@appforge-ci/core 0.1.1

package/dist/schemas.d.ts

@@ -0,0 +1,776 @@
+import { z } from "zod";
+export declare const platformSchema: z.ZodEnum<["ios", "android", "flutter", "react-native"]>;
+export declare const appforgeWorkflowSchema: z.ZodObject<{
+    name: z.ZodOptional<z.ZodString>;
+    environment: z.ZodOptional<z.ZodObject<{
+        node: z.ZodOptional<z.ZodString>;
+        flutter: z.ZodOptional<z.ZodString>;
+        xcode: z.ZodOptional<z.ZodString>;
+        vars: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    }, "strip", z.ZodTypeAny, {
+        flutter?: string | undefined;
+        node?: string | undefined;
+        xcode?: string | undefined;
+        vars?: Record<string, string> | undefined;
+    }, {
+        flutter?: string | undefined;
+        node?: string | undefined;
+        xcode?: string | undefined;
+        vars?: Record<string, string> | undefined;
+    }>>;
+    triggers: z.ZodOptional<z.ZodObject<{
+        push: z.ZodOptional<z.ZodObject<{
+            branch: z.ZodArray<z.ZodString, "many">;
+        }, "strip", z.ZodTypeAny, {
+            branch: string[];
+        }, {
+            branch: string[];
+        }>>;
+    }, "strip", z.ZodTypeAny, {
+        push?: {
+            branch: string[];
+        } | undefined;
+    }, {
+        push?: {
+            branch: string[];
+        } | undefined;
+    }>>;
+    scripts: z.ZodArray<z.ZodObject<{
+        name: z.ZodOptional<z.ZodString>;
+        script: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        script: string;
+        name?: string | undefined;
+    }, {
+        script: string;
+        name?: string | undefined;
+    }>, "many">;
+    artifacts: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    /** Opt-in post-build smoke test (#9 v1 — installs the built .apk or
+     *  zipped Simulator .app, launches it, screenshots it) — see
+     *  packages/agent/src/lib/android-smoke-test.ts and ios-smoke-test.ts.
+     *  Off by default; never changes existing workflows' behavior. */
+    smokeTest: z.ZodOptional<z.ZodBoolean>;
+    /** Opt-in OTA (over-the-air) code-push update publishing. Off by default. */
+    ota: z.ZodOptional<z.ZodObject<{
+        channel: z.ZodDefault<z.ZodString>;
+        mandatory: z.ZodDefault<z.ZodBoolean>;
+    }, "strip", z.ZodTypeAny, {
+        channel: string;
+        mandatory: boolean;
+    }, {
+        channel?: string | undefined;
+        mandatory?: boolean | undefined;
+    }>>;
+}, "strip", z.ZodTypeAny, {
+    scripts: {
+        script: string;
+        name?: string | undefined;
+    }[];
+    name?: string | undefined;
+    environment?: {
+        flutter?: string | undefined;
+        node?: string | undefined;
+        xcode?: string | undefined;
+        vars?: Record<string, string> | undefined;
+    } | undefined;
+    triggers?: {
+        push?: {
+            branch: string[];
+        } | undefined;
+    } | undefined;
+    artifacts?: string[] | undefined;
+    smokeTest?: boolean | undefined;
+    ota?: {
+        channel: string;
+        mandatory: boolean;
+    } | undefined;
+}, {
+    scripts: {
+        script: string;
+        name?: string | undefined;
+    }[];
+    name?: string | undefined;
+    environment?: {
+        flutter?: string | undefined;
+        node?: string | undefined;
+        xcode?: string | undefined;
+        vars?: Record<string, string> | undefined;
+    } | undefined;
+    triggers?: {
+        push?: {
+            branch: string[];
+        } | undefined;
+    } | undefined;
+    artifacts?: string[] | undefined;
+    smokeTest?: boolean | undefined;
+    ota?: {
+        channel?: string | undefined;
+        mandatory?: boolean | undefined;
+    } | undefined;
+}>;
+/** Validates a parsed appforge.yaml document. */
+export declare const appforgeConfigSchema: z.ZodObject<{
+    platform: z.ZodEnum<["ios", "android", "flutter", "react-native"]>;
+    workflows: z.ZodEffects<z.ZodRecord<z.ZodString, z.ZodObject<{
+        name: z.ZodOptional<z.ZodString>;
+        environment: z.ZodOptional<z.ZodObject<{
+            node: z.ZodOptional<z.ZodString>;
+            flutter: z.ZodOptional<z.ZodString>;
+            xcode: z.ZodOptional<z.ZodString>;
+            vars: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        }, "strip", z.ZodTypeAny, {
+            flutter?: string | undefined;
+            node?: string | undefined;
+            xcode?: string | undefined;
+            vars?: Record<string, string> | undefined;
+        }, {
+            flutter?: string | undefined;
+            node?: string | undefined;
+            xcode?: string | undefined;
+            vars?: Record<string, string> | undefined;
+        }>>;
+        triggers: z.ZodOptional<z.ZodObject<{
+            push: z.ZodOptional<z.ZodObject<{
+                branch: z.ZodArray<z.ZodString, "many">;
+            }, "strip", z.ZodTypeAny, {
+                branch: string[];
+            }, {
+                branch: string[];
+            }>>;
+        }, "strip", z.ZodTypeAny, {
+            push?: {
+                branch: string[];
+            } | undefined;
+        }, {
+            push?: {
+                branch: string[];
+            } | undefined;
+        }>>;
+        scripts: z.ZodArray<z.ZodObject<{
+            name: z.ZodOptional<z.ZodString>;
+            script: z.ZodString;
+        }, "strip", z.ZodTypeAny, {
+            script: string;
+            name?: string | undefined;
+        }, {
+            script: string;
+            name?: string | undefined;
+        }>, "many">;
+        artifacts: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        /** Opt-in post-build smoke test (#9 v1 — installs the built .apk or
+         *  zipped Simulator .app, launches it, screenshots it) — see
+         *  packages/agent/src/lib/android-smoke-test.ts and ios-smoke-test.ts.
+         *  Off by default; never changes existing workflows' behavior. */
+        smokeTest: z.ZodOptional<z.ZodBoolean>;
+        /** Opt-in OTA (over-the-air) code-push update publishing. Off by default. */
+        ota: z.ZodOptional<z.ZodObject<{
+            channel: z.ZodDefault<z.ZodString>;
+            mandatory: z.ZodDefault<z.ZodBoolean>;
+        }, "strip", z.ZodTypeAny, {
+            channel: string;
+            mandatory: boolean;
+        }, {
+            channel?: string | undefined;
+            mandatory?: boolean | undefined;
+        }>>;
+    }, "strip", z.ZodTypeAny, {
+        scripts: {
+            script: string;
+            name?: string | undefined;
+        }[];
+        name?: string | undefined;
+        environment?: {
+            flutter?: string | undefined;
+            node?: string | undefined;
+            xcode?: string | undefined;
+            vars?: Record<string, string> | undefined;
+        } | undefined;
+        triggers?: {
+            push?: {
+                branch: string[];
+            } | undefined;
+        } | undefined;
+        artifacts?: string[] | undefined;
+        smokeTest?: boolean | undefined;
+        ota?: {
+            channel: string;
+            mandatory: boolean;
+        } | undefined;
+    }, {
+        scripts: {
+            script: string;
+            name?: string | undefined;
+        }[];
+        name?: string | undefined;
+        environment?: {
+            flutter?: string | undefined;
+            node?: string | undefined;
+            xcode?: string | undefined;
+            vars?: Record<string, string> | undefined;
+        } | undefined;
+        triggers?: {
+            push?: {
+                branch: string[];
+            } | undefined;
+        } | undefined;
+        artifacts?: string[] | undefined;
+        smokeTest?: boolean | undefined;
+        ota?: {
+            channel?: string | undefined;
+            mandatory?: boolean | undefined;
+        } | undefined;
+    }>>, Record<string, {
+        scripts: {
+            script: string;
+            name?: string | undefined;
+        }[];
+        name?: string | undefined;
+        environment?: {
+            flutter?: string | undefined;
+            node?: string | undefined;
+            xcode?: string | undefined;
+            vars?: Record<string, string> | undefined;
+        } | undefined;
+        triggers?: {
+            push?: {
+                branch: string[];
+            } | undefined;
+        } | undefined;
+        artifacts?: string[] | undefined;
+        smokeTest?: boolean | undefined;
+        ota?: {
+            channel: string;
+            mandatory: boolean;
+        } | undefined;
+    }>, Record<string, {
+        scripts: {
+            script: string;
+            name?: string | undefined;
+        }[];
+        name?: string | undefined;
+        environment?: {
+            flutter?: string | undefined;
+            node?: string | undefined;
+            xcode?: string | undefined;
+            vars?: Record<string, string> | undefined;
+        } | undefined;
+        triggers?: {
+            push?: {
+                branch: string[];
+            } | undefined;
+        } | undefined;
+        artifacts?: string[] | undefined;
+        smokeTest?: boolean | undefined;
+        ota?: {
+            channel?: string | undefined;
+            mandatory?: boolean | undefined;
+        } | undefined;
+    }>>;
+}, "strip", z.ZodTypeAny, {
+    platform: "ios" | "android" | "flutter" | "react-native";
+    workflows: Record<string, {
+        scripts: {
+            script: string;
+            name?: string | undefined;
+        }[];
+        name?: string | undefined;
+        environment?: {
+            flutter?: string | undefined;
+            node?: string | undefined;
+            xcode?: string | undefined;
+            vars?: Record<string, string> | undefined;
+        } | undefined;
+        triggers?: {
+            push?: {
+                branch: string[];
+            } | undefined;
+        } | undefined;
+        artifacts?: string[] | undefined;
+        smokeTest?: boolean | undefined;
+        ota?: {
+            channel: string;
+            mandatory: boolean;
+        } | undefined;
+    }>;
+}, {
+    platform: "ios" | "android" | "flutter" | "react-native";
+    workflows: Record<string, {
+        scripts: {
+            script: string;
+            name?: string | undefined;
+        }[];
+        name?: string | undefined;
+        environment?: {
+            flutter?: string | undefined;
+            node?: string | undefined;
+            xcode?: string | undefined;
+            vars?: Record<string, string> | undefined;
+        } | undefined;
+        triggers?: {
+            push?: {
+                branch: string[];
+            } | undefined;
+        } | undefined;
+        artifacts?: string[] | undefined;
+        smokeTest?: boolean | undefined;
+        ota?: {
+            channel?: string | undefined;
+            mandatory?: boolean | undefined;
+        } | undefined;
+    }>;
+}>;
+export declare const signupSchema: z.ZodObject<{
+    email: z.ZodString;
+    password: z.ZodString;
+    name: z.ZodOptional<z.ZodString>;
+    orgName: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    email: string;
+    password: string;
+    orgName: string;
+    name?: string | undefined;
+}, {
+    email: string;
+    password: string;
+    orgName: string;
+    name?: string | undefined;
+}>;
+export declare const loginSchema: z.ZodObject<{
+    email: z.ZodString;
+    password: z.ZodString;
+    /** Only required when the account has TOTP 2FA enabled — see
+     *  routes/auth.ts's login handler. Mutually exclusive with
+     *  `recoveryCode` in practice (the handler tries `recoveryCode` first
+     *  when both are somehow present), never both required at once. */
+    totpCode: z.ZodOptional<z.ZodString>;
+    /** Alternate to `totpCode` for a lost authenticator — one of
+     *  `TotpRecoveryCode`'s single-use codes (migrations/
+     *  0008_totp_recovery_codes.sql). */
+    recoveryCode: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    email: string;
+    password: string;
+    totpCode?: string | undefined;
+    recoveryCode?: string | undefined;
+}, {
+    email: string;
+    password: string;
+    totpCode?: string | undefined;
+    recoveryCode?: string | undefined;
+}>;
+export declare const verifyEmailSchema: z.ZodObject<{
+    token: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    token: string;
+}, {
+    token: string;
+}>;
+/** `POST /auth/2fa/confirm` requires re-proving the account password —
+ *  the same "a stolen session token alone isn't enough to mutate this"
+ *  reasoning as `disableTotpSchema` below, applied to the opposite
+ *  (enable) side. Without this, a stolen/leaked session token (JWT or
+ *  API token — either satisfies `requireUser`) alone was enough to
+ *  enroll and confirm 2FA with an attacker-controlled secret: `confirm`
+ *  is the call that actually flips `User.totpEnabledAt` and hands back
+ *  the only copy of the recovery codes, and once it's flipped,
+ *  `POST /auth/login` refuses the real account owner (who has neither
+ *  the attacker's authenticator nor their recovery codes) — a
+ *  self-inflicted, unrecoverable lockout worse than the already-guarded
+ *  "stolen token disables 2FA" case, since this codebase has no
+ *  account-recovery flow. See docs/security.md's "2FA (TOTP)" note. */
+export declare const confirmTotpSchema: z.ZodObject<{
+    code: z.ZodString;
+    password: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    code: string;
+    password: string;
+}, {
+    code: string;
+    password: string;
+}>;
+/** `POST /auth/2fa/disable` requires re-proving the account password —
+ *  without this, a stolen/leaked session token (JWT or API token) alone
+ *  was enough to turn off 2FA, defeating the point of having it. See
+ *  docs/security.md's "2FA (TOTP)" note. */
+export declare const disableTotpSchema: z.ZodObject<{
+    password: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    password: string;
+}, {
+    password: string;
+}>;
+/** `POST /auth/2fa/recovery-codes/regenerate` requires re-proving the
+ *  account password — the one mutating 2FA route in `two-factor.ts`
+ *  that didn't get this treatment when `confirmTotpSchema`/
+ *  `disableTotpSchema` above did. Without it, a stolen/leaked session
+ *  token alone (JWT or API token — either satisfies `requireUser`, and
+ *  an API token "never expires on its own") was enough to silently
+ *  invalidate every one of the real owner's existing recovery codes and
+ *  have the fresh set handed back to the attacker instead — two
+ *  independent harms in one call: it silently destroys the owner's own
+ *  recovery path (this codebase has no account-recovery flow, so a
+ *  lost authenticator plus a now-invalid saved code is an unrecoverable
+ *  lockout, with zero signal anywhere that this happened), and it hands
+ *  the attacker 10 valid recovery codes that let them satisfy the 2FA
+ *  challenge at `POST /auth/login` later, using nothing but the
+ *  password itself — defeating the entire point of 2FA. See
+ *  docs/security.md's "2FA (TOTP)" note. */
+export declare const regenerateRecoveryCodesSchema: z.ZodObject<{
+    password: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    password: string;
+}, {
+    password: string;
+}>;
+/** `POST /auth/change-password` — same "re-prove the account password
+ *  before mutating it" reasoning as `disableTotpSchema` above: a stolen
+ *  session token alone must not be enough to rotate the one credential
+ *  every other recovery path (2FA disable, this route itself) treats as
+ *  the account's ultimate fallback. `newPassword` uses the same
+ *  `min(10)` rule `signupSchema` enforces at signup. */
+export declare const changePasswordSchema: z.ZodObject<{
+    currentPassword: z.ZodString;
+    newPassword: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    currentPassword: string;
+    newPassword: string;
+}, {
+    currentPassword: string;
+    newPassword: string;
+}>;
+/** `POST /auth/forgot-password` — deliberately just an email, no
+ *  password: this is the unauthenticated "I forgot it" entry point
+ *  (issue-and-email-a-token side of the pair below), same shape as
+ *  `verifyEmailSchema`'s issuing sibling `resend-verification` (which
+ *  takes no body at all, since it's already `requireUser`-gated; this
+ *  route isn't, so it needs the email to know who to email). */
+export declare const forgotPasswordSchema: z.ZodObject<{
+    email: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    email: string;
+}, {
+    email: string;
+}>;
+/** `POST /auth/reset-password` — redeems the token minted by
+ *  `forgot-password` above. `newPassword` uses the same `min(10)` rule
+ *  `changePasswordSchema`/`signupSchema` enforce everywhere else a
+ *  password is ever set. */
+export declare const resetPasswordSchema: z.ZodObject<{
+    token: z.ZodString;
+    newPassword: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    token: string;
+    newPassword: string;
+}, {
+    token: string;
+    newPassword: string;
+}>;
+export declare const createAppSchema: z.ZodObject<{
+    name: z.ZodString;
+    platform: z.ZodEnum<["ios", "android", "flutter", "react-native"]>;
+    repoUrl: z.ZodEffects<z.ZodString, string, string>;
+    defaultBranch: z.ZodDefault<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    name: string;
+    platform: "ios" | "android" | "flutter" | "react-native";
+    repoUrl: string;
+    defaultBranch: string;
+}, {
+    name: string;
+    platform: "ios" | "android" | "flutter" | "react-native";
+    repoUrl: string;
+    defaultBranch?: string | undefined;
+}>;
+export declare const updateAppSchema: z.ZodObject<{
+    name: z.ZodOptional<z.ZodString>;
+    repoUrl: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
+    defaultBranch: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    name?: string | undefined;
+    repoUrl?: string | undefined;
+    defaultBranch?: string | undefined;
+}, {
+    name?: string | undefined;
+    repoUrl?: string | undefined;
+    defaultBranch?: string | undefined;
+}>;
+export declare const updateOrgSchema: z.ZodObject<{
+    name: z.ZodOptional<z.ZodString>;
+    buildWebhookUrl: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+}, "strip", z.ZodTypeAny, {
+    name?: string | undefined;
+    buildWebhookUrl?: string | null | undefined;
+}, {
+    name?: string | undefined;
+    buildWebhookUrl?: string | null | undefined;
+}>;
+export declare const setAppSecretSchema: z.ZodObject<{
+    name: z.ZodString;
+    value: z.ZodEffects<z.ZodString, string, string>;
+}, "strip", z.ZodTypeAny, {
+    name: string;
+    value: string;
+}, {
+    name: string;
+    value: string;
+}>;
+export declare const FLEET_SECRET_NAMES: readonly ["JWT_SECRET", "JWT_SECRET_PREVIOUS", "INTERNAL_SERVICE_TOKEN"];
+export type FleetSecretName = (typeof FLEET_SECRET_NAMES)[number];
+export declare const setFleetSecretSchema: z.ZodObject<{
+    name: z.ZodEnum<["JWT_SECRET", "JWT_SECRET_PREVIOUS", "INTERNAL_SERVICE_TOKEN"]>;
+    value: z.ZodEffects<z.ZodString, string, string>;
+}, "strip", z.ZodTypeAny, {
+    name: "JWT_SECRET" | "JWT_SECRET_PREVIOUS" | "INTERNAL_SERVICE_TOKEN";
+    value: string;
+}, {
+    name: "JWT_SECRET" | "JWT_SECRET_PREVIOUS" | "INTERNAL_SERVICE_TOKEN";
+    value: string;
+}>;
+export declare const triggerBuildSchema: z.ZodObject<{
+    appId: z.ZodString;
+    workflow: z.ZodEffects<z.ZodString, string, string>;
+    branch: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
+}, "strip", z.ZodTypeAny, {
+    appId: string;
+    workflow: string;
+    branch?: string | undefined;
+}, {
+    appId: string;
+    workflow: string;
+    branch?: string | undefined;
+}>;
+export declare const topUpSchema: z.ZodObject<{
+    packId: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    packId: string;
+}, {
+    packId: string;
+}>;
+export declare const setBillingModeSchema: z.ZodObject<{
+    mode: z.ZodEnum<["prepaid", "postpaid_monthly"]>;
+}, "strip", z.ZodTypeAny, {
+    mode: "prepaid" | "postpaid_monthly";
+}, {
+    mode: "prepaid" | "postpaid_monthly";
+}>;
+export declare const agentEnrollSchema: z.ZodObject<{
+    enrollmentToken: z.ZodString;
+    name: z.ZodString;
+    machineId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    hostname: z.ZodString;
+    macOsVersion: z.ZodString;
+    xcodeVersion: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    flutterVersion: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    javaVersion: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    androidSdkVersion: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    cocoapodsVersion: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    cpuModel: z.ZodString;
+    agentVersion: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    screenSharingEnabled: z.ZodOptional<z.ZodNullable<z.ZodBoolean>>;
+}, "strip", z.ZodTypeAny, {
+    name: string;
+    hostname: string;
+    macOsVersion: string;
+    cpuModel: string;
+    enrollmentToken: string;
+    machineId?: string | null | undefined;
+    xcodeVersion?: string | null | undefined;
+    flutterVersion?: string | null | undefined;
+    javaVersion?: string | null | undefined;
+    androidSdkVersion?: string | null | undefined;
+    cocoapodsVersion?: string | null | undefined;
+    agentVersion?: string | null | undefined;
+    screenSharingEnabled?: boolean | null | undefined;
+}, {
+    name: string;
+    hostname: string;
+    macOsVersion: string;
+    cpuModel: string;
+    enrollmentToken: string;
+    machineId?: string | null | undefined;
+    xcodeVersion?: string | null | undefined;
+    flutterVersion?: string | null | undefined;
+    javaVersion?: string | null | undefined;
+    androidSdkVersion?: string | null | undefined;
+    cocoapodsVersion?: string | null | undefined;
+    agentVersion?: string | null | undefined;
+    screenSharingEnabled?: boolean | null | undefined;
+}>;
+export declare const agentHeartbeatSchema: z.ZodObject<{
+    status: z.ZodEnum<["online", "draining", "building"]>;
+    cpuUsagePercent: z.ZodNumber;
+    memUsagePercent: z.ZodNumber;
+    diskFreeGb: z.ZodNumber;
+    currentBuildId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    tailscaleHostname: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    xcodeVersion: z.ZodNullable<z.ZodString>;
+    flutterVersion: z.ZodNullable<z.ZodString>;
+    javaVersion: z.ZodNullable<z.ZodString>;
+    androidSdkVersion: z.ZodNullable<z.ZodString>;
+    cocoapodsVersion: z.ZodNullable<z.ZodString>;
+    agentVersion: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    screenSharingEnabled: z.ZodOptional<z.ZodNullable<z.ZodBoolean>>;
+    /** How many builds this Mac will run at once. */
+    capacity: z.ZodOptional<z.ZodNumber>;
+    /** Build ids this agent is running right now — its length is always
+     *  <= capacity. Empty array means idle, distinct from omitting the
+     *  field entirely (an old agent binary that's never heard of this). */
+    activeBuildIds: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+}, "strip", z.ZodTypeAny, {
+    status: "online" | "draining" | "building";
+    xcodeVersion: string | null;
+    flutterVersion: string | null;
+    javaVersion: string | null;
+    androidSdkVersion: string | null;
+    cocoapodsVersion: string | null;
+    cpuUsagePercent: number;
+    memUsagePercent: number;
+    diskFreeGb: number;
+    agentVersion?: string | null | undefined;
+    screenSharingEnabled?: boolean | null | undefined;
+    tailscaleHostname?: string | null | undefined;
+    currentBuildId?: string | null | undefined;
+    activeBuildIds?: string[] | undefined;
+    capacity?: number | undefined;
+}, {
+    status: "online" | "draining" | "building";
+    xcodeVersion: string | null;
+    flutterVersion: string | null;
+    javaVersion: string | null;
+    androidSdkVersion: string | null;
+    cocoapodsVersion: string | null;
+    cpuUsagePercent: number;
+    memUsagePercent: number;
+    diskFreeGb: number;
+    agentVersion?: string | null | undefined;
+    screenSharingEnabled?: boolean | null | undefined;
+    tailscaleHostname?: string | null | undefined;
+    currentBuildId?: string | null | undefined;
+    activeBuildIds?: string[] | undefined;
+    capacity?: number | undefined;
+}>;
+export declare const appendLogSchema: z.ZodObject<{
+    chunk: z.ZodString;
+    seq: z.ZodNumber;
+}, "strip", z.ZodTypeAny, {
+    chunk: string;
+    seq: number;
+}, {
+    chunk: string;
+    seq: number;
+}>;
+export declare const completeBuildSchema: z.ZodObject<{
+    status: z.ZodEnum<["succeeded", "failed"]>;
+    artifacts: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        fileName: z.ZodString;
+        sizeBytes: z.ZodNumber;
+        storageKey: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        fileName: string;
+        sizeBytes: number;
+        storageKey: string;
+    }, {
+        fileName: string;
+        sizeBytes: number;
+        storageKey: string;
+    }>, "many">>;
+    ota: z.ZodOptional<z.ZodObject<{
+        channel: z.ZodOptional<z.ZodString>;
+        mandatory: z.ZodOptional<z.ZodBoolean>;
+        bundleHash: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        channel?: string | undefined;
+        mandatory?: boolean | undefined;
+        bundleHash?: string | undefined;
+    }, {
+        channel?: string | undefined;
+        mandatory?: boolean | undefined;
+        bundleHash?: string | undefined;
+    }>>;
+    failureKind: z.ZodOptional<z.ZodEnum<["user", "infra"]>>;
+}, "strip", z.ZodTypeAny, {
+    status: "succeeded" | "failed";
+    artifacts: {
+        fileName: string;
+        sizeBytes: number;
+        storageKey: string;
+    }[];
+    ota?: {
+        channel?: string | undefined;
+        mandatory?: boolean | undefined;
+        bundleHash?: string | undefined;
+    } | undefined;
+    failureKind?: "user" | "infra" | undefined;
+}, {
+    status: "succeeded" | "failed";
+    artifacts?: {
+        fileName: string;
+        sizeBytes: number;
+        storageKey: string;
+    }[] | undefined;
+    ota?: {
+        channel?: string | undefined;
+        mandatory?: boolean | undefined;
+        bundleHash?: string | undefined;
+    } | undefined;
+    failureKind?: "user" | "infra" | undefined;
+}>;
+export declare const promoteOtaReleaseSchema: z.ZodObject<{
+    buildId: z.ZodString;
+    channel: z.ZodDefault<z.ZodString>;
+    mandatory: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+    rollout: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+}, "strip", z.ZodTypeAny, {
+    channel: string;
+    mandatory: boolean;
+    buildId: string;
+    rollout: number;
+}, {
+    buildId: string;
+    channel?: string | undefined;
+    mandatory?: boolean | undefined;
+    rollout?: number | undefined;
+}>;
+export declare const setActiveOtaReleaseSchema: z.ZodObject<{
+    releaseId: z.ZodNullable<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    releaseId: string | null;
+}, {
+    releaseId: string | null;
+}>;
+export declare const updateOtaReleaseRolloutSchema: z.ZodObject<{
+    rollout: z.ZodNumber;
+}, "strip", z.ZodTypeAny, {
+    rollout: number;
+}, {
+    rollout: number;
+}>;
+/** `PATCH /orgs/:orgId/agents/:agentId/remote-control` (apps/admin-api) —
+ *  the only way `Agent.remoteControlEnabled` ever changes (see
+ *  @appforge/db's migrations/0024_agent_remote_control.sql). Deliberately
+ *  not threaded through agentEnrollSchema/agentHeartbeatSchema above:
+ *  this is an operator policy decision, not something the agent
+ *  self-reports. */
+export declare const setAgentRemoteControlSchema: z.ZodObject<{
+    enabled: z.ZodBoolean;
+}, "strip", z.ZodTypeAny, {
+    enabled: boolean;
+}, {
+    enabled: boolean;
+}>;
+/** `POST /orgs/:orgId/agents/:agentId/vnc-session` (apps/admin-api)'s
+ *  request body — optional and defaults to "view" (via `.optional()`,
+ *  left for the route to interpret as the no-body case), matching every
+ *  existing caller that sends no body at all today. `mode: "control"` is
+ *  a *request*, not a grant: the route decides the actually-issued mode
+ *  server-side from `Agent.remoteControlEnabled` and echoes it back in
+ *  the response — see that route's own docblock. */
+export declare const startVncSessionSchema: z.ZodObject<{
+    mode: z.ZodOptional<z.ZodEnum<["view", "control"]>>;
+}, "strip", z.ZodTypeAny, {
+    mode?: "view" | "control" | undefined;
+}, {
+    mode?: "view" | "control" | undefined;
+}>;
+//# sourceMappingURL=schemas.d.ts.map