@noodleseed/one 0.16.0 → 0.18.0

package/node_modules/@noodle-borg/service/dist/routes/contracts.d.ts

@@ -0,0 +1,465 @@
+/**
+ * Zod response contracts for the org/app read surface (`GET /v1/orgs/{org}`, `.../apps`,
+ * `.../apps/{app}`). Handlers `.parse()` their response payload through these before sending, so the
+ * wire shape can never silently drift from what's declared here. The golden fixtures under the
+ * repo-root `contract/v1/` directory assert the same schemas parse realistic sample payloads — the
+ * cross-package drift gate future CLI/console tests load the same fixtures against, so all three
+ * surfaces stay pinned to one contract.
+ */
+import { z } from 'zod';
+/** Mirrors {@link DeploymentSummary} (`../store.js`). */
+export declare const DeploymentSummarySchema: z.ZodObject<{
+    deploymentId: z.ZodString;
+    orgSlug: z.ZodString;
+    appSlug: z.ZodString;
+    environment: z.ZodString;
+    serverVersion: z.ZodOptional<z.ZodString>;
+    active: z.ZodBoolean;
+    serverName: z.ZodString;
+    createdAt: z.ZodString;
+    createdByEmail: z.ZodOptional<z.ZodString>;
+    accessMode: z.ZodEnum<{
+        "owner-only": "owner-only";
+        "org-members": "org-members";
+        authenticated: "authenticated";
+        public: "public";
+        mixed: "mixed";
+        customers: "customers";
+    }>;
+    archivedAt: z.ZodOptional<z.ZodString>;
+    endpointUrl: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+/** Mirrors {@link OrgRecord} (`../store.js`) — the `GET /v1/orgs/{org}` response `data`. */
+export declare const OrgSummarySchema: z.ZodObject<{
+    slug: z.ZodString;
+    displayName: z.ZodOptional<z.ZodString>;
+    createdAt: z.ZodString;
+}, z.core.$strict>;
+/** Mirrors {@link AppSummary} (`../store.js`). */
+export declare const AppSummarySchema: z.ZodObject<{
+    orgSlug: z.ZodString;
+    appSlug: z.ZodString;
+    environments: z.ZodArray<z.ZodString>;
+    latest: z.ZodOptional<z.ZodObject<{
+        deploymentId: z.ZodString;
+        orgSlug: z.ZodString;
+        appSlug: z.ZodString;
+        environment: z.ZodString;
+        serverVersion: z.ZodOptional<z.ZodString>;
+        active: z.ZodBoolean;
+        serverName: z.ZodString;
+        createdAt: z.ZodString;
+        createdByEmail: z.ZodOptional<z.ZodString>;
+        accessMode: z.ZodEnum<{
+            "owner-only": "owner-only";
+            "org-members": "org-members";
+            authenticated: "authenticated";
+            public: "public";
+            mixed: "mixed";
+            customers: "customers";
+        }>;
+        archivedAt: z.ZodOptional<z.ZodString>;
+        endpointUrl: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>;
+    accessMode: z.ZodOptional<z.ZodString>;
+    active: z.ZodBoolean;
+    archivedAt: z.ZodOptional<z.ZodString>;
+    createdAt: z.ZodString;
+    lastActivityAt: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+/** The full `GET /v1/orgs/{org}/apps` response body. */
+export declare const AppsListResponseSchema: z.ZodObject<{
+    ok: z.ZodLiteral<true>;
+    data: z.ZodObject<{
+        apps: z.ZodArray<z.ZodObject<{
+            orgSlug: z.ZodString;
+            appSlug: z.ZodString;
+            environments: z.ZodArray<z.ZodString>;
+            latest: z.ZodOptional<z.ZodObject<{
+                deploymentId: z.ZodString;
+                orgSlug: z.ZodString;
+                appSlug: z.ZodString;
+                environment: z.ZodString;
+                serverVersion: z.ZodOptional<z.ZodString>;
+                active: z.ZodBoolean;
+                serverName: z.ZodString;
+                createdAt: z.ZodString;
+                createdByEmail: z.ZodOptional<z.ZodString>;
+                accessMode: z.ZodEnum<{
+                    "owner-only": "owner-only";
+                    "org-members": "org-members";
+                    authenticated: "authenticated";
+                    public: "public";
+                    mixed: "mixed";
+                    customers: "customers";
+                }>;
+                archivedAt: z.ZodOptional<z.ZodString>;
+                endpointUrl: z.ZodOptional<z.ZodString>;
+            }, z.core.$strict>>;
+            accessMode: z.ZodOptional<z.ZodString>;
+            active: z.ZodBoolean;
+            archivedAt: z.ZodOptional<z.ZodString>;
+            createdAt: z.ZodString;
+            lastActivityAt: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>>;
+        truncated: z.ZodBoolean;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+/** The full `GET /v1/orgs/{org}/apps/{app}` response body (app inspect). */
+export declare const AppResponseSchema: z.ZodObject<{
+    ok: z.ZodLiteral<true>;
+    data: z.ZodObject<{
+        orgSlug: z.ZodString;
+        appSlug: z.ZodString;
+        environments: z.ZodArray<z.ZodString>;
+        latest: z.ZodOptional<z.ZodObject<{
+            deploymentId: z.ZodString;
+            orgSlug: z.ZodString;
+            appSlug: z.ZodString;
+            environment: z.ZodString;
+            serverVersion: z.ZodOptional<z.ZodString>;
+            active: z.ZodBoolean;
+            serverName: z.ZodString;
+            createdAt: z.ZodString;
+            createdByEmail: z.ZodOptional<z.ZodString>;
+            accessMode: z.ZodEnum<{
+                "owner-only": "owner-only";
+                "org-members": "org-members";
+                authenticated: "authenticated";
+                public: "public";
+                mixed: "mixed";
+                customers: "customers";
+            }>;
+            archivedAt: z.ZodOptional<z.ZodString>;
+            endpointUrl: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>>;
+        accessMode: z.ZodOptional<z.ZodString>;
+        active: z.ZodBoolean;
+        archivedAt: z.ZodOptional<z.ZodString>;
+        createdAt: z.ZodString;
+        lastActivityAt: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+/** Mirrors {@link EnvSummary} (`../store.js`). */
+export declare const EnvSummarySchema: z.ZodObject<{
+    orgSlug: z.ZodString;
+    appSlug: z.ZodString;
+    envName: z.ZodString;
+    latest: z.ZodOptional<z.ZodObject<{
+        deploymentId: z.ZodString;
+        orgSlug: z.ZodString;
+        appSlug: z.ZodString;
+        environment: z.ZodString;
+        serverVersion: z.ZodOptional<z.ZodString>;
+        active: z.ZodBoolean;
+        serverName: z.ZodString;
+        createdAt: z.ZodString;
+        createdByEmail: z.ZodOptional<z.ZodString>;
+        accessMode: z.ZodEnum<{
+            "owner-only": "owner-only";
+            "org-members": "org-members";
+            authenticated: "authenticated";
+            public: "public";
+            mixed: "mixed";
+            customers: "customers";
+        }>;
+        archivedAt: z.ZodOptional<z.ZodString>;
+        endpointUrl: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>;
+    accessMode: z.ZodOptional<z.ZodString>;
+    active: z.ZodBoolean;
+    archivedAt: z.ZodOptional<z.ZodString>;
+    createdAt: z.ZodString;
+    lastActivityAt: z.ZodOptional<z.ZodString>;
+    deploymentCount: z.ZodNumber;
+}, z.core.$strict>;
+/** The full `GET /v1/orgs/{org}/apps/{app}/envs` response body. No pagination — env counts per app are small. */
+export declare const EnvsListResponseSchema: z.ZodObject<{
+    ok: z.ZodLiteral<true>;
+    data: z.ZodObject<{
+        envs: z.ZodArray<z.ZodObject<{
+            orgSlug: z.ZodString;
+            appSlug: z.ZodString;
+            envName: z.ZodString;
+            latest: z.ZodOptional<z.ZodObject<{
+                deploymentId: z.ZodString;
+                orgSlug: z.ZodString;
+                appSlug: z.ZodString;
+                environment: z.ZodString;
+                serverVersion: z.ZodOptional<z.ZodString>;
+                active: z.ZodBoolean;
+                serverName: z.ZodString;
+                createdAt: z.ZodString;
+                createdByEmail: z.ZodOptional<z.ZodString>;
+                accessMode: z.ZodEnum<{
+                    "owner-only": "owner-only";
+                    "org-members": "org-members";
+                    authenticated: "authenticated";
+                    public: "public";
+                    mixed: "mixed";
+                    customers: "customers";
+                }>;
+                archivedAt: z.ZodOptional<z.ZodString>;
+                endpointUrl: z.ZodOptional<z.ZodString>;
+            }, z.core.$strict>>;
+            accessMode: z.ZodOptional<z.ZodString>;
+            active: z.ZodBoolean;
+            archivedAt: z.ZodOptional<z.ZodString>;
+            createdAt: z.ZodString;
+            lastActivityAt: z.ZodOptional<z.ZodString>;
+            deploymentCount: z.ZodNumber;
+        }, z.core.$strict>>;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+/** The full `GET /v1/orgs/{org}/apps/{app}/envs/{env}` response body (env inspect). */
+export declare const EnvResponseSchema: z.ZodObject<{
+    ok: z.ZodLiteral<true>;
+    data: z.ZodObject<{
+        orgSlug: z.ZodString;
+        appSlug: z.ZodString;
+        envName: z.ZodString;
+        latest: z.ZodOptional<z.ZodObject<{
+            deploymentId: z.ZodString;
+            orgSlug: z.ZodString;
+            appSlug: z.ZodString;
+            environment: z.ZodString;
+            serverVersion: z.ZodOptional<z.ZodString>;
+            active: z.ZodBoolean;
+            serverName: z.ZodString;
+            createdAt: z.ZodString;
+            createdByEmail: z.ZodOptional<z.ZodString>;
+            accessMode: z.ZodEnum<{
+                "owner-only": "owner-only";
+                "org-members": "org-members";
+                authenticated: "authenticated";
+                public: "public";
+                mixed: "mixed";
+                customers: "customers";
+            }>;
+            archivedAt: z.ZodOptional<z.ZodString>;
+            endpointUrl: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>>;
+        accessMode: z.ZodOptional<z.ZodString>;
+        active: z.ZodBoolean;
+        archivedAt: z.ZodOptional<z.ZodString>;
+        createdAt: z.ZodString;
+        lastActivityAt: z.ZodOptional<z.ZodString>;
+        deploymentCount: z.ZodNumber;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+/** The full `GET /v1/orgs/{org}/deployments/{deploymentId}` response body (deployment inspect). */
+export declare const DeploymentResponseSchema: z.ZodObject<{
+    ok: z.ZodLiteral<true>;
+    data: z.ZodObject<{
+        deploymentId: z.ZodString;
+        orgSlug: z.ZodString;
+        appSlug: z.ZodString;
+        environment: z.ZodString;
+        serverVersion: z.ZodOptional<z.ZodString>;
+        active: z.ZodBoolean;
+        serverName: z.ZodString;
+        createdAt: z.ZodString;
+        createdByEmail: z.ZodOptional<z.ZodString>;
+        accessMode: z.ZodEnum<{
+            "owner-only": "owner-only";
+            "org-members": "org-members";
+            authenticated: "authenticated";
+            public: "public";
+            mixed: "mixed";
+            customers: "customers";
+        }>;
+        archivedAt: z.ZodOptional<z.ZodString>;
+        endpointUrl: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+/** Mirrors {@link RepoConnectionRecord} (`../store.js`) — the GHD-1 GitHub repository connection. */
+export declare const RepoConnectionSchema: z.ZodObject<{
+    githubRepositoryId: z.ZodNumber;
+    installationId: z.ZodNumber;
+    ownerLogin: z.ZodString;
+    repoName: z.ZodString;
+    defaultBranch: z.ZodString;
+    repoRoot: z.ZodOptional<z.ZodString>;
+    orgSlug: z.ZodString;
+    appSlug: z.ZodString;
+    enabled: z.ZodBoolean;
+    createdBySubject: z.ZodString;
+    createdAt: z.ZodString;
+    updatedAt: z.ZodString;
+}, z.core.$strict>;
+/** The full `GET`/`POST /v1/orgs/{org}/apps/{app}/github/connection` response body. */
+export declare const GithubConnectionResponseSchema: z.ZodObject<{
+    ok: z.ZodLiteral<true>;
+    data: z.ZodObject<{
+        githubRepositoryId: z.ZodNumber;
+        installationId: z.ZodNumber;
+        ownerLogin: z.ZodString;
+        repoName: z.ZodString;
+        defaultBranch: z.ZodString;
+        repoRoot: z.ZodOptional<z.ZodString>;
+        orgSlug: z.ZodString;
+        appSlug: z.ZodString;
+        enabled: z.ZodBoolean;
+        createdBySubject: z.ZodString;
+        createdAt: z.ZodString;
+        updatedAt: z.ZodString;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+/** One webhook-accepted deploy run (GHD-2) — mirrors `DeployRunRecord` in `../store.ts`. */
+export declare const DeployRunSchema: z.ZodObject<{
+    runId: z.ZodString;
+    orgSlug: z.ZodString;
+    appSlug: z.ZodString;
+    envName: z.ZodString;
+    sourceEvent: z.ZodEnum<{
+        push: "push";
+        pull_request: "pull_request";
+    }>;
+    deliveryId: z.ZodString;
+    githubRepositoryId: z.ZodNumber;
+    commitSha: z.ZodString;
+    ref: z.ZodString;
+    prNumber: z.ZodOptional<z.ZodNumber>;
+    status: z.ZodEnum<{
+        queued: "queued";
+        building: "building";
+        deploying: "deploying";
+        deployed: "deployed";
+        failed: "failed";
+        canceled: "canceled";
+        superseded: "superseded";
+    }>;
+    blockedReason: z.ZodOptional<z.ZodString>;
+    deploymentId: z.ZodOptional<z.ZodString>;
+    actorLogin: z.ZodString;
+    errorSummary: z.ZodOptional<z.ZodString>;
+    createdAt: z.ZodString;
+    startedAt: z.ZodOptional<z.ZodString>;
+    finishedAt: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+/** The full `GET /v1/orgs/{org}/apps/{app}/github/runs` response body. */
+export declare const GithubRunsListResponseSchema: z.ZodObject<{
+    ok: z.ZodLiteral<true>;
+    data: z.ZodObject<{
+        runs: z.ZodArray<z.ZodObject<{
+            runId: z.ZodString;
+            orgSlug: z.ZodString;
+            appSlug: z.ZodString;
+            envName: z.ZodString;
+            sourceEvent: z.ZodEnum<{
+                push: "push";
+                pull_request: "pull_request";
+            }>;
+            deliveryId: z.ZodString;
+            githubRepositoryId: z.ZodNumber;
+            commitSha: z.ZodString;
+            ref: z.ZodString;
+            prNumber: z.ZodOptional<z.ZodNumber>;
+            status: z.ZodEnum<{
+                queued: "queued";
+                building: "building";
+                deploying: "deploying";
+                deployed: "deployed";
+                failed: "failed";
+                canceled: "canceled";
+                superseded: "superseded";
+            }>;
+            blockedReason: z.ZodOptional<z.ZodString>;
+            deploymentId: z.ZodOptional<z.ZodString>;
+            actorLogin: z.ZodString;
+            errorSummary: z.ZodOptional<z.ZodString>;
+            createdAt: z.ZodString;
+            startedAt: z.ZodOptional<z.ZodString>;
+            finishedAt: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>>;
+        truncated: z.ZodBoolean;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+/** The full `GET /v1/github/install-url` response body. */
+export declare const GithubInstallUrlResponseSchema: z.ZodObject<{
+    ok: z.ZodLiteral<true>;
+    data: z.ZodObject<{
+        installUrl: z.ZodString;
+        state: z.ZodString;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+/**
+ * The redacted public view of an alert rule (analytics alerting E2, ADR 0130). Deliberately has
+ * NO `webhookUrl` field and is `.strict()`: the sensitive URL structurally cannot pass this
+ * contract, so a would-be leak fails the parse (a 500) instead of reaching the wire. `webhook`
+ * carries only the redacted origin form (e.g. `https://hooks.example.com/…`).
+ */
+export declare const AlertRuleSchema: z.ZodObject<{
+    id: z.ZodString;
+    name: z.ZodOptional<z.ZodString>;
+    metric: z.ZodEnum<{
+        error_share: "error_share";
+        error_count: "error_count";
+        calls: "calls";
+        p95_ms: "p95_ms";
+    }>;
+    threshold: z.ZodNumber;
+    windowMinutes: z.ZodNumber;
+    comparison: z.ZodLiteral<">=">;
+    webhook: z.ZodString;
+    enabled: z.ZodBoolean;
+    cooldownMinutes: z.ZodNumber;
+    breaching: z.ZodBoolean;
+    lastObserved: z.ZodOptional<z.ZodNumber>;
+    lastFiredAt: z.ZodOptional<z.ZodString>;
+    createdAt: z.ZodString;
+    updatedAt: z.ZodString;
+}, z.core.$strict>;
+/** The full `POST /v1/orgs/{org}/apps/{app}/envs/{env}/alerts` response body. */
+export declare const AlertRuleResponseSchema: z.ZodObject<{
+    ok: z.ZodLiteral<true>;
+    data: z.ZodObject<{
+        id: z.ZodString;
+        name: z.ZodOptional<z.ZodString>;
+        metric: z.ZodEnum<{
+            error_share: "error_share";
+            error_count: "error_count";
+            calls: "calls";
+            p95_ms: "p95_ms";
+        }>;
+        threshold: z.ZodNumber;
+        windowMinutes: z.ZodNumber;
+        comparison: z.ZodLiteral<">=">;
+        webhook: z.ZodString;
+        enabled: z.ZodBoolean;
+        cooldownMinutes: z.ZodNumber;
+        breaching: z.ZodBoolean;
+        lastObserved: z.ZodOptional<z.ZodNumber>;
+        lastFiredAt: z.ZodOptional<z.ZodString>;
+        createdAt: z.ZodString;
+        updatedAt: z.ZodString;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+/** The full `GET /v1/orgs/{org}/apps/{app}/envs/{env}/alerts` response body. */
+export declare const AlertRulesListResponseSchema: z.ZodObject<{
+    ok: z.ZodLiteral<true>;
+    data: z.ZodObject<{
+        rules: z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            name: z.ZodOptional<z.ZodString>;
+            metric: z.ZodEnum<{
+                error_share: "error_share";
+                error_count: "error_count";
+                calls: "calls";
+                p95_ms: "p95_ms";
+            }>;
+            threshold: z.ZodNumber;
+            windowMinutes: z.ZodNumber;
+            comparison: z.ZodLiteral<">=">;
+            webhook: z.ZodString;
+            enabled: z.ZodBoolean;
+            cooldownMinutes: z.ZodNumber;
+            breaching: z.ZodBoolean;
+            lastObserved: z.ZodOptional<z.ZodNumber>;
+            lastFiredAt: z.ZodOptional<z.ZodString>;
+            createdAt: z.ZodString;
+            updatedAt: z.ZodString;
+        }, z.core.$strict>>;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+//# sourceMappingURL=contracts.d.ts.map

package/node_modules/@noodle-borg/service/dist/routes/contracts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contracts.d.ts","sourceRoot":"","sources":["../../src/routes/contracts.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAWxB,yDAAyD;AACzD,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;kBAezB,CAAC;AAEZ,4FAA4F;AAC5F,eAAO,MAAM,gBAAgB;;;;kBAMlB,CAAC;AAEZ,kDAAkD;AAClD,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAYlB,CAAC;AAEZ,wDAAwD;AACxD,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAUxB,CAAC;AAEZ,4EAA4E;AAC5E,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAKnB,CAAC;AAEZ,kDAAkD;AAClD,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAalB,CAAC;AAEZ,iHAAiH;AACjH,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBASxB,CAAC;AAEZ,uFAAuF;AACvF,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAKnB,CAAC;AAEZ,mGAAmG;AACnG,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;kBAK1B,CAAC;AAEZ,qGAAqG;AACrG,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;kBAetB,CAAC;AAEZ,uFAAuF;AACvF,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;;;;kBAKhC,CAAC;AAEZ,4FAA4F;AAC5F,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBA6BjB,CAAC;AAEZ,0EAA0E;AAC1E,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAU9B,CAAC;AAEZ,2DAA2D;AAC3D,eAAO,MAAM,8BAA8B;;;;;;kBAUhC,CAAC;AAEZ;;;;;GAKG;AACH,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;kBAiBjB,CAAC;AAEZ,iFAAiF;AACjF,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;kBAKzB,CAAC;AAEZ,gFAAgF;AAChF,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;;;;;;;;kBAK9B,CAAC"}

package/node_modules/@noodle-borg/service/dist/routes/contracts.js

@@ -0,0 +1,233 @@
+/**
+ * Zod response contracts for the org/app read surface (`GET /v1/orgs/{org}`, `.../apps`,
+ * `.../apps/{app}`). Handlers `.parse()` their response payload through these before sending, so the
+ * wire shape can never silently drift from what's declared here. The golden fixtures under the
+ * repo-root `contract/v1/` directory assert the same schemas parse realistic sample payloads — the
+ * cross-package drift gate future CLI/console tests load the same fixtures against, so all three
+ * surfaces stay pinned to one contract.
+ */
+import { z } from 'zod';
+const ACCESS_MODES = [
+    'owner-only',
+    'org-members',
+    'public',
+    'mixed',
+    'customers',
+    'authenticated',
+];
+/** Mirrors {@link DeploymentSummary} (`../store.js`). */
+export const DeploymentSummarySchema = z
+    .object({
+    deploymentId: z.string(),
+    orgSlug: z.string(),
+    appSlug: z.string(),
+    environment: z.string(),
+    serverVersion: z.string().optional(),
+    active: z.boolean(),
+    serverName: z.string(),
+    createdAt: z.string(),
+    createdByEmail: z.string().optional(),
+    accessMode: z.enum(ACCESS_MODES),
+    archivedAt: z.string().optional(),
+    endpointUrl: z.string().optional(),
+})
+    .strict();
+/** Mirrors {@link OrgRecord} (`../store.js`) — the `GET /v1/orgs/{org}` response `data`. */
+export const OrgSummarySchema = z
+    .object({
+    slug: z.string(),
+    displayName: z.string().optional(),
+    createdAt: z.string(),
+})
+    .strict();
+/** Mirrors {@link AppSummary} (`../store.js`). */
+export const AppSummarySchema = z
+    .object({
+    orgSlug: z.string(),
+    appSlug: z.string(),
+    environments: z.array(z.string()),
+    latest: DeploymentSummarySchema.optional(),
+    accessMode: z.string().optional(),
+    active: z.boolean(),
+    archivedAt: z.string().optional(),
+    createdAt: z.string(),
+    lastActivityAt: z.string().optional(),
+})
+    .strict();
+/** The full `GET /v1/orgs/{org}/apps` response body. */
+export const AppsListResponseSchema = z
+    .object({
+    ok: z.literal(true),
+    data: z
+        .object({
+        apps: z.array(AppSummarySchema),
+        truncated: z.boolean(),
+    })
+        .strict(),
+})
+    .strict();
+/** The full `GET /v1/orgs/{org}/apps/{app}` response body (app inspect). */
+export const AppResponseSchema = z
+    .object({
+    ok: z.literal(true),
+    data: AppSummarySchema,
+})
+    .strict();
+/** Mirrors {@link EnvSummary} (`../store.js`). */
+export const EnvSummarySchema = z
+    .object({
+    orgSlug: z.string(),
+    appSlug: z.string(),
+    envName: z.string(),
+    latest: DeploymentSummarySchema.optional(),
+    accessMode: z.string().optional(),
+    active: z.boolean(),
+    archivedAt: z.string().optional(),
+    createdAt: z.string(),
+    lastActivityAt: z.string().optional(),
+    deploymentCount: z.number().int().nonnegative(),
+})
+    .strict();
+/** The full `GET /v1/orgs/{org}/apps/{app}/envs` response body. No pagination — env counts per app are small. */
+export const EnvsListResponseSchema = z
+    .object({
+    ok: z.literal(true),
+    data: z
+        .object({
+        envs: z.array(EnvSummarySchema),
+    })
+        .strict(),
+})
+    .strict();
+/** The full `GET /v1/orgs/{org}/apps/{app}/envs/{env}` response body (env inspect). */
+export const EnvResponseSchema = z
+    .object({
+    ok: z.literal(true),
+    data: EnvSummarySchema,
+})
+    .strict();
+/** The full `GET /v1/orgs/{org}/deployments/{deploymentId}` response body (deployment inspect). */
+export const DeploymentResponseSchema = z
+    .object({
+    ok: z.literal(true),
+    data: DeploymentSummarySchema,
+})
+    .strict();
+/** Mirrors {@link RepoConnectionRecord} (`../store.js`) — the GHD-1 GitHub repository connection. */
+export const RepoConnectionSchema = z
+    .object({
+    githubRepositoryId: z.number().int().positive(),
+    installationId: z.number().int().positive(),
+    ownerLogin: z.string(),
+    repoName: z.string(),
+    defaultBranch: z.string(),
+    repoRoot: z.string().optional(),
+    orgSlug: z.string(),
+    appSlug: z.string(),
+    enabled: z.boolean(),
+    createdBySubject: z.string(),
+    createdAt: z.string(),
+    updatedAt: z.string(),
+})
+    .strict();
+/** The full `GET`/`POST /v1/orgs/{org}/apps/{app}/github/connection` response body. */
+export const GithubConnectionResponseSchema = z
+    .object({
+    ok: z.literal(true),
+    data: RepoConnectionSchema,
+})
+    .strict();
+/** One webhook-accepted deploy run (GHD-2) — mirrors `DeployRunRecord` in `../store.ts`. */
+export const DeployRunSchema = z
+    .object({
+    runId: z.string(),
+    orgSlug: z.string(),
+    appSlug: z.string(),
+    envName: z.string(),
+    sourceEvent: z.enum(['push', 'pull_request']),
+    deliveryId: z.string(),
+    githubRepositoryId: z.number().int().positive(),
+    commitSha: z.string(),
+    ref: z.string(),
+    prNumber: z.number().int().positive().optional(),
+    status: z.enum([
+        'queued',
+        'building',
+        'deploying',
+        'deployed',
+        'failed',
+        'canceled',
+        'superseded',
+    ]),
+    blockedReason: z.string().optional(),
+    deploymentId: z.string().optional(),
+    actorLogin: z.string(),
+    errorSummary: z.string().optional(),
+    createdAt: z.string(),
+    startedAt: z.string().optional(),
+    finishedAt: z.string().optional(),
+})
+    .strict();
+/** The full `GET /v1/orgs/{org}/apps/{app}/github/runs` response body. */
+export const GithubRunsListResponseSchema = z
+    .object({
+    ok: z.literal(true),
+    data: z
+        .object({
+        runs: z.array(DeployRunSchema),
+        truncated: z.boolean(),
+    })
+        .strict(),
+})
+    .strict();
+/** The full `GET /v1/github/install-url` response body. */
+export const GithubInstallUrlResponseSchema = z
+    .object({
+    ok: z.literal(true),
+    data: z
+        .object({
+        installUrl: z.string(),
+        state: z.string(),
+    })
+        .strict(),
+})
+    .strict();
+/**
+ * The redacted public view of an alert rule (analytics alerting E2, ADR 0130). Deliberately has
+ * NO `webhookUrl` field and is `.strict()`: the sensitive URL structurally cannot pass this
+ * contract, so a would-be leak fails the parse (a 500) instead of reaching the wire. `webhook`
+ * carries only the redacted origin form (e.g. `https://hooks.example.com/…`).
+ */
+export const AlertRuleSchema = z
+    .object({
+    id: z.string(),
+    name: z.string().optional(),
+    metric: z.enum(['error_share', 'error_count', 'calls', 'p95_ms']),
+    threshold: z.number(),
+    windowMinutes: z.number(),
+    comparison: z.literal('>='),
+    webhook: z.string(),
+    enabled: z.boolean(),
+    cooldownMinutes: z.number(),
+    breaching: z.boolean(),
+    lastObserved: z.number().optional(),
+    lastFiredAt: z.string().optional(),
+    createdAt: z.string(),
+    updatedAt: z.string(),
+})
+    .strict();
+/** The full `POST /v1/orgs/{org}/apps/{app}/envs/{env}/alerts` response body. */
+export const AlertRuleResponseSchema = z
+    .object({
+    ok: z.literal(true),
+    data: AlertRuleSchema,
+})
+    .strict();
+/** The full `GET /v1/orgs/{org}/apps/{app}/envs/{env}/alerts` response body. */
+export const AlertRulesListResponseSchema = z
+    .object({
+    ok: z.literal(true),
+    data: z.object({ rules: z.array(AlertRuleSchema) }).strict(),
+})
+    .strict();
+//# sourceMappingURL=contracts.js.map