@myagentroam/protocol 0.1.4 → 0.1.7

package/dist/enterprise.d.ts

@@ -0,0 +1,256 @@
+import { z } from 'zod';
+export declare const editionSchema: z.ZodEnum<["PERSONAL", "ENTERPRISE"]>;
+export declare const licenseStateSchema: z.ZodEnum<["PERSONAL", "ENTERPRISE_VALID", "ENTERPRISE_FROZEN"]>;
+export declare const userRoleSchema: z.ZodEnum<["ADMIN", "ORG_ADMIN", "MEMBER"]>;
+export declare const permissionScopeSchema: z.ZodEnum<["ENTERPRISE", "ORG_SUBTREE", "PERSONAL", "GRANTED_RESOURCE"]>;
+export type UserRole = z.infer<typeof userRoleSchema>;
+export declare const enterpriseCapabilitySchema: z.ZodObject<{
+    edition: z.ZodEnum<["PERSONAL", "ENTERPRISE"]>;
+    licenseState: z.ZodEnum<["PERSONAL", "ENTERPRISE_VALID", "ENTERPRISE_FROZEN"]>;
+    role: z.ZodNullable<z.ZodEnum<["ADMIN", "ORG_ADMIN", "MEMBER"]>>;
+    organizationId: z.ZodNullable<z.ZodNumber>;
+    managementWritable: z.ZodBoolean;
+}, "strict", z.ZodTypeAny, {
+    edition: "PERSONAL" | "ENTERPRISE";
+    licenseState: "PERSONAL" | "ENTERPRISE_VALID" | "ENTERPRISE_FROZEN";
+    role: "ADMIN" | "ORG_ADMIN" | "MEMBER" | null;
+    organizationId: number | null;
+    managementWritable: boolean;
+}, {
+    edition: "PERSONAL" | "ENTERPRISE";
+    licenseState: "PERSONAL" | "ENTERPRISE_VALID" | "ENTERPRISE_FROZEN";
+    role: "ADMIN" | "ORG_ADMIN" | "MEMBER" | null;
+    organizationId: number | null;
+    managementWritable: boolean;
+}>;
+export type EnterpriseCapability = z.infer<typeof enterpriseCapabilitySchema>;
+export declare const organizationSchema: z.ZodObject<{
+    id: z.ZodNumber;
+    name: z.ZodString;
+    parentOrganizationId: z.ZodNullable<z.ZodNumber>;
+    createdAt: z.ZodNumber;
+    updatedAt: z.ZodNumber;
+}, "strict", z.ZodTypeAny, {
+    id: number;
+    name: string;
+    parentOrganizationId: number | null;
+    createdAt: number;
+    updatedAt: number;
+}, {
+    id: number;
+    name: string;
+    parentOrganizationId: number | null;
+    createdAt: number;
+    updatedAt: number;
+}>;
+export declare const resourceOwnershipSchema: z.ZodDiscriminatedUnion<"ownerType", [z.ZodObject<{
+    ownerType: z.ZodLiteral<"PERSONAL">;
+    ownerUserId: z.ZodNumber;
+}, "strict", z.ZodTypeAny, {
+    ownerType: "PERSONAL";
+    ownerUserId: number;
+}, {
+    ownerType: "PERSONAL";
+    ownerUserId: number;
+}>, z.ZodObject<{
+    ownerType: z.ZodLiteral<"ORGANIZATION">;
+    ownerOrganizationId: z.ZodNumber;
+}, "strict", z.ZodTypeAny, {
+    ownerType: "ORGANIZATION";
+    ownerOrganizationId: number;
+}, {
+    ownerType: "ORGANIZATION";
+    ownerOrganizationId: number;
+}>]>;
+export type ResourceOwnership = z.infer<typeof resourceOwnershipSchema>;
+export declare const resourceGrantSchema: z.ZodEffects<z.ZodObject<{
+    id: z.ZodString;
+    resourceType: z.ZodEnum<["NODE", "WORKSPACE"]>;
+    nodeId: z.ZodString;
+    workspaceId: z.ZodOptional<z.ZodString>;
+    targetType: z.ZodEnum<["USER", "ORGANIZATION", "ENTERPRISE"]>;
+    targetUserId: z.ZodOptional<z.ZodNumber>;
+    targetOrganizationId: z.ZodOptional<z.ZodNumber>;
+    grantAuthority: z.ZodEnum<["ENTERPRISE", "ORG_SUBTREE"]>;
+    grantScopeOrganizationId: z.ZodOptional<z.ZodNumber>;
+    createdByUserId: z.ZodNumber;
+    createdAt: z.ZodNumber;
+}, "strict", z.ZodTypeAny, {
+    id: string;
+    createdAt: number;
+    resourceType: "NODE" | "WORKSPACE";
+    nodeId: string;
+    targetType: "ENTERPRISE" | "ORGANIZATION" | "USER";
+    grantAuthority: "ENTERPRISE" | "ORG_SUBTREE";
+    createdByUserId: number;
+    workspaceId?: string | undefined;
+    targetUserId?: number | undefined;
+    targetOrganizationId?: number | undefined;
+    grantScopeOrganizationId?: number | undefined;
+}, {
+    id: string;
+    createdAt: number;
+    resourceType: "NODE" | "WORKSPACE";
+    nodeId: string;
+    targetType: "ENTERPRISE" | "ORGANIZATION" | "USER";
+    grantAuthority: "ENTERPRISE" | "ORG_SUBTREE";
+    createdByUserId: number;
+    workspaceId?: string | undefined;
+    targetUserId?: number | undefined;
+    targetOrganizationId?: number | undefined;
+    grantScopeOrganizationId?: number | undefined;
+}>, {
+    id: string;
+    createdAt: number;
+    resourceType: "NODE" | "WORKSPACE";
+    nodeId: string;
+    targetType: "ENTERPRISE" | "ORGANIZATION" | "USER";
+    grantAuthority: "ENTERPRISE" | "ORG_SUBTREE";
+    createdByUserId: number;
+    workspaceId?: string | undefined;
+    targetUserId?: number | undefined;
+    targetOrganizationId?: number | undefined;
+    grantScopeOrganizationId?: number | undefined;
+}, {
+    id: string;
+    createdAt: number;
+    resourceType: "NODE" | "WORKSPACE";
+    nodeId: string;
+    targetType: "ENTERPRISE" | "ORGANIZATION" | "USER";
+    grantAuthority: "ENTERPRISE" | "ORG_SUBTREE";
+    createdByUserId: number;
+    workspaceId?: string | undefined;
+    targetUserId?: number | undefined;
+    targetOrganizationId?: number | undefined;
+    grantScopeOrganizationId?: number | undefined;
+}>;
+export declare const oauthProviderInputSchema: z.ZodObject<{
+    providerKey: z.ZodString;
+    name: z.ZodString;
+    clientId: z.ZodString;
+    clientSecret: z.ZodOptional<z.ZodString>;
+    authorizationEndpoint: z.ZodString;
+    tokenEndpoint: z.ZodString;
+    userinfoEndpoint: z.ZodString;
+    scopes: z.ZodArray<z.ZodString, "many">;
+    pkceMode: z.ZodEnum<["REQUIRED", "SUPPORTED", "DISABLED"]>;
+    tokenAuthMethod: z.ZodEnum<["client_secret_basic", "client_secret_post", "client_secret_json"]>;
+    autoProvisioningEnabled: z.ZodDefault<z.ZodBoolean>;
+    mappings: z.ZodObject<{
+        externalUserId: z.ZodString;
+        email: z.ZodOptional<z.ZodString>;
+        displayName: z.ZodOptional<z.ZodString>;
+    }, "strict", z.ZodTypeAny, {
+        externalUserId: string;
+        email?: string | undefined;
+        displayName?: string | undefined;
+    }, {
+        externalUserId: string;
+        email?: string | undefined;
+        displayName?: string | undefined;
+    }>;
+}, "strict", z.ZodTypeAny, {
+    name: string;
+    providerKey: string;
+    clientId: string;
+    authorizationEndpoint: string;
+    tokenEndpoint: string;
+    userinfoEndpoint: string;
+    scopes: string[];
+    pkceMode: "REQUIRED" | "SUPPORTED" | "DISABLED";
+    tokenAuthMethod: "client_secret_basic" | "client_secret_post" | "client_secret_json";
+    autoProvisioningEnabled: boolean;
+    mappings: {
+        externalUserId: string;
+        email?: string | undefined;
+        displayName?: string | undefined;
+    };
+    clientSecret?: string | undefined;
+}, {
+    name: string;
+    providerKey: string;
+    clientId: string;
+    authorizationEndpoint: string;
+    tokenEndpoint: string;
+    userinfoEndpoint: string;
+    scopes: string[];
+    pkceMode: "REQUIRED" | "SUPPORTED" | "DISABLED";
+    tokenAuthMethod: "client_secret_basic" | "client_secret_post" | "client_secret_json";
+    mappings: {
+        externalUserId: string;
+        email?: string | undefined;
+        displayName?: string | undefined;
+    };
+    clientSecret?: string | undefined;
+    autoProvisioningEnabled?: boolean | undefined;
+}>;
+export declare const auditEventSchema: z.ZodObject<{
+    id: z.ZodString;
+    eventType: z.ZodString;
+    occurredAt: z.ZodNumber;
+    result: z.ZodEnum<["SUCCESS", "DENIED", "FAILED"]>;
+    errorCode: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    actorUserId: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+    actorUsername: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    authenticationMethod: z.ZodEnum<["PASSWORD", "OAUTH2", "SYSTEM"]>;
+    providerId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    requestId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    operationId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    sessionPublicId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    targetType: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    targetId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    organizationId: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+    nodeId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    workspaceId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    agentSessionId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    runId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    clientMessageId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    inputMode: z.ZodOptional<z.ZodNullable<z.ZodEnum<["NEW_SESSION", "CONTINUE", "STEER", "QUEUE", "RUN_NOW", "USER_INPUT_RESPONSE"]>>>;
+    metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<[z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>>;
+}, "strict", z.ZodTypeAny, {
+    id: string;
+    eventType: string;
+    occurredAt: number;
+    result: "SUCCESS" | "DENIED" | "FAILED";
+    authenticationMethod: "PASSWORD" | "OAUTH2" | "SYSTEM";
+    organizationId?: number | null | undefined;
+    nodeId?: string | null | undefined;
+    workspaceId?: string | null | undefined;
+    targetType?: string | null | undefined;
+    errorCode?: string | null | undefined;
+    actorUserId?: number | null | undefined;
+    actorUsername?: string | null | undefined;
+    providerId?: string | null | undefined;
+    requestId?: string | null | undefined;
+    operationId?: string | null | undefined;
+    sessionPublicId?: string | null | undefined;
+    targetId?: string | null | undefined;
+    agentSessionId?: string | null | undefined;
+    runId?: string | null | undefined;
+    clientMessageId?: string | null | undefined;
+    inputMode?: "NEW_SESSION" | "CONTINUE" | "STEER" | "QUEUE" | "RUN_NOW" | "USER_INPUT_RESPONSE" | null | undefined;
+    metadata?: Record<string, string | number | boolean | null> | undefined;
+}, {
+    id: string;
+    eventType: string;
+    occurredAt: number;
+    result: "SUCCESS" | "DENIED" | "FAILED";
+    authenticationMethod: "PASSWORD" | "OAUTH2" | "SYSTEM";
+    organizationId?: number | null | undefined;
+    nodeId?: string | null | undefined;
+    workspaceId?: string | null | undefined;
+    targetType?: string | null | undefined;
+    errorCode?: string | null | undefined;
+    actorUserId?: number | null | undefined;
+    actorUsername?: string | null | undefined;
+    providerId?: string | null | undefined;
+    requestId?: string | null | undefined;
+    operationId?: string | null | undefined;
+    sessionPublicId?: string | null | undefined;
+    targetId?: string | null | undefined;
+    agentSessionId?: string | null | undefined;
+    runId?: string | null | undefined;
+    clientMessageId?: string | null | undefined;
+    inputMode?: "NEW_SESSION" | "CONTINUE" | "STEER" | "QUEUE" | "RUN_NOW" | "USER_INPUT_RESPONSE" | null | undefined;
+    metadata?: Record<string, string | number | boolean | null> | undefined;
+}>;

package/dist/enterprise.js

@@ -0,0 +1,122 @@
+import { z } from 'zod';
+export const editionSchema = z.enum(['PERSONAL', 'ENTERPRISE']);
+export const licenseStateSchema = z.enum(['PERSONAL', 'ENTERPRISE_VALID', 'ENTERPRISE_FROZEN']);
+export const userRoleSchema = z.enum(['ADMIN', 'ORG_ADMIN', 'MEMBER']);
+export const permissionScopeSchema = z.enum([
+    'ENTERPRISE',
+    'ORG_SUBTREE',
+    'PERSONAL',
+    'GRANTED_RESOURCE'
+]);
+export const enterpriseCapabilitySchema = z
+    .object({
+    edition: editionSchema,
+    licenseState: licenseStateSchema,
+    role: userRoleSchema.nullable(),
+    organizationId: z.number().int().positive().nullable(),
+    managementWritable: z.boolean()
+})
+    .strict();
+export const organizationSchema = z
+    .object({
+    id: z.number().int().positive(),
+    name: z.string().trim().min(1).max(128),
+    parentOrganizationId: z.number().int().positive().nullable(),
+    createdAt: z.number().int().nonnegative(),
+    updatedAt: z.number().int().nonnegative()
+})
+    .strict();
+export const resourceOwnershipSchema = z.discriminatedUnion('ownerType', [
+    z.object({ ownerType: z.literal('PERSONAL'), ownerUserId: z.number().int().positive() }).strict(),
+    z
+        .object({
+        ownerType: z.literal('ORGANIZATION'),
+        ownerOrganizationId: z.number().int().positive()
+    })
+        .strict()
+]);
+export const resourceGrantSchema = z
+    .object({
+    id: z.string().min(1).max(128),
+    resourceType: z.enum(['NODE', 'WORKSPACE']),
+    nodeId: z.string().min(1).max(128),
+    workspaceId: z.string().min(1).max(128).optional(),
+    targetType: z.enum(['USER', 'ORGANIZATION', 'ENTERPRISE']),
+    targetUserId: z.number().int().positive().optional(),
+    targetOrganizationId: z.number().int().positive().optional(),
+    grantAuthority: z.enum(['ENTERPRISE', 'ORG_SUBTREE']),
+    grantScopeOrganizationId: z.number().int().positive().optional(),
+    createdByUserId: z.number().int().positive(),
+    createdAt: z.number().int().nonnegative()
+})
+    .strict()
+    .superRefine((grant, context) => {
+    if ((grant.resourceType === 'WORKSPACE') !== (grant.workspaceId !== undefined)) {
+        context.addIssue({ code: 'custom', message: 'workspaceId must match resourceType' });
+    }
+    if ((grant.targetType === 'USER') !== (grant.targetUserId !== undefined)) {
+        context.addIssue({ code: 'custom', message: 'targetUserId must match targetType' });
+    }
+    if ((grant.targetType === 'ORGANIZATION') !== (grant.targetOrganizationId !== undefined)) {
+        context.addIssue({ code: 'custom', message: 'targetOrganizationId must match targetType' });
+    }
+    if ((grant.grantAuthority === 'ORG_SUBTREE') !==
+        (grant.grantScopeOrganizationId !== undefined)) {
+        context.addIssue({ code: 'custom', message: 'grant scope must match authority' });
+    }
+});
+const jsonPointerSchema = z.string().regex(/^(?:|(?:\/(?:[^~/]|~[01])*)+)$/);
+const requiredJsonPointerSchema = jsonPointerSchema.min(1);
+export const oauthProviderInputSchema = z
+    .object({
+    providerKey: z.string().regex(/^[a-z0-9](?:[a-z0-9-]{0,62}[a-z0-9])?$/),
+    name: z.string().trim().min(1).max(128),
+    clientId: z.string().min(1).max(512),
+    clientSecret: z.string().min(1).max(4096).optional(),
+    authorizationEndpoint: z.string().url(),
+    tokenEndpoint: z.string().url(),
+    userinfoEndpoint: z.string().url(),
+    scopes: z.array(z.string().min(1).max(128)).max(32),
+    pkceMode: z.enum(['REQUIRED', 'SUPPORTED', 'DISABLED']),
+    tokenAuthMethod: z.enum(['client_secret_basic', 'client_secret_post', 'client_secret_json']),
+    autoProvisioningEnabled: z.boolean().default(false),
+    mappings: z
+        .object({
+        externalUserId: requiredJsonPointerSchema,
+        email: jsonPointerSchema.optional(),
+        displayName: jsonPointerSchema.optional()
+    })
+        .strict()
+})
+    .strict();
+export const auditEventSchema = z
+    .object({
+    id: z.string().min(1).max(128),
+    eventType: z.string().regex(/^[a-z0-9_.-]{1,80}$/),
+    occurredAt: z.number().int().nonnegative(),
+    result: z.enum(['SUCCESS', 'DENIED', 'FAILED']),
+    errorCode: z.string().max(80).nullable().optional(),
+    actorUserId: z.number().int().positive().nullable().optional(),
+    actorUsername: z.string().max(128).nullable().optional(),
+    authenticationMethod: z.enum(['PASSWORD', 'OAUTH2', 'SYSTEM']),
+    providerId: z.string().max(128).nullable().optional(),
+    requestId: z.string().max(128).nullable().optional(),
+    operationId: z.string().max(128).nullable().optional(),
+    sessionPublicId: z.string().max(128).nullable().optional(),
+    targetType: z.string().max(80).nullable().optional(),
+    targetId: z.string().max(128).nullable().optional(),
+    organizationId: z.number().int().positive().nullable().optional(),
+    nodeId: z.string().max(128).nullable().optional(),
+    workspaceId: z.string().max(128).nullable().optional(),
+    agentSessionId: z.string().max(128).nullable().optional(),
+    runId: z.string().max(128).nullable().optional(),
+    clientMessageId: z.string().max(128).nullable().optional(),
+    inputMode: z
+        .enum(['NEW_SESSION', 'CONTINUE', 'STEER', 'QUEUE', 'RUN_NOW', 'USER_INPUT_RESPONSE'])
+        .nullable()
+        .optional(),
+    metadata: z
+        .record(z.string(), z.union([z.string(), z.number(), z.boolean(), z.null()]))
+        .optional()
+})
+    .strict();