@leaflow/sdk 0.0.0-dev.29.g8fe6a71 → 0.0.0-dev.293.g578f043

package/dist/account/v1/generated/validators/consentListResponseBody.zod.js

@@ -0,0 +1,24 @@
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Leaflow Account API
+ * Everything that comes before a project is chosen: registration, the account itself, the projects the caller belongs to, and entry into one of them.
+ *
+ * ## Authentication
+ *
+ * Every request carries `Authorization: Bearer <access token>`, obtained by signing in at auth.leaflow.net. The endpoints that need no token say so.
+ *
+ * ## Entering a project
+ *
+ * 1. `GET /account/v1/projects` lists the projects the caller belongs to. The first call registers the account, taking the name and email address from the sign-in claims.
+ * 2. `POST /account/v1/projects/{projectId}/scoped-tokens` returns a scoped token for the project chosen.
+ * 3. Every other service is called with that scoped token.
+ *
+ * A scoped token cannot be renewed. Repeat step 2 for a new one, and sign in again at auth.leaflow.net once the access token itself has expired.
+ * OpenAPI spec version: 1.0.0
+ */
+import * as zod from "zod";
+import { ConsentResource } from "./consentResource.zod.js";
+export const ConsentListResponseBody = zod.strictObject({
+    items: zod.array(ConsentResource).nullable(),
+});

package/dist/account/v1/generated/validators/consentResource.zod.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Leaflow Account API
+ * Everything that comes before a project is chosen: registration, the account itself, the projects the caller belongs to, and entry into one of them.
+ *
+ * ## Authentication
+ *
+ * Every request carries `Authorization: Bearer <access token>`, obtained by signing in at auth.leaflow.net. The endpoints that need no token say so.
+ *
+ * ## Entering a project
+ *
+ * 1. `GET /account/v1/projects` lists the projects the caller belongs to. The first call registers the account, taking the name and email address from the sign-in claims.
+ * 2. `POST /account/v1/projects/{projectId}/scoped-tokens` returns a scoped token for the project chosen.
+ * 3. Every other service is called with that scoped token.
+ *
+ * A scoped token cannot be renewed. Repeat step 2 for a new one, and sign in again at auth.leaflow.net once the access token itself has expired.
+ * OpenAPI spec version: 1.0.0
+ */
+import * as zod from "zod";
+export declare const ConsentResource: zod.ZodObject<{
+    consented_at: zod.z.ZodISODateTime;
+    method: zod.ZodEnum<{
+        CLICKWRAP: "CLICKWRAP";
+        OFFLINE: "OFFLINE";
+    }>;
+    type: zod.ZodEnum<{
+        TERMS: "TERMS";
+        PRIVACY: "PRIVACY";
+        DPA: "DPA";
+    }>;
+    version: zod.ZodString;
+}, zod.z.core.$strict>;
+export type ConsentResource = zod.input<typeof ConsentResource>;
+export type ConsentResourceOutput = zod.output<typeof ConsentResource>;

package/dist/account/v1/generated/validators/consentResource.zod.js

@@ -0,0 +1,28 @@
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Leaflow Account API
+ * Everything that comes before a project is chosen: registration, the account itself, the projects the caller belongs to, and entry into one of them.
+ *
+ * ## Authentication
+ *
+ * Every request carries `Authorization: Bearer <access token>`, obtained by signing in at auth.leaflow.net. The endpoints that need no token say so.
+ *
+ * ## Entering a project
+ *
+ * 1. `GET /account/v1/projects` lists the projects the caller belongs to. The first call registers the account, taking the name and email address from the sign-in claims.
+ * 2. `POST /account/v1/projects/{projectId}/scoped-tokens` returns a scoped token for the project chosen.
+ * 3. Every other service is called with that scoped token.
+ *
+ * A scoped token cannot be renewed. Repeat step 2 for a new one, and sign in again at auth.leaflow.net once the access token itself has expired.
+ * OpenAPI spec version: 1.0.0
+ */
+import * as zod from "zod";
+export const ConsentResource = zod.strictObject({
+    consented_at: zod.iso.datetime({ offset: true }),
+    method: zod
+        .enum(["CLICKWRAP", "OFFLINE"])
+        .describe("OFFLINE is a consent given off the platform and recorded by an operator"),
+    type: zod.enum(["TERMS", "PRIVACY", "DPA"]),
+    version: zod.string(),
+});

package/dist/account/v1/generated/validators/countryOption.zod.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Leaflow Account API
+ * Everything that comes before a project is chosen: registration, the account itself, the projects the caller belongs to, and entry into one of them.
+ *
+ * ## Authentication
+ *
+ * Every request carries `Authorization: Bearer <access token>`, obtained by signing in at auth.leaflow.net. The endpoints that need no token say so.
+ *
+ * ## Entering a project
+ *
+ * 1. `GET /account/v1/projects` lists the projects the caller belongs to. The first call registers the account, taking the name and email address from the sign-in claims.
+ * 2. `POST /account/v1/projects/{projectId}/scoped-tokens` returns a scoped token for the project chosen.
+ * 3. Every other service is called with that scoped token.
+ *
+ * A scoped token cannot be renewed. Repeat step 2 for a new one, and sign in again at auth.leaflow.net once the access token itself has expired.
+ * OpenAPI spec version: 1.0.0
+ */
+import * as zod from "zod";
+export declare const CountryOption: zod.ZodObject<{
+    code: zod.ZodString;
+    name: zod.ZodString;
+}, zod.z.core.$strict>;
+export type CountryOption = zod.input<typeof CountryOption>;
+export type CountryOptionOutput = zod.output<typeof CountryOption>;

package/dist/account/v1/generated/validators/countryOption.zod.js

@@ -0,0 +1,24 @@
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Leaflow Account API
+ * Everything that comes before a project is chosen: registration, the account itself, the projects the caller belongs to, and entry into one of them.
+ *
+ * ## Authentication
+ *
+ * Every request carries `Authorization: Bearer <access token>`, obtained by signing in at auth.leaflow.net. The endpoints that need no token say so.
+ *
+ * ## Entering a project
+ *
+ * 1. `GET /account/v1/projects` lists the projects the caller belongs to. The first call registers the account, taking the name and email address from the sign-in claims.
+ * 2. `POST /account/v1/projects/{projectId}/scoped-tokens` returns a scoped token for the project chosen.
+ * 3. Every other service is called with that scoped token.
+ *
+ * A scoped token cannot be renewed. Repeat step 2 for a new one, and sign in again at auth.leaflow.net once the access token itself has expired.
+ * OpenAPI spec version: 1.0.0
+ */
+import * as zod from "zod";
+export const CountryOption = zod.strictObject({
+    code: zod.string().describe("ISO 3166-1 alpha-2, sent back unchanged at registration"),
+    name: zod.string().describe("The name rendered according to `Accept-Language`"),
+});

package/dist/account/v1/generated/validators/createProjectRequestBody.zod.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Leaflow Account API
+ * Everything that comes before a project is chosen: registration, the account itself, the projects the caller belongs to, and entry into one of them.
+ *
+ * ## Authentication
+ *
+ * Every request carries `Authorization: Bearer <access token>`, obtained by signing in at auth.leaflow.net. The endpoints that need no token say so.
+ *
+ * ## Entering a project
+ *
+ * 1. `GET /account/v1/projects` lists the projects the caller belongs to. The first call registers the account, taking the name and email address from the sign-in claims.
+ * 2. `POST /account/v1/projects/{projectId}/scoped-tokens` returns a scoped token for the project chosen.
+ * 3. Every other service is called with that scoped token.
+ *
+ * A scoped token cannot be renewed. Repeat step 2 for a new one, and sign in again at auth.leaflow.net once the access token itself has expired.
+ * OpenAPI spec version: 1.0.0
+ */
+import * as zod from "zod";
+export declare const createProjectRequestBodyDescriptionMax = 2000;
+export declare const createProjectRequestBodyNameMax = 128;
+export declare const CreateProjectRequestBody: zod.ZodObject<{
+    description: zod.ZodOptional<zod.ZodString>;
+    name: zod.ZodString;
+}, zod.z.core.$strict>;
+export type CreateProjectRequestBody = zod.input<typeof CreateProjectRequestBody>;
+export type CreateProjectRequestBodyOutput = zod.output<typeof CreateProjectRequestBody>;

package/dist/account/v1/generated/validators/createProjectRequestBody.zod.js

@@ -0,0 +1,26 @@
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Leaflow Account API
+ * Everything that comes before a project is chosen: registration, the account itself, the projects the caller belongs to, and entry into one of them.
+ *
+ * ## Authentication
+ *
+ * Every request carries `Authorization: Bearer <access token>`, obtained by signing in at auth.leaflow.net. The endpoints that need no token say so.
+ *
+ * ## Entering a project
+ *
+ * 1. `GET /account/v1/projects` lists the projects the caller belongs to. The first call registers the account, taking the name and email address from the sign-in claims.
+ * 2. `POST /account/v1/projects/{projectId}/scoped-tokens` returns a scoped token for the project chosen.
+ * 3. Every other service is called with that scoped token.
+ *
+ * A scoped token cannot be renewed. Repeat step 2 for a new one, and sign in again at auth.leaflow.net once the access token itself has expired.
+ * OpenAPI spec version: 1.0.0
+ */
+import * as zod from "zod";
+export const createProjectRequestBodyDescriptionMax = 2000;
+export const createProjectRequestBodyNameMax = 128;
+export const CreateProjectRequestBody = zod.strictObject({
+    description: zod.string().max(createProjectRequestBodyDescriptionMax).optional(),
+    name: zod.string().min(1).max(createProjectRequestBodyNameMax),
+});

package/dist/account/v1/generated/validators/cursorPagination.zod.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Leaflow Account API
+ * Everything that comes before a project is chosen: registration, the account itself, the projects the caller belongs to, and entry into one of them.
+ *
+ * ## Authentication
+ *
+ * Every request carries `Authorization: Bearer <access token>`, obtained by signing in at auth.leaflow.net. The endpoints that need no token say so.
+ *
+ * ## Entering a project
+ *
+ * 1. `GET /account/v1/projects` lists the projects the caller belongs to. The first call registers the account, taking the name and email address from the sign-in claims.
+ * 2. `POST /account/v1/projects/{projectId}/scoped-tokens` returns a scoped token for the project chosen.
+ * 3. Every other service is called with that scoped token.
+ *
+ * A scoped token cannot be renewed. Repeat step 2 for a new one, and sign in again at auth.leaflow.net once the access token itself has expired.
+ * OpenAPI spec version: 1.0.0
+ */
+import * as zod from "zod";
+export declare const CursorPagination: zod.ZodObject<{
+    page_size: zod.ZodInt;
+    next_cursor: zod.ZodOptional<zod.ZodNullable<zod.ZodString>>;
+}, zod.z.core.$strict>;
+export type CursorPagination = zod.input<typeof CursorPagination>;
+export type CursorPaginationOutput = zod.output<typeof CursorPagination>;

package/dist/account/v1/generated/validators/cursorPagination.zod.js

@@ -0,0 +1,26 @@
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Leaflow Account API
+ * Everything that comes before a project is chosen: registration, the account itself, the projects the caller belongs to, and entry into one of them.
+ *
+ * ## Authentication
+ *
+ * Every request carries `Authorization: Bearer <access token>`, obtained by signing in at auth.leaflow.net. The endpoints that need no token say so.
+ *
+ * ## Entering a project
+ *
+ * 1. `GET /account/v1/projects` lists the projects the caller belongs to. The first call registers the account, taking the name and email address from the sign-in claims.
+ * 2. `POST /account/v1/projects/{projectId}/scoped-tokens` returns a scoped token for the project chosen.
+ * 3. Every other service is called with that scoped token.
+ *
+ * A scoped token cannot be renewed. Repeat step 2 for a new one, and sign in again at auth.leaflow.net once the access token itself has expired.
+ * OpenAPI spec version: 1.0.0
+ */
+import * as zod from "zod";
+export const CursorPagination = zod
+    .strictObject({
+    page_size: zod.int().min(1),
+    next_cursor: zod.string().nullish(),
+})
+    .describe("Pagination metadata for keyset traversal. Pass next_cursor as cursor to read the following page; null means there is no following page.");

package/dist/account/v1/generated/validators/error.zod.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Leaflow Account API
+ * Everything that comes before a project is chosen: registration, the account itself, the projects the caller belongs to, and entry into one of them.
+ *
+ * ## Authentication
+ *
+ * Every request carries `Authorization: Bearer <access token>`, obtained by signing in at auth.leaflow.net. The endpoints that need no token say so.
+ *
+ * ## Entering a project
+ *
+ * 1. `GET /account/v1/projects` lists the projects the caller belongs to. The first call registers the account, taking the name and email address from the sign-in claims.
+ * 2. `POST /account/v1/projects/{projectId}/scoped-tokens` returns a scoped token for the project chosen.
+ * 3. Every other service is called with that scoped token.
+ *
+ * A scoped token cannot be renewed. Repeat step 2 for a new one, and sign in again at auth.leaflow.net once the access token itself has expired.
+ * OpenAPI spec version: 1.0.0
+ */
+import * as zod from "zod";
+export declare const Error: zod.ZodObject<{
+    code: zod.ZodOptional<zod.ZodString>;
+    message: zod.ZodString;
+    meta: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodUnknown>>;
+    status: zod.ZodInt;
+}, zod.z.core.$strict>;
+export type Error = zod.input<typeof Error>;
+export type ErrorOutput = zod.output<typeof Error>;

package/dist/account/v1/generated/validators/error.zod.js

@@ -0,0 +1,29 @@
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Leaflow Account API
+ * Everything that comes before a project is chosen: registration, the account itself, the projects the caller belongs to, and entry into one of them.
+ *
+ * ## Authentication
+ *
+ * Every request carries `Authorization: Bearer <access token>`, obtained by signing in at auth.leaflow.net. The endpoints that need no token say so.
+ *
+ * ## Entering a project
+ *
+ * 1. `GET /account/v1/projects` lists the projects the caller belongs to. The first call registers the account, taking the name and email address from the sign-in claims.
+ * 2. `POST /account/v1/projects/{projectId}/scoped-tokens` returns a scoped token for the project chosen.
+ * 3. Every other service is called with that scoped token.
+ *
+ * A scoped token cannot be renewed. Repeat step 2 for a new one, and sign in again at auth.leaflow.net once the access token itself has expired.
+ * OpenAPI spec version: 1.0.0
+ */
+import * as zod from "zod";
+export const Error = zod.strictObject({
+    code: zod.string().optional(),
+    message: zod.string(),
+    meta: zod
+        .record(zod.string(), zod.unknown())
+        .optional()
+        .describe("What a given `code` carries alongside the message. The keys depend on the code,\nand a client that does not recognise one ignores it."),
+    status: zod.int(),
+});

package/dist/account/v1/generated/validators/grantResource.zod.d.ts

@@ -0,0 +1,38 @@
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Leaflow Account API
+ * Everything that comes before a project is chosen: registration, the account itself, the projects the caller belongs to, and entry into one of them.
+ *
+ * ## Authentication
+ *
+ * Every request carries `Authorization: Bearer <access token>`, obtained by signing in at auth.leaflow.net. The endpoints that need no token say so.
+ *
+ * ## Entering a project
+ *
+ * 1. `GET /account/v1/projects` lists the projects the caller belongs to. The first call registers the account, taking the name and email address from the sign-in claims.
+ * 2. `POST /account/v1/projects/{projectId}/scoped-tokens` returns a scoped token for the project chosen.
+ * 3. Every other service is called with that scoped token.
+ *
+ * A scoped token cannot be renewed. Repeat step 2 for a new one, and sign in again at auth.leaflow.net once the access token itself has expired.
+ * OpenAPI spec version: 1.0.0
+ */
+import * as zod from "zod";
+export declare const GrantResource: zod.ZodObject<{
+    admin: zod.ZodBoolean;
+    owner: zod.ZodBoolean;
+    roles: zod.ZodNullable<zod.ZodArray<zod.ZodString>>;
+    rules: zod.ZodNullable<zod.ZodArray<zod.ZodObject<{
+        effect: zod.ZodEnum<{
+            allow: "allow";
+            deny: "deny";
+        }>;
+        permissions: zod.ZodNullable<zod.ZodArray<zod.ZodString>>;
+        resources: zod.ZodNullable<zod.ZodArray<zod.ZodObject<{
+            id: zod.ZodString;
+            type: zod.ZodString;
+        }, zod.z.core.$strict>>>;
+    }, zod.z.core.$strict>>>;
+}, zod.z.core.$strict>;
+export type GrantResource = zod.input<typeof GrantResource>;
+export type GrantResourceOutput = zod.output<typeof GrantResource>;

package/dist/account/v1/generated/validators/grantResource.zod.js

@@ -0,0 +1,30 @@
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Leaflow Account API
+ * Everything that comes before a project is chosen: registration, the account itself, the projects the caller belongs to, and entry into one of them.
+ *
+ * ## Authentication
+ *
+ * Every request carries `Authorization: Bearer <access token>`, obtained by signing in at auth.leaflow.net. The endpoints that need no token say so.
+ *
+ * ## Entering a project
+ *
+ * 1. `GET /account/v1/projects` lists the projects the caller belongs to. The first call registers the account, taking the name and email address from the sign-in claims.
+ * 2. `POST /account/v1/projects/{projectId}/scoped-tokens` returns a scoped token for the project chosen.
+ * 3. Every other service is called with that scoped token.
+ *
+ * A scoped token cannot be renewed. Repeat step 2 for a new one, and sign in again at auth.leaflow.net once the access token itself has expired.
+ * OpenAPI spec version: 1.0.0
+ */
+import * as zod from "zod";
+import { RuleResource } from "./ruleResource.zod.js";
+export const GrantResource = zod.strictObject({
+    admin: zod.boolean(),
+    owner: zod.boolean(),
+    roles: zod.array(zod.string()).nullable().describe("The role codes held, for display only"),
+    rules: zod
+        .array(RuleResource)
+        .nullable()
+        .describe("**Do not walk these rules to reach a decision.** They are compiled from every policy that applies to the caller, and serve to render what a user may do. Each request is decided by the service handling it"),
+});

package/dist/account/v1/generated/validators/identityVerificationResource.zod.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Leaflow Account API
+ * Everything that comes before a project is chosen: registration, the account itself, the projects the caller belongs to, and entry into one of them.
+ *
+ * ## Authentication
+ *
+ * Every request carries `Authorization: Bearer <access token>`, obtained by signing in at auth.leaflow.net. The endpoints that need no token say so.
+ *
+ * ## Entering a project
+ *
+ * 1. `GET /account/v1/projects` lists the projects the caller belongs to. The first call registers the account, taking the name and email address from the sign-in claims.
+ * 2. `POST /account/v1/projects/{projectId}/scoped-tokens` returns a scoped token for the project chosen.
+ * 3. Every other service is called with that scoped token.
+ *
+ * A scoped token cannot be renewed. Repeat step 2 for a new one, and sign in again at auth.leaflow.net once the access token itself has expired.
+ * OpenAPI spec version: 1.0.0
+ */
+import * as zod from "zod";
+export declare const IdentityVerificationResource: zod.ZodObject<{
+    reject_reason: zod.ZodString;
+    status: zod.ZodEnum<{
+        UNVERIFIED: "UNVERIFIED";
+        PENDING: "PENDING";
+        PERSONAL: "PERSONAL";
+        ENTERPRISE: "ENTERPRISE";
+        REJECTED: "REJECTED";
+    }>;
+    submitted_at: zod.ZodNullable<zod.z.ZodISODateTime>;
+    verified_at: zod.ZodNullable<zod.z.ZodISODateTime>;
+}, zod.z.core.$strict>;
+export type IdentityVerificationResource = zod.input<typeof IdentityVerificationResource>;
+export type IdentityVerificationResourceOutput = zod.output<typeof IdentityVerificationResource>;

package/dist/account/v1/generated/validators/identityVerificationResource.zod.js

@@ -0,0 +1,28 @@
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Leaflow Account API
+ * Everything that comes before a project is chosen: registration, the account itself, the projects the caller belongs to, and entry into one of them.
+ *
+ * ## Authentication
+ *
+ * Every request carries `Authorization: Bearer <access token>`, obtained by signing in at auth.leaflow.net. The endpoints that need no token say so.
+ *
+ * ## Entering a project
+ *
+ * 1. `GET /account/v1/projects` lists the projects the caller belongs to. The first call registers the account, taking the name and email address from the sign-in claims.
+ * 2. `POST /account/v1/projects/{projectId}/scoped-tokens` returns a scoped token for the project chosen.
+ * 3. Every other service is called with that scoped token.
+ *
+ * A scoped token cannot be renewed. Repeat step 2 for a new one, and sign in again at auth.leaflow.net once the access token itself has expired.
+ * OpenAPI spec version: 1.0.0
+ */
+import * as zod from "zod";
+export const IdentityVerificationResource = zod.strictObject({
+    reject_reason: zod.string(),
+    status: zod
+        .enum(["UNVERIFIED", "PENDING", "PERSONAL", "ENTERPRISE", "REJECTED"])
+        .describe("PERSONAL and ENTERPRISE are two kinds of subject rather than two levels, and are not ordered"),
+    submitted_at: zod.iso.datetime({ offset: true }).nullable(),
+    verified_at: zod.iso.datetime({ offset: true }).nullable(),
+});

package/dist/account/v1/generated/validators/invitationPreviewResource.zod.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Leaflow Account API
+ * Everything that comes before a project is chosen: registration, the account itself, the projects the caller belongs to, and entry into one of them.
+ *
+ * ## Authentication
+ *
+ * Every request carries `Authorization: Bearer <access token>`, obtained by signing in at auth.leaflow.net. The endpoints that need no token say so.
+ *
+ * ## Entering a project
+ *
+ * 1. `GET /account/v1/projects` lists the projects the caller belongs to. The first call registers the account, taking the name and email address from the sign-in claims.
+ * 2. `POST /account/v1/projects/{projectId}/scoped-tokens` returns a scoped token for the project chosen.
+ * 3. Every other service is called with that scoped token.
+ *
+ * A scoped token cannot be renewed. Repeat step 2 for a new one, and sign in again at auth.leaflow.net once the access token itself has expired.
+ * OpenAPI spec version: 1.0.0
+ */
+import * as zod from "zod";
+export declare const InvitationPreviewResource: zod.ZodObject<{
+    email_masked: zod.ZodString;
+    expires_at: zod.z.ZodISODateTime;
+    invited_by_name: zod.ZodString;
+    project_name: zod.ZodString;
+    role_names: zod.ZodNullable<zod.ZodArray<zod.ZodString>>;
+}, zod.z.core.$strict>;
+export type InvitationPreviewResource = zod.input<typeof InvitationPreviewResource>;
+export type InvitationPreviewResourceOutput = zod.output<typeof InvitationPreviewResource>;

package/dist/account/v1/generated/validators/invitationPreviewResource.zod.js

@@ -0,0 +1,36 @@
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Leaflow Account API
+ * Everything that comes before a project is chosen: registration, the account itself, the projects the caller belongs to, and entry into one of them.
+ *
+ * ## Authentication
+ *
+ * Every request carries `Authorization: Bearer <access token>`, obtained by signing in at auth.leaflow.net. The endpoints that need no token say so.
+ *
+ * ## Entering a project
+ *
+ * 1. `GET /account/v1/projects` lists the projects the caller belongs to. The first call registers the account, taking the name and email address from the sign-in claims.
+ * 2. `POST /account/v1/projects/{projectId}/scoped-tokens` returns a scoped token for the project chosen.
+ * 3. Every other service is called with that scoped token.
+ *
+ * A scoped token cannot be renewed. Repeat step 2 for a new one, and sign in again at auth.leaflow.net once the access token itself has expired.
+ * OpenAPI spec version: 1.0.0
+ */
+import * as zod from "zod";
+export const InvitationPreviewResource = zod
+    .strictObject({
+    email_masked: zod
+        .string()
+        .describe("The masked recipient address, enough for the recipient to recognise it"),
+    expires_at: zod.iso.datetime({ offset: true }),
+    invited_by_name: zod
+        .string()
+        .describe("The display name of the sender, or their email address when no name is set"),
+    project_name: zod.string(),
+    role_names: zod
+        .array(zod.string())
+        .nullable()
+        .describe("The display names of the roles granted on acceptance"),
+})
+    .describe("What an invitation states before it is accepted. It carries neither the invitation id nor the full recipient address; the invitations listed against the current account are returned by `list-my-invitations`");

package/dist/account/v1/generated/validators/invitationResource.zod.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Leaflow Account API
+ * Everything that comes before a project is chosen: registration, the account itself, the projects the caller belongs to, and entry into one of them.
+ *
+ * ## Authentication
+ *
+ * Every request carries `Authorization: Bearer <access token>`, obtained by signing in at auth.leaflow.net. The endpoints that need no token say so.
+ *
+ * ## Entering a project
+ *
+ * 1. `GET /account/v1/projects` lists the projects the caller belongs to. The first call registers the account, taking the name and email address from the sign-in claims.
+ * 2. `POST /account/v1/projects/{projectId}/scoped-tokens` returns a scoped token for the project chosen.
+ * 3. Every other service is called with that scoped token.
+ *
+ * A scoped token cannot be renewed. Repeat step 2 for a new one, and sign in again at auth.leaflow.net once the access token itself has expired.
+ * OpenAPI spec version: 1.0.0
+ */
+import * as zod from "zod";
+export declare const InvitationResource: zod.ZodObject<{
+    created_at: zod.z.ZodISODateTime;
+    email: zod.ZodString;
+    expires_at: zod.z.ZodISODateTime;
+    id: zod.ZodUUID;
+    invited_by: zod.ZodString;
+    invited_by_name: zod.ZodString;
+    project_id: zod.ZodUUID;
+    project_name: zod.ZodString;
+    roles: zod.ZodNullable<zod.ZodArray<zod.ZodString>>;
+    role_names: zod.ZodNullable<zod.ZodArray<zod.ZodString>>;
+}, zod.z.core.$strict>;
+export type InvitationResource = zod.input<typeof InvitationResource>;
+export type InvitationResourceOutput = zod.output<typeof InvitationResource>;

package/dist/account/v1/generated/validators/invitationResource.zod.js

@@ -0,0 +1,37 @@
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Leaflow Account API
+ * Everything that comes before a project is chosen: registration, the account itself, the projects the caller belongs to, and entry into one of them.
+ *
+ * ## Authentication
+ *
+ * Every request carries `Authorization: Bearer <access token>`, obtained by signing in at auth.leaflow.net. The endpoints that need no token say so.
+ *
+ * ## Entering a project
+ *
+ * 1. `GET /account/v1/projects` lists the projects the caller belongs to. The first call registers the account, taking the name and email address from the sign-in claims.
+ * 2. `POST /account/v1/projects/{projectId}/scoped-tokens` returns a scoped token for the project chosen.
+ * 3. Every other service is called with that scoped token.
+ *
+ * A scoped token cannot be renewed. Repeat step 2 for a new one, and sign in again at auth.leaflow.net once the access token itself has expired.
+ * OpenAPI spec version: 1.0.0
+ */
+import * as zod from "zod";
+export const InvitationResource = zod.strictObject({
+    created_at: zod.iso.datetime({ offset: true }),
+    email: zod.string(),
+    expires_at: zod.iso.datetime({ offset: true }),
+    id: zod.uuid(),
+    invited_by: zod.string().describe("The id of the account that issued the invitation"),
+    invited_by_name: zod
+        .string()
+        .describe("The display name of that account, or its email address when no name is set. It reflects the value at the time of reading rather than at the time the invitation was sent"),
+    project_id: zod.uuid(),
+    project_name: zod.string().describe("The name of the target project"),
+    roles: zod.array(zod.string()).nullable().describe("The role codes granted on acceptance"),
+    role_names: zod
+        .array(zod.string())
+        .nullable()
+        .describe("The display names of those codes, in the same order"),
+});

package/dist/account/v1/generated/validators/languageOption.zod.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Leaflow Account API
+ * Everything that comes before a project is chosen: registration, the account itself, the projects the caller belongs to, and entry into one of them.
+ *
+ * ## Authentication
+ *
+ * Every request carries `Authorization: Bearer <access token>`, obtained by signing in at auth.leaflow.net. The endpoints that need no token say so.
+ *
+ * ## Entering a project
+ *
+ * 1. `GET /account/v1/projects` lists the projects the caller belongs to. The first call registers the account, taking the name and email address from the sign-in claims.
+ * 2. `POST /account/v1/projects/{projectId}/scoped-tokens` returns a scoped token for the project chosen.
+ * 3. Every other service is called with that scoped token.
+ *
+ * A scoped token cannot be renewed. Repeat step 2 for a new one, and sign in again at auth.leaflow.net once the access token itself has expired.
+ * OpenAPI spec version: 1.0.0
+ */
+import * as zod from "zod";
+export declare const LanguageOption: zod.ZodObject<{
+    code: zod.ZodEnum<{
+        "zh-Hans": "zh-Hans";
+        "zh-Hant-HK": "zh-Hant-HK";
+        en: "en";
+    }>;
+    name: zod.ZodString;
+}, zod.z.core.$strict>;
+export type LanguageOption = zod.input<typeof LanguageOption>;
+export type LanguageOptionOutput = zod.output<typeof LanguageOption>;

package/dist/account/v1/generated/validators/languageOption.zod.js

@@ -0,0 +1,27 @@
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Leaflow Account API
+ * Everything that comes before a project is chosen: registration, the account itself, the projects the caller belongs to, and entry into one of them.
+ *
+ * ## Authentication
+ *
+ * Every request carries `Authorization: Bearer <access token>`, obtained by signing in at auth.leaflow.net. The endpoints that need no token say so.
+ *
+ * ## Entering a project
+ *
+ * 1. `GET /account/v1/projects` lists the projects the caller belongs to. The first call registers the account, taking the name and email address from the sign-in claims.
+ * 2. `POST /account/v1/projects/{projectId}/scoped-tokens` returns a scoped token for the project chosen.
+ * 3. Every other service is called with that scoped token.
+ *
+ * A scoped token cannot be renewed. Repeat step 2 for a new one, and sign in again at auth.leaflow.net once the access token itself has expired.
+ * OpenAPI spec version: 1.0.0
+ */
+import * as zod from "zod";
+import { Locale } from "./locale.zod.js";
+export const LanguageOption = zod.strictObject({
+    code: Locale,
+    name: zod
+        .string()
+        .describe("The endonym of the language, written in that language itself. It does not follow `Accept-Language`"),
+});