@greatwait/contracts 0.1.0-alpha.5 → 0.1.0-alpha.7

package/dist/http-request.js

@@ -0,0 +1,305 @@
+import { z } from "./zod.js";
+export const HTTP_HEADER_BOUNDS = {
+    count: 32,
+    nameBytes: 128,
+    valueBytes: 8192,
+    totalBytes: 16384,
+};
+export const HTTP_METHODS = ["POST", "PUT", "GET"];
+const encoder = new TextEncoder();
+/** Platform-owned authentication, content and transport fields cannot be overridden. */
+export function reservedHttpHeaderReason(name) {
+    const lower = name.toLowerCase();
+    if (lower.startsWith("callback-"))
+        return "reserved for callback signing and completion";
+    if (lower.startsWith("content-"))
+        return "reserved for body content and framing";
+    if (/^(proxy-|x-forwarded-|sec-|cf-)/u.test(lower) || lower === "forwarded")
+        return "reserved for trusted proxy and platform metadata";
+    if ([
+        "host",
+        "connection",
+        "keep-alive",
+        "transfer-encoding",
+        "te",
+        "trailer",
+        "upgrade",
+        "expect",
+        "accept-encoding",
+        "cookie2",
+    ].includes(lower))
+        return "reserved for transport";
+    return undefined;
+}
+export const httpHeaderNameSchema = z
+    .string()
+    .min(1)
+    .superRefine((name, ctx) => {
+    if (!/^[!#$%&'*+.^_`|~0-9A-Za-z-]+$/u.test(name))
+        ctx.addIssue({
+            code: "custom",
+            message: "header name must be an HTTP token",
+        });
+    if (encoder.encode(name).byteLength > HTTP_HEADER_BOUNDS.nameBytes)
+        ctx.addIssue({
+            code: "custom",
+            message: "header name exceeds 128 bytes",
+        });
+    const reason = reservedHttpHeaderReason(name);
+    if (reason !== undefined)
+        ctx.addIssue({ code: "custom", message: `${name}: ${reason}` });
+});
+export const httpHeaderValueSchema = z.string().superRefine((value, ctx) => {
+    if (Array.from(value).some((character) => {
+        const point = character.codePointAt(0);
+        return point < 32 || (point >= 127 && point <= 159) || point > 255;
+    }) ||
+        value.trim() !== value)
+        ctx.addIssue({
+            code: "custom",
+            message: "header value must contain faithfully transmitted Latin-1 text without controls or surrounding whitespace",
+        });
+    if (encoder.encode(value).byteLength > HTTP_HEADER_BOUNDS.valueBytes)
+        ctx.addIssue({
+            code: "custom",
+            message: "header value exceeds 8192 bytes",
+        });
+});
+export const headerChangeSchema = z.discriminatedUnion("action", [
+    z
+        .object({
+        action: z.literal("set"),
+        name: httpHeaderNameSchema,
+        value: httpHeaderValueSchema,
+        secret: z.boolean().optional(),
+    })
+        .strict(),
+    z.object({ action: z.literal("keep"), name: httpHeaderNameSchema }).strict(),
+    z
+        .object({ action: z.literal("remove"), name: httpHeaderNameSchema })
+        .strict(),
+    z
+        .object({ action: z.literal("suppress"), name: httpHeaderNameSchema })
+        .strict(),
+]);
+export const headerChangesSchema = z
+    .array(headerChangeSchema)
+    .max(HTTP_HEADER_BOUNDS.count * 2)
+    .superRefine((rows, ctx) => {
+    const seen = new Set();
+    let total = 0;
+    rows.forEach((row, index) => {
+        const name = row.name.toLowerCase();
+        if (seen.has(name))
+            ctx.addIssue({
+                code: "custom",
+                path: [index, "name"],
+                message: "duplicate header name (case insensitive)",
+            });
+        seen.add(name);
+        if (row.action === "set")
+            total +=
+                encoder.encode(row.name).byteLength +
+                    encoder.encode(row.value).byteLength;
+    });
+    if (rows.filter((row) => row.action === "set" || row.action === "suppress")
+        .length > HTTP_HEADER_BOUNDS.count)
+        ctx.addIssue({
+            code: "custom",
+            message: "headers exceed 32 configured headers",
+        });
+    if (total > HTTP_HEADER_BOUNDS.totalBytes)
+        ctx.addIssue({
+            code: "custom",
+            message: "headers exceed 16384 total bytes",
+        });
+});
+export const endpointHeaderChangesSchema = headerChangesSchema.superRefine((rows, ctx) => {
+    rows.forEach((row, index) => {
+        if (row.action === "suppress")
+            ctx.addIssue({
+                code: "custom",
+                path: [index, "action"],
+                message: "only a schedule can suppress an inherited header",
+            });
+    });
+});
+export const publicHttpHeaderSchema = z.union([
+    z
+        .object({
+        name: httpHeaderNameSchema,
+        secret: z.literal(false),
+        value: httpHeaderValueSchema,
+    })
+        .strict(),
+    z
+        .object({
+        name: httpHeaderNameSchema,
+        secret: z.literal(true),
+        configured: z.literal(true),
+        // Remains forbidden after response schemas are opened for additive metadata.
+        value: z.never().optional(),
+    })
+        .strict(),
+    z
+        .object({ name: httpHeaderNameSchema, suppressed: z.literal(true) })
+        .strict(),
+]);
+export const httpRequestSchema = z
+    .object({
+    method: z.enum(HTTP_METHODS).optional(),
+    body: z
+        .discriminatedUnion("mode", [
+        z.object({ mode: z.literal("envelope") }).strict(),
+        z.object({ mode: z.literal("json"), value: z.json() }).strict(),
+    ])
+        .optional(),
+    headers: headerChangesSchema.optional(),
+})
+    .strict()
+    .superRefine((http, ctx) => {
+    if (http.method === "GET" && http.body !== undefined)
+        ctx.addIssue({
+            code: "custom",
+            path: ["body"],
+            message: "GET must be bodyless; omit body",
+        });
+});
+export const publicHttpRequestSchema = z
+    .object({
+    method: z.enum(HTTP_METHODS),
+    body: z.discriminatedUnion("mode", [
+        z.object({ mode: z.literal("envelope") }).strict(),
+        z.object({ mode: z.literal("none") }).strict(),
+        z
+            .object({ mode: z.literal("json"), value: z.json().optional() })
+            .strict(),
+    ]),
+    headers: z.array(publicHttpHeaderSchema),
+})
+    .strict();
+/** Internal portability schema: ciphertext remains sealed across backend exports. */
+const sealedHttpValueSchema = z
+    .object({
+    keyId: z.literal("v1"),
+    nonce: z.string().regex(/^[A-Za-z0-9_-]{16}$/u),
+    ciphertext: z
+        .string()
+        .min(22)
+        .max(100000)
+        .regex(/^[A-Za-z0-9_-]+$/u),
+})
+    .strict();
+function decodedCipherBytes(value) {
+    try {
+        const padding = "=".repeat((4 - (value.length % 4)) % 4);
+        const decoded = atob(value.replace(/-/gu, "+").replace(/_/gu, "/") + padding);
+        const canonical = btoa(decoded)
+            .replace(/\+/gu, "-")
+            .replace(/\//gu, "_")
+            .replace(/=+$/u, "");
+        return canonical === value ? decoded.length : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+export const storedHttpHeaderSchema = z
+    .union([
+    z
+        .object({
+        name: httpHeaderNameSchema,
+        secret: z.literal(false),
+        value: httpHeaderValueSchema,
+        valueBytes: z
+            .number()
+            .int()
+            .nonnegative()
+            .max(HTTP_HEADER_BOUNDS.valueBytes),
+    })
+        .strict(),
+    z
+        .object({
+        name: httpHeaderNameSchema,
+        secret: z.literal(true),
+        envelope: sealedHttpValueSchema,
+        valueBytes: z
+            .number()
+            .int()
+            .nonnegative()
+            .max(HTTP_HEADER_BOUNDS.valueBytes),
+        ownerKind: z.enum(["endpoint", "schedule"]),
+        ownerId: z.string().min(1).max(128),
+    })
+        .strict(),
+    z
+        .object({ name: httpHeaderNameSchema, suppressed: z.literal(true) })
+        .strict(),
+])
+    .superRefine((row, ctx) => {
+    if ("suppressed" in row)
+        return;
+    if (row.secret) {
+        if (decodedCipherBytes(row.envelope.ciphertext) !== row.valueBytes + 16)
+            ctx.addIssue({
+                code: "custom",
+                path: ["envelope", "ciphertext"],
+                message: "header ciphertext must authenticate declared value byte count",
+            });
+    }
+    else if (encoder.encode(row.value).byteLength !== row.valueBytes)
+        ctx.addIssue({
+            code: "custom",
+            path: ["valueBytes"],
+            message: "header byte count must match value",
+        });
+});
+export const storedHttpRequestSchema = z
+    .object({
+    method: z.enum(HTTP_METHODS),
+    bodyMode: z.enum(["envelope", "json", "none"]),
+    headers: z.array(storedHttpHeaderSchema).max(HTTP_HEADER_BOUNDS.count),
+    encryptedTemplate: sealedHttpValueSchema.optional(),
+})
+    .strict()
+    .superRefine((http, ctx) => {
+    if ((http.method === "GET") !== (http.bodyMode === "none"))
+        ctx.addIssue({
+            code: "custom",
+            path: ["bodyMode"],
+            message: "GET must be bodyless; other methods require a body mode",
+        });
+    if (http.bodyMode !== "json" && http.encryptedTemplate !== undefined)
+        ctx.addIssue({
+            code: "custom",
+            path: ["encryptedTemplate"],
+            message: "only JSON body mode may carry an encrypted template",
+        });
+    if (http.encryptedTemplate !== undefined &&
+        decodedCipherBytes(http.encryptedTemplate.ciphertext) === undefined)
+        ctx.addIssue({
+            code: "custom",
+            path: ["encryptedTemplate", "ciphertext"],
+            message: "template ciphertext must canonically encode bytes",
+        });
+    const names = new Set();
+    let total = 0;
+    for (const row of http.headers) {
+        const name = row.name.toLowerCase();
+        if (names.has(name))
+            ctx.addIssue({
+                code: "custom",
+                path: ["headers"],
+                message: "duplicate stored HTTP header name",
+            });
+        names.add(name);
+        if (!("suppressed" in row))
+            total += encoder.encode(row.name).byteLength + row.valueBytes;
+    }
+    if (total > HTTP_HEADER_BOUNDS.totalBytes)
+        ctx.addIssue({
+            code: "custom",
+            path: ["headers"],
+            message: "stored headers exceed 16384 total bytes",
+        });
+});

package/dist/identity.d.ts

@@ -57,8 +57,8 @@ export type ExternalMembershipId = z.infer<typeof externalMembershipIdSchema>;
  */
 export declare const MEMBERSHIP_ROLES: readonly ["admin", "billing", "member"];
 export declare const membershipRoleSchema: import("zod").ZodEnum<{
-    member: "member";
     admin: "admin";
+    member: "member";
     billing: "billing";
 }>;
 export type MembershipRole = z.infer<typeof membershipRoleSchema>;
@@ -71,8 +71,8 @@ export type MembershipRole = z.infer<typeof membershipRoleSchema>;
  */
 export declare const MEMBERSHIP_STATUSES: readonly ["active", "suspended", "removed"];
 export declare const membershipStatusSchema: import("zod").ZodEnum<{
-    active: "active";
     removed: "removed";
+    active: "active";
     suspended: "suspended";
 }>;
 export type MembershipStatus = z.infer<typeof membershipStatusSchema>;
@@ -100,13 +100,13 @@ export declare const membershipSchema: import("zod").ZodObject<{
     id: import("zod").ZodString;
     organization: import("zod").ZodString;
     role: import("zod").ZodEnum<{
-        member: "member";
         admin: "admin";
+        member: "member";
         billing: "billing";
     }>;
     status: import("zod").ZodEnum<{
-        active: "active";
         removed: "removed";
+        active: "active";
         suspended: "suspended";
     }>;
     user: import("zod").ZodString;
@@ -142,13 +142,13 @@ export declare const membershipChangeSchema: import("zod").ZodObject<{
     id: import("zod").ZodString;
     organization: import("zod").ZodString;
     role: import("zod").ZodEnum<{
-        member: "member";
         admin: "admin";
+        member: "member";
         billing: "billing";
     }>;
     status: import("zod").ZodEnum<{
-        active: "active";
         removed: "removed";
+        active: "active";
         suspended: "suspended";
     }>;
     user: import("zod").ZodString;
@@ -167,8 +167,8 @@ export declare const sessionMembershipSchema: import("zod").ZodObject<{
     assertedAt: import("zod").ZodNumber;
     organization: import("zod").ZodString;
     role: import("zod").ZodEnum<{
-        member: "member";
         admin: "admin";
+        member: "member";
         billing: "billing";
     }>;
     user: import("zod").ZodString;

package/dist/index.d.ts

@@ -12,15 +12,15 @@ export { EVENT_TYPES, eventEnvelopeSchema, eventTypeSchema, genericEventSchema,
 export { MEMBERSHIP_ROLES, MEMBERSHIP_STATUSES, externalMembershipIdSchema, externalOrganizationIdSchema, externalUserIdSchema, grantsAccess, leastRole, leastStatus, membershipChangeSchema, membershipRoleSchema, membershipSchema, membershipStatusSchema, organizationTombstoneSchema, sessionMembershipSchema, type ExternalMembershipId, type ExternalOrganizationId, type ExternalUserId, type Membership, type MembershipChange, type MembershipRole, type MembershipStatus, type OrganizationTombstone, type SessionMembership, } from "./identity.js";
 export { CHANGE_KINDS, CHANGE_OPERATIONS, CHANGE_SUBJECTS, CONTRACT_VERSION, assess, changeKindSchema, classifyChange, contractVersionSchema, type ChangeKind, type ChangeOperation, type ChangeSubject, type CompatibilityVerdict, type ContractChange, } from "./compatibility.js";
 export { WORKSPACE_LAYERS, scaffoldProblemSchema, scaffoldVersionSchema, toolDescriptorSchema, toolListSchema, workspaceIdentitySchema, workspaceLayerSchema, workspaceScaffoldSchema, type ScaffoldProblem, type ScaffoldVersion, type ToolDescriptor, type ToolList, type WorkspaceIdentity, type WorkspaceLayer, type WorkspaceScaffold, } from "./workspace.js";
-export { MOCK_BEHAVIORS, MOCK_HEADERS, OPERATIONS, UNIVERSAL_PROBLEMS, AUTHENTICATED_PROBLEMS, SCOPED_PROBLEMS, findOperation, fixtureListSchema, mockBehaviorSchema, mockScenarioRequestSchema, mockScenarioResponseSchema, operationsFor, problemsFor, requestSchemaFor, responseSchemaFor, successStatusFor, type FixtureList, type McpDisposition, type MockBehavior, type MockScenarioRequest, type MockScenarioResponse, type OperationDefinition, type OperationId, type OperationSurface, } from "./operations.js";
+export { MOCK_BEHAVIORS, MOCK_HEADERS, OPERATIONS, UNIVERSAL_PROBLEMS, AUTHENTICATED_PROBLEMS, SCOPED_PROBLEMS, findOperation, fixtureListSchema, mockBehaviorSchema, mockScenarioRequestSchema, mockScenarioResponseSchema, operationsFor, problemsFor, requestSchemaFor, responseSchemaFor, successStatusFor, type FixtureList, type McpDisposition, type MockBehavior, type MockScenarioRequest, type MockScenarioResponse, type OperationDefinition, type OperationId, type OperationRequestBody, type OperationSurface, } from "./operations.js";
 export { PROJECT_LIST_LIMIT, PROJECT_STATUSES, environmentSchema, organizationSchema, projectCreateRequestSchema, projectArchiveRequestSchema, projectDeletedSchema, projectDeletionCountsSchema, projectListSchema, projectNameKey, projectNameSchema, projectSchema, projectStatusSchema, projectSummarySchema, projectUpdateRequestSchema, provisionedProjectSchema, type Environment, type Organization, type Project, type ProjectCreateRequest, type ProjectArchiveRequest, type ProjectDeleted, type ProjectDeletionCounts, type ProjectList, type ProjectStatus, type ProjectSummary, type ProjectUpdateRequest, type ProvisionedProject, } from "./tenancy.js";
-export { ATTEMPT_DURATION_MAX_MS, ATTEMPT_FAILURE_SNIPPET_MAX_LENGTH, ATTEMPT_REMEDIATIONS, ATTEMPT_RESPONSE_HEADER_MAX_LENGTH, ATTEMPT_STATES, CRON_EXPRESSION_MAX_LENGTH, LATENCY_CLASSES, OCCURRENCE_STATES, PARTITION_KEY_MAX_LENGTH, RECURRENCE_REQUEST_FIELDS, SCHEDULE_STATUSES, SCHEDULING_BOUNDS, TERMINAL_OCCURRENCE_STATES, TERMINAL_SCHEDULE_STATUSES, attemptFailureSnippetSchema, attemptResponseHeaderSchema, attemptSchema, attemptDiagnosticSchema, attemptPageSchema, attemptRemediationSchema, attemptStateForResponse, attemptStateSchema, attemptTriggerSchema, attemptViewSchema, cronExpressionSchema, DELIVERY_COMPLETION_MODES, DELIVERY_DURATION_TIERS, MAX_DELIVERY_DURATION_SECONDS, RESPONSE_DELIVERY_MAX_DURATION_SECONDS, DELIVERY_OVERLAP_POLICIES, DEFAULT_DELIVERY_DURATION_SECONDS, DEFAULT_DELIVERY_OVERLAP_POLICY, FREE_DELIVERY_DURATION_SECONDS, DEFAULT_ONE_SHOT_MAX_STALENESS_SECONDS, LATENESS_POLICIES, isLongRunningDuration, deliveryCompletionModeSchema, deliveryDurationSecondsSchema, deliveryOverlapPolicySchema, type DeliveryCompletionMode, type DeliveryOverlapPolicy, deriveDeliverySettings, deriveLatencyClass, deriveLatenessSettings, defaultLatenessPolicyForRecurrence, generationSchema, isTerminalOccurrenceState, isTerminalScheduleStatus, latencyClassSchema, latenessPolicySchema, occurrenceSchema, occurrencePageSchema, parseProjectOccurrenceListRequest, projectOccurrenceCursorBinding, projectOccurrenceListRequestSchema, projectOccurrencePageSchema, occurrenceStateSchema, occurrenceViewSchema, partitionKeySchema, remediationForAttempt, recurrenceSchema, scheduleNameSchema, scheduleLatenessRequestSchema, scheduleLatenessSchema, schedulePageSchema, scheduleRequestSchema, scheduleSchema, scheduleStatusSchema, scheduleViewSchema, type Attempt, type AttemptFailureSnippet, type AttemptResponseHeader, type AttemptDiagnostic, type AttemptPage, type AttemptRemediation, type AttemptState, type AttemptTrigger, type AttemptView, type CronExpression, type Generation, type DeliverySettings, type LatencyClass, type LatenessPolicy, type LatenessSettings, type Occurrence, type OccurrencePage, type ProjectOccurrenceListRequest, type ProjectOccurrenceListRequestParse, type ProjectOccurrencePage, type OccurrenceState, type OccurrenceView, type PartitionKey, type Recurrence, type Schedule, type ScheduleLatenessRequest, type SchedulePage, type ScheduleRequest, type ScheduleStatus, type ScheduleView, } from "./scheduling.js";
+export { ATTEMPT_DURATION_MAX_MS, ATTEMPT_FAILURE_SNIPPET_MAX_LENGTH, ATTEMPT_REMEDIATIONS, ATTEMPT_RESPONSE_HEADER_MAX_LENGTH, ATTEMPT_STATES, CRON_EXPRESSION_MAX_LENGTH, LATENCY_CLASSES, OCCURRENCE_STATES, PARTITION_KEY_MAX_LENGTH, RECURRENCE_REQUEST_FIELDS, SCHEDULE_STATUSES, SCHEDULING_BOUNDS, TERMINAL_OCCURRENCE_STATES, TERMINAL_SCHEDULE_STATUSES, attemptFailureSnippetSchema, attemptResponseHeaderSchema, attemptSchema, attemptResponseSchema, attemptRequestSchema, type AttemptResponse, type AttemptRequest, attemptDiagnosticSchema, attemptPageSchema, attemptRemediationSchema, attemptStateForResponse, attemptStateSchema, attemptTriggerSchema, attemptViewSchema, cronExpressionSchema, DELIVERY_COMPLETION_MODES, DELIVERY_DURATION_TIERS, MAX_DELIVERY_DURATION_SECONDS, RESPONSE_DELIVERY_MAX_DURATION_SECONDS, DELIVERY_OVERLAP_POLICIES, DEFAULT_DELIVERY_DURATION_SECONDS, DEFAULT_DELIVERY_OVERLAP_POLICY, FREE_DELIVERY_DURATION_SECONDS, DEFAULT_ONE_SHOT_MAX_STALENESS_SECONDS, LATENESS_POLICIES, isLongRunningDuration, deliveryCompletionModeSchema, deliveryDurationSecondsSchema, deliveryOverlapPolicySchema, type DeliveryCompletionMode, type DeliveryOverlapPolicy, deriveDeliverySettings, deriveLatencyClass, deriveLatenessSettings, defaultLatenessPolicyForRecurrence, generationSchema, isTerminalOccurrenceState, isTerminalScheduleStatus, latencyClassSchema, latenessPolicySchema, occurrenceSchema, occurrencePageSchema, parseProjectOccurrenceListRequest, projectOccurrenceCursorBinding, projectOccurrenceListRequestSchema, projectOccurrencePageSchema, occurrenceStateSchema, occurrenceViewSchema, partitionKeySchema, remediationForAttempt, recurrenceSchema, DEFAULT_AUTO_PAUSE_AFTER_FAILURES, autoPauseAfterFailuresSchema, autoPauseReasonSchema, type AutoPauseAfterFailures, type AutoPauseReason, scheduleNameSchema, scheduleLatenessRequestSchema, scheduleLatenessSchema, schedulePageSchema, scheduleRequestSchema, scheduleSchema, scheduleStatusSchema, scheduleViewSchema, scheduleWrittenViewSchema, type Attempt, type AttemptFailureSnippet, type AttemptResponseHeader, type AttemptDiagnostic, type AttemptPage, type AttemptRemediation, type AttemptState, type AttemptTrigger, type AttemptView, type CronExpression, type Generation, type DeliverySettings, type LatencyClass, type LatenessPolicy, type LatenessSettings, type Occurrence, type OccurrencePage, type ProjectOccurrenceListRequest, type ProjectOccurrenceListRequestParse, type ProjectOccurrencePage, type OccurrenceState, type OccurrenceView, type PartitionKey, type Recurrence, type Schedule, type ScheduleLatenessRequest, type SchedulePage, type ScheduleRequest, type ScheduleStatus, type ScheduleView, type ScheduleWrittenView, } from "./scheduling.js";
 export { portableAttemptRecordSchema, portableEncryptedPayloadRecordSchema, portableOccurrenceRecordSchema, portableReceiptRecordSchema, portableScheduleRecordSchema, portableSchedulingRecordSetSchema, type PortableAttemptRecord, type PortableEncryptedPayloadRecord, type PortableOccurrenceRecord, type PortableReceiptRecord, type PortableScheduleRecord, type PortableSchedulingRecordSet, } from "./scheduling-records.js";
 export { ROLE_SCOPE_CEILINGS, capScopesToRole, ceilingForRole, credentialScopes, grantableScopes, policyMatrix, roleAllows, roleCanPerform, type PolicyMatrixRow, } from "./policy.js";
 export { ACCESS_TOKEN_PATTERN, ACCESS_TOKEN_TTL_SECONDS, AUTHORIZATION_CODE_PATTERN, AUTHORIZATION_CODE_TTL_SECONDS, AUTHORIZATION_REQUEST_TTL_SECONDS, MAX_REDIRECT_URIS, OAUTH_ERRORS, OAUTH_ERROR_STATUS, OAUTH_GRANT_STATUSES, OAUTH_GRANT_TYPES, OAUTH_RESPONSE_TYPES, OAUTH_REVOCATION_REASONS, OAUTH_ROUTES, OAUTH_SECRET_PATTERN, OAUTH_TOKEN_NAMESPACE_LENGTH, OAUTH_TOKEN_SECRET_LENGTH, PKCE_CHALLENGE_PATTERN, PKCE_METHODS, PKCE_VERIFIER_PATTERN, REFRESH_TOKEN_PATTERN, REFRESH_TOKEN_TTL_SECONDS, TOKEN_ENDPOINT_AUTH_METHODS, authorizationParametersSchema, authorizationServerMetadataSchema, bearerChallenge, clientRegistrationRequestSchema, clientRegistrationSchema, consentDecisionSchema, consentOutcomeSchema, consentPromptSchema, formatScopeString, isLoopbackRedirect, oauthError, oauthErrorCodeSchema, oauthErrorSchema, oauthGrantListSchema, oauthGrantRevokedSchema, oauthGrantSchema, oauthGrantStatusSchema, oauthGrantTypeSchema, oauthRevocationReasonSchema, parseScopeString, pkceMethodSchema, protectedResourceMetadataSchema, redirectUriSchema, revocationRequestSchema, tokenRequestSchema, tokenResponseSchema, type AuthorizationParameters, type AuthorizationServerMetadata, type ClientRegistration, type ClientRegistrationRequest, type ConsentDecision, type ConsentOutcome, type ConsentPrompt, type OAuthErrorBody, type OAuthErrorCode, type OAuthGrant, type OAuthGrantList, type OAuthGrantRevoked, type OAuthGrantStatus, type OAuthGrantType, type OAuthRevocationReason, type ProtectedResourceMetadata, type RevocationRequest, type TokenRequest, type TokenResponse, } from "./oauth.js";
 export { CALLBACK_ENVELOPE_HEADROOM_BYTES, CALLBACK_RECEIVER_MAX_BODY_BYTES, } from "./callback-receiver.js";
 export { CALLBACK_ENDPOINT_SECRET_PATTERN, CALLBACK_URL_REJECTION_REASONS, evaluateCallbackUrl, isPublicCallbackAddress, type CallbackUrlRejectionReason, } from "./callback-safety.js";
-export { CALLBACK_ENDPOINT_LIMIT_PER_ENVIRONMENT, CALLBACK_ENDPOINT_STATUSES, CALLBACK_SIGNING_KEY_ROTATION_OVERLAP_SECONDS, CALLBACK_EGRESS_FAILURES, CALLBACK_ADMISSION_RATE_LIMITS, callbackEndpointCreatedSchema, callbackEndpointNameSchema, callbackEndpointPageSchema, callbackEndpointRequestSchema, callbackEndpointRotatedSchema, callbackEndpointSchema, callbackEndpointSigningSecretsSchema, callbackEndpointStatusSchema, callbackSigningKeyRotationRequestSchema, callbackSigningKeysSchema, callbackEgressFailureSchema, type CallbackEndpoint, type CallbackEndpointCreated, type CallbackEndpointPage, type CallbackEndpointRequest, type CallbackEndpointRotated, type CallbackEndpointSigningSecrets, type CallbackEndpointStatus, type CallbackSigningKeyRotationRequest, type CallbackSigningKeys, type CallbackEgressFailure, } from "./endpoints.js";
+export { CALLBACK_ENDPOINT_LIMIT_PER_ENVIRONMENT, CALLBACK_ENDPOINT_STATUSES, CALLBACK_SIGNING_KEY_ROTATION_OVERLAP_SECONDS, CALLBACK_EGRESS_FAILURES, CALLBACK_ADMISSION_RATE_LIMITS, callbackEndpointCreatedSchema, callbackEndpointEnsuredSchema, callbackEndpointNameSchema, callbackEndpointPageSchema, callbackEndpointRequestSchema, callbackEndpointRotatedSchema, callbackEndpointSchema, callbackEndpointSigningSecretsSchema, callbackEndpointStatusSchema, callbackSigningKeyRotationRequestSchema, callbackSigningKeysSchema, callbackEgressFailureSchema, callbackUrlSchema, endpointDashboardPath, signingSecretNotice, signingSecretNoticeSchema, type CallbackEndpoint, type CallbackEndpointCreated, type CallbackEndpointEnsured, type SigningSecretNotice, type CallbackEndpointPage, type CallbackEndpointRequest, type CallbackEndpointRotated, type CallbackEndpointSigningSecrets, type CallbackEndpointStatus, type CallbackSigningKeyRotationRequest, type CallbackSigningKeys, type CallbackEgressFailure, } from "./endpoints.js";
 export { compactInterval, cronWords, generatedEndpointName, generatedScheduleName, periodWords, targetDomain, } from "./naming.js";
 export { FORECAST_BOUNDS, FORECAST_PARTIAL_ACCEPT_HEADER, forecastRequestHeadersSchema, forecastCoverageSchema, type ForecastCoverage, FORECAST_BREAKDOWNS, FORECAST_COMPATIBILITY, FORECAST_RULES, FORECAST_WINDOW_VERSION, decideForecastAnswer, forecastBreakdownSchema, forecastBucketSchema, forecastBucketStartMs, forecastLatencyCountsSchema, forecastRequestSchema, forecastSchema, forecastViolations, forecastWindowBucketSchema, forecastWindowViolations, forecastWindowsSchema, mergeForecastBuckets, parseForecastRequest, resolveForecastWindow, topPartitionKeys, type Forecast, type ForecastAnswerDecision, type ForecastAnswerRefusal, type ForecastBreakdown, type ForecastBucket, type ForecastMergedBucket, type ForecastShardAnswer, type ForecastLatencyCounts, type ForecastRequest, type ForecastRequestParse, type ForecastWindow, type ForecastWindowBucket, type ForecastWindowRefusal, type ForecastWindowResolution, type ForecastWindows, } from "./forecast.js";
 export { CURL_JOURNEY_TOOLS, FIRST_VALUE_JOURNEY, FIRST_VALUE_PREREQUISITES, FIRST_VALUE_STEPS, FIRST_VALUE_VARIABLES, JOURNEY_ACTIVATION_DURATIONS, JOURNEY_ACTIVATION_OUTCOMES, JOURNEY_CONDITIONS, MINIMUM_CURL_VERSION, WEBSITE_JOURNEY_STEPS, WEBSITE_JOURNEY_STEP_KEYS, journeyActivationDuration, journeyCapturedVariables, journeyPathVariables, journeyPoll, journeyPrerequisite, journeyReferences, journeyStepSchema, journeyStepVariables, journeyVariable, journeyVariableName, journeyVariableSchema, parseWebsiteActivationEvent, pathParameterNames, resolveJourneyReferences, websiteActivationEventSchema, websiteJourneySteps, type FirstValueJourney, type JourneyActivationDuration, type JourneyActivationOutcome, type JourneyCapture, type JourneyCondition, type JourneyExpectation, type JourneyPoll, type JourneyPrerequisite, type JourneyRecovery, type JourneyStep, type JourneyVariable, type WebsiteActivationEvent, } from "./first-value-journey.js";
@@ -30,3 +30,6 @@ export { DELIVERY_TIMING_TARGETS_MS, DELIVERY_TIMING_VERDICTS, deliveryTimingSum
 export { CALLBACK_RECEIVER_DISPOSITIONS, CALLBACK_RECEIVER_PROTOCOL, CALLBACK_RECEIVER_STATUS, TEST_SINK_BEHAVIORS, TEST_SINK_BEHAVIOR_FACTS, TEST_SINK_BOUNDS, TEST_SINK_CLIENT_ERROR_STATUSES, TEST_SINK_DISPOSITIONS, TEST_SINK_PROTOCOL_VERSION, TEST_SINK_SERVER_ERROR_STATUSES, callbackReceiverAcknowledgementSchema, callbackReceiverDispositionSchema, resolveTestSinkAction, testSinkBehaviorSchema, testSinkCreateRequestSchema, testSinkDeliveryBodySchema, testSinkDispositionSchema, testSinkDeliveryPageSchema, testSinkDeliverySchema, testSinkPageSchema, testSinkProgramSchema, testSinkSchema, type CallbackReceiverAcknowledgement, type CallbackReceiverDisposition, type TestSink, type TestSinkAction, type TestSinkBehavior, type TestSinkCreateRequest, type TestSinkDelivery, type TestSinkDeliveryBody, type TestSinkDeliveryPage, type TestSinkDisposition, type TestSinkPage, type TestSinkProgram, } from "./test-sink.js";
 export { PROJECT_BILLING_ACTIONS, projectBillingQuoteRequestSchema, projectBillingQuoteSchema, projectBillingChangeRequestSchema, projectBillingStateSchema, billingPortalSchema, BILLING_PAYMENT_METHOD_REQUIRED_TITLE, billingPaymentMethodSchema, billingPaymentMethodSetupRequestSchema, billingPaymentMethodConfirmRequestSchema, billingPaymentMethodRemoveRequestSchema, billingInvoiceSchema, billingInvoiceListSchema, billingPaymentHistoryPageSchema, billingInvoiceHistoryPageSchema, type BillingPaymentHistoryPage, type BillingInvoiceHistoryPage, type BillingInvoice, type BillingInvoiceList, type BillingPaymentMethod, type BillingPaymentMethodSetupRequest, type BillingPaymentMethodConfirmRequest, type BillingPaymentMethodRemoveRequest, type ProjectBillingQuoteRequest, type ProjectBillingQuote, type ProjectBillingChangeRequest, type ProjectBillingState, } from "./billing.js";
 export { effectiveCustomerLimitsSchema, type EffectiveCustomerLimits, } from "./effective-limits.js";
+export * from "./members.js";
+export * from "./http-request.js";
+export { sanitizedDiagnosticText, diagnosticBodyText, responseBodySentence, requestCaptureSentence, attemptStatusGuidance, } from "./attempt-diagnostics.js";

package/dist/index.js

@@ -14,13 +14,13 @@ export { CHANGE_KINDS, CHANGE_OPERATIONS, CHANGE_SUBJECTS, CONTRACT_VERSION, ass
 export { WORKSPACE_LAYERS, scaffoldProblemSchema, scaffoldVersionSchema, toolDescriptorSchema, toolListSchema, workspaceIdentitySchema, workspaceLayerSchema, workspaceScaffoldSchema, } from "./workspace.js";
 export { MOCK_BEHAVIORS, MOCK_HEADERS, OPERATIONS, UNIVERSAL_PROBLEMS, AUTHENTICATED_PROBLEMS, SCOPED_PROBLEMS, findOperation, fixtureListSchema, mockBehaviorSchema, mockScenarioRequestSchema, mockScenarioResponseSchema, operationsFor, problemsFor, requestSchemaFor, responseSchemaFor, successStatusFor, } from "./operations.js";
 export { PROJECT_LIST_LIMIT, PROJECT_STATUSES, environmentSchema, organizationSchema, projectCreateRequestSchema, projectArchiveRequestSchema, projectDeletedSchema, projectDeletionCountsSchema, projectListSchema, projectNameKey, projectNameSchema, projectSchema, projectStatusSchema, projectSummarySchema, projectUpdateRequestSchema, provisionedProjectSchema, } from "./tenancy.js";
-export { ATTEMPT_DURATION_MAX_MS, ATTEMPT_FAILURE_SNIPPET_MAX_LENGTH, ATTEMPT_REMEDIATIONS, ATTEMPT_RESPONSE_HEADER_MAX_LENGTH, ATTEMPT_STATES, CRON_EXPRESSION_MAX_LENGTH, LATENCY_CLASSES, OCCURRENCE_STATES, PARTITION_KEY_MAX_LENGTH, RECURRENCE_REQUEST_FIELDS, SCHEDULE_STATUSES, SCHEDULING_BOUNDS, TERMINAL_OCCURRENCE_STATES, TERMINAL_SCHEDULE_STATUSES, attemptFailureSnippetSchema, attemptResponseHeaderSchema, attemptSchema, attemptDiagnosticSchema, attemptPageSchema, attemptRemediationSchema, attemptStateForResponse, attemptStateSchema, attemptTriggerSchema, attemptViewSchema, cronExpressionSchema, DELIVERY_COMPLETION_MODES, DELIVERY_DURATION_TIERS, MAX_DELIVERY_DURATION_SECONDS, RESPONSE_DELIVERY_MAX_DURATION_SECONDS, DELIVERY_OVERLAP_POLICIES, DEFAULT_DELIVERY_DURATION_SECONDS, DEFAULT_DELIVERY_OVERLAP_POLICY, FREE_DELIVERY_DURATION_SECONDS, DEFAULT_ONE_SHOT_MAX_STALENESS_SECONDS, LATENESS_POLICIES, isLongRunningDuration, deliveryCompletionModeSchema, deliveryDurationSecondsSchema, deliveryOverlapPolicySchema, deriveDeliverySettings, deriveLatencyClass, deriveLatenessSettings, defaultLatenessPolicyForRecurrence, generationSchema, isTerminalOccurrenceState, isTerminalScheduleStatus, latencyClassSchema, latenessPolicySchema, occurrenceSchema, occurrencePageSchema, parseProjectOccurrenceListRequest, projectOccurrenceCursorBinding, projectOccurrenceListRequestSchema, projectOccurrencePageSchema, occurrenceStateSchema, occurrenceViewSchema, partitionKeySchema, remediationForAttempt, recurrenceSchema, scheduleNameSchema, scheduleLatenessRequestSchema, scheduleLatenessSchema, schedulePageSchema, scheduleRequestSchema, scheduleSchema, scheduleStatusSchema, scheduleViewSchema, } from "./scheduling.js";
+export { ATTEMPT_DURATION_MAX_MS, ATTEMPT_FAILURE_SNIPPET_MAX_LENGTH, ATTEMPT_REMEDIATIONS, ATTEMPT_RESPONSE_HEADER_MAX_LENGTH, ATTEMPT_STATES, CRON_EXPRESSION_MAX_LENGTH, LATENCY_CLASSES, OCCURRENCE_STATES, PARTITION_KEY_MAX_LENGTH, RECURRENCE_REQUEST_FIELDS, SCHEDULE_STATUSES, SCHEDULING_BOUNDS, TERMINAL_OCCURRENCE_STATES, TERMINAL_SCHEDULE_STATUSES, attemptFailureSnippetSchema, attemptResponseHeaderSchema, attemptSchema, attemptResponseSchema, attemptRequestSchema, attemptDiagnosticSchema, attemptPageSchema, attemptRemediationSchema, attemptStateForResponse, attemptStateSchema, attemptTriggerSchema, attemptViewSchema, cronExpressionSchema, DELIVERY_COMPLETION_MODES, DELIVERY_DURATION_TIERS, MAX_DELIVERY_DURATION_SECONDS, RESPONSE_DELIVERY_MAX_DURATION_SECONDS, DELIVERY_OVERLAP_POLICIES, DEFAULT_DELIVERY_DURATION_SECONDS, DEFAULT_DELIVERY_OVERLAP_POLICY, FREE_DELIVERY_DURATION_SECONDS, DEFAULT_ONE_SHOT_MAX_STALENESS_SECONDS, LATENESS_POLICIES, isLongRunningDuration, deliveryCompletionModeSchema, deliveryDurationSecondsSchema, deliveryOverlapPolicySchema, deriveDeliverySettings, deriveLatencyClass, deriveLatenessSettings, defaultLatenessPolicyForRecurrence, generationSchema, isTerminalOccurrenceState, isTerminalScheduleStatus, latencyClassSchema, latenessPolicySchema, occurrenceSchema, occurrencePageSchema, parseProjectOccurrenceListRequest, projectOccurrenceCursorBinding, projectOccurrenceListRequestSchema, projectOccurrencePageSchema, occurrenceStateSchema, occurrenceViewSchema, partitionKeySchema, remediationForAttempt, recurrenceSchema, DEFAULT_AUTO_PAUSE_AFTER_FAILURES, autoPauseAfterFailuresSchema, autoPauseReasonSchema, scheduleNameSchema, scheduleLatenessRequestSchema, scheduleLatenessSchema, schedulePageSchema, scheduleRequestSchema, scheduleSchema, scheduleStatusSchema, scheduleViewSchema, scheduleWrittenViewSchema, } from "./scheduling.js";
 export { portableAttemptRecordSchema, portableEncryptedPayloadRecordSchema, portableOccurrenceRecordSchema, portableReceiptRecordSchema, portableScheduleRecordSchema, portableSchedulingRecordSetSchema, } from "./scheduling-records.js";
 export { ROLE_SCOPE_CEILINGS, capScopesToRole, ceilingForRole, credentialScopes, grantableScopes, policyMatrix, roleAllows, roleCanPerform, } from "./policy.js";
 export { ACCESS_TOKEN_PATTERN, ACCESS_TOKEN_TTL_SECONDS, AUTHORIZATION_CODE_PATTERN, AUTHORIZATION_CODE_TTL_SECONDS, AUTHORIZATION_REQUEST_TTL_SECONDS, MAX_REDIRECT_URIS, OAUTH_ERRORS, OAUTH_ERROR_STATUS, OAUTH_GRANT_STATUSES, OAUTH_GRANT_TYPES, OAUTH_RESPONSE_TYPES, OAUTH_REVOCATION_REASONS, OAUTH_ROUTES, OAUTH_SECRET_PATTERN, OAUTH_TOKEN_NAMESPACE_LENGTH, OAUTH_TOKEN_SECRET_LENGTH, PKCE_CHALLENGE_PATTERN, PKCE_METHODS, PKCE_VERIFIER_PATTERN, REFRESH_TOKEN_PATTERN, REFRESH_TOKEN_TTL_SECONDS, TOKEN_ENDPOINT_AUTH_METHODS, authorizationParametersSchema, authorizationServerMetadataSchema, bearerChallenge, clientRegistrationRequestSchema, clientRegistrationSchema, consentDecisionSchema, consentOutcomeSchema, consentPromptSchema, formatScopeString, isLoopbackRedirect, oauthError, oauthErrorCodeSchema, oauthErrorSchema, oauthGrantListSchema, oauthGrantRevokedSchema, oauthGrantSchema, oauthGrantStatusSchema, oauthGrantTypeSchema, oauthRevocationReasonSchema, parseScopeString, pkceMethodSchema, protectedResourceMetadataSchema, redirectUriSchema, revocationRequestSchema, tokenRequestSchema, tokenResponseSchema, } from "./oauth.js";
 export { CALLBACK_ENVELOPE_HEADROOM_BYTES, CALLBACK_RECEIVER_MAX_BODY_BYTES, } from "./callback-receiver.js";
 export { CALLBACK_ENDPOINT_SECRET_PATTERN, CALLBACK_URL_REJECTION_REASONS, evaluateCallbackUrl, isPublicCallbackAddress, } from "./callback-safety.js";
-export { CALLBACK_ENDPOINT_LIMIT_PER_ENVIRONMENT, CALLBACK_ENDPOINT_STATUSES, CALLBACK_SIGNING_KEY_ROTATION_OVERLAP_SECONDS, CALLBACK_EGRESS_FAILURES, CALLBACK_ADMISSION_RATE_LIMITS, callbackEndpointCreatedSchema, callbackEndpointNameSchema, callbackEndpointPageSchema, callbackEndpointRequestSchema, callbackEndpointRotatedSchema, callbackEndpointSchema, callbackEndpointSigningSecretsSchema, callbackEndpointStatusSchema, callbackSigningKeyRotationRequestSchema, callbackSigningKeysSchema, callbackEgressFailureSchema, } from "./endpoints.js";
+export { CALLBACK_ENDPOINT_LIMIT_PER_ENVIRONMENT, CALLBACK_ENDPOINT_STATUSES, CALLBACK_SIGNING_KEY_ROTATION_OVERLAP_SECONDS, CALLBACK_EGRESS_FAILURES, CALLBACK_ADMISSION_RATE_LIMITS, callbackEndpointCreatedSchema, callbackEndpointEnsuredSchema, callbackEndpointNameSchema, callbackEndpointPageSchema, callbackEndpointRequestSchema, callbackEndpointRotatedSchema, callbackEndpointSchema, callbackEndpointSigningSecretsSchema, callbackEndpointStatusSchema, callbackSigningKeyRotationRequestSchema, callbackSigningKeysSchema, callbackEgressFailureSchema, callbackUrlSchema, endpointDashboardPath, signingSecretNotice, signingSecretNoticeSchema, } from "./endpoints.js";
 export { compactInterval, cronWords, generatedEndpointName, generatedScheduleName, periodWords, targetDomain, } from "./naming.js";
 export { FORECAST_BOUNDS, FORECAST_PARTIAL_ACCEPT_HEADER, forecastRequestHeadersSchema, forecastCoverageSchema, FORECAST_BREAKDOWNS, FORECAST_COMPATIBILITY, FORECAST_RULES, FORECAST_WINDOW_VERSION, decideForecastAnswer, forecastBreakdownSchema, forecastBucketSchema, forecastBucketStartMs, forecastLatencyCountsSchema, forecastRequestSchema, forecastSchema, forecastViolations, forecastWindowBucketSchema, forecastWindowViolations, forecastWindowsSchema, mergeForecastBuckets, parseForecastRequest, resolveForecastWindow, topPartitionKeys, } from "./forecast.js";
 export { CURL_JOURNEY_TOOLS, FIRST_VALUE_JOURNEY, FIRST_VALUE_PREREQUISITES, FIRST_VALUE_STEPS, FIRST_VALUE_VARIABLES, JOURNEY_ACTIVATION_DURATIONS, JOURNEY_ACTIVATION_OUTCOMES, JOURNEY_CONDITIONS, MINIMUM_CURL_VERSION, WEBSITE_JOURNEY_STEPS, WEBSITE_JOURNEY_STEP_KEYS, journeyActivationDuration, journeyCapturedVariables, journeyPathVariables, journeyPoll, journeyPrerequisite, journeyReferences, journeyStepSchema, journeyStepVariables, journeyVariable, journeyVariableName, journeyVariableSchema, parseWebsiteActivationEvent, pathParameterNames, resolveJourneyReferences, websiteActivationEventSchema, websiteJourneySteps, } from "./first-value-journey.js";
@@ -30,3 +30,6 @@ export { DELIVERY_TIMING_TARGETS_MS, DELIVERY_TIMING_VERDICTS, deliveryTimingSum
 export { CALLBACK_RECEIVER_DISPOSITIONS, CALLBACK_RECEIVER_PROTOCOL, CALLBACK_RECEIVER_STATUS, TEST_SINK_BEHAVIORS, TEST_SINK_BEHAVIOR_FACTS, TEST_SINK_BOUNDS, TEST_SINK_CLIENT_ERROR_STATUSES, TEST_SINK_DISPOSITIONS, TEST_SINK_PROTOCOL_VERSION, TEST_SINK_SERVER_ERROR_STATUSES, callbackReceiverAcknowledgementSchema, callbackReceiverDispositionSchema, resolveTestSinkAction, testSinkBehaviorSchema, testSinkCreateRequestSchema, testSinkDeliveryBodySchema, testSinkDispositionSchema, testSinkDeliveryPageSchema, testSinkDeliverySchema, testSinkPageSchema, testSinkProgramSchema, testSinkSchema, } from "./test-sink.js";
 export { PROJECT_BILLING_ACTIONS, projectBillingQuoteRequestSchema, projectBillingQuoteSchema, projectBillingChangeRequestSchema, projectBillingStateSchema, billingPortalSchema, BILLING_PAYMENT_METHOD_REQUIRED_TITLE, billingPaymentMethodSchema, billingPaymentMethodSetupRequestSchema, billingPaymentMethodConfirmRequestSchema, billingPaymentMethodRemoveRequestSchema, billingInvoiceSchema, billingInvoiceListSchema, billingPaymentHistoryPageSchema, billingInvoiceHistoryPageSchema, } from "./billing.js";
 export { effectiveCustomerLimitsSchema, } from "./effective-limits.js";
+export * from "./members.js";
+export * from "./http-request.js";
+export { sanitizedDiagnosticText, diagnosticBodyText, responseBodySentence, requestCaptureSentence, attemptStatusGuidance, } from "./attempt-diagnostics.js";

package/dist/mcp.d.ts

@@ -96,6 +96,7 @@ export declare const mcpConnectionSchema: import("zod").ZodObject<{
     endpoint: import("zod").ZodString;
     id: import("zod").ZodString;
     scopes: import("zod").ZodArray<import("zod").ZodEnum<{
+        "members:manage": "members:manage";
         "credentials:administer": "credentials:administer";
         "billing:write": "billing:write";
         "credentials:read": "credentials:read";
@@ -115,9 +116,9 @@ export declare const mcpConnectionSchema: import("zod").ZodObject<{
         "usage:read": "usage:read";
     }>>;
     state: import("zod").ZodEnum<{
+        expired: "expired";
         revoked: "revoked";
         usable: "usable";
-        expired: "expired";
     }>;
     tools: import("zod").ZodArray<import("zod").ZodString>;
 }, import("zod/v4/core").$strip>;

package/dist/members.d.ts

@@ -0,0 +1,141 @@
+import { z } from "./zod.js";
+/** Assignable roles on the included Clerk plan. Billing is not offered. */
+export declare const managedMemberRoleSchema: import("zod").ZodEnum<{
+    admin: "admin";
+    member: "member";
+}>;
+export declare const memberIdSchema: import("zod").ZodString;
+export declare const invitationIdSchema: import("zod").ZodString;
+export declare const memberViewSchema: import("zod").ZodObject<{
+    id: import("zod").ZodString;
+    email: import("zod").ZodString;
+    name: import("zod").ZodString;
+    role: import("zod").ZodEnum<{
+        admin: "admin";
+        member: "member";
+    }>;
+    projects: import("zod").ZodArray<import("zod").ZodString>;
+    allProjects: import("zod").ZodBoolean;
+    self: import("zod").ZodBoolean;
+}, import("zod/v4/core").$strict>;
+export declare const memberListSchema: import("zod").ZodObject<{
+    data: import("zod").ZodArray<import("zod").ZodObject<{
+        id: import("zod").ZodString;
+        email: import("zod").ZodString;
+        name: import("zod").ZodString;
+        role: import("zod").ZodEnum<{
+            admin: "admin";
+            member: "member";
+        }>;
+        projects: import("zod").ZodArray<import("zod").ZodString>;
+        allProjects: import("zod").ZodBoolean;
+        self: import("zod").ZodBoolean;
+    }, import("zod/v4/core").$strict>>;
+}, import("zod/v4/core").$strict>;
+export declare const invitationViewSchema: import("zod").ZodObject<{
+    id: import("zod").ZodString;
+    email: import("zod").ZodString;
+    role: import("zod").ZodEnum<{
+        admin: "admin";
+        member: "member";
+    }>;
+    projects: import("zod").ZodArray<import("zod").ZodString>;
+    status: import("zod").ZodEnum<{
+        pending: "pending";
+        expired: "expired";
+        accepted: "accepted";
+        revoked: "revoked";
+    }>;
+}, import("zod/v4/core").$strict>;
+export declare const invitationListSchema: import("zod").ZodObject<{
+    data: import("zod").ZodArray<import("zod").ZodObject<{
+        id: import("zod").ZodString;
+        email: import("zod").ZodString;
+        role: import("zod").ZodEnum<{
+            admin: "admin";
+            member: "member";
+        }>;
+        projects: import("zod").ZodArray<import("zod").ZodString>;
+        status: import("zod").ZodEnum<{
+            pending: "pending";
+            expired: "expired";
+            accepted: "accepted";
+            revoked: "revoked";
+        }>;
+    }, import("zod/v4/core").$strict>>;
+}, import("zod/v4/core").$strict>;
+export declare const memberInviteRequestSchema: import("zod").ZodObject<{
+    email: import("zod").ZodString;
+    role: import("zod").ZodEnum<{
+        admin: "admin";
+        member: "member";
+    }>;
+    projects: import("zod").ZodArray<import("zod").ZodString>;
+}, import("zod/v4/core").$strict>;
+export declare const memberRoleRequestSchema: import("zod").ZodObject<{
+    role: import("zod").ZodEnum<{
+        admin: "admin";
+        member: "member";
+    }>;
+}, import("zod/v4/core").$strict>;
+export declare const memberRemovalRequestSchema: import("zod").ZodObject<{
+    confirmed: import("zod").ZodLiteral<true>;
+}, import("zod/v4/core").$strict>;
+export declare const memberActionSchema: import("zod").ZodObject<{
+    completed: import("zod").ZodLiteral<true>;
+    id: import("zod").ZodUnion<readonly [import("zod").ZodString, import("zod").ZodString]>;
+    project: import("zod").ZodOptional<import("zod").ZodString>;
+}, import("zod/v4/core").$strict>;
+export type MemberView = z.infer<typeof memberViewSchema>;
+export type InvitationView = z.infer<typeof invitationViewSchema>;
+export declare const MEMBER_OPERATIONS: readonly [import("./operations.js").OperationDefinition & {
+    readonly id: "members.list";
+}, import("./operations.js").OperationDefinition & {
+    readonly id: "invitations.list";
+}, import("./operations.js").OperationDefinition & {
+    readonly id: "invitations.create";
+} & {
+    readonly request: import("zod").ZodObject<{
+        email: import("zod").ZodString;
+        role: import("zod").ZodEnum<{
+            admin: "admin";
+            member: "member";
+        }>;
+        projects: import("zod").ZodArray<import("zod").ZodString>;
+    }, import("zod/v4/core").$strict>;
+}, import("./operations.js").OperationDefinition & {
+    readonly id: "invitations.resend";
+} & {
+    readonly request: import("zod").ZodObject<{}, import("zod/v4/core").$strict>;
+}, import("./operations.js").OperationDefinition & {
+    readonly id: "invitations.revoke";
+} & {
+    readonly request: import("zod").ZodObject<{
+        confirmed: import("zod").ZodLiteral<true>;
+    }, import("zod/v4/core").$strict>;
+}, import("./operations.js").OperationDefinition & {
+    readonly id: "members.role";
+} & {
+    readonly request: import("zod").ZodObject<{
+        role: import("zod").ZodEnum<{
+            admin: "admin";
+            member: "member";
+        }>;
+    }, import("zod/v4/core").$strict>;
+}, import("./operations.js").OperationDefinition & {
+    readonly id: "members.remove";
+} & {
+    readonly request: import("zod").ZodObject<{
+        confirmed: import("zod").ZodLiteral<true>;
+    }, import("zod/v4/core").$strict>;
+}, import("./operations.js").OperationDefinition & {
+    readonly id: "projectmembers.add";
+} & {
+    readonly request: import("zod").ZodObject<{}, import("zod/v4/core").$strict>;
+}, import("./operations.js").OperationDefinition & {
+    readonly id: "projectmembers.remove";
+} & {
+    readonly request: import("zod").ZodObject<{
+        confirmed: import("zod").ZodLiteral<true>;
+    }, import("zod/v4/core").$strict>;
+}];