@dork-labs/cloud-api 0.75.1

package/dist/inference.d.ts

@@ -0,0 +1,123 @@
+import { z } from 'zod';
+/**
+ * `POST /v1/inference/tokens` — mint a short-lived inference token.
+ *
+ * The caller is taken from the bearer credential; `seatRef` and `agentRef` only
+ * narrow it.
+ */
+export declare const InferenceTokenRequestSchema: z.ZodObject<{
+    instanceId: z.ZodString;
+    seatRef: z.ZodOptional<z.ZodString>;
+    agentRef: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+/**
+ * The endpoints a minted token may be used against.
+ *
+ * Runtime values. No host, origin or URL literal belongs in this package, and
+ * which provider serves a request is not part of this contract.
+ */
+export declare const InferenceEndpointsSchema: z.ZodObject<{
+    anthropicMessages: z.ZodString;
+    openaiChat: z.ZodString;
+}, z.core.$strip>;
+/** What a minted token is allowed to do at once. */
+export declare const InferenceLimitsSchema: z.ZodObject<{
+    concurrentStreams: z.ZodNumber;
+    requestsPerMinute: z.ZodNumber;
+}, z.core.$strip>;
+/**
+ * A minted inference token.
+ *
+ * `token` is a credential returned once. Consumers hold it as a credential
+ * reference, never as a configuration string, and never log it.
+ *
+ * No price, rate, multiplier or unit cost appears on this route. The published
+ * price list is the one place a price belongs.
+ */
+export declare const InferenceTokenSchema: z.ZodObject<{
+    tokenId: z.ZodString;
+    token: z.ZodString;
+    expiresAt: z.ZodISODateTime;
+    endpoints: z.ZodObject<{
+        anthropicMessages: z.ZodString;
+        openaiChat: z.ZodString;
+    }, z.core.$strip>;
+    limits: z.ZodObject<{
+        concurrentStreams: z.ZodNumber;
+        requestsPerMinute: z.ZodNumber;
+    }, z.core.$strip>;
+    catalogVersion: z.ZodString;
+}, z.core.$strip>;
+/** A minted inference token. */
+export type InferenceToken = z.infer<typeof InferenceTokenSchema>;
+/**
+ * What one routed model supports.
+ *
+ * Booleans, and mechanism rather than catalog: they say what a caller may send,
+ * not which model it is or who serves it.
+ */
+export declare const ModelSupportsSchema: z.ZodObject<{
+    tools: z.ZodBoolean;
+    promptCaching: z.ZodBoolean;
+    streaming: z.ZodBoolean;
+    thinking: z.ZodBoolean;
+}, z.core.$strip>;
+/**
+ * One routed model.
+ *
+ * `id` is an opaque string. Publishing the set of routed models would freeze
+ * the catalog into a `.d.ts` on public npm, and read beside the published price
+ * list it would say more than the list does.
+ */
+export declare const InferenceModelSchema: z.ZodObject<{
+    id: z.ZodString;
+    displayName: z.ZodString;
+    contextWindow: z.ZodNumber;
+    maxOutputTokens: z.ZodNumber;
+    supports: z.ZodObject<{
+        tools: z.ZodBoolean;
+        promptCaching: z.ZodBoolean;
+        streaming: z.ZodBoolean;
+        thinking: z.ZodBoolean;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+/** One routed model. */
+export type InferenceModel = z.infer<typeof InferenceModelSchema>;
+/** `GET /v1/inference/models` — the models this caller may route to. */
+export declare const InferenceModelsResponseSchema: z.ZodObject<{
+    catalogVersion: z.ZodString;
+    models: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        displayName: z.ZodString;
+        contextWindow: z.ZodNumber;
+        maxOutputTokens: z.ZodNumber;
+        supports: z.ZodObject<{
+            tools: z.ZodBoolean;
+            promptCaching: z.ZodBoolean;
+            streaming: z.ZodBoolean;
+            thinking: z.ZodBoolean;
+        }, z.core.$strip>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+/** `POST /v1/inference/tokens/{tokenId}/revoke`. */
+export declare const InferenceTokenRevokeResponseSchema: z.ZodObject<{
+    revoked: z.ZodBoolean;
+}, z.core.$strip>;
+/**
+ * Why an inference request was refused.
+ *
+ * Mechanism: each value names a condition a caller can act on, and none of them
+ * names a subscription, a model or a supplier.
+ */
+export declare const InferenceRefusalReasonSchema: z.ZodEnum<{
+    rate_limited: "rate_limited";
+    entitlement_required: "entitlement_required";
+    balance_exhausted: "balance_exhausted";
+    concurrency_exceeded: "concurrency_exceeded";
+    model_unavailable: "model_unavailable";
+    token_revoked: "token_revoked";
+    token_expired: "token_expired";
+}>;
+/** Why an inference request was refused. */
+export type InferenceRefusalReason = z.infer<typeof InferenceRefusalReasonSchema>;
+//# sourceMappingURL=inference.d.ts.map

package/dist/inference.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"inference.d.ts","sourceRoot":"","sources":["../src/inference.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB;;;;;GAKG;AACH,eAAO,MAAM,2BAA2B;;;;iBAM2B,CAAC;AAEpE;;;;;GAKG;AACH,eAAO,MAAM,wBAAwB;;;iBAOlC,CAAC;AAEJ,oDAAoD;AACpD,eAAO,MAAM,qBAAqB;;;iBAKsC,CAAC;AAEzE;;;;;;;;GAQG;AACH,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;iBAa9B,CAAC;AAEJ,gCAAgC;AAChC,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB;;;;;iBAOsC,CAAC;AAEvE;;;;;;GAMG;AACH,eAAO,MAAM,oBAAoB;;;;;;;;;;;iBAUsD,CAAC;AAExF,wBAAwB;AACxB,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE,wEAAwE;AACxE,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;iBAOvC,CAAC;AAEJ,oDAAoD;AACpD,eAAO,MAAM,kCAAkC;;iBAEoD,CAAC;AAEpG;;;;;GAKG;AACH,eAAO,MAAM,4BAA4B;;;;;;;;EAYtC,CAAC;AAEJ,4CAA4C;AAC5C,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC"}

package/dist/inference.js

@@ -0,0 +1,114 @@
+import { z } from 'zod';
+import { IdSchema, SecretValueSchema, TimestampSchema } from './primitives.js';
+/**
+ * `POST /v1/inference/tokens` — mint a short-lived inference token.
+ *
+ * The caller is taken from the bearer credential; `seatRef` and `agentRef` only
+ * narrow it.
+ */
+export const InferenceTokenRequestSchema = z
+    .object({
+    instanceId: IdSchema,
+    seatRef: IdSchema.optional(),
+    agentRef: IdSchema.optional(),
+})
+    .describe('Mint a short-lived inference token for one instance.');
+/**
+ * The endpoints a minted token may be used against.
+ *
+ * Runtime values. No host, origin or URL literal belongs in this package, and
+ * which provider serves a request is not part of this contract.
+ */
+export const InferenceEndpointsSchema = z
+    .object({
+    anthropicMessages: z.string().url(),
+    openaiChat: z.string().url(),
+})
+    .describe('Where to send inference requests. Runtime values; no origin is baked into this package.');
+/** What a minted token is allowed to do at once. */
+export const InferenceLimitsSchema = z
+    .object({
+    concurrentStreams: z.number().int().positive(),
+    requestsPerMinute: z.number().int().positive(),
+})
+    .describe('The concurrency and rate ceilings a minted token carries.');
+/**
+ * A minted inference token.
+ *
+ * `token` is a credential returned once. Consumers hold it as a credential
+ * reference, never as a configuration string, and never log it.
+ *
+ * No price, rate, multiplier or unit cost appears on this route. The published
+ * price list is the one place a price belongs.
+ */
+export const InferenceTokenSchema = z
+    .object({
+    tokenId: IdSchema,
+    token: SecretValueSchema,
+    expiresAt: TimestampSchema,
+    endpoints: InferenceEndpointsSchema,
+    limits: InferenceLimitsSchema,
+    catalogVersion: z
+        .string()
+        .describe('An opaque version string for the model catalog this token was minted against.'),
+})
+    .describe('A minted inference token. The `token` value is returned once and is a credential. No price appears here.');
+/**
+ * What one routed model supports.
+ *
+ * Booleans, and mechanism rather than catalog: they say what a caller may send,
+ * not which model it is or who serves it.
+ */
+export const ModelSupportsSchema = z
+    .object({
+    tools: z.boolean(),
+    promptCaching: z.boolean(),
+    streaming: z.boolean(),
+    thinking: z.boolean(),
+})
+    .describe('What a routed model supports. Capability booleans only.');
+/**
+ * One routed model.
+ *
+ * `id` is an opaque string. Publishing the set of routed models would freeze
+ * the catalog into a `.d.ts` on public npm, and read beside the published price
+ * list it would say more than the list does.
+ */
+export const InferenceModelSchema = z
+    .object({
+    id: IdSchema.describe('An opaque model identifier. The set is never enumerated in this package.'),
+    displayName: z.string(),
+    contextWindow: z.number().int().positive(),
+    maxOutputTokens: z.number().int().positive(),
+    supports: ModelSupportsSchema,
+})
+    .describe('One routed model. No provider or vendor is named anywhere in this shape.');
+/** `GET /v1/inference/models` — the models this caller may route to. */
+export const InferenceModelsResponseSchema = z
+    .object({
+    catalogVersion: z.string(),
+    models: z.array(InferenceModelSchema),
+})
+    .describe('The models this caller may route to, and the opaque version of the catalog they came from.');
+/** `POST /v1/inference/tokens/{tokenId}/revoke`. */
+export const InferenceTokenRevokeResponseSchema = z
+    .object({ revoked: z.boolean() })
+    .describe('Whether the token is now revoked. Revoking an already-revoked token is not an error.');
+/**
+ * Why an inference request was refused.
+ *
+ * Mechanism: each value names a condition a caller can act on, and none of them
+ * names a subscription, a model or a supplier.
+ */
+export const InferenceRefusalReasonSchema = z
+    .enum([
+    'balance_exhausted',
+    'rate_limited',
+    'concurrency_exceeded',
+    'model_unavailable',
+    'token_revoked',
+    'token_expired',
+    'entitlement_required',
+])
+    .describe('Why an inference request was refused. Conditions a caller can act on; nothing about what they bought.');
+//# sourceMappingURL=inference.js.map

package/dist/inference.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inference.js","sourceRoot":"","sources":["../src/inference.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,QAAQ,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAE/E;;;;;GAKG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC;KACzC,MAAM,CAAC;IACN,UAAU,EAAE,QAAQ;IACpB,OAAO,EAAE,QAAQ,CAAC,QAAQ,EAAE;IAC5B,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE;CAC9B,CAAC;KACD,QAAQ,CAAC,sDAAsD,CAAC,CAAC;AAEpE;;;;;GAKG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC;KACtC,MAAM,CAAC;IACN,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACnC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;CAC7B,CAAC;KACD,QAAQ,CACP,yFAAyF,CAC1F,CAAC;AAEJ,oDAAoD;AACpD,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC;KACnC,MAAM,CAAC;IACN,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC9C,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;CAC/C,CAAC;KACD,QAAQ,CAAC,2DAA2D,CAAC,CAAC;AAEzE;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC;KAClC,MAAM,CAAC;IACN,OAAO,EAAE,QAAQ;IACjB,KAAK,EAAE,iBAAiB;IACxB,SAAS,EAAE,eAAe;IAC1B,SAAS,EAAE,wBAAwB;IACnC,MAAM,EAAE,qBAAqB;IAC7B,cAAc,EAAE,CAAC;SACd,MAAM,EAAE;SACR,QAAQ,CAAC,+EAA+E,CAAC;CAC7F,CAAC;KACD,QAAQ,CACP,0GAA0G,CAC3G,CAAC;AAKJ;;;;;GAKG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC;KACjC,MAAM,CAAC;IACN,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE;IAClB,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE;IAC1B,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE;IACtB,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;CACtB,CAAC;KACD,QAAQ,CAAC,yDAAyD,CAAC,CAAC;AAEvE;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC;KAClC,MAAM,CAAC;IACN,EAAE,EAAE,QAAQ,CAAC,QAAQ,CACnB,0EAA0E,CAC3E;IACD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC1C,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC5C,QAAQ,EAAE,mBAAmB;CAC9B,CAAC;KACD,QAAQ,CAAC,0EAA0E,CAAC,CAAC;AAKxF,wEAAwE;AACxE,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC;KAC3C,MAAM,CAAC;IACN,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;IAC1B,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC;CACtC,CAAC;KACD,QAAQ,CACP,4FAA4F,CAC7F,CAAC;AAEJ,oDAAoD;AACpD,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAC;KAChD,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;KAChC,QAAQ,CAAC,sFAAsF,CAAC,CAAC;AAEpG;;;;;GAKG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC;KAC1C,IAAI,CAAC;IACJ,mBAAmB;IACnB,cAAc;IACd,sBAAsB;IACtB,mBAAmB;IACnB,eAAe;IACf,eAAe;IACf,sBAAsB;CACvB,CAAC;KACD,QAAQ,CACP,uGAAuG,CACxG,CAAC"}

package/dist/instances.d.ts

@@ -0,0 +1,60 @@
+import { z } from 'zod';
+/** One machine registered against an account or organization. */
+export declare const InstanceSchema: z.ZodObject<{
+    id: z.ZodString;
+    orgId: z.ZodNullable<z.ZodString>;
+    displayName: z.ZodString;
+    appVersion: z.ZodString;
+    platform: z.ZodString;
+    firstSeenAt: z.ZodISODateTime;
+    lastSeenAt: z.ZodISODateTime;
+    revokedAt: z.ZodNullable<z.ZodISODateTime>;
+}, z.core.$strip>;
+/** One machine registered against an account or organization. */
+export type Instance = z.infer<typeof InstanceSchema>;
+/** `POST /v1/instances/heartbeat` — an instance reporting that it is alive. */
+export declare const InstanceHeartbeatRequestSchema: z.ZodObject<{
+    instanceId: z.ZodString;
+    appVersion: z.ZodString;
+    platform: z.ZodString;
+    displayName: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+/** The acknowledgement of a heartbeat. */
+export declare const InstanceHeartbeatResponseSchema: z.ZodObject<{
+    acknowledgedAt: z.ZodISODateTime;
+    nextHeartbeatAfterMs: z.ZodNumber;
+    revoked: z.ZodBoolean;
+}, z.core.$strip>;
+/**
+ * `POST /v1/instances/revoke` — cut a machine off.
+ *
+ * Revoking an instance also revokes that instance's tunnel credential, so a
+ * revoked machine cannot keep serving on an address this service issued. Same
+ * request, same response: the extra effect is behaviour, not a new field.
+ */
+export declare const InstanceRevokeRequestSchema: z.ZodObject<{
+    instanceId: z.ZodString;
+}, z.core.$strip>;
+/** The result of a revocation. */
+export declare const InstanceRevokeResponseSchema: z.ZodObject<{
+    revokedAt: z.ZodISODateTime;
+}, z.core.$strip>;
+/** `POST /v1/instances/{instanceId}/org` — move an instance to another organization. */
+export declare const InstanceRelinkRequestSchema: z.ZodObject<{
+    orgId: z.ZodNullable<z.ZodString>;
+}, z.core.$strip>;
+/** `GET /v1/instances` — the caller`s registered machines. */
+export declare const InstanceListResponseSchema: z.ZodObject<{
+    items: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        orgId: z.ZodNullable<z.ZodString>;
+        displayName: z.ZodString;
+        appVersion: z.ZodString;
+        platform: z.ZodString;
+        firstSeenAt: z.ZodISODateTime;
+        lastSeenAt: z.ZodISODateTime;
+        revokedAt: z.ZodNullable<z.ZodISODateTime>;
+    }, z.core.$strip>>;
+    nextCursor: z.ZodNullable<z.ZodString>;
+}, z.core.$strip>;
+//# sourceMappingURL=instances.d.ts.map

package/dist/instances.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"instances.d.ts","sourceRoot":"","sources":["../src/instances.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,iEAAiE;AACjE,eAAO,MAAM,cAAc;;;;;;;;;iBAW8C,CAAC;AAE1E,iEAAiE;AACjE,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAEtD,+EAA+E;AAC/E,eAAO,MAAM,8BAA8B;;;;;iBAOkC,CAAC;AAE9E,0CAA0C;AAC1C,eAAO,MAAM,+BAA+B;;;;iBAcqD,CAAC;AAElG;;;;;;GAMG;AACH,eAAO,MAAM,2BAA2B;;iBAMrC,CAAC;AAEJ,kCAAkC;AAClC,eAAO,MAAM,4BAA4B;;iBAIM,CAAC;AAEhD,wFAAwF;AACxF,eAAO,MAAM,2BAA2B;;iBAI+C,CAAC;AAExF,8DAA8D;AAC9D,eAAO,MAAM,0BAA0B;;;;;;;;;;;;iBAGtC,CAAC"}

package/dist/instances.js

@@ -0,0 +1,65 @@
+import { z } from 'zod';
+import { IdSchema, TimestampSchema, pageOf } from './primitives.js';
+/** One machine registered against an account or organization. */
+export const InstanceSchema = z
+    .object({
+    id: IdSchema,
+    orgId: IdSchema.nullable().describe('The organization this instance is linked to, or null.'),
+    displayName: z.string().describe('The name a person gave this machine.'),
+    appVersion: z.string().describe('The DorkOS version the instance last reported.'),
+    platform: z.string().describe('The operating system the instance last reported.'),
+    firstSeenAt: TimestampSchema,
+    lastSeenAt: TimestampSchema,
+    revokedAt: TimestampSchema.nullable().describe('When this instance was revoked, or null.'),
+})
+    .describe('One machine registered against an account or organization.');
+/** `POST /v1/instances/heartbeat` — an instance reporting that it is alive. */
+export const InstanceHeartbeatRequestSchema = z
+    .object({
+    instanceId: IdSchema,
+    appVersion: z.string(),
+    platform: z.string(),
+    displayName: z.string().optional(),
+})
+    .describe('An instance reporting that it is alive and what it is running.');
+/** The acknowledgement of a heartbeat. */
+export const InstanceHeartbeatResponseSchema = z
+    .object({
+    acknowledgedAt: TimestampSchema,
+    nextHeartbeatAfterMs: z
+        .number()
+        .int()
+        .positive()
+        .describe('How long the instance should wait before its next heartbeat.'),
+    revoked: z
+        .boolean()
+        .describe('True when this instance has been revoked and should stop and clear its credentials.'),
+})
+    .describe('The acknowledgement of a heartbeat, carrying the next interval and any revocation.');
+/**
+ * `POST /v1/instances/revoke` — cut a machine off.
+ *
+ * Revoking an instance also revokes that instance's tunnel credential, so a
+ * revoked machine cannot keep serving on an address this service issued. Same
+ * request, same response: the extra effect is behaviour, not a new field.
+ */
+export const InstanceRevokeRequestSchema = z
+    .object({
+    instanceId: IdSchema,
+})
+    .describe('Cut a machine off. Also revokes that instance`s tunnel credential, so it cannot keep serving on an issued address.');
+/** The result of a revocation. */
+export const InstanceRevokeResponseSchema = z
+    .object({
+    revokedAt: TimestampSchema,
+})
+    .describe('When the revocation took effect.');
+/** `POST /v1/instances/{instanceId}/org` — move an instance to another organization. */
+export const InstanceRelinkRequestSchema = z
+    .object({
+    orgId: IdSchema.nullable().describe('The organization to link to, or null to unlink.'),
+})
+    .describe('Move an instance to another organization, or detach it from all of them.');
+/** `GET /v1/instances` — the caller`s registered machines. */
+export const InstanceListResponseSchema = pageOf(InstanceSchema, 'A page of the machines the caller can see.');
+//# sourceMappingURL=instances.js.map

package/dist/instances.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"instances.js","sourceRoot":"","sources":["../src/instances.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAEpE,iEAAiE;AACjE,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC;KAC5B,MAAM,CAAC;IACN,EAAE,EAAE,QAAQ;IACZ,KAAK,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,uDAAuD,CAAC;IAC5F,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,sCAAsC,CAAC;IACxE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,gDAAgD,CAAC;IACjF,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,kDAAkD,CAAC;IACjF,WAAW,EAAE,eAAe;IAC5B,UAAU,EAAE,eAAe;IAC3B,SAAS,EAAE,eAAe,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,0CAA0C,CAAC;CAC3F,CAAC;KACD,QAAQ,CAAC,4DAA4D,CAAC,CAAC;AAK1E,+EAA+E;AAC/E,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC;KAC5C,MAAM,CAAC;IACN,UAAU,EAAE,QAAQ;IACpB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACnC,CAAC;KACD,QAAQ,CAAC,gEAAgE,CAAC,CAAC;AAE9E,0CAA0C;AAC1C,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC;KAC7C,MAAM,CAAC;IACN,cAAc,EAAE,eAAe;IAC/B,oBAAoB,EAAE,CAAC;SACpB,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,QAAQ,CAAC,8DAA8D,CAAC;IAC3E,OAAO,EAAE,CAAC;SACP,OAAO,EAAE;SACT,QAAQ,CACP,qFAAqF,CACtF;CACJ,CAAC;KACD,QAAQ,CAAC,oFAAoF,CAAC,CAAC;AAElG;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC;KACzC,MAAM,CAAC;IACN,UAAU,EAAE,QAAQ;CACrB,CAAC;KACD,QAAQ,CACP,oHAAoH,CACrH,CAAC;AAEJ,kCAAkC;AAClC,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC;KAC1C,MAAM,CAAC;IACN,SAAS,EAAE,eAAe;CAC3B,CAAC;KACD,QAAQ,CAAC,kCAAkC,CAAC,CAAC;AAEhD,wFAAwF;AACxF,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC;KACzC,MAAM,CAAC;IACN,KAAK,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iDAAiD,CAAC;CACvF,CAAC;KACD,QAAQ,CAAC,0EAA0E,CAAC,CAAC;AAExF,8DAA8D;AAC9D,MAAM,CAAC,MAAM,0BAA0B,GAAG,MAAM,CAC9C,cAAc,EACd,4CAA4C,CAC7C,CAAC"}

package/dist/primitives.d.ts

@@ -0,0 +1,74 @@
+import { z } from 'zod';
+/**
+ * The wire version this package describes. Every path in the contract is
+ * prefixed with it, and the service serves `/v1` beside any future `/v2` for at
+ * least two releases.
+ */
+export declare const WIRE_VERSION: 1;
+/** The `/v1` path prefix every route in this contract is served under. */
+export declare const WIRE_PATH_PREFIX: "/v1";
+/**
+ * The header every request and response carries, so a proxy or a log can tell
+ * which contract a call belongs to without parsing its path.
+ */
+export declare const WIRE_VERSION_HEADER: "X-DorkOS-Wire";
+/** The value of {@link WIRE_VERSION_HEADER} for this contract. */
+export declare const WIRE_VERSION_HEADER_VALUE: string;
+/**
+ * An ISO-8601 timestamp with an explicit offset.
+ *
+ * Every time in this contract is absolute. A local time without an offset is
+ * ambiguous on the wire and is rejected.
+ */
+export declare const TimestampSchema: z.ZodISODateTime;
+/**
+ * An opaque server-issued identifier.
+ *
+ * Opaque means exactly that: clients compare, store and echo these, and never
+ * parse, order or enumerate them. Nothing in this package narrows an id to a
+ * set of values — see the package README on catalog blindness.
+ */
+export declare const IdSchema: z.ZodString;
+/**
+ * An integer count of micro-units carried as a string.
+ *
+ * Money never crosses this wire as a JavaScript number. A `number` loses
+ * precision above 2^53 micro-units and invites float arithmetic in a renderer,
+ * so every amount is the exact integer, base-10, as text.
+ */
+export declare const MicroAmountSchema: z.ZodString;
+/**
+ * A value returned once and never again.
+ *
+ * Marks a field the caller must persist at the moment it is received: a token,
+ * a credential, a one-time secret. The server cannot re-issue it, and a client
+ * that logs it has leaked it. Consumers hold these as credential references,
+ * never as configuration strings.
+ */
+export declare const SecretValueSchema: z.ZodString;
+/**
+ * An opaque pagination cursor.
+ *
+ * Supplied by a previous page's `nextCursor`, passed back verbatim. It encodes
+ * server-side position and carries no meaning a client may read.
+ */
+export declare const CursorSchema: z.ZodString;
+/** Query parameters every cursor-paginated collection accepts. */
+export declare const PageParamsSchema: z.ZodObject<{
+    cursor: z.ZodOptional<z.ZodString>;
+    limit: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strip>;
+/** Cursor pagination parameters accepted by every collection route. */
+export type PageParams = z.infer<typeof PageParamsSchema>;
+/**
+ * Wraps an item schema in the cursor-paginated page envelope every collection
+ * in this contract returns.
+ *
+ * @param item - The schema for one element of the page.
+ * @param description - What this particular page contains, for the generated types.
+ */
+export declare function pageOf<T extends z.ZodTypeAny>(item: T, description: string): z.ZodObject<{
+    items: z.ZodArray<T>;
+    nextCursor: z.ZodNullable<z.ZodString>;
+}, z.core.$strip>;
+//# sourceMappingURL=primitives.d.ts.map

package/dist/primitives.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"primitives.d.ts","sourceRoot":"","sources":["../src/primitives.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;GAIG;AACH,eAAO,MAAM,YAAY,EAAG,CAAU,CAAC;AAEvC,0EAA0E;AAC1E,eAAO,MAAM,gBAAgB,EAAG,KAAc,CAAC;AAE/C;;;GAGG;AACH,eAAO,MAAM,mBAAmB,EAAG,eAAwB,CAAC;AAE5D,kEAAkE;AAClE,eAAO,MAAM,yBAAyB,QAAuB,CAAC;AAE9D;;;;;GAKG;AACH,eAAO,MAAM,eAAe,kBAEmC,CAAC;AAEhE;;;;;;GAMG;AACH,eAAO,MAAM,QAAQ,aAGkE,CAAC;AAExF;;;;;;GAMG;AACH,eAAO,MAAM,iBAAiB,aAQ3B,CAAC;AAEJ;;;;;;;GAOG;AACH,eAAO,MAAM,iBAAiB,aAK3B,CAAC;AAEJ;;;;;GAKG;AACH,eAAO,MAAM,YAAY,aAG6D,CAAC;AAEvF,kEAAkE;AAClE,eAAO,MAAM,gBAAgB;;;iBAa4D,CAAC;AAE1F,uEAAuE;AACvE,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE1D;;;;;;GAMG;AACH,wBAAgB,MAAM,CAAC,CAAC,SAAS,CAAC,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,EAAE,WAAW,EAAE,MAAM;;;kBAS1E"}

package/dist/primitives.js

@@ -0,0 +1,98 @@
+import { z } from 'zod';
+/**
+ * The wire version this package describes. Every path in the contract is
+ * prefixed with it, and the service serves `/v1` beside any future `/v2` for at
+ * least two releases.
+ */
+export const WIRE_VERSION = 1;
+/** The `/v1` path prefix every route in this contract is served under. */
+export const WIRE_PATH_PREFIX = '/v1';
+/**
+ * The header every request and response carries, so a proxy or a log can tell
+ * which contract a call belongs to without parsing its path.
+ */
+export const WIRE_VERSION_HEADER = 'X-DorkOS-Wire';
+/** The value of {@link WIRE_VERSION_HEADER} for this contract. */
+export const WIRE_VERSION_HEADER_VALUE = String(WIRE_VERSION);
+/**
+ * An ISO-8601 timestamp with an explicit offset.
+ *
+ * Every time in this contract is absolute. A local time without an offset is
+ * ambiguous on the wire and is rejected.
+ */
+export const TimestampSchema = z.iso
+    .datetime({ offset: true })
+    .describe('An ISO-8601 instant with an explicit UTC offset.');
+/**
+ * An opaque server-issued identifier.
+ *
+ * Opaque means exactly that: clients compare, store and echo these, and never
+ * parse, order or enumerate them. Nothing in this package narrows an id to a
+ * set of values — see the package README on catalog blindness.
+ */
+export const IdSchema = z
+    .string()
+    .min(1)
+    .describe('An opaque server-issued identifier. Clients never parse or enumerate it.');
+/**
+ * An integer count of micro-units carried as a string.
+ *
+ * Money never crosses this wire as a JavaScript number. A `number` loses
+ * precision above 2^53 micro-units and invites float arithmetic in a renderer,
+ * so every amount is the exact integer, base-10, as text.
+ */
+export const MicroAmountSchema = z
+    .string()
+    .regex(/^-?(0|[1-9][0-9]*)$/, 'must be a base-10 integer count of micro-units carried as a string')
+    .describe('An exact integer count of micro-units, carried as a string so no value goes through a JavaScript number.');
+/**
+ * A value returned once and never again.
+ *
+ * Marks a field the caller must persist at the moment it is received: a token,
+ * a credential, a one-time secret. The server cannot re-issue it, and a client
+ * that logs it has leaked it. Consumers hold these as credential references,
+ * never as configuration strings.
+ */
+export const SecretValueSchema = z
+    .string()
+    .min(1)
+    .describe('A credential returned exactly once. Store it as a credential reference; never log it or persist it as configuration.');
+/**
+ * An opaque pagination cursor.
+ *
+ * Supplied by a previous page's `nextCursor`, passed back verbatim. It encodes
+ * server-side position and carries no meaning a client may read.
+ */
+export const CursorSchema = z
+    .string()
+    .min(1)
+    .describe('An opaque pagination cursor, passed back verbatim from a previous page.');
+/** Query parameters every cursor-paginated collection accepts. */
+export const PageParamsSchema = z
+    .object({
+    cursor: CursorSchema.optional(),
+    limit: z
+        .number()
+        .int()
+        .min(1)
+        .max(200)
+        .optional()
+        .describe('Maximum items in the page. The server may return fewer, and clamps anything larger.'),
+})
+    .describe('Cursor pagination parameters, shared by every collection in this contract.');
+/**
+ * Wraps an item schema in the cursor-paginated page envelope every collection
+ * in this contract returns.
+ *
+ * @param item - The schema for one element of the page.
+ * @param description - What this particular page contains, for the generated types.
+ */
+export function pageOf(item, description) {
+    return z
+        .object({
+        items: z.array(item),
+        nextCursor: CursorSchema.nullable().describe('The cursor for the next page, or null when this is the last page.'),
+    })
+        .describe(description);
+}
+//# sourceMappingURL=primitives.js.map

package/dist/primitives.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"primitives.js","sourceRoot":"","sources":["../src/primitives.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;GAIG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAU,CAAC;AAEvC,0EAA0E;AAC1E,MAAM,CAAC,MAAM,gBAAgB,GAAG,KAAc,CAAC;AAE/C;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,eAAwB,CAAC;AAE5D,kEAAkE;AAClE,MAAM,CAAC,MAAM,yBAAyB,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC;AAE9D;;;;;GAKG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,GAAG;KACjC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;KAC1B,QAAQ,CAAC,kDAAkD,CAAC,CAAC;AAEhE;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC;KACtB,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,QAAQ,CAAC,0EAA0E,CAAC,CAAC;AAExF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC;KAC/B,MAAM,EAAE;KACR,KAAK,CACJ,qBAAqB,EACrB,oEAAoE,CACrE;KACA,QAAQ,CACP,0GAA0G,CAC3G,CAAC;AAEJ;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC;KAC/B,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,QAAQ,CACP,sHAAsH,CACvH,CAAC;AAEJ;;;;;GAKG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC;KAC1B,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,QAAQ,CAAC,yEAAyE,CAAC,CAAC;AAEvF,kEAAkE;AAClE,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC;KAC9B,MAAM,CAAC;IACN,MAAM,EAAE,YAAY,CAAC,QAAQ,EAAE;IAC/B,KAAK,EAAE,CAAC;SACL,MAAM,EAAE;SACR,GAAG,EAAE;SACL,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,GAAG,CAAC;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,qFAAqF,CACtF;CACJ,CAAC;KACD,QAAQ,CAAC,4EAA4E,CAAC,CAAC;AAK1F;;;;;;GAMG;AACH,MAAM,UAAU,MAAM,CAAyB,IAAO,EAAE,WAAmB;IACzE,OAAO,CAAC;SACL,MAAM,CAAC;QACN,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;QACpB,UAAU,EAAE,YAAY,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAC1C,mEAAmE,CACpE;KACF,CAAC;SACD,QAAQ,CAAC,WAAW,CAAC,CAAC;AAC3B,CAAC"}

package/dist/problem.d.ts

@@ -0,0 +1,96 @@
+import { z } from 'zod';
+/**
+ * Every machine-readable failure code this contract can return.
+ *
+ * These are mechanism, not catalog: they name what went wrong with a request,
+ * which is a property of the protocol and is published on purpose. Nothing here
+ * names a plan, a model, a supplier or an amount.
+ */
+export declare const ProblemCodeSchema: z.ZodEnum<{
+    unauthenticated: "unauthenticated";
+    invalid_token: "invalid_token";
+    expired_token: "expired_token";
+    forbidden: "forbidden";
+    scope_required: "scope_required";
+    malformed_request: "malformed_request";
+    unsupported_wire_version: "unsupported_wire_version";
+    not_found: "not_found";
+    conflict: "conflict";
+    precondition_failed: "precondition_failed";
+    rate_limited: "rate_limited";
+    person_seat_required: "person_seat_required";
+    seat_unavailable: "seat_unavailable";
+    handle_taken: "handle_taken";
+    handle_reserved: "handle_reserved";
+    handle_tombstoned: "handle_tombstoned";
+    claim_not_approved: "claim_not_approved";
+    inbox_full: "inbox_full";
+    entitlement_required: "entitlement_required";
+    balance_exhausted: "balance_exhausted";
+    quota_exceeded: "quota_exceeded";
+    enrolment_required: "enrolment_required";
+    remote_disabled: "remote_disabled";
+    address_unavailable: "address_unavailable";
+    internal_error: "internal_error";
+    temporarily_unavailable: "temporarily_unavailable";
+}>;
+/** A machine-readable failure code from {@link ProblemCodeSchema}. */
+export type ProblemCode = z.infer<typeof ProblemCodeSchema>;
+/**
+ * The single error envelope every endpoint in this contract returns.
+ *
+ * A response is either the route's success schema or this. There is no third
+ * shape and no per-route error type, so a client writes one failure path.
+ *
+ * `requiredPlanId` is present only on a refusal a subscription would lift. It
+ * is an opaque identifier paired with a server-supplied display string: the
+ * client renders what it is given and never switches on the value, and no
+ * amount ever appears here.
+ */
+export declare const ProblemSchema: z.ZodObject<{
+    code: z.ZodEnum<{
+        unauthenticated: "unauthenticated";
+        invalid_token: "invalid_token";
+        expired_token: "expired_token";
+        forbidden: "forbidden";
+        scope_required: "scope_required";
+        malformed_request: "malformed_request";
+        unsupported_wire_version: "unsupported_wire_version";
+        not_found: "not_found";
+        conflict: "conflict";
+        precondition_failed: "precondition_failed";
+        rate_limited: "rate_limited";
+        person_seat_required: "person_seat_required";
+        seat_unavailable: "seat_unavailable";
+        handle_taken: "handle_taken";
+        handle_reserved: "handle_reserved";
+        handle_tombstoned: "handle_tombstoned";
+        claim_not_approved: "claim_not_approved";
+        inbox_full: "inbox_full";
+        entitlement_required: "entitlement_required";
+        balance_exhausted: "balance_exhausted";
+        quota_exceeded: "quota_exceeded";
+        enrolment_required: "enrolment_required";
+        remote_disabled: "remote_disabled";
+        address_unavailable: "address_unavailable";
+        internal_error: "internal_error";
+        temporarily_unavailable: "temporarily_unavailable";
+    }>;
+    status: z.ZodNumber;
+    title: z.ZodString;
+    detail: z.ZodOptional<z.ZodString>;
+    instance: z.ZodOptional<z.ZodString>;
+    retryAfterMs: z.ZodOptional<z.ZodNumber>;
+    requiredPlanId: z.ZodOptional<z.ZodString>;
+    requiredPlanDisplayName: z.ZodOptional<z.ZodString>;
+    freesAt: z.ZodOptional<z.ZodISODateTime>;
+}, z.core.$strip>;
+/** The error envelope every endpoint returns in place of its success body. */
+export type Problem = z.infer<typeof ProblemSchema>;
+/**
+ * Narrows an unknown value to a {@link Problem}.
+ *
+ * @param value - A parsed response body of unknown shape.
+ */
+export declare function isProblem(value: unknown): value is Problem;
+//# sourceMappingURL=problem.d.ts.map

package/dist/problem.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"problem.d.ts","sourceRoot":"","sources":["../src/problem.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB;;;;;;GAMG;AACH,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;EAqC3B,CAAC;AAEJ,sEAAsE;AACtE,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE5D;;;;;;;;;;GAUG;AACH,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAoCvB,CAAC;AAEJ,8EAA8E;AAC9E,MAAM,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAEpD;;;;GAIG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,OAAO,CAE1D"}