | WorkosOpError; /** Create an agent blueprint Creates an agent blueprint: the template describing what an agent may do (its permission ceiling), who may invoke it, and the lifetimes of its sessions. */ export const CreateAgentBlueprintsController: API.OperationMethod< CreateAgentBlueprintsControllerRequest, AgentBlueprint, CreateAgentBlueprintsControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(1944, __c243, 0) as any as S.Schema, output: __S(1955, __c244, 3) as any as S.Schema, errors: [BadRequest, Conflict, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type CreateApplicationCredentialsControllerError = | NotFound | UnprocessableEntity | WorkosOpError; /** Create a new client secret for a Connect Application Create new secrets for a Connect Application. */ export const CreateApplicationCredentialsController: API.OperationMethod< CreateApplicationCredentialsControllerRequest, NewConnectApplicationSecret, CreateApplicationCredentialsControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(1976, __c247, 0) as any as S.Schema, output: __S(1977, __c247, 1) as any as S.Schema, errors: [NotFound, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type CreateApplicationsControllerError = NotFound | UnprocessableEntity | WorkosOpError; /** Create a Connect Application Create a new Connect Application. Supports both OAuth and Machine-to-Machine (M2M) application types. */ export const CreateApplicationsController: API.OperationMethod< CreateApplicationsControllerRequest, CreateApplicationsControllerResponse, CreateApplicationsControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(1984, __c248, 0) as any as S.Schema, output: __S(290, __c36, 2) as any as S.Schema, errors: [NotFound, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type CreateAuditLogEventsControllerError = | BadRequest | NotFound | UnprocessableEntity | WorkosOpError; /** Create Event Create an Audit Log Event. This API supports idempotency which guarantees that performing the same operation multiple times will have the same result as if the operation were performed only once. This is handy in situations where you may need to retry a request due to a failure or prevent accidental duplicate requests from creating more than one resource. To achieve idempotency, you can add `Idempotency-Key` request header to a Create Event request with a unique string as the value. Each subsequent request matching this unique string will return the same response. We suggest using [v4 UUIDs](https://en.wikipedia.org/wiki/Universally_unique_identifier) for idempotency keys to avoid collisions. Idempotency keys expire after 24 hours. The API will generate a new response if you submit a request with an expired key. */ export const CreateAuditLogEventsController: API.OperationMethod< CreateAuditLogEventsControllerRequest, AuditLogEventCreateResponse, CreateAuditLogEventsControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(1996, __c249, 4) as any as S.Schema, output: __S(1997, __c249, 5) as any as S.Schema, errors: [BadRequest, NotFound, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type CreateAuditLogValidatorVersionsControllerError = UnprocessableEntity | WorkosOpError; /** Create Schema Creates a new Audit Log schema used to validate the payload of incoming Audit Log Events. If the `action` does not exist, it will also be created. */ export const CreateAuditLogValidatorVersionsController: API.OperationMethod< CreateAuditLogValidatorVersionsControllerRequest, AuditLogSchemaJson, CreateAuditLogValidatorVersionsControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(2003, __c250, 3) as any as S.Schema, output: __S(931, __c116, 3) as any as S.Schema, errors: [UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type CreateAuthenticationFactorsControllerError = UnprocessableEntity | WorkosOpError; /** Enroll Factor Enrolls an Authentication Factor to be used as an additional factor of authentication. The returned ID should be used to create an authentication Challenge. */ export const CreateAuthenticationFactorsController: API.OperationMethod< CreateAuthenticationFactorsControllerRequest, AuthenticationFactorEnrolled, CreateAuthenticationFactorsControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(2008, __c251, 0) as any as S.Schema, output: __S(2025, __c253, 1) as any as S.Schema, errors: [UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type CreateAuthkitOauthResourcesControllerError = UnprocessableEntity | WorkosOpError; /** Create an MCP resource indicator Adds an MCP resource indicator (RFC 8707) to an environment, leaving any others in place. */ export const CreateAuthkitOauthResourcesController: API.OperationMethod< CreateAuthkitOauthResourcesControllerRequest, AuthkitOauthResource, CreateAuthkitOauthResourcesControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(2032, __c254, 0) as any as S.Schema, output: __S(2040, __c255, 0) as any as S.Schema, errors: [UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type CreateAuthorizationGroupRoleAssignmentsControllerError = | Forbidden | NotFound | Conflict | UnprocessableEntity | WorkosOpError; /** Assign a role to a group Assign a role to a group on a specific resource. */ export const CreateAuthorizationGroupRoleAssignmentsController: API.OperationMethod< CreateAuthorizationGroupRoleAssignmentsControllerRequest, GroupRoleAssignment, CreateAuthorizationGroupRoleAssignmentsControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S( 2048, __c256, 0, ) as any as S.Schema, output: __S(2056, __c257, 0) as any as S.Schema, errors: [Forbidden, NotFound, Conflict, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type CreateAuthorizationOrganizationRolesControllerError = | BadRequest | Forbidden | NotFound | Conflict | UnprocessableEntity | WorkosOpError; /** Create a custom role Create a new custom role for this organization. */ export const CreateAuthorizationOrganizationRolesController: API.OperationMethod< CreateAuthorizationOrganizationRolesControllerRequest, CreateAuthorizationOrganizationRolesControllerResponse, CreateAuthorizationOrganizationRolesControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S( 2064, __c258, 0, ) as any as S.Schema, output: __S( 2408, __c301, 0, ) as any as S.Schema, errors: [BadRequest, Forbidden, NotFound, Conflict, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type CreateAuthorizationPermissionsControllerError = | BadRequest | NotFound | Conflict | UnprocessableEntity | WorkosOpError; /** Create a permission Create a new permission in your WorkOS environment. The permission can then be assigned to environment roles and custom roles. */ export const CreateAuthorizationPermissionsController: API.OperationMethod< CreateAuthorizationPermissionsControllerRequest, CreateAuthorizationPermissionsControllerResponse, CreateAuthorizationPermissionsControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(2072, __c259, 0) as any as S.Schema, output: __S(2073, __c259, 1) as any as S.Schema, errors: [BadRequest, NotFound, Conflict, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type CreateAuthorizationResourcesControllerError = | BadRequest | Forbidden | NotFound | Conflict | UnprocessableEntity | WorkosOpError; /** Create an authorization resource Create a new authorization resource. */ export const CreateAuthorizationResourcesController: API.OperationMethod< CreateAuthorizationResourcesControllerRequest, CreateAuthorizationResourcesControllerResponse, CreateAuthorizationResourcesControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(2080, __c260, 0) as any as S.Schema, output: __S(2088, __c261, 0) as any as S.Schema, errors: [BadRequest, Forbidden, NotFound, Conflict, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type CreateAuthorizationRolesControllerError = | BadRequest | Forbidden | NotFound | Conflict | UnprocessableEntity | WorkosOpError; /** Create an environment role Create a new environment role. */ export const CreateAuthorizationRolesController: API.OperationMethod< CreateAuthorizationRolesControllerRequest, CreateAuthorizationRolesControllerResponse, CreateAuthorizationRolesControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(2096, __c262, 0) as any as S.Schema, output: __S(2408, __c301, 0) as any as S.Schema, errors: [BadRequest, Forbidden, NotFound, Conflict, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type CreateConnectionsControllerError = | BadRequest | Forbidden | NotFound | Conflict | UnprocessableEntity | WorkosOpError; /** Create a Connection Creates a new connection for an organization. Provide `saml_options` or `oidc_options` to configure the identity provider. When `external_id` matches an existing connection in the organization, that connection is returned instead of creating a duplicate. */ export const CreateConnectionsController: API.OperationMethod< CreateConnectionsControllerRequest, Connection, CreateConnectionsControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(2109, __c263, 5) as any as S.Schema, output: __S(1938, __c242, 2) as any as S.Schema, errors: [BadRequest, Forbidden, NotFound, Conflict, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type CreateCorsOriginsControllerCorsOriginError = | Conflict | UnprocessableEntity | WorkosOpError; /** Create a CORS origin Creates a new CORS origin for the API key's application. CORS origins allow browser-based applications to make requests to the WorkOS API. */ export const CreateCorsOriginsControllerCorsOrigin: API.OperationMethod< CreateCorsOriginsControllerCorsOriginRequest, CorsOriginResponse, CreateCorsOriginsControllerCorsOriginError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(2120, __c265, 0) as any as S.Schema, output: __S(2128, __c266, 0) as any as S.Schema, errors: [Conflict, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type CreateDataIntegrationsControllerApiKeyConnectionError = | BadRequest | Forbidden | NotFound | Conflict | WorkosOpError; /** Create another API key connected account Creates another API key-based connected account for the specified integration, owned by the user or, when `connection_owner` is `organization`, shared by the organization. Requires `connection_intent: add` and does not accept `connected_account_id`; use PUT to create or rotate the compatibility connection or to update an exact connection. Creating an additional connection is not yet available: until it is, this endpoint succeeds only when the owner has no connection for this integration, which creates the compatibility connection, and otherwise returns 404 `multiple_connections_unavailable`. */ export const CreateDataIntegrationsControllerApiKeyConnection: API.OperationMethod< CreateDataIntegrationsControllerApiKeyConnectionRequest, ConnectedAccountWriteResponse, CreateDataIntegrationsControllerApiKeyConnectionError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S( 2136, __c267, 0, ) as any as S.Schema, output: __S(2146, __c268, 2) as any as S.Schema, errors: [BadRequest, Forbidden, NotFound, Conflict, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type CreateDataIntegrationsControllerClientCredentialsConnectionError = | BadRequest | Forbidden | NotFound | Conflict | WorkosOpError; /** Create another client credentials connected account Creates another client credentials-based connected account for the specified integration, owned by the user or, when `connection_owner` is `organization`, shared by the organization. Requires `connection_intent: add` and does not accept `connected_account_id`; use PUT to create or rotate the compatibility connection or to update an exact connection. Creating an additional connection is not yet available: until it is, this endpoint succeeds only when the owner has no connection for this integration, which creates the compatibility connection, and otherwise returns 404 `multiple_connections_unavailable`. */ export const CreateDataIntegrationsControllerClientCredentialsConnection: API.OperationMethod< CreateDataIntegrationsControllerClientCredentialsConnectionRequest, ConnectedAccountWriteResponse, CreateDataIntegrationsControllerClientCredentialsConnectionError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S( 2152, __c269, 0, ) as any as S.Schema, output: __S(2146, __c268, 2) as any as S.Schema, errors: [BadRequest, Forbidden, NotFound, Conflict, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type CreateDataIntegrationsManagementControllerDataIntegrationError = | BadRequest | Forbidden | NotFound | Conflict | UnprocessableEntity | WorkosOpError; /** Create a data integration Creates a data integration for a provider. Set `credentials.type` to `custom` to use your own OAuth app credentials or `organization` to have each organization supply its own. Set `auth_methods` to `["api_key"]` to create an API key integration; you may optionally supply an `api_key` block to install a first tenant in the same call. Set `auth_methods` to `["client_credentials"]` to create a client-credentials integration; client credentials are installed per-tenant afterwards. Set `ownership` to `organization` to create the integration organizations connect to instead of the default user-owned one; a provider may have one of each. For a built-in provider, pass its slug as `provider`. For a custom provider, pass a new slug plus a `custom_provider` definition, or the slug of an existing custom provider (without `custom_provider`) to add the other ownership. */ export const CreateDataIntegrationsManagementControllerDataIntegration: API.OperationMethod< CreateDataIntegrationsManagementControllerDataIntegrationRequest, DataIntegration, CreateDataIntegrationsManagementControllerDataIntegrationError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S( 2161, __c270, 1, ) as any as S.Schema, output: __S(2171, __c271, 3) as any as S.Schema, errors: [BadRequest, Forbidden, NotFound, Conflict, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type CreateDataIntegrationsOrganizationControllerOrganizationDataInstallationError = | Forbidden | NotFound | Conflict | UnprocessableEntity | WorkosOpError; /** Import an organization connected account Imports an organization-owned [connected account](/reference/pipes/connected-account) by providing OAuth tokens directly. Omit `connection_intent` to create only the compatibility connection, or set it to `add` to explicitly create another connection. This creation-only endpoint does not accept `connected_account_id` or reauthorization intent. */ export const CreateDataIntegrationsOrganizationControllerOrganizationDataInstallation: API.OperationMethod< CreateDataIntegrationsOrganizationControllerOrganizationDataInstallationRequest, ConnectedAccountWriteResponse, CreateDataIntegrationsOrganizationControllerOrganizationDataInstallationError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S( 2184, __c273, 0, ) as any as S.Schema, output: __S(2146, __c268, 2) as any as S.Schema, errors: [Forbidden, NotFound, Conflict, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type CreateDataIntegrationsUserManagementControllerUserDataInstallationError = | NotFound | Conflict | UnprocessableEntity | WorkosOpError; /** Import a connected account Imports a [connected account](/reference/pipes/connected-account) for a user by providing OAuth tokens directly. Use this to migrate existing connections or set up connections without going through the OAuth flow. */ export const CreateDataIntegrationsUserManagementControllerUserDataInstallation: API.OperationMethod< CreateDataIntegrationsUserManagementControllerUserDataInstallationRequest, ConnectedAccountWriteResponse, CreateDataIntegrationsUserManagementControllerUserDataInstallationError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S( 2192, __c274, 0, ) as any as S.Schema, output: __S(2146, __c268, 2) as any as S.Schema, errors: [NotFound, Conflict, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type CreateFlagTargetsControllerTargetError = | BadRequest | Forbidden | NotFound | WorkosOpError; /** Add a feature flag target Enables a feature flag for a specific target in the current environment. Currently, supported targets include users and organizations. */ export const CreateFlagTargetsControllerTarget: API.OperationMethod< CreateFlagTargetsControllerTargetRequest, CreateFlagTargetsControllerTargetResponse, CreateFlagTargetsControllerTargetError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(2200, __c275, 0) as any as S.Schema, output: __S(1472, __c184, 0) as any as S.Schema, errors: [BadRequest, Forbidden, NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type CreateGroupsControllerError = | BadRequest | Forbidden | NotFound | UnprocessableEntity | WorkosOpError; /** Create a group Create a new group within an organization. */ export const CreateGroupsController: API.OperationMethod< CreateGroupsControllerRequest, Group, CreateGroupsControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(2208, __c276, 0) as any as S.Schema, output: __S(2640, __c330, 0) as any as S.Schema, errors: [BadRequest, Forbidden, NotFound, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type CreateItContactsControllerError = | Forbidden | NotFound | Conflict | UnprocessableEntity | WorkosOpError; /** Create an IT contact Add an IT contact to an organization. No Admin Portal invitation is sent, though the contact is notified if the organization has a connection certificate nearing expiry. */ export const CreateItContactsController: API.OperationMethod< CreateItContactsControllerRequest, ItContact, CreateItContactsControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(2216, __c277, 0) as any as S.Schema, output: __S(2224, __c278, 0) as any as S.Schema, errors: [Forbidden, NotFound, Conflict, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type CreateJumpWireWebDataVaultControllerError = | BadRequest | Conflict | UnprocessableEntity | WorkosOpError; /** Create an object Encrypt and store a new key-value object. */ export const CreateJumpWireWebDataVaultController: API.OperationMethod< CreateJumpWireWebDataVaultControllerRequest, ObjectMetadata, CreateJumpWireWebDataVaultControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(2248, __c281, 0) as any as S.Schema, output: __S(2256, __c282, 0) as any as S.Schema, errors: [BadRequest, Conflict, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type CreateOrganizationApiKeysControllerError = | NotFound | UnprocessableEntity | WorkosOpError; /** Create an API key for an organization Create a new API key for an organization. */ export const CreateOrganizationApiKeysController: API.OperationMethod< CreateOrganizationApiKeysControllerRequest, OrganizationApiKeyWithValue, CreateOrganizationApiKeysControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(2264, __c283, 0) as any as S.Schema, output: __S(2265, __c283, 1) as any as S.Schema, errors: [NotFound, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type CreateOrganizationDomainsControllerError = Conflict | WorkosOpError; /** Create an Organization Domain Creates a new Organization Domain. */ export const CreateOrganizationDomainsController: API.OperationMethod< CreateOrganizationDomainsControllerRequest, CreateOrganizationDomainsControllerResponse, CreateOrganizationDomainsControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(2280, __c285, 0) as any as S.Schema, output: __S(2288, __c286, 0) as any as S.Schema, errors: [Conflict, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type CreateOrganizationsControllerError = | BadRequest | Conflict | UnprocessableEntity | WorkosOpError; /** Create an Organization Creates a new organization in the current environment. */ export const CreateOrganizationsController: API.OperationMethod< CreateOrganizationsControllerRequest, Organization, CreateOrganizationsControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(2296, __c287, 0) as any as S.Schema, output: __S(2305, __c288, 1) as any as S.Schema, errors: [BadRequest, Conflict, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type CreatePortalSessionsControllerError = | BadRequest | Forbidden | NotFound | UnprocessableEntity | WorkosOpError; /** Generate a Portal Link Generate a Portal Link scoped to an Organization. */ export const CreatePortalSessionsController: API.OperationMethod< CreatePortalSessionsControllerRequest, PortalLinkResponse, CreatePortalSessionsControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(2320, __c290, 0) as any as S.Schema, output: __S(2321, __c290, 1) as any as S.Schema, errors: [BadRequest, Forbidden, NotFound, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type CreateRedirectUrisControllerError = BadRequest | UnprocessableEntity | WorkosOpError; /** Create a redirect URI Creates a new redirect URI for an application. */ export const CreateRedirectUrisController: API.OperationMethod< CreateRedirectUrisControllerRequest, RedirectUri, CreateRedirectUrisControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(2328, __c291, 0) as any as S.Schema, output: __S(2336, __c292, 0) as any as S.Schema, errors: [BadRequest, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type CreateSamlIdpSigningCertificatesControllerError = | BadRequest | Forbidden | NotFound | UnprocessableEntity | WorkosOpError; /** Create an IdP signing certificate Adds an Identity Provider signing certificate to the connection, so SAML responses signed with its key can be verified. Use this to import a new certificate ahead of an Identity Provider rotation -- the existing certificates keep working until they are deleted or expire. */ export const CreateSamlIdpSigningCertificatesController: API.OperationMethod< CreateSamlIdpSigningCertificatesControllerRequest, SamlIdpSigningCertificate, CreateSamlIdpSigningCertificatesControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(2344, __c293, 0) as any as S.Schema, output: __S(2352, __c294, 0) as any as S.Schema, errors: [BadRequest, Forbidden, NotFound, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type CreateSamlSpEncryptionCertificatesControllerError = | BadRequest | Forbidden | NotFound | Conflict | WorkosOpError; /** Create an SP encryption certificate Generates a new encryption key pair for the connection and returns its public certificate. WorkOS holds the private key, so the request takes no body -- to bring your own key pairs, provide `saml_options.sp_encryption_key_pairs` when creating the connection instead. Creating a certificate appends rather than replaces: every active private key is tried when decrypting, which lets a rotation overlap the old and new certificates. */ export const CreateSamlSpEncryptionCertificatesController: API.OperationMethod< CreateSamlSpEncryptionCertificatesControllerRequest, SamlSpEncryptionCertificate, CreateSamlSpEncryptionCertificatesControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S( 2360, __c295, 0, ) as any as S.Schema, output: __S(2352, __c294, 0) as any as S.Schema, errors: [BadRequest, Forbidden, NotFound, Conflict, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type CreateSamlSpSigningCertificatesControllerError = | BadRequest | Forbidden | NotFound | Conflict | WorkosOpError; /** Create an SP signing certificate Generates a new request signing key pair for the connection and returns its public certificate. WorkOS holds the private key, so the request takes no body -- to bring your own key pair, provide `saml_options.sp_signing_key_pair` when creating the connection instead. A connection signs with one key pair at a time: delete the existing certificate before creating its replacement. */ export const CreateSamlSpSigningCertificatesController: API.OperationMethod< CreateSamlSpSigningCertificatesControllerRequest, SamlSpSigningCertificate, CreateSamlSpSigningCertificatesControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(2368, __c296, 0) as any as S.Schema, output: __S(2352, __c294, 0) as any as S.Schema, errors: [BadRequest, Forbidden, NotFound, Conflict, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type CreateTeamsControllerTeamError = Conflict | UnprocessableEntity | WorkosOpError; /** Create a team Creates a team along with its default project, a staging environment, and a production environment. An admin invitation is sent to `admin_email`, onboarding is marked complete with AuthKit enabled, and the calling platform is authorized to act inside the team. */ export const CreateTeamsControllerTeam: API.OperationMethod< CreateTeamsControllerTeamRequest, Team, CreateTeamsControllerTeamError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(2376, __c297, 0) as any as S.Schema, output: __S(2384, __c298, 0) as any as S.Schema, errors: [Conflict, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type CreateUserApiKeysControllerError = | BadRequest | NotFound | UnprocessableEntity | WorkosOpError; /** Create an API key for a user Create a new API key owned by a user. The user must have an active membership in the specified organization. */ export const CreateUserApiKeysController: API.OperationMethod< CreateUserApiKeysControllerRequest, UserApiKeyWithValue, CreateUserApiKeysControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(2416, __c302, 0) as any as S.Schema, output: __S(2417, __c302, 1) as any as S.Schema, errors: [BadRequest, NotFound, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type CreateUserlandUserInvitesControllerError = | BadRequest | NotFound | UnprocessableEntity | WorkosOpError; /** Send an invitation Sends an invitation email to the recipient. */ export const CreateUserlandUserInvitesController: API.OperationMethod< CreateUserlandUserInvitesControllerRequest, UserlandUserInvite, CreateUserlandUserInvitesControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(2432, __c304, 0) as any as S.Schema, output: __S(2440, __c305, 0) as any as S.Schema, errors: [BadRequest, NotFound, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type CreateUserlandUserOrganizationMembershipsControllerError = | BadRequest | NotFound | UnprocessableEntity | WorkosOpError; /** Create an organization membership Creates a new `active` organization membership for the given organization and user. Calling this API with an organization and user that match an `inactive` organization membership will activate the membership with the specified role(s). */ export const CreateUserlandUserOrganizationMembershipsController: API.OperationMethod< CreateUserlandUserOrganizationMembershipsControllerRequest, CreateUserlandUserOrganizationMembershipsControllerResponse, CreateUserlandUserOrganizationMembershipsControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S( 2448, __c306, 0, ) as any as S.Schema, output: __S( 2456, __c307, 0, ) as any as S.Schema, errors: [BadRequest, NotFound, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type CreateWaitlistsControllerEntryError = NotFound | UnprocessableEntity | WorkosOpError; /** Create a waitlist entry Add an email address to the waitlist. Email addresses are normalized and unique per environment: a request for an email address already on the waitlist returns the existing entry unchanged (still with status `201`) and does not send another confirmation email. If a user with the email address already exists in the environment, the request fails with the code `user_already_exists`. */ export const CreateWaitlistsControllerEntry: API.OperationMethod< CreateWaitlistsControllerEntryRequest, WaitlistEntry, CreateWaitlistsControllerEntryError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(2480, __c310, 0) as any as S.Schema, output: __S(424, __c53, 0) as any as S.Schema, errors: [NotFound, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type CreateWebhookEndpointsControllerError = Conflict | UnprocessableEntity | WorkosOpError; /** Create a Webhook Endpoint Create a new webhook endpoint to receive event notifications. */ export const CreateWebhookEndpointsController: API.OperationMethod< CreateWebhookEndpointsControllerRequest, WebhookEndpointJson, CreateWebhookEndpointsControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(2488, __c311, 0) as any as S.Schema, output: __S(2496, __c312, 0) as any as S.Schema, errors: [Conflict, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type DataIntegrationsControllerGetDataIntegrationAuthorizeUrlError = | BadRequest | Forbidden | NotFound | Conflict | UnprocessableEntity | WorkosOpError; /** Get authorization URL Generates an OAuth authorization URL to initiate the connection flow for a user. Redirect the user to the returned URL to begin the OAuth flow with the third-party provider. */ export const DataIntegrationsControllerGetDataIntegrationAuthorizeUrl: API.OperationMethod< DataIntegrationsControllerGetDataIntegrationAuthorizeUrlRequest, DataIntegrationAuthorizeUrlResponse, DataIntegrationsControllerGetDataIntegrationAuthorizeUrlError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S( 2504, __c313, 0, ) as any as S.Schema, output: __S(1368, __c171, 0) as any as S.Schema, errors: [BadRequest, Forbidden, NotFound, Conflict, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type DataIntegrationsControllerVendCredentialsError = | BadRequest | Forbidden | NotFound | Conflict | UnprocessableEntity | WorkosOpError; /** Vend credentials for a connected account Returns credentials for a user's connected account. Branches on the installation's `auth_method`: OAuth installations return an access token (refreshed if needed); API-key installations return the stored secret. Every active credential includes `config`: provider-declared, non-secret values from the installation snapshot, with current provider defaults for unset fields. Editing integration or organization configuration does not change the snapshot; reconnect or explicitly rebind the connection to adopt those edits. Defaults remain live, so a changed default can appear in `config` before a cached token is refreshed or re-minted. Credentials that never refresh require a reconnect or rebind when a default changes their routing. */ export const DataIntegrationsControllerVendCredentials: API.OperationMethod< DataIntegrationsControllerVendCredentialsRequest, DataIntegrationsControllerVendCredentialsResponse, DataIntegrationsControllerVendCredentialsError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(2512, __c314, 0) as any as S.Schema, output: __S( 2513, __c314, 1, ) as any as S.Schema, errors: [BadRequest, Forbidden, NotFound, Conflict, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type DeactivateUserlandUserOrganizationMembershipsControllerError = | BadRequest | NotFound | UnprocessableEntity | WorkosOpError; /** Deactivate an organization membership Deactivates an `active` organization membership. Emits an [organization_membership.updated](/events/organization-membership) event upon successful deactivation. - Deactivating an `inactive` membership is a no-op and does not emit an event. - Deactivating a `pending` membership returns an error. This membership should be [deleted](/reference/authkit/organization-membership/delete) instead. See the [membership management documentation](/authkit/users-organizations/organizations/membership-management) for additional details. */ export const DeactivateUserlandUserOrganizationMembershipsController: API.OperationMethod< DeactivateUserlandUserOrganizationMembershipsControllerRequest, DeactivateUserlandUserOrganizationMembershipsControllerResponse, DeactivateUserlandUserOrganizationMembershipsControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S( 2520, __c315, 0, ) as any as S.Schema, output: __S( 2456, __c307, 0, ) as any as S.Schema, errors: [BadRequest, NotFound, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type DecryptJumpWireWebKeyControllerError = BadRequest | WorkosOpError; /** Decrypt a data key Decrypt a previously encrypted data key from WorkOS Vault. */ export const DecryptJumpWireWebKeyController: API.OperationMethod< DecryptJumpWireWebKeyControllerRequest, DecryptResponse, DecryptJumpWireWebKeyControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(2528, __c316, 0) as any as S.Schema, output: __S(2529, __c316, 1) as any as S.Schema, errors: [BadRequest, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type DeleteAgentBlueprintsControllerError = NotFound | WorkosOpError; /** Delete an agent blueprint Deletes an agent blueprint along with its configuration, instances, and sessions. */ export const DeleteAgentBlueprintsController: API.OperationMethod< DeleteAgentBlueprintsControllerRequest, DeleteAgentBlueprintsControllerResponse, DeleteAgentBlueprintsControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(2536, __c317, 0) as any as S.Schema, output: __S(1472, __c184, 0) as any as S.Schema, errors: [NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type DeleteAgentInstancesControllerError = NotFound | WorkosOpError; /** Delete an agent instance Deletes an agent instance along with its sessions, invalidating their refresh tokens. */ export const DeleteAgentInstancesController: API.OperationMethod< DeleteAgentInstancesControllerRequest, DeleteAgentInstancesControllerResponse, DeleteAgentInstancesControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(2552, __c319, 0) as any as S.Schema, output: __S(1472, __c184, 0) as any as S.Schema, errors: [NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type DeleteApiKeysControllerError = NotFound | WorkosOpError; /** Delete an API key Permanently deletes an API key. This action cannot be undone. Once deleted, any requests using this API key will fail authentication. */ export const DeleteApiKeysController: API.OperationMethod< DeleteApiKeysControllerRequest, DeleteApiKeysControllerResponse, DeleteApiKeysControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(2560, __c320, 0) as any as S.Schema, output: __S(1472, __c184, 0) as any as S.Schema, errors: [NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type DeleteApplicationCredentialsControllerError = NotFound | WorkosOpError; /** Delete a Client Secret Delete (revoke) an existing client secret. */ export const DeleteApplicationCredentialsController: API.OperationMethod< DeleteApplicationCredentialsControllerRequest, DeleteApplicationCredentialsControllerResponse, DeleteApplicationCredentialsControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(2568, __c321, 0) as any as S.Schema, output: __S(1472, __c184, 0) as any as S.Schema, errors: [NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type DeleteApplicationsControllerError = NotFound | WorkosOpError; /** Delete a Connect Application Delete an existing Connect Application. */ export const DeleteApplicationsController: API.OperationMethod< DeleteApplicationsControllerRequest, DeleteApplicationsControllerResponse, DeleteApplicationsControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(2576, __c322, 0) as any as S.Schema, output: __S(1472, __c184, 0) as any as S.Schema, errors: [NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type DeleteAuthenticationFactorsControllerError = NotFound | WorkosOpError; /** Delete Factor Permanently deletes an Authentication Factor. It cannot be undone. */ export const DeleteAuthenticationFactorsController: API.OperationMethod< DeleteAuthenticationFactorsControllerRequest, DeleteAuthenticationFactorsControllerResponse, DeleteAuthenticationFactorsControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(2584, __c323, 0) as any as S.Schema, output: __S(1472, __c184, 0) as any as S.Schema, errors: [NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type DeleteAuthkitOauthResourcesControllerError = NotFound | WorkosOpError; /** Delete an MCP resource indicator Removes an MCP resource indicator from an environment. Any application consents granted against it are removed too. */ export const DeleteAuthkitOauthResourcesController: API.OperationMethod< DeleteAuthkitOauthResourcesControllerRequest, DeleteAuthkitOauthResourcesControllerResponse, DeleteAuthkitOauthResourcesControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(2592, __c324, 0) as any as S.Schema, output: __S(1472, __c184, 0) as any as S.Schema, errors: [NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type DeleteAuthorizationOrganizationRolesControllerError = | BadRequest | Forbidden | NotFound | Conflict | WorkosOpError; /** Delete a custom role Delete an existing custom role. */ export const DeleteAuthorizationOrganizationRolesController: API.OperationMethod< DeleteAuthorizationOrganizationRolesControllerRequest, DeleteAuthorizationOrganizationRolesControllerResponse, DeleteAuthorizationOrganizationRolesControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S( 2600, __c325, 0, ) as any as S.Schema, output: __S( 1472, __c184, 0, ) as any as S.Schema, errors: [BadRequest, Forbidden, NotFound, Conflict, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type DeleteAuthorizationPermissionsControllerError = Forbidden | NotFound | WorkosOpError; /** Delete a permission Delete an existing permission. System permissions cannot be deleted. */ export const DeleteAuthorizationPermissionsController: API.OperationMethod< DeleteAuthorizationPermissionsControllerRequest, DeleteAuthorizationPermissionsControllerResponse, DeleteAuthorizationPermissionsControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(2608, __c326, 0) as any as S.Schema, output: __S(1472, __c184, 0) as any as S.Schema, errors: [Forbidden, NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type DeleteAuthorizationResourcesByExternalIdControllerByExternalIdError = | BadRequest | Forbidden | NotFound | Conflict | WorkosOpError; /** Delete an authorization resource by external ID Delete an authorization resource by organization, resource type, and external ID. This also deletes all descendant resources. */ export const DeleteAuthorizationResourcesByExternalIdControllerByExternalId: API.OperationMethod< DeleteAuthorizationResourcesByExternalIdControllerByExternalIdRequest, DeleteAuthorizationResourcesByExternalIdControllerByExternalIdResponse, DeleteAuthorizationResourcesByExternalIdControllerByExternalIdError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S( 2616, __c327, 0, ) as any as S.Schema, output: __S( 1472, __c184, 0, ) as any as S.Schema, errors: [BadRequest, Forbidden, NotFound, Conflict, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type DeleteAuthorizationResourcesControllerError = | BadRequest | Forbidden | NotFound | Conflict | WorkosOpError; /** Delete an authorization resource Delete an authorization resource and all its descendants. */ export const DeleteAuthorizationResourcesController: API.OperationMethod< DeleteAuthorizationResourcesControllerRequest, DeleteAuthorizationResourcesControllerResponse, DeleteAuthorizationResourcesControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(2624, __c328, 0) as any as S.Schema, output: __S(1472, __c184, 0) as any as S.Schema, errors: [BadRequest, Forbidden, NotFound, Conflict, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type DeleteAuthorizedApplicationsControllerError = NotFound | WorkosOpError; /** Delete an authorized application Delete an existing Authorized Connect Application. */ export const DeleteAuthorizedApplicationsController: API.OperationMethod< DeleteAuthorizedApplicationsControllerRequest, DeleteAuthorizedApplicationsControllerResponse, DeleteAuthorizedApplicationsControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(2648, __c331, 0) as any as S.Schema, output: __S(1472, __c184, 0) as any as S.Schema, errors: [NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type DeleteConnectionsControllerError = Forbidden | NotFound | WorkosOpError; /** Delete a Connection Permanently deletes an existing connection. It cannot be undone. */ export const DeleteConnectionsController: API.OperationMethod< DeleteConnectionsControllerRequest, DeleteConnectionsControllerResponse, DeleteConnectionsControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(2656, __c332, 0) as any as S.Schema, output: __S(1472, __c184, 0) as any as S.Schema, errors: [Forbidden, NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type DeleteDataIntegrationsManagementControllerDataIntegrationError = | NotFound | WorkosOpError; /** Delete a data integration Deletes the user-owned data integration and all of its connected installations. For a custom provider, the provider definition is deleted once no organization-owned root references it either. */ export const DeleteDataIntegrationsManagementControllerDataIntegration: API.OperationMethod< DeleteDataIntegrationsManagementControllerDataIntegrationRequest, DeleteDataIntegrationsManagementControllerDataIntegrationResponse, DeleteDataIntegrationsManagementControllerDataIntegrationError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S( 2664, __c333, 0, ) as any as S.Schema, output: __S( 1472, __c184, 0, ) as any as S.Schema, errors: [NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type DeleteDataIntegrationsManagementControllerOrganizationDataIntegrationError = | NotFound | WorkosOpError; /** Delete an organization-owned data integration Deletes the organization-owned data integration for a provider and all of its connected installations. For a custom provider, the provider definition is deleted once no user-owned root references it either. The `/organization` suffix selects the environment-level organization-owned root for the provider; it does not name a particular organization. */ export const DeleteDataIntegrationsManagementControllerOrganizationDataIntegration: API.OperationMethod< DeleteDataIntegrationsManagementControllerOrganizationDataIntegrationRequest, DeleteDataIntegrationsManagementControllerOrganizationDataIntegrationResponse, DeleteDataIntegrationsManagementControllerOrganizationDataIntegrationError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S( 2672, __c334, 0, ) as any as S.Schema, output: __S( 1472, __c184, 0, ) as any as S.Schema, errors: [NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type DeleteDataIntegrationsOrganizationControllerOrganizationDataInstallationError = | BadRequest | NotFound | Conflict | WorkosOpError; /** Delete an organization connected account Disconnects the organization's account for the provider, including removing any stored access and refresh tokens. A member will need to reauthorize if the organization wants to reconnect. This does not revoke access on the provider side. */ export const DeleteDataIntegrationsOrganizationControllerOrganizationDataInstallation: API.OperationMethod< DeleteDataIntegrationsOrganizationControllerOrganizationDataInstallationRequest, DeleteDataIntegrationsOrganizationControllerOrganizationDataInstallationResponse, DeleteDataIntegrationsOrganizationControllerOrganizationDataInstallationError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S( 2680, __c335, 0, ) as any as S.Schema, output: __S( 1472, __c184, 0, ) as any as S.Schema, errors: [BadRequest, NotFound, Conflict, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type DeleteDataIntegrationsUserManagementControllerUserDataInstallationError = | BadRequest | NotFound | Conflict | WorkosOpError; /** Delete a connected account Disconnects WorkOS's account for the user, including removing any stored access and refresh tokens. The user will need to reauthorize if they want to reconnect. Access is not revoked on the provider side, except for the WorkOS OAuth provider, whose underlying AuthKit grant is revoked. */ export const DeleteDataIntegrationsUserManagementControllerUserDataInstallation: API.OperationMethod< DeleteDataIntegrationsUserManagementControllerUserDataInstallationRequest, DeleteDataIntegrationsUserManagementControllerUserDataInstallationResponse, DeleteDataIntegrationsUserManagementControllerUserDataInstallationError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S( 2688, __c336, 0, ) as any as S.Schema, output: __S( 1472, __c184, 0, ) as any as S.Schema, errors: [BadRequest, NotFound, Conflict, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type DeleteDirectoriesControllerDirectoryError = Forbidden | NotFound | WorkosOpError; /** Delete a Directory Permanently deletes an existing directory. It cannot be undone. */ export const DeleteDirectoriesControllerDirectory: API.OperationMethod< DeleteDirectoriesControllerDirectoryRequest, DeleteDirectoriesControllerDirectoryResponse, DeleteDirectoriesControllerDirectoryError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(2696, __c337, 0) as any as S.Schema, output: __S(1472, __c184, 0) as any as S.Schema, errors: [Forbidden, NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type DeleteFlagTargetsControllerTargetError = | BadRequest | Forbidden | NotFound | WorkosOpError; /** Remove a feature flag target Removes a target from the feature flag's target list in the current environment. Currently, supported targets include users and organizations. */ export const DeleteFlagTargetsControllerTarget: API.OperationMethod< DeleteFlagTargetsControllerTargetRequest, DeleteFlagTargetsControllerTargetResponse, DeleteFlagTargetsControllerTargetError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(2704, __c338, 0) as any as S.Schema, output: __S(1472, __c184, 0) as any as S.Schema, errors: [BadRequest, Forbidden, NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type DeleteGroupsControllerError = Forbidden | NotFound | WorkosOpError; /** Delete a group Delete a group from an organization. */ export const DeleteGroupsController: API.OperationMethod< DeleteGroupsControllerRequest, DeleteGroupsControllerResponse, DeleteGroupsControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(2712, __c339, 0) as any as S.Schema, output: __S(1472, __c184, 0) as any as S.Schema, errors: [Forbidden, NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type DeleteItContactsControllerError = Forbidden | NotFound | WorkosOpError; /** Delete an IT contact Remove an IT contact from an organization and revoke the contact's active setup links. */ export const DeleteItContactsController: API.OperationMethod< DeleteItContactsControllerRequest, DeleteItContactsControllerResponse, DeleteItContactsControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(2720, __c340, 0) as any as S.Schema, output: __S(1472, __c184, 0) as any as S.Schema, errors: [Forbidden, NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type DeleteJumpWireWebDataVaultControllerError = NotFound | Conflict | WorkosOpError; /** Delete an object Delete an encrypted object. */ export const DeleteJumpWireWebDataVaultController: API.OperationMethod< DeleteJumpWireWebDataVaultControllerRequest, DeleteObjectResponse, DeleteJumpWireWebDataVaultControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(2744, __c343, 0) as any as S.Schema, output: __S(2745, __c343, 1) as any as S.Schema, errors: [NotFound, Conflict, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type DeleteOrganizationDomainsControllerError = NotFound | WorkosOpError; /** Delete an Organization Domain Permanently deletes an organization domain. It cannot be undone. */ export const DeleteOrganizationDomainsController: API.OperationMethod< DeleteOrganizationDomainsControllerRequest, DeleteOrganizationDomainsControllerResponse, DeleteOrganizationDomainsControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(2752, __c344, 0) as any as S.Schema, output: __S(1472, __c184, 0) as any as S.Schema, errors: [NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type DeleteOrganizationsControllerOrganizationError = Forbidden | NotFound | WorkosOpError; /** Delete an Organization Permanently deletes an organization in the current environment. It cannot be undone. */ export const DeleteOrganizationsControllerOrganization: API.OperationMethod< DeleteOrganizationsControllerOrganizationRequest, DeleteOrganizationsControllerOrganizationResponse, DeleteOrganizationsControllerOrganizationError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(2760, __c345, 0) as any as S.Schema, output: __S( 1472, __c184, 0, ) as any as S.Schema, errors: [Forbidden, NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type DeleteRedirectUrisControllerError = NotFound | Conflict | WorkosOpError; /** Delete a redirect URI Deletes a redirect URI from an application. */ export const DeleteRedirectUrisController: API.OperationMethod< DeleteRedirectUrisControllerRequest, DeleteRedirectUrisControllerResponse, DeleteRedirectUrisControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(2768, __c346, 0) as any as S.Schema, output: __S(1472, __c184, 0) as any as S.Schema, errors: [NotFound, Conflict, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type DeleteSamlIdpSigningCertificatesControllerError = | BadRequest | Forbidden | NotFound | WorkosOpError; /** Delete an IdP signing certificate Removes an Identity Provider signing certificate from the connection. The last remaining certificate cannot be deleted. A certificate still published in the Identity Provider metadata may be restored by a metadata refresh. */ export const DeleteSamlIdpSigningCertificatesController: API.OperationMethod< DeleteSamlIdpSigningCertificatesControllerRequest, DeleteSamlIdpSigningCertificatesControllerResponse, DeleteSamlIdpSigningCertificatesControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(2776, __c347, 0) as any as S.Schema, output: __S( 1472, __c184, 0, ) as any as S.Schema, errors: [BadRequest, Forbidden, NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type DeleteSamlSpEncryptionCertificatesControllerError = | Forbidden | NotFound | WorkosOpError; /** Delete an SP encryption certificate Removes an encryption key pair from the connection. SAML responses encrypted with its certificate can no longer be decrypted, so remove the certificate from the Identity Provider first when rotating. */ export const DeleteSamlSpEncryptionCertificatesController: API.OperationMethod< DeleteSamlSpEncryptionCertificatesControllerRequest, DeleteSamlSpEncryptionCertificatesControllerResponse, DeleteSamlSpEncryptionCertificatesControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S( 2784, __c348, 0, ) as any as S.Schema, output: __S( 1472, __c184, 0, ) as any as S.Schema, errors: [Forbidden, NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type DeleteSamlSpSigningCertificatesControllerError = Forbidden | NotFound | WorkosOpError; /** Delete the SP signing certificate Removes the request signing key pair from the connection, after which SAML requests are sent unsigned. Delete the certificate before creating its replacement when rotating. */ export const DeleteSamlSpSigningCertificatesController: API.OperationMethod< DeleteSamlSpSigningCertificatesControllerRequest, DeleteSamlSpSigningCertificatesControllerResponse, DeleteSamlSpSigningCertificatesControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(2792, __c349, 0) as any as S.Schema, output: __S( 1472, __c184, 0, ) as any as S.Schema, errors: [Forbidden, NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type DeleteUserlandUserOrganizationMembershipsControllerError = | NotFound | UnprocessableEntity | WorkosOpError; /** Delete an organization membership Permanently deletes an existing organization membership. It cannot be undone. */ export const DeleteUserlandUserOrganizationMembershipsController: API.OperationMethod< DeleteUserlandUserOrganizationMembershipsControllerRequest, DeleteUserlandUserOrganizationMembershipsControllerResponse, DeleteUserlandUserOrganizationMembershipsControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S( 2800, __c350, 0, ) as any as S.Schema, output: __S( 1472, __c184, 0, ) as any as S.Schema, errors: [NotFound, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type DeleteWaitlistEntriesControllerError = NotFound | WorkosOpError; /** Delete a waitlist entry Remove the entry from the waitlist. Its email address can join again unless a user with that email now exists in the environment. Deleting the entry does not revoke an invitation created by approving it -- [revoke that invitation](/reference/authkit/invitation/revoke) separately to withdraw access. */ export const DeleteWaitlistEntriesController: API.OperationMethod< DeleteWaitlistEntriesControllerRequest, DeleteWaitlistEntriesControllerResponse, DeleteWaitlistEntriesControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(2808, __c351, 0) as any as S.Schema, output: __S(1472, __c184, 0) as any as S.Schema, errors: [NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type DeleteWebhookEndpointsControllerError = NotFound | WorkosOpError; /** Delete a Webhook Endpoint Delete an existing webhook endpoint. */ export const DeleteWebhookEndpointsController: API.OperationMethod< DeleteWebhookEndpointsControllerRequest, DeleteWebhookEndpointsControllerResponse, DeleteWebhookEndpointsControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(2816, __c352, 0) as any as S.Schema, output: __S(1472, __c184, 0) as any as S.Schema, errors: [NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type DescribeJumpWireWebDataVaultControllerError = BadRequest | NotFound | WorkosOpError; /** Describe an object Fetch metadata for an object without decrypting it. */ export const DescribeJumpWireWebDataVaultController: API.OperationMethod< DescribeJumpWireWebDataVaultControllerRequest, ObjectWithoutValue, DescribeJumpWireWebDataVaultControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(8, __c1, 0) as any as S.Schema, output: __S(16, __c2, 0) as any as S.Schema, errors: [BadRequest, NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type DirectoriesControllerFindError = Forbidden | NotFound | WorkosOpError; /** Get a Directory Get the details of an existing directory. */ export const DirectoriesControllerFind: API.OperationMethod< DirectoriesControllerFindRequest, Directory, DirectoriesControllerFindError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(24, __c3, 0) as any as S.Schema, output: __S(34, __c4, 2) as any as S.Schema, errors: [Forbidden, NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type DirectoryGroupsControllerFindError = Forbidden | NotFound | WorkosOpError; /** Get a Directory Group Get the details of an existing Directory Group. */ export const DirectoryGroupsControllerFind: API.OperationMethod< DirectoryGroupsControllerFindRequest, DirectoryGroup, DirectoryGroupsControllerFindError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(40, __c5, 0) as any as S.Schema, output: __S(48, __c6, 0) as any as S.Schema, errors: [Forbidden, NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type DirectoryUsersControllerFindError = Forbidden | NotFound | WorkosOpError; /** Get a Directory User Get the details of an existing Directory User. */ export const DirectoryUsersControllerFind: API.OperationMethod< DirectoryUsersControllerFindRequest, DirectoryUserWithGroups, DirectoryUsersControllerFindError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(56, __c7, 0) as any as S.Schema, output: __S(74, __c9, 2) as any as S.Schema, errors: [Forbidden, NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type DisableFeatureFlagsControllerFlagError = NotFound | WorkosOpError; /** Disable a feature flag Disables a feature flag in the current environment. */ export const DisableFeatureFlagsControllerFlag: API.OperationMethod< DisableFeatureFlagsControllerFlagRequest, DisableFeatureFlagsControllerFlagResponse, DisableFeatureFlagsControllerFlagError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(80, __c10, 0) as any as S.Schema, output: __S(88, __c11, 0) as any as S.Schema, errors: [NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type EnableFeatureFlagsControllerFlagError = NotFound | WorkosOpError; /** Enable a feature flag Enables a feature flag in the current environment. */ export const EnableFeatureFlagsControllerFlag: API.OperationMethod< EnableFeatureFlagsControllerFlagRequest, EnableFeatureFlagsControllerFlagResponse, EnableFeatureFlagsControllerFlagError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(104, __c13, 0) as any as S.Schema, output: __S(88, __c11, 0) as any as S.Schema, errors: [NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type ExportAuditLogExportsControllerError = NotFound | WorkosOpError; /** Get Export Get an Audit Log Export. The URL will expire after 10 minutes. If the export is needed again at a later time, refetching the export will regenerate the URL. */ export const ExportAuditLogExportsController: API.OperationMethod< ExportAuditLogExportsControllerRequest, AuditLogExportJson, ExportAuditLogExportsControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(112, __c14, 0) as any as S.Schema, output: __S(680, __c85, 0) as any as S.Schema, errors: [NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type FeatureFlagsControllerFindBySlugError = NotFound | WorkosOpError; /** Get a feature flag Get the details of an existing feature flag by its slug. */ export const FeatureFlagsControllerFindBySlug: API.OperationMethod< FeatureFlagsControllerFindBySlugRequest, Flag, FeatureFlagsControllerFindBySlugError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(120, __c15, 0) as any as S.Schema, output: __S(128, __c16, 0) as any as S.Schema, errors: [NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type GetAgentAdminControllerRegistrationError = NotFound | WorkosOpError; /** Get an agent registration Retrieve the details of an agent registration by ID. The registration is scoped to the environment of the API key used to authenticate the request. */ export const GetAgentAdminControllerRegistration: API.OperationMethod< GetAgentAdminControllerRegistrationRequest, AgentRegistration, GetAgentAdminControllerRegistrationError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(136, __c17, 0) as any as S.Schema, output: __S(140, __c17, 4) as any as S.Schema, errors: [NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type GetAgentBlueprintsControllerError = NotFound | WorkosOpError; /** Get an agent blueprint Retrieves an agent blueprint by ID. */ export const GetAgentBlueprintsController: API.OperationMethod< GetAgentBlueprintsControllerRequest, AgentBlueprint, GetAgentBlueprintsControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(144, __c18, 0) as any as S.Schema, output: __S(1955, __c244, 3) as any as S.Schema, errors: [NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type GetAgentInstancesControllerError = NotFound | WorkosOpError; /** Get an agent instance Retrieves an agent instance by ID. */ export const GetAgentInstancesController: API.OperationMethod< GetAgentInstancesControllerRequest, AgentInstance, GetAgentInstancesControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(168, __c21, 0) as any as S.Schema, output: __S(176, __c22, 0) as any as S.Schema, errors: [NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type GetAgentInstanceSessionsControllerError = NotFound | WorkosOpError; /** Get an agent instance session Retrieves an agent instance session by ID. */ export const GetAgentInstanceSessionsController: API.OperationMethod< GetAgentInstanceSessionsControllerRequest, AgentInstanceSession, GetAgentInstanceSessionsControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(184, __c23, 0) as any as S.Schema, output: __S(192, __c24, 0) as any as S.Schema, errors: [NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type GetAuthenticationFactorsControllerError = NotFound | WorkosOpError; /** Get Factor Gets an Authentication Factor. */ export const GetAuthenticationFactorsController: API.OperationMethod< GetAuthenticationFactorsControllerRequest, AuthenticationFactor, GetAuthenticationFactorsControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(200, __c25, 0) as any as S.Schema, output: __S(209, __c26, 1) as any as S.Schema, errors: [NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type GetAuthorizationGroupRoleAssignmentsControllerError = | Forbidden | NotFound | WorkosOpError; /** Get a group role assignment Get a specific role assignment for a group by its ID. */ export const GetAuthorizationGroupRoleAssignmentsController: API.OperationMethod< GetAuthorizationGroupRoleAssignmentsControllerRequest, GroupRoleAssignment, GetAuthorizationGroupRoleAssignmentsControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S( 216, __c27, 0, ) as any as S.Schema, output: __S(2056, __c257, 0) as any as S.Schema, errors: [Forbidden, NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type GetAuthorizationOrganizationRolesControllerError = Forbidden | NotFound | WorkosOpError; /** Get a custom role Retrieve a role that applies to an organization by its slug. This can return either an environment role or a custom role. */ export const GetAuthorizationOrganizationRolesController: API.OperationMethod< GetAuthorizationOrganizationRolesControllerRequest, GetAuthorizationOrganizationRolesControllerResponse, GetAuthorizationOrganizationRolesControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(224, __c28, 0) as any as S.Schema, output: __S( 2408, __c301, 0, ) as any as S.Schema, errors: [Forbidden, NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type GetAuthorizationResourcesByExternalIdControllerByExternalIdError = | Forbidden | NotFound | WorkosOpError; /** Get a resource by external ID Retrieve the details of an authorization resource by its external ID, organization, and resource type. This is useful when you only have the external ID from your system and need to fetch the full resource details. */ export const GetAuthorizationResourcesByExternalIdControllerByExternalId: API.OperationMethod< GetAuthorizationResourcesByExternalIdControllerByExternalIdRequest, AuthorizationResource, GetAuthorizationResourcesByExternalIdControllerByExternalIdError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S( 232, __c29, 0, ) as any as S.Schema, output: __S(1272, __c159, 0) as any as S.Schema, errors: [Forbidden, NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type GetAuthorizationRolesControllerError = Forbidden | NotFound | WorkosOpError; /** Get an environment role Get an environment role by its slug. */ export const GetAuthorizationRolesController: API.OperationMethod< GetAuthorizationRolesControllerRequest, Role, GetAuthorizationRolesControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(240, __c30, 0) as any as S.Schema, output: __S(248, __c31, 0) as any as S.Schema, errors: [Forbidden, NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type GetDataIntegrationsControllerUserlandUserTokenError = | BadRequest | Forbidden | NotFound | Conflict | UnprocessableEntity | WorkosOpError; /** Get an access token for a connected account Fetches a valid OAuth access token for a user's connected account. WorkOS automatically handles token refresh, ensuring you always receive a valid, non-expired token. */ export const GetDataIntegrationsControllerUserlandUserToken: API.OperationMethod< GetDataIntegrationsControllerUserlandUserTokenRequest, GetDataIntegrationsControllerUserlandUserTokenResponse, GetDataIntegrationsControllerUserlandUserTokenError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S( 256, __c32, 0, ) as any as S.Schema, output: __S( 257, __c32, 1, ) as any as S.Schema, errors: [BadRequest, Forbidden, NotFound, Conflict, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type GetDataIntegrationsManagementControllerDataIntegrationError = NotFound | WorkosOpError; /** Get a data integration Retrieves the user-owned data integration by its slug. */ export const GetDataIntegrationsManagementControllerDataIntegration: API.OperationMethod< GetDataIntegrationsManagementControllerDataIntegrationRequest, DataIntegration, GetDataIntegrationsManagementControllerDataIntegrationError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S( 264, __c33, 0, ) as any as S.Schema, output: __S(2171, __c271, 3) as any as S.Schema, errors: [NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type GetDataIntegrationsManagementControllerOrganizationDataIntegrationError = | NotFound | WorkosOpError; /** Get an organization-owned data integration Retrieves the organization-owned data integration for a provider by its slug. The `/organization` suffix selects the environment-level organization-owned root for the provider; it does not name a particular organization. */ export const GetDataIntegrationsManagementControllerOrganizationDataIntegration: API.OperationMethod< GetDataIntegrationsManagementControllerOrganizationDataIntegrationRequest, DataIntegration, GetDataIntegrationsManagementControllerOrganizationDataIntegrationError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S( 272, __c34, 0, ) as any as S.Schema, output: __S(2171, __c271, 3) as any as S.Schema, errors: [NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type GetDataIntegrationsOrganizationControllerOrganizationDataInstallationError = | BadRequest | NotFound | Conflict | WorkosOpError; /** Get an organization connected account Retrieves an organization's [connected account](/reference/pipes/connected-account) for a specific provider. */ export const GetDataIntegrationsOrganizationControllerOrganizationDataInstallation: API.OperationMethod< GetDataIntegrationsOrganizationControllerOrganizationDataInstallationRequest, ConnectedAccount, GetDataIntegrationsOrganizationControllerOrganizationDataInstallationError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S( 296, __c37, 0, ) as any as S.Schema, output: __S(304, __c38, 0) as any as S.Schema, errors: [BadRequest, NotFound, Conflict, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type GetDataIntegrationsOrganizationControllerOrganizationDataIntegrationsError = | NotFound | WorkosOpError; /** List providers for an organization Retrieves the organization-owned providers configured for your environment and the organization's [connected account](/reference/pipes/connected-account) information for each. Providers owned by individual users are not included. */ export const GetDataIntegrationsOrganizationControllerOrganizationDataIntegrations: API.OperationMethod< GetDataIntegrationsOrganizationControllerOrganizationDataIntegrationsRequest, DataIntegrationsListResponse, GetDataIntegrationsOrganizationControllerOrganizationDataIntegrationsError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S( 312, __c39, 0, ) as any as S.Schema, output: __S(324, __c40, 4) as any as S.Schema, errors: [NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type GetDataIntegrationsUserManagementControllerUserDataInstallationError = | BadRequest | NotFound | Conflict | WorkosOpError; /** Get a connected account Retrieves a user's [connected account](/reference/pipes/connected-account) for a specific provider. */ export const GetDataIntegrationsUserManagementControllerUserDataInstallation: API.OperationMethod< GetDataIntegrationsUserManagementControllerUserDataInstallationRequest, ConnectedAccount, GetDataIntegrationsUserManagementControllerUserDataInstallationError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S( 328, __c41, 0, ) as any as S.Schema, output: __S(304, __c38, 0) as any as S.Schema, errors: [BadRequest, NotFound, Conflict, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type GetDataIntegrationsUserManagementControllerUserDataIntegrationsError = | NotFound | WorkosOpError; /** List providers for a user Retrieves a list of available providers and the user's connection status for each. Returns all providers configured for your environment, along with the user's [connected account](/reference/pipes/connected-account) information where applicable. */ export const GetDataIntegrationsUserManagementControllerUserDataIntegrations: API.OperationMethod< GetDataIntegrationsUserManagementControllerUserDataIntegrationsRequest, DataIntegrationsListResponse, GetDataIntegrationsUserManagementControllerUserDataIntegrationsError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S( 336, __c42, 0, ) as any as S.Schema, output: __S(324, __c40, 4) as any as S.Schema, errors: [NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type GetGroupsControllerError = Forbidden | NotFound | WorkosOpError; /** Get a group Retrieve a group by its ID within an organization. */ export const GetGroupsController: API.OperationMethod< GetGroupsControllerRequest, Group, GetGroupsControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(344, __c43, 0) as any as S.Schema, output: __S(2640, __c330, 0) as any as S.Schema, errors: [Forbidden, NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type GetJwtTemplatesControllerJwtTemplateError = NotFound | WorkosOpError; /** Get JWT template Get the JWT template for the current environment. */ export const GetJwtTemplatesControllerJwtTemplate: API.OperationMethod< GetJwtTemplatesControllerJwtTemplateRequest, JwtTemplate, GetJwtTemplatesControllerJwtTemplateError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(352, __c44, 0) as any as S.Schema, output: __S(360, __c45, 0) as any as S.Schema, errors: [NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type GetOrganizationDomainsControllerError = NotFound | WorkosOpError; /** Get an Organization Domain Get the details of an existing organization domain. */ export const GetOrganizationDomainsController: API.OperationMethod< GetOrganizationDomainsControllerRequest, OrganizationDomainStandAlone, GetOrganizationDomainsControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(368, __c46, 0) as any as S.Schema, output: __S(376, __c47, 0) as any as S.Schema, errors: [NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type GetOrganizationsControllerAuditLogConfigurationError = NotFound | WorkosOpError; /** Get Audit Log Configuration Get the unified view of audit log trail and stream configuration for an organization. */ export const GetOrganizationsControllerAuditLogConfiguration: API.OperationMethod< GetOrganizationsControllerAuditLogConfigurationRequest, AuditLogConfiguration, GetOrganizationsControllerAuditLogConfigurationError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S( 384, __c48, 0, ) as any as S.Schema, output: __S(386, __c48, 2) as any as S.Schema, errors: [NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type GetOrganizationsControllerByExternalIdError = NotFound | WorkosOpError; /** Get an Organization by External ID Get the details of an existing organization by an [external identifier](/authkit/metadata/external-identifiers). */ export const GetOrganizationsControllerByExternalId: API.OperationMethod< GetOrganizationsControllerByExternalIdRequest, Organization, GetOrganizationsControllerByExternalIdError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(392, __c49, 0) as any as S.Schema, output: __S(2305, __c288, 1) as any as S.Schema, errors: [NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type GetPublicRadarChallengesControllerError = NotFound | WorkosOpError; /** Get Radar Challenge details Get the details of an existing Radar Challenge, including the OTP code. */ export const GetPublicRadarChallengesController: API.OperationMethod< GetPublicRadarChallengesControllerRequest, RadarChallenge, GetPublicRadarChallengesControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(400, __c50, 0) as any as S.Schema, output: __S(401, __c50, 1) as any as S.Schema, errors: [NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type GetSamlSpSigningCertificatesControllerError = | BadRequest | Forbidden | NotFound | WorkosOpError; /** Get the SP signing certificate Returns the public certificate the Identity Provider can use to verify the signature of SAML requests sent by WorkOS. Responds with `404` when the connection has no request signing key pair. */ export const GetSamlSpSigningCertificatesController: API.OperationMethod< GetSamlSpSigningCertificatesControllerRequest, SamlSpSigningCertificate, GetSamlSpSigningCertificatesControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(432, __c54, 0) as any as S.Schema, output: __S(2352, __c294, 0) as any as S.Schema, errors: [BadRequest, Forbidden, NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type GetSsoControllerProfileError = NotFound | WorkosOpError; /** Get a User Profile Exchange an access token for a user's [Profile](/reference/sso/profile). Because this profile is returned in the [Get a Profile and Token endpoint](/reference/sso/profile/get-profile-and-token) your application usually does not need to call this endpoint. It is available for any authentication flows that require an additional endpoint to retrieve a user's profile. */ export const GetSsoControllerProfile: API.OperationMethod< GetSsoControllerProfileRequest, Profile, GetSsoControllerProfileError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(440, __c55, 0) as any as S.Schema, output: __S(448, __c56, 0) as any as S.Schema, errors: [NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type GetTeamsControllerTeamError = NotFound | WorkosOpError; /** Get a team Returns a team, and doubles as a health check on the platform's access to it. Read `production_state` before attempting to create a production environment. */ export const GetTeamsControllerTeam: API.OperationMethod< GetTeamsControllerTeamRequest, Team, GetTeamsControllerTeamError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(456, __c57, 0) as any as S.Schema, output: __S(2384, __c298, 0) as any as S.Schema, errors: [NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type GetUserlandMagicAuthControllerError = NotFound | WorkosOpError; /** Get Magic Auth code details Get the details of an existing [Magic Auth](/reference/authkit/magic-auth) code that can be used to send an email to a user for authentication. */ export const GetUserlandMagicAuthController: API.OperationMethod< GetUserlandMagicAuthControllerRequest, MagicAuth, GetUserlandMagicAuthControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(464, __c58, 0) as any as S.Schema, output: __S(472, __c59, 0) as any as S.Schema, errors: [NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type GetUserlandUserIdentitiesControllerError = NotFound | WorkosOpError; /** Get user identities Get a list of identities associated with the user. A user can have multiple associated identities after going through [identity linking](/authkit/identity-linking). Currently only OAuth identities are supported. More provider types may be added in the future. */ export const GetUserlandUserIdentitiesController: API.OperationMethod< GetUserlandUserIdentitiesControllerRequest, GetUserlandUserIdentitiesControllerResponse, GetUserlandUserIdentitiesControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(480, __c60, 0) as any as S.Schema, output: __S(483, __c60, 3) as any as S.Schema, errors: [NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type GetUserlandUserInvitesControllerError = NotFound | WorkosOpError; /** Get an invitation Get the details of an existing invitation. */ export const GetUserlandUserInvitesController: API.OperationMethod< GetUserlandUserInvitesControllerRequest, UserlandUserInvite, GetUserlandUserInvitesControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(488, __c61, 0) as any as S.Schema, output: __S(2440, __c305, 0) as any as S.Schema, errors: [NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type GetUserlandUserInvitesControllerByTokenError = NotFound | WorkosOpError; /** Find an invitation by token Retrieve an existing invitation using the token. */ export const GetUserlandUserInvitesControllerByToken: API.OperationMethod< GetUserlandUserInvitesControllerByTokenRequest, UserlandUserInvite, GetUserlandUserInvitesControllerByTokenError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(496, __c62, 0) as any as S.Schema, output: __S(2440, __c305, 0) as any as S.Schema, errors: [NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type GetUserlandUserOrganizationMembershipsControllerError = NotFound | WorkosOpError; /** Get an organization membership Get the details of an existing organization membership. */ export const GetUserlandUserOrganizationMembershipsController: API.OperationMethod< GetUserlandUserOrganizationMembershipsControllerRequest, UserlandUserOrganizationMembership, GetUserlandUserOrganizationMembershipsControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S( 504, __c63, 0, ) as any as S.Schema, output: __S(512, __c64, 0) as any as S.Schema, errors: [NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type GetUserlandUsersControllerByExternalIdError = NotFound | WorkosOpError; /** Get a user by external ID Get the details of an existing user by an [external identifier](/authkit/metadata/external-identifiers). */ export const GetUserlandUsersControllerByExternalId: API.OperationMethod< GetUserlandUsersControllerByExternalIdRequest, UserlandUser, GetUserlandUsersControllerByExternalIdError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(520, __c65, 0) as any as S.Schema, output: __S(2472, __c309, 0) as any as S.Schema, errors: [NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type GetUserlandUsersControllerEmailVerificationError = NotFound | WorkosOpError; /** Get an email verification code Get the details of an existing email verification code that can be used to send an email to a user for verification. */ export const GetUserlandUsersControllerEmailVerification: API.OperationMethod< GetUserlandUsersControllerEmailVerificationRequest, EmailVerification, GetUserlandUsersControllerEmailVerificationError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(528, __c66, 0) as any as S.Schema, output: __S(472, __c59, 0) as any as S.Schema, errors: [NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type InviteItContactsControllerError = | Forbidden | NotFound | Conflict | UnprocessableEntity | WorkosOpError; /** Invite an IT contact Create an Admin Portal setup link and email it to the IT contact. An organization can have at most one active invitation. */ export const InviteItContactsController: API.OperationMethod< InviteItContactsControllerRequest, InviteItContactsControllerResponse, InviteItContactsControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(568, __c71, 0) as any as S.Schema, output: __S(1472, __c184, 0) as any as S.Schema, errors: [Forbidden, NotFound, Conflict, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type JumpWireWebDataVaultControllerIndexError = BadRequest | WorkosOpError; /** List objects List all encrypted objects with cursor-based pagination. */ export const JumpWireWebDataVaultControllerIndex: API.OperationMethod< JumpWireWebDataVaultControllerIndexRequest, ObjectListResponse, JumpWireWebDataVaultControllerIndexError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(576, __c72, 0) as any as S.Schema, output: __S(579, __c72, 3) as any as S.Schema, errors: [BadRequest, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type JumpWireWebDataVaultControllerShowByIdError = BadRequest | NotFound | WorkosOpError; /** Read an object by ID Fetch and decrypt an object by its unique identifier. */ export const JumpWireWebDataVaultControllerShowById: API.OperationMethod< JumpWireWebDataVaultControllerShowByIdRequest, Object, JumpWireWebDataVaultControllerShowByIdError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(592, __c74, 0) as any as S.Schema, output: __S(600, __c75, 0) as any as S.Schema, errors: [BadRequest, NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type JumpWireWebDataVaultControllerShowByNameError = BadRequest | NotFound | WorkosOpError; /** Read an object by name Fetch and decrypt an object by its unique name. */ export const JumpWireWebDataVaultControllerShowByName: API.OperationMethod< JumpWireWebDataVaultControllerShowByNameRequest, Object, JumpWireWebDataVaultControllerShowByNameError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(608, __c76, 0) as any as S.Schema, output: __S(600, __c75, 0) as any as S.Schema, errors: [BadRequest, NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type JumpWireWebDataVaultControllerVersionsError = BadRequest | NotFound | WorkosOpError; /** List object versions Retrieve all versions for a specific object. */ export const JumpWireWebDataVaultControllerVersions: API.OperationMethod< JumpWireWebDataVaultControllerVersionsRequest, VersionListResponse, JumpWireWebDataVaultControllerVersionsError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(616, __c77, 0) as any as S.Schema, output: __S(619, __c77, 3) as any as S.Schema, errors: [BadRequest, NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type JumpWireWebKeyControllerCreateDataKeyError = | BadRequest | UnprocessableEntity | WorkosOpError; /** Create a data key Generate an isolated encryption key for local encryption operations. */ export const JumpWireWebKeyControllerCreateDataKey: API.OperationMethod< JumpWireWebKeyControllerCreateDataKeyRequest, CreateDataKeyResponse, JumpWireWebKeyControllerCreateDataKeyError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(624, __c78, 0) as any as S.Schema, output: __S(632, __c79, 0) as any as S.Schema, errors: [BadRequest, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type JumpWireWebKeyControllerRekeyError = BadRequest | UnprocessableEntity | WorkosOpError; /** Re-encrypt a data key Decrypt an existing data key and re-encrypt it under a new key context. */ export const JumpWireWebKeyControllerRekey: API.OperationMethod< JumpWireWebKeyControllerRekeyRequest, CreateDataKeyResponse, JumpWireWebKeyControllerRekeyError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(640, __c80, 0) as any as S.Schema, output: __S(632, __c79, 0) as any as S.Schema, errors: [BadRequest, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type ListAgentBlueprintsControllerError = WorkosOpError; /** List agent blueprints Lists the agent blueprints in the current environment. */ export const ListAgentBlueprintsController: API.OperationMethod< ListAgentBlueprintsControllerRequest, ListAgentBlueprintsControllerResponse, ListAgentBlueprintsControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(648, __c81, 0) as any as S.Schema, output: __S(650, __c81, 2) as any as S.Schema, errors: [UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type ListAgentInstancesControllerError = WorkosOpError; /** List agent instances Lists the agent instances in the current environment. Instances are created implicitly when tokens are minted. */ export const ListAgentInstancesController: API.OperationMethod< ListAgentInstancesControllerRequest, ListAgentInstancesControllerResponse, ListAgentInstancesControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(656, __c82, 0) as any as S.Schema, output: __S(658, __c82, 2) as any as S.Schema, errors: [UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type ListAgentInstanceSessionsControllerError = UnprocessableEntity | WorkosOpError; /** List agent instance sessions Lists the agent instance sessions in the current environment. Sessions are created when tokens are minted. */ export const ListAgentInstanceSessionsController: API.OperationMethod< ListAgentInstanceSessionsControllerRequest, ListAgentInstanceSessionsControllerResponse, ListAgentInstanceSessionsControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(664, __c83, 0) as any as S.Schema, output: __S(666, __c83, 2) as any as S.Schema, errors: [UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type ListApplicationCredentialsControllerError = NotFound | WorkosOpError; /** List Client Secrets for a Connect Application List all client secrets associated with a Connect Application. */ export const ListApplicationCredentialsController: API.OperationMethod< ListApplicationCredentialsControllerRequest, ListApplicationCredentialsControllerResponse, ListApplicationCredentialsControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(688, __c86, 0) as any as S.Schema, output: __S(691, __c86, 3) as any as S.Schema, errors: [NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type ListApplicationsControllerError = UnprocessableEntity | WorkosOpError; /** List Connect Applications List all Connect Applications in the current environment with optional filtering. */ export const ListApplicationsController: API.OperationMethod< ListApplicationsControllerRequest, ConnectApplicationList, ListApplicationsControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(696, __c87, 0) as any as S.Schema, output: __S(698, __c87, 2) as any as S.Schema, errors: [UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type ListAuditLogValidatorsControllerError = NotFound | UnprocessableEntity | WorkosOpError; /** List Actions Get a list of all Audit Log actions in the current environment. */ export const ListAuditLogValidatorsController: API.OperationMethod< ListAuditLogValidatorsControllerRequest, ListAuditLogValidatorsControllerResponse, ListAuditLogValidatorsControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(704, __c88, 0) as any as S.Schema, output: __S(707, __c88, 3) as any as S.Schema, errors: [NotFound, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type ListAuthkitOauthResourcesControllerError = WorkosOpError; /** List MCP resource indicators Lists the MCP resource indicators configured for an environment. */ export const ListAuthkitOauthResourcesController: API.OperationMethod< ListAuthkitOauthResourcesControllerRequest, ListAuthkitOauthResourcesControllerResponse, ListAuthkitOauthResourcesControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(712, __c89, 0) as any as S.Schema, output: __S(714, __c89, 2) as any as S.Schema, errors: [UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type ListAuthorizationControllerEffectivePermissionsError = | Forbidden | NotFound | UnprocessableEntity | WorkosOpError; /** List effective permissions for an organization membership on a resource Returns all permissions the organization membership effectively has on a resource, including permissions inherited through roles assigned to ancestor resources. Results are not filtered by the resource type: a permission is returned whenever a check for it on this resource would be authorized, and each permission is labeled with the resource type it is declared on. */ export const ListAuthorizationControllerEffectivePermissions: API.OperationMethod< ListAuthorizationControllerEffectivePermissionsRequest, AuthorizationPermissionList, ListAuthorizationControllerEffectivePermissionsError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S( 720, __c90, 0, ) as any as S.Schema, output: __S(729, __c91, 1) as any as S.Schema, errors: [Forbidden, NotFound, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type ListAuthorizationControllerEffectivePermissionsByExternalIdError = | Forbidden | NotFound | UnprocessableEntity | WorkosOpError; /** List effective permissions for an organization membership on a resource by external ID Returns all permissions the organization membership effectively has on a resource identified by its external ID, including permissions inherited through roles assigned to ancestor resources. Results are not filtered by the resource type: a permission is returned whenever a check for it on this resource would be authorized, and each permission is labeled with the resource type it is declared on. */ export const ListAuthorizationControllerEffectivePermissionsByExternalId: API.OperationMethod< ListAuthorizationControllerEffectivePermissionsByExternalIdRequest, AuthorizationPermissionList, ListAuthorizationControllerEffectivePermissionsByExternalIdError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S( 736, __c92, 0, ) as any as S.Schema, output: __S(729, __c91, 1) as any as S.Schema, errors: [Forbidden, NotFound, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type ListAuthorizationControllerResourcesForMembershipError = | BadRequest | Forbidden | NotFound | UnprocessableEntity | WorkosOpError; /** List resources for organization membership Returns all child resources of a parent resource where the organization membership has a specific permission. This is useful for resource discovery--answering "What projects can this user access in this workspace?" You must provide either `parent_resource_id` or both `parent_resource_external_id` and `parent_resource_type_slug` to identify the parent resource. */ export const ListAuthorizationControllerResourcesForMembership: API.OperationMethod< ListAuthorizationControllerResourcesForMembershipRequest, AuthorizationResourceList, ListAuthorizationControllerResourcesForMembershipError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S( 744, __c93, 0, ) as any as S.Schema, output: __S(753, __c94, 1) as any as S.Schema, errors: [BadRequest, Forbidden, NotFound, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type ListAuthorizationGroupRoleAssignmentsControllerError = | Forbidden | NotFound | WorkosOpError; /** List role assignments for a group List all role assignments granted to a group. Each assignment represents a role granted to the group on a resource. */ export const ListAuthorizationGroupRoleAssignmentsController: API.OperationMethod< ListAuthorizationGroupRoleAssignmentsControllerRequest, GroupRoleAssignmentList, ListAuthorizationGroupRoleAssignmentsControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S( 760, __c95, 0, ) as any as S.Schema, output: __S(769, __c96, 1) as any as S.Schema, errors: [Forbidden, NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type ListAuthorizationOrganizationRolesControllerError = | Forbidden | NotFound | WorkosOpError; /** List custom roles Get a list of all roles that apply to an organization. This includes both environment roles and custom roles, returned in priority order. */ export const ListAuthorizationOrganizationRolesController: API.OperationMethod< ListAuthorizationOrganizationRolesControllerRequest, RoleList, ListAuthorizationOrganizationRolesControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(776, __c97, 0) as any as S.Schema, output: __S(785, __c98, 1) as any as S.Schema, errors: [Forbidden, NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type ListAuthorizationPermissionsControllerError = NotFound | WorkosOpError; /** List permissions Get a list of all permissions in your WorkOS environment. */ export const ListAuthorizationPermissionsController: API.OperationMethod< ListAuthorizationPermissionsControllerRequest, AuthorizationPermissionList, ListAuthorizationPermissionsControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(792, __c99, 0) as any as S.Schema, output: __S(729, __c91, 1) as any as S.Schema, errors: [NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type ListAuthorizationResourcesByExternalIdControllerOrganizationMembershipsForResourceByExternalIdError = | BadRequest | Forbidden | NotFound | UnprocessableEntity | WorkosOpError; /** List memberships for a resource by external ID Returns all organization memberships that have a specific permission on a resource, using the resource's external ID. This is useful for answering "Who can access this resource?" when you only have the external ID. */ export const ListAuthorizationResourcesByExternalIdControllerOrganizationMembershipsForResourceByExternalId: API.OperationMethod< ListAuthorizationResourcesByExternalIdControllerOrganizationMembershipsForResourceByExternalIdRequest, UserlandUserOrganizationMembershipBaseWithUserList, ListAuthorizationResourcesByExternalIdControllerOrganizationMembershipsForResourceByExternalIdError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S( 816, __c102, 0, ) as any as S.Schema, output: __S( 826, __c103, 2, ) as any as S.Schema, errors: [BadRequest, Forbidden, NotFound, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type ListAuthorizationResourcesControllerError = | BadRequest | Forbidden | UnprocessableEntity | WorkosOpError; /** List resources Get a paginated list of authorization resources. */ export const ListAuthorizationResourcesController: API.OperationMethod< ListAuthorizationResourcesControllerRequest, AuthorizationResourceList, ListAuthorizationResourcesControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(832, __c104, 0) as any as S.Schema, output: __S(753, __c94, 1) as any as S.Schema, errors: [BadRequest, Forbidden, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type ListAuthorizationResourcesControllerOrganizationMembershipsForResourceError = | BadRequest | Forbidden | NotFound | UnprocessableEntity | WorkosOpError; /** List organization memberships for resource Returns all organization memberships that have a specific permission on a resource instance. This is useful for answering "Who can access this resource?". */ export const ListAuthorizationResourcesControllerOrganizationMembershipsForResource: API.OperationMethod< ListAuthorizationResourcesControllerOrganizationMembershipsForResourceRequest, UserlandUserOrganizationMembershipBaseWithUserList, ListAuthorizationResourcesControllerOrganizationMembershipsForResourceError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S( 840, __c105, 0, ) as any as S.Schema, output: __S( 826, __c103, 2, ) as any as S.Schema, errors: [BadRequest, Forbidden, NotFound, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type ListAuthorizationRoleAssignmentsControllerRoleAssignmentsError = | Forbidden | NotFound | WorkosOpError; /** List role assignments List all role assignments for an organization membership. This returns all roles that have been assigned to the user on resources, including organization-level and sub-resource roles. */ export const ListAuthorizationRoleAssignmentsControllerRoleAssignments: API.OperationMethod< ListAuthorizationRoleAssignmentsControllerRoleAssignmentsRequest, UserRoleAssignmentList, ListAuthorizationRoleAssignmentsControllerRoleAssignmentsError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S( 848, __c106, 0, ) as any as S.Schema, output: __S(857, __c107, 1) as any as S.Schema, errors: [Forbidden, NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type ListAuthorizationRoleAssignmentsControllerRoleAssignmentsForResourceError = | Forbidden | NotFound | WorkosOpError; /** List role assignments for a resource List all role assignments granted on a specific resource instance. Each assignment includes the organization membership it was granted to. */ export const ListAuthorizationRoleAssignmentsControllerRoleAssignmentsForResource: API.OperationMethod< ListAuthorizationRoleAssignmentsControllerRoleAssignmentsForResourceRequest, UserRoleAssignmentList, ListAuthorizationRoleAssignmentsControllerRoleAssignmentsForResourceError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S( 864, __c108, 0, ) as any as S.Schema, output: __S(857, __c107, 1) as any as S.Schema, errors: [Forbidden, NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type ListAuthorizationRoleAssignmentsControllerRoleAssignmentsForResourceByExternalIdError = | Forbidden | NotFound | WorkosOpError; /** List role assignments for a resource by external ID List all role assignments granted on a resource, identified by its external ID. Each assignment includes the organization membership it was granted to. */ export const ListAuthorizationRoleAssignmentsControllerRoleAssignmentsForResourceByExternalId: API.OperationMethod< ListAuthorizationRoleAssignmentsControllerRoleAssignmentsForResourceByExternalIdRequest, UserRoleAssignmentList, ListAuthorizationRoleAssignmentsControllerRoleAssignmentsForResourceByExternalIdError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S( 872, __c109, 0, ) as any as S.Schema, output: __S(857, __c107, 1) as any as S.Schema, errors: [Forbidden, NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type ListAuthorizationRolesControllerError = Forbidden | WorkosOpError; /** List environment roles List all environment roles in priority order. */ export const ListAuthorizationRolesController: API.OperationMethod< ListAuthorizationRolesControllerRequest, RoleList, ListAuthorizationRolesControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(880, __c110, 0) as any as S.Schema, output: __S(785, __c98, 1) as any as S.Schema, errors: [Forbidden, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type ListAuthorizedApplicationsControllerError = | NotFound | UnprocessableEntity | WorkosOpError; /** List authorized applications Get a list of all Connect applications that the user has authorized. */ export const ListAuthorizedApplicationsController: API.OperationMethod< ListAuthorizedApplicationsControllerRequest, AuthorizedConnectApplicationList, ListAuthorizedApplicationsControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(888, __c111, 0) as any as S.Schema, output: __S(891, __c111, 3) as any as S.Schema, errors: [NotFound, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type ListConnectionsControllerError = Forbidden | UnprocessableEntity | WorkosOpError; /** List Connections Get a list of all of your existing connections matching the criteria specified. */ export const ListConnectionsController: API.OperationMethod< ListConnectionsControllerRequest, ConnectionList, ListConnectionsControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(896, __c112, 0) as any as S.Schema, output: __S(898, __c112, 2) as any as S.Schema, errors: [Forbidden, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type ListCorsOriginsControllerError = WorkosOpError; /** List CORS origins Lists the CORS origins for the current environment. */ export const ListCorsOriginsController: API.OperationMethod< ListCorsOriginsControllerRequest, ListCorsOriginsControllerResponse, ListCorsOriginsControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(904, __c113, 0) as any as S.Schema, output: __S(906, __c113, 2) as any as S.Schema, errors: [UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type ListDataIntegrationsManagementControllerDataIntegrationsError = | NotFound | UnprocessableEntity | WorkosOpError; /** List data integrations Lists the environment's data integrations configured with `custom` or `organization` credentials, including custom providers and API key integrations. Both user-owned and organization-owned roots are returned, each as its own row with an `ownership`; filter with `ownership` to return only one kind. */ export const ListDataIntegrationsManagementControllerDataIntegrations: API.OperationMethod< ListDataIntegrationsManagementControllerDataIntegrationsRequest, DataIntegrationList, ListDataIntegrationsManagementControllerDataIntegrationsError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S( 944, __c118, 0, ) as any as S.Schema, output: __S(946, __c118, 2) as any as S.Schema, errors: [NotFound, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type ListDirectoriesControllerError = Forbidden | UnprocessableEntity | WorkosOpError; /** List Directories Get a list of all of your existing directories matching the criteria specified. */ export const ListDirectoriesController: API.OperationMethod< ListDirectoriesControllerRequest, DirectoryList, ListDirectoriesControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(952, __c119, 0) as any as S.Schema, output: __S(954, __c119, 2) as any as S.Schema, errors: [Forbidden, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type ListDirectoryGroupsControllerError = | Forbidden | NotFound | UnprocessableEntity | WorkosOpError; /** List Directory Groups Get a list of all of existing directory groups matching the criteria specified. */ export const ListDirectoryGroupsController: API.OperationMethod< ListDirectoryGroupsControllerRequest, DirectoryGroupList, ListDirectoryGroupsControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(960, __c120, 0) as any as S.Schema, output: __S(961, __c120, 1) as any as S.Schema, errors: [Forbidden, NotFound, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type ListDirectoryUsersControllerError = | Forbidden | NotFound | UnprocessableEntity | WorkosOpError; /** List Directory Users Get a list of all of existing Directory Users matching the criteria specified. */ export const ListDirectoryUsersController: API.OperationMethod< ListDirectoryUsersControllerRequest, DirectoryUserList, ListDirectoryUsersControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(968, __c121, 0) as any as S.Schema, output: __S(970, __c121, 2) as any as S.Schema, errors: [Forbidden, NotFound, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type ListEventsControllerError = BadRequest | UnprocessableEntity | WorkosOpError; /** List events List events for the current environment. */ export const ListEventsController: API.OperationMethod< ListEventsControllerRequest, EventList, ListEventsControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(976, __c122, 0) as any as S.Schema, output: __S(980, __c122, 4) as any as S.Schema, errors: [BadRequest, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type ListFeatureFlagsControllerError = | BadRequest | NotFound | UnprocessableEntity | WorkosOpError; /** List feature flags Get a list of all of your existing feature flags matching the criteria specified. */ export const ListFeatureFlagsController: API.OperationMethod< ListFeatureFlagsControllerRequest, FlagList, ListFeatureFlagsControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(984, __c123, 0) as any as S.Schema, output: __S(993, __c124, 1) as any as S.Schema, errors: [BadRequest, NotFound, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type ListGroupMembershipsControllerMembersError = Forbidden | NotFound | WorkosOpError; /** List Group members Get a list of organization memberships in a group. */ export const ListGroupMembershipsControllerMembers: API.OperationMethod< ListGroupMembershipsControllerMembersRequest, UserlandUserOrganizationMembershipBaseList, ListGroupMembershipsControllerMembersError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(1000, __c125, 0) as any as S.Schema, output: __S(1003, __c125, 3) as any as S.Schema, errors: [Forbidden, NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type ListGroupsControllerError = Forbidden | NotFound | WorkosOpError; /** List groups Get a paginated list of groups within an organization. */ export const ListGroupsController: API.OperationMethod< ListGroupsControllerRequest, GroupList, ListGroupsControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(1008, __c126, 0) as any as S.Schema, output: __S(1017, __c127, 1) as any as S.Schema, errors: [Forbidden, NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type ListItContactsControllerError = Forbidden | NotFound | WorkosOpError; /** List IT contacts Get the IT contacts for an organization. */ export const ListItContactsController: API.OperationMethod< ListItContactsControllerRequest, ItContactList, ListItContactsControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(1024, __c128, 0) as any as S.Schema, output: __S(1026, __c128, 2) as any as S.Schema, errors: [Forbidden, NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type ListOrganizationApiKeysControllerError = NotFound | WorkosOpError; /** List API keys for an organization Get a list of all API keys for an organization. */ export const ListOrganizationApiKeysController: API.OperationMethod< ListOrganizationApiKeysControllerRequest, OrganizationApiKeyList, ListOrganizationApiKeysControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(1032, __c129, 0) as any as S.Schema, output: __S(1035, __c129, 3) as any as S.Schema, errors: [NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type ListOrganizationAuthorizedApplicationsControllerError = | NotFound | UnprocessableEntity | WorkosOpError; /** List authorized applications Get a list of all Connect applications that users in the organization have authorized. */ export const ListOrganizationAuthorizedApplicationsController: API.OperationMethod< ListOrganizationAuthorizedApplicationsControllerRequest, OrganizationAuthorizedConnectApplicationList, ListOrganizationAuthorizedApplicationsControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S( 1056, __c132, 0, ) as any as S.Schema, output: __S(1059, __c132, 3) as any as S.Schema, errors: [NotFound, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type ListOrganizationFeatureFlagsControllerError = NotFound | WorkosOpError; /** List enabled feature flags for an organization Get a list of all enabled feature flags for an organization. */ export const ListOrganizationFeatureFlagsController: API.OperationMethod< ListOrganizationFeatureFlagsControllerRequest, FlagList, ListOrganizationFeatureFlagsControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(1064, __c133, 0) as any as S.Schema, output: __S(993, __c124, 1) as any as S.Schema, errors: [NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type ListOrganizationMembershipGroupsControllerGroupsError = NotFound | WorkosOpError; /** List groups Get a list of groups that an organization membership belongs to. */ export const ListOrganizationMembershipGroupsControllerGroups: API.OperationMethod< ListOrganizationMembershipGroupsControllerGroupsRequest, GroupList, ListOrganizationMembershipGroupsControllerGroupsError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S( 1072, __c134, 0, ) as any as S.Schema, output: __S(1017, __c127, 1) as any as S.Schema, errors: [NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type ListOrganizationsControllerError = UnprocessableEntity | WorkosOpError; /** List Organizations Get a list of all of your existing organizations matching the criteria specified. */ export const ListOrganizationsController: API.OperationMethod< ListOrganizationsControllerRequest, OrganizationList, ListOrganizationsControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(1080, __c135, 0) as any as S.Schema, output: __S(1082, __c135, 2) as any as S.Schema, errors: [UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type ListProviderControllerForOrganizationError = NotFound | WorkosOpError; /** List providers for an organization Returns a list of all providers available to the specified organization, along with any configured custom OAuth scopes, enabled state, and organization-managed credentials where applicable. */ export const ListProviderControllerForOrganization: API.OperationMethod< ListProviderControllerForOrganizationRequest, DataIntegrationConfigurationListResponse, ListProviderControllerForOrganizationError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(1088, __c136, 0) as any as S.Schema, output: __S(1090, __c136, 2) as any as S.Schema, errors: [NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type ListRedirectUrisControllerError = WorkosOpError; /** List redirect URIs Lists the redirect URIs for an environment. */ export const ListRedirectUrisController: API.OperationMethod< ListRedirectUrisControllerRequest, ListRedirectUrisControllerResponse, ListRedirectUrisControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(1104, __c138, 0) as any as S.Schema, output: __S(1106, __c138, 2) as any as S.Schema, errors: [UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type ListSamlIdpSigningCertificatesControllerError = | BadRequest | Forbidden | NotFound | WorkosOpError; /** List IdP signing certificates Lists every Identity Provider signing certificate on the connection, including expired ones, oldest first. */ export const ListSamlIdpSigningCertificatesController: API.OperationMethod< ListSamlIdpSigningCertificatesControllerRequest, SamlIdpSigningCertificateList, ListSamlIdpSigningCertificatesControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(1112, __c139, 0) as any as S.Schema, output: __S(1121, __c140, 1) as any as S.Schema, errors: [BadRequest, Forbidden, NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type ListSamlSpEncryptionCertificatesControllerError = | BadRequest | Forbidden | NotFound | WorkosOpError; /** List SP encryption certificates Lists the public certificates the Identity Provider can use to encrypt SAML responses sent to WorkOS, including expired ones, oldest first. */ export const ListSamlSpEncryptionCertificatesController: API.OperationMethod< ListSamlSpEncryptionCertificatesControllerRequest, SamlSpEncryptionCertificateList, ListSamlSpEncryptionCertificatesControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(1128, __c141, 0) as any as S.Schema, output: __S(1121, __c140, 1) as any as S.Schema, errors: [BadRequest, Forbidden, NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type ListUserApiKeysControllerError = NotFound | WorkosOpError; /** List API keys for a user Get a list of API keys owned by a specific user. */ export const ListUserApiKeysController: API.OperationMethod< ListUserApiKeysControllerRequest, UserApiKeyList, ListUserApiKeysControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(1136, __c142, 0) as any as S.Schema, output: __S(1139, __c142, 3) as any as S.Schema, errors: [NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type ListUserlandUserFeatureFlagsControllerError = NotFound | WorkosOpError; /** List enabled feature flags for a user Get a list of all enabled feature flags for the provided user. This includes feature flags enabled specifically for the user as well as any organizations that the user is a member of. */ export const ListUserlandUserFeatureFlagsController: API.OperationMethod< ListUserlandUserFeatureFlagsControllerRequest, FlagList, ListUserlandUserFeatureFlagsControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(1144, __c143, 0) as any as S.Schema, output: __S(993, __c124, 1) as any as S.Schema, errors: [NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type ListUserlandUserInvitesControllerError = UnprocessableEntity | WorkosOpError; /** List invitations Get a list of all of invitations matching the criteria specified. */ export const ListUserlandUserInvitesController: API.OperationMethod< ListUserlandUserInvitesControllerRequest, UserlandUserInviteList, ListUserlandUserInvitesControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(1168, __c146, 0) as any as S.Schema, output: __S(1170, __c146, 2) as any as S.Schema, errors: [UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type ListUserlandUserOrganizationMembershipsControllerError = | BadRequest | NotFound | UnprocessableEntity | WorkosOpError; /** List organization memberships Get a list of all organization memberships matching the criteria specified. At least one of `user_id` or `organization_id` must be provided. By default only active memberships are returned. Use the `statuses` parameter to filter by other statuses. */ export const ListUserlandUserOrganizationMembershipsController: API.OperationMethod< ListUserlandUserOrganizationMembershipsControllerRequest, UserlandUserOrganizationMembershipList, ListUserlandUserOrganizationMembershipsControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S( 1176, __c147, 0, ) as any as S.Schema, output: __S(1178, __c147, 2) as any as S.Schema, errors: [BadRequest, NotFound, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type ListUserlandUserSessionsControllerError = | NotFound | UnprocessableEntity | WorkosOpError; /** List sessions Get a list of all active sessions for a specific user. */ export const ListUserlandUserSessionsController: API.OperationMethod< ListUserlandUserSessionsControllerRequest, ListUserlandUserSessionsControllerResponse, ListUserlandUserSessionsControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(1184, __c148, 0) as any as S.Schema, output: __S(1187, __c148, 3) as any as S.Schema, errors: [NotFound, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type ListWaitlistsControllerError = WorkosOpError; /** List waitlists Get a list of the waitlists in the environment. All waitlists are returned in a single response -- this endpoint is not paginated, so the `list_metadata` cursors are always `null`. */ export const ListWaitlistsController: API.OperationMethod< ListWaitlistsControllerRequest, ListWaitlistsControllerResponse, ListWaitlistsControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(1200, __c150, 0) as any as S.Schema, output: __S(1202, __c150, 2) as any as S.Schema, errors: [UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type ListWaitlistsControllerEntriesError = NotFound | UnprocessableEntity | WorkosOpError; /** List waitlist entries Get a list of entries on a waitlist matching the criteria specified. */ export const ListWaitlistsControllerEntries: API.OperationMethod< ListWaitlistsControllerEntriesRequest, ListWaitlistsControllerEntriesResponse, ListWaitlistsControllerEntriesError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(1216, __c152, 0) as any as S.Schema, output: __S(1218, __c152, 2) as any as S.Schema, errors: [NotFound, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type ListWebhookEndpointsControllerError = WorkosOpError; /** List Webhook Endpoints Get a list of all of your existing webhook endpoints. */ export const ListWebhookEndpointsController: API.OperationMethod< ListWebhookEndpointsControllerRequest, WebhookEndpointList, ListWebhookEndpointsControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(1224, __c153, 0) as any as S.Schema, output: __S(1226, __c153, 2) as any as S.Schema, errors: [UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type LogoutSsoControllerError = NotFound | WorkosOpError; /** Logout Redirect Logout allows to sign out a user from your application by triggering the identity provider sign out flow. This `GET` endpoint should be a redirection, since the identity provider user will be identified in the browser session. Before redirecting to this endpoint, you need to generate a short-lived logout token using the [Logout Authorize](/reference/sso/logout/authorize) endpoint. */ export const LogoutSsoController: API.OperationMethod< LogoutSsoControllerRequest, LogoutSsoControllerResponse, LogoutSsoControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(1232, __c154, 0) as any as S.Schema, output: __S(1472, __c184, 0) as any as S.Schema, errors: [NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type LogoutUserlandSessionsControllerError = UnprocessableEntity | WorkosOpError; /** Logout Logout a user from the current [session](/reference/authkit/session). */ export const LogoutUserlandSessionsController: API.OperationMethod< LogoutUserlandSessionsControllerRequest, LogoutUserlandSessionsControllerResponse, LogoutUserlandSessionsControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(1240, __c155, 0) as any as S.Schema, output: __S(1472, __c184, 0) as any as S.Schema, errors: [UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type OrganizationsControllerFindError = NotFound | WorkosOpError; /** Get an Organization Get the details of an existing organization. */ export const OrganizationsControllerFind: API.OperationMethod< OrganizationsControllerFindRequest, Organization, OrganizationsControllerFindError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(1248, __c156, 0) as any as S.Schema, output: __S(2305, __c288, 1) as any as S.Schema, errors: [NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type PatchConnectionsControllerError = | BadRequest | Forbidden | NotFound | Conflict | UnprocessableEntity | WorkosOpError; /** Update a Connection Updates an existing connection. Only the provided fields are changed; fields that accept `null` are reset to their default behavior. */ export const PatchConnectionsController: API.OperationMethod< PatchConnectionsControllerRequest, Connection, PatchConnectionsControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(1260, __c157, 4) as any as S.Schema, output: __S(1938, __c242, 2) as any as S.Schema, errors: [BadRequest, Forbidden, NotFound, Conflict, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type ProviderControllerConfigureError = | BadRequest | NotFound | UnprocessableEntity | WorkosOpError; /** Configure a provider for an organization Creates or updates an organization's provider configuration. Use this endpoint to enable or disable a provider, set custom OAuth scopes, or supply organization-managed OAuth credentials. */ export const ProviderControllerConfigure: API.OperationMethod< ProviderControllerConfigureRequest, DataIntegrationConfigurationResponse, ProviderControllerConfigureError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(1280, __c160, 0) as any as S.Schema, output: __S(1097, __c137, 1) as any as S.Schema, errors: [BadRequest, NotFound, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type RadarStandaloneControllerAssessError = BadRequest | WorkosOpError; /** Create an attempt Assess a request for risk using the Radar engine and receive a verdict. */ export const RadarStandaloneControllerAssess: API.OperationMethod< RadarStandaloneControllerAssessRequest, RadarStandaloneResponse, RadarStandaloneControllerAssessError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(1288, __c161, 0) as any as S.Schema, output: __S(1289, __c161, 1) as any as S.Schema, errors: [BadRequest, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type RadarStandaloneControllerDeleteRadarListEntryError = | BadRequest | NotFound | WorkosOpError; /** Remove an entry from a Radar list Remove an entry from a Radar list. */ export const RadarStandaloneControllerDeleteRadarListEntry: API.OperationMethod< RadarStandaloneControllerDeleteRadarListEntryRequest, RadarStandaloneControllerDeleteRadarListEntryResponse, RadarStandaloneControllerDeleteRadarListEntryError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S( 1296, __c162, 0, ) as any as S.Schema, output: __S( 1472, __c184, 0, ) as any as S.Schema, errors: [BadRequest, NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type RadarStandaloneControllerUpdateRadarListError = BadRequest | WorkosOpError; /** Add an entry to a Radar list Add an entry to a Radar list. */ export const RadarStandaloneControllerUpdateRadarList: API.OperationMethod< RadarStandaloneControllerUpdateRadarListRequest, RadarListEntryAlreadyPresentResponse, RadarStandaloneControllerUpdateRadarListError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(1304, __c163, 0) as any as S.Schema, output: __S(1305, __c163, 1) as any as S.Schema, errors: [BadRequest, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type RemoveAuthorizationGroupRoleAssignmentsControllerGroupRoleAssignmentError = | Forbidden | NotFound | WorkosOpError; /** Remove a group role assignment Remove a specific role assignment from a group by its ID. */ export const RemoveAuthorizationGroupRoleAssignmentsControllerGroupRoleAssignment: API.OperationMethod< RemoveAuthorizationGroupRoleAssignmentsControllerGroupRoleAssignmentRequest, RemoveAuthorizationGroupRoleAssignmentsControllerGroupRoleAssignmentResponse, RemoveAuthorizationGroupRoleAssignmentsControllerGroupRoleAssignmentError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S( 1312, __c164, 0, ) as any as S.Schema, output: __S( 1472, __c184, 0, ) as any as S.Schema, errors: [Forbidden, NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type RemoveAuthorizationGroupRoleAssignmentsControllerGroupRoleAssignmentsError = | Forbidden | NotFound | UnprocessableEntity | WorkosOpError; /** Remove group role assignments by criteria Remove role assignments from a group that match the provided criteria. Returns 404 when no matching active assignment is found. */ export const RemoveAuthorizationGroupRoleAssignmentsControllerGroupRoleAssignments: API.OperationMethod< RemoveAuthorizationGroupRoleAssignmentsControllerGroupRoleAssignmentsRequest, RemoveAuthorizationGroupRoleAssignmentsControllerGroupRoleAssignmentsResponse, RemoveAuthorizationGroupRoleAssignmentsControllerGroupRoleAssignmentsError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S( 1320, __c165, 0, ) as any as S.Schema, output: __S( 1472, __c184, 0, ) as any as S.Schema, errors: [Forbidden, NotFound, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type RemoveAuthorizationOrganizationRolePermissionsControllerPermissionError = | Forbidden | NotFound | WorkosOpError; /** Remove a permission from a custom role Remove a single permission from a custom role by its slug. */ export const RemoveAuthorizationOrganizationRolePermissionsControllerPermission: API.OperationMethod< RemoveAuthorizationOrganizationRolePermissionsControllerPermissionRequest, Role, RemoveAuthorizationOrganizationRolePermissionsControllerPermissionError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S( 1328, __c166, 0, ) as any as S.Schema, output: __S(248, __c31, 0) as any as S.Schema, errors: [Forbidden, NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type RemoveAuthorizationRoleAssignmentsControllerRoleByCriteriaError = | Forbidden | NotFound | UnprocessableEntity | WorkosOpError; /** Remove a role assignment Remove a role assignment by role slug and resource. */ export const RemoveAuthorizationRoleAssignmentsControllerRoleByCriteria: API.OperationMethod< RemoveAuthorizationRoleAssignmentsControllerRoleByCriteriaRequest, RemoveAuthorizationRoleAssignmentsControllerRoleByCriteriaResponse, RemoveAuthorizationRoleAssignmentsControllerRoleByCriteriaError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S( 1336, __c167, 0, ) as any as S.Schema, output: __S( 1472, __c184, 0, ) as any as S.Schema, errors: [Forbidden, NotFound, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type RemoveAuthorizationRoleAssignmentsControllerRoleByIdError = | Forbidden | NotFound | WorkosOpError; /** Remove a role assignment by ID Remove a role assignment using its ID. */ export const RemoveAuthorizationRoleAssignmentsControllerRoleById: API.OperationMethod< RemoveAuthorizationRoleAssignmentsControllerRoleByIdRequest, RemoveAuthorizationRoleAssignmentsControllerRoleByIdResponse, RemoveAuthorizationRoleAssignmentsControllerRoleByIdError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S( 1344, __c168, 0, ) as any as S.Schema, output: __S( 1472, __c184, 0, ) as any as S.Schema, errors: [Forbidden, NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type RemoveGroupMembershipsControllerMemberError = Forbidden | NotFound | WorkosOpError; /** Remove a member from a Group Remove an organization membership from a group. */ export const RemoveGroupMembershipsControllerMember: API.OperationMethod< RemoveGroupMembershipsControllerMemberRequest, RemoveGroupMembershipsControllerMemberResponse, RemoveGroupMembershipsControllerMemberError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(1352, __c169, 0) as any as S.Schema, output: __S(1472, __c184, 0) as any as S.Schema, errors: [Forbidden, NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type ReplaceAuthorizationGroupRoleAssignmentsControllerGroupRoleAssignmentsError = | Forbidden | NotFound | UnprocessableEntity | WorkosOpError; /** Replace all role assignments for a group Replace all role assignments for a group with the provided list. Existing assignments not in the list will be removed. */ export const ReplaceAuthorizationGroupRoleAssignmentsControllerGroupRoleAssignments: API.OperationMethod< ReplaceAuthorizationGroupRoleAssignmentsControllerGroupRoleAssignmentsRequest, GroupRoleAssignmentList, ReplaceAuthorizationGroupRoleAssignmentsControllerGroupRoleAssignmentsError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S( 1378, __c172, 2, ) as any as S.Schema, output: __S(769, __c96, 1) as any as S.Schema, errors: [Forbidden, NotFound, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type ResendUserlandUserInvitesControllerError = | BadRequest | NotFound | UnprocessableEntity | WorkosOpError; /** Resend an invitation Resends an invitation email to the recipient. The invitation must be in a pending state. */ export const ResendUserlandUserInvitesController: API.OperationMethod< ResendUserlandUserInvitesControllerRequest, UserlandUserInvite, ResendUserlandUserInvitesControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(1384, __c173, 0) as any as S.Schema, output: __S(2440, __c305, 0) as any as S.Schema, errors: [BadRequest, NotFound, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type ResetUserlandUsersControllerPassword0Error = | BadRequest | Forbidden | NotFound | UnprocessableEntity | WorkosOpError; /** Reset the password Sets a new password using the `token` query parameter from the link that the user received. Successfully resetting the password will verify a user's email, if it hasn't been verified yet. */ export const ResetUserlandUsersControllerPassword0: API.OperationMethod< ResetUserlandUsersControllerPassword0Request, ResetPasswordResponse, ResetUserlandUsersControllerPassword0Error, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(1392, __c174, 0) as any as S.Schema, output: __S(1400, __c175, 0) as any as S.Schema, errors: [BadRequest, Forbidden, NotFound, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type RevokeAgentInstanceSessionsControllerError = NotFound | WorkosOpError; /** Revoke an agent instance session Revokes an agent instance session, invalidating its refresh token and every access token minted under it. Revocation is idempotent: revoking an already-revoked session keeps the original `revoked_at`, and revoking an already-expired session returns the session with `status: expired` and a null `revoked_at`. */ export const RevokeAgentInstanceSessionsController: API.OperationMethod< RevokeAgentInstanceSessionsControllerRequest, AgentInstanceSession, RevokeAgentInstanceSessionsControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(1408, __c176, 0) as any as S.Schema, output: __S(192, __c24, 0) as any as S.Schema, errors: [NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type RevokeItContactsControllerError = Forbidden | NotFound | WorkosOpError; /** Revoke an IT contact's invitation Revoke the organization's active Admin Portal invitation. */ export const RevokeItContactsController: API.OperationMethod< RevokeItContactsControllerRequest, RevokeItContactsControllerResponse, RevokeItContactsControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(1416, __c177, 0) as any as S.Schema, output: __S(1472, __c184, 0) as any as S.Schema, errors: [Forbidden, NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type RevokeUserlandSessionsControllerSessionError = BadRequest | WorkosOpError; /** Revoke Session Revoke a [user session](/reference/authkit/session). */ export const RevokeUserlandSessionsControllerSession: API.OperationMethod< RevokeUserlandSessionsControllerSessionRequest, RevokeUserlandSessionsControllerSessionResponse, RevokeUserlandSessionsControllerSessionError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(1424, __c178, 0) as any as S.Schema, output: __S(1472, __c184, 0) as any as S.Schema, errors: [BadRequest, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type RevokeUserlandUserInvitesControllerError = BadRequest | WorkosOpError; /** Revoke an invitation Revokes an existing invitation. */ export const RevokeUserlandUserInvitesController: API.OperationMethod< RevokeUserlandUserInvitesControllerRequest, RevokeUserlandUserInvitesControllerResponse, RevokeUserlandUserInvitesControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(1432, __c179, 0) as any as S.Schema, output: __S(2240, __c280, 0) as any as S.Schema, errors: [BadRequest, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type SendPublicRadarChallengesControllerRadarSmsChallengeError = WorkosOpError; /** Send a Radar SMS challenge Sends a one-time verification code over SMS to a user as part of a Radar challenge. Use the returned `verification_id` to authenticate the user with the `urn:workos:oauth:grant-type:radar-sms-challenge:code` grant type. */ export const SendPublicRadarChallengesControllerRadarSmsChallenge: API.OperationMethod< SendPublicRadarChallengesControllerRadarSmsChallengeRequest, SendRadarSmsChallengeResponse, SendPublicRadarChallengesControllerRadarSmsChallengeError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S( 1440, __c180, 0, ) as any as S.Schema, output: __S(1441, __c180, 1) as any as S.Schema, errors: [UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type SendUserlandUsersControllerEmailChangeError = | NotFound | Conflict | UnprocessableEntity | WorkosOpError; /** Send email change code Sends an email that contains a one-time code used to change a user's email address. */ export const SendUserlandUsersControllerEmailChange: API.OperationMethod< SendUserlandUsersControllerEmailChangeRequest, EmailChange, SendUserlandUsersControllerEmailChangeError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(1448, __c181, 0) as any as S.Schema, output: __S(1449, __c181, 1) as any as S.Schema, errors: [NotFound, Conflict, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type SendUserlandUsersControllerVerificationEmail0Error = | BadRequest | NotFound | WorkosOpError; /** Send verification email Sends an email that contains a one-time code used to verify a user's email address. */ export const SendUserlandUsersControllerVerificationEmail0: API.OperationMethod< SendUserlandUsersControllerVerificationEmail0Request, SendVerificationEmailResponse, SendUserlandUsersControllerVerificationEmail0Error, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S( 1456, __c182, 0, ) as any as S.Schema, output: __S(1400, __c175, 0) as any as S.Schema, errors: [BadRequest, NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type SetAuthorizationOrganizationRolePermissionsControllerPermissionsError = | Forbidden | NotFound | UnprocessableEntity | WorkosOpError; /** Set permissions for a custom role Replace all permissions on a custom role with the provided list. */ export const SetAuthorizationOrganizationRolePermissionsControllerPermissions: API.OperationMethod< SetAuthorizationOrganizationRolePermissionsControllerPermissionsRequest, SetAuthorizationOrganizationRolePermissionsControllerPermissionsResponse, SetAuthorizationOrganizationRolePermissionsControllerPermissionsError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S( 1480, __c185, 0, ) as any as S.Schema, output: __S( 2408, __c301, 0, ) as any as S.Schema, errors: [Forbidden, NotFound, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type SetAuthorizationRolePermissionsControllerPermissionsError = | BadRequest | Forbidden | NotFound | UnprocessableEntity | WorkosOpError; /** Set permissions for an environment role Replace all permissions on an environment role with the provided list. */ export const SetAuthorizationRolePermissionsControllerPermissions: API.OperationMethod< SetAuthorizationRolePermissionsControllerPermissionsRequest, SetAuthorizationRolePermissionsControllerPermissionsResponse, SetAuthorizationRolePermissionsControllerPermissionsError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S( 1488, __c186, 0, ) as any as S.Schema, output: __S( 2408, __c301, 0, ) as any as S.Schema, errors: [BadRequest, Forbidden, NotFound, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type SsoControllerJsonWebKeySetError = NotFound | WorkosOpError; /** Get JWKS Returns the JSON Web Key Set (JWKS) containing the public keys used for verifying access tokens. */ export const SsoControllerJsonWebKeySet: API.OperationMethod< SsoControllerJsonWebKeySetRequest, JwksResponse, SsoControllerJsonWebKeySetError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(1496, __c187, 0) as any as S.Schema, output: __S(1499, __c187, 3) as any as S.Schema, errors: [NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type SsoControllerLogoutAuthorizeError = BadRequest | NotFound | WorkosOpError; /** Logout Authorize You should call this endpoint from your server to generate a logout token which is required for the [Logout Redirect](/reference/sso/logout) endpoint. */ export const SsoControllerLogoutAuthorize: API.OperationMethod< SsoControllerLogoutAuthorizeRequest, SsoLogoutAuthorizeResponse, SsoControllerLogoutAuthorizeError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(1504, __c188, 0) as any as S.Schema, output: __S(1505, __c188, 1) as any as S.Schema, errors: [BadRequest, NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type SsoControllerTokenError = BadRequest | NotFound | UnprocessableEntity | WorkosOpError; /** Get a Profile and Token Get an access token along with the user [Profile](/reference/sso/profile) using the code passed to your [Redirect URI](/reference/sso/get-authorization-url/redirect-uri). */ export const SsoControllerToken: API.OperationMethod< SsoControllerTokenRequest, SsoTokenResponse, SsoControllerTokenError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(1512, __c189, 0) as any as S.Schema, output: __S(1513, __c189, 1) as any as S.Schema, errors: [BadRequest, NotFound, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type SyncDirectoriesControllerDirectoryError = | Forbidden | NotFound | Conflict | UnprocessableEntity | WorkosOpError; /** Sync a Directory Request an asynchronous sync from the directory provider. Currently supports Google Workspace directories in linked or validating state. Manual requests share a five-minute per-directory cooldown across the API, Dashboard, Admin Portal, and MCP. Acceptance means the request was queued, not that the sync has started or completed. A running sync prevents another request from being queued. */ export const SyncDirectoriesControllerDirectory: API.OperationMethod< SyncDirectoriesControllerDirectoryRequest, SyncDirectoriesControllerDirectoryResponse, SyncDirectoriesControllerDirectoryError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(1528, __c191, 0) as any as S.Schema, output: __S(1472, __c184, 0) as any as S.Schema, errors: [Forbidden, NotFound, Conflict, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type UpdateAgentBlueprintsControllerError = | BadRequest | NotFound | Conflict | UnprocessableEntity | WorkosOpError; /** Update an agent blueprint Updates an agent blueprint. Omitted fields are left unchanged; provided lists replace the existing configuration. */ export const UpdateAgentBlueprintsController: API.OperationMethod< UpdateAgentBlueprintsControllerRequest, AgentBlueprint, UpdateAgentBlueprintsControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(1537, __c192, 1) as any as S.Schema, output: __S(1955, __c244, 3) as any as S.Schema, errors: [BadRequest, NotFound, Conflict, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type UpdateApplicationsControllerError = NotFound | UnprocessableEntity | WorkosOpError; /** Update a Connect Application Update an existing Connect Application. For OAuth applications, you can update redirect URIs. For all applications, you can update the name, description, and scopes. */ export const UpdateApplicationsController: API.OperationMethod< UpdateApplicationsControllerRequest, UpdateApplicationsControllerResponse, UpdateApplicationsControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(1546, __c193, 2) as any as S.Schema, output: __S(290, __c36, 2) as any as S.Schema, errors: [NotFound, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type UpdateAuditLogsRetentionControllerAuditLogsRetentionError = | NotFound | UnprocessableEntity | WorkosOpError; /** Set Retention Set the event retention period for the given Organization. */ export const UpdateAuditLogsRetentionControllerAuditLogsRetention: API.OperationMethod< UpdateAuditLogsRetentionControllerAuditLogsRetentionRequest, AuditLogsRetentionJson, UpdateAuditLogsRetentionControllerAuditLogsRetentionError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S( 1552, __c194, 0, ) as any as S.Schema, output: __S(808, __c101, 0) as any as S.Schema, errors: [NotFound, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type UpdateAuthorizationOrganizationRolesControllerError = | BadRequest | Forbidden | NotFound | UnprocessableEntity | WorkosOpError; /** Update a custom role Update an existing custom role. Only the fields provided in the request body will be updated. */ export const UpdateAuthorizationOrganizationRolesController: API.OperationMethod< UpdateAuthorizationOrganizationRolesControllerRequest, UpdateAuthorizationOrganizationRolesControllerResponse, UpdateAuthorizationOrganizationRolesControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S( 1560, __c195, 0, ) as any as S.Schema, output: __S( 2408, __c301, 0, ) as any as S.Schema, errors: [BadRequest, Forbidden, NotFound, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type UpdateAuthorizationPermissionsControllerError = | Forbidden | NotFound | UnprocessableEntity | WorkosOpError; /** Update a permission Update an existing permission. Only the fields provided in the request body will be updated. */ export const UpdateAuthorizationPermissionsController: API.OperationMethod< UpdateAuthorizationPermissionsControllerRequest, AuthorizationPermission, UpdateAuthorizationPermissionsControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(1576, __c197, 0) as any as S.Schema, output: __S(1160, __c145, 0) as any as S.Schema, errors: [Forbidden, NotFound, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type UpdateAuthorizationResourcesByExternalIdControllerByExternalIdError = | BadRequest | Forbidden | NotFound | Conflict | UnprocessableEntity | WorkosOpError; /** Update a resource by external ID Update an existing authorization resource using its external ID. */ export const UpdateAuthorizationResourcesByExternalIdControllerByExternalId: API.OperationMethod< UpdateAuthorizationResourcesByExternalIdControllerByExternalIdRequest, UpdateAuthorizationResourcesByExternalIdControllerByExternalIdResponse, UpdateAuthorizationResourcesByExternalIdControllerByExternalIdError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S( 1584, __c198, 0, ) as any as S.Schema, output: __S( 2088, __c261, 0, ) as any as S.Schema, errors: [BadRequest, Forbidden, NotFound, Conflict, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type UpdateAuthorizationResourcesControllerError = | BadRequest | Forbidden | NotFound | Conflict | UnprocessableEntity | WorkosOpError; /** Update a resource Update an existing authorization resource. */ export const UpdateAuthorizationResourcesController: API.OperationMethod< UpdateAuthorizationResourcesControllerRequest, UpdateAuthorizationResourcesControllerResponse, UpdateAuthorizationResourcesControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(1592, __c199, 0) as any as S.Schema, output: __S(2088, __c261, 0) as any as S.Schema, errors: [BadRequest, Forbidden, NotFound, Conflict, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type UpdateAuthorizationRolesControllerError = | BadRequest | Forbidden | NotFound | UnprocessableEntity | WorkosOpError; /** Update an environment role Update an existing environment role. */ export const UpdateAuthorizationRolesController: API.OperationMethod< UpdateAuthorizationRolesControllerRequest, UpdateAuthorizationRolesControllerResponse, UpdateAuthorizationRolesControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(1600, __c200, 0) as any as S.Schema, output: __S(2408, __c301, 0) as any as S.Schema, errors: [BadRequest, Forbidden, NotFound, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type UpdateDataIntegrationsManagementControllerDataIntegrationError = | BadRequest | Forbidden | NotFound | Conflict | UnprocessableEntity | WorkosOpError; /** Update a data integration Updates the description, enabled state, or custom credentials of the user-owned data integration. For custom providers, `custom_provider` updates the OAuth definition. */ export const UpdateDataIntegrationsManagementControllerDataIntegration: API.OperationMethod< UpdateDataIntegrationsManagementControllerDataIntegrationRequest, DataIntegration, UpdateDataIntegrationsManagementControllerDataIntegrationError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S( 1608, __c201, 0, ) as any as S.Schema, output: __S(2171, __c271, 3) as any as S.Schema, errors: [BadRequest, Forbidden, NotFound, Conflict, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type UpdateDataIntegrationsManagementControllerOrganizationDataIntegrationError = | BadRequest | Forbidden | NotFound | Conflict | UnprocessableEntity | WorkosOpError; /** Update an organization-owned data integration Updates the description, enabled state, or custom credentials of the organization-owned data integration for a provider. For custom providers, `custom_provider` updates the OAuth definition, which is shared with the user-owned root. The `/organization` suffix selects the environment-level organization-owned root for the provider; it does not name a particular organization. */ export const UpdateDataIntegrationsManagementControllerOrganizationDataIntegration: API.OperationMethod< UpdateDataIntegrationsManagementControllerOrganizationDataIntegrationRequest, DataIntegration, UpdateDataIntegrationsManagementControllerOrganizationDataIntegrationError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S( 1624, __c203, 0, ) as any as S.Schema, output: __S(2171, __c271, 3) as any as S.Schema, errors: [BadRequest, Forbidden, NotFound, Conflict, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type UpdateDataIntegrationsOrganizationControllerOrganizationDataInstallationError = | BadRequest | Forbidden | NotFound | Conflict | UnprocessableEntity | WorkosOpError; /** Update an organization connected account Updates an organization's [connected account](/reference/pipes/connected-account) tokens, scopes, or state for a specific provider. */ export const UpdateDataIntegrationsOrganizationControllerOrganizationDataInstallation: API.OperationMethod< UpdateDataIntegrationsOrganizationControllerOrganizationDataInstallationRequest, ConnectedAccountWriteResponse, UpdateDataIntegrationsOrganizationControllerOrganizationDataInstallationError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S( 1632, __c204, 0, ) as any as S.Schema, output: __S(2146, __c268, 2) as any as S.Schema, errors: [BadRequest, Forbidden, NotFound, Conflict, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type UpdateDataIntegrationsUserManagementControllerUserDataInstallationError = | BadRequest | NotFound | Conflict | UnprocessableEntity | WorkosOpError; /** Update a connected account Updates a user's [connected account](/reference/pipes/connected-account) tokens, scopes, or state for a specific provider. */ export const UpdateDataIntegrationsUserManagementControllerUserDataInstallation: API.OperationMethod< UpdateDataIntegrationsUserManagementControllerUserDataInstallationRequest, ConnectedAccountWriteResponse, UpdateDataIntegrationsUserManagementControllerUserDataInstallationError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S( 1640, __c205, 0, ) as any as S.Schema, output: __S(2146, __c268, 2) as any as S.Schema, errors: [BadRequest, NotFound, Conflict, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type UpdateGroupsControllerError = | BadRequest | Forbidden | NotFound | UnprocessableEntity | WorkosOpError; /** Update a group Update an existing group. Only the fields provided in the request body will be updated. */ export const UpdateGroupsController: API.OperationMethod< UpdateGroupsControllerRequest, Group, UpdateGroupsControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(1648, __c206, 0) as any as S.Schema, output: __S(2640, __c330, 0) as any as S.Schema, errors: [BadRequest, Forbidden, NotFound, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type UpdateJumpWireWebDataVaultControllerError = BadRequest | Conflict | WorkosOpError; /** Update an object Update the value of an existing encrypted object. */ export const UpdateJumpWireWebDataVaultController: API.OperationMethod< UpdateJumpWireWebDataVaultControllerRequest, ObjectWithoutValue, UpdateJumpWireWebDataVaultControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(1656, __c207, 0) as any as S.Schema, output: __S(16, __c2, 0) as any as S.Schema, errors: [BadRequest, Conflict, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type UpdateJwtTemplatesControllerJwtTemplateError = UnprocessableEntity | WorkosOpError; /** Update JWT template Update the JWT template for the current environment. */ export const UpdateJwtTemplatesControllerJwtTemplate: API.OperationMethod< UpdateJwtTemplatesControllerJwtTemplateRequest, JwtTemplate, UpdateJwtTemplatesControllerJwtTemplateError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(1672, __c209, 0) as any as S.Schema, output: __S(360, __c45, 0) as any as S.Schema, errors: [UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type UpdateOrganizationsControllerOrganizationError = | BadRequest | Forbidden | NotFound | Conflict | UnprocessableEntity | WorkosOpError; /** Update an Organization Updates an organization in the current environment. */ export const UpdateOrganizationsControllerOrganization: API.OperationMethod< UpdateOrganizationsControllerOrganizationRequest, Organization, UpdateOrganizationsControllerOrganizationError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(1680, __c210, 0) as any as S.Schema, output: __S(2305, __c288, 1) as any as S.Schema, errors: [BadRequest, Forbidden, NotFound, Conflict, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type UpdateRadarStandaloneControllerRadarAttemptError = | BadRequest | NotFound | WorkosOpError; /** Update a Radar attempt You may optionally inform Radar that an authentication attempt or challenge was successful using this endpoint. Some Radar controls depend on tracking recent successful attempts, such as impossible travel. */ export const UpdateRadarStandaloneControllerRadarAttempt: API.OperationMethod< UpdateRadarStandaloneControllerRadarAttemptRequest, UpdateRadarStandaloneControllerRadarAttemptResponse, UpdateRadarStandaloneControllerRadarAttemptError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S( 1688, __c211, 0, ) as any as S.Schema, output: __S( 1472, __c184, 0, ) as any as S.Schema, errors: [BadRequest, NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type UpdateUserlandUserOrganizationMembershipsControllerError = | NotFound | UnprocessableEntity | WorkosOpError; /** Update an organization membership Update the details of an existing organization membership. */ export const UpdateUserlandUserOrganizationMembershipsController: API.OperationMethod< UpdateUserlandUserOrganizationMembershipsControllerRequest, UserlandUserOrganizationMembership, UpdateUserlandUserOrganizationMembershipsControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S( 1696, __c212, 0, ) as any as S.Schema, output: __S(512, __c64, 0) as any as S.Schema, errors: [NotFound, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type UpdateWebhookEndpointsControllerError = | NotFound | Conflict | UnprocessableEntity | WorkosOpError; /** Update a Webhook Endpoint Update the properties of an existing webhook endpoint. */ export const UpdateWebhookEndpointsController: API.OperationMethod< UpdateWebhookEndpointsControllerRequest, WebhookEndpointJson, UpdateWebhookEndpointsControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(1704, __c213, 0) as any as S.Schema, output: __S(2496, __c312, 0) as any as S.Schema, errors: [NotFound, Conflict, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type UpsertDataIntegrationsControllerApiKeyError = | BadRequest | Forbidden | NotFound | Conflict | UnprocessableEntity | WorkosOpError; /** Upsert an API key for a connected account Creates or updates an API-key-based installation for the specified integration, owned by the user or, when `connection_owner` is `organization`, shared by the organization. If an installation already exists, the stored API key is rotated to the new value. To create another connection, use POST. */ export const UpsertDataIntegrationsControllerApiKey: API.OperationMethod< UpsertDataIntegrationsControllerApiKeyRequest, ConnectedAccountWriteResponse, UpsertDataIntegrationsControllerApiKeyError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(1712, __c214, 0) as any as S.Schema, output: __S(2146, __c268, 2) as any as S.Schema, errors: [BadRequest, Forbidden, NotFound, Conflict, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type UpsertDataIntegrationsControllerClientCredentialsError = | BadRequest | Forbidden | NotFound | Conflict | UnprocessableEntity | WorkosOpError; /** Upsert client credentials for a connected account Creates or updates a client-credentials-based installation for the specified integration, owned by the user or, when `connection_owner` is `organization`, shared by the organization. If an installation already exists, the stored client credentials are rotated to the new values. To create another connection, use POST. */ export const UpsertDataIntegrationsControllerClientCredentials: API.OperationMethod< UpsertDataIntegrationsControllerClientCredentialsRequest, ConnectedAccountWriteResponse, UpsertDataIntegrationsControllerClientCredentialsError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S( 1720, __c215, 0, ) as any as S.Schema, output: __S(2146, __c268, 2) as any as S.Schema, errors: [BadRequest, Forbidden, NotFound, Conflict, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type UserlandMagicAuthControllerSendMagicAuthCodeAndReturnError = | BadRequest | UnprocessableEntity | WorkosOpError; /** Create a Magic Auth code Creates a one-time authentication code that can be sent to the user's email address. The code expires in 10 minutes. To verify the code, [authenticate the user with Magic Auth](/reference/authkit/authentication/magic-auth). */ export const UserlandMagicAuthControllerSendMagicAuthCodeAndReturn: API.OperationMethod< UserlandMagicAuthControllerSendMagicAuthCodeAndReturnRequest, UserlandMagicAuthControllerSendMagicAuthCodeAndReturnResponse, UserlandMagicAuthControllerSendMagicAuthCodeAndReturnError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S( 1728, __c216, 0, ) as any as S.Schema, output: __S( 1729, __c216, 1, ) as any as S.Schema, errors: [BadRequest, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type UserlandSessionsControllerAuthenticate0Error = | BadRequest | Forbidden | NotFound | UnprocessableEntity | WorkosOpError; /** Authenticate Authenticate a user with a specified [authentication method](/reference/authkit/authentication). */ export const UserlandSessionsControllerAuthenticate0: API.OperationMethod< UserlandSessionsControllerAuthenticate0Request, UserlandAuthenticateResponse, UserlandSessionsControllerAuthenticate0Error, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(1736, __c217, 0) as any as S.Schema, output: __S(1737, __c217, 1) as any as S.Schema, errors: [BadRequest, Forbidden, NotFound, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type UserlandSsoControllerDeviceAuthorizationError = BadRequest | Forbidden | WorkosOpError; /** Get device authorization URL Initiates the CLI Auth flow by requesting a device code and verification URLs. This endpoint implements the OAuth 2.0 Device Authorization Flow ([RFC 8628](https://datatracker.ietf.org/doc/html/rfc8628)) and is designed for command-line applications or other devices with limited input capabilities. */ export const UserlandSsoControllerDeviceAuthorization: API.OperationMethod< UserlandSsoControllerDeviceAuthorizationRequest, DeviceAuthorizationResponse, UserlandSsoControllerDeviceAuthorizationError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(1744, __c218, 0) as any as S.Schema, output: __S(1745, __c218, 1) as any as S.Schema, errors: [BadRequest, Forbidden, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type UserlandUserAuthenticationFactorsControllerCreate0Error = | UnprocessableEntity | WorkosOpError; /** Enroll an authentication factor Enrolls a user in a new [authentication factor](/reference/authkit/mfa/authentication-factor). */ export const UserlandUserAuthenticationFactorsControllerCreate0: API.OperationMethod< UserlandUserAuthenticationFactorsControllerCreate0Request, UserlandUserAuthenticationFactorEnrollResponse, UserlandUserAuthenticationFactorsControllerCreate0Error, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S( 1760, __c220, 0, ) as any as S.Schema, output: __S(1761, __c220, 1) as any as S.Schema, errors: [UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type UserlandUserAuthenticationFactorsControllerList0Error = | UnprocessableEntity | WorkosOpError; /** List authentication factors Lists the [authentication factors](/reference/authkit/mfa/authentication-factor) for a user. */ export const UserlandUserAuthenticationFactorsControllerList0: API.OperationMethod< UserlandUserAuthenticationFactorsControllerList0Request, UserlandUserAuthenticationFactorList, UserlandUserAuthenticationFactorsControllerList0Error, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S( 1768, __c221, 0, ) as any as S.Schema, output: __S(1770, __c221, 2) as any as S.Schema, errors: [UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type UserlandUserOrganizationMembershipsControllerReactivateError = | BadRequest | NotFound | UnprocessableEntity | WorkosOpError; /** Reactivate an organization membership Reactivates an `inactive` organization membership, retaining the pre-existing role(s). Emits an [organization_membership.updated](/events/organization-membership) event upon successful reactivation. - Reactivating an `active` membership is a no-op and does not emit an event. - Reactivating a `pending` membership returns an error. The user needs to [accept the invitation](/authkit/invitations) instead. See the [membership management documentation](/authkit/users-organizations/organizations/membership-management) for additional details. */ export const UserlandUserOrganizationMembershipsControllerReactivate: API.OperationMethod< UserlandUserOrganizationMembershipsControllerReactivateRequest, UserlandUserOrganizationMembership, UserlandUserOrganizationMembershipsControllerReactivateError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S( 1776, __c222, 0, ) as any as S.Schema, output: __S(512, __c64, 0) as any as S.Schema, errors: [BadRequest, NotFound, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type UserlandUsersControllerCreate0Error = | BadRequest | NotFound | UnprocessableEntity | WorkosOpError; /** Create a user Create a new user in the current environment. */ export const UserlandUsersControllerCreate0: API.OperationMethod< UserlandUsersControllerCreate0Request, UserlandUsersControllerCreate0Response, UserlandUsersControllerCreate0Error, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(1784, __c223, 0) as any as S.Schema, output: __S(1785, __c223, 1) as any as S.Schema, errors: [BadRequest, NotFound, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type UserlandUsersControllerCreatePasswordResetTokenError = | Forbidden | NotFound | UnprocessableEntity | WorkosOpError; /** Create a password reset token Creates a one-time token that can be used to reset a user's password. */ export const UserlandUsersControllerCreatePasswordResetToken: API.OperationMethod< UserlandUsersControllerCreatePasswordResetTokenRequest, PasswordReset, UserlandUsersControllerCreatePasswordResetTokenError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S( 1792, __c224, 0, ) as any as S.Schema, output: __S(1800, __c225, 0) as any as S.Schema, errors: [Forbidden, NotFound, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type UserlandUsersControllerDelete0Error = NotFound | WorkosOpError; /** Delete a user Permanently deletes a user in the current environment. It cannot be undone. */ export const UserlandUsersControllerDelete0: API.OperationMethod< UserlandUsersControllerDelete0Request, UserlandUsersControllerDelete0Response, UserlandUsersControllerDelete0Error, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(1808, __c226, 0) as any as S.Schema, output: __S(1472, __c184, 0) as any as S.Schema, errors: [NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type UserlandUsersControllerEmailVerification0Error = | BadRequest | NotFound | UnprocessableEntity | WorkosOpError; /** Verify email Verifies an email address using the one-time code received by the user. */ export const UserlandUsersControllerEmailVerification0: API.OperationMethod< UserlandUsersControllerEmailVerification0Request, VerifyEmailResponse, UserlandUsersControllerEmailVerification0Error, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(1816, __c227, 0) as any as S.Schema, output: __S(1400, __c175, 0) as any as S.Schema, errors: [BadRequest, NotFound, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type UserlandUsersControllerGet0Error = NotFound | WorkosOpError; /** Get a user Get the details of an existing user. */ export const UserlandUsersControllerGet0: API.OperationMethod< UserlandUsersControllerGet0Request, UserlandUser, UserlandUsersControllerGet0Error, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(1824, __c228, 0) as any as S.Schema, output: __S(2472, __c309, 0) as any as S.Schema, errors: [NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type UserlandUsersControllerGetPasswordResetError = NotFound | WorkosOpError; /** Get a password reset token Get the details of an existing password reset token that can be used to reset a user's password. */ export const UserlandUsersControllerGetPasswordReset: API.OperationMethod< UserlandUsersControllerGetPasswordResetRequest, PasswordReset, UserlandUsersControllerGetPasswordResetError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(1832, __c229, 0) as any as S.Schema, output: __S(1800, __c225, 0) as any as S.Schema, errors: [NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type UserlandUsersControllerList0Error = UnprocessableEntity | WorkosOpError; /** List users Get a list of all of your existing users matching the criteria specified. */ export const UserlandUsersControllerList0: API.OperationMethod< UserlandUsersControllerList0Request, UserlandUserList, UserlandUsersControllerList0Error, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(1840, __c230, 0) as any as S.Schema, output: __S(1842, __c230, 2) as any as S.Schema, errors: [UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type UserlandUsersControllerUpdate0Error = BadRequest | UnprocessableEntity | WorkosOpError; /** Update a user Updates properties of a user. The omitted properties will be left unchanged. */ export const UserlandUsersControllerUpdate0: API.OperationMethod< UserlandUsersControllerUpdate0Request, UserlandUser, UserlandUsersControllerUpdate0Error, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(1856, __c232, 0) as any as S.Schema, output: __S(2472, __c309, 0) as any as S.Schema, errors: [BadRequest, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type ValidateAgentAdminControllerCredentialError = BadRequest | WorkosOpError; /** Validate an agent credential Validate an agent credential -- an API key or access token -- against the environment of the API key used to authenticate the request. This is a read-only check: it never consumes or mutates the credential. */ export const ValidateAgentAdminControllerCredential: API.OperationMethod< ValidateAgentAdminControllerCredentialRequest, AgentCredentialValidation, ValidateAgentAdminControllerCredentialError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(1864, __c233, 0) as any as S.Schema, output: __S(1865, __c233, 1) as any as S.Schema, errors: [BadRequest, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type ValidateAgentBlueprintsTokenControllerTokenError = | BadRequest | NotFound | WorkosOpError; /** Validate an agent token Validates an agent access token: verifies its signature against the environment, that it was minted under this blueprint, and that the backing session is live (not revoked or expired, and -- for delegated sessions -- that the delegating user session has not ended). Returns the token claims and session metadata when valid; invalid tokens are reported as errors with stable codes. */ export const ValidateAgentBlueprintsTokenControllerToken: API.OperationMethod< ValidateAgentBlueprintsTokenControllerTokenRequest, AgentTokenValidation, ValidateAgentBlueprintsTokenControllerTokenError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S( 1872, __c234, 0, ) as any as S.Schema, output: __S(1873, __c234, 1) as any as S.Schema, errors: [BadRequest, NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type ValidateApiKeysControllerApiKeyError = UnprocessableEntity | WorkosOpError; /** Validate API key Validate an API key value and return the API key object if valid. */ export const ValidateApiKeysControllerApiKey: API.OperationMethod< ValidateApiKeysControllerApiKeyRequest, ApiKeyValidationResponse, ValidateApiKeysControllerApiKeyError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(1880, __c235, 0) as any as S.Schema, output: __S(1881, __c235, 1) as any as S.Schema, errors: [UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type VerifyAuthenticationChallengesControllerError = | BadRequest | NotFound | UnprocessableEntity | WorkosOpError; /** Verify Challenge Verifies an Authentication Challenge. */ export const VerifyAuthenticationChallengesController: API.OperationMethod< VerifyAuthenticationChallengesControllerRequest, AuthenticationChallengeVerifyResponse, VerifyAuthenticationChallengesControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(1888, __c236, 0) as any as S.Schema, output: __S(1889, __c236, 1) as any as S.Schema, errors: [BadRequest, NotFound, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type VerifyOrganizationDomainsControllerError = BadRequest | WorkosOpError; /** Verify an Organization Domain Initiates verification process for an Organization Domain. */ export const VerifyOrganizationDomainsController: API.OperationMethod< VerifyOrganizationDomainsControllerRequest, OrganizationDomainStandAlone, VerifyOrganizationDomainsControllerError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(1896, __c237, 0) as any as S.Schema, output: __S(376, __c47, 0) as any as S.Schema, errors: [BadRequest, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type WaitlistEntriesControllerDenyError = NotFound | UnprocessableEntity | WorkosOpError; /** Deny a waitlist entry Deny a pending waitlist entry. Denying an entry that is not pending fails with the code `invalid_state`. A denial can be reversed by approving the entry. */ export const WaitlistEntriesControllerDeny: API.OperationMethod< WaitlistEntriesControllerDenyRequest, WaitlistEntriesControllerDenyResponse, WaitlistEntriesControllerDenyError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(1904, __c238, 0) as any as S.Schema, output: __S(424, __c53, 0) as any as S.Schema, errors: [NotFound, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type WaitlistsControllerFindError = NotFound | WorkosOpError; /** Get a waitlist Get the details of an existing waitlist. */ export const WaitlistsControllerFind: API.OperationMethod< WaitlistsControllerFindRequest, Waitlist, WaitlistsControllerFindError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S(1912, __c239, 0) as any as S.Schema, output: __S(1208, __c151, 0) as any as S.Schema, errors: [NotFound, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); export type WidgetsPublicControllerIssueWidgetSessionTokenError = | BadRequest | NotFound | UnprocessableEntity | WorkosOpError; /** Generate a widget token Generate a widget token for a user, optionally scoped to an organization. When an organization is specified, org-scoped widgets are enabled; omitting it issues a user-only token for widgets like `UserProfile` and `UserSecurity`. */ export const WidgetsPublicControllerIssueWidgetSessionToken: API.OperationMethod< WidgetsPublicControllerIssueWidgetSessionTokenRequest, WidgetSessionTokenResponse, WidgetsPublicControllerIssueWidgetSessionTokenError, WorkosOpContext > = /*@__PURE__*/ API.make(() => ({ input: __S( 1920, __c240, 0, ) as any as S.Schema, output: __S(1921, __c240, 1) as any as S.Schema, errors: [BadRequest, NotFound, UnprocessableEntity, UnknownWorkosError], protocol: WorkosProtocol, retry: Retry.Retry, })); // Schema builders: each runs one schema initializer, on that schema's first use. function __c0(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ agent_blueprint_id: S.String.pipe(T.Label()), body: S.Unknown.pipe(T.HttpBody()), }).pipe( T.Http({ method: "POST", uri: "/agents/blueprints/{agent_blueprint_id}/tokens", code: 200, }), ), ).annotate({ identifier: "AgentBlueprintsTokenControllerMintTokenRequest" }); case 1: return S.suspend(() => S.Struct({ access_token: S.String.pipe(T.SensitiveValue({})), token_type: S.String, expires_in: S.Number, refresh_token: S.String.pipe(T.SensitiveValue({})), agent_instance_id: S.String, new_instance: S.Boolean, agent_instance_session_id: S.String, permissions: __S(2400, __c300, 0), }), ).annotate({ identifier: "AgentToken" }); } } function __c1(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ id: S.String.pipe(T.Label()), }).pipe(T.Http({ method: "GET", uri: "/vault/v1/kv/{id}/metadata", code: 200 })), ).annotate({ identifier: "DescribeJumpWireWebDataVaultControllerRequest" }); } } function __c2(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ id: S.String, metadata: __S(2256, __c282, 0), name: S.String, }), ).annotate({ identifier: "ObjectWithoutValue" }); } } function __c3(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ id: S.String.pipe(T.Label()), }).pipe(T.Http({ method: "GET", uri: "/directories/{id}", code: 200 })), ).annotate({ identifier: "DirectoriesControllerFindRequest" }); } } function __c4(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ active: S.Number, inactive: S.Number, }), ).annotate({ identifier: "DirectoryMetadataUsers" }); case 1: return S.suspend(() => S.Struct({ users: __S(32, __c4, 0), groups: S.Number, }), ).annotate({ identifier: "DirectoryMetadata" }); case 2: return S.suspend(() => S.Struct({ object: S.optional(S.String), id: S.optional(S.String), organization_id: S.optional(S.String), external_key: S.optional(S.String), type: S.optional(S.String), state: S.optional(S.String), name: S.optional(S.String), domain: S.optional(S.String), metadata: S.optional(__S(33, __c4, 1)), created_at: S.optional(S.String), updated_at: S.optional(S.String), }), ).annotate({ identifier: "Directory" }); } } function __c5(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ id: S.String.pipe(T.Label()), }).pipe(T.Http({ method: "GET", uri: "/directory_groups/{id}", code: 200 })), ).annotate({ identifier: "DirectoryGroupsControllerFindRequest" }); } } function __c6(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ object: S.optional(S.String), id: S.optional(S.String), idp_id: S.optional(S.String), directory_id: S.optional(S.String), organization_id: S.optional(S.String), name: S.optional(S.String), raw_attributes: S.optional(__S(936, __c117, 0)), created_at: S.optional(S.String), updated_at: S.optional(S.String), }), ).annotate({ identifier: "DirectoryGroup" }); } } function __c7(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ id: S.String.pipe(T.Label()), }).pipe(T.Http({ method: "GET", uri: "/directory_users/{id}", code: 200 })), ).annotate({ identifier: "DirectoryUsersControllerFindRequest" }); } } function __c8(j: number): any { switch (j) { case 0: return S.Array(__S(48, __c6, 0)); } } function __c9(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ primary: S.optional(S.Boolean), type: S.optional(S.String), value: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DirectoryUserWithGroupsEmailsItem" }); case 1: return S.Array(__S(72, __c9, 0)); case 2: return S.suspend(() => S.Struct({ object: S.optional(S.String), id: S.optional(S.String), directory_id: S.optional(S.String), organization_id: S.optional(S.String), idp_id: S.optional(S.String), email: S.optional(S.NullOr(S.String)), first_name: S.optional(S.NullOr(S.String)), last_name: S.optional(S.NullOr(S.String)), name: S.optional(S.NullOr(S.String)), emails: S.optional(__S(73, __c9, 1)), job_title: S.optional(S.NullOr(S.String)), username: S.optional(S.NullOr(S.String)), state: S.optional(S.String), raw_attributes: S.optional(__S(936, __c117, 0)), custom_attributes: S.optional(__S(936, __c117, 0)), role: S.optional(__S(560, __c70, 0)), roles: S.optional(__S(2464, __c308, 0)), created_at: S.optional(S.String), updated_at: S.optional(S.String), groups: S.optional(__S(64, __c8, 0)), }), ).annotate({ identifier: "DirectoryUserWithGroups" }); } } function __c10(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ slug: S.String.pipe(T.Label()), }).pipe(T.Http({ method: "PUT", uri: "/feature-flags/{slug}/disable", code: 200 })), ).annotate({ identifier: "DisableFeatureFlagsControllerFlagRequest" }); } } function __c11(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ object: S.String, id: S.String, slug: S.String, name: S.String, description: S.NullOr(S.String), owner: S.NullOr(__S(96, __c12, 0)), tags: __S(2400, __c300, 0), enabled: S.Boolean, default_value: S.Boolean, created_at: S.String, updated_at: S.String, }), ).annotate({ identifier: "DisableFeatureFlagsControllerFlagResponse" }); } } function __c12(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ email: S.String, first_name: S.NullOr(S.String), last_name: S.NullOr(S.String), }), ).annotate({ identifier: "DisableFeatureFlagsControllerFlagResponseOwner" }); } } function __c13(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ slug: S.String.pipe(T.Label()), }).pipe(T.Http({ method: "PUT", uri: "/feature-flags/{slug}/enable", code: 200 })), ).annotate({ identifier: "EnableFeatureFlagsControllerFlagRequest" }); } } function __c14(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ auditLogExportId: S.String.pipe(T.Label()), }).pipe( T.Http({ method: "GET", uri: "/audit_logs/exports/{auditLogExportId}", code: 200 }), ), ).annotate({ identifier: "ExportAuditLogExportsControllerRequest" }); } } function __c15(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ slug: S.String.pipe(T.Label()), }).pipe(T.Http({ method: "GET", uri: "/feature-flags/{slug}", code: 200 })), ).annotate({ identifier: "FeatureFlagsControllerFindBySlugRequest" }); } } function __c16(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ object: S.optional(S.String), id: S.optional(S.String), slug: S.optional(S.String), name: S.optional(S.String), description: S.optional(S.NullOr(S.String)), owner: S.optional(S.NullOr(__S(96, __c12, 0))), tags: S.optional(__S(2400, __c300, 0)), enabled: S.optional(S.Boolean), default_value: S.optional(S.Boolean), created_at: S.optional(S.String), updated_at: S.optional(S.String), }), ).annotate({ identifier: "Flag" }); } } function __c17(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ id: S.String.pipe(T.Label()), }).pipe(T.Http({ method: "GET", uri: "/agents/registrations/{id}", code: 200 })), ).annotate({ identifier: "GetAgentAdminControllerRegistrationRequest" }); case 1: return S.suspend(() => S.Struct({ id: S.String, userland_user_id: S.NullOr(S.String), created_at: S.String, updated_at: S.String, }), ).annotate({ identifier: "AgentRegistrationAgentIdentity" }); case 2: return S.suspend(() => S.Struct({ id: S.String, created_at: S.String, updated_at: S.String, expires_at: S.String, claimed_at: S.String, }), ).annotate({ identifier: "AgentRegistrationClaimClaimCompletion" }); case 3: return S.suspend(() => S.Struct({ id: S.String, claim_completion: S.NullOr(__S(138, __c17, 2)), created_at: S.String, updated_at: S.String, expires_at: S.String, }), ).annotate({ identifier: "AgentRegistrationClaim" }); case 4: return S.suspend(() => S.Struct({ id: S.String, agent_identity: __S(137, __c17, 1), organization_id: S.String, status: S.String, kind: S.String, claim: S.NullOr(__S(139, __c17, 3)), created_at: S.String, updated_at: S.String, }), ).annotate({ identifier: "AgentRegistration" }); } } function __c18(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ agent_blueprint_id: S.String.pipe(T.Label()), }).pipe( T.Http({ method: "GET", uri: "/agents/blueprints/{agent_blueprint_id}", code: 200 }), ), ).annotate({ identifier: "GetAgentBlueprintsControllerRequest" }); } } function __c19(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ id: S.String.pipe(T.Label()), expires_at: S.optional(S.NullOr(S.String)), }).pipe(T.Http({ method: "POST", uri: "/api_keys/{id}/expire", code: 200 })), ).annotate({ identifier: "ApiKeysControllerExpireRequest" }); } } function __c20(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ object: S.optional(S.String), id: S.optional(S.String), owner: S.optional(S.Unknown), name: S.optional(S.String), obfuscated_value: S.optional(S.String), last_used_at: S.optional(S.NullOr(S.String)), expires_at: S.optional(S.NullOr(S.String)), permissions: S.optional(__S(2400, __c300, 0)), created_at: S.optional(S.String), updated_at: S.optional(S.String), }), ).annotate({ identifier: "ApiKey" }); } } function __c21(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ agent_instance_id: S.String.pipe(T.Label()), }).pipe(T.Http({ method: "GET", uri: "/agents/instances/{agent_instance_id}", code: 200 })), ).annotate({ identifier: "GetAgentInstancesControllerRequest" }); } } function __c22(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ object: S.String, id: S.String, agent_blueprint_id: S.String, organization_id: S.String, organization_membership_id: S.NullOr(S.String), type: S.String, created_at: S.String, updated_at: S.String, }), ).annotate({ identifier: "AgentInstance" }); } } function __c23(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ agent_instance_session_id: S.String.pipe(T.Label()), }).pipe( T.Http({ method: "GET", uri: "/agents/sessions/{agent_instance_session_id}", code: 200 }), ), ).annotate({ identifier: "GetAgentInstanceSessionsControllerRequest" }); } } function __c24(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ object: S.String, id: S.String, agent_instance_id: S.String, status: S.String, expires_at: S.String, revoked_at: S.NullOr(S.String), created_at: S.String, updated_at: S.String, }), ).annotate({ identifier: "AgentInstanceSession" }); } } function __c25(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ id: S.String.pipe(T.Label()), }).pipe(T.Http({ method: "GET", uri: "/auth/factors/{id}", code: 200 })), ).annotate({ identifier: "GetAuthenticationFactorsControllerRequest" }); } } function __c26(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ issuer: S.String, user: S.String, }), ).annotate({ identifier: "AuthenticationFactorTotp" }); case 1: return S.suspend(() => S.Struct({ object: S.optional(S.String), id: S.optional(S.String), type: S.optional(S.String), user_id: S.optional(S.String), sms: S.optional(__S(2016, __c252, 0)), totp: S.optional(__S(208, __c26, 0)), created_at: S.optional(S.String), updated_at: S.optional(S.String), }), ).annotate({ identifier: "AuthenticationFactor" }); } } function __c27(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ group_id: S.String.pipe(T.Label()), role_assignment_id: S.String.pipe(T.Label()), }).pipe( T.Http({ method: "GET", uri: "/authorization/groups/{group_id}/role_assignments/{role_assignment_id}", code: 200, }), ), ).annotate({ identifier: "GetAuthorizationGroupRoleAssignmentsControllerRequest" }); } } function __c28(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ organizationId: S.String.pipe(T.Label()), slug: S.String.pipe(T.Label()), }).pipe( T.Http({ method: "GET", uri: "/authorization/organizations/{organizationId}/roles/{slug}", code: 200, }), ), ).annotate({ identifier: "GetAuthorizationOrganizationRolesControllerRequest" }); } } function __c29(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ organization_id: S.String.pipe(T.Label()), resource_type_slug: S.String.pipe(T.Label()), external_id: S.String.pipe(T.Label()), }).pipe( T.Http({ method: "GET", uri: "/authorization/organizations/{organization_id}/resources/{resource_type_slug}/{external_id}", code: 200, }), ), ).annotate({ identifier: "GetAuthorizationResourcesByExternalIdControllerByExternalIdRequest", }); } } function __c30(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ slug: S.String.pipe(T.Label()), }).pipe(T.Http({ method: "GET", uri: "/authorization/roles/{slug}", code: 200 })), ).annotate({ identifier: "GetAuthorizationRolesControllerRequest" }); } } function __c31(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ slug: S.optional(S.String), object: S.optional(S.String), id: S.optional(S.String), name: S.optional(S.String), description: S.optional(S.NullOr(S.String)), type: S.optional(S.String), resource_type_slug: S.optional(S.String), permissions: S.optional(__S(2400, __c300, 0)), created_at: S.optional(S.String), updated_at: S.optional(S.String), }), ).annotate({ identifier: "Role" }); } } function __c32(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ slug: S.String.pipe(T.Label()), user_id: S.String, organization_id: S.optional(S.String), connected_account_id: S.optional(S.String), connection_owner: S.optional(S.String), supports_multiple_connections: S.optional(S.Boolean), }).pipe(T.Http({ method: "POST", uri: "/data-integrations/{slug}/token", code: 200 })), ).annotate({ identifier: "GetDataIntegrationsControllerUserlandUserTokenRequest" }); case 1: return S.suspend(() => S.Unknown.pipe(T.RawResponseRoot())).annotate({ identifier: "GetDataIntegrationsControllerUserlandUserTokenResponse", }); } } function __c33(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ slug: S.String.pipe(T.Label()), }).pipe(T.Http({ method: "GET", uri: "/data-integrations/{slug}", code: 200 })), ).annotate({ identifier: "GetDataIntegrationsManagementControllerDataIntegrationRequest" }); } } function __c34(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ slug: S.String.pipe(T.Label()), }).pipe( T.Http({ method: "GET", uri: "/data-integrations/{slug}/organization", code: 200 }), ), ).annotate({ identifier: "GetDataIntegrationsManagementControllerOrganizationDataIntegrationRequest", }); } } function __c35(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ id: S.String.pipe(T.Label()), }).pipe(T.Http({ method: "GET", uri: "/connect/applications/{id}", code: 200 })), ).annotate({ identifier: "ApplicationsControllerFindRequest" }); } } function __c36(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ uri: S.String, default: S.Boolean, }), ).annotate({ identifier: "ApplicationsControllerFindResponseRedirectUrisItem" }); case 1: return S.Array(__S(288, __c36, 0)); case 2: return S.suspend(() => S.Struct({ object: S.String, id: S.String, client_id: S.String, description: S.NullOr(S.String), name: S.String, scopes: __S(2400, __c300, 0), created_at: S.String, updated_at: S.String, application_type: S.optional(S.String), redirect_uris: S.optional(__S(289, __c36, 1)), uses_pkce: S.optional(S.Boolean), is_first_party: S.optional(S.Boolean), was_dynamically_registered: S.optional(S.Boolean), organization_id: S.optional(S.String), }), ).annotate({ identifier: "ApplicationsControllerFindResponse" }); } } function __c37(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ organization_id: S.String.pipe(T.Label()), slug: S.String.pipe(T.Label()), supports_multiple_connections: S.optional(S.Boolean.pipe(T.Query())), connected_account_id: S.optional(S.String.pipe(T.Query())), }).pipe( T.Http({ method: "GET", uri: "/organizations/{organization_id}/connected_accounts/{slug}", code: 200, }), ), ).annotate({ identifier: "GetDataIntegrationsOrganizationControllerOrganizationDataInstallationRequest", }); } } function __c38(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ object: S.optional(S.String), id: S.optional(S.String), connection_role: S.optional(S.String), account_identifier: S.optional(S.NullOr(S.String)), account_display_name: S.optional(S.NullOr(S.String)), user_id: S.optional(S.NullOr(S.String)), organization_id: S.optional(S.NullOr(S.String)), scopes: S.optional(__S(2400, __c300, 0)), auth_method: S.optional(S.String), api_key_last_4: S.optional(S.NullOr(S.String)), client_id: S.optional(S.NullOr(S.String)), client_secret_last_4: S.optional(S.NullOr(S.String)), config: S.optional(__S(416, __c52, 0)), state: S.optional(S.String), created_at: S.optional(S.String), updated_at: S.optional(S.String), }), ).annotate({ identifier: "ConnectedAccount" }); } } function __c39(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ organization_id: S.String.pipe(T.Label()), supports_multiple_connections: S.optional(S.Boolean.pipe(T.Query())), }).pipe( T.Http({ method: "GET", uri: "/organizations/{organization_id}/data_providers", code: 200, }), ), ).annotate({ identifier: "GetDataIntegrationsOrganizationControllerOrganizationDataIntegrationsRequest", }); } } function __c40(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ object: S.String, id: S.String, connection_role: S.String, account_identifier: S.NullOr(S.String), account_display_name: S.NullOr(S.String), user_id: S.NullOr(S.String), organization_id: S.NullOr(S.String), scopes: __S(2400, __c300, 0), auth_method: S.optional(S.String), api_key_last_4: S.optional(S.NullOr(S.String)), client_id: S.optional(S.NullOr(S.String)), client_secret_last_4: S.optional(S.NullOr(S.String)), config: S.optional(__S(416, __c52, 0)), state: S.String, created_at: S.String, updated_at: S.String, userlandUserId: S.NullOr(S.String), organizationId: S.NullOr(S.String), createdAt: S.String, updatedAt: S.String, }), ).annotate({ identifier: "DataIntegrationsListResponseDataItemConnectedAccount" }); case 1: return S.Array(__S(320, __c40, 0)); case 2: return S.suspend(() => S.Struct({ object: S.String, id: S.String, name: S.String, description: S.NullOr(S.String), slug: S.String, integration_type: S.String, credentials_type: S.String, scopes: S.NullOr(__S(2400, __c300, 0)), auth_methods: S.optional(__S(1968, __c246, 0)), connection_owner: S.String, ownership: S.String, created_at: S.String, updated_at: S.String, integrationType: S.String, credentialsType: S.String, createdAt: S.String, updatedAt: S.String, connected_account: S.NullOr(__S(320, __c40, 0)), connected_accounts: __S(321, __c40, 1), }), ).annotate({ identifier: "DataIntegrationsListResponseDataItem" }); case 3: return S.Array(__S(322, __c40, 2)); case 4: return S.suspend(() => S.Struct({ object: S.optional(S.String), data: S.optional(__S(323, __c40, 3)), }), ).annotate({ identifier: "DataIntegrationsListResponse" }); } } function __c41(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ user_id: S.String.pipe(T.Label()), slug: S.String.pipe(T.Label()), organization_id: S.optional(S.String.pipe(T.Query())), supports_multiple_connections: S.optional(S.Boolean.pipe(T.Query())), connected_account_id: S.optional(S.String.pipe(T.Query())), }).pipe( T.Http({ method: "GET", uri: "/user_management/users/{user_id}/connected_accounts/{slug}", code: 200, }), ), ).annotate({ identifier: "GetDataIntegrationsUserManagementControllerUserDataInstallationRequest", }); } } function __c42(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ user_id: S.String.pipe(T.Label()), organization_id: S.optional(S.String.pipe(T.Query())), supports_multiple_connections: S.optional(S.Boolean.pipe(T.Query())), }).pipe( T.Http({ method: "GET", uri: "/user_management/users/{user_id}/data_providers", code: 200, }), ), ).annotate({ identifier: "GetDataIntegrationsUserManagementControllerUserDataIntegrationsRequest", }); } } function __c43(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ organizationId: S.String.pipe(T.Label()), groupId: S.String.pipe(T.Label()), }).pipe( T.Http({ method: "GET", uri: "/organizations/{organizationId}/groups/{groupId}", code: 200, }), ), ).annotate({ identifier: "GetGroupsControllerRequest" }); } } function __c44(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({}).pipe( T.Http({ method: "GET", uri: "/user_management/jwt_template", code: 200 }), ), ).annotate({ identifier: "GetJwtTemplatesControllerJwtTemplateRequest" }); } } function __c45(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ object: S.String, content: S.String, created_at: S.String, updated_at: S.String, }), ).annotate({ identifier: "JwtTemplate" }); } } function __c46(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ id: S.String.pipe(T.Label()), }).pipe(T.Http({ method: "GET", uri: "/organization_domains/{id}", code: 200 })), ).annotate({ identifier: "GetOrganizationDomainsControllerRequest" }); } } function __c47(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ object: S.optional(S.String), id: S.optional(S.String), organization_id: S.optional(S.String), domain: S.optional(S.String), state: S.optional(S.String), verification_prefix: S.optional(S.String), verification_token: S.optional(S.String), verification_strategy: S.optional(S.String), created_at: S.optional(S.String), updated_at: S.optional(S.String), }), ).annotate({ identifier: "OrganizationDomainStandAlone" }); } } function __c48(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ id: S.String.pipe(T.Label()), }).pipe( T.Http({ method: "GET", uri: "/organizations/{id}/audit_log_configuration", code: 200 }), ), ).annotate({ identifier: "GetOrganizationsControllerAuditLogConfigurationRequest" }); case 1: return S.suspend(() => S.Struct({ id: S.String, type: S.String, state: S.String, last_synced_at: S.NullOr(S.String), created_at: S.String, }), ).annotate({ identifier: "AuditLogConfigurationLogStream" }); case 2: return S.suspend(() => S.Struct({ organization_id: S.optional(S.String), retention_period_in_days: S.optional(S.Number), state: S.optional(S.String), log_stream: S.optional(__S(385, __c48, 1)), }), ).annotate({ identifier: "AuditLogConfiguration" }); } } function __c49(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ external_id: S.String.pipe(T.Label()), }).pipe( T.Http({ method: "GET", uri: "/organizations/external_id/{external_id}", code: 200 }), ), ).annotate({ identifier: "GetOrganizationsControllerByExternalIdRequest" }); } } function __c50(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ id: S.String.pipe(T.Label()), }).pipe( T.Http({ method: "GET", uri: "/user_management/radar_challenges/{id}", code: 200 }), ), ).annotate({ identifier: "GetPublicRadarChallengesControllerRequest" }); case 1: return S.suspend(() => S.Struct({ object: S.String, id: S.String, type: S.String, user_id: S.String, email: S.String, expires_at: S.String, created_at: S.String, updated_at: S.String, code: S.String, }), ).annotate({ identifier: "RadarChallenge" }); } } function __c51(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ id: S.String.pipe(T.Label()), }).pipe( T.Http({ method: "POST", uri: "/user_management/waitlist_entries/{id}/approve", code: 200, }), ), ).annotate({ identifier: "ApproveWaitlistEntriesControllerRequest" }); } } function __c52(j: number): any { switch (j) { case 0: return S.Record(S.String, S.String); } } function __c53(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ id: S.String, email: S.String, state: S.String, approved_at: S.NullOr(S.String), additional_fields: S.optional(__S(416, __c52, 0)), waitlist_id: S.optional(S.NullOr(S.String)), created_at: S.String, updated_at: S.String, object: S.String, }), ).annotate({ identifier: "ApproveWaitlistEntriesControllerResponse" }); } } function __c54(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ connectionId: S.String.pipe(T.Label()), }).pipe( T.Http({ method: "GET", uri: "/connections/{connectionId}/saml_sp_signing_cert", code: 200, }), ), ).annotate({ identifier: "GetSamlSpSigningCertificatesControllerRequest" }); } } function __c55(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({}).pipe(T.Http({ method: "GET", uri: "/sso/profile", code: 200 })), ).annotate({ identifier: "GetSsoControllerProfileRequest" }); } } function __c56(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ object: S.optional(S.String), id: S.optional(S.String), organization_id: S.optional(S.NullOr(S.String)), connection_id: S.optional(S.String), connection_type: S.optional(S.String), idp_id: S.optional(S.String), email: S.optional(S.String), first_name: S.optional(S.NullOr(S.String)), last_name: S.optional(S.NullOr(S.String)), name: S.optional(S.NullOr(S.String)), role: S.optional(S.NullOr(__S(560, __c70, 0))), roles: S.optional(S.NullOr(__S(2464, __c308, 0))), groups: S.optional(__S(2400, __c300, 0)), custom_attributes: S.optional(__S(936, __c117, 0)), raw_attributes: S.optional(__S(936, __c117, 0)), }), ).annotate({ identifier: "Profile" }); } } function __c57(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ team_id: S.String.pipe(T.Label()), }).pipe(T.Http({ method: "GET", uri: "/platform/teams/{team_id}", code: 200 })), ).annotate({ identifier: "GetTeamsControllerTeamRequest" }); } } function __c58(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ id: S.String.pipe(T.Label()), }).pipe(T.Http({ method: "GET", uri: "/user_management/magic_auth/{id}", code: 200 })), ).annotate({ identifier: "GetUserlandMagicAuthControllerRequest" }); } } function __c59(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ object: S.optional(S.String), id: S.optional(S.String), user_id: S.optional(S.String), email: S.optional(S.String), expires_at: S.optional(S.String), created_at: S.optional(S.String), updated_at: S.optional(S.String), code: S.optional(S.String), }), ).annotate({ identifier: "MagicAuth" }); } } function __c60(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ id: S.String.pipe(T.Label()), }).pipe( T.Http({ method: "GET", uri: "/user_management/users/{id}/identities", code: 200 }), ), ).annotate({ identifier: "GetUserlandUserIdentitiesControllerRequest" }); case 1: return S.suspend(() => S.Struct({ idp_id: S.String, type: S.String, provider: S.String, }), ).annotate({ identifier: "GetUserlandUserIdentitiesControllerResponseBodyItem" }); case 2: return S.Array(__S(481, __c60, 1)); case 3: return S.suspend(() => __S(482, __c60, 2).pipe(T.RawResponseRoot())).annotate({ identifier: "GetUserlandUserIdentitiesControllerResponse", }); } } function __c61(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ id: S.String.pipe(T.Label()), }).pipe(T.Http({ method: "GET", uri: "/user_management/invitations/{id}", code: 200 })), ).annotate({ identifier: "GetUserlandUserInvitesControllerRequest" }); } } function __c62(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ token: S.String.pipe(T.Label()), }).pipe( T.Http({ method: "GET", uri: "/user_management/invitations/by_token/{token}", code: 200, }), ), ).annotate({ identifier: "GetUserlandUserInvitesControllerByTokenRequest" }); } } function __c63(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ id: S.String.pipe(T.Label()), }).pipe( T.Http({ method: "GET", uri: "/user_management/organization_memberships/{id}", code: 200, }), ), ).annotate({ identifier: "GetUserlandUserOrganizationMembershipsControllerRequest" }); } } function __c64(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ object: S.optional(S.String), id: S.optional(S.String), user_id: S.optional(S.String), organization_id: S.optional(S.String), status: S.optional(S.String), directory_managed: S.optional(S.Boolean), organization_name: S.optional(S.String), custom_attributes: S.optional(__S(936, __c117, 0)), created_at: S.optional(S.String), updated_at: S.optional(S.String), role: S.optional(__S(560, __c70, 0)), roles: S.optional(__S(2464, __c308, 0)), user: S.optional(__S(2472, __c309, 0)), }), ).annotate({ identifier: "UserlandUserOrganizationMembership" }); } } function __c65(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ external_id: S.String.pipe(T.Label()), }).pipe( T.Http({ method: "GET", uri: "/user_management/users/external_id/{external_id}", code: 200, }), ), ).annotate({ identifier: "GetUserlandUsersControllerByExternalIdRequest" }); } } function __c66(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ id: S.String.pipe(T.Label()), }).pipe( T.Http({ method: "GET", uri: "/user_management/email_verification/{id}", code: 200 }), ), ).annotate({ identifier: "GetUserlandUsersControllerEmailVerificationRequest" }); } } function __c67(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ organization_membership_id: S.String.pipe(T.Label()), role_slug: S.String, resource_id: S.optional(S.String), resource_external_id: S.optional(S.String), resource_type_slug: S.optional(S.String), }).pipe( T.Http({ method: "POST", uri: "/authorization/organization_memberships/{organization_membership_id}/role_assignments", code: 200, }), ), ).annotate({ identifier: "AssignAuthorizationRoleAssignmentsControllerRoleRequest" }); } } function __c68(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ type: S.String, group_role_assignment_id: S.NullOr(S.String), group: S.NullOr(__S(2736, __c342, 0)), }), ).annotate({ identifier: "UserRoleAssignmentSource" }); case 1: return S.suspend(() => S.Struct({ object: S.String, id: S.String, organization_membership_id: S.String, role: __S(560, __c70, 0), resource: __S(552, __c69, 0), source: __S(544, __c68, 0), created_at: S.String, updated_at: S.String, }), ).annotate({ identifier: "UserRoleAssignment" }); } } function __c69(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ id: S.String, external_id: S.String, resource_type_slug: S.String, }), ).annotate({ identifier: "UserRoleAssignmentResource" }); } } function __c70(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ slug: S.optional(S.String), }), ).annotate({ identifier: "SlimRole" }); } } function __c71(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ organization_id: S.String.pipe(T.Label()), contact_id: S.String.pipe(T.Label()), intents: __S(1968, __c246, 0), }).pipe( T.Http({ method: "POST", uri: "/organizations/{organization_id}/it_contacts/{contact_id}/invite", code: 200, }), ), ).annotate({ identifier: "InviteItContactsControllerRequest" }); } } function __c72(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ limit: S.optional(S.Number.pipe(T.Query())), before: S.optional(S.String.pipe(T.Query())), after: S.optional(S.String.pipe(T.Query())), order: S.optional(S.String.pipe(T.Query())), search: S.optional(S.String.pipe(T.Query())), updatedAfter: S.optional(S.String.pipe(T.Query())), }).pipe(T.Http({ method: "GET", uri: "/vault/v1/kv", code: 200 })), ).annotate({ identifier: "JumpWireWebDataVaultControllerIndexRequest" }); case 1: return S.suspend(() => S.Struct({ id: S.String, name: S.String, updated_at: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "ObjectSummary" }); case 2: return S.Array(__S(577, __c72, 1)); case 3: return S.suspend(() => S.Struct({ data: __S(578, __c72, 2), list_metadata: __S(584, __c73, 0), }), ).annotate({ identifier: "ObjectListResponse" }); } } function __c73(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ after: S.optional(S.NullOr(S.String)), before: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "ListMetadata" }); } } function __c74(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ id: S.String.pipe(T.Label()), }).pipe(T.Http({ method: "GET", uri: "/vault/v1/kv/{id}", code: 200 })), ).annotate({ identifier: "JumpWireWebDataVaultControllerShowByIdRequest" }); } } function __c75(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ id: S.String, metadata: __S(2256, __c282, 0), name: S.String, value: S.String, }), ).annotate({ identifier: "Object" }); } } function __c76(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ name: S.String.pipe(T.Label()), }).pipe(T.Http({ method: "GET", uri: "/vault/v1/kv/name/{name}", code: 200 })), ).annotate({ identifier: "JumpWireWebDataVaultControllerShowByNameRequest" }); } } function __c77(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ id: S.String.pipe(T.Label()), }).pipe(T.Http({ method: "GET", uri: "/vault/v1/kv/{id}/versions", code: 200 })), ).annotate({ identifier: "JumpWireWebDataVaultControllerVersionsRequest" }); case 1: return S.suspend(() => S.Struct({ created_at: S.String, current_version: S.Boolean, etag: S.String, id: S.String, size: S.Number, }), ).annotate({ identifier: "ObjectVersion" }); case 2: return S.Array(__S(617, __c77, 1)); case 3: return S.suspend(() => S.Struct({ data: __S(618, __c77, 2), list_metadata: __S(584, __c73, 0), }), ).annotate({ identifier: "VersionListResponse" }); } } function __c78(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ context: __S(416, __c52, 0), }).pipe(T.Http({ method: "POST", uri: "/vault/v1/keys/data-key", code: 200 })), ).annotate({ identifier: "JumpWireWebKeyControllerCreateDataKeyRequest" }); } } function __c79(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ context: __S(416, __c52, 0), data_key: S.String, encrypted_keys: S.String, id: S.String, }), ).annotate({ identifier: "CreateDataKeyResponse" }); } } function __c80(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ context: __S(416, __c52, 0), encrypted_keys: S.String, }).pipe(T.Http({ method: "POST", uri: "/vault/v1/keys/rekey", code: 200 })), ).annotate({ identifier: "JumpWireWebKeyControllerRekeyRequest" }); } } function __c81(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ before: S.optional(S.String.pipe(T.Query())), after: S.optional(S.String.pipe(T.Query())), limit: S.optional(S.Number.pipe(T.Query())), order: S.optional(S.String.pipe(T.Query())), }).pipe(T.Http({ method: "GET", uri: "/agents/blueprints", code: 200 })), ).annotate({ identifier: "ListAgentBlueprintsControllerRequest" }); case 1: return S.Array(__S(1955, __c244, 3)); case 2: return S.suspend(() => S.Struct({ object: S.optional(S.String), list_metadata: S.optional(__S(920, __c115, 0)), data: S.optional(__S(649, __c81, 1)), }), ).annotate({ identifier: "ListAgentBlueprintsControllerResponse" }); } } function __c82(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ before: S.optional(S.String.pipe(T.Query())), after: S.optional(S.String.pipe(T.Query())), limit: S.optional(S.Number.pipe(T.Query())), order: S.optional(S.String.pipe(T.Query())), organization_id: S.optional(S.String.pipe(T.Query())), agent_blueprint_id: S.optional(S.String.pipe(T.Query())), }).pipe(T.Http({ method: "GET", uri: "/agents/instances", code: 200 })), ).annotate({ identifier: "ListAgentInstancesControllerRequest" }); case 1: return S.Array(__S(176, __c22, 0)); case 2: return S.suspend(() => S.Struct({ object: S.optional(S.String), list_metadata: S.optional(__S(920, __c115, 0)), data: S.optional(__S(657, __c82, 1)), }), ).annotate({ identifier: "ListAgentInstancesControllerResponse" }); } } function __c83(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ before: S.optional(S.String.pipe(T.Query())), after: S.optional(S.String.pipe(T.Query())), limit: S.optional(S.Number.pipe(T.Query())), order: S.optional(S.String.pipe(T.Query())), organization_id: S.optional(S.String.pipe(T.Query())), agent_blueprint_id: S.optional(S.String.pipe(T.Query())), agent_instance_id: S.optional(S.String.pipe(T.Query())), }).pipe(T.Http({ method: "GET", uri: "/agents/sessions", code: 200 })), ).annotate({ identifier: "ListAgentInstanceSessionsControllerRequest" }); case 1: return S.Array(__S(192, __c24, 0)); case 2: return S.suspend(() => S.Struct({ object: S.optional(S.String), list_metadata: S.optional(__S(920, __c115, 0)), data: S.optional(__S(665, __c83, 1)), }), ).annotate({ identifier: "ListAgentInstanceSessionsControllerResponse" }); } } function __c84(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ organization_id: S.optional(S.String), range_start: S.optional(S.String), range_end: S.optional(S.String), actions: S.optional(__S(2400, __c300, 0)), actors: S.optional(__S(2400, __c300, 0)), actor_names: S.optional(__S(2400, __c300, 0)), actor_ids: S.optional(__S(2400, __c300, 0)), targets: S.optional(__S(2400, __c300, 0)), }).pipe(T.Http({ method: "POST", uri: "/audit_logs/exports", code: 200 })), ).annotate({ identifier: "AuditLogExportsControllerExportsRequest" }); } } function __c85(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ object: S.optional(S.String), id: S.optional(S.String), state: S.optional(S.String), url: S.optional(S.NullOr(S.String)), created_at: S.optional(S.String), updated_at: S.optional(S.String), }), ).annotate({ identifier: "AuditLogExportJson" }); } } function __c86(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ id: S.String.pipe(T.Label()), }).pipe( T.Http({ method: "GET", uri: "/connect/applications/{id}/client_secrets", code: 200 }), ), ).annotate({ identifier: "ListApplicationCredentialsControllerRequest" }); case 1: return S.suspend(() => S.Struct({ object: S.String, id: S.String, secret_hint: S.String, last_used_at: S.NullOr(S.String), created_at: S.String, updated_at: S.String, }), ).annotate({ identifier: "ListApplicationCredentialsControllerResponseBodyItem" }); case 2: return S.Array(__S(689, __c86, 1)); case 3: return S.suspend(() => __S(690, __c86, 2).pipe(T.RawResponseRoot())).annotate({ identifier: "ListApplicationCredentialsControllerResponse", }); } } function __c87(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ before: S.optional(S.String.pipe(T.Query())), after: S.optional(S.String.pipe(T.Query())), limit: S.optional(S.Number.pipe(T.Query())), order: S.optional(S.String.pipe(T.Query())), registration_types: S.optional(__S(1968, __c246, 0).pipe(T.Query())), organization_id: S.optional(S.String.pipe(T.Query())), }).pipe(T.Http({ method: "GET", uri: "/connect/applications", code: 200 })), ).annotate({ identifier: "ListApplicationsControllerRequest" }); case 1: return S.Array(__S(290, __c36, 2)); case 2: return S.suspend(() => S.Struct({ object: S.optional(S.String), data: S.optional(__S(697, __c87, 1)), list_metadata: S.optional(__S(920, __c115, 0)), }), ).annotate({ identifier: "ConnectApplicationList" }); } } function __c88(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ before: S.optional(S.String.pipe(T.Query())), after: S.optional(S.String.pipe(T.Query())), limit: S.optional(S.Number.pipe(T.Query())), order: S.optional(S.String.pipe(T.Query())), }).pipe(T.Http({ method: "GET", uri: "/audit_logs/actions", code: 200 })), ).annotate({ identifier: "ListAuditLogValidatorsControllerRequest" }); case 1: return S.suspend(() => S.Struct({ object: S.optional(S.String), name: S.optional(S.String), schema: S.optional(__S(931, __c116, 3)), created_at: S.optional(S.String), updated_at: S.optional(S.String), }), ).annotate({ identifier: "AuditLogActionJson" }); case 2: return S.Array(__S(705, __c88, 1)); case 3: return S.suspend(() => S.Struct({ object: S.optional(S.String), list_metadata: S.optional(__S(920, __c115, 0)), data: S.optional(__S(706, __c88, 2)), }), ).annotate({ identifier: "ListAuditLogValidatorsControllerResponse" }); } } function __c89(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ before: S.optional(S.String.pipe(T.Query())), after: S.optional(S.String.pipe(T.Query())), limit: S.optional(S.Number.pipe(T.Query())), order: S.optional(S.String.pipe(T.Query())), }).pipe( T.Http({ method: "GET", uri: "/user_management/authkit_oauth_resources", code: 200 }), ), ).annotate({ identifier: "ListAuthkitOauthResourcesControllerRequest" }); case 1: return S.Array(__S(2040, __c255, 0)); case 2: return S.suspend(() => S.Struct({ object: S.optional(S.String), list_metadata: S.optional(__S(920, __c115, 0)), data: S.optional(__S(713, __c89, 1)), }), ).annotate({ identifier: "ListAuthkitOauthResourcesControllerResponse" }); } } function __c90(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ organization_membership_id: S.String.pipe(T.Label()), resource_id: S.String.pipe(T.Label()), before: S.optional(S.String.pipe(T.Query())), after: S.optional(S.String.pipe(T.Query())), limit: S.optional(S.Number.pipe(T.Query())), order: S.optional(S.String.pipe(T.Query())), }).pipe( T.Http({ method: "GET", uri: "/authorization/organization_memberships/{organization_membership_id}/resources/{resource_id}/permissions", code: 200, }), ), ).annotate({ identifier: "ListAuthorizationControllerEffectivePermissionsRequest" }); } } function __c91(j: number): any { switch (j) { case 0: return S.Array(__S(1160, __c145, 0)); case 1: return S.suspend(() => S.Struct({ object: S.optional(S.String), data: S.optional(__S(728, __c91, 0)), list_metadata: S.optional(__S(920, __c115, 0)), }), ).annotate({ identifier: "AuthorizationPermissionList" }); } } function __c92(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ organization_membership_id: S.String.pipe(T.Label()), resource_type_slug: S.String.pipe(T.Label()), external_id: S.String.pipe(T.Label()), before: S.optional(S.String.pipe(T.Query())), after: S.optional(S.String.pipe(T.Query())), limit: S.optional(S.Number.pipe(T.Query())), order: S.optional(S.String.pipe(T.Query())), }).pipe( T.Http({ method: "GET", uri: "/authorization/organization_memberships/{organization_membership_id}/resources/{resource_type_slug}/{external_id}/permissions", code: 200, }), ), ).annotate({ identifier: "ListAuthorizationControllerEffectivePermissionsByExternalIdRequest", }); } } function __c93(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ organization_membership_id: S.String.pipe(T.Label()), before: S.optional(S.String.pipe(T.Query())), after: S.optional(S.String.pipe(T.Query())), limit: S.optional(S.Number.pipe(T.Query())), order: S.optional(S.String.pipe(T.Query())), permission_slug: S.String.pipe(T.Query()), parent_resource_id: S.optional(S.String.pipe(T.Query())), parent_resource_type_slug: S.optional(S.String.pipe(T.Query())), parent_resource_external_id: S.optional(S.String.pipe(T.Query())), }).pipe( T.Http({ method: "GET", uri: "/authorization/organization_memberships/{organization_membership_id}/resources", code: 200, }), ), ).annotate({ identifier: "ListAuthorizationControllerResourcesForMembershipRequest" }); } } function __c94(j: number): any { switch (j) { case 0: return S.Array(__S(1272, __c159, 0)); case 1: return S.suspend(() => S.Struct({ object: S.optional(S.String), data: S.optional(__S(752, __c94, 0)), list_metadata: S.optional(__S(920, __c115, 0)), }), ).annotate({ identifier: "AuthorizationResourceList" }); } } function __c95(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ group_id: S.String.pipe(T.Label()), before: S.optional(S.String.pipe(T.Query())), after: S.optional(S.String.pipe(T.Query())), limit: S.optional(S.Number.pipe(T.Query())), order: S.optional(S.String.pipe(T.Query())), }).pipe( T.Http({ method: "GET", uri: "/authorization/groups/{group_id}/role_assignments", code: 200, }), ), ).annotate({ identifier: "ListAuthorizationGroupRoleAssignmentsControllerRequest" }); } } function __c96(j: number): any { switch (j) { case 0: return S.Array(__S(2056, __c257, 0)); case 1: return S.suspend(() => S.Struct({ object: S.String, data: __S(768, __c96, 0), list_metadata: __S(920, __c115, 0), }), ).annotate({ identifier: "GroupRoleAssignmentList" }); } } function __c97(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ organizationId: S.String.pipe(T.Label()), }).pipe( T.Http({ method: "GET", uri: "/authorization/organizations/{organizationId}/roles", code: 200, }), ), ).annotate({ identifier: "ListAuthorizationOrganizationRolesControllerRequest" }); } } function __c98(j: number): any { switch (j) { case 0: return S.Array(__S(248, __c31, 0)); case 1: return S.suspend(() => S.Struct({ object: S.optional(S.String), data: S.optional(__S(784, __c98, 0)), }), ).annotate({ identifier: "RoleList" }); } } function __c99(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ before: S.optional(S.String.pipe(T.Query())), after: S.optional(S.String.pipe(T.Query())), limit: S.optional(S.Number.pipe(T.Query())), order: S.optional(S.String.pipe(T.Query())), }).pipe(T.Http({ method: "GET", uri: "/authorization/permissions", code: 200 })), ).annotate({ identifier: "ListAuthorizationPermissionsControllerRequest" }); } } function __c100(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ id: S.String.pipe(T.Label()), }).pipe( T.Http({ method: "GET", uri: "/organizations/{id}/audit_logs_retention", code: 200 }), ), ).annotate({ identifier: "AuditLogsRetentionControllerAuditLogsRetentionRequest" }); } } function __c101(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ retention_period_in_days: S.optional(S.NullOr(S.Number)), }), ).annotate({ identifier: "AuditLogsRetentionJson" }); } } function __c102(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ organization_id: S.String.pipe(T.Label()), resource_type_slug: S.String.pipe(T.Label()), external_id: S.String.pipe(T.Label()), before: S.optional(S.String.pipe(T.Query())), after: S.optional(S.String.pipe(T.Query())), limit: S.optional(S.Number.pipe(T.Query())), order: S.optional(S.String.pipe(T.Query())), permission_slug: S.String.pipe(T.Query()), assignment: S.optional(S.String.pipe(T.Query())), }).pipe( T.Http({ method: "GET", uri: "/authorization/organizations/{organization_id}/resources/{resource_type_slug}/{external_id}/organization_memberships", code: 200, }), ), ).annotate({ identifier: "ListAuthorizationResourcesByExternalIdControllerOrganizationMembershipsForResourceByExternalIdRequest", }); } } function __c103(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ object: S.String, id: S.String, user_id: S.String, organization_id: S.String, status: S.String, directory_managed: S.Boolean, organization_name: S.optional(S.String), custom_attributes: S.optional(__S(936, __c117, 0)), created_at: S.String, updated_at: S.String, user: __S(2472, __c309, 0), }), ).annotate({ identifier: "UserlandUserOrganizationMembershipBaseWithUser" }); case 1: return S.Array(__S(824, __c103, 0)); case 2: return S.suspend(() => S.Struct({ object: S.String, data: __S(825, __c103, 1), list_metadata: __S(920, __c115, 0), }), ).annotate({ identifier: "UserlandUserOrganizationMembershipBaseWithUserList" }); } } function __c104(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ before: S.optional(S.String.pipe(T.Query())), after: S.optional(S.String.pipe(T.Query())), limit: S.optional(S.Number.pipe(T.Query())), order: S.optional(S.String.pipe(T.Query())), organization_id: S.optional(S.String.pipe(T.Query())), resource_type_slug: S.optional(S.String.pipe(T.Query())), resource_external_id: S.optional(S.String.pipe(T.Query())), parent_resource_id: S.optional(S.String.pipe(T.Query())), parent_resource_type_slug: S.optional(S.String.pipe(T.Query())), parent_external_id: S.optional(S.String.pipe(T.Query())), }).pipe(T.Http({ method: "GET", uri: "/authorization/resources", code: 200 })), ).annotate({ identifier: "ListAuthorizationResourcesControllerRequest" }); } } function __c105(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ resource_id: S.String.pipe(T.Label()), before: S.optional(S.String.pipe(T.Query())), after: S.optional(S.String.pipe(T.Query())), limit: S.optional(S.Number.pipe(T.Query())), order: S.optional(S.String.pipe(T.Query())), permission_slug: S.String.pipe(T.Query()), assignment: S.optional(S.String.pipe(T.Query())), }).pipe( T.Http({ method: "GET", uri: "/authorization/resources/{resource_id}/organization_memberships", code: 200, }), ), ).annotate({ identifier: "ListAuthorizationResourcesControllerOrganizationMembershipsForResourceRequest", }); } } function __c106(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ organization_membership_id: S.String.pipe(T.Label()), before: S.optional(S.String.pipe(T.Query())), after: S.optional(S.String.pipe(T.Query())), limit: S.optional(S.Number.pipe(T.Query())), order: S.optional(S.String.pipe(T.Query())), resource_id: S.optional(S.String.pipe(T.Query())), resource_external_id: S.optional(S.String.pipe(T.Query())), resource_type_slug: S.optional(S.String.pipe(T.Query())), }).pipe( T.Http({ method: "GET", uri: "/authorization/organization_memberships/{organization_membership_id}/role_assignments", code: 200, }), ), ).annotate({ identifier: "ListAuthorizationRoleAssignmentsControllerRoleAssignmentsRequest", }); } } function __c107(j: number): any { switch (j) { case 0: return S.Array(__S(545, __c68, 1)); case 1: return S.suspend(() => S.Struct({ object: S.String, data: __S(856, __c107, 0), list_metadata: __S(920, __c115, 0), }), ).annotate({ identifier: "UserRoleAssignmentList" }); } } function __c108(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ resource_id: S.String.pipe(T.Label()), before: S.optional(S.String.pipe(T.Query())), after: S.optional(S.String.pipe(T.Query())), limit: S.optional(S.Number.pipe(T.Query())), order: S.optional(S.String.pipe(T.Query())), role_slug: S.optional(S.String.pipe(T.Query())), }).pipe( T.Http({ method: "GET", uri: "/authorization/resources/{resource_id}/role_assignments", code: 200, }), ), ).annotate({ identifier: "ListAuthorizationRoleAssignmentsControllerRoleAssignmentsForResourceRequest", }); } } function __c109(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ organization_id: S.String.pipe(T.Label()), resource_type_slug: S.String.pipe(T.Label()), external_id: S.String.pipe(T.Label()), before: S.optional(S.String.pipe(T.Query())), after: S.optional(S.String.pipe(T.Query())), limit: S.optional(S.Number.pipe(T.Query())), order: S.optional(S.String.pipe(T.Query())), role_slug: S.optional(S.String.pipe(T.Query())), }).pipe( T.Http({ method: "GET", uri: "/authorization/organizations/{organization_id}/resources/{resource_type_slug}/{external_id}/role_assignments", code: 200, }), ), ).annotate({ identifier: "ListAuthorizationRoleAssignmentsControllerRoleAssignmentsForResourceByExternalIdRequest", }); } } function __c110(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({}).pipe(T.Http({ method: "GET", uri: "/authorization/roles", code: 200 })), ).annotate({ identifier: "ListAuthorizationRolesControllerRequest" }); } } function __c111(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ user_id: S.String.pipe(T.Label()), before: S.optional(S.String.pipe(T.Query())), after: S.optional(S.String.pipe(T.Query())), limit: S.optional(S.Number.pipe(T.Query())), order: S.optional(S.String.pipe(T.Query())), }).pipe( T.Http({ method: "GET", uri: "/user_management/users/{user_id}/authorized_applications", code: 200, }), ), ).annotate({ identifier: "ListAuthorizedApplicationsControllerRequest" }); case 1: return S.suspend(() => S.Struct({ object: S.String, id: S.String, granted_scopes: __S(2400, __c300, 0), oauth_resource: S.optional(S.String), application: __S(290, __c36, 2), }), ).annotate({ identifier: "AuthorizedConnectApplicationListDataItem" }); case 2: return S.Array(__S(889, __c111, 1)); case 3: return S.suspend(() => S.Struct({ object: S.optional(S.String), data: S.optional(__S(890, __c111, 2)), list_metadata: S.optional(__S(920, __c115, 0)), }), ).annotate({ identifier: "AuthorizedConnectApplicationList" }); } } function __c112(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ before: S.optional(S.String.pipe(T.Query())), after: S.optional(S.String.pipe(T.Query())), limit: S.optional(S.Number.pipe(T.Query())), order: S.optional(S.String.pipe(T.Query())), connection_type: S.optional(S.String.pipe(T.Query())), domain: S.optional(S.String.pipe(T.Query())), organization_id: S.optional(S.String.pipe(T.Query())), search: S.optional(S.String.pipe(T.Query())), }).pipe(T.Http({ method: "GET", uri: "/connections", code: 200 })), ).annotate({ identifier: "ListConnectionsControllerRequest" }); case 1: return S.Array(__S(1938, __c242, 2)); case 2: return S.suspend(() => S.Struct({ object: S.optional(S.String), data: S.optional(__S(897, __c112, 1)), list_metadata: S.optional(__S(920, __c115, 0)), }), ).annotate({ identifier: "ConnectionList" }); } } function __c113(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ before: S.optional(S.String.pipe(T.Query())), after: S.optional(S.String.pipe(T.Query())), limit: S.optional(S.Number.pipe(T.Query())), order: S.optional(S.String.pipe(T.Query())), }).pipe(T.Http({ method: "GET", uri: "/user_management/cors_origins", code: 200 })), ).annotate({ identifier: "ListCorsOriginsControllerRequest" }); case 1: return S.Array(__S(2128, __c266, 0)); case 2: return S.suspend(() => S.Struct({ object: S.optional(S.String), list_metadata: S.optional(__S(920, __c115, 0)), data: S.optional(__S(905, __c113, 1)), }), ).annotate({ identifier: "ListCorsOriginsControllerResponse" }); } } function __c114(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ actionName: S.String.pipe(T.Label()), before: S.optional(S.String.pipe(T.Query())), after: S.optional(S.String.pipe(T.Query())), limit: S.optional(S.Number.pipe(T.Query())), order: S.optional(S.String.pipe(T.Query())), }).pipe( T.Http({ method: "GET", uri: "/audit_logs/actions/{actionName}/schemas", code: 200 }), ), ).annotate({ identifier: "AuditLogValidatorVersionsControllerSchemasRequest" }); case 1: return S.Array(__S(931, __c116, 3)); case 2: return S.suspend(() => S.Struct({ object: S.optional(S.String), list_metadata: S.optional(__S(920, __c115, 0)), data: S.optional(__S(913, __c114, 1)), }), ).annotate({ identifier: "AuditLogValidatorVersionsControllerSchemasResponse" }); } } function __c115(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ before: S.NullOr(S.String), after: S.NullOr(S.String), }), ).annotate({ identifier: "AuditLogValidatorVersionsControllerSchemasResponseListMetadata" }); } } function __c116(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ metadata: __S(936, __c117, 0), }), ).annotate({ identifier: "AuditLogSchemaJsonActor" }); case 1: return S.suspend(() => S.Struct({ type: S.String, metadata: S.optional(__S(936, __c117, 0)), }), ).annotate({ identifier: "AuditLogSchemaJsonTargetsItem" }); case 2: return S.Array(__S(929, __c116, 1)); case 3: return S.suspend(() => S.Struct({ object: S.optional(S.String), version: S.optional(S.Number), actor: S.optional(__S(928, __c116, 0)), targets: S.optional(__S(930, __c116, 2)), metadata: S.optional(__S(936, __c117, 0)), created_at: S.optional(S.String), }), ).annotate({ identifier: "AuditLogSchemaJson" }); } } function __c117(j: number): any { switch (j) { case 0: return S.Record(S.String, S.Unknown); } } function __c118(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ before: S.optional(S.String.pipe(T.Query())), after: S.optional(S.String.pipe(T.Query())), limit: S.optional(S.Number.pipe(T.Query())), order: S.optional(S.String.pipe(T.Query())), ownership: S.optional(S.String.pipe(T.Query())), }).pipe(T.Http({ method: "GET", uri: "/data-integrations", code: 200 })), ).annotate({ identifier: "ListDataIntegrationsManagementControllerDataIntegrationsRequest" }); case 1: return S.Array(__S(2171, __c271, 3)); case 2: return S.suspend(() => S.Struct({ object: S.String, data: __S(945, __c118, 1), list_metadata: __S(920, __c115, 0), }), ).annotate({ identifier: "DataIntegrationList" }); } } function __c119(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ before: S.optional(S.String.pipe(T.Query())), after: S.optional(S.String.pipe(T.Query())), limit: S.optional(S.Number.pipe(T.Query())), order: S.optional(S.String.pipe(T.Query())), organization_id: S.optional(S.String.pipe(T.Query())), search: S.optional(S.String.pipe(T.Query())), domain: S.optional(S.String.pipe(T.Query())), }).pipe(T.Http({ method: "GET", uri: "/directories", code: 200 })), ).annotate({ identifier: "ListDirectoriesControllerRequest" }); case 1: return S.Array(__S(34, __c4, 2)); case 2: return S.suspend(() => S.Struct({ object: S.optional(S.String), data: S.optional(__S(953, __c119, 1)), list_metadata: S.optional(__S(920, __c115, 0)), }), ).annotate({ identifier: "DirectoryList" }); } } function __c120(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ before: S.optional(S.String.pipe(T.Query())), after: S.optional(S.String.pipe(T.Query())), limit: S.optional(S.Number.pipe(T.Query())), order: S.optional(S.String.pipe(T.Query())), directory: S.optional(S.String.pipe(T.Query())), user: S.optional(S.String.pipe(T.Query())), }).pipe(T.Http({ method: "GET", uri: "/directory_groups", code: 200 })), ).annotate({ identifier: "ListDirectoryGroupsControllerRequest" }); case 1: return S.suspend(() => S.Struct({ object: S.optional(S.String), data: S.optional(__S(64, __c8, 0)), list_metadata: S.optional(__S(920, __c115, 0)), }), ).annotate({ identifier: "DirectoryGroupList" }); } } function __c121(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ before: S.optional(S.String.pipe(T.Query())), after: S.optional(S.String.pipe(T.Query())), limit: S.optional(S.Number.pipe(T.Query())), order: S.optional(S.String.pipe(T.Query())), directory: S.optional(S.String.pipe(T.Query())), group: S.optional(S.String.pipe(T.Query())), idp_id: S.optional(S.String.pipe(T.Query())), email: S.optional(S.String.pipe(T.Query())), }).pipe(T.Http({ method: "GET", uri: "/directory_users", code: 200 })), ).annotate({ identifier: "ListDirectoryUsersControllerRequest" }); case 1: return S.Array(__S(74, __c9, 2)); case 2: return S.suspend(() => S.Struct({ object: S.optional(S.String), data: S.optional(__S(969, __c121, 1)), list_metadata: S.optional(__S(920, __c115, 0)), }), ).annotate({ identifier: "DirectoryUserList" }); } } function __c122(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ before: S.optional(S.String.pipe(T.Query())), after: S.optional(S.String.pipe(T.Query())), limit: S.optional(S.Number.pipe(T.Query())), order: S.optional(S.String.pipe(T.Query())), events: __S(2400, __c300, 0).pipe(T.Query()), range_start: S.optional(S.String.pipe(T.Query())), range_end: S.optional(S.String.pipe(T.Query())), organization_id: S.optional(S.String.pipe(T.Query())), }).pipe(T.Http({ method: "GET", uri: "/events", code: 200 })), ).annotate({ identifier: "ListEventsControllerRequest" }); case 1: return S.suspend(() => S.Struct({ object: S.String, id: S.String, event: S.String, data: __S(936, __c117, 0), created_at: S.String, context: S.optional(__S(936, __c117, 0)), }), ).annotate({ identifier: "EventSchema" }); case 2: return S.Array(__S(977, __c122, 1)); case 3: return S.suspend(() => S.Struct({ after: S.NullOr(S.String), }), ).annotate({ identifier: "EventListListMetadata" }); case 4: return S.suspend(() => S.Struct({ object: S.optional(S.String), data: S.optional(__S(978, __c122, 2)), list_metadata: S.optional(__S(979, __c122, 3)), }), ).annotate({ identifier: "EventList" }); } } function __c123(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ before: S.optional(S.String.pipe(T.Query())), after: S.optional(S.String.pipe(T.Query())), limit: S.optional(S.Number.pipe(T.Query())), order: S.optional(S.String.pipe(T.Query())), }).pipe(T.Http({ method: "GET", uri: "/feature-flags", code: 200 })), ).annotate({ identifier: "ListFeatureFlagsControllerRequest" }); } } function __c124(j: number): any { switch (j) { case 0: return S.Array(__S(128, __c16, 0)); case 1: return S.suspend(() => S.Struct({ object: S.optional(S.String), data: S.optional(__S(992, __c124, 0)), list_metadata: S.optional(__S(920, __c115, 0)), }), ).annotate({ identifier: "FlagList" }); } } function __c125(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ organizationId: S.String.pipe(T.Label()), groupId: S.String.pipe(T.Label()), before: S.optional(S.String.pipe(T.Query())), after: S.optional(S.String.pipe(T.Query())), limit: S.optional(S.Number.pipe(T.Query())), order: S.optional(S.String.pipe(T.Query())), }).pipe( T.Http({ method: "GET", uri: "/organizations/{organizationId}/groups/{groupId}/organization-memberships", code: 200, }), ), ).annotate({ identifier: "ListGroupMembershipsControllerMembersRequest" }); case 1: return S.suspend(() => S.Struct({ object: S.String, id: S.String, user_id: S.String, organization_id: S.String, status: S.String, directory_managed: S.Boolean, organization_name: S.optional(S.String), custom_attributes: S.optional(__S(936, __c117, 0)), created_at: S.String, updated_at: S.String, }), ).annotate({ identifier: "UserlandUserOrganizationMembershipBaseListDataItem" }); case 2: return S.Array(__S(1001, __c125, 1)); case 3: return S.suspend(() => S.Struct({ object: S.optional(S.String), data: S.optional(__S(1002, __c125, 2)), list_metadata: S.optional(__S(920, __c115, 0)), }), ).annotate({ identifier: "UserlandUserOrganizationMembershipBaseList" }); } } function __c126(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ organizationId: S.String.pipe(T.Label()), before: S.optional(S.String.pipe(T.Query())), after: S.optional(S.String.pipe(T.Query())), limit: S.optional(S.Number.pipe(T.Query())), order: S.optional(S.String.pipe(T.Query())), search: S.optional(S.String.pipe(T.Query())), }).pipe( T.Http({ method: "GET", uri: "/organizations/{organizationId}/groups", code: 200 }), ), ).annotate({ identifier: "ListGroupsControllerRequest" }); } } function __c127(j: number): any { switch (j) { case 0: return S.Array(__S(2640, __c330, 0)); case 1: return S.suspend(() => S.Struct({ object: S.optional(S.String), data: S.optional(__S(1016, __c127, 0)), list_metadata: S.optional(__S(920, __c115, 0)), }), ).annotate({ identifier: "GroupList" }); } } function __c128(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ organization_id: S.String.pipe(T.Label()), }).pipe( T.Http({ method: "GET", uri: "/organizations/{organization_id}/it_contacts", code: 200 }), ), ).annotate({ identifier: "ListItContactsControllerRequest" }); case 1: return S.Array(__S(2224, __c278, 0)); case 2: return S.suspend(() => S.Struct({ object: S.String, data: __S(1025, __c128, 1), list_metadata: __S(920, __c115, 0), }), ).annotate({ identifier: "ItContactList" }); } } function __c129(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ organizationId: S.String.pipe(T.Label()), before: S.optional(S.String.pipe(T.Query())), after: S.optional(S.String.pipe(T.Query())), limit: S.optional(S.Number.pipe(T.Query())), order: S.optional(S.String.pipe(T.Query())), }).pipe( T.Http({ method: "GET", uri: "/organizations/{organizationId}/api_keys", code: 200 }), ), ).annotate({ identifier: "ListOrganizationApiKeysControllerRequest" }); case 1: return S.suspend(() => S.Struct({ object: S.String, id: S.String, owner: __S(2272, __c284, 0), name: S.String, obfuscated_value: S.String, last_used_at: S.NullOr(S.String), expires_at: S.NullOr(S.String), permissions: __S(2400, __c300, 0), created_at: S.String, updated_at: S.String, }), ).annotate({ identifier: "OrganizationApiKey" }); case 2: return S.Array(__S(1033, __c129, 1)); case 3: return S.suspend(() => S.Struct({ object: S.String, data: __S(1034, __c129, 2), list_metadata: __S(920, __c115, 0), }), ).annotate({ identifier: "OrganizationApiKeyList" }); } } function __c130(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ id: S.String.pipe(T.Label()), sms_template: S.optional(S.String), }).pipe(T.Http({ method: "POST", uri: "/auth/factors/{id}/challenge", code: 200 })), ).annotate({ identifier: "AuthenticationFactorsControllerChallengeRequest" }); } } function __c131(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ object: S.optional(S.String), id: S.optional(S.String), expires_at: S.optional(S.String), code: S.optional(S.String), authentication_factor_id: S.optional(S.String), created_at: S.optional(S.String), updated_at: S.optional(S.String), }), ).annotate({ identifier: "AuthenticationChallenge" }); } } function __c132(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ organization_id: S.String.pipe(T.Label()), before: S.optional(S.String.pipe(T.Query())), after: S.optional(S.String.pipe(T.Query())), limit: S.optional(S.Number.pipe(T.Query())), order: S.optional(S.String.pipe(T.Query())), }).pipe( T.Http({ method: "GET", uri: "/organizations/{organization_id}/authorized_applications", code: 200, }), ), ).annotate({ identifier: "ListOrganizationAuthorizedApplicationsControllerRequest" }); case 1: return S.suspend(() => S.Struct({ object: S.String, id: S.String, granted_scopes: __S(2400, __c300, 0), oauth_resource: S.optional(S.String), application: __S(290, __c36, 2), user_id: S.String, }), ).annotate({ identifier: "OrganizationAuthorizedConnectApplicationListDataItem" }); case 2: return S.Array(__S(1057, __c132, 1)); case 3: return S.suspend(() => S.Struct({ object: S.String, data: __S(1058, __c132, 2), list_metadata: __S(920, __c115, 0), }), ).annotate({ identifier: "OrganizationAuthorizedConnectApplicationList" }); } } function __c133(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ organizationId: S.String.pipe(T.Label()), before: S.optional(S.String.pipe(T.Query())), after: S.optional(S.String.pipe(T.Query())), limit: S.optional(S.Number.pipe(T.Query())), order: S.optional(S.String.pipe(T.Query())), }).pipe( T.Http({ method: "GET", uri: "/organizations/{organizationId}/feature-flags", code: 200, }), ), ).annotate({ identifier: "ListOrganizationFeatureFlagsControllerRequest" }); } } function __c134(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ omId: S.String.pipe(T.Label()), before: S.optional(S.String.pipe(T.Query())), after: S.optional(S.String.pipe(T.Query())), limit: S.optional(S.Number.pipe(T.Query())), order: S.optional(S.String.pipe(T.Query())), }).pipe( T.Http({ method: "GET", uri: "/user_management/organization_memberships/{omId}/groups", code: 200, }), ), ).annotate({ identifier: "ListOrganizationMembershipGroupsControllerGroupsRequest" }); } } function __c135(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ before: S.optional(S.String.pipe(T.Query())), after: S.optional(S.String.pipe(T.Query())), limit: S.optional(S.Number.pipe(T.Query())), order: S.optional(S.String.pipe(T.Query())), domains: S.optional(__S(2400, __c300, 0).pipe(T.Query())), search: S.optional(S.String.pipe(T.Query())), }).pipe(T.Http({ method: "GET", uri: "/organizations", code: 200 })), ).annotate({ identifier: "ListOrganizationsControllerRequest" }); case 1: return S.Array(__S(2305, __c288, 1)); case 2: return S.suspend(() => S.Struct({ object: S.optional(S.String), data: S.optional(__S(1081, __c135, 1)), list_metadata: S.optional(__S(920, __c115, 0)), }), ).annotate({ identifier: "OrganizationList" }); } } function __c136(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ organizationId: S.String.pipe(T.Label()), }).pipe( T.Http({ method: "GET", uri: "/organizations/{organizationId}/data_integration_configurations", code: 200, }), ), ).annotate({ identifier: "ListProviderControllerForOrganizationRequest" }); case 1: return S.Array(__S(1097, __c137, 1)); case 2: return S.suspend(() => S.Struct({ object: S.String, data: __S(1089, __c136, 1), }), ).annotate({ identifier: "DataIntegrationConfigurationListResponse" }); } } function __c137(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ credentials_type: S.String, has_credentials: S.Boolean, client_id: S.NullOr(S.String), client_secret_last_four: S.NullOr(S.String), redirect_uri: S.String, }), ).annotate({ identifier: "DataIntegrationCredentials2" }); case 1: return S.suspend(() => S.Struct({ object: S.String, id: S.String, organization_id: S.String, slug: S.String, name: S.String, enabled: S.Boolean, scopes: S.NullOr(__S(2400, __c300, 0)), config: __S(416, __c52, 0), created_at: S.String, updated_at: S.String, credentials: S.optional(__S(1096, __c137, 0)), }), ).annotate({ identifier: "DataIntegrationConfigurationResponse" }); } } function __c138(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ before: S.optional(S.String.pipe(T.Query())), after: S.optional(S.String.pipe(T.Query())), limit: S.optional(S.Number.pipe(T.Query())), order: S.optional(S.String.pipe(T.Query())), }).pipe(T.Http({ method: "GET", uri: "/user_management/redirect_uris", code: 200 })), ).annotate({ identifier: "ListRedirectUrisControllerRequest" }); case 1: return S.Array(__S(2336, __c292, 0)); case 2: return S.suspend(() => S.Struct({ object: S.optional(S.String), list_metadata: S.optional(__S(920, __c115, 0)), data: S.optional(__S(1105, __c138, 1)), }), ).annotate({ identifier: "ListRedirectUrisControllerResponse" }); } } function __c139(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ connectionId: S.String.pipe(T.Label()), }).pipe( T.Http({ method: "GET", uri: "/connections/{connectionId}/saml_idp_signing_certs", code: 200, }), ), ).annotate({ identifier: "ListSamlIdpSigningCertificatesControllerRequest" }); } } function __c140(j: number): any { switch (j) { case 0: return S.Array(__S(2352, __c294, 0)); case 1: return S.suspend(() => S.Struct({ object: S.String, data: __S(1120, __c140, 0), }), ).annotate({ identifier: "SamlIdpSigningCertificateList" }); } } function __c141(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ connectionId: S.String.pipe(T.Label()), }).pipe( T.Http({ method: "GET", uri: "/connections/{connectionId}/saml_sp_encryption_certs", code: 200, }), ), ).annotate({ identifier: "ListSamlSpEncryptionCertificatesControllerRequest" }); } } function __c142(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ userId: S.String.pipe(T.Label()), before: S.optional(S.String.pipe(T.Query())), after: S.optional(S.String.pipe(T.Query())), limit: S.optional(S.Number.pipe(T.Query())), order: S.optional(S.String.pipe(T.Query())), organization_id: S.optional(S.String.pipe(T.Query())), }).pipe( T.Http({ method: "GET", uri: "/user_management/users/{userId}/api_keys", code: 200 }), ), ).annotate({ identifier: "ListUserApiKeysControllerRequest" }); case 1: return S.suspend(() => S.Struct({ object: S.String, id: S.String, owner: __S(2424, __c303, 0), name: S.String, obfuscated_value: S.String, last_used_at: S.NullOr(S.String), expires_at: S.NullOr(S.String), permissions: __S(2400, __c300, 0), created_at: S.String, updated_at: S.String, }), ).annotate({ identifier: "UserApiKey" }); case 2: return S.Array(__S(1137, __c142, 1)); case 3: return S.suspend(() => S.Struct({ object: S.String, data: __S(1138, __c142, 2), list_metadata: __S(920, __c115, 0), }), ).annotate({ identifier: "UserApiKeyList" }); } } function __c143(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ userId: S.String.pipe(T.Label()), before: S.optional(S.String.pipe(T.Query())), after: S.optional(S.String.pipe(T.Query())), limit: S.optional(S.Number.pipe(T.Query())), order: S.optional(S.String.pipe(T.Query())), }).pipe( T.Http({ method: "GET", uri: "/user_management/users/{userId}/feature-flags", code: 200, }), ), ).annotate({ identifier: "ListUserlandUserFeatureFlagsControllerRequest" }); } } function __c144(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ slug: S.String.pipe(T.Label()), }).pipe(T.Http({ method: "GET", uri: "/authorization/permissions/{slug}", code: 200 })), ).annotate({ identifier: "AuthorizationPermissionsControllerFindRequest" }); } } function __c145(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ object: S.optional(S.String), id: S.optional(S.String), slug: S.optional(S.String), name: S.optional(S.String), description: S.optional(S.NullOr(S.String)), system: S.optional(S.Boolean), resource_type_slug: S.optional(S.String), created_at: S.optional(S.String), updated_at: S.optional(S.String), }), ).annotate({ identifier: "AuthorizationPermission" }); } } function __c146(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ before: S.optional(S.String.pipe(T.Query())), after: S.optional(S.String.pipe(T.Query())), limit: S.optional(S.Number.pipe(T.Query())), order: S.optional(S.String.pipe(T.Query())), organization_id: S.optional(S.String.pipe(T.Query())), email: S.optional(S.String.pipe(T.Query())), }).pipe(T.Http({ method: "GET", uri: "/user_management/invitations", code: 200 })), ).annotate({ identifier: "ListUserlandUserInvitesControllerRequest" }); case 1: return S.Array(__S(2440, __c305, 0)); case 2: return S.suspend(() => S.Struct({ object: S.String, data: __S(1169, __c146, 1), list_metadata: __S(920, __c115, 0), }), ).annotate({ identifier: "UserlandUserInviteList" }); } } function __c147(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ before: S.optional(S.String.pipe(T.Query())), after: S.optional(S.String.pipe(T.Query())), limit: S.optional(S.Number.pipe(T.Query())), order: S.optional(S.String.pipe(T.Query())), organization_id: S.optional(S.String.pipe(T.Query())), statuses: S.optional(__S(1968, __c246, 0).pipe(T.Query())), user_id: S.optional(S.String.pipe(T.Query())), }).pipe( T.Http({ method: "GET", uri: "/user_management/organization_memberships", code: 200 }), ), ).annotate({ identifier: "ListUserlandUserOrganizationMembershipsControllerRequest" }); case 1: return S.Array(__S(512, __c64, 0)); case 2: return S.suspend(() => S.Struct({ object: S.String, data: __S(1177, __c147, 1), list_metadata: __S(920, __c115, 0), }), ).annotate({ identifier: "UserlandUserOrganizationMembershipList" }); } } function __c148(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ id: S.String.pipe(T.Label()), before: S.optional(S.String.pipe(T.Query())), after: S.optional(S.String.pipe(T.Query())), limit: S.optional(S.Number.pipe(T.Query())), order: S.optional(S.String.pipe(T.Query())), }).pipe(T.Http({ method: "GET", uri: "/user_management/users/{id}/sessions", code: 200 })), ).annotate({ identifier: "ListUserlandUserSessionsControllerRequest" }); case 1: return S.suspend(() => S.Struct({ object: S.String, id: S.String, impersonator: S.optional(__S(1192, __c149, 0)), ip_address: S.NullOr(S.String), organization_id: S.optional(S.String), user_agent: S.NullOr(S.String), user_id: S.String, auth_method: S.String, status: S.String, expires_at: S.String, ended_at: S.NullOr(S.String), created_at: S.String, updated_at: S.String, }), ).annotate({ identifier: "ListUserlandUserSessionsControllerResponseDataItem" }); case 2: return S.Array(__S(1185, __c148, 1)); case 3: return S.suspend(() => S.Struct({ object: S.optional(S.String), list_metadata: S.optional(__S(920, __c115, 0)), data: S.optional(__S(1186, __c148, 2)), }), ).annotate({ identifier: "ListUserlandUserSessionsControllerResponse" }); } } function __c149(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ email: S.String, reason: S.NullOr(S.String), }), ).annotate({ identifier: "ListUserlandUserSessionsControllerResponseDataItemImpersonator" }); } } function __c150(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({}).pipe(T.Http({ method: "GET", uri: "/user_management/waitlists", code: 200 })), ).annotate({ identifier: "ListWaitlistsControllerRequest" }); case 1: return S.Array(__S(1208, __c151, 0)); case 2: return S.suspend(() => S.Struct({ object: S.String, data: __S(1201, __c150, 1), list_metadata: __S(920, __c115, 0), }), ).annotate({ identifier: "ListWaitlistsControllerResponse" }); } } function __c151(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ object: S.String, id: S.String, created_at: S.String, updated_at: S.String, }), ).annotate({ identifier: "Waitlist" }); } } function __c152(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ id: S.String.pipe(T.Label()), before: S.optional(S.String.pipe(T.Query())), after: S.optional(S.String.pipe(T.Query())), limit: S.optional(S.Number.pipe(T.Query())), order: S.optional(S.String.pipe(T.Query())), state: S.optional(S.String.pipe(T.Query())), email: S.optional(S.String.pipe(T.Query())), }).pipe( T.Http({ method: "GET", uri: "/user_management/waitlists/{id}/entries", code: 200 }), ), ).annotate({ identifier: "ListWaitlistsControllerEntriesRequest" }); case 1: return S.Array(__S(424, __c53, 0)); case 2: return S.suspend(() => S.Struct({ object: S.optional(S.String), list_metadata: S.optional(__S(920, __c115, 0)), data: S.optional(__S(1217, __c152, 1)), }), ).annotate({ identifier: "ListWaitlistsControllerEntriesResponse" }); } } function __c153(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ before: S.optional(S.String.pipe(T.Query())), after: S.optional(S.String.pipe(T.Query())), limit: S.optional(S.Number.pipe(T.Query())), order: S.optional(S.String.pipe(T.Query())), }).pipe(T.Http({ method: "GET", uri: "/webhook_endpoints", code: 200 })), ).annotate({ identifier: "ListWebhookEndpointsControllerRequest" }); case 1: return S.Array(__S(2496, __c312, 0)); case 2: return S.suspend(() => S.Struct({ object: S.optional(S.String), data: S.optional(__S(1225, __c153, 1)), list_metadata: S.optional(__S(920, __c115, 0)), }), ).annotate({ identifier: "WebhookEndpointList" }); } } function __c154(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ token: S.String.pipe(T.Query()), }).pipe(T.Http({ method: "GET", uri: "/sso/logout", code: 200 })), ).annotate({ identifier: "LogoutSsoControllerRequest" }); } } function __c155(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ session_id: S.String.pipe(T.Query()), return_to: S.optional(S.String.pipe(T.Query())), }).pipe(T.Http({ method: "GET", uri: "/user_management/sessions/logout", code: 200 })), ).annotate({ identifier: "LogoutUserlandSessionsControllerRequest" }); } } function __c156(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ id: S.String.pipe(T.Label()), }).pipe(T.Http({ method: "GET", uri: "/organizations/{id}", code: 200 })), ).annotate({ identifier: "OrganizationsControllerFindRequest" }); } } function __c157(j: number): any { switch (j) { case 0: return S.Record(S.String, /*@__PURE__*/ S.NullOr(S.String)); case 1: return S.suspend(() => S.Struct({ standard_attributes: S.optional(__S(2112, __c264, 0)), custom_attributes: S.optional(__S(1256, __c157, 0)), }), ).annotate({ identifier: "PatchConnectionAttributeMapsDto" }); case 2: return S.suspend(() => S.Struct({ idp_metadata_url: S.optional(S.NullOr(S.String)), acs_url: S.optional(S.NullOr(S.String)), sp_entity_id: S.optional(S.NullOr(S.String)), idp_entity_id: S.optional(S.String), idp_sso_url: S.optional(S.String), }), ).annotate({ identifier: "PatchConnectionSamlOptionsDto" }); case 3: return S.suspend(() => S.Struct({ discovery_endpoint: S.optional(S.String), client_id: S.optional(S.String), client_secret: S.optional(S.String.pipe(T.SensitiveValue({}))), redirect_uri: S.optional(S.NullOr(S.String)), pkce: S.optional(S.Boolean), token_authentication_method: S.optional(S.String), id_token_signature_algorithm: S.optional(S.String), fetch_user_info: S.optional(S.Boolean), }), ).annotate({ identifier: "PatchConnectionOidcOptionsDto" }); case 4: return S.suspend(() => S.Struct({ id: S.String.pipe(T.Label()), name: S.optional(S.String), external_id: S.optional(S.NullOr(S.String)), connection_type: S.optional(S.String), attribute_maps: S.optional(__S(1257, __c157, 1)), saml_options: S.optional(__S(1258, __c157, 2)), oidc_options: S.optional(__S(1259, __c157, 3)), }).pipe(T.Http({ method: "PATCH", uri: "/connections/{id}", code: 200 })), ).annotate({ identifier: "PatchConnectionsControllerRequest" }); } } function __c158(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ resource_id: S.String.pipe(T.Label()), }).pipe( T.Http({ method: "GET", uri: "/authorization/resources/{resource_id}", code: 200 }), ), ).annotate({ identifier: "AuthorizationResourcesControllerFindByIdRequest" }); } } function __c159(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ object: S.optional(S.String), name: S.optional(S.String), description: S.optional(S.NullOr(S.String)), organization_id: S.optional(S.String), parent_resource_id: S.optional(S.NullOr(S.String)), id: S.optional(S.String), external_id: S.optional(S.String), resource_type_slug: S.optional(S.String), created_at: S.optional(S.String), updated_at: S.optional(S.String), }), ).annotate({ identifier: "AuthorizationResource" }); } } function __c160(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ organizationId: S.String.pipe(T.Label()), slug: S.String.pipe(T.Label()), enabled: S.optional(S.Boolean), scopes: S.optional(S.NullOr(__S(2400, __c300, 0))), client_id: S.optional(S.String), client_secret: S.optional(S.String.pipe(T.SensitiveValue({}))), config: S.optional(__S(416, __c52, 0)), }).pipe( T.Http({ method: "PUT", uri: "/organizations/{organizationId}/data_integration_configurations/{slug}", code: 200, }), ), ).annotate({ identifier: "ProviderControllerConfigureRequest" }); } } function __c161(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ ip_address: S.String, user_agent: S.String, email: S.String, auth_method: S.String, action: S.String, signals_id: S.optional(S.String), }).pipe(T.Http({ method: "POST", uri: "/radar/attempts", code: 200 })), ).annotate({ identifier: "RadarStandaloneControllerAssessRequest" }); case 1: return S.suspend(() => S.Struct({ verdict: S.optional(S.String), reason: S.optional(S.String), attempt_id: S.optional(S.String), control: S.optional(S.String), blocklist_type: S.optional(S.String), }), ).annotate({ identifier: "RadarStandaloneResponse" }); } } function __c162(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ type: S.String.pipe(T.Label()), action: S.String.pipe(T.Label()), entry: S.String, }).pipe(T.Http({ method: "DELETE", uri: "/radar/lists/{type}/{action}", code: 200 })), ).annotate({ identifier: "RadarStandaloneControllerDeleteRadarListEntryRequest" }); } } function __c163(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ type: S.String.pipe(T.Label()), action: S.String.pipe(T.Label()), entry: S.String, }).pipe(T.Http({ method: "POST", uri: "/radar/lists/{type}/{action}", code: 200 })), ).annotate({ identifier: "RadarStandaloneControllerUpdateRadarListRequest" }); case 1: return S.suspend(() => S.Struct({ message: S.optional(S.String), }), ).annotate({ identifier: "RadarListEntryAlreadyPresentResponse" }); } } function __c164(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ group_id: S.String.pipe(T.Label()), role_assignment_id: S.String.pipe(T.Label()), }).pipe( T.Http({ method: "DELETE", uri: "/authorization/groups/{group_id}/role_assignments/{role_assignment_id}", code: 200, }), ), ).annotate({ identifier: "RemoveAuthorizationGroupRoleAssignmentsControllerGroupRoleAssignmentRequest", }); } } function __c165(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ group_id: S.String.pipe(T.Label()), role_slug: S.String, resource_id: S.optional(S.String), resource_external_id: S.optional(S.String), resource_type_slug: S.optional(S.String), }).pipe( T.Http({ method: "DELETE", uri: "/authorization/groups/{group_id}/role_assignments", code: 200, }), ), ).annotate({ identifier: "RemoveAuthorizationGroupRoleAssignmentsControllerGroupRoleAssignmentsRequest", }); } } function __c166(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ organizationId: S.String.pipe(T.Label()), slug: S.String.pipe(T.Label()), permissionSlug: S.String.pipe(T.Label()), }).pipe( T.Http({ method: "DELETE", uri: "/authorization/organizations/{organizationId}/roles/{slug}/permissions/{permissionSlug}", code: 200, }), ), ).annotate({ identifier: "RemoveAuthorizationOrganizationRolePermissionsControllerPermissionRequest", }); } } function __c167(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ organization_membership_id: S.String.pipe(T.Label()), role_slug: S.String, resource_id: S.optional(S.String), resource_external_id: S.optional(S.String), resource_type_slug: S.optional(S.String), }).pipe( T.Http({ method: "DELETE", uri: "/authorization/organization_memberships/{organization_membership_id}/role_assignments", code: 200, }), ), ).annotate({ identifier: "RemoveAuthorizationRoleAssignmentsControllerRoleByCriteriaRequest", }); } } function __c168(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ organization_membership_id: S.String.pipe(T.Label()), role_assignment_id: S.String.pipe(T.Label()), }).pipe( T.Http({ method: "DELETE", uri: "/authorization/organization_memberships/{organization_membership_id}/role_assignments/{role_assignment_id}", code: 200, }), ), ).annotate({ identifier: "RemoveAuthorizationRoleAssignmentsControllerRoleByIdRequest" }); } } function __c169(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ organizationId: S.String.pipe(T.Label()), groupId: S.String.pipe(T.Label()), omId: S.String.pipe(T.Label()), }).pipe( T.Http({ method: "DELETE", uri: "/organizations/{organizationId}/groups/{groupId}/organization-memberships/{omId}", code: 200, }), ), ).annotate({ identifier: "RemoveGroupMembershipsControllerMemberRequest" }); } } function __c170(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ provider_scopes: S.optional(__S(2400, __c300, 0).pipe(T.Query())), provider_query_params: S.optional(__S(416, __c52, 0).pipe(T.Query())), client_id: S.String.pipe(T.Query()), domain: S.optional(S.String.pipe(T.Query())), provider: S.optional(S.String.pipe(T.Query())), redirect_uri: S.String.pipe(T.Query()), response_type: S.String.pipe(T.Query()), state: S.optional(S.String.pipe(T.Query())), connection: S.optional(S.String.pipe(T.Query())), organization: S.optional(S.String.pipe(T.Query())), domain_hint: S.optional(S.String.pipe(T.Query())), login_hint: S.optional(S.String.pipe(T.Query())), nonce: S.optional(S.String.pipe(T.Query())), prompt: S.optional(S.String.pipe(T.Query())), }).pipe(T.Http({ method: "GET", uri: "/sso/authorize", code: 200 })), ).annotate({ identifier: "AuthorizeSsoControllerRequest" }); } } function __c171(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ url: S.optional(S.String), }), ).annotate({ identifier: "SsoAuthorizeUrlResponse" }); } } function __c172(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ role_slug: S.String, resource_id: S.optional(S.String), resource_external_id: S.optional(S.String), resource_type_slug: S.optional(S.String), }), ).annotate({ identifier: "ReplaceGroupRoleAssignmentEntryDto" }); case 1: return S.Array(__S(1376, __c172, 0)); case 2: return S.suspend(() => S.Struct({ group_id: S.String.pipe(T.Label()), role_assignments: __S(1377, __c172, 1), }).pipe( T.Http({ method: "PUT", uri: "/authorization/groups/{group_id}/role_assignments", code: 200, }), ), ).annotate({ identifier: "ReplaceAuthorizationGroupRoleAssignmentsControllerGroupRoleAssignmentsRequest", }); } } function __c173(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ id: S.String.pipe(T.Label()), locale: S.optional(S.String), }).pipe( T.Http({ method: "POST", uri: "/user_management/invitations/{id}/resend", code: 200 }), ), ).annotate({ identifier: "ResendUserlandUserInvitesControllerRequest" }); } } function __c174(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ token: S.optional(S.String), new_password: S.optional(S.String.pipe(T.SensitiveValue({}))), }).pipe( T.Http({ method: "POST", uri: "/user_management/password_reset/confirm", code: 200 }), ), ).annotate({ identifier: "ResetUserlandUsersControllerPassword0Request" }); } } function __c175(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ user: S.optional(__S(2472, __c309, 0)), }), ).annotate({ identifier: "ResetPasswordResponse" }); } } function __c176(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ agent_instance_session_id: S.String.pipe(T.Label()), }).pipe( T.Http({ method: "POST", uri: "/agents/sessions/{agent_instance_session_id}/revoke", code: 200, }), ), ).annotate({ identifier: "RevokeAgentInstanceSessionsControllerRequest" }); } } function __c177(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ organization_id: S.String.pipe(T.Label()), contact_id: S.String.pipe(T.Label()), }).pipe( T.Http({ method: "POST", uri: "/organizations/{organization_id}/it_contacts/{contact_id}/revoke", code: 200, }), ), ).annotate({ identifier: "RevokeItContactsControllerRequest" }); } } function __c178(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ session_id: S.optional(S.String), }).pipe(T.Http({ method: "POST", uri: "/user_management/sessions/revoke", code: 200 })), ).annotate({ identifier: "RevokeUserlandSessionsControllerSessionRequest" }); } } function __c179(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ id: S.String.pipe(T.Label()), }).pipe( T.Http({ method: "POST", uri: "/user_management/invitations/{id}/revoke", code: 200 }), ), ).annotate({ identifier: "RevokeUserlandUserInvitesControllerRequest" }); } } function __c180(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ user_id: S.String, pending_authentication_token: S.String, phone_number: S.String, ip_address: S.optional(S.String), user_agent: S.optional(S.String), }).pipe(T.Http({ method: "POST", uri: "/user_management/radar_challenges", code: 200 })), ).annotate({ identifier: "SendPublicRadarChallengesControllerRadarSmsChallengeRequest" }); case 1: return S.suspend(() => S.Struct({ verification_id: S.String, phone_number: S.String, }), ).annotate({ identifier: "SendRadarSmsChallengeResponse" }); } } function __c181(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ id: S.String.pipe(T.Label()), new_email: S.optional(S.String), }).pipe( T.Http({ method: "POST", uri: "/user_management/users/{id}/email_change/send", code: 200, }), ), ).annotate({ identifier: "SendUserlandUsersControllerEmailChangeRequest" }); case 1: return S.suspend(() => S.Struct({ object: S.optional(S.String), user: S.optional(__S(2472, __c309, 0)), new_email: S.optional(S.String), expires_at: S.optional(S.String), created_at: S.optional(S.String), }), ).annotate({ identifier: "EmailChange" }); } } function __c182(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ id: S.String.pipe(T.Label()), }).pipe( T.Http({ method: "POST", uri: "/user_management/users/{id}/email_verification/send", code: 200, }), ), ).annotate({ identifier: "SendUserlandUsersControllerVerificationEmail0Request" }); } } function __c183(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ code_challenge_method: S.optional(S.String.pipe(T.Query())), code_challenge: S.optional(S.String.pipe(T.Query())), domain_hint: S.optional(S.String.pipe(T.Query())), connection_id: S.optional(S.String.pipe(T.Query())), provider_query_params: S.optional(__S(416, __c52, 0).pipe(T.Query())), provider_scopes: S.optional(__S(2400, __c300, 0).pipe(T.Query())), invitation_token: S.optional(S.String.pipe(T.Query())), max_age: S.optional(S.Number.pipe(T.Query())), screen_hint: S.optional(S.String.pipe(T.Query())), login_hint: S.optional(S.String.pipe(T.Query())), provider: S.optional(S.String.pipe(T.Query())), prompt: S.optional(S.String.pipe(T.Query())), state: S.optional(S.String.pipe(T.Query())), organization_id: S.optional(S.String.pipe(T.Query())), response_type: S.String.pipe(T.Query()), redirect_uri: S.String.pipe(T.Query()), client_id: S.String.pipe(T.Query()), }).pipe(T.Http({ method: "GET", uri: "/user_management/authorize", code: 200 })), ).annotate({ identifier: "AuthorizeUserlandSsoControllerRequest" }); } } function __c184(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({})).annotate({ identifier: "AuthorizeUserlandSsoControllerResponse", }); } } function __c185(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ organizationId: S.String.pipe(T.Label()), slug: S.String.pipe(T.Label()), permissions: S.optional(__S(2400, __c300, 0)), }).pipe( T.Http({ method: "PUT", uri: "/authorization/organizations/{organizationId}/roles/{slug}/permissions", code: 200, }), ), ).annotate({ identifier: "SetAuthorizationOrganizationRolePermissionsControllerPermissionsRequest", }); } } function __c186(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ slug: S.String.pipe(T.Label()), permissions: S.optional(__S(2400, __c300, 0)), }).pipe( T.Http({ method: "PUT", uri: "/authorization/roles/{slug}/permissions", code: 200 }), ), ).annotate({ identifier: "SetAuthorizationRolePermissionsControllerPermissionsRequest" }); } } function __c187(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ clientId: S.String.pipe(T.Label()), }).pipe(T.Http({ method: "GET", uri: "/sso/jwks/{clientId}", code: 200 })), ).annotate({ identifier: "SsoControllerJsonWebKeySetRequest" }); case 1: return S.suspend(() => S.Struct({ alg: S.String, kty: S.String, use: S.String, x5c: __S(2400, __c300, 0), n: S.String, e: S.String, kid: S.String, x5t_S256: S.String.pipe(T.Body("x5t#S256")), }), ).annotate({ identifier: "JwksResponseKeysItem" }); case 2: return S.Array(__S(1497, __c187, 1)); case 3: return S.suspend(() => S.Struct({ keys: S.optional(__S(1498, __c187, 2)), }), ).annotate({ identifier: "JwksResponse" }); } } function __c188(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ profile_id: S.String, }).pipe(T.Http({ method: "POST", uri: "/sso/logout/authorize", code: 200 })), ).annotate({ identifier: "SsoControllerLogoutAuthorizeRequest" }); case 1: return S.suspend(() => S.Struct({ logout_url: S.optional(S.String), logout_token: S.optional(S.String), }), ).annotate({ identifier: "SsoLogoutAuthorizeResponse" }); } } function __c189(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ client_id: S.String.pipe(T.Query()), client_secret: S.String.pipe(T.Query()), code: S.optional(S.String.pipe(T.Query())), grant_type: S.String.pipe(T.Query()), code_verifier: S.optional(S.String), subject_token: S.optional(S.String), subject_token_type: S.optional(S.String), organization_id: S.optional(S.String), }).pipe(T.Http({ method: "POST", uri: "/sso/token", code: 200 })), ).annotate({ identifier: "SsoControllerTokenRequest" }); case 1: return S.suspend(() => S.Struct({ token_type: S.optional(S.String), access_token: S.optional(S.String.pipe(T.SensitiveValue({}))), expires_in: S.optional(S.Number), profile: S.optional(__S(448, __c56, 0)), oauth_tokens: S.optional(__S(1520, __c190, 0)), }), ).annotate({ identifier: "SsoTokenResponse" }); } } function __c190(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ provider: S.String, refresh_token: S.String.pipe(T.SensitiveValue({})), access_token: S.String.pipe(T.SensitiveValue({})), expires_at: S.Number, scopes: __S(2400, __c300, 0), }), ).annotate({ identifier: "SsoTokenResponseOauthTokens" }); } } function __c191(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ id: S.String.pipe(T.Label()), }).pipe(T.Http({ method: "POST", uri: "/directories/{id}/sync", code: 200 })), ).annotate({ identifier: "SyncDirectoriesControllerDirectoryRequest" }); } } function __c192(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ max_age_seconds: S.optional(S.Number), access_token_ttl_seconds: S.optional(S.Number), refresh_token_ttl_seconds: S.optional(S.Number), }), ).annotate({ identifier: "UpdateAgentBlueprintsControllerRequestSessionSettings" }); case 1: return S.suspend(() => S.Struct({ agent_blueprint_id: S.String.pipe(T.Label()), name: S.optional(S.String), description: S.optional(S.NullOr(S.String)), permissions: S.optional(__S(2400, __c300, 0)), invocable_by: S.optional(__S(1960, __c245, 0)), invocable_as: S.optional(__S(1961, __c245, 1)), session_settings: S.optional(__S(1536, __c192, 0)), }).pipe( T.Http({ method: "PATCH", uri: "/agents/blueprints/{agent_blueprint_id}", code: 200 }), ), ).annotate({ identifier: "UpdateAgentBlueprintsControllerRequest" }); } } function __c193(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ uri: S.optional(S.String), default: S.optional(S.NullOr(S.Boolean)), }), ).annotate({ identifier: "RedirectUriDto" }); case 1: return S.Array(__S(1544, __c193, 0)); case 2: return S.suspend(() => S.Struct({ id: S.String.pipe(T.Label()), name: S.optional(S.String), description: S.optional(S.NullOr(S.String)), scopes: S.optional(S.NullOr(__S(2400, __c300, 0))), redirect_uris: S.optional(S.NullOr(__S(1545, __c193, 1))), }).pipe(T.Http({ method: "PUT", uri: "/connect/applications/{id}", code: 200 })), ).annotate({ identifier: "UpdateApplicationsControllerRequest" }); } } function __c194(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ id: S.String.pipe(T.Label()), body: S.Unknown.pipe(T.HttpBody()), }).pipe( T.Http({ method: "PUT", uri: "/organizations/{id}/audit_logs_retention", code: 200 }), ), ).annotate({ identifier: "UpdateAuditLogsRetentionControllerAuditLogsRetentionRequest" }); } } function __c195(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ organizationId: S.String.pipe(T.Label()), slug: S.String.pipe(T.Label()), name: S.optional(S.String), description: S.optional(S.NullOr(S.String)), }).pipe( T.Http({ method: "PATCH", uri: "/authorization/organizations/{organizationId}/roles/{slug}", code: 200, }), ), ).annotate({ identifier: "UpdateAuthorizationOrganizationRolesControllerRequest" }); } } function __c196(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ organization_membership_id: S.String.pipe(T.Label()), permission_slug: S.String, resource_id: S.optional(S.String), resource_external_id: S.optional(S.String), resource_type_slug: S.optional(S.String), }).pipe( T.Http({ method: "POST", uri: "/authorization/organization_memberships/{organization_membership_id}/check", code: 200, }), ), ).annotate({ identifier: "CheckAuthorizationControllerRequest" }); case 1: return S.suspend(() => S.Struct({ authorized: S.optional(S.Boolean), }), ).annotate({ identifier: "AuthorizationCheck" }); } } function __c197(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ slug: S.String.pipe(T.Label()), name: S.optional(S.String), description: S.optional(S.NullOr(S.String)), }).pipe(T.Http({ method: "PATCH", uri: "/authorization/permissions/{slug}", code: 200 })), ).annotate({ identifier: "UpdateAuthorizationPermissionsControllerRequest" }); } } function __c198(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ organization_id: S.String.pipe(T.Label()), resource_type_slug: S.String.pipe(T.Label()), external_id: S.String.pipe(T.Label()), name: S.optional(S.String), description: S.optional(S.NullOr(S.String)), parent_resource_id: S.optional(S.String), parent_resource_external_id: S.optional(S.String), parent_resource_type_slug: S.optional(S.String), }).pipe( T.Http({ method: "PATCH", uri: "/authorization/organizations/{organization_id}/resources/{resource_type_slug}/{external_id}", code: 200, }), ), ).annotate({ identifier: "UpdateAuthorizationResourcesByExternalIdControllerByExternalIdRequest", }); } } function __c199(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ resource_id: S.String.pipe(T.Label()), name: S.optional(S.String), description: S.optional(S.NullOr(S.String)), parent_resource_id: S.optional(S.String), parent_resource_external_id: S.optional(S.String), parent_resource_type_slug: S.optional(S.String), }).pipe( T.Http({ method: "PATCH", uri: "/authorization/resources/{resource_id}", code: 200 }), ), ).annotate({ identifier: "UpdateAuthorizationResourcesControllerRequest" }); } } function __c200(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ slug: S.String.pipe(T.Label()), name: S.optional(S.String), description: S.optional(S.NullOr(S.String)), }).pipe(T.Http({ method: "PATCH", uri: "/authorization/roles/{slug}", code: 200 })), ).annotate({ identifier: "UpdateAuthorizationRolesControllerRequest" }); } } function __c201(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ slug: S.String.pipe(T.Label()), description: S.optional(S.NullOr(S.String)), enabled: S.optional(S.Boolean), scopes: S.optional(S.NullOr(__S(2400, __c300, 0))), credentials: S.optional(__S(2176, __c272, 0)), api_key: S.optional(__S(2177, __c272, 1)), custom_provider: S.optional(__S(1616, __c202, 0)), }).pipe(T.Http({ method: "PUT", uri: "/data-integrations/{slug}", code: 200 })), ).annotate({ identifier: "UpdateDataIntegrationsManagementControllerDataIntegrationRequest", }); } } function __c202(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ name: S.optional(S.String), authorization_url: S.optional(S.String), token_url: S.optional(S.String), refresh_token_url: S.optional(S.NullOr(S.String)), pkce_enabled: S.optional(S.Boolean), request_scope_separator: S.optional(S.String), scopes_required: S.optional(S.Boolean), client_secret_required: S.optional(S.Boolean), additional_authorization_parameters: S.optional(__S(416, __c52, 0)), token_body_content_type: S.optional(S.String), authenticate_via: S.optional(S.String), }), ).annotate({ identifier: "UpdateCustomProviderDefinitionDto" }); } } function __c203(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ slug: S.String.pipe(T.Label()), description: S.optional(S.NullOr(S.String)), enabled: S.optional(S.Boolean), scopes: S.optional(S.NullOr(__S(2400, __c300, 0))), credentials: S.optional(__S(2176, __c272, 0)), api_key: S.optional(__S(2177, __c272, 1)), custom_provider: S.optional(__S(1616, __c202, 0)), }).pipe( T.Http({ method: "PUT", uri: "/data-integrations/{slug}/organization", code: 200 }), ), ).annotate({ identifier: "UpdateDataIntegrationsManagementControllerOrganizationDataIntegrationRequest", }); } } function __c204(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ organization_id: S.String.pipe(T.Label()), slug: S.String.pipe(T.Label()), supports_multiple_connections: S.optional(S.Boolean.pipe(T.Query())), connected_account_id: S.optional(S.String.pipe(T.Query())), connection_intent: S.optional(S.String.pipe(T.Query())), account_display_name: S.optional(S.NullOr(S.String)), account_identifier: S.optional(S.NullOr(S.String)), access_token: S.optional(S.String.pipe(T.SensitiveValue({}))), refresh_token: S.optional(S.String.pipe(T.SensitiveValue({}))), expires_at: S.optional(S.String), scopes: S.optional(__S(2400, __c300, 0)), state: S.optional(S.String), user_id: S.String, }).pipe( T.Http({ method: "PUT", uri: "/organizations/{organization_id}/connected_accounts/{slug}", code: 200, }), ), ).annotate({ identifier: "UpdateDataIntegrationsOrganizationControllerOrganizationDataInstallationRequest", }); } } function __c205(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ user_id: S.String.pipe(T.Label()), slug: S.String.pipe(T.Label()), organization_id: S.optional(S.String.pipe(T.Query())), supports_multiple_connections: S.optional(S.Boolean.pipe(T.Query())), connected_account_id: S.optional(S.String.pipe(T.Query())), connection_intent: S.optional(S.String.pipe(T.Query())), account_display_name: S.optional(S.NullOr(S.String)), account_identifier: S.optional(S.NullOr(S.String)), access_token: S.optional(S.String.pipe(T.SensitiveValue({}))), refresh_token: S.optional(S.String.pipe(T.SensitiveValue({}))), expires_at: S.optional(S.String), scopes: S.optional(__S(2400, __c300, 0)), state: S.optional(S.String), }).pipe( T.Http({ method: "PUT", uri: "/user_management/users/{user_id}/connected_accounts/{slug}", code: 200, }), ), ).annotate({ identifier: "UpdateDataIntegrationsUserManagementControllerUserDataInstallationRequest", }); } } function __c206(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ organizationId: S.String.pipe(T.Label()), groupId: S.String.pipe(T.Label()), name: S.optional(S.String), description: S.optional(S.NullOr(S.String)), }).pipe( T.Http({ method: "PATCH", uri: "/organizations/{organizationId}/groups/{groupId}", code: 200, }), ), ).annotate({ identifier: "UpdateGroupsControllerRequest" }); } } function __c207(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ id: S.String.pipe(T.Label()), value: S.String, version_check: S.optional(S.NullOr(S.String)), }).pipe(T.Http({ method: "PUT", uri: "/vault/v1/kv/{id}", code: 200 })), ).annotate({ identifier: "UpdateJumpWireWebDataVaultControllerRequest" }); } } function __c208(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ organization_id: S.String, user_id: S.String, }).pipe(T.Http({ method: "POST", uri: "/client/token", code: 200 })), ).annotate({ identifier: "ClientApiTokenControllerIssueClientApiTokenRequest" }); case 1: return S.suspend(() => S.Struct({ token: S.String, }), ).annotate({ identifier: "ClientApiTokenResponse" }); } } function __c209(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ content: S.optional(S.String), }).pipe(T.Http({ method: "PUT", uri: "/user_management/jwt_template", code: 200 })), ).annotate({ identifier: "UpdateJwtTemplatesControllerJwtTemplateRequest" }); } } function __c210(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ id: S.String.pipe(T.Label()), name: S.optional(S.String), allow_profiles_outside_organization: S.optional(S.Boolean), domains: S.optional(__S(2400, __c300, 0)), domain_data: S.optional(__S(2313, __c289, 1)), stripe_customer_id: S.optional(S.String), metadata: S.optional(S.NullOr(__S(416, __c52, 0))), external_id: S.optional(S.NullOr(S.String)), }).pipe(T.Http({ method: "PUT", uri: "/organizations/{id}", code: 200 })), ).annotate({ identifier: "UpdateOrganizationsControllerOrganizationRequest" }); } } function __c211(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ id: S.String.pipe(T.Label()), challenge_status: S.optional(S.String), attempt_status: S.optional(S.String), }).pipe(T.Http({ method: "PUT", uri: "/radar/attempts/{id}", code: 200 })), ).annotate({ identifier: "UpdateRadarStandaloneControllerRadarAttemptRequest" }); } } function __c212(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ id: S.String.pipe(T.Label()), body: S.Unknown.pipe(T.HttpBody()), }).pipe( T.Http({ method: "PUT", uri: "/user_management/organization_memberships/{id}", code: 200, }), ), ).annotate({ identifier: "UpdateUserlandUserOrganizationMembershipsControllerRequest" }); } } function __c213(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ id: S.String.pipe(T.Label()), endpoint_url: S.optional(S.String), status: S.optional(S.String), events: S.optional(__S(1968, __c246, 0)), }).pipe(T.Http({ method: "PATCH", uri: "/webhook_endpoints/{id}", code: 200 })), ).annotate({ identifier: "UpdateWebhookEndpointsControllerRequest" }); } } function __c214(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ slug: S.String.pipe(T.Label()), body: S.Unknown.pipe(T.HttpBody()), }).pipe(T.Http({ method: "PUT", uri: "/data-integrations/{slug}/api-key", code: 200 })), ).annotate({ identifier: "UpsertDataIntegrationsControllerApiKeyRequest" }); } } function __c215(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ slug: S.String.pipe(T.Label()), body: S.Unknown.pipe(T.HttpBody()), }).pipe( T.Http({ method: "PUT", uri: "/data-integrations/{slug}/client-credentials", code: 200 }), ), ).annotate({ identifier: "UpsertDataIntegrationsControllerClientCredentialsRequest" }); } } function __c216(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ email: S.optional(S.String), invitation_token: S.optional(S.String), ip_address: S.optional(S.String), user_agent: S.optional(S.String), radar_auth_attempt_id: S.optional(S.String), signals_id: S.optional(S.String), }).pipe(T.Http({ method: "POST", uri: "/user_management/magic_auth", code: 200 })), ).annotate({ identifier: "UserlandMagicAuthControllerSendMagicAuthCodeAndReturnRequest" }); case 1: return S.suspend(() => S.Struct({ object: S.optional(S.String), id: S.optional(S.String), user_id: S.optional(S.String), email: S.optional(S.String), expires_at: S.optional(S.String), created_at: S.optional(S.String), updated_at: S.optional(S.String), code: S.optional(S.String), radar_auth_attempt_id: S.optional(S.String), }), ).annotate({ identifier: "UserlandMagicAuthControllerSendMagicAuthCodeAndReturnResponse" }); } } function __c217(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ body: S.Unknown.pipe(T.HttpBody()), }).pipe(T.Http({ method: "POST", uri: "/user_management/authenticate", code: 200 })), ).annotate({ identifier: "UserlandSessionsControllerAuthenticate0Request" }); case 1: return S.suspend(() => S.Struct({ user: S.optional(__S(2472, __c309, 0)), organization_id: S.optional(S.String), authkit_authorization_code: S.optional(S.String), access_token: S.optional(S.String.pipe(T.SensitiveValue({}))), refresh_token: S.optional(S.String.pipe(T.SensitiveValue({}))), authentication_method: S.optional(S.String), impersonator: S.optional(__S(1192, __c149, 0)), oauth_tokens: S.optional(__S(1520, __c190, 0)), }), ).annotate({ identifier: "UserlandAuthenticateResponse" }); } } function __c218(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ client_id: S.String, }).pipe(T.Http({ method: "POST", uri: "/user_management/authorize/device", code: 200 })), ).annotate({ identifier: "UserlandSsoControllerDeviceAuthorizationRequest" }); case 1: return S.suspend(() => S.Struct({ device_code: S.optional(S.String), user_code: S.optional(S.String), verification_uri: S.optional(S.String), verification_uri_complete: S.optional(S.String), expires_in: S.optional(S.Number), interval: S.optional(S.Number), }), ).annotate({ identifier: "DeviceAuthorizationResponse" }); } } function __c219(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ id: S.optional(S.String), email: S.optional(S.String), first_name: S.optional(S.String), last_name: S.optional(S.String), name: S.optional(S.String), metadata: S.optional(__S(416, __c52, 0)), }), ).annotate({ identifier: "UserObject" }); case 1: return S.suspend(() => S.Struct({ value: S.optional(S.String), label: S.optional(S.String), }), ).annotate({ identifier: "UserConsentOptionChoicesItem" }); case 2: return S.Array(__S(1753, __c219, 1)); case 3: return S.suspend(() => S.Struct({ claim: S.optional(S.String), type: S.optional(S.String), label: S.optional(S.String), choices: S.optional(__S(1754, __c219, 2)), }), ).annotate({ identifier: "UserConsentOption" }); case 4: return S.Array(__S(1755, __c219, 3)); case 5: return S.suspend(() => S.Struct({ external_auth_id: S.optional(S.String), user: S.optional(__S(1752, __c219, 0)), user_consent_options: S.optional(__S(1756, __c219, 4)), }).pipe(T.Http({ method: "POST", uri: "/authkit/oauth2/complete", code: 200 })), ).annotate({ identifier: "CompleteExternalAuthControllerLoginRequest" }); case 6: return S.suspend(() => S.Struct({ redirect_uri: S.optional(S.String), }), ).annotate({ identifier: "ExternalAuthCompleteResponse" }); } } function __c220(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ userlandUserId: S.String.pipe(T.Label()), type: S.optional(S.String), totp_issuer: S.optional(S.String), totp_user: S.optional(S.String), totp_secret: S.optional(S.String.pipe(T.SensitiveValue({}))), }).pipe( T.Http({ method: "POST", uri: "/user_management/users/{userlandUserId}/auth_factors", code: 200, }), ), ).annotate({ identifier: "UserlandUserAuthenticationFactorsControllerCreate0Request" }); case 1: return S.suspend(() => S.Struct({ authentication_factor: S.optional(__S(2025, __c253, 1)), authentication_challenge: S.optional(__S(1048, __c131, 0)), }), ).annotate({ identifier: "UserlandUserAuthenticationFactorEnrollResponse" }); } } function __c221(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ userlandUserId: S.String.pipe(T.Label()), before: S.optional(S.String.pipe(T.Query())), after: S.optional(S.String.pipe(T.Query())), limit: S.optional(S.Number.pipe(T.Query())), order: S.optional(S.String.pipe(T.Query())), }).pipe( T.Http({ method: "GET", uri: "/user_management/users/{userlandUserId}/auth_factors", code: 200, }), ), ).annotate({ identifier: "UserlandUserAuthenticationFactorsControllerList0Request" }); case 1: return S.Array(__S(209, __c26, 1)); case 2: return S.suspend(() => S.Struct({ object: S.optional(S.String), data: S.optional(__S(1769, __c221, 1)), list_metadata: S.optional(__S(920, __c115, 0)), }), ).annotate({ identifier: "UserlandUserAuthenticationFactorList" }); } } function __c222(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ id: S.String.pipe(T.Label()), }).pipe( T.Http({ method: "PUT", uri: "/user_management/organization_memberships/{id}/reactivate", code: 200, }), ), ).annotate({ identifier: "UserlandUserOrganizationMembershipsControllerReactivateRequest" }); } } function __c223(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ email: S.String, first_name: S.optional(S.NullOr(S.String)), last_name: S.optional(S.NullOr(S.String)), name: S.optional(S.NullOr(S.String)), email_verified: S.optional(S.NullOr(S.Boolean)), metadata: S.optional(S.NullOr(__S(416, __c52, 0))), external_id: S.optional(S.NullOr(S.String)), ip_address: S.optional(S.NullOr(S.String)), user_agent: S.optional(S.NullOr(S.String)), signals_id: S.optional(S.String), password: S.optional(S.NullOr(S.String).pipe(T.SensitiveValue({}))), password_hash: S.optional(S.String.pipe(T.SensitiveValue({}))), password_hash_type: S.optional(S.String), password_salt_position: S.optional(S.String), }).pipe(T.Http({ method: "POST", uri: "/user_management/users", code: 200 })), ).annotate({ identifier: "UserlandUsersControllerCreate0Request" }); case 1: return S.suspend(() => S.Struct({ object: S.optional(S.String), id: S.optional(S.String), first_name: S.optional(S.NullOr(S.String)), last_name: S.optional(S.NullOr(S.String)), name: S.optional(S.NullOr(S.String)), profile_picture_url: S.optional(S.NullOr(S.String)), email: S.optional(S.String), email_verified: S.optional(S.Boolean), external_id: S.optional(S.NullOr(S.String)), metadata: S.optional(__S(416, __c52, 0)), last_sign_in_at: S.optional(S.NullOr(S.String)), locale: S.optional(S.NullOr(S.String)), created_at: S.optional(S.String), updated_at: S.optional(S.String), radar_auth_attempt_id: S.optional(S.String), }), ).annotate({ identifier: "UserlandUsersControllerCreate0Response" }); } } function __c224(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ email: S.optional(S.String), }).pipe(T.Http({ method: "POST", uri: "/user_management/password_reset", code: 200 })), ).annotate({ identifier: "UserlandUsersControllerCreatePasswordResetTokenRequest" }); } } function __c225(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ object: S.optional(S.String), id: S.optional(S.String), user_id: S.optional(S.String), email: S.optional(S.String), expires_at: S.optional(S.String), created_at: S.optional(S.String), password_reset_token: S.optional(S.String.pipe(T.SensitiveValue({}))), password_reset_url: S.optional(S.String.pipe(T.SensitiveValue({}))), }), ).annotate({ identifier: "PasswordReset" }); } } function __c226(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ id: S.String.pipe(T.Label()), }).pipe(T.Http({ method: "DELETE", uri: "/user_management/users/{id}", code: 200 })), ).annotate({ identifier: "UserlandUsersControllerDelete0Request" }); } } function __c227(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ id: S.String.pipe(T.Label()), code: S.optional(S.String), }).pipe( T.Http({ method: "POST", uri: "/user_management/users/{id}/email_verification/confirm", code: 200, }), ), ).annotate({ identifier: "UserlandUsersControllerEmailVerification0Request" }); } } function __c228(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ id: S.String.pipe(T.Label()), }).pipe(T.Http({ method: "GET", uri: "/user_management/users/{id}", code: 200 })), ).annotate({ identifier: "UserlandUsersControllerGet0Request" }); } } function __c229(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ id: S.String.pipe(T.Label()), }).pipe(T.Http({ method: "GET", uri: "/user_management/password_reset/{id}", code: 200 })), ).annotate({ identifier: "UserlandUsersControllerGetPasswordResetRequest" }); } } function __c230(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ before: S.optional(S.String.pipe(T.Query())), after: S.optional(S.String.pipe(T.Query())), limit: S.optional(S.Number.pipe(T.Query())), order: S.optional(S.String.pipe(T.Query())), organization: S.optional(S.String.pipe(T.Query())), organization_id: S.optional(S.String.pipe(T.Query())), email: S.optional(S.String.pipe(T.Query())), }).pipe(T.Http({ method: "GET", uri: "/user_management/users", code: 200 })), ).annotate({ identifier: "UserlandUsersControllerList0Request" }); case 1: return S.Array(__S(2472, __c309, 0)); case 2: return S.suspend(() => S.Struct({ object: S.optional(S.String), data: S.optional(__S(1841, __c230, 1)), list_metadata: S.optional(__S(920, __c115, 0)), }), ).annotate({ identifier: "UserlandUserList" }); } } function __c231(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ id: S.String.pipe(T.Label()), code: S.optional(S.String), }).pipe( T.Http({ method: "POST", uri: "/user_management/users/{id}/email_change/confirm", code: 200, }), ), ).annotate({ identifier: "ConfirmUserlandUsersControllerEmailChangeRequest" }); case 1: return S.suspend(() => S.Struct({ object: S.String, id: S.String, first_name: S.NullOr(S.String), last_name: S.NullOr(S.String), name: S.optional(S.NullOr(S.String)), profile_picture_url: S.NullOr(S.String), email: S.String, email_verified: S.Boolean, external_id: S.NullOr(S.String), metadata: S.optional(__S(416, __c52, 0)), last_sign_in_at: S.NullOr(S.String), locale: S.optional(S.NullOr(S.String)), created_at: S.String, updated_at: S.String, }), ).annotate({ identifier: "ConfirmUserlandUsersControllerEmailChangeResponseUser" }); case 2: return S.suspend(() => S.Struct({ object: S.String, user: __S(1849, __c231, 1), }), ).annotate({ identifier: "ConfirmUserlandUsersControllerEmailChangeResponse" }); } } function __c232(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ id: S.String.pipe(T.Label()), email: S.optional(S.String), first_name: S.optional(S.String), last_name: S.optional(S.String), name: S.optional(S.String), email_verified: S.optional(S.Boolean), metadata: S.optional(S.NullOr(__S(416, __c52, 0))), external_id: S.optional(S.NullOr(S.String)), locale: S.optional(S.NullOr(S.String)), password: S.optional(S.String.pipe(T.SensitiveValue({}))), password_hash: S.optional(S.String.pipe(T.SensitiveValue({}))), password_hash_type: S.optional(S.String), password_salt_position: S.optional(S.String), }).pipe(T.Http({ method: "PUT", uri: "/user_management/users/{id}", code: 200 })), ).annotate({ identifier: "UserlandUsersControllerUpdate0Request" }); } } function __c233(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ body: S.Unknown.pipe(T.HttpBody()), }).pipe(T.Http({ method: "POST", uri: "/agents/credentials/validate", code: 200 })), ).annotate({ identifier: "ValidateAgentAdminControllerCredentialRequest" }); case 1: return S.suspend(() => S.Struct({ valid: S.Boolean, registration_id: S.NullOr(S.String), expires_at: S.NullOr(S.String), }), ).annotate({ identifier: "AgentCredentialValidation" }); } } function __c234(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ agent_blueprint_id: S.String.pipe(T.Label()), agent_access_token: S.String, }).pipe( T.Http({ method: "POST", uri: "/agents/blueprints/{agent_blueprint_id}/tokens/validate", code: 200, }), ), ).annotate({ identifier: "ValidateAgentBlueprintsTokenControllerTokenRequest" }); case 1: return S.suspend(() => S.Struct({ valid: S.Boolean, agent_instance_id: S.String, agent_instance_session_id: S.String, organization_id: S.String, permissions: __S(2400, __c300, 0), intent: S.NullOr(S.String), acting_user_id: S.NullOr(S.String), session_expires_at: S.String, }), ).annotate({ identifier: "AgentTokenValidation" }); } } function __c235(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ value: S.optional(S.String), }).pipe(T.Http({ method: "POST", uri: "/api_keys/validations", code: 200 })), ).annotate({ identifier: "ValidateApiKeysControllerApiKeyRequest" }); case 1: return S.suspend(() => S.Struct({ api_key: S.optional(S.NullOr(__S(160, __c20, 0))), agent_registration_id: S.optional(S.String), }), ).annotate({ identifier: "ApiKeyValidationResponse" }); } } function __c236(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ id: S.String.pipe(T.Label()), code: S.String, }).pipe(T.Http({ method: "POST", uri: "/auth/challenges/{id}/verify", code: 200 })), ).annotate({ identifier: "VerifyAuthenticationChallengesControllerRequest" }); case 1: return S.suspend(() => S.Struct({ challenge: S.optional(__S(1048, __c131, 0)), valid: S.optional(S.Boolean), }), ).annotate({ identifier: "AuthenticationChallengeVerifyResponse" }); } } function __c237(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ id: S.String.pipe(T.Label()), }).pipe(T.Http({ method: "POST", uri: "/organization_domains/{id}/verify", code: 200 })), ).annotate({ identifier: "VerifyOrganizationDomainsControllerRequest" }); } } function __c238(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ id: S.String.pipe(T.Label()), }).pipe( T.Http({ method: "POST", uri: "/user_management/waitlist_entries/{id}/deny", code: 200 }), ), ).annotate({ identifier: "WaitlistEntriesControllerDenyRequest" }); } } function __c239(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ id: S.String.pipe(T.Label()), }).pipe(T.Http({ method: "GET", uri: "/user_management/waitlists/{id}", code: 200 })), ).annotate({ identifier: "WaitlistsControllerFindRequest" }); } } function __c240(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ organization_id: S.optional(S.String), user_id: S.optional(S.String), scopes: S.optional(__S(1968, __c246, 0)), }).pipe(T.Http({ method: "POST", uri: "/widgets/token", code: 200 })), ).annotate({ identifier: "WidgetsPublicControllerIssueWidgetSessionTokenRequest" }); case 1: return S.suspend(() => S.Struct({ token: S.optional(S.String), }), ).annotate({ identifier: "WidgetSessionTokenResponse" }); } } function __c241(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ id: S.String.pipe(T.Label()), }).pipe(T.Http({ method: "GET", uri: "/connections/{id}", code: 200 })), ).annotate({ identifier: "ConnectionsControllerFindRequest" }); } } function __c242(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ id: S.String, object: S.String, domain: S.String, }), ).annotate({ identifier: "ConnectionDomainsItem" }); case 1: return S.Array(__S(1936, __c242, 0)); case 2: return S.suspend(() => S.Struct({ object: S.optional(S.String), id: S.optional(S.String), organization_id: S.optional(S.String), connection_type: S.optional(S.String), name: S.optional(S.String), state: S.optional(S.String), status: S.optional(S.String), domains: S.optional(__S(1937, __c242, 1)), created_at: S.optional(S.String), updated_at: S.optional(S.String), }), ).annotate({ identifier: "Connection" }); } } function __c243(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ name: S.String, description: S.optional(S.String), permissions: S.optional(__S(2400, __c300, 0)), invocable_by: S.optional(__S(1960, __c245, 0)), invocable_as: S.optional(__S(1961, __c245, 1)), session_settings: S.optional(__S(1952, __c244, 0)), }).pipe(T.Http({ method: "POST", uri: "/agents/blueprints", code: 200 })), ).annotate({ identifier: "CreateAgentBlueprintsControllerRequest" }); } } function __c244(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ max_age_seconds: S.Number, access_token_ttl_seconds: S.Number, refresh_token_ttl_seconds: S.Number, }), ).annotate({ identifier: "CreateAgentBlueprintsControllerRequestSessionSettings" }); case 1: return S.suspend(() => S.Struct({ role_slugs: __S(2400, __c300, 0), organization_ids: __S(2400, __c300, 0), }), ).annotate({ identifier: "AgentBlueprintInvocableBy" }); case 2: return S.suspend(() => S.Struct({ instance_types: __S(1968, __c246, 0), }), ).annotate({ identifier: "AgentBlueprintInvocableAs" }); case 3: return S.suspend(() => S.Struct({ object: S.String, id: S.String, name: S.String, description: S.NullOr(S.String), permissions: __S(2400, __c300, 0), invocable_by: __S(1953, __c244, 1), invocable_as: __S(1954, __c244, 2), session_settings: __S(1952, __c244, 0), created_at: S.String, updated_at: S.String, }), ).annotate({ identifier: "AgentBlueprint" }); } } function __c245(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ role_slugs: S.optional(__S(2400, __c300, 0)), organization_ids: S.optional(__S(2400, __c300, 0)), }), ).annotate({ identifier: "CreateAgentBlueprintsControllerRequestInvocableBy" }); case 1: return S.suspend(() => S.Struct({ instance_types: S.optional(__S(1968, __c246, 0)), }), ).annotate({ identifier: "CreateAgentBlueprintsControllerRequestInvocableAs" }); } } function __c246(j: number): any { switch (j) { case 0: return S.Array(S.String); } } function __c247(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ id: S.String.pipe(T.Label()), }).pipe( T.Http({ method: "POST", uri: "/connect/applications/{id}/client_secrets", code: 200 }), ), ).annotate({ identifier: "CreateApplicationCredentialsControllerRequest" }); case 1: return S.suspend(() => S.Struct({ object: S.optional(S.String), id: S.optional(S.String), secret_hint: S.optional(S.String), last_used_at: S.optional(S.NullOr(S.String)), created_at: S.optional(S.String), updated_at: S.optional(S.String), secret: S.optional(S.String.pipe(T.SensitiveValue({}))), }), ).annotate({ identifier: "NewConnectApplicationSecret" }); } } function __c248(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ body: S.Unknown.pipe(T.HttpBody()), }).pipe(T.Http({ method: "POST", uri: "/connect/applications", code: 200 })), ).annotate({ identifier: "CreateApplicationsControllerRequest" }); } } function __c249(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ id: S.optional(S.String), type: S.optional(S.String), name: S.optional(S.String), metadata: S.optional(S.Unknown), }), ).annotate({ identifier: "AuditLogEventActorDto" }); case 1: return S.Array(__S(1992, __c249, 0)); case 2: return S.suspend(() => S.Struct({ location: S.optional(S.String), user_agent: S.optional(S.String), }), ).annotate({ identifier: "AuditLogEventContextDto" }); case 3: return S.suspend(() => S.Struct({ action: S.optional(S.String), occurred_at: S.optional(S.String), actor: S.optional(__S(1992, __c249, 0)), targets: S.optional(__S(1993, __c249, 1)), context: S.optional(__S(1994, __c249, 2)), metadata: S.optional(S.Unknown), version: S.optional(S.Number), }), ).annotate({ identifier: "AuditLogEventDto" }); case 4: return S.suspend(() => S.Struct({ organization_id: S.optional(S.String), event: S.optional(__S(1995, __c249, 3)), }).pipe(T.Http({ method: "POST", uri: "/audit_logs/events", code: 200 })), ).annotate({ identifier: "CreateAuditLogEventsControllerRequest" }); case 5: return S.suspend(() => S.Struct({ success: S.optional(S.Boolean), }), ).annotate({ identifier: "AuditLogEventCreateResponse" }); } } function __c250(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ metadata: S.optional(S.Unknown), }), ).annotate({ identifier: "AuditLogSchemaActorDto" }); case 1: return S.suspend(() => S.Struct({ type: S.optional(S.String), metadata: S.optional(S.Unknown), }), ).annotate({ identifier: "AuditLogSchemaTargetDto" }); case 2: return S.Array(__S(2001, __c250, 1)); case 3: return S.suspend(() => S.Struct({ actionName: S.String.pipe(T.Label()), actor: S.optional(__S(2000, __c250, 0)), targets: S.optional(__S(2002, __c250, 2)), metadata: S.optional(S.Unknown), }).pipe( T.Http({ method: "POST", uri: "/audit_logs/actions/{actionName}/schemas", code: 200 }), ), ).annotate({ identifier: "CreateAuditLogValidatorVersionsControllerRequest" }); } } function __c251(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ type: S.String, phone_number: S.optional(S.String), totp_issuer: S.optional(S.String), totp_user: S.optional(S.String), user_id: S.optional(S.String), }).pipe(T.Http({ method: "POST", uri: "/auth/factors/enroll", code: 200 })), ).annotate({ identifier: "CreateAuthenticationFactorsControllerRequest" }); } } function __c252(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ phone_number: S.String, }), ).annotate({ identifier: "AuthenticationFactorEnrolledSms" }); } } function __c253(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ issuer: S.String, user: S.String, secret: S.String.pipe(T.SensitiveValue({})), qr_code: S.String, uri: S.String, }), ).annotate({ identifier: "AuthenticationFactorEnrolledTotp" }); case 1: return S.suspend(() => S.Struct({ object: S.optional(S.String), id: S.optional(S.String), type: S.optional(S.String), user_id: S.optional(S.String), sms: S.optional(__S(2016, __c252, 0)), totp: S.optional(__S(2024, __c253, 0)), created_at: S.optional(S.String), updated_at: S.optional(S.String), }), ).annotate({ identifier: "AuthenticationFactorEnrolled" }); } } function __c254(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ uri: S.String, default: S.optional(S.Boolean), }).pipe( T.Http({ method: "POST", uri: "/user_management/authkit_oauth_resources", code: 200 }), ), ).annotate({ identifier: "CreateAuthkitOauthResourcesControllerRequest" }); } } function __c255(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ object: S.String, id: S.String, uri: S.String, default: S.Boolean, created_at: S.String, updated_at: S.String, }), ).annotate({ identifier: "AuthkitOauthResource" }); } } function __c256(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ group_id: S.String.pipe(T.Label()), role_slug: S.String, resource_id: S.optional(S.String), resource_external_id: S.optional(S.String), resource_type_slug: S.optional(S.String), }).pipe( T.Http({ method: "POST", uri: "/authorization/groups/{group_id}/role_assignments", code: 200, }), ), ).annotate({ identifier: "CreateAuthorizationGroupRoleAssignmentsControllerRequest" }); } } function __c257(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ object: S.String, id: S.String, group_id: S.String, role: __S(560, __c70, 0), resource: __S(552, __c69, 0), created_at: S.String, updated_at: S.String, }), ).annotate({ identifier: "GroupRoleAssignment" }); } } function __c258(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ organizationId: S.String.pipe(T.Label()), slug: S.optional(S.String), name: S.optional(S.String), description: S.optional(S.NullOr(S.String)), resource_type_slug: S.optional(S.String), }).pipe( T.Http({ method: "POST", uri: "/authorization/organizations/{organizationId}/roles", code: 200, }), ), ).annotate({ identifier: "CreateAuthorizationOrganizationRolesControllerRequest" }); } } function __c259(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ slug: S.optional(S.String), name: S.optional(S.String), description: S.optional(S.NullOr(S.String)), resource_type_slug: S.optional(S.String), }).pipe(T.Http({ method: "POST", uri: "/authorization/permissions", code: 200 })), ).annotate({ identifier: "CreateAuthorizationPermissionsControllerRequest" }); case 1: return S.suspend(() => S.Struct({ object: S.String, id: S.String, slug: S.String, name: S.String, description: S.NullOr(S.String), system: S.Boolean, resource_type_slug: S.String, created_at: S.String, updated_at: S.String, }), ).annotate({ identifier: "CreateAuthorizationPermissionsControllerResponse" }); } } function __c260(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ external_id: S.String, name: S.String, description: S.optional(S.NullOr(S.String)), resource_type_slug: S.String, organization_id: S.String, parent_resource_id: S.optional(S.NullOr(S.String)), parent_resource_external_id: S.optional(S.String), parent_resource_type_slug: S.optional(S.String), }).pipe(T.Http({ method: "POST", uri: "/authorization/resources", code: 200 })), ).annotate({ identifier: "CreateAuthorizationResourcesControllerRequest" }); } } function __c261(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ object: S.String, name: S.String, description: S.NullOr(S.String), organization_id: S.String, parent_resource_id: S.NullOr(S.String), id: S.String, external_id: S.String, resource_type_slug: S.String, created_at: S.String, updated_at: S.String, }), ).annotate({ identifier: "CreateAuthorizationResourcesControllerResponse" }); } } function __c262(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ slug: S.optional(S.String), name: S.optional(S.String), description: S.optional(S.NullOr(S.String)), resource_type_slug: S.optional(S.String), }).pipe(T.Http({ method: "POST", uri: "/authorization/roles", code: 200 })), ).annotate({ identifier: "CreateAuthorizationRolesControllerRequest" }); } } function __c263(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ standard_attributes: S.optional(__S(2112, __c264, 0)), custom_attributes: S.optional(__S(416, __c52, 0)), }), ).annotate({ identifier: "CreateConnectionAttributeMapsDto" }); case 1: return S.suspend(() => S.Struct({ key: S.String, cert: S.String, }), ).annotate({ identifier: "CreateConnectionKeyPairDto" }); case 2: return S.Array(__S(2105, __c263, 1)); case 3: return S.suspend(() => S.Struct({ idp_metadata_url: S.optional(S.String), acs_url: S.optional(S.String), sp_entity_id: S.optional(S.String), idp_entity_id: S.optional(S.String), idp_sso_url: S.optional(S.String), idp_signing_certs: S.optional(__S(2400, __c300, 0)), sp_signing_key_pair: S.optional(__S(2105, __c263, 1)), sp_encryption_key_pairs: S.optional(__S(2106, __c263, 2)), }), ).annotate({ identifier: "CreateConnectionSamlOptionsDto" }); case 4: return S.suspend(() => S.Struct({ discovery_endpoint: S.String, client_id: S.String, client_secret: S.optional(S.String.pipe(T.SensitiveValue({}))), redirect_uri: S.optional(S.String), pkce: S.optional(S.Boolean), token_authentication_method: S.optional(S.String), jwt_signing_key_pair: S.optional(__S(2105, __c263, 1)), id_token_signature_algorithm: S.optional(S.String), fetch_user_info: S.optional(S.Boolean), }), ).annotate({ identifier: "CreateConnectionOidcOptionsDto" }); case 5: return S.suspend(() => S.Struct({ organization_id: S.String, name: S.optional(S.String), external_id: S.optional(S.String), connection_type: S.optional(S.String), attribute_maps: S.optional(__S(2104, __c263, 0)), saml_options: S.optional(__S(2107, __c263, 3)), oidc_options: S.optional(__S(2108, __c263, 4)), }).pipe(T.Http({ method: "POST", uri: "/connections", code: 200 })), ).annotate({ identifier: "CreateConnectionsControllerRequest" }); } } function __c264(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ idp_id: S.optional(S.String), email: S.optional(S.String), first_name: S.optional(S.String), last_name: S.optional(S.String), groups: S.optional(S.NullOr(S.String)), name: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "CreateConnectionStandardAttributesDto" }); } } function __c265(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ origin: S.optional(S.String), }).pipe(T.Http({ method: "POST", uri: "/user_management/cors_origins", code: 200 })), ).annotate({ identifier: "CreateCorsOriginsControllerCorsOriginRequest" }); } } function __c266(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ object: S.optional(S.String), id: S.optional(S.String), origin: S.optional(S.String), created_at: S.optional(S.String), updated_at: S.optional(S.String), }), ).annotate({ identifier: "CorsOriginResponse" }); } } function __c267(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ slug: S.String.pipe(T.Label()), account_display_name: S.optional(S.NullOr(S.String)), account_identifier: S.optional(S.NullOr(S.String)), user_id: S.String, organization_id: S.optional(S.String), connection_owner: S.optional(S.String), secret: S.String.pipe(T.SensitiveValue({})), connection_intent: S.String, }).pipe(T.Http({ method: "POST", uri: "/data-integrations/{slug}/api-key", code: 200 })), ).annotate({ identifier: "CreateDataIntegrationsControllerApiKeyConnectionRequest" }); } } function __c268(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ code: S.String, message: S.String, }), ).annotate({ identifier: "ConnectedAccountWriteResponseWarningsItem" }); case 1: return S.Array(__S(2144, __c268, 0)); case 2: return S.suspend(() => S.Struct({ object: S.String, id: S.String, connection_role: S.String, account_identifier: S.NullOr(S.String), account_display_name: S.NullOr(S.String), user_id: S.NullOr(S.String), organization_id: S.NullOr(S.String), scopes: __S(2400, __c300, 0), auth_method: S.optional(S.String), api_key_last_4: S.optional(S.NullOr(S.String)), client_id: S.optional(S.NullOr(S.String)), client_secret_last_4: S.optional(S.NullOr(S.String)), config: S.optional(__S(416, __c52, 0)), state: S.String, created_at: S.String, updated_at: S.String, warnings: S.optional(__S(2145, __c268, 1)), }), ).annotate({ identifier: "ConnectedAccountWriteResponse" }); } } function __c269(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ slug: S.String.pipe(T.Label()), account_display_name: S.optional(S.NullOr(S.String)), account_identifier: S.optional(S.NullOr(S.String)), user_id: S.String, organization_id: S.optional(S.String), connection_owner: S.optional(S.String), client_id: S.String, client_secret: S.String.pipe(T.SensitiveValue({})), config: S.optional(__S(416, __c52, 0)), connection_intent: S.String, }).pipe( T.Http({ method: "POST", uri: "/data-integrations/{slug}/client-credentials", code: 200, }), ), ).annotate({ identifier: "CreateDataIntegrationsControllerClientCredentialsConnectionRequest", }); } } function __c270(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ name: S.String, authorization_url: S.optional(S.String), token_url: S.optional(S.String), refresh_token_url: S.optional(S.NullOr(S.String)), pkce_enabled: S.optional(S.Boolean), request_scope_separator: S.optional(S.String), scopes_required: S.optional(S.Boolean), client_secret_required: S.optional(S.Boolean), additional_authorization_parameters: S.optional(__S(416, __c52, 0)), token_body_content_type: S.optional(S.String), authenticate_via: S.optional(S.String), }), ).annotate({ identifier: "CustomProviderDefinitionDto" }); case 1: return S.suspend(() => S.Struct({ provider: S.String, ownership: S.optional(S.String), description: S.optional(S.NullOr(S.String)), enabled: S.optional(S.Boolean), scopes: S.optional(S.NullOr(__S(2400, __c300, 0))), auth_methods: S.optional(__S(1968, __c246, 0)), config: S.optional(__S(416, __c52, 0)), credentials: S.optional(__S(2176, __c272, 0)), api_key: S.optional(__S(2177, __c272, 1)), custom_provider: S.optional(__S(2160, __c270, 0)), }).pipe(T.Http({ method: "POST", uri: "/data-integrations", code: 200 })), ).annotate({ identifier: "CreateDataIntegrationsManagementControllerDataIntegrationRequest", }); } } function __c271(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ type: S.String, client_id: S.NullOr(S.String), redacted_client_secret: S.NullOr(S.String).pipe(T.SensitiveValue({})), }), ).annotate({ identifier: "DataIntegrationCredentials" }); case 1: return S.suspend(() => S.Struct({ id: S.String, connection_role: S.String, account_identifier: S.NullOr(S.String), account_display_name: S.NullOr(S.String), user_id: S.NullOr(S.String), organization_id: S.NullOr(S.String), api_key_last_4: S.NullOr(S.String), }), ).annotate({ identifier: "DataIntegrationInstallation" }); case 2: return S.suspend(() => S.Struct({ name: S.String, authorization_url: S.NullOr(S.String), token_url: S.NullOr(S.String), refresh_token_url: S.NullOr(S.String), pkce_enabled: S.Boolean, request_scope_separator: S.String, scopes_required: S.Boolean, client_secret_required: S.Boolean, additional_authorization_parameters: __S(416, __c52, 0), token_body_content_type: S.String, authenticate_via: S.String, }), ).annotate({ identifier: "DataIntegrationCustomProvider" }); case 3: return S.suspend(() => S.Struct({ object: S.String, id: S.String, slug: S.String, integration_type: S.String, ownership: S.String, description: S.NullOr(S.String), enabled: S.Boolean, state: S.String, scopes: S.NullOr(__S(2400, __c300, 0)), redirect_uri: S.String, auth_methods: __S(1968, __c246, 0), credentials: S.NullOr(__S(2168, __c271, 0)), installation: S.NullOr(__S(2169, __c271, 1)), config: __S(416, __c52, 0), custom_provider: S.NullOr(__S(2170, __c271, 2)), created_at: S.String, updated_at: S.String, }), ).annotate({ identifier: "DataIntegration" }); } } function __c272(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ type: S.String, client_id: S.optional(S.String), client_secret: S.optional(S.String.pipe(T.SensitiveValue({}))), }), ).annotate({ identifier: "DataIntegrationCredentialsDto" }); case 1: return S.suspend(() => S.Struct({ secret: S.String.pipe(T.SensitiveValue({})), user_id: S.String, organization_id: S.optional(S.String), }), ).annotate({ identifier: "ApiKeyInstallationDto" }); } } function __c273(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ organization_id: S.String.pipe(T.Label()), slug: S.String.pipe(T.Label()), account_display_name: S.optional(S.NullOr(S.String)), account_identifier: S.optional(S.NullOr(S.String)), access_token: S.optional(S.String.pipe(T.SensitiveValue({}))), refresh_token: S.optional(S.String.pipe(T.SensitiveValue({}))), expires_at: S.optional(S.String), scopes: S.optional(__S(2400, __c300, 0)), state: S.optional(S.String), user_id: S.String, connection_intent: S.optional(S.String), }).pipe( T.Http({ method: "POST", uri: "/organizations/{organization_id}/connected_accounts/{slug}", code: 200, }), ), ).annotate({ identifier: "CreateDataIntegrationsOrganizationControllerOrganizationDataInstallationRequest", }); } } function __c274(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ user_id: S.String.pipe(T.Label()), slug: S.String.pipe(T.Label()), organization_id: S.optional(S.String.pipe(T.Query())), account_display_name: S.optional(S.NullOr(S.String)), account_identifier: S.optional(S.NullOr(S.String)), access_token: S.optional(S.String.pipe(T.SensitiveValue({}))), refresh_token: S.optional(S.String.pipe(T.SensitiveValue({}))), expires_at: S.optional(S.String), scopes: S.optional(__S(2400, __c300, 0)), state: S.optional(S.String), connection_intent: S.optional(S.String), }).pipe( T.Http({ method: "POST", uri: "/user_management/users/{user_id}/connected_accounts/{slug}", code: 200, }), ), ).annotate({ identifier: "CreateDataIntegrationsUserManagementControllerUserDataInstallationRequest", }); } } function __c275(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ slug: S.String.pipe(T.Label()), resourceId: S.String.pipe(T.Label()), }).pipe( T.Http({ method: "POST", uri: "/feature-flags/{slug}/targets/{resourceId}", code: 200 }), ), ).annotate({ identifier: "CreateFlagTargetsControllerTargetRequest" }); } } function __c276(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ organizationId: S.String.pipe(T.Label()), name: S.optional(S.String), description: S.optional(S.NullOr(S.String)), }).pipe( T.Http({ method: "POST", uri: "/organizations/{organizationId}/groups", code: 200 }), ), ).annotate({ identifier: "CreateGroupsControllerRequest" }); } } function __c277(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ organization_id: S.String.pipe(T.Label()), email: S.String, }).pipe( T.Http({ method: "POST", uri: "/organizations/{organization_id}/it_contacts", code: 200, }), ), ).annotate({ identifier: "CreateItContactsControllerRequest" }); } } function __c278(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ object: S.String, id: S.String, email: S.String, created_at: S.String, updated_at: S.String, }), ).annotate({ identifier: "ItContact" }); } } function __c279(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ id: S.String.pipe(T.Label()), }).pipe( T.Http({ method: "POST", uri: "/user_management/invitations/{id}/accept", code: 200 }), ), ).annotate({ identifier: "AcceptUserlandUserInvitesControllerRequest" }); } } function __c280(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ object: S.String, id: S.String, email: S.String, state: S.String, accepted_at: S.NullOr(S.String), revoked_at: S.NullOr(S.String), expires_at: S.String, organization_id: S.NullOr(S.String), inviter_user_id: S.NullOr(S.String), accepted_user_id: S.NullOr(S.String), role_slug: S.NullOr(S.String), created_at: S.String, updated_at: S.String, token: S.String, accept_invitation_url: S.String, }), ).annotate({ identifier: "AcceptUserlandUserInvitesControllerResponse" }); } } function __c281(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ key_context: __S(416, __c52, 0), name: S.String, value: S.String, }).pipe(T.Http({ method: "POST", uri: "/vault/v1/kv", code: 200 })), ).annotate({ identifier: "CreateJumpWireWebDataVaultControllerRequest" }); } } function __c282(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ context: __S(416, __c52, 0), environment_id: S.String, id: S.String, key_id: S.String, updated_at: S.String, updated_by: __S(2736, __c342, 0), version_id: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "ObjectMetadata" }); } } function __c283(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ organizationId: S.String.pipe(T.Label()), name: S.optional(S.String), permissions: S.optional(__S(2400, __c300, 0)), expires_at: S.optional(S.String), }).pipe( T.Http({ method: "POST", uri: "/organizations/{organizationId}/api_keys", code: 200 }), ), ).annotate({ identifier: "CreateOrganizationApiKeysControllerRequest" }); case 1: return S.suspend(() => S.Struct({ object: S.String, id: S.String, owner: __S(2272, __c284, 0), name: S.String, obfuscated_value: S.String, last_used_at: S.NullOr(S.String), expires_at: S.NullOr(S.String), permissions: __S(2400, __c300, 0), created_at: S.String, updated_at: S.String, value: S.String, }), ).annotate({ identifier: "OrganizationApiKeyWithValue" }); } } function __c284(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ type: S.String, id: S.String, }), ).annotate({ identifier: "ApiKeyOwnerCase0" }); } } function __c285(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ domain: S.optional(S.String), organization_id: S.optional(S.String), }).pipe(T.Http({ method: "POST", uri: "/organization_domains", code: 200 })), ).annotate({ identifier: "CreateOrganizationDomainsControllerRequest" }); } } function __c286(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ object: S.String, id: S.String, organization_id: S.String, domain: S.String, state: S.optional(S.String), verification_prefix: S.optional(S.String), verification_token: S.optional(S.String), verification_strategy: S.optional(S.String), created_at: S.String, updated_at: S.String, }), ).annotate({ identifier: "CreateOrganizationDomainsControllerResponse" }); } } function __c287(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ name: S.optional(S.String), allow_profiles_outside_organization: S.optional(S.Boolean), domains: S.optional(__S(2400, __c300, 0)), domain_data: S.optional(__S(2313, __c289, 1)), metadata: S.optional(S.NullOr(__S(416, __c52, 0))), external_id: S.optional(S.NullOr(S.String)), }).pipe(T.Http({ method: "POST", uri: "/organizations", code: 200 })), ).annotate({ identifier: "CreateOrganizationsControllerRequest" }); } } function __c288(j: number): any { switch (j) { case 0: return S.Array(__S(2288, __c286, 0)); case 1: return S.suspend(() => S.Struct({ object: S.optional(S.String), id: S.optional(S.String), name: S.optional(S.String), domains: S.optional(__S(2304, __c288, 0)), metadata: S.optional(__S(416, __c52, 0)), external_id: S.optional(S.NullOr(S.String)), stripe_customer_id: S.optional(S.String), created_at: S.optional(S.String), updated_at: S.optional(S.String), allow_profiles_outside_organization: S.optional(S.Boolean), }), ).annotate({ identifier: "Organization" }); } } function __c289(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ domain: S.optional(S.String), state: S.optional(S.String), }), ).annotate({ identifier: "OrganizationDomainDataDto" }); case 1: return S.Array(__S(2312, __c289, 0)); } } function __c290(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ return_url: S.optional(S.String), success_url: S.optional(S.String), organization: S.optional(S.String), intent: S.optional(S.String), it_contact_emails: S.optional(__S(2400, __c300, 0)), }).pipe(T.Http({ method: "POST", uri: "/portal/generate_link", code: 200 })), ).annotate({ identifier: "CreatePortalSessionsControllerRequest" }); case 1: return S.suspend(() => S.Struct({ link: S.optional(S.String), }), ).annotate({ identifier: "PortalLinkResponse" }); } } function __c291(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ uri: S.optional(S.String), }).pipe(T.Http({ method: "POST", uri: "/user_management/redirect_uris", code: 200 })), ).annotate({ identifier: "CreateRedirectUrisControllerRequest" }); } } function __c292(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ object: S.optional(S.String), id: S.optional(S.String), uri: S.optional(S.String), default: S.optional(S.Boolean), created_at: S.optional(S.String), updated_at: S.optional(S.String), }), ).annotate({ identifier: "RedirectUri" }); } } function __c293(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ connectionId: S.String.pipe(T.Label()), value: S.String, }).pipe( T.Http({ method: "POST", uri: "/connections/{connectionId}/saml_idp_signing_certs", code: 200, }), ), ).annotate({ identifier: "CreateSamlIdpSigningCertificatesControllerRequest" }); } } function __c294(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ object: S.String, id: S.String, value: S.String, not_before: S.NullOr(S.String), not_after: S.NullOr(S.String), created_at: S.String, }), ).annotate({ identifier: "SamlIdpSigningCertificate" }); } } function __c295(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ connectionId: S.String.pipe(T.Label()), }).pipe( T.Http({ method: "POST", uri: "/connections/{connectionId}/saml_sp_encryption_certs", code: 200, }), ), ).annotate({ identifier: "CreateSamlSpEncryptionCertificatesControllerRequest" }); } } function __c296(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ connectionId: S.String.pipe(T.Label()), }).pipe( T.Http({ method: "POST", uri: "/connections/{connectionId}/saml_sp_signing_cert", code: 200, }), ), ).annotate({ identifier: "CreateSamlSpSigningCertificatesControllerRequest" }); } } function __c297(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ admin_email: S.String, name: S.String, }).pipe(T.Http({ method: "POST", uri: "/platform/teams", code: 200 })), ).annotate({ identifier: "CreateTeamsControllerTeamRequest" }); } } function __c298(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ object: S.String, id: S.String, name: S.String, production_state: S.String, production_enabled_at: S.NullOr(S.String), created_at: S.String, updated_at: S.String, }), ).annotate({ identifier: "Team" }); } } function __c299(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ organizationId: S.String.pipe(T.Label()), slug: S.String.pipe(T.Label()), }).pipe( T.Http({ method: "POST", uri: "/authorization/organizations/{organizationId}/roles/{slug}/permissions", code: 200, }), ), ).annotate({ identifier: "AddAuthorizationOrganizationRolePermissionsControllerPermissionRequest", }); } } function __c300(j: number): any { switch (j) { case 0: return S.Array(S.String); } } function __c301(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ slug: S.String, object: S.String, id: S.String, name: S.String, description: S.NullOr(S.String), type: S.String, resource_type_slug: S.String, permissions: __S(2400, __c300, 0), created_at: S.String, updated_at: S.String, }), ).annotate({ identifier: "AddAuthorizationOrganizationRolePermissionsControllerPermissionResponse", }); } } function __c302(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ userId: S.String.pipe(T.Label()), name: S.String, organization_id: S.String, permissions: S.optional(__S(2400, __c300, 0)), expires_at: S.optional(S.String), }).pipe( T.Http({ method: "POST", uri: "/user_management/users/{userId}/api_keys", code: 200 }), ), ).annotate({ identifier: "CreateUserApiKeysControllerRequest" }); case 1: return S.suspend(() => S.Struct({ object: S.String, id: S.String, owner: __S(2424, __c303, 0), name: S.String, obfuscated_value: S.String, last_used_at: S.NullOr(S.String), expires_at: S.NullOr(S.String), permissions: __S(2400, __c300, 0), created_at: S.String, updated_at: S.String, value: S.String, }), ).annotate({ identifier: "UserApiKeyWithValue" }); } } function __c303(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ type: S.String, id: S.String, organization_id: S.String, }), ).annotate({ identifier: "ApiKeyOwnerCase1" }); } } function __c304(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ email: S.optional(S.String), organization_id: S.optional(S.String), role_slug: S.optional(S.String), expires_in_days: S.optional(S.Number), inviter_user_id: S.optional(S.String), locale: S.optional(S.String), }).pipe(T.Http({ method: "POST", uri: "/user_management/invitations", code: 200 })), ).annotate({ identifier: "CreateUserlandUserInvitesControllerRequest" }); } } function __c305(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ object: S.optional(S.String), id: S.optional(S.String), email: S.optional(S.String), state: S.optional(S.String), accepted_at: S.optional(S.NullOr(S.String)), revoked_at: S.optional(S.NullOr(S.String)), expires_at: S.optional(S.String), organization_id: S.optional(S.NullOr(S.String)), inviter_user_id: S.optional(S.NullOr(S.String)), accepted_user_id: S.optional(S.NullOr(S.String)), role_slug: S.optional(S.NullOr(S.String)), created_at: S.optional(S.String), updated_at: S.optional(S.String), token: S.optional(S.String), accept_invitation_url: S.optional(S.String), }), ).annotate({ identifier: "UserlandUserInvite" }); } } function __c306(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ user_id: S.String, organization_id: S.String, role_slug: S.optional(S.String), role_slugs: S.optional(__S(2400, __c300, 0)), }).pipe( T.Http({ method: "POST", uri: "/user_management/organization_memberships", code: 200 }), ), ).annotate({ identifier: "CreateUserlandUserOrganizationMembershipsControllerRequest" }); } } function __c307(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ object: S.String, id: S.String, user_id: S.String, organization_id: S.String, status: S.String, directory_managed: S.Boolean, organization_name: S.optional(S.String), custom_attributes: S.optional(__S(936, __c117, 0)), created_at: S.String, updated_at: S.String, role: __S(560, __c70, 0), roles: __S(2464, __c308, 0), user: __S(2472, __c309, 0), }), ).annotate({ identifier: "CreateUserlandUserOrganizationMembershipsControllerResponse" }); } } function __c308(j: number): any { switch (j) { case 0: return S.Array(__S(560, __c70, 0)); } } function __c309(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ object: S.optional(S.String), id: S.optional(S.String), first_name: S.optional(S.NullOr(S.String)), last_name: S.optional(S.NullOr(S.String)), name: S.optional(S.NullOr(S.String)), profile_picture_url: S.optional(S.NullOr(S.String)), email: S.optional(S.String), email_verified: S.optional(S.Boolean), external_id: S.optional(S.NullOr(S.String)), metadata: S.optional(__S(416, __c52, 0)), last_sign_in_at: S.optional(S.NullOr(S.String)), locale: S.optional(S.NullOr(S.String)), created_at: S.optional(S.String), updated_at: S.optional(S.String), }), ).annotate({ identifier: "UserlandUser" }); } } function __c310(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ id: S.String.pipe(T.Label()), email: S.String, additional_fields: S.optional(__S(416, __c52, 0)), send_confirmation_email: S.optional(S.Boolean), }).pipe( T.Http({ method: "POST", uri: "/user_management/waitlists/{id}/entries", code: 200 }), ), ).annotate({ identifier: "CreateWaitlistsControllerEntryRequest" }); } } function __c311(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ endpoint_url: S.optional(S.String), events: S.optional(__S(1968, __c246, 0)), }).pipe(T.Http({ method: "POST", uri: "/webhook_endpoints", code: 200 })), ).annotate({ identifier: "CreateWebhookEndpointsControllerRequest" }); } } function __c312(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ object: S.optional(S.String), id: S.optional(S.String), endpoint_url: S.optional(S.String), secret: S.optional(S.String.pipe(T.SensitiveValue({}))), status: S.optional(S.String), events: S.optional(__S(2400, __c300, 0)), created_at: S.optional(S.String), updated_at: S.optional(S.String), }), ).annotate({ identifier: "WebhookEndpointJson" }); } } function __c313(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ slug: S.String.pipe(T.Label()), body: S.Unknown.pipe(T.HttpBody()), }).pipe(T.Http({ method: "POST", uri: "/data-integrations/{slug}/authorize", code: 200 })), ).annotate({ identifier: "DataIntegrationsControllerGetDataIntegrationAuthorizeUrlRequest" }); } } function __c314(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ slug: S.String.pipe(T.Label()), user_id: S.String, organization_id: S.optional(S.String), connected_account_id: S.optional(S.String), connection_owner: S.optional(S.String), supports_multiple_connections: S.optional(S.Boolean), }).pipe( T.Http({ method: "POST", uri: "/data-integrations/{slug}/credentials", code: 200 }), ), ).annotate({ identifier: "DataIntegrationsControllerVendCredentialsRequest" }); case 1: return S.suspend(() => S.Unknown.pipe(T.RawResponseRoot())).annotate({ identifier: "DataIntegrationsControllerVendCredentialsResponse", }); } } function __c315(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ id: S.String.pipe(T.Label()), }).pipe( T.Http({ method: "PUT", uri: "/user_management/organization_memberships/{id}/deactivate", code: 200, }), ), ).annotate({ identifier: "DeactivateUserlandUserOrganizationMembershipsControllerRequest" }); } } function __c316(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ keys: S.String, }).pipe(T.Http({ method: "POST", uri: "/vault/v1/keys/decrypt", code: 200 })), ).annotate({ identifier: "DecryptJumpWireWebKeyControllerRequest" }); case 1: return S.suspend(() => S.Struct({ data_key: S.String, id: S.String, }), ).annotate({ identifier: "DecryptResponse" }); } } function __c317(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ agent_blueprint_id: S.String.pipe(T.Label()), }).pipe( T.Http({ method: "DELETE", uri: "/agents/blueprints/{agent_blueprint_id}", code: 200 }), ), ).annotate({ identifier: "DeleteAgentBlueprintsControllerRequest" }); } } function __c318(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ slug: S.String.pipe(T.Label()), }).pipe( T.Http({ method: "POST", uri: "/authorization/roles/{slug}/permissions", code: 200 }), ), ).annotate({ identifier: "AddAuthorizationRolePermissionsControllerPermissionRequest" }); } } function __c319(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ agent_instance_id: S.String.pipe(T.Label()), }).pipe( T.Http({ method: "DELETE", uri: "/agents/instances/{agent_instance_id}", code: 200 }), ), ).annotate({ identifier: "DeleteAgentInstancesControllerRequest" }); } } function __c320(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ id: S.String.pipe(T.Label()), }).pipe(T.Http({ method: "DELETE", uri: "/api_keys/{id}", code: 200 })), ).annotate({ identifier: "DeleteApiKeysControllerRequest" }); } } function __c321(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ id: S.String.pipe(T.Label()), }).pipe(T.Http({ method: "DELETE", uri: "/connect/client_secrets/{id}", code: 200 })), ).annotate({ identifier: "DeleteApplicationCredentialsControllerRequest" }); } } function __c322(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ id: S.String.pipe(T.Label()), }).pipe(T.Http({ method: "DELETE", uri: "/connect/applications/{id}", code: 200 })), ).annotate({ identifier: "DeleteApplicationsControllerRequest" }); } } function __c323(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ id: S.String.pipe(T.Label()), }).pipe(T.Http({ method: "DELETE", uri: "/auth/factors/{id}", code: 200 })), ).annotate({ identifier: "DeleteAuthenticationFactorsControllerRequest" }); } } function __c324(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ id: S.String.pipe(T.Label()), }).pipe( T.Http({ method: "DELETE", uri: "/user_management/authkit_oauth_resources/{id}", code: 200, }), ), ).annotate({ identifier: "DeleteAuthkitOauthResourcesControllerRequest" }); } } function __c325(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ organizationId: S.String.pipe(T.Label()), slug: S.String.pipe(T.Label()), }).pipe( T.Http({ method: "DELETE", uri: "/authorization/organizations/{organizationId}/roles/{slug}", code: 200, }), ), ).annotate({ identifier: "DeleteAuthorizationOrganizationRolesControllerRequest" }); } } function __c326(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ slug: S.String.pipe(T.Label()), }).pipe(T.Http({ method: "DELETE", uri: "/authorization/permissions/{slug}", code: 200 })), ).annotate({ identifier: "DeleteAuthorizationPermissionsControllerRequest" }); } } function __c327(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ organization_id: S.String.pipe(T.Label()), resource_type_slug: S.String.pipe(T.Label()), external_id: S.String.pipe(T.Label()), cascade_delete: S.optional(S.Boolean.pipe(T.Query())), }).pipe( T.Http({ method: "DELETE", uri: "/authorization/organizations/{organization_id}/resources/{resource_type_slug}/{external_id}", code: 200, }), ), ).annotate({ identifier: "DeleteAuthorizationResourcesByExternalIdControllerByExternalIdRequest", }); } } function __c328(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ resource_id: S.String.pipe(T.Label()), cascade_delete: S.optional(S.Boolean.pipe(T.Query())), }).pipe( T.Http({ method: "DELETE", uri: "/authorization/resources/{resource_id}", code: 200 }), ), ).annotate({ identifier: "DeleteAuthorizationResourcesControllerRequest" }); } } function __c329(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ organizationId: S.String.pipe(T.Label()), groupId: S.String.pipe(T.Label()), organization_membership_id: S.optional(S.String), }).pipe( T.Http({ method: "POST", uri: "/organizations/{organizationId}/groups/{groupId}/organization-memberships", code: 200, }), ), ).annotate({ identifier: "AddGroupMembershipsControllerMemberRequest" }); } } function __c330(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ object: S.optional(S.String), id: S.optional(S.String), organization_id: S.optional(S.String), name: S.optional(S.String), description: S.optional(S.NullOr(S.String)), created_at: S.optional(S.String), updated_at: S.optional(S.String), }), ).annotate({ identifier: "Group" }); } } function __c331(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ user_id: S.String.pipe(T.Label()), application_id: S.String.pipe(T.Label()), }).pipe( T.Http({ method: "DELETE", uri: "/user_management/users/{user_id}/authorized_applications/{application_id}", code: 200, }), ), ).annotate({ identifier: "DeleteAuthorizedApplicationsControllerRequest" }); } } function __c332(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ id: S.String.pipe(T.Label()), }).pipe(T.Http({ method: "DELETE", uri: "/connections/{id}", code: 200 })), ).annotate({ identifier: "DeleteConnectionsControllerRequest" }); } } function __c333(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ slug: S.String.pipe(T.Label()), }).pipe(T.Http({ method: "DELETE", uri: "/data-integrations/{slug}", code: 200 })), ).annotate({ identifier: "DeleteDataIntegrationsManagementControllerDataIntegrationRequest", }); } } function __c334(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ slug: S.String.pipe(T.Label()), }).pipe( T.Http({ method: "DELETE", uri: "/data-integrations/{slug}/organization", code: 200 }), ), ).annotate({ identifier: "DeleteDataIntegrationsManagementControllerOrganizationDataIntegrationRequest", }); } } function __c335(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ organization_id: S.String.pipe(T.Label()), slug: S.String.pipe(T.Label()), supports_multiple_connections: S.optional(S.Boolean.pipe(T.Query())), connected_account_id: S.optional(S.String.pipe(T.Query())), }).pipe( T.Http({ method: "DELETE", uri: "/organizations/{organization_id}/connected_accounts/{slug}", code: 200, }), ), ).annotate({ identifier: "DeleteDataIntegrationsOrganizationControllerOrganizationDataInstallationRequest", }); } } function __c336(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ user_id: S.String.pipe(T.Label()), slug: S.String.pipe(T.Label()), organization_id: S.optional(S.String.pipe(T.Query())), supports_multiple_connections: S.optional(S.Boolean.pipe(T.Query())), connected_account_id: S.optional(S.String.pipe(T.Query())), }).pipe( T.Http({ method: "DELETE", uri: "/user_management/users/{user_id}/connected_accounts/{slug}", code: 200, }), ), ).annotate({ identifier: "DeleteDataIntegrationsUserManagementControllerUserDataInstallationRequest", }); } } function __c337(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ id: S.String.pipe(T.Label()), }).pipe(T.Http({ method: "DELETE", uri: "/directories/{id}", code: 200 })), ).annotate({ identifier: "DeleteDirectoriesControllerDirectoryRequest" }); } } function __c338(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ slug: S.String.pipe(T.Label()), resourceId: S.String.pipe(T.Label()), }).pipe( T.Http({ method: "DELETE", uri: "/feature-flags/{slug}/targets/{resourceId}", code: 200, }), ), ).annotate({ identifier: "DeleteFlagTargetsControllerTargetRequest" }); } } function __c339(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ organizationId: S.String.pipe(T.Label()), groupId: S.String.pipe(T.Label()), }).pipe( T.Http({ method: "DELETE", uri: "/organizations/{organizationId}/groups/{groupId}", code: 200, }), ), ).annotate({ identifier: "DeleteGroupsControllerRequest" }); } } function __c340(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ organization_id: S.String.pipe(T.Label()), contact_id: S.String.pipe(T.Label()), }).pipe( T.Http({ method: "DELETE", uri: "/organizations/{organization_id}/it_contacts/{contact_id}", code: 200, }), ), ).annotate({ identifier: "DeleteItContactsControllerRequest" }); } } function __c341(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ email: S.String, external_id: S.String, }), ).annotate({ identifier: "AgentAdminControllerLinkClaimAttemptToExternalUserRequestUser" }); case 1: return S.suspend(() => S.Struct({ type: S.String, claim_attempt_token: S.String, user: __S(2728, __c341, 0), organization_id: S.optional(S.String), }).pipe(T.Http({ method: "PATCH", uri: "/agents/claims/attempts", code: 200 })), ).annotate({ identifier: "AgentAdminControllerLinkClaimAttemptToExternalUserRequest" }); case 2: return S.Array(__S(2736, __c342, 0)); case 3: return S.suspend(() => S.Struct({ id: S.String, status: S.String, user_code: S.String, organizations: __S(2730, __c341, 2), }), ).annotate({ identifier: "ClaimViewResponse" }); } } function __c342(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ id: S.String, name: S.String, }), ).annotate({ identifier: "ClaimViewResponseOrganizationsItem" }); } } function __c343(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ id: S.String.pipe(T.Label()), version_check: S.optional(S.String.pipe(T.Query())), }).pipe(T.Http({ method: "DELETE", uri: "/vault/v1/kv/{id}", code: 200 })), ).annotate({ identifier: "DeleteJumpWireWebDataVaultControllerRequest" }); case 1: return S.suspend(() => S.Struct({ name: S.String, success: S.Boolean, }), ).annotate({ identifier: "DeleteObjectResponse" }); } } function __c344(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ id: S.String.pipe(T.Label()), }).pipe(T.Http({ method: "DELETE", uri: "/organization_domains/{id}", code: 200 })), ).annotate({ identifier: "DeleteOrganizationDomainsControllerRequest" }); } } function __c345(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ id: S.String.pipe(T.Label()), }).pipe(T.Http({ method: "DELETE", uri: "/organizations/{id}", code: 200 })), ).annotate({ identifier: "DeleteOrganizationsControllerOrganizationRequest" }); } } function __c346(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ id: S.String.pipe(T.Label()), }).pipe( T.Http({ method: "DELETE", uri: "/user_management/redirect_uris/{id}", code: 200 }), ), ).annotate({ identifier: "DeleteRedirectUrisControllerRequest" }); } } function __c347(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ connectionId: S.String.pipe(T.Label()), certificateId: S.String.pipe(T.Label()), }).pipe( T.Http({ method: "DELETE", uri: "/connections/{connectionId}/saml_idp_signing_certs/{certificateId}", code: 200, }), ), ).annotate({ identifier: "DeleteSamlIdpSigningCertificatesControllerRequest" }); } } function __c348(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ connectionId: S.String.pipe(T.Label()), certificateId: S.String.pipe(T.Label()), }).pipe( T.Http({ method: "DELETE", uri: "/connections/{connectionId}/saml_sp_encryption_certs/{certificateId}", code: 200, }), ), ).annotate({ identifier: "DeleteSamlSpEncryptionCertificatesControllerRequest" }); } } function __c349(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ connectionId: S.String.pipe(T.Label()), certificateId: S.String.pipe(T.Label()), }).pipe( T.Http({ method: "DELETE", uri: "/connections/{connectionId}/saml_sp_signing_cert/{certificateId}", code: 200, }), ), ).annotate({ identifier: "DeleteSamlSpSigningCertificatesControllerRequest" }); } } function __c350(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ id: S.String.pipe(T.Label()), }).pipe( T.Http({ method: "DELETE", uri: "/user_management/organization_memberships/{id}", code: 200, }), ), ).annotate({ identifier: "DeleteUserlandUserOrganizationMembershipsControllerRequest" }); } } function __c351(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ id: S.String.pipe(T.Label()), }).pipe( T.Http({ method: "DELETE", uri: "/user_management/waitlist_entries/{id}", code: 200 }), ), ).annotate({ identifier: "DeleteWaitlistEntriesControllerRequest" }); } } function __c352(j: number): any { switch (j) { case 0: return S.suspend(() => S.Struct({ id: S.String.pipe(T.Label()), }).pipe(T.Http({ method: "DELETE", uri: "/webhook_endpoints/{id}", code: 200 })), ).annotate({ identifier: "DeleteWebhookEndpointsControllerRequest" }); } } // Schema table: entry i is schema j of builder f, made on first reach. function __S(i: number, f: (j: number) => unknown, j: number): any { return (__s[i] ??= __L.at(f, j)); }