@leaflow/sdk 0.0.0-dev.29.g8fe6a71 → 0.0.0-dev.293.g578f043

package/dist/account/v1/generated/schemas.zod.js

@@ -0,0 +1,152 @@
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Leaflow Account API
+ * Everything that comes before a project is chosen: registration, the account itself, the projects the caller belongs to, and entry into one of them.
+ *
+ * ## Authentication
+ *
+ * Every request carries `Authorization: Bearer <access token>`, obtained by signing in at auth.leaflow.net. The endpoints that need no token say so.
+ *
+ * ## Entering a project
+ *
+ * 1. `GET /account/v1/projects` lists the projects the caller belongs to. The first call registers the account, taking the name and email address from the sign-in claims.
+ * 2. `POST /account/v1/projects/{projectId}/scoped-tokens` returns a scoped token for the project chosen.
+ * 3. Every other service is called with that scoped token.
+ *
+ * A scoped token cannot be renewed. Repeat step 2 for a new one, and sign in again at auth.leaflow.net once the access token itself has expired.
+ * OpenAPI spec version: 1.0.0
+ */
+import * as zod from "zod";
+import { AcceptConsentsRequestBody } from "./validators/acceptConsentsRequestBody.zod.js";
+import { AcceptInvitationByTokenRequestBody } from "./validators/acceptInvitationByTokenRequestBody.zod.js";
+import { CreateProjectRequestBody } from "./validators/createProjectRequestBody.zod.js";
+import { RegisterRequestBody } from "./validators/registerRequestBody.zod.js";
+import { SubmitIdentityVerificationRequestBody } from "./validators/submitIdentityVerificationRequestBody.zod.js";
+import { UpdateAccountRequestBody } from "./validators/updateAccountRequestBody.zod.js";
+/**
+ * Call this once a new version is published, which is whenever `pending_agreements` on `GET /account/v1/me` is not empty.
+ *
+ * Only the version currently in force is accepted; consenting to an earlier one answers 409. Submitting the same version twice is not an error and leaves the first record in place.
+ * @summary Consent to the current agreements
+ */
+export const AcceptAgreementsBody = AcceptConsentsRequestBody;
+/**
+ * Call this after signing in at auth.leaflow.net, carrying the access token. The name and email address are taken from the sign-in claims and are not read from the request body.
+ *
+ * `consents` must cover every agreement returned by `GET /account/v1/agreements`, at the same versions. A missing agreement answers 400 and a stale version answers 409, in which case fetch the list again. An account that already exists answers 409.
+ * @summary Register an account
+ */
+export const RegisterBody = RegisterRequestBody;
+/**
+ * The name and email address cannot be changed here. They come from the identity provider, and a change would be overwritten at the next sign-in.
+ * @summary Update the country and language of the current account
+ */
+export const UpdateAccountBody = UpdateAccountRequestBody;
+/**
+ * A submission awaiting review, and an account already verified, are both refused. A rejected submission may be corrected and sent again.
+ * @summary Submit identity verification
+ */
+export const SubmitIdentityVerificationBody = SubmitIdentityVerificationRequestBody;
+/**
+ * Matched against the email address of the current account.
+ * @summary List invitations addressed to the caller
+ */
+export const listMyInvitationsQueryLimitDefault = 50;
+export const listMyInvitationsQueryLimitMax = 200;
+export const listMyInvitationsQueryOffsetDefault = 0;
+export const listMyInvitationsQueryOffsetMin = 0;
+export const listMyInvitationsQueryOffsetMax = 10000;
+export const ListMyInvitationsQueryParams = zod.strictObject({
+    limit: zod
+        .int()
+        .min(1)
+        .max(listMyInvitationsQueryLimitMax)
+        .default(listMyInvitationsQueryLimitDefault)
+        .describe("Items returned in this page. Defaults to 50; at most 200."),
+    offset: zod
+        .int()
+        .min(listMyInvitationsQueryOffsetMin)
+        .max(listMyInvitationsQueryOffsetMax)
+        .default(listMyInvitationsQueryOffsetDefault)
+        .describe("Items to skip. Defaults to 0; at most 10000."),
+});
+/**
+ * No token required: whoever follows the link in an invitation email has usually not signed in, and may hold no account at all.
+ *
+ * The recipient address is masked (`t***@example.com`).
+ *
+ * A token that does not exist, one already redeemed, one revoked and one expired all answer the same 404.
+ * @summary Preview an invitation by its token
+ */
+export const previewInvitationByTokenQueryTokenMax = 128;
+export const PreviewInvitationByTokenQueryParams = zod.strictObject({
+    token: zod
+        .string()
+        .min(1)
+        .max(previewInvitationByTokenQueryTokenMax)
+        .describe("The token carried by the invitation link"),
+});
+/**
+ * A token that does not match, and an invitation that no longer stands, answer the same way.
+ * @summary Accept an invitation by its token
+ */
+export const AcceptInvitationByTokenBody = AcceptInvitationByTokenRequestBody;
+/**
+ * No token is required; the invitation is addressed to the email address of the current account.
+ * @summary Accept an invitation listed against the caller
+ */
+export const AcceptInvitationParams = zod.strictObject({
+    invitationId: zod.uuid(),
+});
+/**
+ * Deleted projects are excluded unless `status=DELETED` asks for them by name.
+ * @summary List the projects the caller belongs to
+ */
+export const listProjectsQueryLimitDefault = 50;
+export const listProjectsQueryLimitMax = 200;
+export const listProjectsQueryOffsetDefault = 0;
+export const listProjectsQueryOffsetMin = 0;
+export const listProjectsQueryOffsetMax = 10000;
+export const listProjectsQueryKeywordMax = 128;
+export const listProjectsQueryIncludeDeletedDefault = false;
+export const ListProjectsQueryParams = zod.strictObject({
+    limit: zod
+        .int()
+        .min(1)
+        .max(listProjectsQueryLimitMax)
+        .default(listProjectsQueryLimitDefault)
+        .describe("Items returned in this page. Defaults to 50; at most 200."),
+    offset: zod
+        .int()
+        .min(listProjectsQueryOffsetMin)
+        .max(listProjectsQueryOffsetMax)
+        .default(listProjectsQueryOffsetDefault)
+        .describe("Items to skip. Defaults to 0; at most 10000."),
+    keyword: zod
+        .string()
+        .max(listProjectsQueryKeywordMax)
+        .optional()
+        .describe("Matches against name or description"),
+    include_deleted: zod.boolean().default(listProjectsQueryIncludeDeletedDefault),
+});
+/**
+ * The caller becomes its owner. The project is created with the built-in `OWNER` and `ADMIN` roles and a `member` role carrying no permissions.
+ * @summary Create a project
+ */
+export const CreateProjectBody = CreateProjectRequestBody;
+/**
+ * Once a project has been chosen, exchange the access token for a scoped token for that project.
+ *
+ * **Only an access token issued by auth.leaflow.net is accepted; a scoped token is not.** Once a scoped token has expired, obtain a fresh access token at auth.leaflow.net and call this endpoint again.
+ *
+ * The exchange confirms that the account is usable, that the project exists, and that the caller is a member of it. A caller who is not a member obtains no token.
+ *
+ * A scoped token states identity only — the user and the project — and **carries no permissions**. Permissions are evaluated on every request, so a change of role takes effect immediately rather than at the next expiry.
+ *
+ * A project that is suspended, banned or being deleted still issues tokens; those states restrict writes, and the project remains readable.
+ * @summary Exchange the access token for a scoped token
+ */
+export const CreateScopedTokenParams = zod.strictObject({
+    projectId: zod.uuid(),
+});

package/dist/account/v1/generated/validators/acceptConsentsRequestBody.zod.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Leaflow Account API
+ * Everything that comes before a project is chosen: registration, the account itself, the projects the caller belongs to, and entry into one of them.
+ *
+ * ## Authentication
+ *
+ * Every request carries `Authorization: Bearer <access token>`, obtained by signing in at auth.leaflow.net. The endpoints that need no token say so.
+ *
+ * ## Entering a project
+ *
+ * 1. `GET /account/v1/projects` lists the projects the caller belongs to. The first call registers the account, taking the name and email address from the sign-in claims.
+ * 2. `POST /account/v1/projects/{projectId}/scoped-tokens` returns a scoped token for the project chosen.
+ * 3. Every other service is called with that scoped token.
+ *
+ * A scoped token cannot be renewed. Repeat step 2 for a new one, and sign in again at auth.leaflow.net once the access token itself has expired.
+ * OpenAPI spec version: 1.0.0
+ */
+import * as zod from "zod";
+export declare const AcceptConsentsRequestBody: zod.ZodObject<{
+    consents: zod.ZodNullable<zod.ZodArray<zod.ZodObject<{
+        type: zod.ZodEnum<{
+            TERMS: "TERMS";
+            PRIVACY: "PRIVACY";
+            DPA: "DPA";
+        }>;
+        version: zod.ZodString;
+    }, zod.z.core.$strict>>>;
+}, zod.z.core.$strict>;
+export type AcceptConsentsRequestBody = zod.input<typeof AcceptConsentsRequestBody>;
+export type AcceptConsentsRequestBodyOutput = zod.output<typeof AcceptConsentsRequestBody>;

package/dist/account/v1/generated/validators/acceptConsentsRequestBody.zod.js

@@ -0,0 +1,24 @@
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Leaflow Account API
+ * Everything that comes before a project is chosen: registration, the account itself, the projects the caller belongs to, and entry into one of them.
+ *
+ * ## Authentication
+ *
+ * Every request carries `Authorization: Bearer <access token>`, obtained by signing in at auth.leaflow.net. The endpoints that need no token say so.
+ *
+ * ## Entering a project
+ *
+ * 1. `GET /account/v1/projects` lists the projects the caller belongs to. The first call registers the account, taking the name and email address from the sign-in claims.
+ * 2. `POST /account/v1/projects/{projectId}/scoped-tokens` returns a scoped token for the project chosen.
+ * 3. Every other service is called with that scoped token.
+ *
+ * A scoped token cannot be renewed. Repeat step 2 for a new one, and sign in again at auth.leaflow.net once the access token itself has expired.
+ * OpenAPI spec version: 1.0.0
+ */
+import * as zod from "zod";
+import { ConsentBody } from "./consentBody.zod.js";
+export const AcceptConsentsRequestBody = zod.strictObject({
+    consents: zod.array(ConsentBody).nullable(),
+});

package/dist/account/v1/generated/validators/acceptInvitationByTokenRequestBody.zod.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Leaflow Account API
+ * Everything that comes before a project is chosen: registration, the account itself, the projects the caller belongs to, and entry into one of them.
+ *
+ * ## Authentication
+ *
+ * Every request carries `Authorization: Bearer <access token>`, obtained by signing in at auth.leaflow.net. The endpoints that need no token say so.
+ *
+ * ## Entering a project
+ *
+ * 1. `GET /account/v1/projects` lists the projects the caller belongs to. The first call registers the account, taking the name and email address from the sign-in claims.
+ * 2. `POST /account/v1/projects/{projectId}/scoped-tokens` returns a scoped token for the project chosen.
+ * 3. Every other service is called with that scoped token.
+ *
+ * A scoped token cannot be renewed. Repeat step 2 for a new one, and sign in again at auth.leaflow.net once the access token itself has expired.
+ * OpenAPI spec version: 1.0.0
+ */
+import * as zod from "zod";
+export declare const acceptInvitationByTokenRequestBodyTokenMax = 128;
+export declare const AcceptInvitationByTokenRequestBody: zod.ZodObject<{
+    token: zod.ZodString;
+}, zod.z.core.$strict>;
+export type AcceptInvitationByTokenRequestBody = zod.input<typeof AcceptInvitationByTokenRequestBody>;
+export type AcceptInvitationByTokenRequestBodyOutput = zod.output<typeof AcceptInvitationByTokenRequestBody>;

package/dist/account/v1/generated/validators/acceptInvitationByTokenRequestBody.zod.js

@@ -0,0 +1,28 @@
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Leaflow Account API
+ * Everything that comes before a project is chosen: registration, the account itself, the projects the caller belongs to, and entry into one of them.
+ *
+ * ## Authentication
+ *
+ * Every request carries `Authorization: Bearer <access token>`, obtained by signing in at auth.leaflow.net. The endpoints that need no token say so.
+ *
+ * ## Entering a project
+ *
+ * 1. `GET /account/v1/projects` lists the projects the caller belongs to. The first call registers the account, taking the name and email address from the sign-in claims.
+ * 2. `POST /account/v1/projects/{projectId}/scoped-tokens` returns a scoped token for the project chosen.
+ * 3. Every other service is called with that scoped token.
+ *
+ * A scoped token cannot be renewed. Repeat step 2 for a new one, and sign in again at auth.leaflow.net once the access token itself has expired.
+ * OpenAPI spec version: 1.0.0
+ */
+import * as zod from "zod";
+export const acceptInvitationByTokenRequestBodyTokenMax = 128;
+export const AcceptInvitationByTokenRequestBody = zod.strictObject({
+    token: zod
+        .string()
+        .min(1)
+        .max(acceptInvitationByTokenRequestBodyTokenMax)
+        .describe("The token carried by the invitation link"),
+});

package/dist/account/v1/generated/validators/acceptedInvitationResponseBody.zod.d.ts

@@ -0,0 +1,43 @@
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Leaflow Account API
+ * Everything that comes before a project is chosen: registration, the account itself, the projects the caller belongs to, and entry into one of them.
+ *
+ * ## Authentication
+ *
+ * Every request carries `Authorization: Bearer <access token>`, obtained by signing in at auth.leaflow.net. The endpoints that need no token say so.
+ *
+ * ## Entering a project
+ *
+ * 1. `GET /account/v1/projects` lists the projects the caller belongs to. The first call registers the account, taking the name and email address from the sign-in claims.
+ * 2. `POST /account/v1/projects/{projectId}/scoped-tokens` returns a scoped token for the project chosen.
+ * 3. Every other service is called with that scoped token.
+ *
+ * A scoped token cannot be renewed. Repeat step 2 for a new one, and sign in again at auth.leaflow.net once the access token itself has expired.
+ * OpenAPI spec version: 1.0.0
+ */
+import * as zod from "zod";
+export declare const AcceptedInvitationResponseBody: zod.ZodObject<{
+    project: zod.ZodObject<{
+        traits: zod.ZodArray<zod.ZodObject<{
+            key: zod.ZodString;
+            value: zod.ZodString;
+            effect: zod.ZodEnum<{
+                NoWrite: "NoWrite";
+                NoAccess: "NoAccess";
+            }>;
+            reason: zod.ZodString;
+        }, zod.z.core.$strict>>;
+        deletion_requested_at: zod.ZodNullable<zod.z.ZodISODateTime>;
+        created_at: zod.z.ZodISODateTime;
+        created_by: zod.ZodString;
+        deleted_at: zod.ZodNullable<zod.z.ZodISODateTime>;
+        description: zod.ZodString;
+        id: zod.ZodUUID;
+        name: zod.ZodString;
+        updated_at: zod.z.ZodISODateTime;
+    }, zod.z.core.$strict>;
+}, zod.z.core.$strict>;
+export type AcceptedInvitationResponseBody = zod.input<typeof AcceptedInvitationResponseBody>;
+export type AcceptedInvitationResponseBodyOutput = zod.output<typeof AcceptedInvitationResponseBody>;

package/dist/account/v1/generated/validators/acceptedInvitationResponseBody.zod.js

@@ -0,0 +1,24 @@
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Leaflow Account API
+ * Everything that comes before a project is chosen: registration, the account itself, the projects the caller belongs to, and entry into one of them.
+ *
+ * ## Authentication
+ *
+ * Every request carries `Authorization: Bearer <access token>`, obtained by signing in at auth.leaflow.net. The endpoints that need no token say so.
+ *
+ * ## Entering a project
+ *
+ * 1. `GET /account/v1/projects` lists the projects the caller belongs to. The first call registers the account, taking the name and email address from the sign-in claims.
+ * 2. `POST /account/v1/projects/{projectId}/scoped-tokens` returns a scoped token for the project chosen.
+ * 3. Every other service is called with that scoped token.
+ *
+ * A scoped token cannot be renewed. Repeat step 2 for a new one, and sign in again at auth.leaflow.net once the access token itself has expired.
+ * OpenAPI spec version: 1.0.0
+ */
+import * as zod from "zod";
+import { ProjectResource } from "./projectResource.zod.js";
+export const AcceptedInvitationResponseBody = zod.strictObject({
+    project: ProjectResource,
+});

package/dist/account/v1/generated/validators/accountResource.zod.d.ts

@@ -0,0 +1,48 @@
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Leaflow Account API
+ * Everything that comes before a project is chosen: registration, the account itself, the projects the caller belongs to, and entry into one of them.
+ *
+ * ## Authentication
+ *
+ * Every request carries `Authorization: Bearer <access token>`, obtained by signing in at auth.leaflow.net. The endpoints that need no token say so.
+ *
+ * ## Entering a project
+ *
+ * 1. `GET /account/v1/projects` lists the projects the caller belongs to. The first call registers the account, taking the name and email address from the sign-in claims.
+ * 2. `POST /account/v1/projects/{projectId}/scoped-tokens` returns a scoped token for the project chosen.
+ * 3. Every other service is called with that scoped token.
+ *
+ * A scoped token cannot be renewed. Repeat step 2 for a new one, and sign in again at auth.leaflow.net once the access token itself has expired.
+ * OpenAPI spec version: 1.0.0
+ */
+import * as zod from "zod";
+export declare const AccountResource: zod.ZodObject<{
+    created_at: zod.z.ZodISODateTime;
+    email: zod.ZodString;
+    email_verified_at: zod.ZodNullable<zod.z.ZodISODateTime>;
+    first_name: zod.ZodString;
+    id: zod.ZodString;
+    last_name: zod.ZodString;
+    country: zod.ZodOptional<zod.ZodString>;
+    locale: zod.ZodOptional<zod.ZodString>;
+    pending_agreements: zod.ZodNullable<zod.ZodArray<zod.ZodObject<{
+        effective_at: zod.z.ZodISODateTime;
+        type: zod.ZodEnum<{
+            TERMS: "TERMS";
+            PRIVACY: "PRIVACY";
+            DPA: "DPA";
+        }>;
+        url: zod.ZodString;
+        version: zod.ZodString;
+    }, zod.z.core.$strict>>>;
+    status: zod.ZodEnum<{
+        ACTIVE: "ACTIVE";
+        SUSPENDED: "SUSPENDED";
+        BANNED: "BANNED";
+        DELETING: "DELETING";
+    }>;
+}, zod.z.core.$strict>;
+export type AccountResource = zod.input<typeof AccountResource>;
+export type AccountResourceOutput = zod.output<typeof AccountResource>;

package/dist/account/v1/generated/validators/accountResource.zod.js

@@ -0,0 +1,39 @@
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Leaflow Account API
+ * Everything that comes before a project is chosen: registration, the account itself, the projects the caller belongs to, and entry into one of them.
+ *
+ * ## Authentication
+ *
+ * Every request carries `Authorization: Bearer <access token>`, obtained by signing in at auth.leaflow.net. The endpoints that need no token say so.
+ *
+ * ## Entering a project
+ *
+ * 1. `GET /account/v1/projects` lists the projects the caller belongs to. The first call registers the account, taking the name and email address from the sign-in claims.
+ * 2. `POST /account/v1/projects/{projectId}/scoped-tokens` returns a scoped token for the project chosen.
+ * 3. Every other service is called with that scoped token.
+ *
+ * A scoped token cannot be renewed. Repeat step 2 for a new one, and sign in again at auth.leaflow.net once the access token itself has expired.
+ * OpenAPI spec version: 1.0.0
+ */
+import * as zod from "zod";
+import { AgreementResource } from "./agreementResource.zod.js";
+export const AccountResource = zod.strictObject({
+    created_at: zod.iso.datetime({ offset: true }),
+    email: zod.string(),
+    email_verified_at: zod.iso.datetime({ offset: true }).nullable(),
+    first_name: zod.string().describe("Taken from the sign-in claims; may be empty"),
+    id: zod.string().describe("The subject issued by the identity provider"),
+    last_name: zod.string().describe("Taken from the sign-in claims; may be empty"),
+    country: zod
+        .string()
+        .optional()
+        .describe("ISO 3166-1 alpha-2. Empty on an account that registered before this was required; such an account continues to work and can set it from the settings page"),
+    locale: zod
+        .string()
+        .optional()
+        .describe("Empty while never set, in which case `Accept-Language` applies, and the platform default when that is absent as well"),
+    pending_agreements: zod.array(AgreementResource).nullable(),
+    status: zod.enum(["ACTIVE", "SUSPENDED", "BANNED", "DELETING"]),
+});

package/dist/account/v1/generated/validators/agreementListResponseBody.zod.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Leaflow Account API
+ * Everything that comes before a project is chosen: registration, the account itself, the projects the caller belongs to, and entry into one of them.
+ *
+ * ## Authentication
+ *
+ * Every request carries `Authorization: Bearer <access token>`, obtained by signing in at auth.leaflow.net. The endpoints that need no token say so.
+ *
+ * ## Entering a project
+ *
+ * 1. `GET /account/v1/projects` lists the projects the caller belongs to. The first call registers the account, taking the name and email address from the sign-in claims.
+ * 2. `POST /account/v1/projects/{projectId}/scoped-tokens` returns a scoped token for the project chosen.
+ * 3. Every other service is called with that scoped token.
+ *
+ * A scoped token cannot be renewed. Repeat step 2 for a new one, and sign in again at auth.leaflow.net once the access token itself has expired.
+ * OpenAPI spec version: 1.0.0
+ */
+import * as zod from "zod";
+export declare const AgreementListResponseBody: zod.ZodObject<{
+    items: zod.ZodNullable<zod.ZodArray<zod.ZodObject<{
+        effective_at: zod.z.ZodISODateTime;
+        type: zod.ZodEnum<{
+            TERMS: "TERMS";
+            PRIVACY: "PRIVACY";
+            DPA: "DPA";
+        }>;
+        url: zod.ZodString;
+        version: zod.ZodString;
+    }, zod.z.core.$strict>>>;
+}, zod.z.core.$strict>;
+export type AgreementListResponseBody = zod.input<typeof AgreementListResponseBody>;
+export type AgreementListResponseBodyOutput = zod.output<typeof AgreementListResponseBody>;

package/dist/account/v1/generated/validators/agreementListResponseBody.zod.js

@@ -0,0 +1,24 @@
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Leaflow Account API
+ * Everything that comes before a project is chosen: registration, the account itself, the projects the caller belongs to, and entry into one of them.
+ *
+ * ## Authentication
+ *
+ * Every request carries `Authorization: Bearer <access token>`, obtained by signing in at auth.leaflow.net. The endpoints that need no token say so.
+ *
+ * ## Entering a project
+ *
+ * 1. `GET /account/v1/projects` lists the projects the caller belongs to. The first call registers the account, taking the name and email address from the sign-in claims.
+ * 2. `POST /account/v1/projects/{projectId}/scoped-tokens` returns a scoped token for the project chosen.
+ * 3. Every other service is called with that scoped token.
+ *
+ * A scoped token cannot be renewed. Repeat step 2 for a new one, and sign in again at auth.leaflow.net once the access token itself has expired.
+ * OpenAPI spec version: 1.0.0
+ */
+import * as zod from "zod";
+import { AgreementResource } from "./agreementResource.zod.js";
+export const AgreementListResponseBody = zod.strictObject({
+    items: zod.array(AgreementResource).nullable(),
+});

package/dist/account/v1/generated/validators/agreementResource.zod.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Leaflow Account API
+ * Everything that comes before a project is chosen: registration, the account itself, the projects the caller belongs to, and entry into one of them.
+ *
+ * ## Authentication
+ *
+ * Every request carries `Authorization: Bearer <access token>`, obtained by signing in at auth.leaflow.net. The endpoints that need no token say so.
+ *
+ * ## Entering a project
+ *
+ * 1. `GET /account/v1/projects` lists the projects the caller belongs to. The first call registers the account, taking the name and email address from the sign-in claims.
+ * 2. `POST /account/v1/projects/{projectId}/scoped-tokens` returns a scoped token for the project chosen.
+ * 3. Every other service is called with that scoped token.
+ *
+ * A scoped token cannot be renewed. Repeat step 2 for a new one, and sign in again at auth.leaflow.net once the access token itself has expired.
+ * OpenAPI spec version: 1.0.0
+ */
+import * as zod from "zod";
+export declare const AgreementResource: zod.ZodObject<{
+    effective_at: zod.z.ZodISODateTime;
+    type: zod.ZodEnum<{
+        TERMS: "TERMS";
+        PRIVACY: "PRIVACY";
+        DPA: "DPA";
+    }>;
+    url: zod.ZodString;
+    version: zod.ZodString;
+}, zod.z.core.$strict>;
+export type AgreementResource = zod.input<typeof AgreementResource>;
+export type AgreementResourceOutput = zod.output<typeof AgreementResource>;

package/dist/account/v1/generated/validators/agreementResource.zod.js

@@ -0,0 +1,28 @@
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Leaflow Account API
+ * Everything that comes before a project is chosen: registration, the account itself, the projects the caller belongs to, and entry into one of them.
+ *
+ * ## Authentication
+ *
+ * Every request carries `Authorization: Bearer <access token>`, obtained by signing in at auth.leaflow.net. The endpoints that need no token say so.
+ *
+ * ## Entering a project
+ *
+ * 1. `GET /account/v1/projects` lists the projects the caller belongs to. The first call registers the account, taking the name and email address from the sign-in claims.
+ * 2. `POST /account/v1/projects/{projectId}/scoped-tokens` returns a scoped token for the project chosen.
+ * 3. Every other service is called with that scoped token.
+ *
+ * A scoped token cannot be renewed. Repeat step 2 for a new one, and sign in again at auth.leaflow.net once the access token itself has expired.
+ * OpenAPI spec version: 1.0.0
+ */
+import * as zod from "zod";
+export const AgreementResource = zod.strictObject({
+    effective_at: zod.iso
+        .datetime({ offset: true })
+        .describe("From this moment on, registration requires this version"),
+    type: zod.enum(["TERMS", "PRIVACY", "DPA"]),
+    url: zod.string().describe("Where the text is published"),
+    version: zod.string().describe("Send this value back unchanged when consenting"),
+});

package/dist/account/v1/generated/validators/consentBody.zod.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Leaflow Account API
+ * Everything that comes before a project is chosen: registration, the account itself, the projects the caller belongs to, and entry into one of them.
+ *
+ * ## Authentication
+ *
+ * Every request carries `Authorization: Bearer <access token>`, obtained by signing in at auth.leaflow.net. The endpoints that need no token say so.
+ *
+ * ## Entering a project
+ *
+ * 1. `GET /account/v1/projects` lists the projects the caller belongs to. The first call registers the account, taking the name and email address from the sign-in claims.
+ * 2. `POST /account/v1/projects/{projectId}/scoped-tokens` returns a scoped token for the project chosen.
+ * 3. Every other service is called with that scoped token.
+ *
+ * A scoped token cannot be renewed. Repeat step 2 for a new one, and sign in again at auth.leaflow.net once the access token itself has expired.
+ * OpenAPI spec version: 1.0.0
+ */
+import * as zod from "zod";
+export declare const consentBodyVersionMax = 32;
+export declare const ConsentBody: zod.ZodObject<{
+    type: zod.ZodEnum<{
+        TERMS: "TERMS";
+        PRIVACY: "PRIVACY";
+        DPA: "DPA";
+    }>;
+    version: zod.ZodString;
+}, zod.z.core.$strict>;
+export type ConsentBody = zod.input<typeof ConsentBody>;
+export type ConsentBodyOutput = zod.output<typeof ConsentBody>;

package/dist/account/v1/generated/validators/consentBody.zod.js

@@ -0,0 +1,25 @@
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Leaflow Account API
+ * Everything that comes before a project is chosen: registration, the account itself, the projects the caller belongs to, and entry into one of them.
+ *
+ * ## Authentication
+ *
+ * Every request carries `Authorization: Bearer <access token>`, obtained by signing in at auth.leaflow.net. The endpoints that need no token say so.
+ *
+ * ## Entering a project
+ *
+ * 1. `GET /account/v1/projects` lists the projects the caller belongs to. The first call registers the account, taking the name and email address from the sign-in claims.
+ * 2. `POST /account/v1/projects/{projectId}/scoped-tokens` returns a scoped token for the project chosen.
+ * 3. Every other service is called with that scoped token.
+ *
+ * A scoped token cannot be renewed. Repeat step 2 for a new one, and sign in again at auth.leaflow.net once the access token itself has expired.
+ * OpenAPI spec version: 1.0.0
+ */
+import * as zod from "zod";
+export const consentBodyVersionMax = 32;
+export const ConsentBody = zod.strictObject({
+    type: zod.enum(["TERMS", "PRIVACY", "DPA"]),
+    version: zod.string().min(1).max(consentBodyVersionMax),
+});

package/dist/account/v1/generated/validators/consentListResponseBody.zod.d.ts

@@ -0,0 +1,37 @@
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Leaflow Account API
+ * Everything that comes before a project is chosen: registration, the account itself, the projects the caller belongs to, and entry into one of them.
+ *
+ * ## Authentication
+ *
+ * Every request carries `Authorization: Bearer <access token>`, obtained by signing in at auth.leaflow.net. The endpoints that need no token say so.
+ *
+ * ## Entering a project
+ *
+ * 1. `GET /account/v1/projects` lists the projects the caller belongs to. The first call registers the account, taking the name and email address from the sign-in claims.
+ * 2. `POST /account/v1/projects/{projectId}/scoped-tokens` returns a scoped token for the project chosen.
+ * 3. Every other service is called with that scoped token.
+ *
+ * A scoped token cannot be renewed. Repeat step 2 for a new one, and sign in again at auth.leaflow.net once the access token itself has expired.
+ * OpenAPI spec version: 1.0.0
+ */
+import * as zod from "zod";
+export declare const ConsentListResponseBody: zod.ZodObject<{
+    items: zod.ZodNullable<zod.ZodArray<zod.ZodObject<{
+        consented_at: zod.z.ZodISODateTime;
+        method: zod.ZodEnum<{
+            CLICKWRAP: "CLICKWRAP";
+            OFFLINE: "OFFLINE";
+        }>;
+        type: zod.ZodEnum<{
+            TERMS: "TERMS";
+            PRIVACY: "PRIVACY";
+            DPA: "DPA";
+        }>;
+        version: zod.ZodString;
+    }, zod.z.core.$strict>>>;
+}, zod.z.core.$strict>;
+export type ConsentListResponseBody = zod.input<typeof ConsentListResponseBody>;
+export type ConsentListResponseBodyOutput = zod.output<typeof ConsentListResponseBody>;