@leaflow/sdk 0.176.0 → 0.178.0

package/dist/iam/v1/generated/functions.js

@@ -758,3 +758,154 @@ export const revokeSshKey = async (keyId, options, fetchFn) => {
     const data = body ? JSON.parse(body) : {};
     return { data, status: res.status, headers: res.headers };
 };
+export const getListApplicationsUrl = (params) => {
+    const normalizedParams = new URLSearchParams();
+    Object.entries(params || {}).forEach(([key, value]) => {
+        if (value !== undefined) {
+            normalizedParams.append(key, value === null ? "null" : String(value));
+        }
+    });
+    const stringifiedParams = normalizedParams.toString();
+    return stringifiedParams.length > 0
+        ? `https://iam.leaflow.cloud/api/v1/applications?${stringifiedParams}`
+        : `https://iam.leaflow.cloud/api/v1/applications`;
+};
+/**
+ * Disabled applications are listed. Archived applications are omitted unless
+ * `include_archived` is true. An application that is still being created is not listed.
+ * @summary List the applications of this project
+ */
+export const listApplications = async (params, options, fetchFn) => {
+    const res = await (fetchFn ?? fetch)(getListApplicationsUrl(params), {
+        ...options,
+        method: "GET",
+    });
+    const body = [204, 205, 304].includes(res.status) ? null : await res.text();
+    const data = body ? JSON.parse(body) : {};
+    return { data, status: res.status, headers: res.headers };
+};
+export const getCreateApplicationUrl = () => {
+    return `https://iam.leaflow.cloud/api/v1/applications`;
+};
+/**
+ * Creates an OIDC client for an application of this project. Applications authenticate
+ * against `https://auth.leaflow.net/realms/user`.
+ *
+ * The `secret` is present only for a confidential application, and only in this response.
+ * It is not stored and cannot be read again; use `:rotateSecret` to obtain a new one.
+ *
+ * Any account of this platform may sign in to the application. Membership of this project
+ * is confirmed only when a token is exchanged for a scoped token.
+ * @summary Create an application
+ */
+export const createApplication = async (createApplicationRequestBody, options, fetchFn) => {
+    const getHeaders = (h) => {
+        if (!h)
+            return {};
+        if (h instanceof Headers)
+            return Object.fromEntries(h.entries());
+        if (Symbol.iterator in h) {
+            return Object.fromEntries(Array.from(h, (entry) => Array.from(entry)));
+        }
+        const headers = {};
+        for (const [name, value] of Object.entries(h)) {
+            if (value !== undefined)
+                headers[name] = value;
+        }
+        return headers;
+    };
+    const res = await (fetchFn ?? fetch)(getCreateApplicationUrl(), {
+        ...options,
+        method: "POST",
+        headers: { "Content-Type": "application/json", ...getHeaders(options?.headers) },
+        body: JSON.stringify(createApplicationRequestBody),
+    });
+    const body = [204, 205, 304].includes(res.status) ? null : await res.text();
+    const data = body ? JSON.parse(body) : {};
+    return { data, status: res.status, headers: res.headers };
+};
+export const getGetApplicationUrl = (applicationId) => {
+    return `https://iam.leaflow.cloud/api/v1/applications/${encodeURIComponent(String(applicationId))}`;
+};
+/**
+ * An application that has been deleted is still returned, with `status` `ARCHIVED`.
+ * @summary Get an application
+ */
+export const getApplication = async (applicationId, options, fetchFn) => {
+    const res = await (fetchFn ?? fetch)(getGetApplicationUrl(applicationId), {
+        ...options,
+        method: "GET",
+    });
+    const body = [204, 205, 304].includes(res.status) ? null : await res.text();
+    const data = body ? JSON.parse(body) : {};
+    return { data, status: res.status, headers: res.headers };
+};
+export const getUpdateApplicationUrl = (applicationId) => {
+    return `https://iam.leaflow.cloud/api/v1/applications/${encodeURIComponent(String(applicationId))}`;
+};
+/**
+ * Only the name and the redirect URIs can change. The type and `client_id` never change.
+ *
+ * An application that is disabled or deleted cannot be updated.
+ * @summary Update an application
+ */
+export const updateApplication = async (applicationId, updateApplicationRequestBody, options, fetchFn) => {
+    const getHeaders = (h) => {
+        if (!h)
+            return {};
+        if (h instanceof Headers)
+            return Object.fromEntries(h.entries());
+        if (Symbol.iterator in h) {
+            return Object.fromEntries(Array.from(h, (entry) => Array.from(entry)));
+        }
+        const headers = {};
+        for (const [name, value] of Object.entries(h)) {
+            if (value !== undefined)
+                headers[name] = value;
+        }
+        return headers;
+    };
+    const res = await (fetchFn ?? fetch)(getUpdateApplicationUrl(applicationId), {
+        ...options,
+        method: "PATCH",
+        headers: { "Content-Type": "application/json", ...getHeaders(options?.headers) },
+        body: JSON.stringify(updateApplicationRequestBody),
+    });
+    const body = [204, 205, 304].includes(res.status) ? null : await res.text();
+    const data = body ? JSON.parse(body) : {};
+    return { data, status: res.status, headers: res.headers };
+};
+export const getDeleteApplicationUrl = (applicationId) => {
+    return `https://iam.leaflow.cloud/api/v1/applications/${encodeURIComponent(String(applicationId))}`;
+};
+/**
+ * The application is removed from the identity provider and its row is retained with
+ * `status` `ARCHIVED`. Repeating the call returns the same resource.
+ * @summary Delete an application
+ */
+export const deleteApplication = async (applicationId, options, fetchFn) => {
+    const res = await (fetchFn ?? fetch)(getDeleteApplicationUrl(applicationId), {
+        ...options,
+        method: "DELETE",
+    });
+    const body = [204, 205, 304].includes(res.status) ? null : await res.text();
+    const data = body ? JSON.parse(body) : {};
+    return { data, status: res.status, headers: res.headers };
+};
+export const getRotateApplicationSecretUrl = (applicationId) => {
+    return `https://iam.leaflow.cloud/api/v1/applications/${encodeURIComponent(String(applicationId))}:rotateSecret`;
+};
+/**
+ * Returns a new secret and invalidates the previous one immediately. Only an active
+ * confidential application has a secret; any other state answers 412.
+ * @summary Rotate the secret of an application
+ */
+export const rotateApplicationSecret = async (applicationId, options, fetchFn) => {
+    const res = await (fetchFn ?? fetch)(getRotateApplicationSecretUrl(applicationId), {
+        ...options,
+        method: "POST",
+    });
+    const body = [204, 205, 304].includes(res.status) ? null : await res.text();
+    const data = body ? JSON.parse(body) : {};
+    return { data, status: res.status, headers: res.headers };
+};

package/dist/iam/v1/generated/models.d.ts

@@ -545,6 +545,84 @@ export interface RenameSSHKeyRequestBody {
      */
     name: string;
 }
+export type ApplicationResourceType = (typeof ApplicationResourceType)[keyof typeof ApplicationResourceType];
+export declare const ApplicationResourceType: {
+    readonly PUBLIC: "PUBLIC";
+    readonly CONFIDENTIAL: "CONFIDENTIAL";
+};
+export type ApplicationResourceStatus = (typeof ApplicationResourceStatus)[keyof typeof ApplicationResourceStatus];
+export declare const ApplicationResourceStatus: {
+    readonly ACTIVE: "ACTIVE";
+    readonly DISABLED: "DISABLED";
+    readonly ARCHIVED: "ARCHIVED";
+};
+export interface ApplicationResource {
+    id: string;
+    name: string;
+    type: ApplicationResourceType;
+    client_id: string;
+    redirect_uris: string[];
+    status: ApplicationResourceStatus;
+    /** @nullable */
+    created_by: string | null;
+    created_at: string;
+    /** @nullable */
+    disabled_at: string | null;
+    /** @nullable */
+    secret_rotated_at: string | null;
+}
+export type CreateApplicationRequestBodyType = (typeof CreateApplicationRequestBodyType)[keyof typeof CreateApplicationRequestBodyType];
+export declare const CreateApplicationRequestBodyType: {
+    readonly PUBLIC: "PUBLIC";
+    readonly CONFIDENTIAL: "CONFIDENTIAL";
+};
+export interface CreateApplicationRequestBody {
+    /**
+     * @minLength 1
+     * @maxLength 128
+     */
+    name: string;
+    type: CreateApplicationRequestBodyType;
+    /**
+     * @minItems 1
+     * @maxItems 10
+     * @items.minLength 1
+     * @items.maxLength 2048
+     */
+    redirect_uris: string[];
+}
+export interface CreateApplicationResponseBody {
+    application: ApplicationResource;
+    /**
+     * Present only for a confidential application, and only in this response
+     * @nullable
+     */
+    secret: string | null;
+}
+export interface UpdateApplicationRequestBody {
+    /**
+     * @minLength 1
+     * @maxLength 128
+     */
+    name?: string;
+    /**
+     * @minItems 1
+     * @maxItems 10
+     * @items.minLength 1
+     * @items.maxLength 2048
+     */
+    redirect_uris?: string[];
+}
+export interface RotateApplicationSecretResponseBody {
+    secret: string;
+    rotated_at: string;
+}
+export interface LengthAwarePageApplicationResource {
+    items: ApplicationResource[];
+    limit: number;
+    offset: number;
+    total: number;
+}
 /**
  * Pagination metadata for stable numbered pages. total_count is returned only when the operation can determine it without an unbounded scan.
  */
@@ -633,3 +711,21 @@ export declare const ListSshKeysStatus: {
     readonly ACTIVE: "ACTIVE";
     readonly REVOKED: "REVOKED";
 };
+export type ListApplicationsParams = {
+    /**
+     * Items returned in this page. Defaults to 50; at most 200.
+     * @minimum 1
+     * @maximum 200
+     */
+    limit?: number;
+    /**
+     * Items to skip. Defaults to 0; at most 10000.
+     * @minimum 0
+     * @maximum 10000
+     */
+    offset?: number;
+    /**
+     * Include applications that have been deleted
+     */
+    include_archived?: boolean;
+};

package/dist/iam/v1/generated/models.js

@@ -31,6 +31,19 @@ export const CreateSSHKeyRequestBodyOwner = {
     me: "me",
     project: "project",
 };
+export const ApplicationResourceType = {
+    PUBLIC: "PUBLIC",
+    CONFIDENTIAL: "CONFIDENTIAL",
+};
+export const ApplicationResourceStatus = {
+    ACTIVE: "ACTIVE",
+    DISABLED: "DISABLED",
+    ARCHIVED: "ARCHIVED",
+};
+export const CreateApplicationRequestBodyType = {
+    PUBLIC: "PUBLIC",
+    CONFIDENTIAL: "CONFIDENTIAL",
+};
 export const ListSshKeysStatus = {
     ACTIVE: "ACTIVE",
     REVOKED: "REVOKED",

package/dist/iam/v1/generated/schemas.zod.d.ts

@@ -278,3 +278,74 @@ export declare const RenameSshKeyBody: zod.ZodObject<{
 export declare const RevokeSshKeyParams: zod.ZodObject<{
     keyId: zod.ZodUUID;
 }, zod.z.core.$strict>;
+/**
+ * Disabled applications are listed. Archived applications are omitted unless
+ * `include_archived` is true. An application that is still being created is not listed.
+ * @summary List the applications of this project
+ */
+export declare const listApplicationsQueryLimitDefault = 50;
+export declare const listApplicationsQueryLimitMax = 200;
+export declare const listApplicationsQueryOffsetDefault = 0;
+export declare const listApplicationsQueryOffsetMin = 0;
+export declare const listApplicationsQueryOffsetMax = 10000;
+export declare const listApplicationsQueryIncludeArchivedDefault = false;
+export declare const ListApplicationsQueryParams: zod.ZodObject<{
+    limit: zod.ZodDefault<zod.ZodInt>;
+    offset: zod.ZodDefault<zod.ZodInt>;
+    include_archived: zod.ZodDefault<zod.ZodBoolean>;
+}, zod.z.core.$strict>;
+/**
+ * Creates an OIDC client for an application of this project. Applications authenticate
+ * against `https://auth.leaflow.net/realms/user`.
+ *
+ * The `secret` is present only for a confidential application, and only in this response.
+ * It is not stored and cannot be read again; use `:rotateSecret` to obtain a new one.
+ *
+ * Any account of this platform may sign in to the application. Membership of this project
+ * is confirmed only when a token is exchanged for a scoped token.
+ * @summary Create an application
+ */
+export declare const CreateApplicationBody: zod.ZodObject<{
+    name: zod.ZodString;
+    type: zod.ZodEnum<{
+        PUBLIC: "PUBLIC";
+        CONFIDENTIAL: "CONFIDENTIAL";
+    }>;
+    redirect_uris: zod.ZodArray<zod.ZodString>;
+}, zod.z.core.$strict>;
+/**
+ * An application that has been deleted is still returned, with `status` `ARCHIVED`.
+ * @summary Get an application
+ */
+export declare const GetApplicationParams: zod.ZodObject<{
+    applicationId: zod.ZodUUID;
+}, zod.z.core.$strict>;
+/**
+ * Only the name and the redirect URIs can change. The type and `client_id` never change.
+ *
+ * An application that is disabled or deleted cannot be updated.
+ * @summary Update an application
+ */
+export declare const UpdateApplicationParams: zod.ZodObject<{
+    applicationId: zod.ZodUUID;
+}, zod.z.core.$strict>;
+export declare const UpdateApplicationBody: zod.ZodObject<{
+    name: zod.ZodOptional<zod.ZodString>;
+    redirect_uris: zod.ZodOptional<zod.ZodArray<zod.ZodString>>;
+}, zod.z.core.$strict>;
+/**
+ * The application is removed from the identity provider and its row is retained with
+ * `status` `ARCHIVED`. Repeating the call returns the same resource.
+ * @summary Delete an application
+ */
+export declare const DeleteApplicationParams: zod.ZodObject<{
+    applicationId: zod.ZodUUID;
+}, zod.z.core.$strict>;
+/**
+ * Returns a new secret and invalidates the previous one immediately. Only an active
+ * confidential application has a secret; any other state answers 412.
+ * @summary Rotate the secret of an application
+ */
+export declare const RotateApplicationSecretParams: zod.ZodObject<{
+    applicationId: zod.ZodUUID;
+}, zod.z.core.$strict>;

package/dist/iam/v1/generated/schemas.zod.js

@@ -15,6 +15,7 @@
 import * as zod from "zod";
 import { AttachPolicyRequestBody } from "./validators/attachPolicyRequestBody.zod.js";
 import { BatchGetMembersRequestBody } from "./validators/batchGetMembersRequestBody.zod.js";
+import { CreateApplicationRequestBody } from "./validators/createApplicationRequestBody.zod.js";
 import { CreateRoleRequestBody } from "./validators/createRoleRequestBody.zod.js";
 import { CreateSSHKeyRequestBody } from "./validators/createSSHKeyRequestBody.zod.js";
 import { IssueInvitationRequestBody } from "./validators/issueInvitationRequestBody.zod.js";
@@ -23,6 +24,7 @@ import { SetMemberPermissionsRequestBody } from "./validators/setMemberPermissio
 import { SetMemberRolesRequestBody } from "./validators/setMemberRolesRequestBody.zod.js";
 import { SetProjectSlugRequestBody } from "./validators/setProjectSlugRequestBody.zod.js";
 import { TransferOwnershipRequestBody } from "./validators/transferOwnershipRequestBody.zod.js";
+import { UpdateApplicationRequestBody } from "./validators/updateApplicationRequestBody.zod.js";
 import { UpdatePolicyRequestBody } from "./validators/updatePolicyRequestBody.zod.js";
 import { UpdateProjectRequestBody } from "./validators/updateProjectRequestBody.zod.js";
 import { UpdateRoleRequestBody } from "./validators/updateRoleRequestBody.zod.js";
@@ -273,3 +275,77 @@ export const RenameSshKeyBody = RenameSSHKeyRequestBody;
 export const RevokeSshKeyParams = zod.strictObject({
     keyId: zod.uuid(),
 });
+/**
+ * Disabled applications are listed. Archived applications are omitted unless
+ * `include_archived` is true. An application that is still being created is not listed.
+ * @summary List the applications of this project
+ */
+export const listApplicationsQueryLimitDefault = 50;
+export const listApplicationsQueryLimitMax = 200;
+export const listApplicationsQueryOffsetDefault = 0;
+export const listApplicationsQueryOffsetMin = 0;
+export const listApplicationsQueryOffsetMax = 10000;
+export const listApplicationsQueryIncludeArchivedDefault = false;
+export const ListApplicationsQueryParams = zod.strictObject({
+    limit: zod
+        .int()
+        .min(1)
+        .max(listApplicationsQueryLimitMax)
+        .default(listApplicationsQueryLimitDefault)
+        .describe("Items returned in this page. Defaults to 50; at most 200."),
+    offset: zod
+        .int()
+        .min(listApplicationsQueryOffsetMin)
+        .max(listApplicationsQueryOffsetMax)
+        .default(listApplicationsQueryOffsetDefault)
+        .describe("Items to skip. Defaults to 0; at most 10000."),
+    include_archived: zod
+        .boolean()
+        .default(listApplicationsQueryIncludeArchivedDefault)
+        .describe("Include applications that have been deleted"),
+});
+/**
+ * Creates an OIDC client for an application of this project. Applications authenticate
+ * against `https://auth.leaflow.net/realms/user`.
+ *
+ * The `secret` is present only for a confidential application, and only in this response.
+ * It is not stored and cannot be read again; use `:rotateSecret` to obtain a new one.
+ *
+ * Any account of this platform may sign in to the application. Membership of this project
+ * is confirmed only when a token is exchanged for a scoped token.
+ * @summary Create an application
+ */
+export const CreateApplicationBody = CreateApplicationRequestBody;
+/**
+ * An application that has been deleted is still returned, with `status` `ARCHIVED`.
+ * @summary Get an application
+ */
+export const GetApplicationParams = zod.strictObject({
+    applicationId: zod.uuid(),
+});
+/**
+ * Only the name and the redirect URIs can change. The type and `client_id` never change.
+ *
+ * An application that is disabled or deleted cannot be updated.
+ * @summary Update an application
+ */
+export const UpdateApplicationParams = zod.strictObject({
+    applicationId: zod.uuid(),
+});
+export const UpdateApplicationBody = UpdateApplicationRequestBody;
+/**
+ * The application is removed from the identity provider and its row is retained with
+ * `status` `ARCHIVED`. Repeating the call returns the same resource.
+ * @summary Delete an application
+ */
+export const DeleteApplicationParams = zod.strictObject({
+    applicationId: zod.uuid(),
+});
+/**
+ * Returns a new secret and invalidates the previous one immediately. Only an active
+ * confidential application has a secret; any other state answers 412.
+ * @summary Rotate the secret of an application
+ */
+export const RotateApplicationSecretParams = zod.strictObject({
+    applicationId: zod.uuid(),
+});

package/dist/iam/v1/generated/validators/applicationResource.zod.d.ts

@@ -0,0 +1,36 @@
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Leaflow IAM API
+ * What happens inside a project: members, roles, invitations and SSH keys.
+ *
+ * Every request carries a scoped token; see the `bearerAuth` security scheme. No path carries a
+ * `projectId`, and the current project is the one the token states. Tokens are obtained from the
+ * account API.
+ *
+ * `GET /api/v1/membership` returns the roles and permissions the caller holds in the current
+ * project. It does not state whether a given operation is allowed; each service declares which permission its own operations require.
+ * OpenAPI spec version: 1.0.0
+ */
+import * as zod from "zod";
+export declare const ApplicationResource: zod.ZodObject<{
+    id: zod.ZodUUID;
+    name: zod.ZodString;
+    type: zod.ZodEnum<{
+        PUBLIC: "PUBLIC";
+        CONFIDENTIAL: "CONFIDENTIAL";
+    }>;
+    client_id: zod.ZodString;
+    redirect_uris: zod.ZodArray<zod.ZodString>;
+    status: zod.ZodEnum<{
+        ACTIVE: "ACTIVE";
+        DISABLED: "DISABLED";
+        ARCHIVED: "ARCHIVED";
+    }>;
+    created_by: zod.ZodNullable<zod.ZodString>;
+    created_at: zod.z.ZodISODateTime;
+    disabled_at: zod.ZodNullable<zod.z.ZodISODateTime>;
+    secret_rotated_at: zod.ZodNullable<zod.z.ZodISODateTime>;
+}, zod.z.core.$strict>;
+export type ApplicationResource = zod.input<typeof ApplicationResource>;
+export type ApplicationResourceOutput = zod.output<typeof ApplicationResource>;

package/dist/iam/v1/generated/validators/applicationResource.zod.js

@@ -0,0 +1,27 @@
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Leaflow IAM API
+ * What happens inside a project: members, roles, invitations and SSH keys.
+ *
+ * Every request carries a scoped token; see the `bearerAuth` security scheme. No path carries a
+ * `projectId`, and the current project is the one the token states. Tokens are obtained from the
+ * account API.
+ *
+ * `GET /api/v1/membership` returns the roles and permissions the caller holds in the current
+ * project. It does not state whether a given operation is allowed; each service declares which permission its own operations require.
+ * OpenAPI spec version: 1.0.0
+ */
+import * as zod from "zod";
+export const ApplicationResource = zod.strictObject({
+    id: zod.uuid(),
+    name: zod.string(),
+    type: zod.enum(["PUBLIC", "CONFIDENTIAL"]),
+    client_id: zod.string(),
+    redirect_uris: zod.array(zod.string()),
+    status: zod.enum(["ACTIVE", "DISABLED", "ARCHIVED"]),
+    created_by: zod.string().nullable(),
+    created_at: zod.iso.datetime({ offset: true }),
+    disabled_at: zod.iso.datetime({ offset: true }).nullable(),
+    secret_rotated_at: zod.iso.datetime({ offset: true }).nullable(),
+});

package/dist/iam/v1/generated/validators/createApplicationRequestBody.zod.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Leaflow IAM API
+ * What happens inside a project: members, roles, invitations and SSH keys.
+ *
+ * Every request carries a scoped token; see the `bearerAuth` security scheme. No path carries a
+ * `projectId`, and the current project is the one the token states. Tokens are obtained from the
+ * account API.
+ *
+ * `GET /api/v1/membership` returns the roles and permissions the caller holds in the current
+ * project. It does not state whether a given operation is allowed; each service declares which permission its own operations require.
+ * OpenAPI spec version: 1.0.0
+ */
+import * as zod from "zod";
+export declare const createApplicationRequestBodyNameMax = 128;
+export declare const createApplicationRequestBodyRedirectUrisItemMax = 2048;
+export declare const createApplicationRequestBodyRedirectUrisMax = 10;
+export declare const CreateApplicationRequestBody: zod.ZodObject<{
+    name: zod.ZodString;
+    type: zod.ZodEnum<{
+        PUBLIC: "PUBLIC";
+        CONFIDENTIAL: "CONFIDENTIAL";
+    }>;
+    redirect_uris: zod.ZodArray<zod.ZodString>;
+}, zod.z.core.$strict>;
+export type CreateApplicationRequestBody = zod.input<typeof CreateApplicationRequestBody>;
+export type CreateApplicationRequestBodyOutput = zod.output<typeof CreateApplicationRequestBody>;

package/dist/iam/v1/generated/validators/createApplicationRequestBody.zod.js

@@ -0,0 +1,26 @@
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Leaflow IAM API
+ * What happens inside a project: members, roles, invitations and SSH keys.
+ *
+ * Every request carries a scoped token; see the `bearerAuth` security scheme. No path carries a
+ * `projectId`, and the current project is the one the token states. Tokens are obtained from the
+ * account API.
+ *
+ * `GET /api/v1/membership` returns the roles and permissions the caller holds in the current
+ * project. It does not state whether a given operation is allowed; each service declares which permission its own operations require.
+ * OpenAPI spec version: 1.0.0
+ */
+import * as zod from "zod";
+export const createApplicationRequestBodyNameMax = 128;
+export const createApplicationRequestBodyRedirectUrisItemMax = 2048;
+export const createApplicationRequestBodyRedirectUrisMax = 10;
+export const CreateApplicationRequestBody = zod.strictObject({
+    name: zod.string().min(1).max(createApplicationRequestBodyNameMax),
+    type: zod.enum(["PUBLIC", "CONFIDENTIAL"]),
+    redirect_uris: zod
+        .array(zod.string().min(1).max(createApplicationRequestBodyRedirectUrisItemMax))
+        .min(1)
+        .max(createApplicationRequestBodyRedirectUrisMax),
+});

package/dist/iam/v1/generated/validators/createApplicationResponseBody.zod.d.ts

@@ -0,0 +1,39 @@
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Leaflow IAM API
+ * What happens inside a project: members, roles, invitations and SSH keys.
+ *
+ * Every request carries a scoped token; see the `bearerAuth` security scheme. No path carries a
+ * `projectId`, and the current project is the one the token states. Tokens are obtained from the
+ * account API.
+ *
+ * `GET /api/v1/membership` returns the roles and permissions the caller holds in the current
+ * project. It does not state whether a given operation is allowed; each service declares which permission its own operations require.
+ * OpenAPI spec version: 1.0.0
+ */
+import * as zod from "zod";
+export declare const CreateApplicationResponseBody: zod.ZodObject<{
+    application: zod.ZodObject<{
+        id: zod.ZodUUID;
+        name: zod.ZodString;
+        type: zod.ZodEnum<{
+            PUBLIC: "PUBLIC";
+            CONFIDENTIAL: "CONFIDENTIAL";
+        }>;
+        client_id: zod.ZodString;
+        redirect_uris: zod.ZodArray<zod.ZodString>;
+        status: zod.ZodEnum<{
+            ACTIVE: "ACTIVE";
+            DISABLED: "DISABLED";
+            ARCHIVED: "ARCHIVED";
+        }>;
+        created_by: zod.ZodNullable<zod.ZodString>;
+        created_at: zod.z.ZodISODateTime;
+        disabled_at: zod.ZodNullable<zod.z.ZodISODateTime>;
+        secret_rotated_at: zod.ZodNullable<zod.z.ZodISODateTime>;
+    }, zod.z.core.$strict>;
+    secret: zod.ZodNullable<zod.ZodString>;
+}, zod.z.core.$strict>;
+export type CreateApplicationResponseBody = zod.input<typeof CreateApplicationResponseBody>;
+export type CreateApplicationResponseBodyOutput = zod.output<typeof CreateApplicationResponseBody>;

package/dist/iam/v1/generated/validators/createApplicationResponseBody.zod.js

@@ -0,0 +1,23 @@
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Leaflow IAM API
+ * What happens inside a project: members, roles, invitations and SSH keys.
+ *
+ * Every request carries a scoped token; see the `bearerAuth` security scheme. No path carries a
+ * `projectId`, and the current project is the one the token states. Tokens are obtained from the
+ * account API.
+ *
+ * `GET /api/v1/membership` returns the roles and permissions the caller holds in the current
+ * project. It does not state whether a given operation is allowed; each service declares which permission its own operations require.
+ * OpenAPI spec version: 1.0.0
+ */
+import * as zod from "zod";
+import { ApplicationResource } from "./applicationResource.zod.js";
+export const CreateApplicationResponseBody = zod.strictObject({
+    application: ApplicationResource,
+    secret: zod
+        .string()
+        .nullable()
+        .describe("Present only for a confidential application, and only in this response"),
+});

package/dist/iam/v1/generated/validators/lengthAwarePageApplicationResource.zod.d.ts

@@ -0,0 +1,41 @@
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Leaflow IAM API
+ * What happens inside a project: members, roles, invitations and SSH keys.
+ *
+ * Every request carries a scoped token; see the `bearerAuth` security scheme. No path carries a
+ * `projectId`, and the current project is the one the token states. Tokens are obtained from the
+ * account API.
+ *
+ * `GET /api/v1/membership` returns the roles and permissions the caller holds in the current
+ * project. It does not state whether a given operation is allowed; each service declares which permission its own operations require.
+ * OpenAPI spec version: 1.0.0
+ */
+import * as zod from "zod";
+export declare const LengthAwarePageApplicationResource: zod.ZodObject<{
+    items: zod.ZodArray<zod.ZodObject<{
+        id: zod.ZodUUID;
+        name: zod.ZodString;
+        type: zod.ZodEnum<{
+            PUBLIC: "PUBLIC";
+            CONFIDENTIAL: "CONFIDENTIAL";
+        }>;
+        client_id: zod.ZodString;
+        redirect_uris: zod.ZodArray<zod.ZodString>;
+        status: zod.ZodEnum<{
+            ACTIVE: "ACTIVE";
+            DISABLED: "DISABLED";
+            ARCHIVED: "ARCHIVED";
+        }>;
+        created_by: zod.ZodNullable<zod.ZodString>;
+        created_at: zod.z.ZodISODateTime;
+        disabled_at: zod.ZodNullable<zod.z.ZodISODateTime>;
+        secret_rotated_at: zod.ZodNullable<zod.z.ZodISODateTime>;
+    }, zod.z.core.$strict>>;
+    limit: zod.ZodInt;
+    offset: zod.ZodInt;
+    total: zod.ZodInt;
+}, zod.z.core.$strict>;
+export type LengthAwarePageApplicationResource = zod.input<typeof LengthAwarePageApplicationResource>;
+export type LengthAwarePageApplicationResourceOutput = zod.output<typeof LengthAwarePageApplicationResource>;