@noodleseed/one 0.82.0 → 0.84.0

package/node_modules/@noodle-borg/service/dist/platform-auth-operator.d.ts

@@ -14,6 +14,9 @@ export declare const PlatformAuthOperationBlockerCodeSchema: z.ZodEnum<{
     external_id_too_long: "external_id_too_long";
     conflicting_workos_user: "conflicting_workos_user";
     ambiguous_platform_customer_evidence: "ambiguous_platform_customer_evidence";
+    remote_verification_incomplete: "remote_verification_incomplete";
+    rollout_transition_invalid: "rollout_transition_invalid";
+    finalize_precondition_failed: "finalize_precondition_failed";
     inventory_unavailable: "inventory_unavailable";
     inventory_blocked: "inventory_blocked";
     import_already_started: "import_already_started";
@@ -26,9 +29,6 @@ export declare const PlatformAuthOperationBlockerCodeSchema: z.ZodEnum<{
     events_processor_not_configured: "events_processor_not_configured";
     outbox_reconciliation_pending: "outbox_reconciliation_pending";
     events_reconciliation_pending: "events_reconciliation_pending";
-    remote_verification_incomplete: "remote_verification_incomplete";
-    rollout_transition_invalid: "rollout_transition_invalid";
-    finalize_precondition_failed: "finalize_precondition_failed";
 }>;
 export declare const PlatformAuthOperatorSnapshotSchema: z.ZodObject<{
     schemaVersion: z.ZodLiteral<1>;
@@ -73,6 +73,9 @@ export declare const PlatformAuthOperatorSnapshotSchema: z.ZodObject<{
                 external_id_too_long: "external_id_too_long";
                 conflicting_workos_user: "conflicting_workos_user";
                 ambiguous_platform_customer_evidence: "ambiguous_platform_customer_evidence";
+                remote_verification_incomplete: "remote_verification_incomplete";
+                rollout_transition_invalid: "rollout_transition_invalid";
+                finalize_precondition_failed: "finalize_precondition_failed";
                 inventory_unavailable: "inventory_unavailable";
                 inventory_blocked: "inventory_blocked";
                 import_already_started: "import_already_started";
@@ -85,9 +88,6 @@ export declare const PlatformAuthOperatorSnapshotSchema: z.ZodObject<{
                 events_processor_not_configured: "events_processor_not_configured";
                 outbox_reconciliation_pending: "outbox_reconciliation_pending";
                 events_reconciliation_pending: "events_reconciliation_pending";
-                remote_verification_incomplete: "remote_verification_incomplete";
-                rollout_transition_invalid: "rollout_transition_invalid";
-                finalize_precondition_failed: "finalize_precondition_failed";
             }>;
             count: z.ZodNumber;
         }, z.core.$strict>>;
@@ -130,8 +130,8 @@ export declare const PlatformAuthOperatorSnapshotSchema: z.ZodObject<{
     remoteVerification: z.ZodObject<{
         state: z.ZodEnum<{
             ready: "ready";
-            not_configured: "not_configured";
             blocked: "blocked";
+            not_configured: "not_configured";
             not_started: "not_started";
             running: "running";
         }>;
@@ -187,6 +187,9 @@ export declare const PlatformAuthOperatorResponseSchema: z.ZodObject<{
                     external_id_too_long: "external_id_too_long";
                     conflicting_workos_user: "conflicting_workos_user";
                     ambiguous_platform_customer_evidence: "ambiguous_platform_customer_evidence";
+                    remote_verification_incomplete: "remote_verification_incomplete";
+                    rollout_transition_invalid: "rollout_transition_invalid";
+                    finalize_precondition_failed: "finalize_precondition_failed";
                     inventory_unavailable: "inventory_unavailable";
                     inventory_blocked: "inventory_blocked";
                     import_already_started: "import_already_started";
@@ -199,9 +202,6 @@ export declare const PlatformAuthOperatorResponseSchema: z.ZodObject<{
                     events_processor_not_configured: "events_processor_not_configured";
                     outbox_reconciliation_pending: "outbox_reconciliation_pending";
                     events_reconciliation_pending: "events_reconciliation_pending";
-                    remote_verification_incomplete: "remote_verification_incomplete";
-                    rollout_transition_invalid: "rollout_transition_invalid";
-                    finalize_precondition_failed: "finalize_precondition_failed";
                 }>;
                 count: z.ZodNumber;
             }, z.core.$strict>>;
@@ -244,8 +244,8 @@ export declare const PlatformAuthOperatorResponseSchema: z.ZodObject<{
         remoteVerification: z.ZodObject<{
             state: z.ZodEnum<{
                 ready: "ready";
-                not_configured: "not_configured";
                 blocked: "blocked";
+                not_configured: "not_configured";
                 not_started: "not_started";
                 running: "running";
             }>;
@@ -363,11 +363,11 @@ export declare const PlatformAuthFinalizeRequestSchema: z.ZodObject<{
 }, z.core.$strict>;
 export declare const PlatformAuthOperationPreviewSchema: z.ZodUnion<readonly [z.ZodObject<{
     operation: z.ZodEnum<{
-        activate: "activate";
         rollback: "rollback";
+        finalize: "finalize";
+        activate: "activate";
         start_import: "start_import";
         reconcile: "reconcile";
-        finalize: "finalize";
     }>;
     target: z.ZodObject<{
         percentage: z.ZodNullable<z.ZodNumber>;
@@ -391,6 +391,9 @@ export declare const PlatformAuthOperationPreviewSchema: z.ZodUnion<readonly [z.
             external_id_too_long: "external_id_too_long";
             conflicting_workos_user: "conflicting_workos_user";
             ambiguous_platform_customer_evidence: "ambiguous_platform_customer_evidence";
+            remote_verification_incomplete: "remote_verification_incomplete";
+            rollout_transition_invalid: "rollout_transition_invalid";
+            finalize_precondition_failed: "finalize_precondition_failed";
             inventory_unavailable: "inventory_unavailable";
             inventory_blocked: "inventory_blocked";
             import_already_started: "import_already_started";
@@ -403,9 +406,6 @@ export declare const PlatformAuthOperationPreviewSchema: z.ZodUnion<readonly [z.
             events_processor_not_configured: "events_processor_not_configured";
             outbox_reconciliation_pending: "outbox_reconciliation_pending";
             events_reconciliation_pending: "events_reconciliation_pending";
-            remote_verification_incomplete: "remote_verification_incomplete";
-            rollout_transition_invalid: "rollout_transition_invalid";
-            finalize_precondition_failed: "finalize_precondition_failed";
         }>;
         count: z.ZodNumber;
     }, z.core.$strict>>;
@@ -451,6 +451,9 @@ export declare const PlatformAuthOperationPreviewSchema: z.ZodUnion<readonly [z.
                 external_id_too_long: "external_id_too_long";
                 conflicting_workos_user: "conflicting_workos_user";
                 ambiguous_platform_customer_evidence: "ambiguous_platform_customer_evidence";
+                remote_verification_incomplete: "remote_verification_incomplete";
+                rollout_transition_invalid: "rollout_transition_invalid";
+                finalize_precondition_failed: "finalize_precondition_failed";
                 inventory_unavailable: "inventory_unavailable";
                 inventory_blocked: "inventory_blocked";
                 import_already_started: "import_already_started";
@@ -463,9 +466,6 @@ export declare const PlatformAuthOperationPreviewSchema: z.ZodUnion<readonly [z.
                 events_processor_not_configured: "events_processor_not_configured";
                 outbox_reconciliation_pending: "outbox_reconciliation_pending";
                 events_reconciliation_pending: "events_reconciliation_pending";
-                remote_verification_incomplete: "remote_verification_incomplete";
-                rollout_transition_invalid: "rollout_transition_invalid";
-                finalize_precondition_failed: "finalize_precondition_failed";
             }>;
             count: z.ZodNumber;
         }, z.core.$strict>>;
@@ -508,8 +508,8 @@ export declare const PlatformAuthOperationPreviewSchema: z.ZodUnion<readonly [z.
     remoteVerification: z.ZodObject<{
         state: z.ZodEnum<{
             ready: "ready";
-            not_configured: "not_configured";
             blocked: "blocked";
+            not_configured: "not_configured";
             not_started: "not_started";
             running: "running";
         }>;
@@ -535,6 +535,9 @@ export declare const PlatformAuthOperationPreviewSchema: z.ZodUnion<readonly [z.
             external_id_too_long: "external_id_too_long";
             conflicting_workos_user: "conflicting_workos_user";
             ambiguous_platform_customer_evidence: "ambiguous_platform_customer_evidence";
+            remote_verification_incomplete: "remote_verification_incomplete";
+            rollout_transition_invalid: "rollout_transition_invalid";
+            finalize_precondition_failed: "finalize_precondition_failed";
             inventory_unavailable: "inventory_unavailable";
             inventory_blocked: "inventory_blocked";
             import_already_started: "import_already_started";
@@ -547,9 +550,6 @@ export declare const PlatformAuthOperationPreviewSchema: z.ZodUnion<readonly [z.
             events_processor_not_configured: "events_processor_not_configured";
             outbox_reconciliation_pending: "outbox_reconciliation_pending";
             events_reconciliation_pending: "events_reconciliation_pending";
-            remote_verification_incomplete: "remote_verification_incomplete";
-            rollout_transition_invalid: "rollout_transition_invalid";
-            finalize_precondition_failed: "finalize_precondition_failed";
         }>;
         count: z.ZodNumber;
     }, z.core.$strict>>;
@@ -595,6 +595,9 @@ export declare const PlatformAuthOperationPreviewSchema: z.ZodUnion<readonly [z.
                 external_id_too_long: "external_id_too_long";
                 conflicting_workos_user: "conflicting_workos_user";
                 ambiguous_platform_customer_evidence: "ambiguous_platform_customer_evidence";
+                remote_verification_incomplete: "remote_verification_incomplete";
+                rollout_transition_invalid: "rollout_transition_invalid";
+                finalize_precondition_failed: "finalize_precondition_failed";
                 inventory_unavailable: "inventory_unavailable";
                 inventory_blocked: "inventory_blocked";
                 import_already_started: "import_already_started";
@@ -607,9 +610,6 @@ export declare const PlatformAuthOperationPreviewSchema: z.ZodUnion<readonly [z.
                 events_processor_not_configured: "events_processor_not_configured";
                 outbox_reconciliation_pending: "outbox_reconciliation_pending";
                 events_reconciliation_pending: "events_reconciliation_pending";
-                remote_verification_incomplete: "remote_verification_incomplete";
-                rollout_transition_invalid: "rollout_transition_invalid";
-                finalize_precondition_failed: "finalize_precondition_failed";
             }>;
             count: z.ZodNumber;
         }, z.core.$strict>>;
@@ -652,8 +652,8 @@ export declare const PlatformAuthOperationPreviewSchema: z.ZodUnion<readonly [z.
     remoteVerification: z.ZodObject<{
         state: z.ZodEnum<{
             ready: "ready";
-            not_configured: "not_configured";
             blocked: "blocked";
+            not_configured: "not_configured";
             not_started: "not_started";
             running: "running";
         }>;
@@ -668,11 +668,11 @@ export declare const PlatformAuthOperationPreviewResponseSchema: z.ZodObject<{
     ok: z.ZodLiteral<true>;
     data: z.ZodUnion<readonly [z.ZodObject<{
         operation: z.ZodEnum<{
-            activate: "activate";
             rollback: "rollback";
+            finalize: "finalize";
+            activate: "activate";
             start_import: "start_import";
             reconcile: "reconcile";
-            finalize: "finalize";
         }>;
         target: z.ZodObject<{
             percentage: z.ZodNullable<z.ZodNumber>;
@@ -696,6 +696,9 @@ export declare const PlatformAuthOperationPreviewResponseSchema: z.ZodObject<{
                 external_id_too_long: "external_id_too_long";
                 conflicting_workos_user: "conflicting_workos_user";
                 ambiguous_platform_customer_evidence: "ambiguous_platform_customer_evidence";
+                remote_verification_incomplete: "remote_verification_incomplete";
+                rollout_transition_invalid: "rollout_transition_invalid";
+                finalize_precondition_failed: "finalize_precondition_failed";
                 inventory_unavailable: "inventory_unavailable";
                 inventory_blocked: "inventory_blocked";
                 import_already_started: "import_already_started";
@@ -708,9 +711,6 @@ export declare const PlatformAuthOperationPreviewResponseSchema: z.ZodObject<{
                 events_processor_not_configured: "events_processor_not_configured";
                 outbox_reconciliation_pending: "outbox_reconciliation_pending";
                 events_reconciliation_pending: "events_reconciliation_pending";
-                remote_verification_incomplete: "remote_verification_incomplete";
-                rollout_transition_invalid: "rollout_transition_invalid";
-                finalize_precondition_failed: "finalize_precondition_failed";
             }>;
             count: z.ZodNumber;
         }, z.core.$strict>>;
@@ -756,6 +756,9 @@ export declare const PlatformAuthOperationPreviewResponseSchema: z.ZodObject<{
                     external_id_too_long: "external_id_too_long";
                     conflicting_workos_user: "conflicting_workos_user";
                     ambiguous_platform_customer_evidence: "ambiguous_platform_customer_evidence";
+                    remote_verification_incomplete: "remote_verification_incomplete";
+                    rollout_transition_invalid: "rollout_transition_invalid";
+                    finalize_precondition_failed: "finalize_precondition_failed";
                     inventory_unavailable: "inventory_unavailable";
                     inventory_blocked: "inventory_blocked";
                     import_already_started: "import_already_started";
@@ -768,9 +771,6 @@ export declare const PlatformAuthOperationPreviewResponseSchema: z.ZodObject<{
                     events_processor_not_configured: "events_processor_not_configured";
                     outbox_reconciliation_pending: "outbox_reconciliation_pending";
                     events_reconciliation_pending: "events_reconciliation_pending";
-                    remote_verification_incomplete: "remote_verification_incomplete";
-                    rollout_transition_invalid: "rollout_transition_invalid";
-                    finalize_precondition_failed: "finalize_precondition_failed";
                 }>;
                 count: z.ZodNumber;
             }, z.core.$strict>>;
@@ -813,8 +813,8 @@ export declare const PlatformAuthOperationPreviewResponseSchema: z.ZodObject<{
         remoteVerification: z.ZodObject<{
             state: z.ZodEnum<{
                 ready: "ready";
-                not_configured: "not_configured";
                 blocked: "blocked";
+                not_configured: "not_configured";
                 not_started: "not_started";
                 running: "running";
             }>;
@@ -840,6 +840,9 @@ export declare const PlatformAuthOperationPreviewResponseSchema: z.ZodObject<{
                 external_id_too_long: "external_id_too_long";
                 conflicting_workos_user: "conflicting_workos_user";
                 ambiguous_platform_customer_evidence: "ambiguous_platform_customer_evidence";
+                remote_verification_incomplete: "remote_verification_incomplete";
+                rollout_transition_invalid: "rollout_transition_invalid";
+                finalize_precondition_failed: "finalize_precondition_failed";
                 inventory_unavailable: "inventory_unavailable";
                 inventory_blocked: "inventory_blocked";
                 import_already_started: "import_already_started";
@@ -852,9 +855,6 @@ export declare const PlatformAuthOperationPreviewResponseSchema: z.ZodObject<{
                 events_processor_not_configured: "events_processor_not_configured";
                 outbox_reconciliation_pending: "outbox_reconciliation_pending";
                 events_reconciliation_pending: "events_reconciliation_pending";
-                remote_verification_incomplete: "remote_verification_incomplete";
-                rollout_transition_invalid: "rollout_transition_invalid";
-                finalize_precondition_failed: "finalize_precondition_failed";
             }>;
             count: z.ZodNumber;
         }, z.core.$strict>>;
@@ -900,6 +900,9 @@ export declare const PlatformAuthOperationPreviewResponseSchema: z.ZodObject<{
                     external_id_too_long: "external_id_too_long";
                     conflicting_workos_user: "conflicting_workos_user";
                     ambiguous_platform_customer_evidence: "ambiguous_platform_customer_evidence";
+                    remote_verification_incomplete: "remote_verification_incomplete";
+                    rollout_transition_invalid: "rollout_transition_invalid";
+                    finalize_precondition_failed: "finalize_precondition_failed";
                     inventory_unavailable: "inventory_unavailable";
                     inventory_blocked: "inventory_blocked";
                     import_already_started: "import_already_started";
@@ -912,9 +915,6 @@ export declare const PlatformAuthOperationPreviewResponseSchema: z.ZodObject<{
                     events_processor_not_configured: "events_processor_not_configured";
                     outbox_reconciliation_pending: "outbox_reconciliation_pending";
                     events_reconciliation_pending: "events_reconciliation_pending";
-                    remote_verification_incomplete: "remote_verification_incomplete";
-                    rollout_transition_invalid: "rollout_transition_invalid";
-                    finalize_precondition_failed: "finalize_precondition_failed";
                 }>;
                 count: z.ZodNumber;
             }, z.core.$strict>>;
@@ -957,8 +957,8 @@ export declare const PlatformAuthOperationPreviewResponseSchema: z.ZodObject<{
         remoteVerification: z.ZodObject<{
             state: z.ZodEnum<{
                 ready: "ready";
-                not_configured: "not_configured";
                 blocked: "blocked";
+                not_configured: "not_configured";
                 not_started: "not_started";
                 running: "running";
             }>;
@@ -971,11 +971,11 @@ export declare const PlatformAuthOperationPreviewResponseSchema: z.ZodObject<{
 }, z.core.$strict>;
 export declare const PlatformAuthOperationResultSchema: z.ZodUnion<readonly [z.ZodObject<{
     operation: z.ZodEnum<{
-        activate: "activate";
         rollback: "rollback";
+        finalize: "finalize";
+        activate: "activate";
         start_import: "start_import";
         reconcile: "reconcile";
-        finalize: "finalize";
     }>;
     batch: z.ZodNullable<z.ZodObject<{
         attempted: z.ZodNumber;
@@ -1046,6 +1046,9 @@ export declare const PlatformAuthOperationResultSchema: z.ZodUnion<readonly [z.Z
                 external_id_too_long: "external_id_too_long";
                 conflicting_workos_user: "conflicting_workos_user";
                 ambiguous_platform_customer_evidence: "ambiguous_platform_customer_evidence";
+                remote_verification_incomplete: "remote_verification_incomplete";
+                rollout_transition_invalid: "rollout_transition_invalid";
+                finalize_precondition_failed: "finalize_precondition_failed";
                 inventory_unavailable: "inventory_unavailable";
                 inventory_blocked: "inventory_blocked";
                 import_already_started: "import_already_started";
@@ -1058,9 +1061,6 @@ export declare const PlatformAuthOperationResultSchema: z.ZodUnion<readonly [z.Z
                 events_processor_not_configured: "events_processor_not_configured";
                 outbox_reconciliation_pending: "outbox_reconciliation_pending";
                 events_reconciliation_pending: "events_reconciliation_pending";
-                remote_verification_incomplete: "remote_verification_incomplete";
-                rollout_transition_invalid: "rollout_transition_invalid";
-                finalize_precondition_failed: "finalize_precondition_failed";
             }>;
             count: z.ZodNumber;
         }, z.core.$strict>>;
@@ -1103,8 +1103,8 @@ export declare const PlatformAuthOperationResultSchema: z.ZodUnion<readonly [z.Z
     remoteVerification: z.ZodObject<{
         state: z.ZodEnum<{
             ready: "ready";
-            not_configured: "not_configured";
             blocked: "blocked";
+            not_configured: "not_configured";
             not_started: "not_started";
             running: "running";
         }>;
@@ -1163,6 +1163,9 @@ export declare const PlatformAuthOperationResultSchema: z.ZodUnion<readonly [z.Z
                 external_id_too_long: "external_id_too_long";
                 conflicting_workos_user: "conflicting_workos_user";
                 ambiguous_platform_customer_evidence: "ambiguous_platform_customer_evidence";
+                remote_verification_incomplete: "remote_verification_incomplete";
+                rollout_transition_invalid: "rollout_transition_invalid";
+                finalize_precondition_failed: "finalize_precondition_failed";
                 inventory_unavailable: "inventory_unavailable";
                 inventory_blocked: "inventory_blocked";
                 import_already_started: "import_already_started";
@@ -1175,9 +1178,6 @@ export declare const PlatformAuthOperationResultSchema: z.ZodUnion<readonly [z.Z
                 events_processor_not_configured: "events_processor_not_configured";
                 outbox_reconciliation_pending: "outbox_reconciliation_pending";
                 events_reconciliation_pending: "events_reconciliation_pending";
-                remote_verification_incomplete: "remote_verification_incomplete";
-                rollout_transition_invalid: "rollout_transition_invalid";
-                finalize_precondition_failed: "finalize_precondition_failed";
             }>;
             count: z.ZodNumber;
         }, z.core.$strict>>;
@@ -1220,8 +1220,8 @@ export declare const PlatformAuthOperationResultSchema: z.ZodUnion<readonly [z.Z
     remoteVerification: z.ZodObject<{
         state: z.ZodEnum<{
             ready: "ready";
-            not_configured: "not_configured";
             blocked: "blocked";
+            not_configured: "not_configured";
             not_started: "not_started";
             running: "running";
         }>;
@@ -1236,11 +1236,11 @@ export declare const PlatformAuthOperationResultResponseSchema: z.ZodObject<{
     ok: z.ZodLiteral<true>;
     data: z.ZodUnion<readonly [z.ZodObject<{
         operation: z.ZodEnum<{
-            activate: "activate";
             rollback: "rollback";
+            finalize: "finalize";
+            activate: "activate";
             start_import: "start_import";
             reconcile: "reconcile";
-            finalize: "finalize";
         }>;
         batch: z.ZodNullable<z.ZodObject<{
             attempted: z.ZodNumber;
@@ -1311,6 +1311,9 @@ export declare const PlatformAuthOperationResultResponseSchema: z.ZodObject<{
                     external_id_too_long: "external_id_too_long";
                     conflicting_workos_user: "conflicting_workos_user";
                     ambiguous_platform_customer_evidence: "ambiguous_platform_customer_evidence";
+                    remote_verification_incomplete: "remote_verification_incomplete";
+                    rollout_transition_invalid: "rollout_transition_invalid";
+                    finalize_precondition_failed: "finalize_precondition_failed";
                     inventory_unavailable: "inventory_unavailable";
                     inventory_blocked: "inventory_blocked";
                     import_already_started: "import_already_started";
@@ -1323,9 +1326,6 @@ export declare const PlatformAuthOperationResultResponseSchema: z.ZodObject<{
                     events_processor_not_configured: "events_processor_not_configured";
                     outbox_reconciliation_pending: "outbox_reconciliation_pending";
                     events_reconciliation_pending: "events_reconciliation_pending";
-                    remote_verification_incomplete: "remote_verification_incomplete";
-                    rollout_transition_invalid: "rollout_transition_invalid";
-                    finalize_precondition_failed: "finalize_precondition_failed";
                 }>;
                 count: z.ZodNumber;
             }, z.core.$strict>>;
@@ -1368,8 +1368,8 @@ export declare const PlatformAuthOperationResultResponseSchema: z.ZodObject<{
         remoteVerification: z.ZodObject<{
             state: z.ZodEnum<{
                 ready: "ready";
-                not_configured: "not_configured";
                 blocked: "blocked";
+                not_configured: "not_configured";
                 not_started: "not_started";
                 running: "running";
             }>;
@@ -1428,6 +1428,9 @@ export declare const PlatformAuthOperationResultResponseSchema: z.ZodObject<{
                     external_id_too_long: "external_id_too_long";
                     conflicting_workos_user: "conflicting_workos_user";
                     ambiguous_platform_customer_evidence: "ambiguous_platform_customer_evidence";
+                    remote_verification_incomplete: "remote_verification_incomplete";
+                    rollout_transition_invalid: "rollout_transition_invalid";
+                    finalize_precondition_failed: "finalize_precondition_failed";
                     inventory_unavailable: "inventory_unavailable";
                     inventory_blocked: "inventory_blocked";
                     import_already_started: "import_already_started";
@@ -1440,9 +1443,6 @@ export declare const PlatformAuthOperationResultResponseSchema: z.ZodObject<{
                     events_processor_not_configured: "events_processor_not_configured";
                     outbox_reconciliation_pending: "outbox_reconciliation_pending";
                     events_reconciliation_pending: "events_reconciliation_pending";
-                    remote_verification_incomplete: "remote_verification_incomplete";
-                    rollout_transition_invalid: "rollout_transition_invalid";
-                    finalize_precondition_failed: "finalize_precondition_failed";
                 }>;
                 count: z.ZodNumber;
             }, z.core.$strict>>;
@@ -1485,8 +1485,8 @@ export declare const PlatformAuthOperationResultResponseSchema: z.ZodObject<{
         remoteVerification: z.ZodObject<{
             state: z.ZodEnum<{
                 ready: "ready";
-                not_configured: "not_configured";
                 blocked: "blocked";
+                not_configured: "not_configured";
                 not_started: "not_started";
                 running: "running";
             }>;

package/node_modules/@noodle-borg/service/dist/platform-auth-rollout-support.d.ts

@@ -76,7 +76,7 @@ export declare function previewRequest(state: DurableState, aggregate: Aggregate
         importLineageChecksum: string;
         workosRealmFingerprint: string;
     };
-    operation: "activate" | "rollback" | "finalize";
+    operation: "rollback" | "finalize" | "activate";
     percentage: number;
     cohortMode: "replace" | "preserve";
     canaryClientIds: readonly string[];

package/node_modules/@noodle-borg/service/dist/platform-auth-runtime.d.ts

@@ -1,12 +1,27 @@
 import type { Pool } from 'pg';
 import { WorkOSEventProcessor, type WorkOSEventsClient } from './oauth/workos-events.js';
+import { type PlatformAccountResetTargetSet } from './platform-account-reset.js';
+import type { PlatformAccountResetRegistryPlan } from './platform-account-reset-operation-postgres.js';
+import type { PlatformAccountResetOperatorPort } from './platform-account-reset-ports.js';
 import { type PlatformAuthDirectory } from './platform-auth-migration.js';
 import { PostgresPlatformAuthOperator } from './platform-auth-operator-postgres.js';
 import { type PlatformIdentitySyncDirectory, PlatformIdentitySyncProcessor } from './platform-identity-sync.js';
+import { type PlatformAccountResetDirectory } from './workos-directory.js';
+export interface PostgresPlatformAccountResetRuntime {
+    readonly approvedTargetSet: PlatformAccountResetTargetSet;
+    operator(actorFingerprint: string, reconcileRegistry?: (input: PlatformAccountResetRegistryPlan) => void | Promise<void>): PlatformAccountResetOperatorPort;
+    previewContext(): Promise<{
+        readonly releaseSha: string;
+        readonly expectedGeneration: number;
+        readonly sourceEpoch: number;
+        readonly workosRealm: string;
+    }>;
+}
 export interface PostgresPlatformAuthRuntime {
     readonly operator: PostgresPlatformAuthOperator;
     readonly outboxProcessor: PlatformIdentitySyncProcessor;
     readonly eventsProcessor: WorkOSEventProcessor;
+    readonly accountReset?: PostgresPlatformAccountResetRuntime;
 }
 /** Leave the migration runtime dormant until the complete WorkOS configuration is present. */
 export declare function createConfiguredPostgresPlatformAuthRuntime(input: {
@@ -18,6 +33,7 @@ export declare function createConfiguredPostgresPlatformAuthRuntime(input: {
         readonly realm?: string;
     } | undefined;
     readonly workloadSubjects: readonly string[] | undefined;
+    readonly approvedAccountResetTargetSet: PlatformAccountResetTargetSet | undefined;
 }): Promise<PostgresPlatformAuthRuntime | undefined>;
 /** Builds the durable migration/control runtime once the ordinary Postgres schemas already exist. */
 export declare function createPostgresPlatformAuthRuntime(input: {
@@ -29,8 +45,9 @@ export declare function createPostgresPlatformAuthRuntime(input: {
         readonly realm: string;
     };
     readonly workloadSubjects?: readonly string[];
+    readonly approvedAccountResetTargetSet?: PlatformAccountResetTargetSet;
     readonly syntheticSubjects?: readonly string[];
-    readonly directory?: PlatformAuthDirectory & PlatformIdentitySyncDirectory;
+    readonly directory?: PlatformAuthDirectory & PlatformIdentitySyncDirectory & PlatformAccountResetDirectory;
     readonly eventsClient?: WorkOSEventsClient;
 }): Promise<PostgresPlatformAuthRuntime>;
 //# sourceMappingURL=platform-auth-runtime.d.ts.map

package/node_modules/@noodle-borg/service/dist/platform-auth-runtime.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"platform-auth-runtime.d.ts","sourceRoot":"","sources":["../src/platform-auth-runtime.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC;AAC/B,OAAO,EAEL,oBAAoB,EACpB,KAAK,kBAAkB,EAExB,MAAM,0BAA0B,CAAC;AAMlC,OAAO,EACL,KAAK,qBAAqB,EAE3B,MAAM,8BAA8B,CAAC;AAEtC,OAAO,EAAE,4BAA4B,EAAE,MAAM,sCAAsC,CAAC;AAKpF,OAAO,EACL,KAAK,6BAA6B,EAClC,6BAA6B,EAC9B,MAAM,6BAA6B,CAAC;AAKrC,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,QAAQ,EAAE,4BAA4B,CAAC;IAChD,QAAQ,CAAC,eAAe,EAAE,6BAA6B,CAAC;IACxD,QAAQ,CAAC,eAAe,EAAE,oBAAoB,CAAC;CAChD;AAED,8FAA8F;AAC9F,wBAAgB,2CAA2C,CAAC,KAAK,EAAE;IACjE,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;IACpB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,EACX;QACE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;KACzB,GACD,SAAS,CAAC;IACd,QAAQ,CAAC,gBAAgB,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;CAC1D,GAAG,OAAO,CAAC,2BAA2B,GAAG,SAAS,CAAC,CAWnD;AAED,qGAAqG;AACrG,wBAAsB,iCAAiC,CAAC,KAAK,EAAE;IAC7D,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;IACpB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE;QAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAChG,QAAQ,CAAC,gBAAgB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9C,QAAQ,CAAC,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/C,QAAQ,CAAC,SAAS,CAAC,EAAE,qBAAqB,GAAG,6BAA6B,CAAC;IAC3E,QAAQ,CAAC,YAAY,CAAC,EAAE,kBAAkB,CAAC;CAC5C,GAAG,OAAO,CAAC,2BAA2B,CAAC,CAiEvC"}
+{"version":3,"file":"platform-auth-runtime.d.ts","sourceRoot":"","sources":["../src/platform-auth-runtime.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC;AAC/B,OAAO,EAEL,oBAAoB,EACpB,KAAK,kBAAkB,EAExB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,KAAK,6BAA6B,EAEnC,MAAM,6BAA6B,CAAC;AAErC,OAAO,KAAK,EAAE,gCAAgC,EAAE,MAAM,gDAAgD,CAAC;AAEvG,OAAO,KAAK,EAAE,gCAAgC,EAAE,MAAM,mCAAmC,CAAC;AAW1F,OAAO,EACL,KAAK,qBAAqB,EAE3B,MAAM,8BAA8B,CAAC;AAEtC,OAAO,EAAE,4BAA4B,EAAE,MAAM,sCAAsC,CAAC;AAKpF,OAAO,EACL,KAAK,6BAA6B,EAClC,6BAA6B,EAC9B,MAAM,6BAA6B,CAAC;AAGrC,OAAO,EAAE,KAAK,6BAA6B,EAA0B,MAAM,uBAAuB,CAAC;AAEnG,MAAM,WAAW,mCAAmC;IAClD,QAAQ,CAAC,iBAAiB,EAAE,6BAA6B,CAAC;IAC1D,QAAQ,CACN,gBAAgB,EAAE,MAAM,EACxB,iBAAiB,CAAC,EAAE,CAAC,KAAK,EAAE,gCAAgC,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,GACpF,gCAAgC,CAAC;IACpC,cAAc,IAAI,OAAO,CAAC;QACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;QAC5B,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;QACpC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;KAC9B,CAAC,CAAC;CACJ;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,QAAQ,EAAE,4BAA4B,CAAC;IAChD,QAAQ,CAAC,eAAe,EAAE,6BAA6B,CAAC;IACxD,QAAQ,CAAC,eAAe,EAAE,oBAAoB,CAAC;IAC/C,QAAQ,CAAC,YAAY,CAAC,EAAE,mCAAmC,CAAC;CAC7D;AAED,8FAA8F;AAC9F,wBAAgB,2CAA2C,CAAC,KAAK,EAAE;IACjE,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;IACpB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,EACX;QACE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;KACzB,GACD,SAAS,CAAC;IACd,QAAQ,CAAC,gBAAgB,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IACzD,QAAQ,CAAC,6BAA6B,EAAE,6BAA6B,GAAG,SAAS,CAAC;CACnF,GAAG,OAAO,CAAC,2BAA2B,GAAG,SAAS,CAAC,CAcnD;AAED,qGAAqG;AACrG,wBAAsB,iCAAiC,CAAC,KAAK,EAAE;IAC7D,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;IACpB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE;QAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAChG,QAAQ,CAAC,gBAAgB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9C,QAAQ,CAAC,6BAA6B,CAAC,EAAE,6BAA6B,CAAC;IACvE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/C,QAAQ,CAAC,SAAS,CAAC,EAAE,qBAAqB,GACxC,6BAA6B,GAC7B,6BAA6B,CAAC;IAChC,QAAQ,CAAC,YAAY,CAAC,EAAE,kBAAkB,CAAC;CAC5C,GAAG,OAAO,CAAC,2BAA2B,CAAC,CA6JvC"}

package/node_modules/@noodle-borg/service/dist/platform-auth-runtime.js

@@ -1,5 +1,13 @@
 import { PostgresWorkOSIdentityEventStore, WorkOSEventProcessor, WorkOSEventsSdkClient, } from './oauth/workos-events.js';
+import { PlatformAccountResetTargetSetSchema, } from './platform-account-reset.js';
+import { platformAccountResetApprovedTargetSetFingerprint } from './platform-account-reset-fingerprint.js';
+import { PlatformAccountResetOperator } from './platform-account-reset-operator.js';
+import { PostgresPlatformAccountResetPreviewStore } from './platform-account-reset-preview-postgres.js';
+import { PostgresPlatformAccountResetQuarantineStore } from './platform-account-reset-quarantine-postgres.js';
+import { PostgresPlatformAccountResetRollbackStore } from './platform-account-reset-rollback-postgres.js';
+import { PostgresPlatformAccountResetRollbackPreviewStore } from './platform-account-reset-rollback-preview-postgres.js';
 import { PLATFORM_AUTH_INVENTORY_SOURCES, PostgresPlatformAuthInventoryStore, } from './platform-auth-inventory-postgres.js';
+import { readPlatformAuthInventorySourceEpoch } from './platform-auth-inventory-source-fence-postgres.js';
 import { PlatformAuthImportService, } from './platform-auth-migration.js';
 import { PostgresPlatformAuthMigrationStore } from './platform-auth-migration-postgres.js';
 import { PostgresPlatformAuthOperator } from './platform-auth-operator-postgres.js';
@@ -22,6 +30,9 @@ export function createConfiguredPostgresPlatformAuthRuntime(input) {
         releaseSha: input.releaseSha,
         workos: { apiKey: workos.apiKey, clientId: workos.clientId, realm: workos.realm },
         workloadSubjects: input.workloadSubjects ?? [],
+        ...(input.approvedAccountResetTargetSet === undefined
+            ? {}
+            : { approvedAccountResetTargetSet: input.approvedAccountResetTargetSet }),
     });
 }
 /** Builds the durable migration/control runtime once the ordinary Postgres schemas already exist. */
@@ -32,8 +43,11 @@ export async function createPostgresPlatformAuthRuntime(input) {
     await ensurePlatformAuthOperatorSchema(input.pool);
     const directory = input.directory ??
         WorkOSDirectoryAdapter.fromApiKey(input.workos.apiKey, input.workos.clientId);
+    const syncStore = new PostgresPlatformIdentitySyncStore(input.pool, {
+        workosRealm: input.workos.realm,
+    });
     const outboxProcessor = new PlatformIdentitySyncProcessor({
-        store: new PostgresPlatformIdentitySyncStore(input.pool, { workosRealm: input.workos.realm }),
+        store: syncStore,
         directory,
     });
     const eventsProcessor = new WorkOSEventProcessor({
@@ -85,7 +99,88 @@ export async function createPostgresPlatformAuthRuntime(input) {
         remoteVerificationWorker,
         remoteVerificationStore,
     });
-    return { operator, outboxProcessor, eventsProcessor };
+    const sourceAvailability = configuredInventorySources();
+    const excludedSubjects = [
+        ...(input.workloadSubjects ?? []).map((subject) => ({
+            subject,
+            kind: 'workload',
+        })),
+        ...(input.syntheticSubjects ?? []).map((subject) => ({
+            subject,
+            kind: 'synthetic',
+        })),
+    ];
+    const approvedTargetSet = input.approvedAccountResetTargetSet === undefined
+        ? undefined
+        : PlatformAccountResetTargetSetSchema.parse(input.approvedAccountResetTargetSet);
+    const approvedTargetSetFingerprint = approvedTargetSet === undefined
+        ? undefined
+        : platformAccountResetApprovedTargetSetFingerprint(approvedTargetSet);
+    const accountReset = approvedTargetSet === undefined || approvedTargetSetFingerprint === undefined
+        ? undefined
+        : {
+            approvedTargetSet,
+            operator: (actorFingerprint, reconcileRegistry) => {
+                const preview = new PostgresPlatformAccountResetPreviewStore(input.pool, {
+                    directory,
+                    sourceAvailability,
+                    googleRealm: 'accounts.google.com',
+                    workosRealm: input.workos.realm,
+                    releaseSha: input.releaseSha,
+                    actorFingerprint,
+                    approvedTargetSetFingerprint,
+                    excludedSubjects,
+                });
+                const rollbackPreview = new PostgresPlatformAccountResetRollbackPreviewStore(input.pool, {
+                    directory,
+                    sourceAvailability,
+                    googleRealm: 'accounts.google.com',
+                    workosRealm: input.workos.realm,
+                    releaseSha: input.releaseSha,
+                });
+                return new PlatformAccountResetOperator({
+                    preview,
+                    rollbackPreview,
+                    quarantine: new PostgresPlatformAccountResetQuarantineStore(input.pool, {
+                        preview,
+                        sourceAvailability,
+                        releaseSha: input.releaseSha,
+                        workosRealm: input.workos.realm,
+                        approvedTargetSetFingerprint,
+                        actorFingerprint,
+                    }),
+                    rollback: new PostgresPlatformAccountResetRollbackStore(input.pool, {
+                        preview: rollbackPreview,
+                        sourceAvailability,
+                        releaseSha: input.releaseSha,
+                        workosRealm: input.workos.realm,
+                        approvedTargetSetFingerprint,
+                        actorFingerprint,
+                    }),
+                    statusStore: input.pool,
+                    ...(reconcileRegistry === undefined ? {} : { reconcileRegistry }),
+                });
+            },
+            previewContext: async () => {
+                const rollout = await input.pool.query('SELECT generation FROM platform_auth_rollout_state WHERE singleton = true');
+                const expectedGeneration = Number(rollout.rows[0]?.generation);
+                if (!Number.isSafeInteger(expectedGeneration) || expectedGeneration < 0) {
+                    throw new Error('platform account-reset rollout generation is unavailable');
+                }
+                return {
+                    releaseSha: input.releaseSha,
+                    expectedGeneration,
+                    sourceEpoch: Number(await readPlatformAuthInventorySourceEpoch(input.pool)),
+                    workosRealm: input.workos.realm,
+                };
+            },
+        };
+    return {
+        operator,
+        outboxProcessor,
+        eventsProcessor,
+        ...(accountReset === undefined ? {} : { accountReset }),
+    };
 }
 function configuredInventorySources() {
     return Object.fromEntries(PLATFORM_AUTH_INVENTORY_SOURCES.map((source) => [source, 'configured']));