@lucern/contracts 0.1.2-alpha.5 → 0.3.0-alpha.0

package/dist/schemas/tables/identity/platform.d.ts

@@ -0,0 +1,392 @@
+import { z } from 'zod';
+import { T as TableContract } from '../../../defineTable-CBQ03FXl.js';
+
+declare const mcpWritePolicy: TableContract<{
+    topicId: z.ZodOptional<z.ZodString>;
+    role: z.ZodString;
+    toolCategory: z.ZodString;
+    permission: z.ZodEnum<["allow", "deny", "review_required"]>;
+    maxWritesPerSession: z.ZodOptional<z.ZodNumber>;
+    enabled: z.ZodBoolean;
+    rationale: z.ZodOptional<z.ZodString>;
+    createdAt: z.ZodNumber;
+    updatedAt: z.ZodNumber;
+    createdBy: z.ZodString;
+}>;
+declare const platformAudienceGrants: TableContract<{
+    tenantId: z.ZodString;
+    workspaceId: z.ZodOptional<z.ZodString>;
+    principalId: z.ZodOptional<z.ZodString>;
+    groupId: z.ZodOptional<z.ZodString>;
+    audienceKey: z.ZodString;
+    audienceClass: z.ZodEnum<["internal", "restricted_external", "public"]>;
+    status: z.ZodEnum<["active", "revoked", "expired"]>;
+    grantedBy: z.ZodOptional<z.ZodString>;
+    expiresAt: z.ZodOptional<z.ZodNumber>;
+    metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
+    createdAt: z.ZodNumber;
+    updatedAt: z.ZodNumber;
+}>;
+declare const platformAudiences: TableContract<{
+    tenantId: z.ZodString;
+    workspaceId: z.ZodOptional<z.ZodString>;
+    audienceKey: z.ZodString;
+    audienceLabel: z.ZodString;
+    audienceClass: z.ZodEnum<["internal", "restricted_external", "public"]>;
+    status: z.ZodEnum<["active", "disabled", "archived"]>;
+    description: z.ZodOptional<z.ZodString>;
+    metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
+    createdBy: z.ZodOptional<z.ZodString>;
+    createdAt: z.ZodNumber;
+    updatedAt: z.ZodNumber;
+}>;
+declare const platformPolicyDecisionLogs: TableContract<{
+    principalId: z.ZodString;
+    tenantId: z.ZodOptional<z.ZodString>;
+    workspaceId: z.ZodOptional<z.ZodString>;
+    topicId: z.ZodOptional<z.ZodString>;
+    resourceType: z.ZodString;
+    resourceId: z.ZodString;
+    action: z.ZodEnum<["read", "summarize", "export", "mutate", "admin", "comment", "escalate", "resolve", "vote"]>;
+    decision: z.ZodEnum<["allow", "deny"]>;
+    reasonCode: z.ZodString;
+    policyVersion: z.ZodString;
+    policyBundleId: z.ZodOptional<z.ZodString>;
+    audienceKey: z.ZodOptional<z.ZodString>;
+    audienceClass: z.ZodOptional<z.ZodEnum<["internal", "restricted_external", "public"]>>;
+    audienceMode: z.ZodOptional<z.ZodString>;
+    traceId: z.ZodOptional<z.ZodString>;
+    packKey: z.ZodOptional<z.ZodString>;
+    metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
+    createdAt: z.ZodNumber;
+}>;
+declare const tenantApiKeys: TableContract<{
+    tenantId: z.ZodString;
+    workspaceId: z.ZodOptional<z.ZodString>;
+    label: z.ZodOptional<z.ZodString>;
+    keyPrefix: z.ZodString;
+    hashedKey: z.ZodString;
+    scopes: z.ZodArray<z.ZodString, "many">;
+    status: z.ZodEnum<["active", "revoked", "expired"]>;
+    expiresAt: z.ZodOptional<z.ZodNumber>;
+    lastUsedAt: z.ZodOptional<z.ZodNumber>;
+    revokedAt: z.ZodOptional<z.ZodNumber>;
+    revokedBy: z.ZodOptional<z.ZodString>;
+    createdBy: z.ZodString;
+    createdAt: z.ZodNumber;
+    updatedAt: z.ZodNumber;
+}>;
+declare const tenantConfig: TableContract<{
+    tenantId: z.ZodString;
+    authPolicyMode: z.ZodEnum<["open", "invite_only", "sso_required"]>;
+    defaultSessionTTL: z.ZodNumber;
+    defaultTopicVisibility: z.ZodEnum<["private", "tenant", "public"]>;
+    featureFlags: z.ZodRecord<z.ZodString, z.ZodBoolean>;
+    maxWorkspaceCount: z.ZodNumber;
+    defaultModelSlotOverrides: z.ZodRecord<z.ZodString, z.ZodString>;
+    updatedAt: z.ZodNumber;
+    updatedBy: z.ZodString;
+}>;
+declare const tenantIntegrations: TableContract<{
+    tenantId: z.ZodString;
+    integrationKey: z.ZodString;
+    displayName: z.ZodString;
+    description: z.ZodOptional<z.ZodString>;
+    category: z.ZodEnum<["search", "scraper", "llm", "analysis", "custom"]>;
+    capabilities: z.ZodArray<z.ZodEnum<["search", "deep_research", "scrape", "summarize", "generate"]>, "many">;
+    config: z.ZodObject<{
+        apiBaseUrl: z.ZodString;
+        authType: z.ZodEnum<["api_key", "bearer", "basic", "none"]>;
+        authHeaderName: z.ZodOptional<z.ZodString>;
+        credentialSecretName: z.ZodOptional<z.ZodString>;
+        defaultParams: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
+        timeout: z.ZodOptional<z.ZodNumber>;
+        customHeaders: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
+    }, "strip", z.ZodTypeAny, {
+        apiBaseUrl: string;
+        authType: "none" | "api_key" | "bearer" | "basic";
+        timeout?: number | undefined;
+        authHeaderName?: string | undefined;
+        credentialSecretName?: string | undefined;
+        defaultParams?: Record<string, any> | undefined;
+        customHeaders?: Record<string, any> | undefined;
+    }, {
+        apiBaseUrl: string;
+        authType: "none" | "api_key" | "bearer" | "basic";
+        timeout?: number | undefined;
+        authHeaderName?: string | undefined;
+        credentialSecretName?: string | undefined;
+        defaultParams?: Record<string, any> | undefined;
+        customHeaders?: Record<string, any> | undefined;
+    }>;
+    endpoints: z.ZodOptional<z.ZodObject<{
+        search: z.ZodOptional<z.ZodObject<{
+            path: z.ZodString;
+            method: z.ZodOptional<z.ZodString>;
+            queryParamName: z.ZodOptional<z.ZodString>;
+            resultPath: z.ZodOptional<z.ZodString>;
+        }, "strip", z.ZodTypeAny, {
+            path: string;
+            method?: string | undefined;
+            queryParamName?: string | undefined;
+            resultPath?: string | undefined;
+        }, {
+            path: string;
+            method?: string | undefined;
+            queryParamName?: string | undefined;
+            resultPath?: string | undefined;
+        }>>;
+        deepResearch: z.ZodOptional<z.ZodObject<{
+            path: z.ZodString;
+            method: z.ZodOptional<z.ZodString>;
+            resultPath: z.ZodOptional<z.ZodString>;
+            async: z.ZodOptional<z.ZodBoolean>;
+            pollPath: z.ZodOptional<z.ZodString>;
+            pollIntervalMs: z.ZodOptional<z.ZodNumber>;
+        }, "strip", z.ZodTypeAny, {
+            path: string;
+            pollIntervalMs?: number | undefined;
+            method?: string | undefined;
+            resultPath?: string | undefined;
+            async?: boolean | undefined;
+            pollPath?: string | undefined;
+        }, {
+            path: string;
+            pollIntervalMs?: number | undefined;
+            method?: string | undefined;
+            resultPath?: string | undefined;
+            async?: boolean | undefined;
+            pollPath?: string | undefined;
+        }>>;
+        scrape: z.ZodOptional<z.ZodObject<{
+            path: z.ZodString;
+            method: z.ZodOptional<z.ZodString>;
+            resultPath: z.ZodOptional<z.ZodString>;
+        }, "strip", z.ZodTypeAny, {
+            path: string;
+            method?: string | undefined;
+            resultPath?: string | undefined;
+        }, {
+            path: string;
+            method?: string | undefined;
+            resultPath?: string | undefined;
+        }>>;
+    }, "strip", z.ZodTypeAny, {
+        search?: {
+            path: string;
+            method?: string | undefined;
+            queryParamName?: string | undefined;
+            resultPath?: string | undefined;
+        } | undefined;
+        scrape?: {
+            path: string;
+            method?: string | undefined;
+            resultPath?: string | undefined;
+        } | undefined;
+        deepResearch?: {
+            path: string;
+            pollIntervalMs?: number | undefined;
+            method?: string | undefined;
+            resultPath?: string | undefined;
+            async?: boolean | undefined;
+            pollPath?: string | undefined;
+        } | undefined;
+    }, {
+        search?: {
+            path: string;
+            method?: string | undefined;
+            queryParamName?: string | undefined;
+            resultPath?: string | undefined;
+        } | undefined;
+        scrape?: {
+            path: string;
+            method?: string | undefined;
+            resultPath?: string | undefined;
+        } | undefined;
+        deepResearch?: {
+            path: string;
+            pollIntervalMs?: number | undefined;
+            method?: string | undefined;
+            resultPath?: string | undefined;
+            async?: boolean | undefined;
+            pollPath?: string | undefined;
+        } | undefined;
+    }>>;
+    status: z.ZodEnum<["active", "disabled", "error"]>;
+    lastUsedAt: z.ZodOptional<z.ZodNumber>;
+    lastError: z.ZodOptional<z.ZodString>;
+    usageCount: z.ZodOptional<z.ZodNumber>;
+    createdAt: z.ZodNumber;
+    updatedAt: z.ZodNumber;
+    createdBy: z.ZodOptional<z.ZodString>;
+}>;
+declare const tenantModelSlotBindings: TableContract<{
+    bindingId: z.ZodString;
+    tenantId: z.ZodString;
+    providerId: z.ZodString;
+    modelSlotId: z.ZodString;
+    secretRef: z.ZodString;
+    status: z.ZodEnum<["active", "revoked"]>;
+    passThroughOnly: z.ZodBoolean;
+    revokedAt: z.ZodOptional<z.ZodNumber>;
+    revokedBy: z.ZodOptional<z.ZodString>;
+    metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
+    createdBy: z.ZodString;
+    createdAt: z.ZodNumber;
+    updatedAt: z.ZodNumber;
+}>;
+declare const tenantPolicies: TableContract<{
+    tenantId: z.ZodString;
+    workspaceId: z.ZodOptional<z.ZodString>;
+    roleName: z.ZodString;
+    description: z.ZodOptional<z.ZodString>;
+    permissions: z.ZodArray<z.ZodObject<{
+        resource: z.ZodString;
+        actions: z.ZodArray<z.ZodString, "many">;
+    }, "strip", z.ZodTypeAny, {
+        resource: string;
+        actions: string[];
+    }, {
+        resource: string;
+        actions: string[];
+    }>, "many">;
+    groupBindings: z.ZodArray<z.ZodString, "many">;
+    createdAt: z.ZodNumber;
+    updatedAt: z.ZodNumber;
+    createdBy: z.ZodString;
+    updatedBy: z.ZodOptional<z.ZodString>;
+}>;
+declare const tenantProviderSecrets: TableContract<{
+    secretRef: z.ZodString;
+    tenantId: z.ZodString;
+    providerId: z.ZodString;
+    label: z.ZodOptional<z.ZodString>;
+    encryptedSecret: z.ZodString;
+    encryptionVersion: z.ZodString;
+    secretFingerprint: z.ZodString;
+    keyHint: z.ZodString;
+    status: z.ZodEnum<["active", "rotated", "revoked"]>;
+    rotatedFromSecretRef: z.ZodOptional<z.ZodString>;
+    revokedAt: z.ZodOptional<z.ZodNumber>;
+    revokedBy: z.ZodOptional<z.ZodString>;
+    lastUsedAt: z.ZodOptional<z.ZodNumber>;
+    metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
+    createdBy: z.ZodString;
+    createdAt: z.ZodNumber;
+    updatedAt: z.ZodNumber;
+}>;
+declare const tenantProxyGatewayUsage: TableContract<{
+    usageId: z.ZodString;
+    tenantId: z.ZodString;
+    providerId: z.ZodString;
+    modelSlotId: z.ZodString;
+    secretRef: z.ZodString;
+    proxyTokenId: z.ZodString;
+    sessionId: z.ZodString;
+    principalId: z.ZodString;
+    workspaceId: z.ZodOptional<z.ZodString>;
+    modelId: z.ZodOptional<z.ZodString>;
+    requestPath: z.ZodString;
+    status: z.ZodEnum<["success", "error"]>;
+    responseStatus: z.ZodOptional<z.ZodNumber>;
+    inputTokens: z.ZodOptional<z.ZodNumber>;
+    outputTokens: z.ZodOptional<z.ZodNumber>;
+    tokenCount: z.ZodOptional<z.ZodNumber>;
+    latencyMs: z.ZodNumber;
+    estimatedCostUsd: z.ZodOptional<z.ZodNumber>;
+    failureCode: z.ZodOptional<z.ZodString>;
+    metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
+    createdAt: z.ZodNumber;
+    updatedAt: z.ZodNumber;
+}>;
+declare const tenantProxyTokenMints: TableContract<{
+    proxyTokenId: z.ZodString;
+    tenantId: z.ZodString;
+    providerId: z.ZodString;
+    modelSlotId: z.ZodString;
+    sessionId: z.ZodString;
+    principalId: z.ZodString;
+    workspaceId: z.ZodOptional<z.ZodString>;
+    secretRef: z.ZodString;
+    expiresAt: z.ZodNumber;
+    metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
+    createdAt: z.ZodNumber;
+}>;
+declare const tenantSandboxAuditEvents: TableContract<{
+    eventId: z.ZodString;
+    tenantId: z.ZodString;
+    actorClerkId: z.ZodString;
+    action: z.ZodEnum<["sandbox_created", "sandbox_secret_injected", "sandbox_execution_started", "sandbox_execution_completed", "sandbox_limit_violated"]>;
+    executionId: z.ZodString;
+    sessionId: z.ZodOptional<z.ZodString>;
+    principalId: z.ZodOptional<z.ZodString>;
+    workspaceId: z.ZodOptional<z.ZodString>;
+    providerId: z.ZodOptional<z.ZodString>;
+    secretRef: z.ZodOptional<z.ZodString>;
+    toolCallId: z.ZodOptional<z.ZodString>;
+    correlationId: z.ZodOptional<z.ZodString>;
+    sandboxDir: z.ZodOptional<z.ZodString>;
+    timeoutMs: z.ZodOptional<z.ZodNumber>;
+    memoryLimitMb: z.ZodOptional<z.ZodNumber>;
+    allowedOrigins: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    limitName: z.ZodOptional<z.ZodString>;
+    outcome: z.ZodOptional<z.ZodString>;
+    responseStatus: z.ZodOptional<z.ZodNumber>;
+    durationMs: z.ZodOptional<z.ZodNumber>;
+    metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
+    createdAt: z.ZodNumber;
+}>;
+declare const tenantSecrets: TableContract<{
+    tenantId: z.ZodString;
+    workspaceId: z.ZodOptional<z.ZodString>;
+    name: z.ZodString;
+    description: z.ZodOptional<z.ZodString>;
+    encryptedValue: z.ZodString;
+    lastRotated: z.ZodNumber;
+    createdBy: z.ZodString;
+    updatedBy: z.ZodOptional<z.ZodString>;
+    createdAt: z.ZodNumber;
+    updatedAt: z.ZodNumber;
+}>;
+declare const toolAcls: TableContract<{
+    role: z.ZodEnum<["platform_admin", "tenant_admin", "workspace_admin", "editor", "viewer", "auditor", "service_agent"]>;
+    toolName: z.ZodString;
+    createdBy: z.ZodOptional<z.ZodString>;
+    createdAt: z.ZodOptional<z.ZodNumber>;
+}>;
+declare const toolRegistry: TableContract<{
+    toolName: z.ZodString;
+    description: z.ZodOptional<z.ZodString>;
+    version: z.ZodOptional<z.ZodString>;
+    status: z.ZodEnum<["active", "deprecated", "disabled"]>;
+    requiredRole: z.ZodOptional<z.ZodEnum<["platform_admin", "tenant_admin", "workspace_admin", "editor", "viewer", "auditor", "service_agent"]>>;
+    requiredAction: z.ZodOptional<z.ZodEnum<["read", "mutate", "admin", "summarize", "export", "create", "delete", "grant", "revoke"]>>;
+    surfaces: z.ZodOptional<z.ZodArray<z.ZodEnum<["mcp", "chat", "voice", "sprint", "api", "sdk", "cli"]>, "many">>;
+    approvalGateId: z.ZodOptional<z.ZodString>;
+    category: z.ZodOptional<z.ZodEnum<["read", "write", "admin", "system"]>>;
+    parameterSchema: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
+    handlerRef: z.ZodOptional<z.ZodString>;
+    returnSchema: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
+    executionAdapter: z.ZodOptional<z.ZodEnum<["convex_mutation", "convex_action", "http_callback", "mcp_tool", "sdk_invocation", "external_observed"]>>;
+    safetyMetadata: z.ZodOptional<z.ZodObject<{
+        readOnly: z.ZodBoolean;
+        idempotent: z.ZodBoolean;
+        sideEffectLevel: z.ZodEnum<["none", "low", "high"]>;
+    }, "strip", z.ZodTypeAny, {
+        readOnly: boolean;
+        idempotent: boolean;
+        sideEffectLevel: "high" | "low" | "none";
+    }, {
+        readOnly: boolean;
+        idempotent: boolean;
+        sideEffectLevel: "high" | "low" | "none";
+    }>>;
+    packKey: z.ZodOptional<z.ZodString>;
+    packVersion: z.ZodOptional<z.ZodString>;
+    isCore: z.ZodBoolean;
+    mcVersion: z.ZodOptional<z.ZodString>;
+    registeredBy: z.ZodOptional<z.ZodString>;
+    registeredAt: z.ZodOptional<z.ZodNumber>;
+}>;
+
+export { mcpWritePolicy, platformAudienceGrants, platformAudiences, platformPolicyDecisionLogs, tenantApiKeys, tenantConfig, tenantIntegrations, tenantModelSlotBindings, tenantPolicies, tenantProviderSecrets, tenantProxyGatewayUsage, tenantProxyTokenMints, tenantSandboxAuditEvents, tenantSecrets, toolAcls, toolRegistry };