@gjermundgaraba/clankerauth-admin-api 0.0.0-stage → 0.25.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (5) hide show
  1. package/LICENSE +21 -0
  2. package/README.md +47 -2
  3. package/dist/index.d.ts +937 -0
  4. package/dist/index.js +359 -0
  5. package/package.json +38 -3
package/dist/index.d.ts ADDED
@@ -0,0 +1,937 @@
1
+ import { Context, type Effect, Schema, type Scope } from "effect";
2
+ import * as Action from "@gjermundgaraba/effect-actions/Action";
3
+ import * as ActionHttp from "@gjermundgaraba/effect-actions/ActionHttp";
4
+ import * as Authentication from "@gjermundgaraba/effect-actions/Authentication";
5
+ import { HttpApiSecurity } from "effect/http-api";
6
+ declare const InternalServerError_base: Schema.Class<InternalServerError, Schema.TaggedStruct<"InternalServerError", {
7
+ readonly message: Schema.String;
8
+ }>, import("effect/Cause").YieldableError>;
9
+ /**
10
+ * This issuer's own fault: a failed query, an unreadable row, an unexpected provider failure.
11
+ * The schema defines the public response; the diagnostic cause reaches logs, never a caller.
12
+ */
13
+ export declare class InternalServerError extends InternalServerError_base {
14
+ cause?: unknown;
15
+ static readonly of: (cause: unknown) => InternalServerError;
16
+ }
17
+ declare const ServiceUnavailable_base: Schema.Class<ServiceUnavailable, Schema.TaggedStruct<"ServiceUnavailable", {
18
+ readonly message: Schema.String;
19
+ }>, import("effect/Cause").YieldableError>;
20
+ /** The issuer could not decide the request now, such as when its session store is unreachable. */
21
+ export declare class ServiceUnavailable extends ServiceUnavailable_base {
22
+ }
23
+ declare const ClientNotFound_base: Schema.Class<ClientNotFound, Schema.TaggedStruct<"ClientNotFound", {
24
+ readonly clientId: Schema.String;
25
+ readonly message: Schema.String;
26
+ }>, import("effect/Cause").YieldableError>;
27
+ export declare class ClientNotFound extends ClientNotFound_base {
28
+ static readonly of: (clientId: string) => ClientNotFound;
29
+ }
30
+ declare const ResourceNotFound_base: Schema.Class<ResourceNotFound, Schema.TaggedStruct<"ResourceNotFound", {
31
+ readonly identifier: Schema.String;
32
+ readonly message: Schema.String;
33
+ }>, import("effect/Cause").YieldableError>;
34
+ export declare class ResourceNotFound extends ResourceNotFound_base {
35
+ static readonly of: (identifier: string) => ResourceNotFound;
36
+ }
37
+ declare const ApiKeyNotFound_base: Schema.Class<ApiKeyNotFound, Schema.TaggedStruct<"ApiKeyNotFound", {
38
+ readonly keyId: Schema.String;
39
+ readonly message: Schema.String;
40
+ }>, import("effect/Cause").YieldableError>;
41
+ export declare class ApiKeyNotFound extends ApiKeyNotFound_base {
42
+ static readonly of: (keyId: string) => ApiKeyNotFound;
43
+ }
44
+ declare const ClientIsAutomatic_base: Schema.Class<ClientIsAutomatic, Schema.TaggedStruct<"ClientIsAutomatic", {
45
+ readonly clientId: Schema.String;
46
+ readonly message: Schema.String;
47
+ }>, import("effect/Cause").YieldableError>;
48
+ /**
49
+ * The client registered itself, through DCR or CIMD: the owner can revoke, block or delete it,
50
+ * but its access and registration are its own, and consent decides what it gets.
51
+ */
52
+ export declare class ClientIsAutomatic extends ClientIsAutomatic_base {
53
+ static readonly of: (clientId: string) => ClientIsAutomatic;
54
+ }
55
+ declare const OwnerExists_base: Schema.Class<OwnerExists, Schema.TaggedStruct<"OwnerExists", {
56
+ readonly message: Schema.String;
57
+ }>, import("effect/Cause").YieldableError>;
58
+ /** First-run setup has already created the owner. */
59
+ export declare class OwnerExists extends OwnerExists_base {
60
+ static readonly of: () => OwnerExists;
61
+ }
62
+ declare const ProviderRefused_base: Schema.Class<ProviderRefused, Schema.TaggedStruct<"ProviderRefused", {
63
+ readonly message: Schema.String;
64
+ }>, import("effect/Cause").YieldableError>;
65
+ /** The provider refused the request's input on a rule of its own, which `message` states. */
66
+ export declare class ProviderRefused extends ProviderRefused_base {
67
+ }
68
+ declare const UnreadableRequest_base: Schema.Class<UnreadableRequest, Schema.TaggedStruct<"UnreadableRequest", {
69
+ readonly message: Schema.String;
70
+ }>, import("effect/Cause").YieldableError>;
71
+ /** A request body the issuer could not read, on a route that is not an action. */
72
+ export declare class UnreadableRequest extends UnreadableRequest_base {
73
+ }
74
+ declare const CurrentOwner_base: Context.ServiceClass<CurrentOwner, "clankerauth/CurrentOwner", Owner>;
75
+ export declare class CurrentOwner extends CurrentOwner_base {
76
+ }
77
+ export interface Owner {
78
+ readonly userId: string;
79
+ readonly email: string;
80
+ /** Whether the caller may change anything; the dashboard session always may. */
81
+ readonly writable: boolean;
82
+ readonly providerHeaders: Effect.Effect<Headers, InternalServerError, Scope.Scope>;
83
+ }
84
+ export declare const ownerSession: (cookie: string) => Authentication.Descriptor<CurrentOwner, Owner, HttpApiSecurity.ApiKey, "clankerauth.OwnerSession", readonly [typeof ServiceUnavailable, typeof InternalServerError]>;
85
+ export declare const OwnerSession: Authentication.Descriptor<CurrentOwner, Owner, HttpApiSecurity.ApiKey, "clankerauth.OwnerSession", readonly [typeof ServiceUnavailable, typeof InternalServerError]>;
86
+ export declare const OwnerToken: Authentication.Descriptor<CurrentOwner, Owner, HttpApiSecurity.Http, "clankerauth.OwnerToken", readonly [typeof ServiceUnavailable, typeof InternalServerError]>;
87
+ export declare const administrationIdentifier: (origin: string) => string;
88
+ export declare const administrationScopes: {
89
+ read: string;
90
+ write: string;
91
+ };
92
+ export declare const MINIMUM_PASSWORD_LENGTH = 8;
93
+ export declare const MAXIMUM_PASSWORD_LENGTH = 128;
94
+ export declare const passwordRule = "Passwords have 8 to 128 characters";
95
+ export declare const SetupInput: Schema.Struct<{
96
+ readonly email: Schema.String;
97
+ readonly password: Schema.String;
98
+ }>;
99
+ export declare const ClientAuthMethod: Schema.Literals<readonly ["none", "client_secret_basic", "client_secret_post"]>;
100
+ export declare const ApplicationType: Schema.Literals<readonly ["web", "native"]>;
101
+ /** The provider's registration fields, passed through unchanged, and the client's `resources`. */
102
+ export declare const ClientInput: Schema.Struct<{
103
+ readonly client_name: Schema.String;
104
+ readonly redirect_uris: Schema.$Array<Schema.String>;
105
+ readonly resources: Schema.$Array<Schema.String>;
106
+ readonly token_endpoint_auth_method: Schema.Literals<readonly ["none", "client_secret_basic", "client_secret_post"]>;
107
+ readonly application_type: Schema.Literals<readonly ["web", "native"]>;
108
+ }>;
109
+ export declare const ClientUpdateInput: Schema.Struct<{
110
+ readonly client_id: Schema.String;
111
+ readonly client_name: Schema.String;
112
+ readonly redirect_uris: Schema.$Array<Schema.String>;
113
+ readonly application_type: Schema.Literals<readonly ["web", "native"]>;
114
+ }>;
115
+ export declare const ClientId: Schema.Struct<{
116
+ readonly client_id: Schema.String;
117
+ }>;
118
+ /** Without a resource, every authorization the client holds. */
119
+ export declare const ClientRevokeInput: Schema.Struct<{
120
+ readonly client_id: Schema.String;
121
+ readonly resource: Schema.optional<Schema.String>;
122
+ }>;
123
+ export declare const ClientBlockInput: Schema.Struct<{
124
+ readonly client_id: Schema.String;
125
+ readonly blocked: Schema.Boolean;
126
+ }>;
127
+ export declare const Client: Schema.Struct<{
128
+ readonly onboarding: Schema.optional<Schema.Literals<readonly ["managed", "dcr", "cimd"]>>;
129
+ readonly blocked: Schema.optional<Schema.Boolean>;
130
+ readonly client_id: Schema.String;
131
+ readonly client_name: Schema.optional<Schema.String>;
132
+ readonly redirect_uris: Schema.$Array<Schema.String>;
133
+ readonly token_endpoint_auth_method: Schema.optional<Schema.String>;
134
+ readonly application_type: Schema.optional<Schema.NullOr<Schema.String>>;
135
+ readonly scope: Schema.optional<Schema.String>;
136
+ readonly grant_types: Schema.optional<Schema.$Array<Schema.String>>;
137
+ }>;
138
+ export declare const ClientCredentials: Schema.Struct<{
139
+ readonly onboarding: Schema.optional<Schema.Literals<readonly ["managed", "dcr", "cimd"]>>;
140
+ readonly blocked: Schema.optional<Schema.Boolean>;
141
+ readonly client_id: Schema.String;
142
+ readonly client_name: Schema.optional<Schema.String>;
143
+ readonly redirect_uris: Schema.$Array<Schema.String>;
144
+ readonly token_endpoint_auth_method: Schema.optional<Schema.String>;
145
+ readonly application_type: Schema.optional<Schema.NullOr<Schema.String>>;
146
+ readonly scope: Schema.optional<Schema.String>;
147
+ readonly grant_types: Schema.optional<Schema.$Array<Schema.String>>;
148
+ readonly client_secret: Schema.optional<Schema.String>;
149
+ readonly client_secret_expires_at: Schema.optional<Schema.Number>;
150
+ }>;
151
+ export declare const Resource: Schema.Struct<{
152
+ readonly identifier: Schema.String;
153
+ readonly name: Schema.String;
154
+ readonly scopes: Schema.$Array<Schema.String>;
155
+ }>;
156
+ export declare const ResourceSummary: Schema.Struct<{
157
+ readonly identifier: Schema.String;
158
+ readonly name: Schema.String;
159
+ readonly scopes: Schema.$Array<Schema.String>;
160
+ readonly builtIn: Schema.Boolean;
161
+ }>;
162
+ export declare const ResourceInput: Schema.Struct<{
163
+ readonly identifier: Schema.String;
164
+ readonly name: Schema.String;
165
+ readonly scopes: Schema.$Array<Schema.String>;
166
+ }>;
167
+ export declare const ResourceId: Schema.Struct<{
168
+ readonly identifier: Schema.String;
169
+ }>;
170
+ /** What `putResource` stored, and whether it created the resource rather than updating it. */
171
+ export declare const PutResourceResult: Schema.Struct<{
172
+ readonly resource: Schema.Struct<{
173
+ readonly identifier: Schema.String;
174
+ readonly name: Schema.String;
175
+ readonly scopes: Schema.$Array<Schema.String>;
176
+ }>;
177
+ readonly created: Schema.Boolean;
178
+ }>;
179
+ export declare const ClientAccess: Schema.Struct<{
180
+ readonly client_id: Schema.String;
181
+ readonly resource: Schema.String;
182
+ }>;
183
+ export declare const ClientAccessInput: Schema.Struct<{
184
+ readonly client_id: Schema.String;
185
+ readonly resources: Schema.$Array<Schema.String>;
186
+ }>;
187
+ export declare const ClientAccessResult: Schema.Struct<{
188
+ readonly clientAccess: Schema.$Array<Schema.Struct<{
189
+ readonly client_id: Schema.String;
190
+ readonly resource: Schema.String;
191
+ }>>;
192
+ }>;
193
+ export declare const KeyPermissions: Schema.$Record<Schema.String, Schema.$Array<Schema.String>>;
194
+ /**
195
+ * What a client holds for one resource: a consent, a live refresh token, or both. A
196
+ * managed client skips consent, so `approvedAt` is null for it and it shows only while it
197
+ * holds a refresh token. `scopes` are the consent's, else the newest token's.
198
+ * `refreshedAt` is when the newest live refresh token was issued, at sign-in or on refresh.
199
+ */
200
+ export declare const Connection: Schema.Struct<{
201
+ readonly client_id: Schema.String;
202
+ readonly resource: Schema.String;
203
+ readonly scopes: Schema.$Array<Schema.String>;
204
+ readonly approvedAt: Schema.NullOr<Schema.DateTimeUtcFromString>;
205
+ readonly refreshedAt: Schema.NullOr<Schema.DateTimeUtcFromString>;
206
+ }>;
207
+ export declare const ApiKeyInput: Schema.Struct<{
208
+ readonly name: Schema.String;
209
+ readonly permissions: Schema.$Record<Schema.String, Schema.$Array<Schema.String>>;
210
+ readonly expiresAt: Schema.NullOr<Schema.DateTimeUtcFromString>;
211
+ }>;
212
+ export declare const ApiKeyId: Schema.Struct<{
213
+ readonly keyId: Schema.String;
214
+ }>;
215
+ export declare const ApiKeyUpdate: Schema.Struct<{
216
+ readonly keyId: Schema.String;
217
+ readonly name: Schema.optional<Schema.String>;
218
+ readonly permissions: Schema.optional<Schema.$Record<Schema.String, Schema.$Array<Schema.String>>>;
219
+ readonly enabled: Schema.optional<Schema.Boolean>;
220
+ }>;
221
+ export declare const ApiKey: Schema.Struct<{
222
+ readonly keyId: Schema.String;
223
+ readonly name: Schema.String;
224
+ readonly enabled: Schema.Boolean;
225
+ readonly permissions: Schema.$Record<Schema.String, Schema.$Array<Schema.String>>;
226
+ readonly expiresAt: Schema.NullOr<Schema.DateTimeUtcFromString>;
227
+ readonly createdAt: Schema.DateTimeUtcFromString;
228
+ }>;
229
+ export declare const IssuerActions: readonly [Action.Action<"setupStatus", Schema.$Record<Schema.String, Schema.Never>, Schema.Struct<{
230
+ readonly required: Schema.Boolean;
231
+ }>, readonly (typeof InternalServerError)[], true, typeof Action.Anyone>, Action.Action<"setupOwner", Schema.Struct<{
232
+ readonly email: Schema.String;
233
+ readonly password: Schema.String;
234
+ }>, Schema.Struct<{
235
+ readonly created: Schema.Boolean;
236
+ }>, readonly (typeof InternalServerError | typeof OwnerExists | typeof ProviderRefused)[], false, typeof Action.Anyone>, Action.Action<"keyList", Schema.Struct<{
237
+ readonly resource: Schema.String;
238
+ }>, Schema.Struct<{
239
+ readonly list: Schema.String;
240
+ }>, readonly (typeof InternalServerError)[], true, typeof Action.Anyone>];
241
+ export declare const ClientListResult: Schema.Struct<{
242
+ readonly clients: Schema.$Array<Schema.Struct<{
243
+ readonly onboarding: Schema.optional<Schema.Literals<readonly ["managed", "dcr", "cimd"]>>;
244
+ readonly blocked: Schema.optional<Schema.Boolean>;
245
+ readonly client_id: Schema.String;
246
+ readonly client_name: Schema.optional<Schema.String>;
247
+ readonly redirect_uris: Schema.$Array<Schema.String>;
248
+ readonly token_endpoint_auth_method: Schema.optional<Schema.String>;
249
+ readonly application_type: Schema.optional<Schema.NullOr<Schema.String>>;
250
+ readonly scope: Schema.optional<Schema.String>;
251
+ readonly grant_types: Schema.optional<Schema.$Array<Schema.String>>;
252
+ }>>;
253
+ readonly resources: Schema.$Array<Schema.Struct<{
254
+ readonly identifier: Schema.String;
255
+ readonly name: Schema.String;
256
+ readonly scopes: Schema.$Array<Schema.String>;
257
+ readonly builtIn: Schema.Boolean;
258
+ }>>;
259
+ readonly clientAccess: Schema.$Array<Schema.Struct<{
260
+ readonly client_id: Schema.String;
261
+ readonly resource: Schema.String;
262
+ }>>;
263
+ readonly connections: Schema.$Array<Schema.Struct<{
264
+ readonly client_id: Schema.String;
265
+ readonly resource: Schema.String;
266
+ readonly scopes: Schema.$Array<Schema.String>;
267
+ readonly approvedAt: Schema.NullOr<Schema.DateTimeUtcFromString>;
268
+ readonly refreshedAt: Schema.NullOr<Schema.DateTimeUtcFromString>;
269
+ }>>;
270
+ readonly email: Schema.String;
271
+ readonly issuer: Schema.String;
272
+ }>;
273
+ export declare const Administration: readonly [Action.Action<"listClients", Schema.$Record<Schema.String, Schema.Never>, Schema.Struct<{
274
+ readonly clients: Schema.$Array<Schema.Struct<{
275
+ readonly onboarding: Schema.optional<Schema.Literals<readonly ["managed", "dcr", "cimd"]>>;
276
+ readonly blocked: Schema.optional<Schema.Boolean>;
277
+ readonly client_id: Schema.String;
278
+ readonly client_name: Schema.optional<Schema.String>;
279
+ readonly redirect_uris: Schema.$Array<Schema.String>;
280
+ readonly token_endpoint_auth_method: Schema.optional<Schema.String>;
281
+ readonly application_type: Schema.optional<Schema.NullOr<Schema.String>>;
282
+ readonly scope: Schema.optional<Schema.String>;
283
+ readonly grant_types: Schema.optional<Schema.$Array<Schema.String>>;
284
+ }>>;
285
+ readonly resources: Schema.$Array<Schema.Struct<{
286
+ readonly identifier: Schema.String;
287
+ readonly name: Schema.String;
288
+ readonly scopes: Schema.$Array<Schema.String>;
289
+ readonly builtIn: Schema.Boolean;
290
+ }>>;
291
+ readonly clientAccess: Schema.$Array<Schema.Struct<{
292
+ readonly client_id: Schema.String;
293
+ readonly resource: Schema.String;
294
+ }>>;
295
+ readonly connections: Schema.$Array<Schema.Struct<{
296
+ readonly client_id: Schema.String;
297
+ readonly resource: Schema.String;
298
+ readonly scopes: Schema.$Array<Schema.String>;
299
+ readonly approvedAt: Schema.NullOr<Schema.DateTimeUtcFromString>;
300
+ readonly refreshedAt: Schema.NullOr<Schema.DateTimeUtcFromString>;
301
+ }>>;
302
+ readonly email: Schema.String;
303
+ readonly issuer: Schema.String;
304
+ }>, readonly (typeof InternalServerError)[], true, typeof CurrentOwner>, Action.Action<"createClient", Schema.Struct<{
305
+ readonly client_name: Schema.String;
306
+ readonly redirect_uris: Schema.$Array<Schema.String>;
307
+ readonly resources: Schema.$Array<Schema.String>;
308
+ readonly token_endpoint_auth_method: Schema.Literals<readonly ["none", "client_secret_basic", "client_secret_post"]>;
309
+ readonly application_type: Schema.Literals<readonly ["web", "native"]>;
310
+ }>, Schema.Struct<{
311
+ readonly onboarding: Schema.optional<Schema.Literals<readonly ["managed", "dcr", "cimd"]>>;
312
+ readonly blocked: Schema.optional<Schema.Boolean>;
313
+ readonly client_id: Schema.String;
314
+ readonly client_name: Schema.optional<Schema.String>;
315
+ readonly redirect_uris: Schema.$Array<Schema.String>;
316
+ readonly token_endpoint_auth_method: Schema.optional<Schema.String>;
317
+ readonly application_type: Schema.optional<Schema.NullOr<Schema.String>>;
318
+ readonly scope: Schema.optional<Schema.String>;
319
+ readonly grant_types: Schema.optional<Schema.$Array<Schema.String>>;
320
+ readonly client_secret: Schema.optional<Schema.String>;
321
+ readonly client_secret_expires_at: Schema.optional<Schema.Number>;
322
+ }>, readonly (typeof InternalServerError | typeof ProviderRefused)[], false, typeof CurrentOwner>, Action.Action<"updateClient", Schema.Struct<{
323
+ readonly client_id: Schema.String;
324
+ readonly client_name: Schema.String;
325
+ readonly redirect_uris: Schema.$Array<Schema.String>;
326
+ readonly application_type: Schema.Literals<readonly ["web", "native"]>;
327
+ }>, Schema.Struct<{
328
+ readonly onboarding: Schema.optional<Schema.Literals<readonly ["managed", "dcr", "cimd"]>>;
329
+ readonly blocked: Schema.optional<Schema.Boolean>;
330
+ readonly client_id: Schema.String;
331
+ readonly client_name: Schema.optional<Schema.String>;
332
+ readonly redirect_uris: Schema.$Array<Schema.String>;
333
+ readonly token_endpoint_auth_method: Schema.optional<Schema.String>;
334
+ readonly application_type: Schema.optional<Schema.NullOr<Schema.String>>;
335
+ readonly scope: Schema.optional<Schema.String>;
336
+ readonly grant_types: Schema.optional<Schema.$Array<Schema.String>>;
337
+ }>, readonly (typeof InternalServerError | typeof ClientNotFound | typeof ClientIsAutomatic | typeof ProviderRefused)[], false, typeof CurrentOwner>, Action.Action<"deleteClient", Schema.Struct<{
338
+ readonly client_id: Schema.String;
339
+ }>, Schema.Struct<{
340
+ readonly deleted: Schema.Boolean;
341
+ }>, readonly (typeof InternalServerError | typeof ClientNotFound)[], false, typeof CurrentOwner>, Action.Action<"revokeClient", Schema.Struct<{
342
+ readonly client_id: Schema.String;
343
+ readonly resource: Schema.optional<Schema.String>;
344
+ }>, Schema.Struct<{
345
+ readonly revoked: Schema.Boolean;
346
+ }>, readonly (typeof InternalServerError | typeof ClientNotFound)[], false, typeof CurrentOwner>, Action.Action<"blockClient", Schema.Struct<{
347
+ readonly client_id: Schema.String;
348
+ readonly blocked: Schema.Boolean;
349
+ }>, Schema.Struct<{
350
+ readonly blocked: Schema.Boolean;
351
+ }>, readonly (typeof InternalServerError | typeof ClientNotFound)[], false, typeof CurrentOwner>, Action.Action<"rotateClientSecret", Schema.Struct<{
352
+ readonly client_id: Schema.String;
353
+ }>, Schema.Struct<{
354
+ readonly onboarding: Schema.optional<Schema.Literals<readonly ["managed", "dcr", "cimd"]>>;
355
+ readonly blocked: Schema.optional<Schema.Boolean>;
356
+ readonly client_id: Schema.String;
357
+ readonly client_name: Schema.optional<Schema.String>;
358
+ readonly redirect_uris: Schema.$Array<Schema.String>;
359
+ readonly token_endpoint_auth_method: Schema.optional<Schema.String>;
360
+ readonly application_type: Schema.optional<Schema.NullOr<Schema.String>>;
361
+ readonly scope: Schema.optional<Schema.String>;
362
+ readonly grant_types: Schema.optional<Schema.$Array<Schema.String>>;
363
+ readonly client_secret: Schema.optional<Schema.String>;
364
+ readonly client_secret_expires_at: Schema.optional<Schema.Number>;
365
+ }>, readonly (typeof InternalServerError | typeof ClientNotFound | typeof ClientIsAutomatic | typeof ProviderRefused)[], false, typeof CurrentOwner>, Action.Action<"setClientAccess", Schema.Struct<{
366
+ readonly client_id: Schema.String;
367
+ readonly resources: Schema.$Array<Schema.String>;
368
+ }>, Schema.Struct<{
369
+ readonly clientAccess: Schema.$Array<Schema.Struct<{
370
+ readonly client_id: Schema.String;
371
+ readonly resource: Schema.String;
372
+ }>>;
373
+ }>, readonly (typeof InternalServerError | typeof ClientNotFound | typeof ClientIsAutomatic)[], false, typeof CurrentOwner>, Action.Action<"getResource", Schema.Struct<{
374
+ readonly identifier: Schema.String;
375
+ }>, Schema.Struct<{
376
+ readonly identifier: Schema.String;
377
+ readonly name: Schema.String;
378
+ readonly scopes: Schema.$Array<Schema.String>;
379
+ readonly builtIn: Schema.Boolean;
380
+ }>, readonly (typeof InternalServerError | typeof ResourceNotFound)[], true, typeof CurrentOwner>, Action.Action<"putResource", Schema.Struct<{
381
+ readonly identifier: Schema.String;
382
+ readonly name: Schema.String;
383
+ readonly scopes: Schema.$Array<Schema.String>;
384
+ }>, Schema.Struct<{
385
+ readonly resource: Schema.Struct<{
386
+ readonly identifier: Schema.String;
387
+ readonly name: Schema.String;
388
+ readonly scopes: Schema.$Array<Schema.String>;
389
+ }>;
390
+ readonly created: Schema.Boolean;
391
+ }>, readonly (typeof InternalServerError | typeof ProviderRefused)[], false, typeof CurrentOwner>, Action.Action<"deleteResource", Schema.Struct<{
392
+ readonly identifier: Schema.String;
393
+ }>, Schema.Struct<{
394
+ readonly deleted: Schema.Boolean;
395
+ }>, readonly (typeof InternalServerError | typeof ResourceNotFound)[], false, typeof CurrentOwner>, Action.Action<"listApiKeys", Schema.$Record<Schema.String, Schema.Never>, Schema.Struct<{
396
+ readonly keys: Schema.$Array<Schema.Struct<{
397
+ readonly keyId: Schema.String;
398
+ readonly name: Schema.String;
399
+ readonly enabled: Schema.Boolean;
400
+ readonly permissions: Schema.$Record<Schema.String, Schema.$Array<Schema.String>>;
401
+ readonly expiresAt: Schema.NullOr<Schema.DateTimeUtcFromString>;
402
+ readonly createdAt: Schema.DateTimeUtcFromString;
403
+ }>>;
404
+ }>, readonly (typeof InternalServerError)[], true, typeof CurrentOwner>, Action.Action<"createApiKey", Schema.Struct<{
405
+ readonly name: Schema.String;
406
+ readonly permissions: Schema.$Record<Schema.String, Schema.$Array<Schema.String>>;
407
+ readonly expiresAt: Schema.NullOr<Schema.DateTimeUtcFromString>;
408
+ }>, Schema.Struct<{
409
+ readonly keyId: Schema.String;
410
+ readonly name: Schema.String;
411
+ readonly enabled: Schema.Boolean;
412
+ readonly permissions: Schema.$Record<Schema.String, Schema.$Array<Schema.String>>;
413
+ readonly expiresAt: Schema.NullOr<Schema.DateTimeUtcFromString>;
414
+ readonly createdAt: Schema.DateTimeUtcFromString;
415
+ readonly key: Schema.String;
416
+ }>, readonly (typeof InternalServerError | typeof ProviderRefused)[], false, typeof CurrentOwner>, Action.Action<"updateApiKey", Schema.Struct<{
417
+ readonly keyId: Schema.String;
418
+ readonly name: Schema.optional<Schema.String>;
419
+ readonly permissions: Schema.optional<Schema.$Record<Schema.String, Schema.$Array<Schema.String>>>;
420
+ readonly enabled: Schema.optional<Schema.Boolean>;
421
+ }>, Schema.Struct<{
422
+ readonly keyId: Schema.String;
423
+ readonly name: Schema.String;
424
+ readonly enabled: Schema.Boolean;
425
+ readonly permissions: Schema.$Record<Schema.String, Schema.$Array<Schema.String>>;
426
+ readonly expiresAt: Schema.NullOr<Schema.DateTimeUtcFromString>;
427
+ readonly createdAt: Schema.DateTimeUtcFromString;
428
+ }>, readonly (typeof InternalServerError | typeof ApiKeyNotFound | typeof ProviderRefused)[], false, typeof CurrentOwner>, Action.Action<"deleteApiKey", Schema.Struct<{
429
+ readonly keyId: Schema.String;
430
+ }>, Schema.Struct<{
431
+ readonly deleted: Schema.Boolean;
432
+ }>, readonly (typeof InternalServerError | typeof ApiKeyNotFound)[], false, typeof CurrentOwner>];
433
+ export declare const errors: (typeof InternalServerError | typeof ServiceUnavailable | typeof ClientNotFound | typeof ResourceNotFound | typeof ApiKeyNotFound | typeof ClientIsAutomatic | typeof OwnerExists | typeof ProviderRefused | typeof UnreadableRequest)[];
434
+ export type IssuerError = (typeof errors)[number]["Type"];
435
+ export declare const binding: (authentication: typeof OwnerSession) => ActionHttp.Binding<readonly [Action.Action<"listClients", Schema.$Record<Schema.String, Schema.Never>, Schema.Struct<{
436
+ readonly clients: Schema.$Array<Schema.Struct<{
437
+ readonly onboarding: Schema.optional<Schema.Literals<readonly ["managed", "dcr", "cimd"]>>;
438
+ readonly blocked: Schema.optional<Schema.Boolean>;
439
+ readonly client_id: Schema.String;
440
+ readonly client_name: Schema.optional<Schema.String>;
441
+ readonly redirect_uris: Schema.$Array<Schema.String>;
442
+ readonly token_endpoint_auth_method: Schema.optional<Schema.String>;
443
+ readonly application_type: Schema.optional<Schema.NullOr<Schema.String>>;
444
+ readonly scope: Schema.optional<Schema.String>;
445
+ readonly grant_types: Schema.optional<Schema.$Array<Schema.String>>;
446
+ }>>;
447
+ readonly resources: Schema.$Array<Schema.Struct<{
448
+ readonly identifier: Schema.String;
449
+ readonly name: Schema.String;
450
+ readonly scopes: Schema.$Array<Schema.String>;
451
+ readonly builtIn: Schema.Boolean;
452
+ }>>;
453
+ readonly clientAccess: Schema.$Array<Schema.Struct<{
454
+ readonly client_id: Schema.String;
455
+ readonly resource: Schema.String;
456
+ }>>;
457
+ readonly connections: Schema.$Array<Schema.Struct<{
458
+ readonly client_id: Schema.String;
459
+ readonly resource: Schema.String;
460
+ readonly scopes: Schema.$Array<Schema.String>;
461
+ readonly approvedAt: Schema.NullOr<Schema.DateTimeUtcFromString>;
462
+ readonly refreshedAt: Schema.NullOr<Schema.DateTimeUtcFromString>;
463
+ }>>;
464
+ readonly email: Schema.String;
465
+ readonly issuer: Schema.String;
466
+ }>, readonly (typeof InternalServerError)[], true, typeof CurrentOwner>, Action.Action<"createClient", Schema.Struct<{
467
+ readonly client_name: Schema.String;
468
+ readonly redirect_uris: Schema.$Array<Schema.String>;
469
+ readonly resources: Schema.$Array<Schema.String>;
470
+ readonly token_endpoint_auth_method: Schema.Literals<readonly ["none", "client_secret_basic", "client_secret_post"]>;
471
+ readonly application_type: Schema.Literals<readonly ["web", "native"]>;
472
+ }>, Schema.Struct<{
473
+ readonly onboarding: Schema.optional<Schema.Literals<readonly ["managed", "dcr", "cimd"]>>;
474
+ readonly blocked: Schema.optional<Schema.Boolean>;
475
+ readonly client_id: Schema.String;
476
+ readonly client_name: Schema.optional<Schema.String>;
477
+ readonly redirect_uris: Schema.$Array<Schema.String>;
478
+ readonly token_endpoint_auth_method: Schema.optional<Schema.String>;
479
+ readonly application_type: Schema.optional<Schema.NullOr<Schema.String>>;
480
+ readonly scope: Schema.optional<Schema.String>;
481
+ readonly grant_types: Schema.optional<Schema.$Array<Schema.String>>;
482
+ readonly client_secret: Schema.optional<Schema.String>;
483
+ readonly client_secret_expires_at: Schema.optional<Schema.Number>;
484
+ }>, readonly (typeof InternalServerError | typeof ProviderRefused)[], false, typeof CurrentOwner>, Action.Action<"updateClient", Schema.Struct<{
485
+ readonly client_id: Schema.String;
486
+ readonly client_name: Schema.String;
487
+ readonly redirect_uris: Schema.$Array<Schema.String>;
488
+ readonly application_type: Schema.Literals<readonly ["web", "native"]>;
489
+ }>, Schema.Struct<{
490
+ readonly onboarding: Schema.optional<Schema.Literals<readonly ["managed", "dcr", "cimd"]>>;
491
+ readonly blocked: Schema.optional<Schema.Boolean>;
492
+ readonly client_id: Schema.String;
493
+ readonly client_name: Schema.optional<Schema.String>;
494
+ readonly redirect_uris: Schema.$Array<Schema.String>;
495
+ readonly token_endpoint_auth_method: Schema.optional<Schema.String>;
496
+ readonly application_type: Schema.optional<Schema.NullOr<Schema.String>>;
497
+ readonly scope: Schema.optional<Schema.String>;
498
+ readonly grant_types: Schema.optional<Schema.$Array<Schema.String>>;
499
+ }>, readonly (typeof InternalServerError | typeof ClientNotFound | typeof ClientIsAutomatic | typeof ProviderRefused)[], false, typeof CurrentOwner>, Action.Action<"deleteClient", Schema.Struct<{
500
+ readonly client_id: Schema.String;
501
+ }>, Schema.Struct<{
502
+ readonly deleted: Schema.Boolean;
503
+ }>, readonly (typeof InternalServerError | typeof ClientNotFound)[], false, typeof CurrentOwner>, Action.Action<"revokeClient", Schema.Struct<{
504
+ readonly client_id: Schema.String;
505
+ readonly resource: Schema.optional<Schema.String>;
506
+ }>, Schema.Struct<{
507
+ readonly revoked: Schema.Boolean;
508
+ }>, readonly (typeof InternalServerError | typeof ClientNotFound)[], false, typeof CurrentOwner>, Action.Action<"blockClient", Schema.Struct<{
509
+ readonly client_id: Schema.String;
510
+ readonly blocked: Schema.Boolean;
511
+ }>, Schema.Struct<{
512
+ readonly blocked: Schema.Boolean;
513
+ }>, readonly (typeof InternalServerError | typeof ClientNotFound)[], false, typeof CurrentOwner>, Action.Action<"rotateClientSecret", Schema.Struct<{
514
+ readonly client_id: Schema.String;
515
+ }>, Schema.Struct<{
516
+ readonly onboarding: Schema.optional<Schema.Literals<readonly ["managed", "dcr", "cimd"]>>;
517
+ readonly blocked: Schema.optional<Schema.Boolean>;
518
+ readonly client_id: Schema.String;
519
+ readonly client_name: Schema.optional<Schema.String>;
520
+ readonly redirect_uris: Schema.$Array<Schema.String>;
521
+ readonly token_endpoint_auth_method: Schema.optional<Schema.String>;
522
+ readonly application_type: Schema.optional<Schema.NullOr<Schema.String>>;
523
+ readonly scope: Schema.optional<Schema.String>;
524
+ readonly grant_types: Schema.optional<Schema.$Array<Schema.String>>;
525
+ readonly client_secret: Schema.optional<Schema.String>;
526
+ readonly client_secret_expires_at: Schema.optional<Schema.Number>;
527
+ }>, readonly (typeof InternalServerError | typeof ClientNotFound | typeof ClientIsAutomatic | typeof ProviderRefused)[], false, typeof CurrentOwner>, Action.Action<"setClientAccess", Schema.Struct<{
528
+ readonly client_id: Schema.String;
529
+ readonly resources: Schema.$Array<Schema.String>;
530
+ }>, Schema.Struct<{
531
+ readonly clientAccess: Schema.$Array<Schema.Struct<{
532
+ readonly client_id: Schema.String;
533
+ readonly resource: Schema.String;
534
+ }>>;
535
+ }>, readonly (typeof InternalServerError | typeof ClientNotFound | typeof ClientIsAutomatic)[], false, typeof CurrentOwner>, Action.Action<"getResource", Schema.Struct<{
536
+ readonly identifier: Schema.String;
537
+ }>, Schema.Struct<{
538
+ readonly identifier: Schema.String;
539
+ readonly name: Schema.String;
540
+ readonly scopes: Schema.$Array<Schema.String>;
541
+ readonly builtIn: Schema.Boolean;
542
+ }>, readonly (typeof InternalServerError | typeof ResourceNotFound)[], true, typeof CurrentOwner>, Action.Action<"putResource", Schema.Struct<{
543
+ readonly identifier: Schema.String;
544
+ readonly name: Schema.String;
545
+ readonly scopes: Schema.$Array<Schema.String>;
546
+ }>, Schema.Struct<{
547
+ readonly resource: Schema.Struct<{
548
+ readonly identifier: Schema.String;
549
+ readonly name: Schema.String;
550
+ readonly scopes: Schema.$Array<Schema.String>;
551
+ }>;
552
+ readonly created: Schema.Boolean;
553
+ }>, readonly (typeof InternalServerError | typeof ProviderRefused)[], false, typeof CurrentOwner>, Action.Action<"deleteResource", Schema.Struct<{
554
+ readonly identifier: Schema.String;
555
+ }>, Schema.Struct<{
556
+ readonly deleted: Schema.Boolean;
557
+ }>, readonly (typeof InternalServerError | typeof ResourceNotFound)[], false, typeof CurrentOwner>, Action.Action<"listApiKeys", Schema.$Record<Schema.String, Schema.Never>, Schema.Struct<{
558
+ readonly keys: Schema.$Array<Schema.Struct<{
559
+ readonly keyId: Schema.String;
560
+ readonly name: Schema.String;
561
+ readonly enabled: Schema.Boolean;
562
+ readonly permissions: Schema.$Record<Schema.String, Schema.$Array<Schema.String>>;
563
+ readonly expiresAt: Schema.NullOr<Schema.DateTimeUtcFromString>;
564
+ readonly createdAt: Schema.DateTimeUtcFromString;
565
+ }>>;
566
+ }>, readonly (typeof InternalServerError)[], true, typeof CurrentOwner>, Action.Action<"createApiKey", Schema.Struct<{
567
+ readonly name: Schema.String;
568
+ readonly permissions: Schema.$Record<Schema.String, Schema.$Array<Schema.String>>;
569
+ readonly expiresAt: Schema.NullOr<Schema.DateTimeUtcFromString>;
570
+ }>, Schema.Struct<{
571
+ readonly keyId: Schema.String;
572
+ readonly name: Schema.String;
573
+ readonly enabled: Schema.Boolean;
574
+ readonly permissions: Schema.$Record<Schema.String, Schema.$Array<Schema.String>>;
575
+ readonly expiresAt: Schema.NullOr<Schema.DateTimeUtcFromString>;
576
+ readonly createdAt: Schema.DateTimeUtcFromString;
577
+ readonly key: Schema.String;
578
+ }>, readonly (typeof InternalServerError | typeof ProviderRefused)[], false, typeof CurrentOwner>, Action.Action<"updateApiKey", Schema.Struct<{
579
+ readonly keyId: Schema.String;
580
+ readonly name: Schema.optional<Schema.String>;
581
+ readonly permissions: Schema.optional<Schema.$Record<Schema.String, Schema.$Array<Schema.String>>>;
582
+ readonly enabled: Schema.optional<Schema.Boolean>;
583
+ }>, Schema.Struct<{
584
+ readonly keyId: Schema.String;
585
+ readonly name: Schema.String;
586
+ readonly enabled: Schema.Boolean;
587
+ readonly permissions: Schema.$Record<Schema.String, Schema.$Array<Schema.String>>;
588
+ readonly expiresAt: Schema.NullOr<Schema.DateTimeUtcFromString>;
589
+ readonly createdAt: Schema.DateTimeUtcFromString;
590
+ }>, readonly (typeof InternalServerError | typeof ApiKeyNotFound | typeof ProviderRefused)[], false, typeof CurrentOwner>, Action.Action<"deleteApiKey", Schema.Struct<{
591
+ readonly keyId: Schema.String;
592
+ }>, Schema.Struct<{
593
+ readonly deleted: Schema.Boolean;
594
+ }>, readonly (typeof InternalServerError | typeof ApiKeyNotFound)[], false, typeof CurrentOwner>, Action.Action<"setupStatus", Schema.$Record<Schema.String, Schema.Never>, Schema.Struct<{
595
+ readonly required: Schema.Boolean;
596
+ }>, readonly (typeof InternalServerError)[], true, typeof Action.Anyone>, Action.Action<"setupOwner", Schema.Struct<{
597
+ readonly email: Schema.String;
598
+ readonly password: Schema.String;
599
+ }>, Schema.Struct<{
600
+ readonly created: Schema.Boolean;
601
+ }>, readonly (typeof InternalServerError | typeof OwnerExists | typeof ProviderRefused)[], false, typeof Action.Anyone>, Action.Action<"keyList", Schema.Struct<{
602
+ readonly resource: Schema.String;
603
+ }>, Schema.Struct<{
604
+ readonly list: Schema.String;
605
+ }>, readonly (typeof InternalServerError)[], true, typeof Action.Anyone>], [], Authentication.Descriptor<CurrentOwner, Owner, HttpApiSecurity.ApiKey, "clankerauth.OwnerSession", readonly [typeof ServiceUnavailable, typeof InternalServerError]>>;
606
+ export declare const Http: ActionHttp.Binding<readonly [Action.Action<"listClients", Schema.$Record<Schema.String, Schema.Never>, Schema.Struct<{
607
+ readonly clients: Schema.$Array<Schema.Struct<{
608
+ readonly onboarding: Schema.optional<Schema.Literals<readonly ["managed", "dcr", "cimd"]>>;
609
+ readonly blocked: Schema.optional<Schema.Boolean>;
610
+ readonly client_id: Schema.String;
611
+ readonly client_name: Schema.optional<Schema.String>;
612
+ readonly redirect_uris: Schema.$Array<Schema.String>;
613
+ readonly token_endpoint_auth_method: Schema.optional<Schema.String>;
614
+ readonly application_type: Schema.optional<Schema.NullOr<Schema.String>>;
615
+ readonly scope: Schema.optional<Schema.String>;
616
+ readonly grant_types: Schema.optional<Schema.$Array<Schema.String>>;
617
+ }>>;
618
+ readonly resources: Schema.$Array<Schema.Struct<{
619
+ readonly identifier: Schema.String;
620
+ readonly name: Schema.String;
621
+ readonly scopes: Schema.$Array<Schema.String>;
622
+ readonly builtIn: Schema.Boolean;
623
+ }>>;
624
+ readonly clientAccess: Schema.$Array<Schema.Struct<{
625
+ readonly client_id: Schema.String;
626
+ readonly resource: Schema.String;
627
+ }>>;
628
+ readonly connections: Schema.$Array<Schema.Struct<{
629
+ readonly client_id: Schema.String;
630
+ readonly resource: Schema.String;
631
+ readonly scopes: Schema.$Array<Schema.String>;
632
+ readonly approvedAt: Schema.NullOr<Schema.DateTimeUtcFromString>;
633
+ readonly refreshedAt: Schema.NullOr<Schema.DateTimeUtcFromString>;
634
+ }>>;
635
+ readonly email: Schema.String;
636
+ readonly issuer: Schema.String;
637
+ }>, readonly (typeof InternalServerError)[], true, typeof CurrentOwner>, Action.Action<"createClient", Schema.Struct<{
638
+ readonly client_name: Schema.String;
639
+ readonly redirect_uris: Schema.$Array<Schema.String>;
640
+ readonly resources: Schema.$Array<Schema.String>;
641
+ readonly token_endpoint_auth_method: Schema.Literals<readonly ["none", "client_secret_basic", "client_secret_post"]>;
642
+ readonly application_type: Schema.Literals<readonly ["web", "native"]>;
643
+ }>, Schema.Struct<{
644
+ readonly onboarding: Schema.optional<Schema.Literals<readonly ["managed", "dcr", "cimd"]>>;
645
+ readonly blocked: Schema.optional<Schema.Boolean>;
646
+ readonly client_id: Schema.String;
647
+ readonly client_name: Schema.optional<Schema.String>;
648
+ readonly redirect_uris: Schema.$Array<Schema.String>;
649
+ readonly token_endpoint_auth_method: Schema.optional<Schema.String>;
650
+ readonly application_type: Schema.optional<Schema.NullOr<Schema.String>>;
651
+ readonly scope: Schema.optional<Schema.String>;
652
+ readonly grant_types: Schema.optional<Schema.$Array<Schema.String>>;
653
+ readonly client_secret: Schema.optional<Schema.String>;
654
+ readonly client_secret_expires_at: Schema.optional<Schema.Number>;
655
+ }>, readonly (typeof InternalServerError | typeof ProviderRefused)[], false, typeof CurrentOwner>, Action.Action<"updateClient", Schema.Struct<{
656
+ readonly client_id: Schema.String;
657
+ readonly client_name: Schema.String;
658
+ readonly redirect_uris: Schema.$Array<Schema.String>;
659
+ readonly application_type: Schema.Literals<readonly ["web", "native"]>;
660
+ }>, Schema.Struct<{
661
+ readonly onboarding: Schema.optional<Schema.Literals<readonly ["managed", "dcr", "cimd"]>>;
662
+ readonly blocked: Schema.optional<Schema.Boolean>;
663
+ readonly client_id: Schema.String;
664
+ readonly client_name: Schema.optional<Schema.String>;
665
+ readonly redirect_uris: Schema.$Array<Schema.String>;
666
+ readonly token_endpoint_auth_method: Schema.optional<Schema.String>;
667
+ readonly application_type: Schema.optional<Schema.NullOr<Schema.String>>;
668
+ readonly scope: Schema.optional<Schema.String>;
669
+ readonly grant_types: Schema.optional<Schema.$Array<Schema.String>>;
670
+ }>, readonly (typeof InternalServerError | typeof ClientNotFound | typeof ClientIsAutomatic | typeof ProviderRefused)[], false, typeof CurrentOwner>, Action.Action<"deleteClient", Schema.Struct<{
671
+ readonly client_id: Schema.String;
672
+ }>, Schema.Struct<{
673
+ readonly deleted: Schema.Boolean;
674
+ }>, readonly (typeof InternalServerError | typeof ClientNotFound)[], false, typeof CurrentOwner>, Action.Action<"revokeClient", Schema.Struct<{
675
+ readonly client_id: Schema.String;
676
+ readonly resource: Schema.optional<Schema.String>;
677
+ }>, Schema.Struct<{
678
+ readonly revoked: Schema.Boolean;
679
+ }>, readonly (typeof InternalServerError | typeof ClientNotFound)[], false, typeof CurrentOwner>, Action.Action<"blockClient", Schema.Struct<{
680
+ readonly client_id: Schema.String;
681
+ readonly blocked: Schema.Boolean;
682
+ }>, Schema.Struct<{
683
+ readonly blocked: Schema.Boolean;
684
+ }>, readonly (typeof InternalServerError | typeof ClientNotFound)[], false, typeof CurrentOwner>, Action.Action<"rotateClientSecret", Schema.Struct<{
685
+ readonly client_id: Schema.String;
686
+ }>, Schema.Struct<{
687
+ readonly onboarding: Schema.optional<Schema.Literals<readonly ["managed", "dcr", "cimd"]>>;
688
+ readonly blocked: Schema.optional<Schema.Boolean>;
689
+ readonly client_id: Schema.String;
690
+ readonly client_name: Schema.optional<Schema.String>;
691
+ readonly redirect_uris: Schema.$Array<Schema.String>;
692
+ readonly token_endpoint_auth_method: Schema.optional<Schema.String>;
693
+ readonly application_type: Schema.optional<Schema.NullOr<Schema.String>>;
694
+ readonly scope: Schema.optional<Schema.String>;
695
+ readonly grant_types: Schema.optional<Schema.$Array<Schema.String>>;
696
+ readonly client_secret: Schema.optional<Schema.String>;
697
+ readonly client_secret_expires_at: Schema.optional<Schema.Number>;
698
+ }>, readonly (typeof InternalServerError | typeof ClientNotFound | typeof ClientIsAutomatic | typeof ProviderRefused)[], false, typeof CurrentOwner>, Action.Action<"setClientAccess", Schema.Struct<{
699
+ readonly client_id: Schema.String;
700
+ readonly resources: Schema.$Array<Schema.String>;
701
+ }>, Schema.Struct<{
702
+ readonly clientAccess: Schema.$Array<Schema.Struct<{
703
+ readonly client_id: Schema.String;
704
+ readonly resource: Schema.String;
705
+ }>>;
706
+ }>, readonly (typeof InternalServerError | typeof ClientNotFound | typeof ClientIsAutomatic)[], false, typeof CurrentOwner>, Action.Action<"getResource", Schema.Struct<{
707
+ readonly identifier: Schema.String;
708
+ }>, Schema.Struct<{
709
+ readonly identifier: Schema.String;
710
+ readonly name: Schema.String;
711
+ readonly scopes: Schema.$Array<Schema.String>;
712
+ readonly builtIn: Schema.Boolean;
713
+ }>, readonly (typeof InternalServerError | typeof ResourceNotFound)[], true, typeof CurrentOwner>, Action.Action<"putResource", Schema.Struct<{
714
+ readonly identifier: Schema.String;
715
+ readonly name: Schema.String;
716
+ readonly scopes: Schema.$Array<Schema.String>;
717
+ }>, Schema.Struct<{
718
+ readonly resource: Schema.Struct<{
719
+ readonly identifier: Schema.String;
720
+ readonly name: Schema.String;
721
+ readonly scopes: Schema.$Array<Schema.String>;
722
+ }>;
723
+ readonly created: Schema.Boolean;
724
+ }>, readonly (typeof InternalServerError | typeof ProviderRefused)[], false, typeof CurrentOwner>, Action.Action<"deleteResource", Schema.Struct<{
725
+ readonly identifier: Schema.String;
726
+ }>, Schema.Struct<{
727
+ readonly deleted: Schema.Boolean;
728
+ }>, readonly (typeof InternalServerError | typeof ResourceNotFound)[], false, typeof CurrentOwner>, Action.Action<"listApiKeys", Schema.$Record<Schema.String, Schema.Never>, Schema.Struct<{
729
+ readonly keys: Schema.$Array<Schema.Struct<{
730
+ readonly keyId: Schema.String;
731
+ readonly name: Schema.String;
732
+ readonly enabled: Schema.Boolean;
733
+ readonly permissions: Schema.$Record<Schema.String, Schema.$Array<Schema.String>>;
734
+ readonly expiresAt: Schema.NullOr<Schema.DateTimeUtcFromString>;
735
+ readonly createdAt: Schema.DateTimeUtcFromString;
736
+ }>>;
737
+ }>, readonly (typeof InternalServerError)[], true, typeof CurrentOwner>, Action.Action<"createApiKey", Schema.Struct<{
738
+ readonly name: Schema.String;
739
+ readonly permissions: Schema.$Record<Schema.String, Schema.$Array<Schema.String>>;
740
+ readonly expiresAt: Schema.NullOr<Schema.DateTimeUtcFromString>;
741
+ }>, Schema.Struct<{
742
+ readonly keyId: Schema.String;
743
+ readonly name: Schema.String;
744
+ readonly enabled: Schema.Boolean;
745
+ readonly permissions: Schema.$Record<Schema.String, Schema.$Array<Schema.String>>;
746
+ readonly expiresAt: Schema.NullOr<Schema.DateTimeUtcFromString>;
747
+ readonly createdAt: Schema.DateTimeUtcFromString;
748
+ readonly key: Schema.String;
749
+ }>, readonly (typeof InternalServerError | typeof ProviderRefused)[], false, typeof CurrentOwner>, Action.Action<"updateApiKey", Schema.Struct<{
750
+ readonly keyId: Schema.String;
751
+ readonly name: Schema.optional<Schema.String>;
752
+ readonly permissions: Schema.optional<Schema.$Record<Schema.String, Schema.$Array<Schema.String>>>;
753
+ readonly enabled: Schema.optional<Schema.Boolean>;
754
+ }>, Schema.Struct<{
755
+ readonly keyId: Schema.String;
756
+ readonly name: Schema.String;
757
+ readonly enabled: Schema.Boolean;
758
+ readonly permissions: Schema.$Record<Schema.String, Schema.$Array<Schema.String>>;
759
+ readonly expiresAt: Schema.NullOr<Schema.DateTimeUtcFromString>;
760
+ readonly createdAt: Schema.DateTimeUtcFromString;
761
+ }>, readonly (typeof InternalServerError | typeof ApiKeyNotFound | typeof ProviderRefused)[], false, typeof CurrentOwner>, Action.Action<"deleteApiKey", Schema.Struct<{
762
+ readonly keyId: Schema.String;
763
+ }>, Schema.Struct<{
764
+ readonly deleted: Schema.Boolean;
765
+ }>, readonly (typeof InternalServerError | typeof ApiKeyNotFound)[], false, typeof CurrentOwner>, Action.Action<"setupStatus", Schema.$Record<Schema.String, Schema.Never>, Schema.Struct<{
766
+ readonly required: Schema.Boolean;
767
+ }>, readonly (typeof InternalServerError)[], true, typeof Action.Anyone>, Action.Action<"setupOwner", Schema.Struct<{
768
+ readonly email: Schema.String;
769
+ readonly password: Schema.String;
770
+ }>, Schema.Struct<{
771
+ readonly created: Schema.Boolean;
772
+ }>, readonly (typeof InternalServerError | typeof OwnerExists | typeof ProviderRefused)[], false, typeof Action.Anyone>, Action.Action<"keyList", Schema.Struct<{
773
+ readonly resource: Schema.String;
774
+ }>, Schema.Struct<{
775
+ readonly list: Schema.String;
776
+ }>, readonly (typeof InternalServerError)[], true, typeof Action.Anyone>], [], Authentication.Descriptor<CurrentOwner, Owner, HttpApiSecurity.ApiKey, "clankerauth.OwnerSession", readonly [typeof ServiceUnavailable, typeof InternalServerError]>>;
777
+ export declare const OwnerHttp: ActionHttp.Binding<readonly [Action.Action<"listClients", Schema.$Record<Schema.String, Schema.Never>, Schema.Struct<{
778
+ readonly clients: Schema.$Array<Schema.Struct<{
779
+ readonly onboarding: Schema.optional<Schema.Literals<readonly ["managed", "dcr", "cimd"]>>;
780
+ readonly blocked: Schema.optional<Schema.Boolean>;
781
+ readonly client_id: Schema.String;
782
+ readonly client_name: Schema.optional<Schema.String>;
783
+ readonly redirect_uris: Schema.$Array<Schema.String>;
784
+ readonly token_endpoint_auth_method: Schema.optional<Schema.String>;
785
+ readonly application_type: Schema.optional<Schema.NullOr<Schema.String>>;
786
+ readonly scope: Schema.optional<Schema.String>;
787
+ readonly grant_types: Schema.optional<Schema.$Array<Schema.String>>;
788
+ }>>;
789
+ readonly resources: Schema.$Array<Schema.Struct<{
790
+ readonly identifier: Schema.String;
791
+ readonly name: Schema.String;
792
+ readonly scopes: Schema.$Array<Schema.String>;
793
+ readonly builtIn: Schema.Boolean;
794
+ }>>;
795
+ readonly clientAccess: Schema.$Array<Schema.Struct<{
796
+ readonly client_id: Schema.String;
797
+ readonly resource: Schema.String;
798
+ }>>;
799
+ readonly connections: Schema.$Array<Schema.Struct<{
800
+ readonly client_id: Schema.String;
801
+ readonly resource: Schema.String;
802
+ readonly scopes: Schema.$Array<Schema.String>;
803
+ readonly approvedAt: Schema.NullOr<Schema.DateTimeUtcFromString>;
804
+ readonly refreshedAt: Schema.NullOr<Schema.DateTimeUtcFromString>;
805
+ }>>;
806
+ readonly email: Schema.String;
807
+ readonly issuer: Schema.String;
808
+ }>, readonly (typeof InternalServerError)[], true, typeof CurrentOwner>, Action.Action<"createClient", Schema.Struct<{
809
+ readonly client_name: Schema.String;
810
+ readonly redirect_uris: Schema.$Array<Schema.String>;
811
+ readonly resources: Schema.$Array<Schema.String>;
812
+ readonly token_endpoint_auth_method: Schema.Literals<readonly ["none", "client_secret_basic", "client_secret_post"]>;
813
+ readonly application_type: Schema.Literals<readonly ["web", "native"]>;
814
+ }>, Schema.Struct<{
815
+ readonly onboarding: Schema.optional<Schema.Literals<readonly ["managed", "dcr", "cimd"]>>;
816
+ readonly blocked: Schema.optional<Schema.Boolean>;
817
+ readonly client_id: Schema.String;
818
+ readonly client_name: Schema.optional<Schema.String>;
819
+ readonly redirect_uris: Schema.$Array<Schema.String>;
820
+ readonly token_endpoint_auth_method: Schema.optional<Schema.String>;
821
+ readonly application_type: Schema.optional<Schema.NullOr<Schema.String>>;
822
+ readonly scope: Schema.optional<Schema.String>;
823
+ readonly grant_types: Schema.optional<Schema.$Array<Schema.String>>;
824
+ readonly client_secret: Schema.optional<Schema.String>;
825
+ readonly client_secret_expires_at: Schema.optional<Schema.Number>;
826
+ }>, readonly (typeof InternalServerError | typeof ProviderRefused)[], false, typeof CurrentOwner>, Action.Action<"updateClient", Schema.Struct<{
827
+ readonly client_id: Schema.String;
828
+ readonly client_name: Schema.String;
829
+ readonly redirect_uris: Schema.$Array<Schema.String>;
830
+ readonly application_type: Schema.Literals<readonly ["web", "native"]>;
831
+ }>, Schema.Struct<{
832
+ readonly onboarding: Schema.optional<Schema.Literals<readonly ["managed", "dcr", "cimd"]>>;
833
+ readonly blocked: Schema.optional<Schema.Boolean>;
834
+ readonly client_id: Schema.String;
835
+ readonly client_name: Schema.optional<Schema.String>;
836
+ readonly redirect_uris: Schema.$Array<Schema.String>;
837
+ readonly token_endpoint_auth_method: Schema.optional<Schema.String>;
838
+ readonly application_type: Schema.optional<Schema.NullOr<Schema.String>>;
839
+ readonly scope: Schema.optional<Schema.String>;
840
+ readonly grant_types: Schema.optional<Schema.$Array<Schema.String>>;
841
+ }>, readonly (typeof InternalServerError | typeof ClientNotFound | typeof ClientIsAutomatic | typeof ProviderRefused)[], false, typeof CurrentOwner>, Action.Action<"deleteClient", Schema.Struct<{
842
+ readonly client_id: Schema.String;
843
+ }>, Schema.Struct<{
844
+ readonly deleted: Schema.Boolean;
845
+ }>, readonly (typeof InternalServerError | typeof ClientNotFound)[], false, typeof CurrentOwner>, Action.Action<"revokeClient", Schema.Struct<{
846
+ readonly client_id: Schema.String;
847
+ readonly resource: Schema.optional<Schema.String>;
848
+ }>, Schema.Struct<{
849
+ readonly revoked: Schema.Boolean;
850
+ }>, readonly (typeof InternalServerError | typeof ClientNotFound)[], false, typeof CurrentOwner>, Action.Action<"blockClient", Schema.Struct<{
851
+ readonly client_id: Schema.String;
852
+ readonly blocked: Schema.Boolean;
853
+ }>, Schema.Struct<{
854
+ readonly blocked: Schema.Boolean;
855
+ }>, readonly (typeof InternalServerError | typeof ClientNotFound)[], false, typeof CurrentOwner>, Action.Action<"rotateClientSecret", Schema.Struct<{
856
+ readonly client_id: Schema.String;
857
+ }>, Schema.Struct<{
858
+ readonly onboarding: Schema.optional<Schema.Literals<readonly ["managed", "dcr", "cimd"]>>;
859
+ readonly blocked: Schema.optional<Schema.Boolean>;
860
+ readonly client_id: Schema.String;
861
+ readonly client_name: Schema.optional<Schema.String>;
862
+ readonly redirect_uris: Schema.$Array<Schema.String>;
863
+ readonly token_endpoint_auth_method: Schema.optional<Schema.String>;
864
+ readonly application_type: Schema.optional<Schema.NullOr<Schema.String>>;
865
+ readonly scope: Schema.optional<Schema.String>;
866
+ readonly grant_types: Schema.optional<Schema.$Array<Schema.String>>;
867
+ readonly client_secret: Schema.optional<Schema.String>;
868
+ readonly client_secret_expires_at: Schema.optional<Schema.Number>;
869
+ }>, readonly (typeof InternalServerError | typeof ClientNotFound | typeof ClientIsAutomatic | typeof ProviderRefused)[], false, typeof CurrentOwner>, Action.Action<"setClientAccess", Schema.Struct<{
870
+ readonly client_id: Schema.String;
871
+ readonly resources: Schema.$Array<Schema.String>;
872
+ }>, Schema.Struct<{
873
+ readonly clientAccess: Schema.$Array<Schema.Struct<{
874
+ readonly client_id: Schema.String;
875
+ readonly resource: Schema.String;
876
+ }>>;
877
+ }>, readonly (typeof InternalServerError | typeof ClientNotFound | typeof ClientIsAutomatic)[], false, typeof CurrentOwner>, Action.Action<"getResource", Schema.Struct<{
878
+ readonly identifier: Schema.String;
879
+ }>, Schema.Struct<{
880
+ readonly identifier: Schema.String;
881
+ readonly name: Schema.String;
882
+ readonly scopes: Schema.$Array<Schema.String>;
883
+ readonly builtIn: Schema.Boolean;
884
+ }>, readonly (typeof InternalServerError | typeof ResourceNotFound)[], true, typeof CurrentOwner>, Action.Action<"putResource", Schema.Struct<{
885
+ readonly identifier: Schema.String;
886
+ readonly name: Schema.String;
887
+ readonly scopes: Schema.$Array<Schema.String>;
888
+ }>, Schema.Struct<{
889
+ readonly resource: Schema.Struct<{
890
+ readonly identifier: Schema.String;
891
+ readonly name: Schema.String;
892
+ readonly scopes: Schema.$Array<Schema.String>;
893
+ }>;
894
+ readonly created: Schema.Boolean;
895
+ }>, readonly (typeof InternalServerError | typeof ProviderRefused)[], false, typeof CurrentOwner>, Action.Action<"deleteResource", Schema.Struct<{
896
+ readonly identifier: Schema.String;
897
+ }>, Schema.Struct<{
898
+ readonly deleted: Schema.Boolean;
899
+ }>, readonly (typeof InternalServerError | typeof ResourceNotFound)[], false, typeof CurrentOwner>, Action.Action<"listApiKeys", Schema.$Record<Schema.String, Schema.Never>, Schema.Struct<{
900
+ readonly keys: Schema.$Array<Schema.Struct<{
901
+ readonly keyId: Schema.String;
902
+ readonly name: Schema.String;
903
+ readonly enabled: Schema.Boolean;
904
+ readonly permissions: Schema.$Record<Schema.String, Schema.$Array<Schema.String>>;
905
+ readonly expiresAt: Schema.NullOr<Schema.DateTimeUtcFromString>;
906
+ readonly createdAt: Schema.DateTimeUtcFromString;
907
+ }>>;
908
+ }>, readonly (typeof InternalServerError)[], true, typeof CurrentOwner>, Action.Action<"createApiKey", Schema.Struct<{
909
+ readonly name: Schema.String;
910
+ readonly permissions: Schema.$Record<Schema.String, Schema.$Array<Schema.String>>;
911
+ readonly expiresAt: Schema.NullOr<Schema.DateTimeUtcFromString>;
912
+ }>, Schema.Struct<{
913
+ readonly keyId: Schema.String;
914
+ readonly name: Schema.String;
915
+ readonly enabled: Schema.Boolean;
916
+ readonly permissions: Schema.$Record<Schema.String, Schema.$Array<Schema.String>>;
917
+ readonly expiresAt: Schema.NullOr<Schema.DateTimeUtcFromString>;
918
+ readonly createdAt: Schema.DateTimeUtcFromString;
919
+ readonly key: Schema.String;
920
+ }>, readonly (typeof InternalServerError | typeof ProviderRefused)[], false, typeof CurrentOwner>, Action.Action<"updateApiKey", Schema.Struct<{
921
+ readonly keyId: Schema.String;
922
+ readonly name: Schema.optional<Schema.String>;
923
+ readonly permissions: Schema.optional<Schema.$Record<Schema.String, Schema.$Array<Schema.String>>>;
924
+ readonly enabled: Schema.optional<Schema.Boolean>;
925
+ }>, Schema.Struct<{
926
+ readonly keyId: Schema.String;
927
+ readonly name: Schema.String;
928
+ readonly enabled: Schema.Boolean;
929
+ readonly permissions: Schema.$Record<Schema.String, Schema.$Array<Schema.String>>;
930
+ readonly expiresAt: Schema.NullOr<Schema.DateTimeUtcFromString>;
931
+ readonly createdAt: Schema.DateTimeUtcFromString;
932
+ }>, readonly (typeof InternalServerError | typeof ApiKeyNotFound | typeof ProviderRefused)[], false, typeof CurrentOwner>, Action.Action<"deleteApiKey", Schema.Struct<{
933
+ readonly keyId: Schema.String;
934
+ }>, Schema.Struct<{
935
+ readonly deleted: Schema.Boolean;
936
+ }>, readonly (typeof InternalServerError | typeof ApiKeyNotFound)[], false, typeof CurrentOwner>], [], Authentication.Descriptor<CurrentOwner, Owner, HttpApiSecurity.Http, "clankerauth.OwnerToken", readonly [typeof ServiceUnavailable, typeof InternalServerError]>>;
937
+ export {};