@beeuni/sdk 0.1.0 → 0.3.0

package/dist/core/rest/projects-client/accounts.d.ts

@@ -202,6 +202,40 @@ export declare function acceptAccountInvite(inviteId: string): Promise<{
         role: string;
     }>;
 }>;
+export type AccountInviteLanding = {
+    kind: 'project';
+    projectId: string;
+    accountId: string;
+} | {
+    kind: 'account';
+    accountId: string;
+};
+export declare function accountInviteLanding(accepted: {
+    account_id: string;
+    bootstrap_grants_applied?: ReadonlyArray<{
+        project_id: string;
+    }>;
+}, invite?: {
+    projects?: ReadonlyArray<{
+        project_id: string;
+    }>;
+} | null): AccountInviteLanding;
+export declare function acceptAccountInviteAndLand(inviteId: string, invite?: {
+    projects?: ReadonlyArray<{
+        project_id: string;
+    }>;
+} | null): Promise<{
+    accepted: {
+        account_id: string;
+        account_role: AccountRole;
+        already_accepted?: boolean;
+        bootstrap_grants_applied?: Array<{
+            project_id: string;
+            role: string;
+        }>;
+    };
+    landing: AccountInviteLanding;
+}>;
 export declare function declineAccountInvite(inviteId: string): Promise<{
     ok: boolean;
 }>;

package/dist/core/rest/projects-client/accounts.js

@@ -58,6 +58,16 @@ export async function describeAccountInvite(inviteId) {
 export async function acceptAccountInvite(inviteId) {
     return unwrap(await backendApi.post(`/account-invites/${inviteId}/accept`, {}));
 }
+export function accountInviteLanding(accepted, invite) {
+    const project = accepted.bootstrap_grants_applied?.[0] ?? invite?.projects?.[0];
+    return project
+        ? { kind: 'project', projectId: project.project_id, accountId: accepted.account_id }
+        : { kind: 'account', accountId: accepted.account_id };
+}
+export async function acceptAccountInviteAndLand(inviteId, invite) {
+    const accepted = await acceptAccountInvite(inviteId);
+    return { accepted, landing: accountInviteLanding(accepted, invite) };
+}
 export async function declineAccountInvite(inviteId) {
     return unwrap(await backendApi.post(`/account-invites/${inviteId}/decline`, {}));
 }

package/dist/core/rest/projects-client/admin-providers.d.ts

@@ -68,64 +68,3 @@ export declare function getAdminProviderFallback(): Promise<{
     enabled: boolean;
 }>;
 export declare function setAdminProviderFallback<T = unknown>(enabled: boolean): Promise<T>;
-export type AdminBootMode = 'standard' | 'artifacts' | 'volume';
-export interface AdminBootModeRule {
-    mode: AdminBootMode;
-    standardFallback: boolean;
-}
-export interface AdminVolumesPolicy {
-    enabled: boolean;
-    percent: number;
-    orgs: Record<string, boolean>;
-}
-export interface AdminBootModePolicy {
-    volumes: AdminVolumesPolicy;
-    killSwitch: boolean;
-    default: AdminBootModeRule;
-    orgs: Record<string, AdminBootModeRule>;
-    fallback: {
-        volumeAttempts: number;
-        artifactsAttempts: number;
-    };
-    artifacts: string | null;
-}
-export interface AdminBootModes {
-    stored: boolean;
-    policy: AdminBootModePolicy;
-    orgs: Array<{
-        accountId: string;
-        name: string | null;
-        volumes: boolean | null;
-        rule: AdminBootModeRule | null;
-    }>;
-    env: {
-        bootArtifacts: string | null;
-        volumeOff: boolean;
-        driveSync: boolean;
-    };
-    providers: {
-        allowed: string[];
-        default: string;
-        volumeProvider: string;
-        volumeProviderConfigured: boolean;
-    };
-    stats: {
-        since: string;
-        modes: {
-            mode: AdminBootMode;
-            requested: number;
-            booted: number;
-        }[];
-        fallbacks: {
-            from: AdminBootMode;
-            to: AdminBootMode;
-            reason: string;
-            count: number;
-            sample: string | null;
-        }[];
-    } | {
-        error: string;
-    };
-}
-export declare function getAdminBootModes(): Promise<AdminBootModes>;
-export declare function setAdminBootModes(policy: AdminBootModePolicy): Promise<AdminBootModes>;

package/dist/core/rest/projects-client/admin-providers.js

@@ -31,9 +31,3 @@ export function setAdminProviderFallback(enabled) {
         .put('/admin/api/provider-fallback', { enabled })
         .then((response) => unwrap(response));
 }
-export function getAdminBootModes() {
-    return backendApi.get('/admin/api/boot-modes').then((response) => unwrap(response));
-}
-export function setAdminBootModes(policy) {
-    return backendApi.put('/admin/api/boot-modes', policy).then((response) => unwrap(response));
-}

package/dist/core/rest/projects-client/agent-config.d.ts

@@ -26,6 +26,9 @@ export interface AgentConfigBlock {
     connectors_personal?: string[];
     secrets?: AgentGrantSetV2;
     skills?: AgentGrantSetV2;
+    subagents?: AgentGrantSetV2;
+    commands?: AgentGrantSetV2;
+    extensions?: AgentGrantSetV2;
     apps?: AgentGrantSetV2;
     beeuni_permissions?: AgentGrantSetV2;
     beeuni_cli?: AgentGrantSetV2;

package/dist/core/rest/projects-client/apps-fleet.d.ts

@@ -27,6 +27,8 @@ export interface AppVolume {
     process_group: string;
     machine_id: string | null;
     size_gb: number;
+    used_bytes?: number | null;
+    last_commit_at?: string | null;
     status: 'creating' | 'ready' | 'destroying' | 'destroyed' | 'error';
     attached: boolean;
     snapshot_retention_days: number;
@@ -61,7 +63,9 @@ export declare const startAppMachine: (projectId: string, appId: string, machine
 export declare const stopAppMachine: (projectId: string, appId: string, machineId: string) => Promise<AppMachine[]>;
 export declare const restartAppMachine: (projectId: string, appId: string, machineId: string) => Promise<AppMachine[]>;
 export declare function destroyAppMachine(projectId: string, appId: string, machineId: string): Promise<AppMachine[]>;
-export declare function scaleApp(projectId: string, appId: string, count: Record<string, number>): Promise<{
+export declare function scaleApp(projectId: string, appId: string, count: Record<string, number>, options?: {
+    newVolumes?: boolean;
+}): Promise<{
     scale: Record<string, number>;
     machines: AppMachine[];
 }>;

package/dist/core/rest/projects-client/apps-fleet.js

@@ -13,8 +13,8 @@ export const restartAppMachine = (projectId, appId, machineId) => machineAction(
 export async function destroyAppMachine(projectId, appId, machineId) {
     return unwrap(await backendApi.delete(`${app(projectId, appId)}/machines/${machineId}`), 'Failed to destroy the machine').machines;
 }
-export async function scaleApp(projectId, appId, count) {
-    return unwrap(await backendApi.put(`${app(projectId, appId)}/scale`, { count }), 'Failed to scale the App');
+export async function scaleApp(projectId, appId, count, options = {}) {
+    return unwrap(await backendApi.put(`${app(projectId, appId)}/scale`, { count, ...(options.newVolumes ? { new_volumes: true } : {}) }), 'Failed to scale the App');
 }
 export async function execInApp(projectId, appId, input) {
     return unwrap(await backendApi.post(`${app(projectId, appId)}/exec`, input), 'Failed to run the command');

package/dist/core/rest/projects-client/apps.d.ts

@@ -1,4 +1,4 @@
-export type AppHostingProvider = 'daytona' | 'platinum' | 'e2b';
+export type AppHostingProvider = string;
 export type AppDesiredState = 'running' | 'stopped';
 export type AppAccessMode = 'private' | 'project' | 'restricted' | 'public' | 'password';
 export type AppArtifactKind = 'archive' | 'oci_image';
@@ -100,6 +100,7 @@ export interface App {
     slug: string;
     name: string;
     url: string;
+    external_url?: string | null;
     access_mode: AppAccessMode;
     access_revision: number;
     desired_state: AppDesiredState;
@@ -120,6 +121,7 @@ export interface App {
     used_by?: string[];
     auth?: AppAuth;
     labels?: string[];
+    display?: AppDisplay;
     scale?: Record<string, number>;
     services?: AppServiceSummary[];
     machines?: {
@@ -135,6 +137,11 @@ export interface App {
     created_at: string;
     updated_at: string;
 }
+export interface AppDisplay {
+    listed?: boolean;
+    preview?: 'live' | 'none';
+    parent?: string;
+}
 export interface CreateAppInput {
     slug: string;
     name: string;
@@ -144,6 +151,7 @@ export interface CreateAppInput {
     idle_timeout_seconds?: number;
     always_on?: boolean;
     uses?: string[];
+    external_url?: string;
 }
 export interface UpdateAppInput {
     name?: string;
@@ -154,6 +162,8 @@ export interface UpdateAppInput {
     always_on?: boolean;
     uses?: string[];
     labels?: string[];
+    display?: AppDisplay;
+    external_url?: string;
 }
 export type AppViewerTokenScope = 'off' | 'identity' | 'api';
 export interface AppAccessConfig {

package/dist/core/rest/projects-client/change-requests.d.ts

@@ -77,9 +77,11 @@ export interface ChangeRequestMergeResponse {
 export interface ListChangeRequestsOptions {
     originSessionId?: string;
     limit?: number;
+    cursor?: string;
 }
 export declare function listChangeRequests(projectId: string, status?: ChangeRequestStatus | 'all', options?: ListChangeRequestsOptions): Promise<{
     change_requests: ChangeRequest[];
+    next_cursor?: string | null;
 }>;
 export declare function getChangeRequest(projectId: string, crId: string): Promise<ChangeRequestDetailResponse>;
 export declare function getChangeRequestDiff(projectId: string, crId: string): Promise<ChangeRequestDiffResponse>;

package/dist/core/rest/projects-client/change-requests.js

@@ -12,6 +12,8 @@ export async function listChangeRequests(projectId, status, options) {
         params.set('origin_session_id', options.originSessionId);
     if (options?.limit != null)
         params.set('limit', String(options.limit));
+    if (options?.cursor)
+        params.set('cursor', options.cursor);
     const query = params.toString() ? `?${params.toString()}` : '';
     return unwrap(await backendApi.get(`/projects/${projectId}/change-requests${query}`, {
         showErrors: false,

package/dist/core/rest/projects-client/connectors.d.ts

@@ -103,7 +103,7 @@ export type ConnectorAuthorizationStrategy = 'project' | 'user';
 export interface AdminConnector {
     slug: string;
     name: string;
-    provider: 'composio' | 'pipedream' | 'mcp' | 'openapi' | 'postman' | 'graphql' | 'http' | 'channel' | 'computer';
+    provider: string;
     platform?: 'slack' | 'email' | null;
     iconUrl?: string | null;
     status: 'active' | 'disabled' | 'needs_auth' | 'error';
@@ -379,7 +379,7 @@ export interface ConnectionSharePrincipal {
     principal_id: string;
 }
 export declare function shareConnection(projectId: string, connectionId: string, principals?: ConnectionSharePrincipal[]): Promise<Connection>;
-export type ConnectorConnectProvider = 'composio' | 'pipedream';
+export type ConnectorConnectProvider = string;
 export interface ConnectorConnectResult {
     provider?: ConnectorConnectProvider;
     app?: string;
@@ -404,8 +404,8 @@ export interface ConnectorConnectStatus {
     provider: ConnectorConnectProvider | null;
     providers?: ConnectorConnectProvider[];
 }
-export declare function pipedreamConnectConnection(projectId: string, connectionId: string, input?: ConnectionConnectInput): Promise<ConnectorConnectResult>;
-export declare function pipedreamFinalizeConnection(projectId: string, connectionId: string): Promise<ConnectorFinalizeResult>;
+export declare function connectorConnectConnection(projectId: string, connectionId: string, input?: ConnectionConnectInput): Promise<ConnectorConnectResult>;
+export declare function connectorFinalizeConnection(projectId: string, connectionId: string): Promise<ConnectorFinalizeResult>;
 export interface ListConnectorsOptions {
     includeSchemas?: boolean;
 }
@@ -485,7 +485,6 @@ export interface ConnectorConnectOptions {
     errorRedirectUri?: string;
 }
 export declare function connectorConnect(projectId: string, slug: string, options?: ConnectorConnectOptions): Promise<ConnectorConnectResult>;
-export declare const pipedreamConnect: typeof connectorConnect;
 export interface SessionConnectRequest {
     slug: string;
     app: string;
@@ -523,56 +522,14 @@ export declare function createConnector(projectId: string, draft: ConnectorDraft
     authDiscovery?: ConnectorAuthDiscovery;
 }>;
 export declare function discoverConnectorAuth(projectId: string, draft: ConnectorDraftInput): Promise<ConnectorAuthDiscovery>;
+export interface McpServerSignInCheck {
+    requires_sign_in: boolean;
+    one_click: boolean;
+}
+export declare function checkMcpServerSignIn(projectId: string, url: string): Promise<McpServerSignInCheck>;
 export declare function deleteConnector(projectId: string, slug: string): Promise<{
     ok: boolean;
 }>;
-export interface PipedreamApp {
-    slug: string;
-    name: string;
-    description: string | null;
-    imgSrc: string | null;
-    authType: string | null;
-    categories: string[];
-    hasActions: boolean;
-    hasTriggers: boolean;
-    featuredWeight: number;
-    directId?: string | null;
-}
-export interface PipedreamCategory {
-    key: string;
-    label: string;
-    count: number;
-}
-export interface PipedreamCatalogQuery {
-    q?: string;
-    category?: string;
-    cursor?: string;
-    limit?: number;
-}
-export interface PipedreamCatalogPage {
-    apps: PipedreamApp[];
-    categories: PipedreamCategory[];
-    total?: number;
-    nextCursor?: string;
-    hasMore: boolean;
-    indexReady?: boolean;
-    excludedNoActions?: number;
-}
-export declare function listPipedreamApps(projectId: string, qOrQuery?: string | PipedreamCatalogQuery, cursor?: string): Promise<PipedreamCatalogPage>;
-export interface PipedreamSection {
-    key: string;
-    label: string;
-    total: number;
-    apps: PipedreamApp[];
-}
-export declare function listPipedreamSections(projectId: string, opts?: {
-    perCategory?: number;
-    maxCategories?: number;
-}): Promise<{
-    sections: PipedreamSection[];
-    categories: PipedreamCategory[];
-    indexReady?: boolean;
-}>;
 export interface ConnectToolkit {
     slug: string;
     name: string;
@@ -582,9 +539,10 @@ export interface ConnectToolkit {
     isNoAuth: boolean;
     connected: boolean;
     directId?: string | null;
+    directMcpUrl?: string | null;
 }
 export interface ConnectToolkitsPage {
-    provider: 'composio';
+    provider: string;
     toolkits: ConnectToolkit[];
     total?: number;
     nextCursor?: string;
@@ -609,7 +567,7 @@ export interface ConnectCategory {
     count: number;
 }
 export interface ConnectSectionsPage {
-    provider: 'composio';
+    provider: string;
     sections: ConnectSection[];
     categories: ConnectCategory[];
 }
@@ -705,6 +663,7 @@ export declare const getDiscoverIntegration: typeof getDiscoverConnector;
 export declare function getConnectStatus(): Promise<ConnectorConnectStatus>;
 export declare function setConnectorCredential(projectId: string, slug: string, credential: string | ConnectionCredentialInput): Promise<{
     ok: boolean;
+    sync?: ConnectorSyncResult;
 }>;
 export declare function deleteConnectorCredential(projectId: string, slug: string): Promise<{
     ok: boolean;
@@ -717,5 +676,4 @@ export interface ConnectorFinalizeOptions {
     connectionId?: string;
 }
 export declare function connectorFinalize(projectId: string, slug: string, options?: ConnectorFinalizeOptions): Promise<ConnectorFinalizeResult>;
-export declare const pipedreamFinalize: typeof connectorFinalize;
 export {};

package/dist/core/rest/projects-client/connectors.js

@@ -249,10 +249,10 @@ export async function shareConnection(projectId, connectionId, principals = [])
         principals,
     }));
 }
-export async function pipedreamConnectConnection(projectId, connectionId, input = {}) {
+export async function connectorConnectConnection(projectId, connectionId, input = {}) {
     return unwrap(await backendApi.post(`/projects/${projectId}/connections/${connectionId}/connect`, input));
 }
-export async function pipedreamFinalizeConnection(projectId, connectionId) {
+export async function connectorFinalizeConnection(projectId, connectionId) {
     return unwrap(await backendApi.post(`/projects/${projectId}/connections/${connectionId}/connect/finalize`, {}));
 }
 export async function listConnectors(projectId, options) {
@@ -296,7 +296,6 @@ export async function connectorConnect(projectId, slug, options = {}) {
         ...(options.errorRedirectUri ? { error_redirect_uri: options.errorRedirectUri } : {}),
     }));
 }
-export const pipedreamConnect = connectorConnect;
 export async function listSessionConnectRequests(projectId, sessionId) {
     const result = unwrap(await backendApi.get(`/connectors/projects/${projectId}/sessions/${encodeURIComponent(sessionId)}/connect-requests`));
     return result.connectors ?? [];
@@ -307,34 +306,12 @@ export async function createConnector(projectId, draft) {
 export async function discoverConnectorAuth(projectId, draft) {
     return unwrap(await backendApi.post(`/connectors/projects/${projectId}/connectors/auth-discovery`, draft));
 }
+export async function checkMcpServerSignIn(projectId, url) {
+    return unwrap(await backendApi.post(`/connectors/projects/${projectId}/connectors/mcp-sign-in-check`, { url }));
+}
 export async function deleteConnector(projectId, slug) {
     return unwrap(await backendApi.delete(`/connectors/projects/${projectId}/connectors/${encodeURIComponent(slug)}`));
 }
-export async function listPipedreamApps(projectId, qOrQuery, cursor) {
-    const query = typeof qOrQuery === 'string' || qOrQuery === undefined
-        ? { ...(qOrQuery ? { q: qOrQuery } : {}), ...(cursor ? { cursor } : {}) }
-        : qOrQuery;
-    const params = new URLSearchParams();
-    if (query.q)
-        params.set('q', query.q);
-    if (query.category)
-        params.set('category', query.category);
-    if (query.cursor)
-        params.set('cursor', query.cursor);
-    if (query.limit)
-        params.set('limit', String(query.limit));
-    const qs = params.toString();
-    return unwrap(await backendApi.get(`/connectors/projects/${projectId}/pipedream/apps${qs ? `?${qs}` : ''}`));
-}
-export async function listPipedreamSections(projectId, opts) {
-    const params = new URLSearchParams();
-    if (opts?.perCategory)
-        params.set('perCategory', String(opts.perCategory));
-    if (opts?.maxCategories)
-        params.set('maxCategories', String(opts.maxCategories));
-    const qs = params.toString();
-    return unwrap(await backendApi.get(`/connectors/projects/${projectId}/pipedream/sections${qs ? `?${qs}` : ''}`));
-}
 export async function listConnectToolkits(projectId, query = {}) {
     const params = new URLSearchParams();
     if (query.q)
@@ -418,4 +395,3 @@ export async function connectorFinalize(projectId, slug, options = {}) {
         body.connection_id = options.connectionId;
     return unwrap(await backendApi.post(`/connectors/projects/${projectId}/connectors/${encodeURIComponent(slug)}/connect/finalize`, body));
 }
-export const pipedreamFinalize = connectorFinalize;

package/dist/core/rest/projects-client/files.d.ts

@@ -12,10 +12,13 @@ export interface ProjectDirectoryEntry {
 export interface ProjectDirectoryListing {
     entries: ProjectDirectoryEntry[];
     truncated: boolean;
+    next_cursor?: string | null;
 }
 export declare function listProjectDirectory(projectId: string, options?: {
     ref?: string;
     path?: string;
+    cursor?: string;
+    limit?: number;
 }): Promise<ProjectDirectoryListing>;
 export interface ProjectFileSearchMatch {
     path: string;

package/dist/core/rest/projects-client/files.js

@@ -19,6 +19,10 @@ export async function listProjectDirectory(projectId, options) {
     if (options?.path)
         params.set('path', options.path);
     params.set('depth', '1');
+    if (options?.cursor)
+        params.set('cursor', options.cursor);
+    if (options?.limit !== undefined)
+        params.set('limit', String(options.limit));
     return unwrap(await backendApi.get(`/projects/${projectId}/files?${params.toString()}`, { showErrors: false }));
 }
 export async function searchProjectFiles(projectId, query, options) {

package/dist/core/rest/projects-client/gateway.d.ts

@@ -104,9 +104,13 @@ export interface GatewayBudgetRow {
     budget_id: string;
     scope: 'project' | 'member';
     subject_user_id: string | null;
+    subject_email?: string | null;
     limit_usd: number;
     period: 'day' | 'week' | 'month';
     action: 'block' | 'warn';
+    spent_usd?: number;
+    period_start?: string;
+    resets_at?: string;
 }
 export interface GatewayMemberSpend {
     user_id: string | null;
@@ -143,6 +147,7 @@ export interface CreatedGatewayKey {
     name: string;
     key_prefix: string;
     secret_key: string;
+    gateway_url?: string | null;
 }
 export type GatewayFallbackCondition = 'transient' | 'any-error';
 export interface GatewayFallbackChain {

package/dist/core/rest/projects-client/git-backend.d.ts

@@ -1,15 +1,6 @@
-import type { GitHubRepository } from './github.js';
 export interface ManagedGitBackend {
     configured: boolean;
-    kind: 'app' | 'pat' | null;
+    kind: string | null;
     owner: string | null;
 }
-export interface ManagedGitRepositoriesResponse {
-    owner: string;
-    repositories: GitHubRepository[];
-}
 export declare function getManagedGitBackend(): Promise<ManagedGitBackend>;
-export declare function listManagedGitRepositories(options?: {
-    search?: string;
-    limit?: number;
-}): Promise<ManagedGitRepositoriesResponse>;

package/dist/core/rest/projects-client/git-backend.js

@@ -3,13 +3,3 @@ import { unwrap } from './shared.js';
 export async function getManagedGitBackend() {
     return unwrap(await backendApi.get('/projects/git/backend', { showErrors: false }));
 }
-export async function listManagedGitRepositories(options) {
-    const params = new URLSearchParams();
-    const search = options?.search?.trim();
-    if (search)
-        params.set('search', search);
-    if (options?.limit !== undefined)
-        params.set('limit', String(options.limit));
-    const query = params.toString();
-    return unwrap(await backendApi.get(`/projects/git/backend/repositories${query ? `?${query}` : ''}`, { showErrors: false }));
-}

package/dist/core/rest/projects-client/iam-actions.d.ts

@@ -0,0 +1,76 @@
+import type { ReviewVerdict } from './review.js';
+import { type ReviewItem } from './review-items.js';
+export declare const PROJECT_ACTIONS: {
+    readonly PROJECT_READ: "project.read";
+    readonly PROJECT_WRITE: "project.write";
+    readonly PROJECT_DELETE: "project.delete";
+    readonly PROJECT_SESSION_READ: "project.session.read";
+    readonly PROJECT_SESSION_START: "project.session.start";
+    readonly PROJECT_SESSION_STOP: "project.session.stop";
+    readonly PROJECT_SESSION_BINDINGS_WRITE: "project.session.bindings.write";
+    readonly PROJECT_MEMBERS_READ: "project.members.read";
+    readonly PROJECT_MEMBERS_MANAGE: "project.members.manage";
+    readonly PROJECT_TRIGGER_READ: "project.trigger.read";
+    readonly PROJECT_TRIGGER_CREATE: "project.trigger.create";
+    readonly PROJECT_TRIGGER_UPDATE: "project.trigger.update";
+    readonly PROJECT_TRIGGER_DELETE: "project.trigger.delete";
+    readonly PROJECT_TRIGGER_FIRE: "project.trigger.fire";
+    readonly PROJECT_GATEWAY_LOGS_READ: "project.gateway.logs.read";
+    readonly PROJECT_GATEWAY_SPEND_READ: "project.gateway.spend.read";
+    readonly PROJECT_USAGE_READ: "project.usage.read";
+    readonly PROJECT_GATEWAY_BUDGET_SET: "project.gateway.budget.set";
+    readonly PROJECT_GATEWAY_KEYS_MANAGE: "project.gateway.keys.manage";
+    readonly PROJECT_AGENT_READ: "project.agent.read";
+    readonly PROJECT_AGENT_WRITE: "project.agent.write";
+    readonly PROJECT_SKILL_READ: "project.skill.read";
+    readonly PROJECT_SKILL_WRITE: "project.skill.write";
+    readonly PROJECT_COMMAND_READ: "project.command.read";
+    readonly PROJECT_COMMAND_WRITE: "project.command.write";
+    readonly PROJECT_FILE_READ: "project.file.read";
+    readonly PROJECT_FILE_WRITE: "project.file.write";
+    readonly PROJECT_SETTINGS_WRITE: "project.settings.write";
+    readonly PROJECT_SANDBOX_WRITE: "project.sandbox.write";
+    readonly PROJECT_MODEL_READ: "project.model.read";
+    readonly PROJECT_MODEL_WRITE: "project.model.write";
+    readonly PROJECT_GITOPS_READ: "project.gitops.read";
+    readonly PROJECT_GITOPS_PUSH: "project.gitops.push";
+    readonly PROJECT_GITOPS_MERGE: "project.gitops.merge";
+    readonly PROJECT_GITOPS_REF_ANY: "project.gitops.ref.any";
+    readonly PROJECT_GITOPS_REF_DELETE: "project.gitops.ref.delete";
+    readonly PROJECT_SECRET_READ: "project.secret.read";
+    readonly PROJECT_SECRET_WRITE: "project.secret.write";
+    readonly PROJECT_CONNECTOR_READ: "project.connector.read";
+    readonly PROJECT_CONNECTOR_CONNECTIONS_MANAGE: "project.connector.connections.manage";
+    readonly PROJECT_CONNECTOR_WRITE: "project.connector.write";
+    readonly PROJECT_APP_READ: "project.app.read";
+    readonly PROJECT_APP_WRITE: "project.app.write";
+    readonly PROJECT_APP_DEPLOY: "project.app.deploy";
+    readonly PROJECT_APP_ADMIN: "project.app.admin";
+    readonly PROJECT_REVIEW_READ: "project.review.read";
+    readonly PROJECT_REVIEW_SUBMIT: "project.review.submit";
+    readonly PROJECT_REVIEW_ACT: "project.review.act";
+    readonly PROJECT_CREDENTIALS_ISSUE: "project.credentials.issue";
+};
+export type ProjectAction = (typeof PROJECT_ACTIONS)[keyof typeof PROJECT_ACTIONS];
+export declare const TRIGGER_CONTROL_ACTIONS: readonly ["project.write", "project.trigger.create", "project.trigger.fire", "project.trigger.update", "project.trigger.delete"];
+export interface TriggerControls {
+    canCreate: boolean;
+    canFire: boolean;
+    canUpdate: boolean;
+    canDelete: boolean;
+}
+export declare function triggerControlsFrom(cans: Partial<Record<string, {
+    allowed: boolean;
+} | undefined>>): TriggerControls;
+export declare const REVIEW_CONTROL_ACTIONS: readonly ["project.write", "project.gitops.push", "project.gitops.merge", "project.review.act"];
+export interface ChangeRequestControls {
+    canOpen: boolean;
+    canMerge: boolean;
+    canClose: boolean;
+}
+export declare function changeRequestControlsFrom(cans: Partial<Record<string, {
+    allowed: boolean;
+} | undefined>>): ChangeRequestControls;
+export declare function reviewVerdictAllowed(item: ReviewItem, verdict: ReviewVerdict, cans: Partial<Record<string, {
+    allowed: boolean;
+} | undefined>>): boolean;