@distilled.cloud/doppler 1.0.0-rc.12 → 1.0.0-rc.13

package/lib/services/doppler.js

@@ -4,7 +4,7 @@ import * as Redacted from "effect/Redacted";
 import * as API from "@distilled.cloud/core/api";
 import * as C from "@distilled.cloud/core/category";
 import * as T from "../traits.js";
-import { DopplerProtocol, } from "../protocol.js";
+import { DopplerProtocol, DopplerPublicProtocol, } from "../protocol.js";
 import { UnknownDopplerError } from "../errors.js";
 import * as Retry from "../retry.js";
 export class BadRequest extends /*@__PURE__*/ /*@__PURE__*/ T.applyErrorMatchers(
@@ -158,11 +158,23 @@ export const AuthOidcRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
     identifier: "AuthOidcRequest",
 });
 export const AuthOidcResponse = /*@__PURE__*/ S.suspend(() => S.Struct({
-    token: S.optional(S.String),
-    expires_at: S.optional(S.String),
+    token: S.String.pipe(T.SensitiveValue({})),
+    expires_at: S.String,
 })).annotate({
     identifier: "AuthOidcResponse",
 });
+export const AuthorizeCliAuthRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    code: S.String.pipe(T.SensitiveValue({})),
+}).pipe(T.Http({ method: "POST", uri: "/v3/auth/cli/authorize", code: 200 }))).annotate({
+    identifier: "AuthorizeCliAuthRequest",
+});
+export const AuthorizeCliAuthResponse = /*@__PURE__*/ S.suspend(() => S.Struct({
+    token: S.String.pipe(T.SensitiveValue({})),
+    name: S.String,
+    dashboard_url: S.String,
+})).annotate({
+    identifier: "AuthorizeCliAuthResponse",
+});
 export const CloneConfigRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
     project: S.String,
     config: S.String,
@@ -564,10 +576,28 @@ export const CreateIntegrationRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
 }).pipe(T.Http({ method: "POST", uri: "/v3/integrations", code: 200 }))).annotate({
     identifier: "CreateIntegrationRequest",
 });
+export const CreateIntegrationResponseIntegrationFederationCase0 = 
+/*@__PURE__*/ S.suspend(() => S.Struct({
+    kind: S.String,
+    principal: S.String,
+})).annotate({
+    identifier: "CreateIntegrationResponseIntegrationFederationCase0",
+});
+export const CreateIntegrationResponseIntegrationFederationCase1 = 
+/*@__PURE__*/ S.suspend(() => S.Struct({
+    kind: S.String,
+    issuer: S.String,
+    subject: S.String,
+    audience: S.String,
+})).annotate({
+    identifier: "CreateIntegrationResponseIntegrationFederationCase1",
+});
+export const CreateIntegrationResponseIntegrationFederation = S.Unknown;
 export const CreateIntegrationResponseIntegration = /*@__PURE__*/ S.suspend(() => S.Struct({
     slug: S.optional(S.String),
     name: S.optional(S.String),
     type: S.optional(S.String),
+    federation: S.optional(S.NullOr(CreateIntegrationResponseIntegrationFederation)),
 })).annotate({
     identifier: "CreateIntegrationResponseIntegration",
 });
@@ -828,8 +858,8 @@ export const DisableWebhookResponse = /*@__PURE__*/ S.suspend(() => S.Unknown.pi
 export const DownloadSecretRequestFormat = S.String;
 export const DownloadSecretRequestNameTransformer = S.String;
 export const DownloadSecretRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
-    project: S.String.pipe(T.Query()),
-    config: S.String.pipe(T.Query()),
+    project: S.optional(S.String.pipe(T.Query())),
+    config: S.optional(S.String.pipe(T.Query())),
     format: S.optional(DownloadSecretRequestFormat.pipe(T.Query())),
     name_transformer: S.optional(DownloadSecretRequestNameTransformer.pipe(T.Query())),
     include_dynamic_secrets: S.optional(S.Boolean.pipe(T.Query())),
@@ -842,12 +872,8 @@ export const DownloadSecretRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
 }))).annotate({
     identifier: "DownloadSecretRequest",
 });
-export const DownloadSecretResponse = /*@__PURE__*/ S.suspend(() => S.Struct({
-    STRIPE: S.optional(S.String),
-    ALGOLIA: S.optional(S.String),
-    DATABASE: S.optional(S.String),
-    USER: S.optional(S.String),
-})).annotate({
+export const DownloadSecretResponseBodyMap = /*@__PURE__*/ S.Record(S.String, S.String);
+export const DownloadSecretResponse = /*@__PURE__*/ S.suspend(() => DownloadSecretResponseBodyMap.pipe(T.RawResponseRoot())).annotate({
     identifier: "DownloadSecretResponse",
 });
 export const DynamicSecretsIssueLeaseRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
@@ -900,6 +926,21 @@ export const EnableWebhookRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
 export const EnableWebhookResponse = /*@__PURE__*/ S.suspend(() => S.Unknown.pipe(T.RawResponseRoot())).annotate({
     identifier: "EnableWebhookResponse",
 });
+export const GenerateCliAuthRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    hostname: S.String.pipe(T.Query()),
+    version: S.String.pipe(T.Query()),
+    os: S.String.pipe(T.Query()),
+    arch: S.String.pipe(T.Query()),
+}).pipe(T.Http({ method: "GET", uri: "/v3/auth/cli/generate/2", code: 200 }))).annotate({
+    identifier: "GenerateCliAuthRequest",
+});
+export const GenerateCliAuthResponse = /*@__PURE__*/ S.suspend(() => S.Struct({
+    code: S.String,
+    polling_code: S.String.pipe(T.SensitiveValue({})),
+    auth_url: S.String,
+})).annotate({
+    identifier: "GenerateCliAuthResponse",
+});
 export const GetChangeRequestPolicyRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
     slug: S.String.pipe(T.Label()),
 }).pipe(T.Http({
@@ -986,9 +1027,19 @@ export const GetIntegrationRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
 }).pipe(T.Http({ method: "GET", uri: "/v3/integrations/integration", code: 200 }))).annotate({
     identifier: "GetIntegrationRequest",
 });
-export const GetIntegrationResponseIntegration = CreateIntegrationResponseIntegration;
+export const GetIntegrationResponseIntegrationFederationCase0 = CreateIntegrationResponseIntegrationFederationCase0;
+export const GetIntegrationResponseIntegrationFederationCase1 = CreateIntegrationResponseIntegrationFederationCase1;
+export const GetIntegrationResponseIntegrationFederation = S.Unknown;
+export const GetIntegrationResponseIntegration = /*@__PURE__*/ S.suspend(() => S.Struct({
+    slug: S.optional(S.String),
+    name: S.optional(S.String),
+    type: S.optional(S.String),
+    federation: S.optional(S.NullOr(GetIntegrationResponseIntegrationFederation)),
+})).annotate({
+    identifier: "GetIntegrationResponseIntegration",
+});
 export const GetIntegrationResponse = /*@__PURE__*/ S.suspend(() => S.Struct({
-    integration: S.optional(CreateIntegrationResponseIntegration),
+    integration: S.optional(GetIntegrationResponseIntegration),
 })).annotate({
     identifier: "GetIntegrationResponse",
 });
@@ -2477,6 +2528,14 @@ export const RevokeAuthRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
 export const RevokeAuthResponse = /*@__PURE__*/ S.suspend(() => S.Struct({})).annotate({
     identifier: "RevokeAuthResponse",
 });
+export const RevokeCliAuthRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    token: S.String.pipe(T.SensitiveValue({})),
+}).pipe(T.Http({ method: "POST", uri: "/v3/auth/cli/revoke", code: 200 }))).annotate({
+    identifier: "RevokeCliAuthRequest",
+});
+export const RevokeCliAuthResponse = /*@__PURE__*/ S.suspend(() => S.Unknown.pipe(T.RawResponseRoot())).annotate({
+    identifier: "RevokeCliAuthResponse",
+});
 export const SecretsNamesRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
     project: S.String.pipe(T.Query()),
     config: S.String.pipe(T.Query()),
@@ -3311,7 +3370,15 @@ export const authOidc = /*@__PURE__*/ API.make(() => ({
     input: AuthOidcRequest,
     output: AuthOidcResponse,
     errors: [UnknownDopplerError],
-    protocol: DopplerProtocol,
+    protocol: DopplerPublicProtocol,
+    retry: Retry.Retry,
+}));
+/** Doppler CLI browser authentication. Public endpoint; no bearer token required. Wire contract from DopplerHQ/cli pkg/http/api.go. */
+export const authorizeCliAuth = /*@__PURE__*/ API.make(() => ({
+    input: AuthorizeCliAuthRequest,
+    output: AuthorizeCliAuthResponse,
+    errors: [Conflict, UnknownDopplerError],
+    protocol: DopplerPublicProtocol,
     retry: Retry.Retry,
 }));
 /** Clone Create a new branch config by cloning another. This duplicates a branch config and all its secrets. */
@@ -3584,6 +3651,14 @@ export const enableWebhook = /*@__PURE__*/ API.make(() => ({
     protocol: DopplerProtocol,
     retry: Retry.Retry,
 }));
+/** Doppler CLI browser authentication. Public endpoint; no bearer token required. Wire contract from DopplerHQ/cli pkg/http/api.go. */
+export const generateCliAuth = /*@__PURE__*/ API.make(() => ({
+    input: GenerateCliAuthRequest,
+    output: GenerateCliAuthResponse,
+    errors: [UnknownDopplerError],
+    protocol: DopplerPublicProtocol,
+    retry: Retry.Retry,
+}));
 /** Retrieve Fetch an existing change request policy */
 export const getChangeRequestPolicy = /*@__PURE__*/ API.make(() => ({
     input: GetChangeRequestPolicyRequest,
@@ -4010,6 +4085,14 @@ export const revokeAuth = /*@__PURE__*/ API.make(() => ({
     protocol: DopplerProtocol,
     retry: Retry.Retry,
 }));
+/** Doppler CLI browser authentication. Public endpoint; no bearer token required. Wire contract from DopplerHQ/cli pkg/http/api.go. */
+export const revokeCliAuth = /*@__PURE__*/ API.make(() => ({
+    input: RevokeCliAuthRequest,
+    output: RevokeCliAuthResponse,
+    errors: [UnknownDopplerError],
+    protocol: DopplerPublicProtocol,
+    retry: Retry.Retry,
+}));
 /** List Names Secret Names */
 export const secretsNames = /*@__PURE__*/ API.make(() => ({
     input: SecretsNamesRequest,