@greensecurity/javascript-sdk 0.46.0 → 0.47.0-beta.1

package/src/models/components/authenticatesuccessresponse.ts

@@ -60,6 +60,10 @@ export type AuthenticateSuccessResponseInventoryManager = {};
  * and the login therefore has a SAML flow waiting to be finished.
  */
 export type AuthenticateSuccessResponse = {
+  /**
+   * Whether the user may manage zone devices (the `zone_devices.view` permission, which the Zone Device Managers role grants). Returned only when the caller requests their own record.
+   */
+  canManageZoneDevices?: boolean | undefined;
   /**
    * Whether the user is a `gatekeeper`, a special type of service user assigned to Kiosks and Apps to verify vendors using APIs that have some access to facility data.
    */
@@ -174,6 +178,7 @@ export const AuthenticateSuccessResponse$inboundSchema: z.ZodType<
   z.ZodTypeDef,
   unknown
 > = z.object({
+  can_manage_zone_devices: types.optional(types.boolean()),
   is_gatekeeper: types.optional(types.boolean()),
   success: types.boolean(),
   user: UserDetails$inboundSchema,
@@ -187,6 +192,7 @@ export const AuthenticateSuccessResponse$inboundSchema: z.ZodType<
   sso: types.optional(SsoContinuation$inboundSchema),
 }).transform((v) => {
   return remap$(v, {
+    "can_manage_zone_devices": "canManageZoneDevices",
     "is_gatekeeper": "isGatekeeper",
     "user_token": "userToken",
     "inventory_manager": "inventoryManager",

package/src/models/components/deviceauthorizationrequest.ts

@@ -0,0 +1,86 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import * as z from "zod/v3";
+import { remap as remap$ } from "../../lib/primitives.js";
+import { ClosedEnum } from "../../types/enums.js";
+
+/**
+ * The client starting the flow. `greensecurity-apps-cli` is the only registered client; any other value is `401` `invalid_client`.
+ */
+export const ClientId = {
+  GreensecurityAppsCli: "greensecurity-apps-cli",
+} as const;
+/**
+ * The client starting the flow. `greensecurity-apps-cli` is the only registered client; any other value is `401` `invalid_client`.
+ */
+export type ClientId = ClosedEnum<typeof ClientId>;
+
+/**
+ * Optional. `apps:develop` is the only scope, and the default when this is left out.
+ *
+ * @remarks
+ * Any other value is `400` `invalid_scope`.
+ */
+export const Scope = {
+  AppsDevelop: "apps:develop",
+} as const;
+/**
+ * Optional. `apps:develop` is the only scope, and the default when this is left out.
+ *
+ * @remarks
+ * Any other value is `400` `invalid_scope`.
+ */
+export type Scope = ClosedEnum<typeof Scope>;
+
+export type DeviceAuthorizationRequest = {
+  /**
+   * The client starting the flow. `greensecurity-apps-cli` is the only registered client; any other value is `401` `invalid_client`.
+   */
+  clientId: ClientId;
+  /**
+   * Optional. `apps:develop` is the only scope, and the default when this is left out.
+   *
+   * @remarks
+   * Any other value is `400` `invalid_scope`.
+   */
+  scope?: Scope | undefined;
+};
+
+/** @internal */
+export const ClientId$outboundSchema: z.ZodNativeEnum<typeof ClientId> = z
+  .nativeEnum(ClientId);
+
+/** @internal */
+export const Scope$outboundSchema: z.ZodNativeEnum<typeof Scope> = z.nativeEnum(
+  Scope,
+);
+
+/** @internal */
+export type DeviceAuthorizationRequest$Outbound = {
+  client_id: string;
+  scope?: string | undefined;
+};
+
+/** @internal */
+export const DeviceAuthorizationRequest$outboundSchema: z.ZodType<
+  DeviceAuthorizationRequest$Outbound,
+  z.ZodTypeDef,
+  DeviceAuthorizationRequest
+> = z.object({
+  clientId: ClientId$outboundSchema,
+  scope: Scope$outboundSchema.optional(),
+}).transform((v) => {
+  return remap$(v, {
+    clientId: "client_id",
+  });
+});
+
+export function deviceAuthorizationRequestToJSON(
+  deviceAuthorizationRequest: DeviceAuthorizationRequest,
+): string {
+  return JSON.stringify(
+    DeviceAuthorizationRequest$outboundSchema.parse(deviceAuthorizationRequest),
+  );
+}

package/src/models/components/deviceauthorizationresponse.ts

@@ -0,0 +1,72 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import * as z from "zod/v3";
+import { remap as remap$ } from "../../lib/primitives.js";
+import { safeParse } from "../../lib/schemas.js";
+import { Result as SafeParseResult } from "../../types/fp.js";
+import * as types from "../../types/primitives.js";
+import { SDKValidationError } from "../errors/sdkvalidationerror.js";
+
+/**
+ * RFC 8628 section 3.2.
+ */
+export type DeviceAuthorizationResponse = {
+  /**
+   * A secret the CLI polls `POST /oauth/token` with. Never show it to the user.
+   */
+  deviceCode: string;
+  /**
+   * The short code the user confirms on the approval screen.
+   */
+  userCode: string;
+  /**
+   * The approval screen, where the user enters `user_code` while signed in.
+   */
+  verificationUri: string;
+  /**
+   * `verification_uri` with `user_code` already filled in. Open it in a browser, or render it as a QR code.
+   */
+  verificationUriComplete: string;
+  /**
+   * Seconds until `device_code` and `user_code` expire.
+   */
+  expiresIn: number;
+  /**
+   * The minimum number of seconds to wait between polls of `POST /oauth/token`.
+   */
+  interval: number;
+};
+
+/** @internal */
+export const DeviceAuthorizationResponse$inboundSchema: z.ZodType<
+  DeviceAuthorizationResponse,
+  z.ZodTypeDef,
+  unknown
+> = z.object({
+  device_code: types.string(),
+  user_code: types.string(),
+  verification_uri: types.string(),
+  verification_uri_complete: types.string(),
+  expires_in: types.number(),
+  interval: types.number(),
+}).transform((v) => {
+  return remap$(v, {
+    "device_code": "deviceCode",
+    "user_code": "userCode",
+    "verification_uri": "verificationUri",
+    "verification_uri_complete": "verificationUriComplete",
+    "expires_in": "expiresIn",
+  });
+});
+
+export function deviceAuthorizationResponseFromJSON(
+  jsonString: string,
+): SafeParseResult<DeviceAuthorizationResponse, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => DeviceAuthorizationResponse$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'DeviceAuthorizationResponse' from JSON`,
+  );
+}

package/src/models/components/devicecountpair.ts

@@ -0,0 +1,63 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import * as z from "zod/v3";
+import { safeParse } from "../../lib/schemas.js";
+import { Result as SafeParseResult } from "../../types/fp.js";
+import * as types from "../../types/primitives.js";
+import { SDKValidationError } from "../errors/sdkvalidationerror.js";
+
+/**
+ * How many devices of one kind exist, and how many of those are active.
+ */
+export type DeviceCountPair = {
+  /**
+   * Every device of this kind.
+   */
+  total: number;
+  /**
+   * Devices that reported in recently. A gateway is active if it was seen in the last 5 minutes, and a kiosk is active if any of its devices pinged in the last 2 minutes.
+   */
+  active: number;
+};
+
+/** @internal */
+export const DeviceCountPair$inboundSchema: z.ZodType<
+  DeviceCountPair,
+  z.ZodTypeDef,
+  unknown
+> = z.object({
+  total: types.number(),
+  active: types.number(),
+});
+/** @internal */
+export type DeviceCountPair$Outbound = {
+  total: number;
+  active: number;
+};
+
+/** @internal */
+export const DeviceCountPair$outboundSchema: z.ZodType<
+  DeviceCountPair$Outbound,
+  z.ZodTypeDef,
+  DeviceCountPair
+> = z.object({
+  total: z.number().int(),
+  active: z.number().int(),
+});
+
+export function deviceCountPairToJSON(
+  deviceCountPair: DeviceCountPair,
+): string {
+  return JSON.stringify(DeviceCountPair$outboundSchema.parse(deviceCountPair));
+}
+export function deviceCountPairFromJSON(
+  jsonString: string,
+): SafeParseResult<DeviceCountPair, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => DeviceCountPair$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'DeviceCountPair' from JSON`,
+  );
+}

package/src/models/components/devicecounts.ts

@@ -0,0 +1,66 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import * as z from "zod/v3";
+import { safeParse } from "../../lib/schemas.js";
+import { Result as SafeParseResult } from "../../types/fp.js";
+import { SDKValidationError } from "../errors/sdkvalidationerror.js";
+import {
+  DeviceCountPair,
+  DeviceCountPair$inboundSchema,
+  DeviceCountPair$Outbound,
+  DeviceCountPair$outboundSchema,
+} from "./devicecountpair.js";
+
+/**
+ * Gateway and iPad kiosk totals, counted the same way as the zone devices inventory.
+ */
+export type DeviceCounts = {
+  /**
+   * How many devices of one kind exist, and how many of those are active.
+   */
+  gateways: DeviceCountPair;
+  /**
+   * How many devices of one kind exist, and how many of those are active.
+   */
+  kiosks: DeviceCountPair;
+};
+
+/** @internal */
+export const DeviceCounts$inboundSchema: z.ZodType<
+  DeviceCounts,
+  z.ZodTypeDef,
+  unknown
+> = z.object({
+  gateways: DeviceCountPair$inboundSchema,
+  kiosks: DeviceCountPair$inboundSchema,
+});
+/** @internal */
+export type DeviceCounts$Outbound = {
+  gateways: DeviceCountPair$Outbound;
+  kiosks: DeviceCountPair$Outbound;
+};
+
+/** @internal */
+export const DeviceCounts$outboundSchema: z.ZodType<
+  DeviceCounts$Outbound,
+  z.ZodTypeDef,
+  DeviceCounts
+> = z.object({
+  gateways: DeviceCountPair$outboundSchema,
+  kiosks: DeviceCountPair$outboundSchema,
+});
+
+export function deviceCountsToJSON(deviceCounts: DeviceCounts): string {
+  return JSON.stringify(DeviceCounts$outboundSchema.parse(deviceCounts));
+}
+export function deviceCountsFromJSON(
+  jsonString: string,
+): SafeParseResult<DeviceCounts, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => DeviceCounts$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'DeviceCounts' from JSON`,
+  );
+}

package/src/models/components/devsession.ts

@@ -0,0 +1,111 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import * as z from "zod/v3";
+import { remap as remap$ } from "../../lib/primitives.js";
+import { safeParse } from "../../lib/schemas.js";
+import { Result as SafeParseResult } from "../../types/fp.js";
+import * as types from "../../types/primitives.js";
+import { SDKValidationError } from "../errors/sdkvalidationerror.js";
+import {
+  AppDevManifest,
+  AppDevManifest$inboundSchema,
+} from "./appdevmanifest.js";
+import { EcPublicJwk, EcPublicJwk$inboundSchema } from "./ecpublicjwk.js";
+
+/**
+ * A registered dev session: the host shows the developer's local build instead of the
+ *
+ * @remarks
+ * published bundle, to that developer only. It lasts 12 hours, and counts as inactive
+ * after 2 minutes without a heartbeat.
+ */
+export type DevSession = {
+  /**
+   * The session's public id, used in preview links. URL-safe, at most 64 characters.
+   */
+  id: string;
+  appId: number;
+  activationId: number;
+  developerUserId: number;
+  /**
+   * When the session expires, in milliseconds since the Unix epoch.
+   */
+  expiresAt: number;
+  origin: string;
+  /**
+   * An ECDSA P-256 public key as a JWK (RFC 7517), as `crypto.subtle.exportKey("jwk", …)`
+   *
+   * @remarks
+   * returns it for the public half of the key pair. Only the members listed here are
+   * accepted: a key with any other member, including a private one such as `d`, is refused
+   * with `422`, as is a point that is not on the P-256 curve. The session stores, and returns,
+   * only `kty`, `crv`, `x` and `y`.
+   */
+  publicKeyJwk: EcPublicJwk;
+  /**
+   * The manifest a dev session runs: `green-app.json` with `green-app.dev.json` merged over
+   *
+   * @remarks
+   * it. It must satisfy the `AppManifest` schema, with one view per viewport and the
+   * 4096-character CSP budget, except that CSP sources may also be local http origins or
+   * paths under the session's `origin`. `id` must be the app in the path, and the whole
+   * manifest is at most 128 KB as JSON.
+   *
+   * A dev session previews `ui_extensions.views`, `ui_extensions.csp` and `constants`.
+   * Everything else must match the app as it is published:
+   *
+   * - `permissions`, `post_install_action`, `ui_extensions.bundle` and
+   *   `ui_extensions.routes` must equal the published values. An app that has published
+   *   none may not declare any. For `post_install_action`, send exactly what you
+   *   published, or leave it out if you left it out there. `permissions` may be listed in
+   *   any order, but `routes` must be in the published order.
+   * - `name`, `icon`, `short_description`, `configuration_instructions`,
+   *   `support_instructions` and `version` must equal the published values once the app
+   *   has published a manifest with a `version`. Until then a dev session may use its own.
+   *
+   * Any of these failures is a `422` whose `error` names each field that differs, for
+   * example ``Invalid manifest: permissions cannot differ from the published manifest in a
+   * dev session (added: vendors.update; removed: vendors.view; purpose changed:
+   * facilities.view); publish it with `gs-apps upload` first``. For `permissions`, the
+   * message lists the permissions you added, the ones you removed, and the ones whose
+   * `purpose` changed. The response's `errors` lists the same messages one by one (see
+   * `DevSessionErrorResponse`). Publish the change with `gs-apps upload` first.
+   */
+  manifest: AppDevManifest;
+};
+
+/** @internal */
+export const DevSession$inboundSchema: z.ZodType<
+  DevSession,
+  z.ZodTypeDef,
+  unknown
+> = z.object({
+  id: types.string(),
+  app_id: types.number(),
+  activation_id: types.number(),
+  developer_user_id: types.number(),
+  expires_at: types.number(),
+  origin: types.string(),
+  public_key_jwk: EcPublicJwk$inboundSchema,
+  manifest: AppDevManifest$inboundSchema,
+}).transform((v) => {
+  return remap$(v, {
+    "app_id": "appId",
+    "activation_id": "activationId",
+    "developer_user_id": "developerUserId",
+    "expires_at": "expiresAt",
+    "public_key_jwk": "publicKeyJwk",
+  });
+});
+
+export function devSessionFromJSON(
+  jsonString: string,
+): SafeParseResult<DevSession, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => DevSession$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'DevSession' from JSON`,
+  );
+}

package/src/models/components/devsessioncreate.ts

@@ -0,0 +1,126 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import * as z from "zod/v3";
+import { remap as remap$ } from "../../lib/primitives.js";
+import {
+  AppDevManifest,
+  AppDevManifest$Outbound,
+  AppDevManifest$outboundSchema,
+} from "./appdevmanifest.js";
+import {
+  EcPublicJwk,
+  EcPublicJwk$Outbound,
+  EcPublicJwk$outboundSchema,
+} from "./ecpublicjwk.js";
+
+export type DevSessionCreate = {
+  /**
+   * The manifest a dev session runs: `green-app.json` with `green-app.dev.json` merged over
+   *
+   * @remarks
+   * it. It must satisfy the `AppManifest` schema, with one view per viewport and the
+   * 4096-character CSP budget, except that CSP sources may also be local http origins or
+   * paths under the session's `origin`. `id` must be the app in the path, and the whole
+   * manifest is at most 128 KB as JSON.
+   *
+   * A dev session previews `ui_extensions.views`, `ui_extensions.csp` and `constants`.
+   * Everything else must match the app as it is published:
+   *
+   * - `permissions`, `post_install_action`, `ui_extensions.bundle` and
+   *   `ui_extensions.routes` must equal the published values. An app that has published
+   *   none may not declare any. For `post_install_action`, send exactly what you
+   *   published, or leave it out if you left it out there. `permissions` may be listed in
+   *   any order, but `routes` must be in the published order.
+   * - `name`, `icon`, `short_description`, `configuration_instructions`,
+   *   `support_instructions` and `version` must equal the published values once the app
+   *   has published a manifest with a `version`. Until then a dev session may use its own.
+   *
+   * Any of these failures is a `422` whose `error` names each field that differs, for
+   * example ``Invalid manifest: permissions cannot differ from the published manifest in a
+   * dev session (added: vendors.update; removed: vendors.view; purpose changed:
+   * facilities.view); publish it with `gs-apps upload` first``. For `permissions`, the
+   * message lists the permissions you added, the ones you removed, and the ones whose
+   * `purpose` changed. The response's `errors` lists the same messages one by one (see
+   * `DevSessionErrorResponse`). Publish the change with `gs-apps upload` first.
+   */
+  manifest: AppDevManifest;
+  /**
+   * Origin of the CLI's dev server: a scheme, a host and a port, with no path, query,
+   *
+   * @remarks
+   * credentials or trailing slash.
+   *
+   * - `http://` only to `localhost`, `127.0.0.1`, the Android emulator's `10.0.2.2` or a
+   *   private RFC 1918 address (`10.0.0.0/8`, `172.16.0.0/12`, `192.168.0.0/16`), and
+   *   always with an explicit port (1-65535, no leading zeros).
+   * - `https://` to a DNS name written in lowercase, such as a tunnel, with an optional
+   *   port. An IP address is refused: the last label must be letters, or an IDN
+   *   `xn--` label.
+   */
+  origin: string;
+  /**
+   * A random capability token the dev server requires as `Authorization: Bearer` on every
+   *
+   * @remarks
+   * route: 32 to 512 base64url or base64 characters. Only the host of the developer who
+   * owns the session receives it. It is encrypted at rest and never logged, and a token
+   * already used by any session is refused with `409`, so generate a new one each time.
+   */
+  serverToken: string;
+  /**
+   * An ECDSA P-256 public key as a JWK (RFC 7517), as `crypto.subtle.exportKey("jwk", …)`
+   *
+   * @remarks
+   * returns it for the public half of the key pair. Only the members listed here are
+   * accepted: a key with any other member, including a private one such as `d`, is refused
+   * with `422`, as is a point that is not on the P-256 curve. The session stores, and returns,
+   * only `kty`, `crv`, `x` and `y`.
+   */
+  publicKeyJwk: EcPublicJwk;
+  /**
+   * The activation to preview under. It must be an installation of this app that covers
+   *
+   * @remarks
+   * you (`403` otherwise). Optional when exactly one does; when several do and it is
+   * left out, the request is refused with `422`.
+   */
+  activationId?: number | undefined;
+};
+
+/** @internal */
+export type DevSessionCreate$Outbound = {
+  manifest: AppDevManifest$Outbound;
+  origin: string;
+  server_token: string;
+  public_key_jwk: EcPublicJwk$Outbound;
+  activation_id?: number | undefined;
+};
+
+/** @internal */
+export const DevSessionCreate$outboundSchema: z.ZodType<
+  DevSessionCreate$Outbound,
+  z.ZodTypeDef,
+  DevSessionCreate
+> = z.object({
+  manifest: AppDevManifest$outboundSchema,
+  origin: z.string(),
+  serverToken: z.string(),
+  publicKeyJwk: EcPublicJwk$outboundSchema,
+  activationId: z.number().int().optional(),
+}).transform((v) => {
+  return remap$(v, {
+    serverToken: "server_token",
+    publicKeyJwk: "public_key_jwk",
+    activationId: "activation_id",
+  });
+});
+
+export function devSessionCreateToJSON(
+  devSessionCreate: DevSessionCreate,
+): string {
+  return JSON.stringify(
+    DevSessionCreate$outboundSchema.parse(devSessionCreate),
+  );
+}

package/src/models/components/ecpublicjwk.ts

@@ -0,0 +1,140 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import * as z from "zod/v3";
+import { remap as remap$ } from "../../lib/primitives.js";
+import { safeParse } from "../../lib/schemas.js";
+import { ClosedEnum } from "../../types/enums.js";
+import { Result as SafeParseResult } from "../../types/fp.js";
+import * as types from "../../types/primitives.js";
+import { SDKValidationError } from "../errors/sdkvalidationerror.js";
+
+/**
+ * If present, must be `ES256`.
+ */
+export const Alg = {
+  Es256: "ES256",
+} as const;
+/**
+ * If present, must be `ES256`.
+ */
+export type Alg = ClosedEnum<typeof Alg>;
+
+export const KeyOps = {
+  Verify: "verify",
+} as const;
+export type KeyOps = ClosedEnum<typeof KeyOps>;
+
+/**
+ * An ECDSA P-256 public key as a JWK (RFC 7517), as `crypto.subtle.exportKey("jwk", …)`
+ *
+ * @remarks
+ * returns it for the public half of the key pair. Only the members listed here are
+ * accepted: a key with any other member, including a private one such as `d`, is refused
+ * with `422`, as is a point that is not on the P-256 curve. The session stores, and returns,
+ * only `kty`, `crv`, `x` and `y`.
+ */
+export type EcPublicJwk = {
+  kty: "EC";
+  crv: "P-256";
+  /**
+   * The x coordinate, 32 bytes as unpadded base64url.
+   */
+  x: string;
+  /**
+   * The y coordinate, 32 bytes as unpadded base64url.
+   */
+  y: string;
+  /**
+   * If present, must be `ES256`.
+   */
+  alg?: Alg | undefined;
+  /**
+   * If present, may only contain `verify`.
+   */
+  keyOps?: Array<KeyOps> | undefined;
+  ext?: boolean | undefined;
+  kid?: string | undefined;
+  use?: string | undefined;
+};
+
+/** @internal */
+export const Alg$inboundSchema: z.ZodNativeEnum<typeof Alg> = z.nativeEnum(Alg);
+/** @internal */
+export const Alg$outboundSchema: z.ZodNativeEnum<typeof Alg> =
+  Alg$inboundSchema;
+
+/** @internal */
+export const KeyOps$inboundSchema: z.ZodNativeEnum<typeof KeyOps> = z
+  .nativeEnum(KeyOps);
+/** @internal */
+export const KeyOps$outboundSchema: z.ZodNativeEnum<typeof KeyOps> =
+  KeyOps$inboundSchema;
+
+/** @internal */
+export const EcPublicJwk$inboundSchema: z.ZodType<
+  EcPublicJwk,
+  z.ZodTypeDef,
+  unknown
+> = z.object({
+  kty: types.literal("EC"),
+  crv: types.literal("P-256"),
+  x: types.string(),
+  y: types.string(),
+  alg: types.optional(Alg$inboundSchema),
+  key_ops: types.optional(z.array(KeyOps$inboundSchema)),
+  ext: types.optional(types.boolean()),
+  kid: types.optional(types.string()),
+  use: types.optional(types.string()),
+}).transform((v) => {
+  return remap$(v, {
+    "key_ops": "keyOps",
+  });
+});
+/** @internal */
+export type EcPublicJwk$Outbound = {
+  kty: "EC";
+  crv: "P-256";
+  x: string;
+  y: string;
+  alg?: string | undefined;
+  key_ops?: Array<string> | undefined;
+  ext?: boolean | undefined;
+  kid?: string | undefined;
+  use?: string | undefined;
+};
+
+/** @internal */
+export const EcPublicJwk$outboundSchema: z.ZodType<
+  EcPublicJwk$Outbound,
+  z.ZodTypeDef,
+  EcPublicJwk
+> = z.object({
+  kty: z.literal("EC"),
+  crv: z.literal("P-256"),
+  x: z.string(),
+  y: z.string(),
+  alg: Alg$outboundSchema.optional(),
+  keyOps: z.array(KeyOps$outboundSchema).optional(),
+  ext: z.boolean().optional(),
+  kid: z.string().optional(),
+  use: z.string().optional(),
+}).transform((v) => {
+  return remap$(v, {
+    keyOps: "key_ops",
+  });
+});
+
+export function ecPublicJwkToJSON(ecPublicJwk: EcPublicJwk): string {
+  return JSON.stringify(EcPublicJwk$outboundSchema.parse(ecPublicJwk));
+}
+export function ecPublicJwkFromJSON(
+  jsonString: string,
+): SafeParseResult<EcPublicJwk, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => EcPublicJwk$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'EcPublicJwk' from JSON`,
+  );
+}