@equinor/fusion-services 0.2.0

package/dist/types/roles/v1/schemas/api-account-claimable-role-assignment-schema-v1.d.ts

@@ -0,0 +1,69 @@
+import { z } from 'zod';
+/** Zod schema for a claimable-role assignment returned from an account-centric query. */
+export declare const ApiAccountClaimableRoleAssignmentSchemaV1: z.ZodIntersection<z.ZodObject<{
+    id: z.ZodOptional<z.ZodString>;
+    assignedTo: z.ZodOptional<z.ZodObject<{
+        azureUniqueId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        mail: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        displayName: z.ZodOptional<z.ZodString>;
+        upn: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        accountType: z.ZodOptional<z.ZodString>;
+        accountClassification: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    }, z.core.$strip>>;
+    claimableRole: z.ZodOptional<z.ZodObject<{
+        id: z.ZodOptional<z.ZodString>;
+        name: z.ZodOptional<z.ZodString>;
+        displayName: z.ZodOptional<z.ZodString>;
+        description: z.ZodOptional<z.ZodString>;
+        accessRoleMappings: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodObject<{
+            accessRole: z.ZodOptional<z.ZodObject<{
+                id: z.ZodOptional<z.ZodString>;
+                name: z.ZodOptional<z.ZodString>;
+                description: z.ZodOptional<z.ZodString>;
+                scopeType: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+                    id: z.ZodOptional<z.ZodString>;
+                    name: z.ZodOptional<z.ZodString>;
+                    description: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+                }, z.core.$strip>>>;
+            }, z.core.$strip>>;
+            reason: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        }, z.core.$strip>>>>;
+        system: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+            id: z.ZodOptional<z.ZodString>;
+            name: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>>;
+    }, z.core.$strip>>;
+    source: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    externalIdentifier: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    reason: z.ZodOptional<z.ZodString>;
+    type: z.ZodOptional<z.ZodString>;
+    validFrom: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    validTo: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    isActive: z.ZodOptional<z.ZodBoolean>;
+    activeTo: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    scope: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+        isGlobal: z.ZodBoolean;
+        value: z.ZodNullable<z.ZodString>;
+        scopeTypeIdentifier: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    }, z.core.$strip>>>;
+    tags: z.ZodOptional<z.ZodArray<z.ZodString>>;
+}, z.core.$strip>, z.ZodObject<{
+    createdBy: z.ZodOptional<z.ZodObject<{
+        azureUniqueId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        mail: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        displayName: z.ZodOptional<z.ZodString>;
+        upn: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        accountType: z.ZodOptional<z.ZodString>;
+        accountClassification: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    }, z.core.$strip>>;
+    createdDate: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>>;
+/**
+ * Represents a claimable role assignment as seen from an account context, including audit
+ * fields.
+ *
+ * Roles API 1.0 model inferred from {@link ApiAccountClaimableRoleAssignmentSchemaV1}, so
+ * `ApiAccountClaimableRoleAssignmentV1` and the runtime validator can never describe different
+ * shapes.
+ */
+export type ApiAccountClaimableRoleAssignmentV1 = z.infer<typeof ApiAccountClaimableRoleAssignmentSchemaV1>;

package/dist/types/roles/v1/schemas/api-account-role-assignment-schema-v1.d.ts

@@ -0,0 +1,52 @@
+import { z } from 'zod';
+/** Zod schema for a role assignment returned from an account-centric query. */
+export declare const ApiAccountRoleAssignmentSchemaV1: z.ZodIntersection<z.ZodObject<{
+    id: z.ZodOptional<z.ZodString>;
+    assignedTo: z.ZodOptional<z.ZodObject<{
+        azureUniqueId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        mail: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        displayName: z.ZodOptional<z.ZodString>;
+        upn: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        accountType: z.ZodOptional<z.ZodString>;
+        accountClassification: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    }, z.core.$strip>>;
+    role: z.ZodOptional<z.ZodObject<{
+        id: z.ZodOptional<z.ZodString>;
+        name: z.ZodOptional<z.ZodString>;
+        displayName: z.ZodOptional<z.ZodString>;
+        description: z.ZodOptional<z.ZodString>;
+        system: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+            id: z.ZodOptional<z.ZodString>;
+            name: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>>;
+    }, z.core.$strip>>;
+    source: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    externalIdentifier: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    reason: z.ZodOptional<z.ZodString>;
+    type: z.ZodOptional<z.ZodString>;
+    validFrom: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    validTo: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    scope: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+        isGlobal: z.ZodBoolean;
+        value: z.ZodNullable<z.ZodString>;
+        scopeTypeIdentifier: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    }, z.core.$strip>>>;
+    tags: z.ZodOptional<z.ZodArray<z.ZodString>>;
+}, z.core.$strip>, z.ZodObject<{
+    createdBy: z.ZodOptional<z.ZodObject<{
+        azureUniqueId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        mail: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        displayName: z.ZodOptional<z.ZodString>;
+        upn: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        accountType: z.ZodOptional<z.ZodString>;
+        accountClassification: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    }, z.core.$strip>>;
+    createdDate: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>>;
+/**
+ * Represents a role assignment as seen from an account context, including audit fields.
+ *
+ * Roles API 1.0 model inferred from {@link ApiAccountRoleAssignmentSchemaV1}, so
+ * `ApiAccountRoleAssignmentV1` and the runtime validator can never describe different shapes.
+ */
+export type ApiAccountRoleAssignmentV1 = z.infer<typeof ApiAccountRoleAssignmentSchemaV1>;

package/dist/types/roles/v1/schemas/api-account-schema-v1.d.ts

@@ -0,0 +1,17 @@
+import { z } from 'zod';
+/** Zod schema for a Fusion account reference embedded in Roles V2 responses. */
+export declare const ApiAccountSchemaV1: z.ZodObject<{
+    azureUniqueId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    mail: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    displayName: z.ZodOptional<z.ZodString>;
+    upn: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    accountType: z.ZodOptional<z.ZodString>;
+    accountClassification: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+}, z.core.$strip>;
+/**
+ * A Fusion account — a user or an application — as referenced by Roles API 1.0 responses.
+ *
+ * Roles API 1.0 model inferred from {@link ApiAccountSchemaV1}, so `ApiAccountV1` and the
+ * runtime validator can never describe different shapes.
+ */
+export type ApiAccountV1 = z.infer<typeof ApiAccountSchemaV1>;

package/dist/types/roles/v1/schemas/api-binding-execution-record-schema-v1.d.ts

@@ -0,0 +1,23 @@
+import { z } from 'zod';
+/** Zod schema for a recorded role binding reconciliation run. */
+export declare const ApiBindingExecutionRecordSchemaV1: z.ZodObject<{
+    id: z.ZodOptional<z.ZodString>;
+    executedAt: z.ZodOptional<z.ZodString>;
+    bindingType: z.ZodOptional<z.ZodString>;
+    sourceSystem: z.ZodOptional<z.ZodString>;
+    triggerType: z.ZodOptional<z.ZodString>;
+    outcome: z.ZodOptional<z.ZodString>;
+    errorMessage: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    rolesAffected: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    claimableRolesAffected: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    assignedUserIds: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    removedUserIds: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    metadata: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+}, z.core.$strip>;
+/**
+ * Represents a recorded execution of a role binding reconciliation run.
+ *
+ * Roles API 1.0 model inferred from {@link ApiBindingExecutionRecordSchemaV1}, so
+ * `ApiBindingExecutionRecordV1` and the runtime validator can never describe different shapes.
+ */
+export type ApiBindingExecutionRecordV1 = z.infer<typeof ApiBindingExecutionRecordSchemaV1>;

package/dist/types/roles/v1/schemas/api-binding-notification-record-schema-v1.d.ts

@@ -0,0 +1,20 @@
+import { z } from 'zod';
+/** Zod schema for a recorded binding notification event. */
+export declare const ApiBindingNotificationRecordSchemaV1: z.ZodObject<{
+    id: z.ZodOptional<z.ZodString>;
+    receivedAt: z.ZodOptional<z.ZodString>;
+    bindingType: z.ZodOptional<z.ZodString>;
+    sourceSystem: z.ZodOptional<z.ZodString>;
+    notificationType: z.ZodOptional<z.ZodString>;
+    processingResult: z.ZodOptional<z.ZodString>;
+    errorMessage: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    metadata: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+}, z.core.$strip>;
+/**
+ * Represents a recorded notification event received from an external binding source.
+ *
+ * Roles API 1.0 model inferred from {@link ApiBindingNotificationRecordSchemaV1}, so
+ * `ApiBindingNotificationRecordV1` and the runtime validator can never describe different
+ * shapes.
+ */
+export type ApiBindingNotificationRecordV1 = z.infer<typeof ApiBindingNotificationRecordSchemaV1>;

package/dist/types/roles/v1/schemas/api-claimable-access-role-mapping-schema-v1.d.ts

@@ -0,0 +1,23 @@
+import { z } from 'zod';
+/** Zod schema for an access role granted by a claimable role. */
+export declare const ApiClaimableAccessRoleMappingSchemaV1: z.ZodObject<{
+    accessRole: z.ZodOptional<z.ZodObject<{
+        id: z.ZodOptional<z.ZodString>;
+        name: z.ZodOptional<z.ZodString>;
+        description: z.ZodOptional<z.ZodString>;
+        scopeType: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+            id: z.ZodOptional<z.ZodString>;
+            name: z.ZodOptional<z.ZodString>;
+            description: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        }, z.core.$strip>>>;
+    }, z.core.$strip>>;
+    reason: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+}, z.core.$strip>;
+/**
+ * Maps an access role to a claimable role, with the reason for inclusion.
+ *
+ * Roles API 1.0 model inferred from {@link ApiClaimableAccessRoleMappingSchemaV1}, so
+ * `ApiClaimableAccessRoleMappingV1` and the runtime validator can never describe different
+ * shapes.
+ */
+export type ApiClaimableAccessRoleMappingV1 = z.infer<typeof ApiClaimableAccessRoleMappingSchemaV1>;

package/dist/types/roles/v1/schemas/api-claimable-role-assignment-activation-schema-v1.d.ts

@@ -0,0 +1,24 @@
+import { z } from 'zod';
+/** Zod schema for the activation record returned after a claimable role is claimed. */
+export declare const ApiClaimableRoleAssignmentActivationSchemaV1: z.ZodObject<{
+    id: z.ZodOptional<z.ZodString>;
+    activationDate: z.ZodOptional<z.ZodString>;
+    activeToDate: z.ZodOptional<z.ZodString>;
+    reason: z.ZodOptional<z.ZodString>;
+    activatedBy: z.ZodOptional<z.ZodObject<{
+        azureUniqueId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        mail: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        displayName: z.ZodOptional<z.ZodString>;
+        upn: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        accountType: z.ZodOptional<z.ZodString>;
+        accountClassification: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+/**
+ * Represents an activation record for a claimable role assignment.
+ *
+ * Roles API 1.0 model inferred from {@link ApiClaimableRoleAssignmentActivationSchemaV1}, so
+ * `ApiClaimableRoleAssignmentActivationV1` and the runtime validator can never describe
+ * different shapes.
+ */
+export type ApiClaimableRoleAssignmentActivationV1 = z.infer<typeof ApiClaimableRoleAssignmentActivationSchemaV1>;

package/dist/types/roles/v1/schemas/api-claimable-role-assignment-schema-v1.d.ts

@@ -0,0 +1,57 @@
+import { z } from 'zod';
+/** Zod schema for an assignment of a claimable role to a Fusion account. */
+export declare const ApiClaimableRoleAssignmentSchemaV1: z.ZodObject<{
+    id: z.ZodOptional<z.ZodString>;
+    assignedTo: z.ZodOptional<z.ZodObject<{
+        azureUniqueId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        mail: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        displayName: z.ZodOptional<z.ZodString>;
+        upn: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        accountType: z.ZodOptional<z.ZodString>;
+        accountClassification: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    }, z.core.$strip>>;
+    claimableRole: z.ZodOptional<z.ZodObject<{
+        id: z.ZodOptional<z.ZodString>;
+        name: z.ZodOptional<z.ZodString>;
+        displayName: z.ZodOptional<z.ZodString>;
+        description: z.ZodOptional<z.ZodString>;
+        accessRoleMappings: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodObject<{
+            accessRole: z.ZodOptional<z.ZodObject<{
+                id: z.ZodOptional<z.ZodString>;
+                name: z.ZodOptional<z.ZodString>;
+                description: z.ZodOptional<z.ZodString>;
+                scopeType: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+                    id: z.ZodOptional<z.ZodString>;
+                    name: z.ZodOptional<z.ZodString>;
+                    description: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+                }, z.core.$strip>>>;
+            }, z.core.$strip>>;
+            reason: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        }, z.core.$strip>>>>;
+        system: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+            id: z.ZodOptional<z.ZodString>;
+            name: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>>;
+    }, z.core.$strip>>;
+    source: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    externalIdentifier: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    reason: z.ZodOptional<z.ZodString>;
+    type: z.ZodOptional<z.ZodString>;
+    validFrom: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    validTo: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    isActive: z.ZodOptional<z.ZodBoolean>;
+    activeTo: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    scope: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+        isGlobal: z.ZodBoolean;
+        value: z.ZodNullable<z.ZodString>;
+        scopeTypeIdentifier: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    }, z.core.$strip>>>;
+    tags: z.ZodOptional<z.ZodArray<z.ZodString>>;
+}, z.core.$strip>;
+/**
+ * Represents an assignment of a claimable role to an account.
+ *
+ * Roles API 1.0 model inferred from {@link ApiClaimableRoleAssignmentSchemaV1}, so
+ * `ApiClaimableRoleAssignmentV1` and the runtime validator can never describe different shapes.
+ */
+export type ApiClaimableRoleAssignmentV1 = z.infer<typeof ApiClaimableRoleAssignmentSchemaV1>;

package/dist/types/roles/v1/schemas/api-claimable-role-schema-v1.d.ts

@@ -0,0 +1,52 @@
+import { z } from 'zod';
+/** Zod schema for a complete claimable role returned by the Fusion Roles V2 API. */
+export declare const ApiClaimableRoleSchemaV1: z.ZodIntersection<z.ZodObject<{
+    id: z.ZodOptional<z.ZodString>;
+    name: z.ZodOptional<z.ZodString>;
+    displayName: z.ZodOptional<z.ZodString>;
+    description: z.ZodOptional<z.ZodString>;
+    accessRoleMappings: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodObject<{
+        accessRole: z.ZodOptional<z.ZodObject<{
+            id: z.ZodOptional<z.ZodString>;
+            name: z.ZodOptional<z.ZodString>;
+            description: z.ZodOptional<z.ZodString>;
+            scopeType: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+                id: z.ZodOptional<z.ZodString>;
+                name: z.ZodOptional<z.ZodString>;
+                description: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+            }, z.core.$strip>>>;
+        }, z.core.$strip>>;
+        reason: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    }, z.core.$strip>>>>;
+    system: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+        id: z.ZodOptional<z.ZodString>;
+        name: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>>;
+}, z.core.$strip>, z.ZodObject<{
+    createdBy: z.ZodOptional<z.ZodObject<{
+        azureUniqueId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        mail: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        displayName: z.ZodOptional<z.ZodString>;
+        upn: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        accountType: z.ZodOptional<z.ZodString>;
+        accountClassification: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    }, z.core.$strip>>;
+    createdDate: z.ZodOptional<z.ZodString>;
+    updatedBy: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+        azureUniqueId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        mail: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        displayName: z.ZodOptional<z.ZodString>;
+        upn: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        accountType: z.ZodOptional<z.ZodString>;
+        accountClassification: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    }, z.core.$strip>>>;
+    updatedDate: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+}, z.core.$strip>>;
+/**
+ * Represents a claimable role with full details including access role mappings and audit
+ * fields.
+ *
+ * Roles API 1.0 model inferred from {@link ApiClaimableRoleSchemaV1}, so `ApiClaimableRoleV1`
+ * and the runtime validator can never describe different shapes.
+ */
+export type ApiClaimableRoleV1 = z.infer<typeof ApiClaimableRoleSchemaV1>;

package/dist/types/roles/v1/schemas/api-claimable-role-scope-schema-v1.d.ts

@@ -0,0 +1,15 @@
+import { z } from 'zod';
+/** Zod schema for the scope restricting a claimable-role assignment. */
+export declare const ApiClaimableRoleScopeSchemaV1: z.ZodObject<{
+    isGlobal: z.ZodBoolean;
+    value: z.ZodNullable<z.ZodString>;
+    scopeTypeIdentifier: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+}, z.core.$strip>;
+/**
+ * Scope restricting a claimable role assignment, if any. Omitted when the assignment is
+ * unscoped.
+ *
+ * Roles API 1.0 model inferred from {@link ApiClaimableRoleScopeSchemaV1}, so
+ * `ApiClaimableRoleScopeV1` and the runtime validator can never describe different shapes.
+ */
+export type ApiClaimableRoleScopeV1 = z.infer<typeof ApiClaimableRoleScopeSchemaV1>;

package/dist/types/roles/v1/schemas/api-consolidated-assignment-entry-schema-v1.d.ts

@@ -0,0 +1,18 @@
+import { z } from 'zod';
+/** Zod schema for an assignment entry contributing to a consolidated assignment. */
+export declare const ApiConsolidatedAssignmentEntrySchemaV1: z.ZodObject<{
+    id: z.ZodOptional<z.ZodString>;
+    validFrom: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    validTo: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    reason: z.ZodOptional<z.ZodString>;
+    source: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    externalIdentifier: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+}, z.core.$strip>;
+/**
+ * Represents a single contributing assignment entry in a consolidated role assignment view.
+ *
+ * Roles API 1.0 model inferred from {@link ApiConsolidatedAssignmentEntrySchemaV1}, so
+ * `ApiConsolidatedAssignmentEntryV1` and the runtime validator can never describe different
+ * shapes.
+ */
+export type ApiConsolidatedAssignmentEntryV1 = z.infer<typeof ApiConsolidatedAssignmentEntrySchemaV1>;

package/dist/types/roles/v1/schemas/api-consolidated-claimable-role-assignment-schema-v1.d.ts

@@ -0,0 +1,47 @@
+import { z } from 'zod';
+/** Zod schema for a consolidated claimable-role assignment. */
+export declare const ApiConsolidatedClaimableRoleAssignmentSchemaV1: z.ZodObject<{
+    id: z.ZodOptional<z.ZodString>;
+    assignedTo: z.ZodOptional<z.ZodObject<{
+        azureUniqueId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        mail: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        displayName: z.ZodOptional<z.ZodString>;
+        upn: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        accountType: z.ZodOptional<z.ZodString>;
+        accountClassification: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    }, z.core.$strip>>;
+    claimableRole: z.ZodOptional<z.ZodObject<{
+        id: z.ZodOptional<z.ZodString>;
+        name: z.ZodOptional<z.ZodString>;
+        displayName: z.ZodOptional<z.ZodString>;
+        description: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    reasons: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    type: z.ZodOptional<z.ZodString>;
+    validFrom: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    validTo: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    isActive: z.ZodOptional<z.ZodBoolean>;
+    activeTo: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    scope: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+        isGlobal: z.ZodBoolean;
+        value: z.ZodNullable<z.ZodString>;
+        scopeTypeIdentifier: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    }, z.core.$strip>>>;
+    assignments: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodObject<{
+        id: z.ZodOptional<z.ZodString>;
+        validFrom: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        validTo: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        reason: z.ZodOptional<z.ZodString>;
+        source: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        externalIdentifier: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    }, z.core.$strip>>>>;
+}, z.core.$strip>;
+/**
+ * Represents a consolidated view of all claimable role assignments for an account and claimable
+ * role combination.
+ *
+ * Roles API 1.0 model inferred from {@link ApiConsolidatedClaimableRoleAssignmentSchemaV1}, so
+ * `ApiConsolidatedClaimableRoleAssignmentV1` and the runtime validator can never describe
+ * different shapes.
+ */
+export type ApiConsolidatedClaimableRoleAssignmentV1 = z.infer<typeof ApiConsolidatedClaimableRoleAssignmentSchemaV1>;

package/dist/types/roles/v1/schemas/api-consolidated-claimable-role-ref-schema-v1.d.ts

@@ -0,0 +1,16 @@
+import { z } from 'zod';
+/** Zod schema for the claimable role reference in a consolidated assignment. */
+export declare const ApiConsolidatedClaimableRoleRefSchemaV1: z.ZodObject<{
+    id: z.ZodOptional<z.ZodString>;
+    name: z.ZodOptional<z.ZodString>;
+    displayName: z.ZodOptional<z.ZodString>;
+    description: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+/**
+ * The claimable role a consolidated claimable role assignment view refers to.
+ *
+ * Roles API 1.0 model inferred from {@link ApiConsolidatedClaimableRoleRefSchemaV1}, so
+ * `ApiConsolidatedClaimableRoleRefV1` and the runtime validator can never describe different
+ * shapes.
+ */
+export type ApiConsolidatedClaimableRoleRefV1 = z.infer<typeof ApiConsolidatedClaimableRoleRefSchemaV1>;

package/dist/types/roles/v1/schemas/api-consolidated-role-assignment-schema-v1.d.ts

@@ -0,0 +1,48 @@
+import { z } from 'zod';
+/** Zod schema for a consolidated permanent role assignment. */
+export declare const ApiConsolidatedRoleAssignmentSchemaV1: z.ZodObject<{
+    id: z.ZodOptional<z.ZodString>;
+    assignedTo: z.ZodOptional<z.ZodObject<{
+        azureUniqueId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        mail: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        displayName: z.ZodOptional<z.ZodString>;
+        upn: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        accountType: z.ZodOptional<z.ZodString>;
+        accountClassification: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    }, z.core.$strip>>;
+    role: z.ZodOptional<z.ZodObject<{
+        id: z.ZodOptional<z.ZodString>;
+        name: z.ZodOptional<z.ZodString>;
+        displayName: z.ZodOptional<z.ZodString>;
+        description: z.ZodOptional<z.ZodString>;
+        system: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+            id: z.ZodOptional<z.ZodString>;
+            name: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>>;
+    }, z.core.$strip>>;
+    reasons: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    type: z.ZodOptional<z.ZodString>;
+    validFrom: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    validTo: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    scope: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+        isGlobal: z.ZodBoolean;
+        value: z.ZodNullable<z.ZodString>;
+        scopeTypeIdentifier: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    }, z.core.$strip>>>;
+    assignments: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodObject<{
+        id: z.ZodOptional<z.ZodString>;
+        validFrom: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        validTo: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        reason: z.ZodOptional<z.ZodString>;
+        source: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        externalIdentifier: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    }, z.core.$strip>>>>;
+}, z.core.$strip>;
+/**
+ * Represents a consolidated view of all role assignments for an account and role combination.
+ *
+ * Roles API 1.0 model inferred from {@link ApiConsolidatedRoleAssignmentSchemaV1}, so
+ * `ApiConsolidatedRoleAssignmentV1` and the runtime validator can never describe different
+ * shapes.
+ */
+export type ApiConsolidatedRoleAssignmentV1 = z.infer<typeof ApiConsolidatedRoleAssignmentSchemaV1>;

package/dist/types/roles/v1/schemas/api-extended-access-role-schema-v1.d.ts

@@ -0,0 +1,24 @@
+import { z } from 'zod';
+/** Zod schema for an access role returned by the global access-role endpoint with its owning system. */
+export declare const ApiExtendedAccessRoleSchemaV1: z.ZodIntersection<z.ZodObject<{
+    id: z.ZodOptional<z.ZodString>;
+    name: z.ZodOptional<z.ZodString>;
+    description: z.ZodOptional<z.ZodString>;
+    scopeType: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+        id: z.ZodOptional<z.ZodString>;
+        name: z.ZodOptional<z.ZodString>;
+        description: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    }, z.core.$strip>>>;
+}, z.core.$strip>, z.ZodObject<{
+    system: z.ZodOptional<z.ZodObject<{
+        id: z.ZodOptional<z.ZodString>;
+        name: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+}, z.core.$strip>>;
+/**
+ * Represents an access role with extended details including system information.
+ *
+ * Roles API 1.0 model inferred from {@link ApiExtendedAccessRoleSchemaV1}, so
+ * `ApiExtendedAccessRoleV1` and the runtime validator can never describe different shapes.
+ */
+export type ApiExtendedAccessRoleV1 = z.infer<typeof ApiExtendedAccessRoleSchemaV1>;

package/dist/types/roles/v1/schemas/api-extended-claimable-role-assignment-activation-schema-v1.d.ts

@@ -0,0 +1,52 @@
+import { z } from 'zod';
+/** Zod schema for an activation record enriched with its claimable role assignment. */
+export declare const ApiExtendedClaimableRoleAssignmentActivationSchemaV1: z.ZodObject<{
+    id: z.ZodOptional<z.ZodString>;
+    claimableRoleAssignment: z.ZodOptional<z.ZodObject<{
+        id: z.ZodOptional<z.ZodString>;
+        claimableRole: z.ZodOptional<z.ZodObject<{
+            id: z.ZodOptional<z.ZodString>;
+            name: z.ZodOptional<z.ZodString>;
+            displayName: z.ZodOptional<z.ZodString>;
+            description: z.ZodOptional<z.ZodString>;
+            accessRoleMappings: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodObject<{
+                accessRole: z.ZodOptional<z.ZodObject<{
+                    id: z.ZodOptional<z.ZodString>;
+                    name: z.ZodOptional<z.ZodString>;
+                    description: z.ZodOptional<z.ZodString>;
+                    scopeType: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+                        id: z.ZodOptional<z.ZodString>;
+                        name: z.ZodOptional<z.ZodString>;
+                        description: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+                    }, z.core.$strip>>>;
+                }, z.core.$strip>>;
+                reason: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+            }, z.core.$strip>>>>;
+            system: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+                id: z.ZodOptional<z.ZodString>;
+                name: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>>>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
+    activationDate: z.ZodOptional<z.ZodString>;
+    activeToDate: z.ZodOptional<z.ZodString>;
+    reason: z.ZodOptional<z.ZodString>;
+    activatedBy: z.ZodOptional<z.ZodObject<{
+        azureUniqueId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        mail: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        displayName: z.ZodOptional<z.ZodString>;
+        upn: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        accountType: z.ZodOptional<z.ZodString>;
+        accountClassification: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+/**
+ * Represents an activation record for a claimable role assignment with the full assignment
+ * details included.
+ *
+ * Roles API 1.0 model inferred from
+ * {@link ApiExtendedClaimableRoleAssignmentActivationSchemaV1}, so
+ * `ApiExtendedClaimableRoleAssignmentActivationV1` and the runtime validator can never describe
+ * different shapes.
+ */
+export type ApiExtendedClaimableRoleAssignmentActivationV1 = z.infer<typeof ApiExtendedClaimableRoleAssignmentActivationSchemaV1>;

package/dist/types/roles/v1/schemas/api-owner-schema-v1.d.ts

@@ -0,0 +1,20 @@
+import { z } from 'zod';
+/** Zod schema for an owner entry attached to a system. */
+export declare const ApiOwnerSchemaV1: z.ZodObject<{
+    reason: z.ZodOptional<z.ZodString>;
+    account: z.ZodOptional<z.ZodObject<{
+        azureUniqueId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        mail: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        displayName: z.ZodOptional<z.ZodString>;
+        upn: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        accountType: z.ZodOptional<z.ZodString>;
+        accountClassification: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+/**
+ * Represents a system owner with the reason for ownership.
+ *
+ * Roles API 1.0 model inferred from {@link ApiOwnerSchemaV1}, so `ApiOwnerV1` and the runtime
+ * validator can never describe different shapes.
+ */
+export type ApiOwnerV1 = z.infer<typeof ApiOwnerSchemaV1>;

package/dist/types/roles/v1/schemas/api-paged-collection-schema-v1.d.ts

@@ -0,0 +1,37 @@
+import { z } from 'zod';
+/**
+ * Builds a schema that faithfully validates the paged-collection envelope
+ * Roles API 1.0 wraps around every collection resource, while delegating item
+ * validation to the provided `itemSchema`.
+ *
+ * The envelope is a factory rather than a fixed schema because the item type
+ * differs per endpoint; {@link ApiPagedCollectionV1} infers the resulting shape,
+ * so the envelope is still declared exactly once.
+ *
+ * @template TItem - The type of the items contained in the collection.
+ * @param itemSchema - Schema used to validate each item in the `value` array.
+ * @returns A schema for a page of `TItem`.
+ *
+ * @example
+ * ```ts
+ * const pageSchema = apiPagedCollectionSchemaV1(ApiRoleSchemaV1);
+ * type RolePage = ApiPagedCollectionV1<ApiRoleV1>;
+ * ```
+ */
+export declare const apiPagedCollectionSchemaV1: <TItem>(itemSchema: z.ZodType<TItem>) => z.ZodObject<{
+    totalCount: z.ZodUnion<readonly [z.ZodNumber, z.ZodString]>;
+    count: z.ZodOptional<z.ZodUnion<readonly [z.ZodNumber, z.ZodString]>>;
+    nextPage: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    prevPage: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    value: z.ZodOptional<z.ZodArray<z.ZodType<TItem, unknown, z.core.$ZodTypeInternals<TItem, unknown>>>>;
+}, z.core.$strip>;
+/**
+ * One page of a Roles API 1.0 collection: the `value` array plus the `totalCount`, `count`,
+ * `nextPage`, and `prevPage` envelope fields.
+ *
+ * Inferred from the schema {@link apiPagedCollectionSchemaV1} builds, so the envelope is declared
+ * exactly once and `ApiPagedCollectionV1` cannot drift from the runtime validator.
+ *
+ * @template TItem - The type of the items contained in the collection.
+ */
+export type ApiPagedCollectionV1<TItem> = z.infer<ReturnType<typeof apiPagedCollectionSchemaV1<TItem>>>;

package/dist/types/roles/v1/schemas/api-purge-binding-result-schema-v1.d.ts

@@ -0,0 +1,12 @@
+import { z } from 'zod';
+/** Zod schema for the result of purging expired role binding records. */
+export declare const ApiPurgeBindingResultSchemaV1: z.ZodObject<{
+    deletedCount: z.ZodOptional<z.ZodUnion<readonly [z.ZodNumber, z.ZodString]>>;
+}, z.core.$strip>;
+/**
+ * Response model for purge operations indicating the number of records deleted.
+ *
+ * Roles API 1.0 model inferred from {@link ApiPurgeBindingResultSchemaV1}, so
+ * `ApiPurgeBindingResultV1` and the runtime validator can never describe different shapes.
+ */
+export type ApiPurgeBindingResultV1 = z.infer<typeof ApiPurgeBindingResultSchemaV1>;