@distilled.cloud/daytona 0.0.0-placeholder → 1.0.0-rc.13

package/src/services/audit.ts

@@ -0,0 +1,416 @@
+// AUTO-GENERATED by scripts/generate.ts from .generated-specs (specs/spec-mirror-daytona/specs/{openapi,toolbox-openapi,analytics-openapi}.json). Do not edit.
+import * as S from "@distilled.cloud/core/schema";
+import * as API from "@distilled.cloud/core/api";
+import * as T from "../traits.ts";
+import {
+  DaytonaProtocol,
+  type DaytonaOpError,
+  type DaytonaOpContext,
+} from "../protocol.ts";
+import { paginateToken } from "../pagination.ts";
+import { UnknownDaytonaError } from "../errors.ts";
+import * as Retry from "../retry.ts";
+
+export type { DaytonaOpError, DaytonaOpContext };
+
+export interface GetAuditScenariosRequest {}
+export const GetAuditScenariosRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({}).pipe(
+    T.Http({ method: "GET", uri: "/audit/scenarios", code: 200 }),
+  ),
+).annotate({
+  identifier: "GetAuditScenariosRequest",
+}) as any as S.Schema<GetAuditScenariosRequest>;
+
+/** Resource type the actions apply to. Scenarios that are not scoped to a specific resource type (e.g. leaving an organization) are grouped under "other". */
+export type AuditTargetScenarioTargetType =
+  | "api_key"
+  | "organization"
+  | "organization_invitation"
+  | "organization_role"
+  | "organization_user"
+  | "docker_registry"
+  | "runner"
+  | "sandbox"
+  | "snapshot"
+  | "user"
+  | "volume"
+  | "warm_pool"
+  | "region"
+  | "secret"
+  | "other"
+  | "identity_provider";
+export const AuditTargetScenarioTargetType = S.String;
+
+export type AuditTargetScenarioActionsItem =
+  | "create"
+  | "read"
+  | "update"
+  | "delete"
+  | "login"
+  | "register"
+  | "change_password"
+  | "set_default"
+  | "update_access"
+  | "update_quota"
+  | "create_region_quota"
+  | "update_region_quota"
+  | "delete_region_quota"
+  | "suspend"
+  | "unsuspend"
+  | "accept"
+  | "decline"
+  | "link_account"
+  | "unlink_account"
+  | "accept_privacy_policies"
+  | "leave_organization"
+  | "regenerate_key_pair"
+  | "update_scheduling"
+  | "update_draining"
+  | "start"
+  | "stop"
+  | "resize"
+  | "replace_labels"
+  | "create_backup"
+  | "update_public_status"
+  | "rotate_signing_key"
+  | "set_auto_stop_interval"
+  | "set_auto_pause_interval"
+  | "set_ttl"
+  | "set_auto_archive_interval"
+  | "set_auto_delete_interval"
+  | "archive"
+  | "snapshot"
+  | "fork"
+  | "pause"
+  | "get_port_preview_url"
+  | "set_general_status"
+  | "activate"
+  | "deactivate"
+  | "update_network_settings"
+  | "update_secrets"
+  | "send_webhook_message"
+  | "initialize_webhooks"
+  | "update_sandbox_default_limited_network_egress"
+  | "update_preview_warning"
+  | "update_sso_enabled"
+  | "generate_workos_admin_portal_link"
+  | "update_scim_enabled"
+  | "update_otel_config"
+  | "delete_otel_config"
+  | "create_ssh_access"
+  | "revoke_ssh_access"
+  | "recover"
+  | "regenerate_proxy_api_key"
+  | "regenerate_ssh_gateway_api_key"
+  | "regenerate_snapshot_manager_credentials"
+  | "auto_stop"
+  | "auto_archive"
+  | "auto_delete"
+  | "ttl_expire"
+  | "spot_evict";
+export const AuditTargetScenarioActionsItem = S.String;
+
+/** Actions that can be audited against this target type, sorted alphabetically. */
+export type AuditTargetScenarioActionsList =
+  Array<AuditTargetScenarioActionsItem>;
+export const AuditTargetScenarioActionsList = /*@__PURE__*/ S.Array(
+  AuditTargetScenarioActionsItem,
+) as any as S.Schema<AuditTargetScenarioActionsList>;
+
+export interface AuditTargetScenario {
+  /** Resource type the actions apply to. Scenarios that are not scoped to a specific resource type (e.g. leaving an organization) are grouped under "other". */
+  targetType: AuditTargetScenarioTargetType;
+  /** Actions that can be audited against this target type, sorted alphabetically. */
+  actions: AuditTargetScenarioActionsList;
+}
+export const AuditTargetScenario = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    targetType: AuditTargetScenarioTargetType,
+    actions: AuditTargetScenarioActionsList,
+  }),
+).annotate({
+  identifier: "AuditTargetScenario",
+}) as any as S.Schema<AuditTargetScenario>;
+
+/** Supported audit log scenarios grouped by target type. Derived at runtime from the audited routes and system events, sorted by target type. */
+export type AuditScenariosTargetsList = Array<AuditTargetScenario>;
+export const AuditScenariosTargetsList = /*@__PURE__*/ S.Array(
+  AuditTargetScenario,
+) as any as S.Schema<AuditScenariosTargetsList>;
+
+export interface AuditScenarios {
+  /** Supported audit log scenarios grouped by target type. Derived at runtime from the audited routes and system events, sorted by target type. */
+  targets: AuditScenariosTargetsList;
+}
+export const AuditScenarios = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    targets: AuditScenariosTargetsList,
+  }),
+).annotate({ identifier: "AuditScenarios" }) as any as S.Schema<AuditScenarios>;
+
+/** Match values present in this list. Accepts comma-separated values or repeated query parameters. Maximum 100 entries. */
+export type StringFilterInList = Array<string>;
+export const StringFilterInList = /*@__PURE__*/ S.Array(
+  S.String,
+) as any as S.Schema<StringFilterInList>;
+
+/** Match values not present in this list. Accepts comma-separated values or repeated query parameters. Maximum 100 entries. */
+export type StringFilterNotInList = Array<string>;
+export const StringFilterNotInList = /*@__PURE__*/ S.Array(
+  S.String,
+) as any as S.Schema<StringFilterNotInList>;
+
+export interface StringFilter {
+  /** Match values equal to this value. */
+  eq?: string;
+  /** Match values not equal to this value. */
+  not?: string;
+  /** Match values present in this list. Accepts comma-separated values or repeated query parameters. Maximum 100 entries. */
+  in?: StringFilterInList;
+  /** Match values not present in this list. Accepts comma-separated values or repeated query parameters. Maximum 100 entries. */
+  notIn?: StringFilterNotInList;
+}
+export const StringFilter = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    eq: S.optional(S.String),
+    not: S.optional(S.String),
+    in: S.optional(StringFilterInList),
+    notIn: S.optional(StringFilterNotInList),
+  }),
+).annotate({ identifier: "StringFilter" }) as any as S.Schema<StringFilter>;
+
+/** Match values present in this list. Accepts comma-separated values or repeated query parameters. Maximum 100 entries. */
+export type IntFilterInList = Array<number>;
+export const IntFilterInList = /*@__PURE__*/ S.Array(
+  S.Number,
+) as any as S.Schema<IntFilterInList>;
+
+/** Match values not present in this list. Accepts comma-separated values or repeated query parameters. Maximum 100 entries. */
+export type IntFilterNotInList = Array<number>;
+export const IntFilterNotInList = /*@__PURE__*/ S.Array(
+  S.Number,
+) as any as S.Schema<IntFilterNotInList>;
+
+export interface IntFilter {
+  /** Match values equal to this value. */
+  eq?: number;
+  /** Match values not equal to this value. */
+  not?: number;
+  /** Match values present in this list. Accepts comma-separated values or repeated query parameters. Maximum 100 entries. */
+  in?: IntFilterInList;
+  /** Match values not present in this list. Accepts comma-separated values or repeated query parameters. Maximum 100 entries. */
+  notIn?: IntFilterNotInList;
+  /** Match values greater than or equal to this value. */
+  gte?: number;
+  /** Match values less than or equal to this value. */
+  lte?: number;
+  /** Match values strictly greater than this value. */
+  gt?: number;
+  /** Match values strictly less than this value. */
+  lt?: number;
+}
+export const IntFilter = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    eq: S.optional(S.Number),
+    not: S.optional(S.Number),
+    in: S.optional(IntFilterInList),
+    notIn: S.optional(IntFilterNotInList),
+    gte: S.optional(S.Number),
+    lte: S.optional(S.Number),
+    gt: S.optional(S.Number),
+    lt: S.optional(S.Number),
+  }),
+).annotate({ identifier: "IntFilter" }) as any as S.Schema<IntFilter>;
+
+export interface DateFilter {
+  /** Match values greater than or equal to this timestamp (ISO 8601). */
+  gte?: string;
+  /** Match values less than or equal to this timestamp (ISO 8601). */
+  lte?: string;
+  /** Match values strictly greater than this timestamp (ISO 8601). */
+  gt?: string;
+  /** Match values strictly less than this timestamp (ISO 8601). */
+  lt?: string;
+}
+export const DateFilter = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    gte: S.optional(S.String),
+    lte: S.optional(S.String),
+    gt: S.optional(S.String),
+    lt: S.optional(S.String),
+  }),
+).annotate({ identifier: "DateFilter" }) as any as S.Schema<DateFilter>;
+
+export interface GetOrganizationAuditLogsRequest {
+  /** Organization ID */
+  organizationId: string;
+  /** Page number of the results */
+  page?: number;
+  /** Number of results per page */
+  limit?: number;
+  /** Deprecated alias for `createdAt[gte]`. From date (ISO 8601 format). */
+  from?: string;
+  /** Deprecated alias for `createdAt[lte]`. To date (ISO 8601 format). */
+  to?: string;
+  /** Token for cursor-based pagination. When provided, takes precedence over page parameter. */
+  nextToken?: string;
+  /** Filter by audit log ID. */
+  id?: StringFilter;
+  /** Filter by actor user ID. */
+  actorId?: StringFilter;
+  /** Filter by actor email. */
+  actorEmail?: StringFilter;
+  /** Filter by actor API key prefix. */
+  actorApiKeyPrefix?: StringFilter;
+  /** Filter by actor API key suffix. */
+  actorApiKeySuffix?: StringFilter;
+  /** Filter by action. */
+  action?: StringFilter;
+  /** Filter by target type. */
+  targetType?: StringFilter;
+  /** Filter by target ID. */
+  targetId?: StringFilter;
+  /** Filter by HTTP status code. */
+  statusCode?: IntFilter;
+  /** Filter by creation timestamp. */
+  createdAt?: DateFilter;
+}
+export const GetOrganizationAuditLogsRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    organizationId: S.String.pipe(T.Label()),
+    page: S.optional(S.Number.pipe(T.Query())),
+    limit: S.optional(S.Number.pipe(T.Query())),
+    from: S.optional(S.String.pipe(T.Query())),
+    to: S.optional(S.String.pipe(T.Query())),
+    nextToken: S.optional(S.String.pipe(T.Query())),
+    id: S.optional(StringFilter.pipe(T.Query())),
+    actorId: S.optional(StringFilter.pipe(T.Query())),
+    actorEmail: S.optional(StringFilter.pipe(T.Query())),
+    actorApiKeyPrefix: S.optional(StringFilter.pipe(T.Query())),
+    actorApiKeySuffix: S.optional(StringFilter.pipe(T.Query())),
+    action: S.optional(StringFilter.pipe(T.Query())),
+    targetType: S.optional(StringFilter.pipe(T.Query())),
+    targetId: S.optional(StringFilter.pipe(T.Query())),
+    statusCode: S.optional(IntFilter.pipe(T.Query())),
+    createdAt: S.optional(DateFilter.pipe(T.Query())),
+  }).pipe(
+    T.Http({
+      method: "GET",
+      uri: "/audit/organizations/{organizationId}",
+      code: 200,
+    }),
+  ),
+).annotate({
+  identifier: "GetOrganizationAuditLogsRequest",
+}) as any as S.Schema<GetOrganizationAuditLogsRequest>;
+
+export type AuditLogMetadataMap = { [key: string]: unknown | undefined };
+export const AuditLogMetadataMap = /*@__PURE__*/ S.Record(
+  S.String,
+  S.Unknown,
+) as any as S.Schema<AuditLogMetadataMap>;
+
+export interface AuditLog {
+  id: string;
+  actorId: string;
+  actorEmail: string;
+  actorApiKeyPrefix?: string;
+  actorApiKeySuffix?: string;
+  organizationId?: string;
+  action: string;
+  targetType?: string;
+  targetId?: string;
+  statusCode?: number;
+  errorMessage?: string;
+  ipAddress?: string;
+  userAgent?: string;
+  source?: string;
+  metadata?: AuditLogMetadataMap;
+  createdAt: string;
+}
+export const AuditLog = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    id: S.String,
+    actorId: S.String,
+    actorEmail: S.String,
+    actorApiKeyPrefix: S.optional(S.String),
+    actorApiKeySuffix: S.optional(S.String),
+    organizationId: S.optional(S.String),
+    action: S.String,
+    targetType: S.optional(S.String),
+    targetId: S.optional(S.String),
+    statusCode: S.optional(S.Number),
+    errorMessage: S.optional(S.String),
+    ipAddress: S.optional(S.String),
+    userAgent: S.optional(S.String),
+    source: S.optional(S.String),
+    metadata: S.optional(AuditLogMetadataMap),
+    createdAt: S.String,
+  }),
+).annotate({ identifier: "AuditLog" }) as any as S.Schema<AuditLog>;
+
+export type PaginatedAuditLogsItemsList = Array<AuditLog>;
+export const PaginatedAuditLogsItemsList = /*@__PURE__*/ S.Array(
+  AuditLog,
+) as any as S.Schema<PaginatedAuditLogsItemsList>;
+
+export interface PaginatedAuditLogs {
+  items: PaginatedAuditLogsItemsList;
+  total: number;
+  page: number;
+  totalPages: number;
+  /** Token for next page in cursor-based pagination */
+  nextToken?: string;
+}
+export const PaginatedAuditLogs = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    items: PaginatedAuditLogsItemsList,
+    total: S.Number,
+    page: S.Number,
+    totalPages: S.Number,
+    nextToken: S.optional(S.String),
+  }),
+).annotate({
+  identifier: "PaginatedAuditLogs",
+}) as any as S.Schema<PaginatedAuditLogs>;
+
+export type GetAuditScenariosError = DaytonaOpError;
+/** Get supported audit log scenarios Returns the supported audit log actions grouped by target type. The list is derived at runtime from the audited routes and system events, so it always reflects what can actually appear in the audit log. */
+export const getAuditScenarios: API.OperationMethod<
+  GetAuditScenariosRequest,
+  AuditScenarios,
+  GetAuditScenariosError,
+  DaytonaOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: GetAuditScenariosRequest,
+  output: AuditScenarios,
+  errors: [UnknownDaytonaError],
+  protocol: DaytonaProtocol,
+  retry: Retry.Retry,
+}));
+
+export type GetOrganizationAuditLogsError = DaytonaOpError;
+/** Get audit logs for organization */
+export const getOrganizationAuditLogs: API.PaginatedOperationMethod<
+  GetOrganizationAuditLogsRequest,
+  PaginatedAuditLogs,
+  GetOrganizationAuditLogsError,
+  DaytonaOpContext,
+  AuditLog
+> = /*@__PURE__*/ API.makePaginated(
+  () => ({
+    input: GetOrganizationAuditLogsRequest,
+    output: PaginatedAuditLogs,
+    errors: [UnknownDaytonaError],
+    protocol: DaytonaProtocol,
+    retry: Retry.Retry,
+    pagination: {
+      mode: "token",
+      inputToken: "nextToken",
+      outputToken: "nextToken",
+      items: "items",
+    } as const,
+  }),
+  paginateToken,
+) as any;