@aventurevc/api-schemas 0.7.272

package/dist/classification/inactive-tag-details.js

@@ -0,0 +1,22 @@
+// LLM AGENTS MAY NOT EDIT THIS FILE UNDER ANY CIRCUMSTANCES. DO NOT EDIT - generated from Kotlin data classes via OpenAPI. Edit the backend owner and run: make docs-openapi && make docs-zod
+import { z } from "zod/v4";
+import { EntityClassificationInactiveTagOverrideSchema } from "../entity/classification-inactive-tag-override.js";
+const ClassificationInactiveTagDetailsSchemaDefinition = z.object({
+    /** Allowed inactiveTagOverride values for this conflict */
+    availableOverrides: z.array(EntityClassificationInactiveTagOverrideSchema),
+    /** Existing dormant value slug or lookup key */
+    slug: z.string(),
+    /** Existing tag id in res_type_ref */
+    tagId: z.int(),
+});
+/**
+ * ProblemDetail.details for HTTP 409 when a classification value exists but is inactive.
+ *
+ * @openapiSchema ClassificationInactiveTagDetails
+ * @standardProblemResponse
+ * @usedBySchema DomainConflictDetailsSchema
+ * @contractShape classification.inactive-tag-details
+ * @contractRole canonical
+ */
+export const ClassificationInactiveTagDetailsSchema = ClassificationInactiveTagDetailsSchemaDefinition;
+//# sourceMappingURL=inactive-tag-details.js.map

package/dist/cli/authorization-client-platform.d.ts

@@ -0,0 +1,20 @@
+import { z } from "zod/v4";
+/**
+ * Coarse operating-system family reported by the CLI
+ *
+ * @openapiSchema CliAuthorizationClientPlatform
+ * @endpoint POST /v1/auth/cli-authorizations
+ * @endpoint POST /v1/auth/cli-authorizations/{cliAuthorizationId}/acknowledge
+ * @usedBySchema CliAuthorizationMutationSchema
+ * @usedBySchema CliAuthorizationSchema
+ * @contractShape cli.authorization-client-platform
+ * @contractRole canonical
+ */
+export declare const CliAuthorizationClientPlatformSchema: z.ZodEnum<{
+    LINUX: "LINUX";
+    MACOS: "MACOS";
+    OTHER: "OTHER";
+    WINDOWS: "WINDOWS";
+}>;
+export type CliAuthorizationClientPlatform = z.infer<typeof CliAuthorizationClientPlatformSchema>;
+//# sourceMappingURL=authorization-client-platform.d.ts.map

package/dist/cli/authorization-client-platform.js

@@ -0,0 +1,15 @@
+// LLM AGENTS MAY NOT EDIT THIS FILE UNDER ANY CIRCUMSTANCES. DO NOT EDIT - generated from Kotlin data classes via OpenAPI. Edit the backend owner and run: make docs-openapi && make docs-zod
+import { z } from "zod/v4";
+/**
+ * Coarse operating-system family reported by the CLI
+ *
+ * @openapiSchema CliAuthorizationClientPlatform
+ * @endpoint POST /v1/auth/cli-authorizations
+ * @endpoint POST /v1/auth/cli-authorizations/{cliAuthorizationId}/acknowledge
+ * @usedBySchema CliAuthorizationMutationSchema
+ * @usedBySchema CliAuthorizationSchema
+ * @contractShape cli.authorization-client-platform
+ * @contractRole canonical
+ */
+export const CliAuthorizationClientPlatformSchema = z.enum(["MACOS", "LINUX", "WINDOWS", "OTHER"]);
+//# sourceMappingURL=authorization-client-platform.js.map

package/dist/cli/authorization-delivery.d.ts

@@ -0,0 +1,21 @@
+import { z } from "zod/v4";
+/**
+ * RSA-wrapped AES-256-GCM delivery of one personal API-key secret
+ *
+ * @openapiSchema CliAuthorizationDelivery
+ * @endpoint POST /v1/auth/cli-authorizations/{cliAuthorizationId}/poll
+ * @usedBySchema CliAuthorizationPollSchema
+ * @contractShape cli.authorization-delivery
+ * @contractRole canonical
+ */
+export declare const CliAuthorizationDeliverySchema: z.ZodObject<{
+    algorithm: z.ZodEnum<{
+        RSA_OAEP_256_A256_GCM_V1: "RSA_OAEP_256_A256_GCM_V1";
+    }>;
+    authenticationTag: z.ZodString;
+    ciphertext: z.ZodString;
+    nonce: z.ZodString;
+    wrappedKey: z.ZodString;
+}, z.core.$strip>;
+export type CliAuthorizationDelivery = z.infer<typeof CliAuthorizationDeliverySchema>;
+//# sourceMappingURL=authorization-delivery.d.ts.map

package/dist/cli/authorization-delivery.js

@@ -0,0 +1,25 @@
+// LLM AGENTS MAY NOT EDIT THIS FILE UNDER ANY CIRCUMSTANCES. DO NOT EDIT - generated from Kotlin data classes via OpenAPI. Edit the backend owner and run: make docs-openapi && make docs-zod
+import { z } from "zod/v4";
+import { CliAuthorizationEncryptionAlgorithmSchema } from "./authorization-encryption-algorithm.js";
+/**
+ * RSA-wrapped AES-256-GCM delivery of one personal API-key secret
+ *
+ * @openapiSchema CliAuthorizationDelivery
+ * @endpoint POST /v1/auth/cli-authorizations/{cliAuthorizationId}/poll
+ * @usedBySchema CliAuthorizationPollSchema
+ * @contractShape cli.authorization-delivery
+ * @contractRole canonical
+ */
+export const CliAuthorizationDeliverySchema = z.object({
+    /** Hybrid encryption suite used for this delivery */
+    algorithm: CliAuthorizationEncryptionAlgorithmSchema,
+    /** Base64-encoded 16-byte AES-GCM authentication tag */
+    authenticationTag: z.string(),
+    /** Base64-encoded encrypted UTF-8 personal API-key secret bytes */
+    ciphertext: z.string(),
+    /** Base64-encoded 12-byte AES-GCM nonce */
+    nonce: z.string(),
+    /** Base64-encoded RSA-OAEP-wrapped AES key */
+    wrappedKey: z.string(),
+});
+//# sourceMappingURL=authorization-delivery.js.map

package/dist/cli/authorization-encryption-algorithm.d.ts

@@ -0,0 +1,17 @@
+import { z } from "zod/v4";
+/**
+ * Versioned hybrid encryption suite for one-time CLI credential delivery
+ *
+ * @openapiSchema CliAuthorizationEncryptionAlgorithm
+ * @endpoint POST /v1/auth/cli-authorizations
+ * @endpoint POST /v1/auth/cli-authorizations/{cliAuthorizationId}/poll
+ * @usedBySchema CliAuthorizationDeliverySchema
+ * @usedBySchema CliAuthorizationMutationSchema
+ * @contractShape cli.authorization-encryption-algorithm
+ * @contractRole canonical
+ */
+export declare const CliAuthorizationEncryptionAlgorithmSchema: z.ZodEnum<{
+    RSA_OAEP_256_A256_GCM_V1: "RSA_OAEP_256_A256_GCM_V1";
+}>;
+export type CliAuthorizationEncryptionAlgorithm = z.infer<typeof CliAuthorizationEncryptionAlgorithmSchema>;
+//# sourceMappingURL=authorization-encryption-algorithm.d.ts.map

package/dist/cli/authorization-encryption-algorithm.js

@@ -0,0 +1,15 @@
+// LLM AGENTS MAY NOT EDIT THIS FILE UNDER ANY CIRCUMSTANCES. DO NOT EDIT - generated from Kotlin data classes via OpenAPI. Edit the backend owner and run: make docs-openapi && make docs-zod
+import { z } from "zod/v4";
+/**
+ * Versioned hybrid encryption suite for one-time CLI credential delivery
+ *
+ * @openapiSchema CliAuthorizationEncryptionAlgorithm
+ * @endpoint POST /v1/auth/cli-authorizations
+ * @endpoint POST /v1/auth/cli-authorizations/{cliAuthorizationId}/poll
+ * @usedBySchema CliAuthorizationDeliverySchema
+ * @usedBySchema CliAuthorizationMutationSchema
+ * @contractShape cli.authorization-encryption-algorithm
+ * @contractRole canonical
+ */
+export const CliAuthorizationEncryptionAlgorithmSchema = z.enum(["RSA_OAEP_256_A256_GCM_V1"]);
+//# sourceMappingURL=authorization-encryption-algorithm.js.map

package/dist/cli/authorization-mutation.d.ts

@@ -0,0 +1,27 @@
+import { z } from "zod/v4";
+declare const CliAuthorizationMutationSchemaDefinition: z.ZodObject<{
+    clientLabel: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    clientPlatform: z.ZodOptional<z.ZodNullable<z.ZodEnum<{
+        LINUX: "LINUX";
+        MACOS: "MACOS";
+        OTHER: "OTHER";
+        WINDOWS: "WINDOWS";
+    }>>>;
+    encryptionAlgorithm: z.ZodOptional<z.ZodNullable<z.ZodEnum<{
+        RSA_OAEP_256_A256_GCM_V1: "RSA_OAEP_256_A256_GCM_V1";
+    }>>>;
+    encryptionPublicKey: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+}, z.core.$strip>;
+type CliAuthorizationMutationDefinition = z.infer<typeof CliAuthorizationMutationSchemaDefinition>;
+/**
+ * Creates a short-lived CLI authorization request bound to an ephemeral key
+ *
+ * @openapiSchema CliAuthorizationMutation
+ * @endpoint POST /v1/auth/cli-authorizations
+ * @contractShape cli.authorization-mutation
+ * @contractRole canonical
+ */
+export declare const CliAuthorizationMutationSchema: z.ZodType<CliAuthorizationMutationDefinition>;
+export type CliAuthorizationMutation = z.infer<typeof CliAuthorizationMutationSchema>;
+export {};
+//# sourceMappingURL=authorization-mutation.d.ts.map

package/dist/cli/authorization-mutation.js

@@ -0,0 +1,29 @@
+// LLM AGENTS MAY NOT EDIT THIS FILE UNDER ANY CIRCUMSTANCES. DO NOT EDIT - generated from Kotlin data classes via OpenAPI. Edit the backend owner and run: make docs-openapi && make docs-zod
+import { z } from "zod/v4";
+import { CliAuthorizationClientPlatformSchema } from "./authorization-client-platform.js";
+import { CliAuthorizationEncryptionAlgorithmSchema } from "./authorization-encryption-algorithm.js";
+const CliAuthorizationMutationSchemaDefinition = z.object({
+    /** Label for this CLI installation */
+    clientLabel: z
+        .string()
+        .regex(/.*\S.*/)
+        .min(1)
+        .max(120)
+        .nullish(),
+    /** Coarse operating-system family */
+    clientPlatform: CliAuthorizationClientPlatformSchema.nullish(),
+    /** Requested hybrid encryption suite */
+    encryptionAlgorithm: CliAuthorizationEncryptionAlgorithmSchema.nullish(),
+    /** Base64-encoded DER SubjectPublicKeyInfo for an ephemeral RSA public key */
+    encryptionPublicKey: z.string().min(344).max(12000).nullish(),
+});
+/**
+ * Creates a short-lived CLI authorization request bound to an ephemeral key
+ *
+ * @openapiSchema CliAuthorizationMutation
+ * @endpoint POST /v1/auth/cli-authorizations
+ * @contractShape cli.authorization-mutation
+ * @contractRole canonical
+ */
+export const CliAuthorizationMutationSchema = CliAuthorizationMutationSchemaDefinition;
+//# sourceMappingURL=authorization-mutation.js.map

package/dist/cli/authorization-poll.d.ts

@@ -0,0 +1,51 @@
+import { z } from "zod/v4";
+declare const CliAuthorizationPollSchemaDefinition: z.ZodObject<{
+    delivery: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+        algorithm: z.ZodEnum<{
+            RSA_OAEP_256_A256_GCM_V1: "RSA_OAEP_256_A256_GCM_V1";
+        }>;
+        authenticationTag: z.ZodString;
+        ciphertext: z.ZodString;
+        nonce: z.ZodString;
+        wrappedKey: z.ZodString;
+    }, z.core.$strip>>>;
+    expiresAt: z.ZodISODateTime;
+    status: z.ZodEnum<{
+        CONSUMED: "CONSUMED";
+        DENIED: "DENIED";
+        EXPIRED: "EXPIRED";
+        FAILED: "FAILED";
+        ISSUING: "ISSUING";
+        KEY_READY: "KEY_READY";
+        PENDING: "PENDING";
+        REVOKED: "REVOKED";
+        REVOKING: "REVOKING";
+    }>;
+    terminalReason: z.ZodOptional<z.ZodNullable<z.ZodEnum<{
+        "Authorization request expired": "Authorization request expired";
+        "CLI authorization expired before acknowledgement": "CLI authorization expired before acknowledgement";
+        "Clerk create response validation failed": "Clerk create response validation failed";
+        "Credential delivery encryption failed": "Credential delivery encryption failed";
+        "Credential issuance could not be recovered": "Credential issuance could not be recovered";
+        "Credential issuance failed": "Credential issuance failed";
+        "Credential issuance finalization was lost": "Credential issuance finalization was lost";
+        "Credential issuance lost its database claim": "Credential issuance lost its database claim";
+        "Credential issuance recovery revoked an unrecoverable key": "Credential issuance recovery revoked an unrecoverable key";
+        "Denied by user": "Denied by user";
+        "Personal API-key quota reached": "Personal API-key quota reached";
+        "Revoked by user": "Revoked by user";
+    }>>>;
+}, z.core.$strip>;
+type CliAuthorizationPollDefinition = z.infer<typeof CliAuthorizationPollSchemaDefinition>;
+/**
+ * Current broker state and encrypted delivery when the key is ready
+ *
+ * @openapiSchema CliAuthorizationPoll
+ * @endpoint POST /v1/auth/cli-authorizations/{cliAuthorizationId}/poll
+ * @contractShape cli.authorization-poll
+ * @contractRole canonical
+ */
+export declare const CliAuthorizationPollSchema: z.ZodType<CliAuthorizationPollDefinition>;
+export type CliAuthorizationPoll = z.infer<typeof CliAuthorizationPollSchema>;
+export {};
+//# sourceMappingURL=authorization-poll.d.ts.map

package/dist/cli/authorization-poll.js

@@ -0,0 +1,25 @@
+// LLM AGENTS MAY NOT EDIT THIS FILE UNDER ANY CIRCUMSTANCES. DO NOT EDIT - generated from Kotlin data classes via OpenAPI. Edit the backend owner and run: make docs-openapi && make docs-zod
+import { z } from "zod/v4";
+import { CliAuthorizationDeliverySchema } from "./authorization-delivery.js";
+import { CliAuthorizationStatusSchema } from "./authorization-status.js";
+import { CliAuthorizationTerminalReasonSchema } from "./authorization-terminal-reason.js";
+const CliAuthorizationPollSchemaDefinition = z.object({
+    /** Encrypted one-time delivery, present only for KEY_READY */
+    delivery: CliAuthorizationDeliverySchema.nullish(),
+    /** Authorization request expiry timestamp */
+    expiresAt: z.iso.datetime({ offset: true }),
+    /** Current broker lifecycle state */
+    status: CliAuthorizationStatusSchema,
+    /** Non-secret terminal-state explanation */
+    terminalReason: CliAuthorizationTerminalReasonSchema.nullish(),
+});
+/**
+ * Current broker state and encrypted delivery when the key is ready
+ *
+ * @openapiSchema CliAuthorizationPoll
+ * @endpoint POST /v1/auth/cli-authorizations/{cliAuthorizationId}/poll
+ * @contractShape cli.authorization-poll
+ * @contractRole canonical
+ */
+export const CliAuthorizationPollSchema = CliAuthorizationPollSchemaDefinition;
+//# sourceMappingURL=authorization-poll.js.map

package/dist/cli/authorization-start.d.ts

@@ -0,0 +1,22 @@
+import { z } from "zod/v4";
+declare const CliAuthorizationStartSchemaDefinition: z.ZodObject<{
+    comparisonCode: z.ZodString;
+    expiresAt: z.ZodISODateTime;
+    id: z.ZodUUID;
+    intervalSeconds: z.ZodNumber;
+    pollSecret: z.ZodString;
+    verificationUrl: z.ZodString;
+}, z.core.$strip>;
+type CliAuthorizationStartDefinition = z.infer<typeof CliAuthorizationStartSchemaDefinition>;
+/**
+ * New CLI authorization handle and one-time poll credential
+ *
+ * @openapiSchema CliAuthorizationStart
+ * @endpoint POST /v1/auth/cli-authorizations
+ * @contractShape cli.authorization-start
+ * @contractRole canonical
+ */
+export declare const CliAuthorizationStartSchema: z.ZodType<CliAuthorizationStartDefinition>;
+export type CliAuthorizationStart = z.infer<typeof CliAuthorizationStartSchema>;
+export {};
+//# sourceMappingURL=authorization-start.d.ts.map

package/dist/cli/authorization-start.js

@@ -0,0 +1,26 @@
+// LLM AGENTS MAY NOT EDIT THIS FILE UNDER ANY CIRCUMSTANCES. DO NOT EDIT - generated from Kotlin data classes via OpenAPI. Edit the backend owner and run: make docs-openapi && make docs-zod
+import { z } from "zod/v4";
+const CliAuthorizationStartSchemaDefinition = z.object({
+    /** Human comparison code shown by both the CLI and browser */
+    comparisonCode: z.string(),
+    /** Authorization request expiry timestamp */
+    expiresAt: z.iso.datetime({ offset: true }),
+    /** Public authorization request identifier */
+    id: z.uuid(),
+    /** Minimum poll interval in seconds */
+    intervalSeconds: z.number().int().min(1),
+    /** One-time high-entropy credential required to poll and acknowledge delivery */
+    pollSecret: z.string(),
+    /** Browser verification URL */
+    verificationUrl: z.string(),
+});
+/**
+ * New CLI authorization handle and one-time poll credential
+ *
+ * @openapiSchema CliAuthorizationStart
+ * @endpoint POST /v1/auth/cli-authorizations
+ * @contractShape cli.authorization-start
+ * @contractRole canonical
+ */
+export const CliAuthorizationStartSchema = CliAuthorizationStartSchemaDefinition;
+//# sourceMappingURL=authorization-start.js.map

package/dist/cli/authorization-status.d.ts

@@ -0,0 +1,25 @@
+import { z } from "zod/v4";
+/**
+ * CLI authorization broker lifecycle state
+ *
+ * @openapiSchema CliAuthorizationStatus
+ * @endpoint POST /v1/auth/cli-authorizations/{cliAuthorizationId}/acknowledge
+ * @endpoint POST /v1/auth/cli-authorizations/{cliAuthorizationId}/poll
+ * @usedBySchema CliAuthorizationPollSchema
+ * @usedBySchema CliAuthorizationSchema
+ * @contractShape cli.authorization-status
+ * @contractRole canonical
+ */
+export declare const CliAuthorizationStatusSchema: z.ZodEnum<{
+    CONSUMED: "CONSUMED";
+    DENIED: "DENIED";
+    EXPIRED: "EXPIRED";
+    FAILED: "FAILED";
+    ISSUING: "ISSUING";
+    KEY_READY: "KEY_READY";
+    PENDING: "PENDING";
+    REVOKED: "REVOKED";
+    REVOKING: "REVOKING";
+}>;
+export type CliAuthorizationStatus = z.infer<typeof CliAuthorizationStatusSchema>;
+//# sourceMappingURL=authorization-status.d.ts.map

package/dist/cli/authorization-status.js

@@ -0,0 +1,25 @@
+// LLM AGENTS MAY NOT EDIT THIS FILE UNDER ANY CIRCUMSTANCES. DO NOT EDIT - generated from Kotlin data classes via OpenAPI. Edit the backend owner and run: make docs-openapi && make docs-zod
+import { z } from "zod/v4";
+/**
+ * CLI authorization broker lifecycle state
+ *
+ * @openapiSchema CliAuthorizationStatus
+ * @endpoint POST /v1/auth/cli-authorizations/{cliAuthorizationId}/acknowledge
+ * @endpoint POST /v1/auth/cli-authorizations/{cliAuthorizationId}/poll
+ * @usedBySchema CliAuthorizationPollSchema
+ * @usedBySchema CliAuthorizationSchema
+ * @contractShape cli.authorization-status
+ * @contractRole canonical
+ */
+export const CliAuthorizationStatusSchema = z.enum([
+    "PENDING",
+    "ISSUING",
+    "KEY_READY",
+    "REVOKING",
+    "CONSUMED",
+    "REVOKED",
+    "DENIED",
+    "EXPIRED",
+    "FAILED",
+]);
+//# sourceMappingURL=authorization-status.js.map

package/dist/cli/authorization-terminal-reason.d.ts

@@ -0,0 +1,28 @@
+import { z } from "zod/v4";
+/**
+ * CLI authorization terminal explanation
+ *
+ * @openapiSchema CliAuthorizationTerminalReason
+ * @endpoint POST /v1/auth/cli-authorizations/{cliAuthorizationId}/acknowledge
+ * @endpoint POST /v1/auth/cli-authorizations/{cliAuthorizationId}/poll
+ * @usedBySchema CliAuthorizationPollSchema
+ * @usedBySchema CliAuthorizationSchema
+ * @contractShape cli.authorization-terminal-reason
+ * @contractRole canonical
+ */
+export declare const CliAuthorizationTerminalReasonSchema: z.ZodEnum<{
+    "Authorization request expired": "Authorization request expired";
+    "CLI authorization expired before acknowledgement": "CLI authorization expired before acknowledgement";
+    "Clerk create response validation failed": "Clerk create response validation failed";
+    "Credential delivery encryption failed": "Credential delivery encryption failed";
+    "Credential issuance could not be recovered": "Credential issuance could not be recovered";
+    "Credential issuance failed": "Credential issuance failed";
+    "Credential issuance finalization was lost": "Credential issuance finalization was lost";
+    "Credential issuance lost its database claim": "Credential issuance lost its database claim";
+    "Credential issuance recovery revoked an unrecoverable key": "Credential issuance recovery revoked an unrecoverable key";
+    "Denied by user": "Denied by user";
+    "Personal API-key quota reached": "Personal API-key quota reached";
+    "Revoked by user": "Revoked by user";
+}>;
+export type CliAuthorizationTerminalReason = z.infer<typeof CliAuthorizationTerminalReasonSchema>;
+//# sourceMappingURL=authorization-terminal-reason.d.ts.map

package/dist/cli/authorization-terminal-reason.js

@@ -0,0 +1,28 @@
+// LLM AGENTS MAY NOT EDIT THIS FILE UNDER ANY CIRCUMSTANCES. DO NOT EDIT - generated from Kotlin data classes via OpenAPI. Edit the backend owner and run: make docs-openapi && make docs-zod
+import { z } from "zod/v4";
+/**
+ * CLI authorization terminal explanation
+ *
+ * @openapiSchema CliAuthorizationTerminalReason
+ * @endpoint POST /v1/auth/cli-authorizations/{cliAuthorizationId}/acknowledge
+ * @endpoint POST /v1/auth/cli-authorizations/{cliAuthorizationId}/poll
+ * @usedBySchema CliAuthorizationPollSchema
+ * @usedBySchema CliAuthorizationSchema
+ * @contractShape cli.authorization-terminal-reason
+ * @contractRole canonical
+ */
+export const CliAuthorizationTerminalReasonSchema = z.enum([
+    "Denied by user",
+    "Authorization request expired",
+    "CLI authorization expired before acknowledgement",
+    "Credential issuance recovery revoked an unrecoverable key",
+    "Revoked by user",
+    "Clerk create response validation failed",
+    "Credential issuance failed",
+    "Credential issuance could not be recovered",
+    "Personal API-key quota reached",
+    "Credential issuance lost its database claim",
+    "Credential delivery encryption failed",
+    "Credential issuance finalization was lost",
+]);
+//# sourceMappingURL=authorization-terminal-reason.js.map

package/dist/cli/authorization.d.ts

@@ -0,0 +1,58 @@
+import { z } from "zod/v4";
+declare const CliAuthorizationSchemaDefinition: z.ZodObject<{
+    approvedAt: z.ZodOptional<z.ZodNullable<z.ZodISODateTime>>;
+    clientLabel: z.ZodString;
+    clientPlatform: z.ZodEnum<{
+        LINUX: "LINUX";
+        MACOS: "MACOS";
+        OTHER: "OTHER";
+        WINDOWS: "WINDOWS";
+    }>;
+    comparisonCode: z.ZodString;
+    consumedAt: z.ZodOptional<z.ZodNullable<z.ZodISODateTime>>;
+    createdAt: z.ZodISODateTime;
+    expiresAt: z.ZodISODateTime;
+    id: z.ZodUUID;
+    intervalSeconds: z.ZodNumber;
+    keyReadyAt: z.ZodOptional<z.ZodNullable<z.ZodISODateTime>>;
+    status: z.ZodEnum<{
+        CONSUMED: "CONSUMED";
+        DENIED: "DENIED";
+        EXPIRED: "EXPIRED";
+        FAILED: "FAILED";
+        ISSUING: "ISSUING";
+        KEY_READY: "KEY_READY";
+        PENDING: "PENDING";
+        REVOKED: "REVOKED";
+        REVOKING: "REVOKING";
+    }>;
+    terminalAt: z.ZodOptional<z.ZodNullable<z.ZodISODateTime>>;
+    terminalReason: z.ZodOptional<z.ZodNullable<z.ZodEnum<{
+        "Authorization request expired": "Authorization request expired";
+        "CLI authorization expired before acknowledgement": "CLI authorization expired before acknowledgement";
+        "Clerk create response validation failed": "Clerk create response validation failed";
+        "Credential delivery encryption failed": "Credential delivery encryption failed";
+        "Credential issuance could not be recovered": "Credential issuance could not be recovered";
+        "Credential issuance failed": "Credential issuance failed";
+        "Credential issuance finalization was lost": "Credential issuance finalization was lost";
+        "Credential issuance lost its database claim": "Credential issuance lost its database claim";
+        "Credential issuance recovery revoked an unrecoverable key": "Credential issuance recovery revoked an unrecoverable key";
+        "Denied by user": "Denied by user";
+        "Personal API-key quota reached": "Personal API-key quota reached";
+        "Revoked by user": "Revoked by user";
+    }>>>;
+    updatedAt: z.ZodISODateTime;
+}, z.core.$strip>;
+type CliAuthorizationDefinition = z.infer<typeof CliAuthorizationSchemaDefinition>;
+/**
+ * Browser-approved CLI authorization metadata. Secret poll and encrypted-delivery material are exposed only by their dedicated one-time response contracts.
+ *
+ * @openapiSchema CliAuthorization
+ * @endpoint POST /v1/auth/cli-authorizations/{cliAuthorizationId}/acknowledge
+ * @contractShape cli.authorization
+ * @contractRole canonical
+ */
+export declare const CliAuthorizationSchema: z.ZodType<CliAuthorizationDefinition>;
+export type CliAuthorization = z.infer<typeof CliAuthorizationSchema>;
+export {};
+//# sourceMappingURL=authorization.d.ts.map

package/dist/cli/authorization.js

@@ -0,0 +1,45 @@
+// LLM AGENTS MAY NOT EDIT THIS FILE UNDER ANY CIRCUMSTANCES. DO NOT EDIT - generated from Kotlin data classes via OpenAPI. Edit the backend owner and run: make docs-openapi && make docs-zod
+import { z } from "zod/v4";
+import { CliAuthorizationClientPlatformSchema } from "./authorization-client-platform.js";
+import { CliAuthorizationStatusSchema } from "./authorization-status.js";
+import { CliAuthorizationTerminalReasonSchema } from "./authorization-terminal-reason.js";
+const CliAuthorizationSchemaDefinition = z.object({
+    /** Time the authenticated user approved this request */
+    approvedAt: z.iso.datetime({ offset: true }).nullish(),
+    /** User-supplied label for the requesting CLI installation */
+    clientLabel: z.string(),
+    /** Coarse client operating-system family */
+    clientPlatform: CliAuthorizationClientPlatformSchema,
+    /** Human comparison code shown by both the CLI and browser */
+    comparisonCode: z.string(),
+    /** Time the CLI acknowledged durable local storage */
+    consumedAt: z.iso.datetime({ offset: true }).nullish(),
+    /** Authorization request creation timestamp */
+    createdAt: z.iso.datetime({ offset: true }),
+    /** Time after which an unfinished request cannot be approved */
+    expiresAt: z.iso.datetime({ offset: true }),
+    /** Public authorization request identifier */
+    id: z.uuid(),
+    /** Minimum server-directed poll interval in seconds */
+    intervalSeconds: z.number().int().min(1),
+    /** Time encrypted key delivery became available */
+    keyReadyAt: z.iso.datetime({ offset: true }).nullish(),
+    /** Current broker lifecycle state */
+    status: CliAuthorizationStatusSchema,
+    /** Time this request entered its terminal state */
+    terminalAt: z.iso.datetime({ offset: true }).nullish(),
+    /** Non-secret terminal-state explanation */
+    terminalReason: CliAuthorizationTerminalReasonSchema.nullish(),
+    /** Most recent lifecycle update timestamp */
+    updatedAt: z.iso.datetime({ offset: true }),
+});
+/**
+ * Browser-approved CLI authorization metadata. Secret poll and encrypted-delivery material are exposed only by their dedicated one-time response contracts.
+ *
+ * @openapiSchema CliAuthorization
+ * @endpoint POST /v1/auth/cli-authorizations/{cliAuthorizationId}/acknowledge
+ * @contractShape cli.authorization
+ * @contractRole canonical
+ */
+export const CliAuthorizationSchema = CliAuthorizationSchemaDefinition;
+//# sourceMappingURL=authorization.js.map

package/dist/client/pagination/page-param.d.ts

@@ -0,0 +1,43 @@
+import { z } from "zod/v4";
+/**
+ * Query-string sort parameter: single `"field,dir"` or multi-sort array.
+ *
+ * Matches the OpenAPI operation parameter emitted by springdoc for
+ * `@ParameterObject Pageable` endpoints:
+ *   sort: { type: "array", items: { type: "string" } }
+ *
+ * Clients may pass a single string or an array; Spring accepts both.
+ *
+ * @shared primitive:single reusable request-side sort parameter; not direct because Spring Pageable flows into OpenAPI as operation parameters, not component schemas
+ * @usedByEndpoint none:external-root contract consumed by downstream repos
+ * @contractShape client.pagination-sort-param
+ * @contractRole canonical
+ * @ownerModule client/pagination/page-param.ts
+ */
+export declare const SortParamSchema: z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>;
+export type SortParam = z.infer<typeof SortParamSchema>;
+/**
+ * Request-side page/size/sort query parameters for Spring `@ParameterObject Pageable` endpoints.
+ *
+ * Derived from the OpenAPI operation parameters emitted by springdoc:
+ *   page: { type: "integer", default: 0, minimum: 0 }
+ *   size: { type: "integer", default: 25, minimum: 1 }
+ *   sort: { type: "array", items: { type: "string" } }
+ *
+ * This is the client-side canonical owner for pagination request params.
+ * Response-side pagination metadata lives in `pageable/object.ts` (PageableObject)
+ * and `pagination/schemas.ts` (Page<T> envelopes).
+ *
+ * @shared composition:used as building block for other schemas client.pagination-page-param; not direct because Spring Pageable flows into OpenAPI as operation parameters, not component schemas
+ * @usedByEndpoint none:external-root contract consumed by downstream repos
+ * @contractShape client.pagination-page-param
+ * @contractRole canonical
+ * @ownerModule client/pagination/page-param.ts
+ */
+export declare const PageParamSchema: z.ZodObject<{
+    page: z.ZodOptional<z.ZodInt>;
+    size: z.ZodOptional<z.ZodInt>;
+    sort: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
+}, z.core.$strip>;
+export type PageParam = z.infer<typeof PageParamSchema>;
+//# sourceMappingURL=page-param.d.ts.map

package/dist/client/pagination/page-param.js

@@ -0,0 +1,42 @@
+// Generated alternate api-schemas support copy from TypeScript source api-schemas/client/pagination/page-param.ts
+import { z } from "zod/v4";
+/**
+ * Query-string sort parameter: single `"field,dir"` or multi-sort array.
+ *
+ * Matches the OpenAPI operation parameter emitted by springdoc for
+ * `@ParameterObject Pageable` endpoints:
+ *   sort: { type: "array", items: { type: "string" } }
+ *
+ * Clients may pass a single string or an array; Spring accepts both.
+ *
+ * @shared primitive:single reusable request-side sort parameter; not direct because Spring Pageable flows into OpenAPI as operation parameters, not component schemas
+ * @usedByEndpoint none:external-root contract consumed by downstream repos
+ * @contractShape client.pagination-sort-param
+ * @contractRole canonical
+ * @ownerModule client/pagination/page-param.ts
+ */
+export const SortParamSchema = z.union([z.string().min(1), z.array(z.string().min(1))]);
+/**
+ * Request-side page/size/sort query parameters for Spring `@ParameterObject Pageable` endpoints.
+ *
+ * Derived from the OpenAPI operation parameters emitted by springdoc:
+ *   page: { type: "integer", default: 0, minimum: 0 }
+ *   size: { type: "integer", default: 25, minimum: 1 }
+ *   sort: { type: "array", items: { type: "string" } }
+ *
+ * This is the client-side canonical owner for pagination request params.
+ * Response-side pagination metadata lives in `pageable/object.ts` (PageableObject)
+ * and `pagination/schemas.ts` (Page<T> envelopes).
+ *
+ * @shared composition:used as building block for other schemas client.pagination-page-param; not direct because Spring Pageable flows into OpenAPI as operation parameters, not component schemas
+ * @usedByEndpoint none:external-root contract consumed by downstream repos
+ * @contractShape client.pagination-page-param
+ * @contractRole canonical
+ * @ownerModule client/pagination/page-param.ts
+ */
+export const PageParamSchema = z.object({
+    page: z.int().nonnegative().optional(),
+    size: z.int().positive().optional(),
+    sort: SortParamSchema.optional(),
+});
+//# sourceMappingURL=page-param.js.map