0xray 4.0.13 → 4.0.15

package/dist/infrastructure/schemas/cloud-schemas.d.ts

@@ -0,0 +1,482 @@
+/**
+ * Cloud Infrastructure Schemas
+ *
+ * Schema definitions for cloud provider configurations, ensuring
+ * enterprise-grade validation and compliance with Universal Development Codex v1.2.0.
+ *
+ * @since 2026-01-08
+ */
+import { z } from "zod";
+export declare const AWSCredentialsSchema: z.ZodObject<{
+    accessKeyId: z.ZodString;
+    secretAccessKey: z.ZodString;
+    sessionToken: z.ZodOptional<z.ZodString>;
+    region: z.ZodDefault<z.ZodString>;
+}, z.core.$strip>;
+export declare const AWSVPCConfigSchema: z.ZodObject<{
+    vpcId: z.ZodOptional<z.ZodString>;
+    subnetIds: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    securityGroupIds: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    createVpc: z.ZodDefault<z.ZodBoolean>;
+    cidrBlock: z.ZodDefault<z.ZodString>;
+    availabilityZones: z.ZodOptional<z.ZodArray<z.ZodString>>;
+}, z.core.$strip>;
+export declare const AWSLoadBalancerConfigSchema: z.ZodObject<{
+    name: z.ZodString;
+    type: z.ZodDefault<z.ZodEnum<{
+        application: "application";
+        network: "network";
+        gateway: "gateway";
+    }>>;
+    scheme: z.ZodDefault<z.ZodEnum<{
+        internal: "internal";
+        "internet-facing": "internet-facing";
+    }>>;
+    securityGroups: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    subnets: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    enableDeletionProtection: z.ZodDefault<z.ZodBoolean>;
+    idleTimeout: z.ZodDefault<z.ZodNumber>;
+    rateLimit: z.ZodOptional<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        requestsPerSecond: z.ZodDefault<z.ZodNumber>;
+        burstLimit: z.ZodDefault<z.ZodNumber>;
+        byIp: z.ZodDefault<z.ZodBoolean>;
+        byHeader: z.ZodOptional<z.ZodObject<{
+            enabled: z.ZodDefault<z.ZodBoolean>;
+            headerName: z.ZodOptional<z.ZodString>;
+            headerValues: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        }, z.core.$strip>>;
+        customRules: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            name: z.ZodString;
+            priority: z.ZodNumber;
+            action: z.ZodEnum<{
+                deny: "deny";
+                allow: "allow";
+                count: "count";
+            }>;
+            conditions: z.ZodArray<z.ZodObject<{
+                type: z.ZodEnum<{
+                    path: "path";
+                    header: "header";
+                    httpMethod: "httpMethod";
+                    queryString: "queryString";
+                    sourceIp: "sourceIp";
+                }>;
+                values: z.ZodArray<z.ZodString>;
+            }, z.core.$strip>>;
+        }, z.core.$strip>>>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export declare const AWSAPIGatewayConfigSchema: z.ZodObject<{
+    name: z.ZodString;
+    description: z.ZodOptional<z.ZodString>;
+    protocolType: z.ZodDefault<z.ZodEnum<{
+        HTTP: "HTTP";
+        WEBSOCKET: "WEBSOCKET";
+    }>>;
+    corsConfiguration: z.ZodOptional<z.ZodObject<{
+        allowCredentials: z.ZodOptional<z.ZodBoolean>;
+        allowHeaders: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        allowMethods: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        allowOrigins: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        exposeHeaders: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        maxAge: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strip>>;
+    throttling: z.ZodOptional<z.ZodObject<{
+        burstLimit: z.ZodDefault<z.ZodNumber>;
+        rateLimit: z.ZodDefault<z.ZodNumber>;
+    }, z.core.$strip>>;
+    usagePlans: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        description: z.ZodOptional<z.ZodString>;
+        throttle: z.ZodObject<{
+            burstLimit: z.ZodNumber;
+            rateLimit: z.ZodNumber;
+        }, z.core.$strip>;
+        quota: z.ZodOptional<z.ZodObject<{
+            limit: z.ZodNumber;
+            offset: z.ZodOptional<z.ZodNumber>;
+            period: z.ZodEnum<{
+                DAY: "DAY";
+                WEEK: "WEEK";
+                MONTH: "MONTH";
+            }>;
+        }, z.core.$strip>>;
+        apiStages: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            apiId: z.ZodString;
+            stage: z.ZodString;
+            throttle: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+                burstLimit: z.ZodNumber;
+                rateLimit: z.ZodNumber;
+            }, z.core.$strip>>>;
+        }, z.core.$strip>>>;
+    }, z.core.$strip>>>;
+}, z.core.$strip>;
+export declare const AWSCloudFormationTemplateSchema: z.ZodObject<{
+    AWSTemplateFormatVersion: z.ZodOptional<z.ZodString>;
+    Description: z.ZodOptional<z.ZodString>;
+    Metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
+    Parameters: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+        Type: z.ZodString;
+        Default: z.ZodOptional<z.ZodAny>;
+        AllowedValues: z.ZodOptional<z.ZodArray<z.ZodAny>>;
+        AllowedPattern: z.ZodOptional<z.ZodString>;
+        ConstraintDescription: z.ZodOptional<z.ZodString>;
+        Description: z.ZodOptional<z.ZodString>;
+        MaxLength: z.ZodOptional<z.ZodNumber>;
+        MinLength: z.ZodOptional<z.ZodNumber>;
+        MaxValue: z.ZodOptional<z.ZodNumber>;
+        MinValue: z.ZodOptional<z.ZodNumber>;
+        NoEcho: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strip>>>;
+    Mappings: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodRecord<z.ZodString, z.ZodRecord<z.ZodString, z.ZodAny>>>>;
+    Conditions: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
+    Transform: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
+    Resources: z.ZodRecord<z.ZodString, z.ZodObject<{
+        Type: z.ZodString;
+        Properties: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
+        DependsOn: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
+        Metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
+        DeletionPolicy: z.ZodOptional<z.ZodEnum<{
+            Delete: "Delete";
+            Retain: "Retain";
+            Snapshot: "Snapshot";
+        }>>;
+        UpdateReplacePolicy: z.ZodOptional<z.ZodEnum<{
+            Delete: "Delete";
+            Retain: "Retain";
+            Snapshot: "Snapshot";
+        }>>;
+        Condition: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    Outputs: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+        Description: z.ZodOptional<z.ZodString>;
+        Value: z.ZodAny;
+        Export: z.ZodOptional<z.ZodObject<{
+            Name: z.ZodString;
+        }, z.core.$strip>>;
+        Condition: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>>;
+}, z.core.$strip>;
+export declare const AzureCredentialsSchema: z.ZodObject<{
+    clientId: z.ZodString;
+    clientSecret: z.ZodString;
+    tenantId: z.ZodString;
+    subscriptionId: z.ZodString;
+}, z.core.$strip>;
+export declare const AzureLoadBalancerConfigSchema: z.ZodObject<{
+    name: z.ZodString;
+    location: z.ZodString;
+    sku: z.ZodObject<{
+        name: z.ZodDefault<z.ZodEnum<{
+            Basic: "Basic";
+            Standard: "Standard";
+        }>>;
+        tier: z.ZodDefault<z.ZodEnum<{
+            Regional: "Regional";
+            Global: "Global";
+        }>>;
+    }, z.core.$strip>;
+    frontendIPConfigurations: z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        properties: z.ZodObject<{
+            privateIPAllocationMethod: z.ZodOptional<z.ZodEnum<{
+                Static: "Static";
+                Dynamic: "Dynamic";
+            }>>;
+            privateIPAddress: z.ZodOptional<z.ZodString>;
+            subnet: z.ZodOptional<z.ZodObject<{
+                id: z.ZodString;
+            }, z.core.$strip>>;
+            publicIPAddress: z.ZodOptional<z.ZodObject<{
+                id: z.ZodString;
+            }, z.core.$strip>>;
+        }, z.core.$strip>;
+    }, z.core.$strip>>;
+    backendAddressPools: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+    }, z.core.$strip>>>;
+    loadBalancingRules: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        properties: z.ZodObject<{
+            frontendIPConfiguration: z.ZodObject<{
+                id: z.ZodString;
+            }, z.core.$strip>;
+            backendAddressPool: z.ZodObject<{
+                id: z.ZodString;
+            }, z.core.$strip>;
+            probe: z.ZodObject<{
+                id: z.ZodString;
+            }, z.core.$strip>;
+            protocol: z.ZodEnum<{
+                Tcp: "Tcp";
+                Udp: "Udp";
+                All: "All";
+            }>;
+            frontendPort: z.ZodNumber;
+            backendPort: z.ZodNumber;
+            idleTimeoutInMinutes: z.ZodOptional<z.ZodNumber>;
+            enableFloatingIP: z.ZodOptional<z.ZodBoolean>;
+            loadDistribution: z.ZodOptional<z.ZodEnum<{
+                Default: "Default";
+                SourceIP: "SourceIP";
+                SourceIPProtocol: "SourceIPProtocol";
+            }>>;
+        }, z.core.$strip>;
+    }, z.core.$strip>>>;
+    rateLimit: z.ZodOptional<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        rules: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            name: z.ZodString;
+            priority: z.ZodNumber;
+            matchConditions: z.ZodArray<z.ZodObject<{
+                matchVariables: z.ZodArray<z.ZodObject<{
+                    variableName: z.ZodEnum<{
+                        RemoteAddr: "RemoteAddr";
+                        RequestMethod: "RequestMethod";
+                        QueryString: "QueryString";
+                        PostArgs: "PostArgs";
+                        RequestUri: "RequestUri";
+                        RequestHeaders: "RequestHeaders";
+                    }>;
+                    selector: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>>;
+                operator: z.ZodEnum<{
+                    Any: "Any";
+                    IPMatch: "IPMatch";
+                    GeoMatch: "GeoMatch";
+                    Equal: "Equal";
+                    Contains: "Contains";
+                    LessThan: "LessThan";
+                    GreaterThan: "GreaterThan";
+                    LessThanOrEqual: "LessThanOrEqual";
+                    GreaterThanOrEqual: "GreaterThanOrEqual";
+                    BeginsWith: "BeginsWith";
+                    EndsWith: "EndsWith";
+                    RegEx: "RegEx";
+                }>;
+                matchValues: z.ZodArray<z.ZodString>;
+                transforms: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                    Lowercase: "Lowercase";
+                    Trim: "Trim";
+                    UrlDecode: "UrlDecode";
+                    UrlEncode: "UrlEncode";
+                    RemoveNulls: "RemoveNulls";
+                    HtmlEntityDecode: "HtmlEntityDecode";
+                }>>>;
+            }, z.core.$strip>>;
+            action: z.ZodEnum<{
+                Allow: "Allow";
+                Block: "Block";
+                Log: "Log";
+                Redirect: "Redirect";
+            }>;
+        }, z.core.$strip>>>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export declare const AzureAPIManagementConfigSchema: z.ZodObject<{
+    name: z.ZodString;
+    location: z.ZodString;
+    sku: z.ZodObject<{
+        name: z.ZodDefault<z.ZodEnum<{
+            Basic: "Basic";
+            Standard: "Standard";
+            Developer: "Developer";
+            Premium: "Premium";
+            Consumption: "Consumption";
+        }>>;
+        capacity: z.ZodDefault<z.ZodNumber>;
+    }, z.core.$strip>;
+    publisherEmail: z.ZodString;
+    publisherName: z.ZodString;
+    policies: z.ZodOptional<z.ZodObject<{
+        inbound: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            rateLimit: z.ZodOptional<z.ZodObject<{
+                calls: z.ZodNumber;
+                renewalPeriod: z.ZodNumber;
+                counterKey: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>>;
+            rateLimitByKey: z.ZodOptional<z.ZodObject<{
+                calls: z.ZodNumber;
+                renewalPeriod: z.ZodNumber;
+                counterKey: z.ZodString;
+                incrementCondition: z.ZodOptional<z.ZodString>;
+                incrementCount: z.ZodOptional<z.ZodNumber>;
+            }, z.core.$strip>>;
+        }, z.core.$strip>>>;
+        outbound: z.ZodOptional<z.ZodArray<z.ZodAny>>;
+        backend: z.ZodOptional<z.ZodArray<z.ZodAny>>;
+        onError: z.ZodOptional<z.ZodArray<z.ZodAny>>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export declare const GCPCredentialsSchema: z.ZodObject<{
+    type: z.ZodLiteral<"service_account">;
+    project_id: z.ZodString;
+    private_key_id: z.ZodString;
+    private_key: z.ZodString;
+    client_email: z.ZodString;
+    client_id: z.ZodString;
+    auth_uri: z.ZodString;
+    token_uri: z.ZodString;
+    auth_provider_x509_cert_url: z.ZodString;
+    client_x509_cert_url: z.ZodString;
+}, z.core.$strip>;
+export declare const GCPLoadBalancerConfigSchema: z.ZodObject<{
+    name: z.ZodString;
+    region: z.ZodString;
+    backendService: z.ZodObject<{
+        name: z.ZodString;
+        backends: z.ZodArray<z.ZodObject<{
+            group: z.ZodString;
+            balancingMode: z.ZodDefault<z.ZodEnum<{
+                UTILIZATION: "UTILIZATION";
+                RATE: "RATE";
+            }>>;
+            maxUtilization: z.ZodDefault<z.ZodNumber>;
+            maxRatePerInstance: z.ZodOptional<z.ZodNumber>;
+            capacityScaler: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strip>>;
+        healthChecks: z.ZodArray<z.ZodString>;
+        loadBalancingScheme: z.ZodDefault<z.ZodEnum<{
+            INTERNAL: "INTERNAL";
+            EXTERNAL: "EXTERNAL";
+        }>>;
+        protocol: z.ZodDefault<z.ZodEnum<{
+            HTTPS: "HTTPS";
+            HTTP: "HTTP";
+            HTTP2: "HTTP2";
+            TCP: "TCP";
+            UDP: "UDP";
+            GRPC: "GRPC";
+        }>>;
+    }, z.core.$strip>;
+    rateLimit: z.ZodOptional<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        rateLimiter: z.ZodOptional<z.ZodObject<{
+            enforceOnKey: z.ZodDefault<z.ZodEnum<{
+                ALL: "ALL";
+                IP: "IP";
+                HTTP_HEADER: "HTTP_HEADER";
+                XFF_IP: "XFF_IP";
+            }>>;
+            enforceOnKeyName: z.ZodOptional<z.ZodString>;
+            rateLimitThreshold: z.ZodObject<{
+                count: z.ZodNumber;
+                intervalSec: z.ZodNumber;
+            }, z.core.$strip>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export declare const GCPAPIGatewayConfigSchema: z.ZodObject<{
+    name: z.ZodString;
+    displayName: z.ZodString;
+    description: z.ZodOptional<z.ZodString>;
+    apiConfig: z.ZodObject<{
+        name: z.ZodString;
+        displayName: z.ZodString;
+        description: z.ZodOptional<z.ZodString>;
+        openapiDocuments: z.ZodArray<z.ZodObject<{
+            document: z.ZodObject<{
+                path: z.ZodString;
+                contents: z.ZodString;
+            }, z.core.$strip>;
+        }, z.core.$strip>>;
+        gatewayConfig: z.ZodOptional<z.ZodObject<{
+            backendConfig: z.ZodOptional<z.ZodObject<{
+                googleServiceAccount: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>>;
+        }, z.core.$strip>>;
+        quota: z.ZodOptional<z.ZodObject<{
+            limits: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                name: z.ZodString;
+                metric: z.ZodString;
+                unit: z.ZodEnum<{
+                    DAY: "DAY";
+                    MINUTE: "MINUTE";
+                    HOUR: "HOUR";
+                }>;
+                values: z.ZodRecord<z.ZodString, z.ZodString>;
+            }, z.core.$strip>>>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+export declare const InfrastructureConfigSchema: z.ZodObject<{
+    provider: z.ZodEnum<{
+        aws: "aws";
+        gcp: "gcp";
+        azure: "azure";
+    }>;
+    region: z.ZodString;
+    environment: z.ZodDefault<z.ZodEnum<{
+        staging: "staging";
+        dev: "dev";
+        prod: "prod";
+    }>>;
+    tags: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    security: z.ZodOptional<z.ZodObject<{
+        enableEncryption: z.ZodDefault<z.ZodBoolean>;
+        enableLogging: z.ZodDefault<z.ZodBoolean>;
+        enableMonitoring: z.ZodDefault<z.ZodBoolean>;
+        complianceFrameworks: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+            SOC2: "SOC2";
+            HIPAA: "HIPAA";
+            "PCI-DSS": "PCI-DSS";
+            GDPR: "GDPR";
+        }>>>;
+    }, z.core.$strip>>;
+    networking: z.ZodOptional<z.ZodObject<{
+        vpc: z.ZodOptional<z.ZodAny>;
+        loadBalancers: z.ZodOptional<z.ZodArray<z.ZodAny>>;
+        apiGateways: z.ZodOptional<z.ZodArray<z.ZodAny>>;
+        firewalls: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            name: z.ZodString;
+            direction: z.ZodEnum<{
+                INGRESS: "INGRESS";
+                EGRESS: "EGRESS";
+            }>;
+            priority: z.ZodNumber;
+            allowed: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                ipProtocol: z.ZodString;
+                ports: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            }, z.core.$strip>>>;
+            denied: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                ipProtocol: z.ZodString;
+                ports: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            }, z.core.$strip>>>;
+            sourceRanges: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            destinationRanges: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            targetTags: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            sourceTags: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        }, z.core.$strip>>>;
+    }, z.core.$strip>>;
+    rateLimiting: z.ZodOptional<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        globalLimits: z.ZodOptional<z.ZodObject<{
+            requestsPerSecond: z.ZodDefault<z.ZodNumber>;
+            requestsPerMinute: z.ZodDefault<z.ZodNumber>;
+            requestsPerHour: z.ZodDefault<z.ZodNumber>;
+            burstMultiplier: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strip>>;
+        ipBasedLimits: z.ZodOptional<z.ZodObject<{
+            enabled: z.ZodDefault<z.ZodBoolean>;
+            whitelist: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            blacklist: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        }, z.core.$strip>>;
+        endpointLimits: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+            requestsPerSecond: z.ZodNumber;
+            requestsPerMinute: z.ZodOptional<z.ZodNumber>;
+        }, z.core.$strip>>>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type AWSCredentials = z.infer<typeof AWSCredentialsSchema>;
+export type AWSVPCConfig = z.infer<typeof AWSVPCConfigSchema>;
+export type AWSLoadBalancerConfig = z.infer<typeof AWSLoadBalancerConfigSchema>;
+export type AWSAPIGatewayConfig = z.infer<typeof AWSAPIGatewayConfigSchema>;
+export type AWSCloudFormationTemplate = z.infer<typeof AWSCloudFormationTemplateSchema>;
+export type AzureCredentials = z.infer<typeof AzureCredentialsSchema>;
+export type AzureLoadBalancerConfig = z.infer<typeof AzureLoadBalancerConfigSchema>;
+export type AzureAPIManagementConfig = z.infer<typeof AzureAPIManagementConfigSchema>;
+export type GCPCredentials = z.infer<typeof GCPCredentialsSchema>;
+export type GCPLoadBalancerConfig = z.infer<typeof GCPLoadBalancerConfigSchema>;
+export type GCPAPIGatewayConfig = z.infer<typeof GCPAPIGatewayConfigSchema>;
+export type InfrastructureConfig = z.infer<typeof InfrastructureConfigSchema>;