@bluefly/openstandardagents 0.3.2 → 0.3.3

package/dist/types/identity.zod.d.ts

@@ -0,0 +1,622 @@
+/**
+ * OSSA Identity Zod Schemas
+ * Validation schemas for spec.identity
+ *
+ * @module @openstandardagents/identity
+ * @version 0.3.2
+ */
+import { z } from 'zod';
+export declare const IdentityProviderSchema: z.ZodEnum<{
+    gitlab: "gitlab";
+    github: "github";
+    "azure-devops": "azure-devops";
+    bitbucket: "bitbucket";
+    generic: "generic";
+}>;
+export declare const AuthenticationMethodSchema: z.ZodEnum<{
+    mtls: "mtls";
+    personal_access_token: "personal_access_token";
+    project_access_token: "project_access_token";
+    group_access_token: "group_access_token";
+    deploy_token: "deploy_token";
+    oauth2: "oauth2";
+    ssh_key: "ssh_key";
+    github_app: "github_app";
+    azure_service_principal: "azure_service_principal";
+}>;
+export declare const ServiceAccountRoleSchema: z.ZodEnum<{
+    owner: "owner";
+    developer: "developer";
+    maintainer: "maintainer";
+    reporter: "reporter";
+    guest: "guest";
+}>;
+export declare const TokenEncryptionSchema: z.ZodEnum<{
+    none: "none";
+    both: "both";
+    at_rest: "at_rest";
+    in_transit: "in_transit";
+}>;
+export declare const AuditLoggingLevelSchema: z.ZodEnum<{
+    required: "required";
+    optional: "optional";
+    disabled: "disabled";
+}>;
+export declare const ComplianceFrameworkSchema: z.ZodEnum<{
+    SOC2: "SOC2";
+    HIPAA: "HIPAA";
+    GDPR: "GDPR";
+    FedRAMP: "FedRAMP";
+    "PCI-DSS": "PCI-DSS";
+    ISO27001: "ISO27001";
+}>;
+export declare const ServiceAccountSchema: z.ZodObject<{
+    id: z.ZodOptional<z.ZodUnion<readonly [z.ZodNumber, z.ZodString]>>;
+    username: z.ZodString;
+    email: z.ZodString;
+    display_name: z.ZodOptional<z.ZodString>;
+    avatar_url: z.ZodOptional<z.ZodString>;
+    created_at: z.ZodOptional<z.ZodString>;
+    roles: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+        owner: "owner";
+        developer: "developer";
+        maintainer: "maintainer";
+        reporter: "reporter";
+        guest: "guest";
+    }>>>;
+}, z.core.$strip>;
+export declare const VaultTokenSourceSchema: z.ZodObject<{
+    path: z.ZodString;
+    key: z.ZodOptional<z.ZodString>;
+    role: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export declare const KubernetesSecretSourceSchema: z.ZodObject<{
+    name: z.ZodString;
+    namespace: z.ZodOptional<z.ZodString>;
+    key: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export declare const GCPSecretManagerSourceSchema: z.ZodObject<{
+    project: z.ZodString;
+    secret: z.ZodString;
+    version: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export declare const AWSSecretsManagerSourceSchema: z.ZodObject<{
+    region: z.ZodString;
+    secret_id: z.ZodString;
+    key: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export declare const AzureKeyVaultSourceSchema: z.ZodObject<{
+    vault_url: z.ZodString;
+    secret_name: z.ZodString;
+}, z.core.$strip>;
+export declare const TokenSourceSchema: z.ZodObject<{
+    env_var: z.ZodOptional<z.ZodString>;
+    file_path: z.ZodOptional<z.ZodString>;
+    vault: z.ZodOptional<z.ZodObject<{
+        path: z.ZodString;
+        key: z.ZodOptional<z.ZodString>;
+        role: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    kubernetes_secret: z.ZodOptional<z.ZodObject<{
+        name: z.ZodString;
+        namespace: z.ZodOptional<z.ZodString>;
+        key: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    gcp_secret_manager: z.ZodOptional<z.ZodObject<{
+        project: z.ZodString;
+        secret: z.ZodString;
+        version: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    aws_secrets_manager: z.ZodOptional<z.ZodObject<{
+        region: z.ZodString;
+        secret_id: z.ZodString;
+        key: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    azure_key_vault: z.ZodOptional<z.ZodObject<{
+        vault_url: z.ZodString;
+        secret_name: z.ZodString;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export declare const TokenRotationPolicySchema: z.ZodObject<{
+    enabled: z.ZodOptional<z.ZodBoolean>;
+    interval_days: z.ZodOptional<z.ZodNumber>;
+    notify_on_rotation: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$strip>;
+export declare const AuthenticationConfigSchema: z.ZodObject<{
+    method: z.ZodOptional<z.ZodEnum<{
+        mtls: "mtls";
+        personal_access_token: "personal_access_token";
+        project_access_token: "project_access_token";
+        group_access_token: "group_access_token";
+        deploy_token: "deploy_token";
+        oauth2: "oauth2";
+        ssh_key: "ssh_key";
+        github_app: "github_app";
+        azure_service_principal: "azure_service_principal";
+    }>>;
+    scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    auto_refresh: z.ZodOptional<z.ZodBoolean>;
+    expiry_warning_days: z.ZodOptional<z.ZodNumber>;
+    rotation_policy: z.ZodOptional<z.ZodObject<{
+        enabled: z.ZodOptional<z.ZodBoolean>;
+        interval_days: z.ZodOptional<z.ZodNumber>;
+        notify_on_rotation: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export declare const GitLabServiceAccountSchema: z.ZodObject<{
+    id: z.ZodOptional<z.ZodNumber>;
+    username: z.ZodString;
+    email: z.ZodString;
+}, z.core.$strip>;
+export declare const GitLabTokenRefSchema: z.ZodObject<{
+    env_var: z.ZodOptional<z.ZodString>;
+    file_path: z.ZodOptional<z.ZodString>;
+    vault_path: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export declare const AnthropicTokenRefSchema: z.ZodObject<{
+    env_var: z.ZodOptional<z.ZodString>;
+    file_path: z.ZodOptional<z.ZodString>;
+    vault_path: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export declare const FallbackConditionSchema: z.ZodObject<{
+    pattern_match: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    platform_unavailable: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$strip>;
+export declare const FallbackIdentitySchema: z.ZodObject<{
+    provider: z.ZodEnum<{
+        gitlab: "gitlab";
+        github: "github";
+        "azure-devops": "azure-devops";
+        bitbucket: "bitbucket";
+        generic: "generic";
+    }>;
+    service_account: z.ZodObject<{
+        id: z.ZodOptional<z.ZodUnion<readonly [z.ZodNumber, z.ZodString]>>;
+        username: z.ZodString;
+        email: z.ZodString;
+        display_name: z.ZodOptional<z.ZodString>;
+        avatar_url: z.ZodOptional<z.ZodString>;
+        created_at: z.ZodOptional<z.ZodString>;
+        roles: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+            owner: "owner";
+            developer: "developer";
+            maintainer: "maintainer";
+            reporter: "reporter";
+            guest: "guest";
+        }>>>;
+    }, z.core.$strip>;
+    token_source: z.ZodOptional<z.ZodObject<{
+        env_var: z.ZodOptional<z.ZodString>;
+        file_path: z.ZodOptional<z.ZodString>;
+        vault: z.ZodOptional<z.ZodObject<{
+            path: z.ZodString;
+            key: z.ZodOptional<z.ZodString>;
+            role: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
+        kubernetes_secret: z.ZodOptional<z.ZodObject<{
+            name: z.ZodString;
+            namespace: z.ZodOptional<z.ZodString>;
+            key: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
+        gcp_secret_manager: z.ZodOptional<z.ZodObject<{
+            project: z.ZodString;
+            secret: z.ZodString;
+            version: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
+        aws_secrets_manager: z.ZodOptional<z.ZodObject<{
+            region: z.ZodString;
+            secret_id: z.ZodString;
+            key: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
+        azure_key_vault: z.ZodOptional<z.ZodObject<{
+            vault_url: z.ZodString;
+            secret_name: z.ZodString;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
+    condition: z.ZodOptional<z.ZodObject<{
+        pattern_match: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        platform_unavailable: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export declare const DORAMetricSchema: z.ZodEnum<{
+    deployment_frequency: "deployment_frequency";
+    change_failure_rate: "change_failure_rate";
+    lead_time: "lead_time";
+    mttr: "mttr";
+}>;
+export declare const DORAPrometheusConfigSchema: z.ZodObject<{
+    push_gateway: z.ZodOptional<z.ZodString>;
+    job_name: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export declare const DORAClassificationSchema: z.ZodObject<{
+    elite: z.ZodOptional<z.ZodString>;
+    high: z.ZodOptional<z.ZodString>;
+    medium: z.ZodOptional<z.ZodString>;
+    low: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export declare const DORAClassificationsSchema: z.ZodObject<{
+    deployment_frequency: z.ZodOptional<z.ZodObject<{
+        elite: z.ZodOptional<z.ZodString>;
+        high: z.ZodOptional<z.ZodString>;
+        medium: z.ZodOptional<z.ZodString>;
+        low: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    lead_time: z.ZodOptional<z.ZodObject<{
+        elite: z.ZodOptional<z.ZodString>;
+        high: z.ZodOptional<z.ZodString>;
+        medium: z.ZodOptional<z.ZodString>;
+        low: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export declare const DORATrackingSchema: z.ZodObject<{
+    enabled: z.ZodOptional<z.ZodBoolean>;
+    metrics: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+        deployment_frequency: "deployment_frequency";
+        change_failure_rate: "change_failure_rate";
+        lead_time: "lead_time";
+        mttr: "mttr";
+    }>>>;
+    labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    prometheus: z.ZodOptional<z.ZodObject<{
+        push_gateway: z.ZodOptional<z.ZodString>;
+        job_name: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    classifications: z.ZodOptional<z.ZodObject<{
+        deployment_frequency: z.ZodOptional<z.ZodObject<{
+            elite: z.ZodOptional<z.ZodString>;
+            high: z.ZodOptional<z.ZodString>;
+            medium: z.ZodOptional<z.ZodString>;
+            low: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
+        lead_time: z.ZodOptional<z.ZodObject<{
+            elite: z.ZodOptional<z.ZodString>;
+            high: z.ZodOptional<z.ZodString>;
+            medium: z.ZodOptional<z.ZodString>;
+            low: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export declare const SessionHooksSchema: z.ZodObject<{
+    pre_prompt_submit: z.ZodOptional<z.ZodBoolean>;
+    post_session: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$strip>;
+export declare const SessionConfigSchema: z.ZodObject<{
+    init_on_start: z.ZodOptional<z.ZodBoolean>;
+    propagate_to_subprocesses: z.ZodOptional<z.ZodBoolean>;
+    git_attribution: z.ZodOptional<z.ZodBoolean>;
+    heartbeat_interval: z.ZodOptional<z.ZodNumber>;
+    timeout: z.ZodOptional<z.ZodNumber>;
+    hooks: z.ZodOptional<z.ZodObject<{
+        pre_prompt_submit: z.ZodOptional<z.ZodBoolean>;
+        post_session: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export declare const ObservabilityIdentitySchema: z.ZodObject<{
+    service_name: z.ZodOptional<z.ZodString>;
+    service_namespace: z.ZodOptional<z.ZodString>;
+    service_version: z.ZodOptional<z.ZodString>;
+    service_instance_id: z.ZodOptional<z.ZodString>;
+    resource_attributes: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+}, z.core.$strip>;
+export declare const IdentityComplianceSchema: z.ZodObject<{
+    require_mfa: z.ZodOptional<z.ZodBoolean>;
+    ip_allowlist: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    audit_logging: z.ZodOptional<z.ZodEnum<{
+        required: "required";
+        optional: "optional";
+        disabled: "disabled";
+    }>>;
+    data_residency: z.ZodOptional<z.ZodString>;
+    frameworks: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+        SOC2: "SOC2";
+        HIPAA: "HIPAA";
+        GDPR: "GDPR";
+        FedRAMP: "FedRAMP";
+        "PCI-DSS": "PCI-DSS";
+        ISO27001: "ISO27001";
+    }>>>;
+}, z.core.$strip>;
+export declare const RequiredApprovalsSchema: z.ZodObject<{
+    force_push: z.ZodOptional<z.ZodBoolean>;
+    delete_protected_branch: z.ZodOptional<z.ZodBoolean>;
+    modify_ci_config: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$strip>;
+export declare const IdentityRateLimitsSchema: z.ZodObject<{
+    requests_per_minute: z.ZodOptional<z.ZodNumber>;
+    requests_per_hour: z.ZodOptional<z.ZodNumber>;
+    git_operations_per_hour: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strip>;
+export declare const IdentitySecuritySchema: z.ZodObject<{
+    token_encryption: z.ZodOptional<z.ZodEnum<{
+        none: "none";
+        both: "both";
+        at_rest: "at_rest";
+        in_transit: "in_transit";
+    }>>;
+    minimum_token_length: z.ZodOptional<z.ZodNumber>;
+    prohibited_actions: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    required_approvals: z.ZodOptional<z.ZodObject<{
+        force_push: z.ZodOptional<z.ZodBoolean>;
+        delete_protected_branch: z.ZodOptional<z.ZodBoolean>;
+        modify_ci_config: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strip>>;
+    rate_limits: z.ZodOptional<z.ZodObject<{
+        requests_per_minute: z.ZodOptional<z.ZodNumber>;
+        requests_per_hour: z.ZodOptional<z.ZodNumber>;
+        git_operations_per_hour: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export declare const IdentitySpecSchema: z.ZodObject<{
+    provider: z.ZodEnum<{
+        gitlab: "gitlab";
+        github: "github";
+        "azure-devops": "azure-devops";
+        bitbucket: "bitbucket";
+        generic: "generic";
+    }>;
+    service_account: z.ZodObject<{
+        id: z.ZodOptional<z.ZodUnion<readonly [z.ZodNumber, z.ZodString]>>;
+        username: z.ZodString;
+        email: z.ZodString;
+        display_name: z.ZodOptional<z.ZodString>;
+        avatar_url: z.ZodOptional<z.ZodString>;
+        created_at: z.ZodOptional<z.ZodString>;
+        roles: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+            owner: "owner";
+            developer: "developer";
+            maintainer: "maintainer";
+            reporter: "reporter";
+            guest: "guest";
+        }>>>;
+    }, z.core.$strip>;
+    authentication: z.ZodOptional<z.ZodObject<{
+        method: z.ZodOptional<z.ZodEnum<{
+            mtls: "mtls";
+            personal_access_token: "personal_access_token";
+            project_access_token: "project_access_token";
+            group_access_token: "group_access_token";
+            deploy_token: "deploy_token";
+            oauth2: "oauth2";
+            ssh_key: "ssh_key";
+            github_app: "github_app";
+            azure_service_principal: "azure_service_principal";
+        }>>;
+        scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        auto_refresh: z.ZodOptional<z.ZodBoolean>;
+        expiry_warning_days: z.ZodOptional<z.ZodNumber>;
+        rotation_policy: z.ZodOptional<z.ZodObject<{
+            enabled: z.ZodOptional<z.ZodBoolean>;
+            interval_days: z.ZodOptional<z.ZodNumber>;
+            notify_on_rotation: z.ZodOptional<z.ZodBoolean>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
+    token_source: z.ZodOptional<z.ZodObject<{
+        env_var: z.ZodOptional<z.ZodString>;
+        file_path: z.ZodOptional<z.ZodString>;
+        vault: z.ZodOptional<z.ZodObject<{
+            path: z.ZodString;
+            key: z.ZodOptional<z.ZodString>;
+            role: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
+        kubernetes_secret: z.ZodOptional<z.ZodObject<{
+            name: z.ZodString;
+            namespace: z.ZodOptional<z.ZodString>;
+            key: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
+        gcp_secret_manager: z.ZodOptional<z.ZodObject<{
+            project: z.ZodString;
+            secret: z.ZodString;
+            version: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
+        aws_secrets_manager: z.ZodOptional<z.ZodObject<{
+            region: z.ZodString;
+            secret_id: z.ZodString;
+            key: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
+        azure_key_vault: z.ZodOptional<z.ZodObject<{
+            vault_url: z.ZodString;
+            secret_name: z.ZodString;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
+    patterns: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    fallback: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        provider: z.ZodEnum<{
+            gitlab: "gitlab";
+            github: "github";
+            "azure-devops": "azure-devops";
+            bitbucket: "bitbucket";
+            generic: "generic";
+        }>;
+        service_account: z.ZodObject<{
+            id: z.ZodOptional<z.ZodUnion<readonly [z.ZodNumber, z.ZodString]>>;
+            username: z.ZodString;
+            email: z.ZodString;
+            display_name: z.ZodOptional<z.ZodString>;
+            avatar_url: z.ZodOptional<z.ZodString>;
+            created_at: z.ZodOptional<z.ZodString>;
+            roles: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                owner: "owner";
+                developer: "developer";
+                maintainer: "maintainer";
+                reporter: "reporter";
+                guest: "guest";
+            }>>>;
+        }, z.core.$strip>;
+        token_source: z.ZodOptional<z.ZodObject<{
+            env_var: z.ZodOptional<z.ZodString>;
+            file_path: z.ZodOptional<z.ZodString>;
+            vault: z.ZodOptional<z.ZodObject<{
+                path: z.ZodString;
+                key: z.ZodOptional<z.ZodString>;
+                role: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>>;
+            kubernetes_secret: z.ZodOptional<z.ZodObject<{
+                name: z.ZodString;
+                namespace: z.ZodOptional<z.ZodString>;
+                key: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>>;
+            gcp_secret_manager: z.ZodOptional<z.ZodObject<{
+                project: z.ZodString;
+                secret: z.ZodString;
+                version: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>>;
+            aws_secrets_manager: z.ZodOptional<z.ZodObject<{
+                region: z.ZodString;
+                secret_id: z.ZodString;
+                key: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>>;
+            azure_key_vault: z.ZodOptional<z.ZodObject<{
+                vault_url: z.ZodString;
+                secret_name: z.ZodString;
+            }, z.core.$strip>>;
+        }, z.core.$strip>>;
+        condition: z.ZodOptional<z.ZodObject<{
+            pattern_match: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            platform_unavailable: z.ZodOptional<z.ZodBoolean>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>>;
+    dora_tracking: z.ZodOptional<z.ZodObject<{
+        enabled: z.ZodOptional<z.ZodBoolean>;
+        metrics: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+            deployment_frequency: "deployment_frequency";
+            change_failure_rate: "change_failure_rate";
+            lead_time: "lead_time";
+            mttr: "mttr";
+        }>>>;
+        labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        prometheus: z.ZodOptional<z.ZodObject<{
+            push_gateway: z.ZodOptional<z.ZodString>;
+            job_name: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
+        classifications: z.ZodOptional<z.ZodObject<{
+            deployment_frequency: z.ZodOptional<z.ZodObject<{
+                elite: z.ZodOptional<z.ZodString>;
+                high: z.ZodOptional<z.ZodString>;
+                medium: z.ZodOptional<z.ZodString>;
+                low: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>>;
+            lead_time: z.ZodOptional<z.ZodObject<{
+                elite: z.ZodOptional<z.ZodString>;
+                high: z.ZodOptional<z.ZodString>;
+                medium: z.ZodOptional<z.ZodString>;
+                low: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
+    session: z.ZodOptional<z.ZodObject<{
+        init_on_start: z.ZodOptional<z.ZodBoolean>;
+        propagate_to_subprocesses: z.ZodOptional<z.ZodBoolean>;
+        git_attribution: z.ZodOptional<z.ZodBoolean>;
+        heartbeat_interval: z.ZodOptional<z.ZodNumber>;
+        timeout: z.ZodOptional<z.ZodNumber>;
+        hooks: z.ZodOptional<z.ZodObject<{
+            pre_prompt_submit: z.ZodOptional<z.ZodBoolean>;
+            post_session: z.ZodOptional<z.ZodBoolean>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
+    observability: z.ZodOptional<z.ZodObject<{
+        service_name: z.ZodOptional<z.ZodString>;
+        service_namespace: z.ZodOptional<z.ZodString>;
+        service_version: z.ZodOptional<z.ZodString>;
+        service_instance_id: z.ZodOptional<z.ZodString>;
+        resource_attributes: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    }, z.core.$strip>>;
+    compliance: z.ZodOptional<z.ZodObject<{
+        require_mfa: z.ZodOptional<z.ZodBoolean>;
+        ip_allowlist: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        audit_logging: z.ZodOptional<z.ZodEnum<{
+            required: "required";
+            optional: "optional";
+            disabled: "disabled";
+        }>>;
+        data_residency: z.ZodOptional<z.ZodString>;
+        frameworks: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+            SOC2: "SOC2";
+            HIPAA: "HIPAA";
+            GDPR: "GDPR";
+            FedRAMP: "FedRAMP";
+            "PCI-DSS": "PCI-DSS";
+            ISO27001: "ISO27001";
+        }>>>;
+    }, z.core.$strip>>;
+    security: z.ZodOptional<z.ZodObject<{
+        token_encryption: z.ZodOptional<z.ZodEnum<{
+            none: "none";
+            both: "both";
+            at_rest: "at_rest";
+            in_transit: "in_transit";
+        }>>;
+        minimum_token_length: z.ZodOptional<z.ZodNumber>;
+        prohibited_actions: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        required_approvals: z.ZodOptional<z.ZodObject<{
+            force_push: z.ZodOptional<z.ZodBoolean>;
+            delete_protected_branch: z.ZodOptional<z.ZodBoolean>;
+            modify_ci_config: z.ZodOptional<z.ZodBoolean>;
+        }, z.core.$strip>>;
+        rate_limits: z.ZodOptional<z.ZodObject<{
+            requests_per_minute: z.ZodOptional<z.ZodNumber>;
+            requests_per_hour: z.ZodOptional<z.ZodNumber>;
+            git_operations_per_hour: z.ZodOptional<z.ZodNumber>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export declare const GitLabIdentitySchema: z.ZodObject<{
+    service_account: z.ZodObject<{
+        id: z.ZodOptional<z.ZodNumber>;
+        username: z.ZodString;
+        email: z.ZodString;
+    }, z.core.$strip>;
+    token_ref: z.ZodObject<{
+        env_var: z.ZodOptional<z.ZodString>;
+        file_path: z.ZodOptional<z.ZodString>;
+        vault_path: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+export declare const AnthropicIdentitySchema: z.ZodObject<{
+    token_ref: z.ZodObject<{
+        env_var: z.ZodOptional<z.ZodString>;
+        file_path: z.ZodOptional<z.ZodString>;
+        vault_path: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+export declare const IdentityShortcutsSchema: z.ZodObject<{
+    gitlab: z.ZodOptional<z.ZodObject<{
+        service_account: z.ZodObject<{
+            id: z.ZodOptional<z.ZodNumber>;
+            username: z.ZodString;
+            email: z.ZodString;
+        }, z.core.$strip>;
+        token_ref: z.ZodObject<{
+            env_var: z.ZodOptional<z.ZodString>;
+            file_path: z.ZodOptional<z.ZodString>;
+            vault_path: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>;
+    }, z.core.$strip>>;
+    anthropic: z.ZodOptional<z.ZodObject<{
+        token_ref: z.ZodObject<{
+            env_var: z.ZodOptional<z.ZodString>;
+            file_path: z.ZodOptional<z.ZodString>;
+            vault_path: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type IdentityProvider = z.infer<typeof IdentityProviderSchema>;
+export type AuthenticationMethod = z.infer<typeof AuthenticationMethodSchema>;
+export type ServiceAccountRole = z.infer<typeof ServiceAccountRoleSchema>;
+export type TokenEncryption = z.infer<typeof TokenEncryptionSchema>;
+export type AuditLoggingLevel = z.infer<typeof AuditLoggingLevelSchema>;
+export type ComplianceFramework = z.infer<typeof ComplianceFrameworkSchema>;
+export type ServiceAccount = z.infer<typeof ServiceAccountSchema>;
+export type TokenSource = z.infer<typeof TokenSourceSchema>;
+export type AuthenticationConfig = z.infer<typeof AuthenticationConfigSchema>;
+export type FallbackIdentity = z.infer<typeof FallbackIdentitySchema>;
+export type DORATracking = z.infer<typeof DORATrackingSchema>;
+export type SessionConfig = z.infer<typeof SessionConfigSchema>;
+export type ObservabilityIdentity = z.infer<typeof ObservabilityIdentitySchema>;
+export type IdentityCompliance = z.infer<typeof IdentityComplianceSchema>;
+export type IdentitySecurity = z.infer<typeof IdentitySecuritySchema>;
+export type IdentitySpec = z.infer<typeof IdentitySpecSchema>;
+export type GitLabIdentity = z.infer<typeof GitLabIdentitySchema>;
+export type AnthropicIdentity = z.infer<typeof AnthropicIdentitySchema>;
+export type IdentityShortcuts = z.infer<typeof IdentityShortcutsSchema>;
+//# sourceMappingURL=identity.zod.d.ts.map

package/dist/types/identity.zod.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.zod.d.ts","sourceRoot":"","sources":["../../src/types/identity.zod.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAMxB,eAAO,MAAM,sBAAsB;;;;;;EAMjC,CAAC;AAEH,eAAO,MAAM,0BAA0B;;;;;;;;;;EAUrC,CAAC;AAEH,eAAO,MAAM,wBAAwB;;;;;;EAMnC,CAAC;AAEH,eAAO,MAAM,qBAAqB;;;;;EAAoD,CAAC;AAEvF,eAAO,MAAM,uBAAuB;;;;EAA+C,CAAC;AAEpF,eAAO,MAAM,yBAAyB;;;;;;;EAOpC,CAAC;AAMH,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;iBAY/B,CAAC;AAMH,eAAO,MAAM,sBAAsB;;;;iBAIjC,CAAC;AAEH,eAAO,MAAM,4BAA4B;;;;iBAIvC,CAAC;AAEH,eAAO,MAAM,4BAA4B;;;;iBAIvC,CAAC;AAEH,eAAO,MAAM,6BAA6B;;;;iBAIxC,CAAC;AAEH,eAAO,MAAM,yBAAyB;;;iBAGpC,CAAC;AAEH,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAW5B,CAAC;AAMH,eAAO,MAAM,yBAAyB;;;;iBAIpC,CAAC;AAEH,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;iBAMrC,CAAC;AAMH,eAAO,MAAM,0BAA0B;;;;iBAIrC,CAAC;AAEH,eAAO,MAAM,oBAAoB;;;;iBAI/B,CAAC;AAEH,eAAO,MAAM,uBAAuB;;;;iBAIlC,CAAC;AAMH,eAAO,MAAM,uBAAuB;;;iBAGlC,CAAC;AAEH,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAKjC,CAAC;AAMH,eAAO,MAAM,gBAAgB;;;;;EAK3B,CAAC;AAEH,eAAO,MAAM,0BAA0B;;;iBAGrC,CAAC;AAEH,eAAO,MAAM,wBAAwB;;;;;iBAKnC,CAAC;AAEH,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;iBAGpC,CAAC;AAEH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAM7B,CAAC;AAMH,eAAO,MAAM,kBAAkB;;;iBAG7B,CAAC;AAEH,eAAO,MAAM,mBAAmB;;;;;;;;;;iBAO9B,CAAC;AAMH,eAAO,MAAM,2BAA2B;;;;;;iBAStC,CAAC;AAMH,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;iBAMnC,CAAC;AAEH,eAAO,MAAM,uBAAuB;;;;iBAIlC,CAAC;AAEH,eAAO,MAAM,wBAAwB;;;;iBAInC,CAAC;AAEH,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;iBAMjC,CAAC;AAMH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAY7B,CAAC;AAMH,eAAO,MAAM,oBAAoB;;;;;;;;;;;iBAG/B,CAAC;AAEH,eAAO,MAAM,uBAAuB;;;;;;iBAElC,CAAC;AAEH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;iBAGlC,CAAC;AAMH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AACtE,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAC9E,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAC1E,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AACpE,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AACxE,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAC5E,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAClE,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAC5D,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAC9E,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AACtE,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAC9D,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAChE,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAChF,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAC1E,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AACtE,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAC9D,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAClE,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AACxE,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC"}