@numa-tech/numa 1.20.0 → 1.20.2

package/dist/authorization/application-schemas.d.ts

@@ -0,0 +1,731 @@
+import { z } from "zod";
+export declare const uuid: z.ZodString;
+export declare const version: z.ZodNumber;
+export declare const positive: z.ZodNumber;
+export declare const digest: z.ZodString;
+export declare const document: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+export declare const source: z.ZodObject<{
+    environmentId: z.ZodString;
+    environmentCode: z.ZodString;
+    environmentName: z.ZodString;
+    identityKey: z.ZodString;
+    issuerUrl: z.ZodString;
+    realm: z.ZodString;
+    issuerId: z.ZodNullable<z.ZodString>;
+}, z.core.$loose>;
+export declare const page: z.ZodObject<{
+    items: z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    total: z.ZodNumber;
+    page: z.ZodNumber;
+    size: z.ZodNumber;
+}, z.core.$loose>;
+export declare const directoryPage: z.ZodObject<{
+    items: z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    page: z.ZodNumber;
+    size: z.ZodNumber;
+    total: z.ZodOptional<z.ZodNumber>;
+    hasMore: z.ZodBoolean;
+}, z.core.$loose>;
+export declare const relationPage: z.ZodObject<{
+    revision: z.ZodNumber;
+    relations: z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    total: z.ZodNumber;
+    hasMore: z.ZodBoolean;
+    page: z.ZodNumber;
+    size: z.ZodNumber;
+}, z.core.$loose>;
+export declare const definitionSave: z.ZodObject<{
+    expectedDraftVersion: z.ZodNumber;
+    defaultRoleClientId: z.ZodString;
+    definition: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+}, z.core.$strict>;
+export declare const freezeInput: z.ZodObject<{
+    expectedDraftVersion: z.ZodNumber;
+}, z.core.$strict>;
+export declare const environmentInput: z.ZodObject<{
+    code: z.ZodString;
+    name: z.ZodString;
+    enforcementMode: z.ZodEnum<{
+        APPLICATION: "APPLICATION";
+        GATEWAY: "GATEWAY";
+    }>;
+    identitySource: z.ZodEnum<{
+        PLATFORM: "PLATFORM";
+        REGISTERED: "REGISTERED";
+    }>;
+    issuerId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    resourceClientId: z.ZodString;
+    roleClientId: z.ZodString;
+    pathRoot: z.ZodString;
+    objectNamespace: z.ZodString;
+    definitionVersion: z.ZodNumber;
+    status: z.ZodEnum<{
+        ACTIVE: "ACTIVE";
+        DISABLED: "DISABLED";
+    }>;
+    version: z.ZodNumber;
+    gatewayId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    gatewayBindingId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+}, z.core.$strict>;
+export declare const clientInput: z.ZodObject<{
+    mode: z.ZodEnum<{
+        CREATE: "CREATE";
+        IMPORT: "IMPORT";
+        REFERENCE: "REFERENCE";
+    }>;
+    environmentId: z.ZodString;
+    definitionId: z.ZodOptional<z.ZodString>;
+    remoteId: z.ZodOptional<z.ZodString>;
+    status: z.ZodEnum<{
+        ACTIVE: "ACTIVE";
+        DISABLED: "DISABLED";
+    }>;
+    expectedDefinitionVersion: z.ZodNumber;
+    expectedReferenceVersion: z.ZodNumber;
+    expectedInstanceVersion: z.ZodNumber;
+    expectedTargetVersion: z.ZodNumber;
+    clientId: z.ZodString;
+    definition: z.ZodOptional<z.ZodObject<{
+        code: z.ZodString;
+        name: z.ZodString;
+        kind: z.ZodEnum<{
+            LOGIN: "LOGIN";
+            MACHINE: "MACHINE";
+            PROVIDER: "PROVIDER";
+        }>;
+        configuration: z.ZodObject<{
+            redirectUris: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            webOrigins: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            enabled: z.ZodOptional<z.ZodBoolean>;
+            publicClient: z.ZodOptional<z.ZodBoolean>;
+            standardFlowEnabled: z.ZodOptional<z.ZodBoolean>;
+            serviceAccountsEnabled: z.ZodOptional<z.ZodBoolean>;
+            authorizationServicesEnabled: z.ZodOptional<z.ZodBoolean>;
+            defaultGroupEnabled: z.ZodOptional<z.ZodBoolean>;
+            defaultGroupDefinitionId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        }, z.core.$strict>;
+    }, z.core.$strict>>;
+    demand: z.ZodOptional<z.ZodObject<{
+        roles: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        audience: z.ZodOptional<z.ZodBoolean>;
+        machineRoles: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    }, z.core.$strict>>;
+    environment: z.ZodOptional<z.ZodObject<{
+        redirectUris: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        webOrigins: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    }, z.core.$strict>>;
+    enrollmentTrusted: z.ZodOptional<z.ZodBoolean>;
+    expectedEnrollmentTrustVersion: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strict>;
+export declare const groupInput: z.ZodObject<{
+    mode: z.ZodEnum<{
+        CREATE: "CREATE";
+        IMPORT: "IMPORT";
+        REFERENCE: "REFERENCE";
+    }>;
+    environmentId: z.ZodString;
+    definitionId: z.ZodOptional<z.ZodString>;
+    remoteId: z.ZodOptional<z.ZodString>;
+    status: z.ZodEnum<{
+        ACTIVE: "ACTIVE";
+        DISABLED: "DISABLED";
+    }>;
+    expectedDefinitionVersion: z.ZodNumber;
+    expectedReferenceVersion: z.ZodNumber;
+    expectedInstanceVersion: z.ZodNumber;
+    expectedTargetVersion: z.ZodNumber;
+    remoteName: z.ZodOptional<z.ZodString>;
+    definition: z.ZodOptional<z.ZodObject<{
+        code: z.ZodString;
+        name: z.ZodString;
+        description: z.ZodString;
+        defaultEligible: z.ZodBoolean;
+        status: z.ZodEnum<{
+            ACTIVE: "ACTIVE";
+            DISABLED: "DISABLED";
+        }>;
+    }, z.core.$strict>>;
+    roles: z.ZodArray<z.ZodString>;
+}, z.core.$strict>;
+export declare const relationsInput: z.ZodObject<{
+    expectedRevision: z.ZodNumber;
+    changes: z.ZodArray<z.ZodObject<{
+        id: z.ZodOptional<z.ZodString>;
+        kind: z.ZodEnum<{
+            BLOCK_SOURCE_RELEASE: "BLOCK_SOURCE_RELEASE";
+            GROUP_BLOCK: "GROUP_BLOCK";
+            GROUP_MEMBER: "GROUP_MEMBER";
+            ROLE_GRANT: "ROLE_GRANT";
+        }>;
+        subjectType: z.ZodEnum<{
+            GROUP: "GROUP";
+            SERVICE_ACCOUNT: "SERVICE_ACCOUNT";
+            USER: "USER";
+        }>;
+        subjectId: z.ZodOptional<z.ZodString>;
+        clientInstanceId: z.ZodOptional<z.ZodString>;
+        groupInstanceId: z.ZodOptional<z.ZodString>;
+        roleName: z.ZodOptional<z.ZodString>;
+        desired: z.ZodEnum<{
+            ABSENT: "ABSENT";
+            PRESENT: "PRESENT";
+        }>;
+        blockReason: z.ZodOptional<z.ZodString>;
+        releaseSource: z.ZodOptional<z.ZodEnum<{
+            ADMIN_BLOCK: "ADMIN_BLOCK";
+            LEGACY_REMOVE: "LEGACY_REMOVE";
+        }>>;
+        expectedBlockVersion: z.ZodOptional<z.ZodNumber>;
+        expectedBlockGeneration: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export declare const planInput: z.ZodObject<{
+    requestId: z.ZodString;
+    definitionVersion: z.ZodNumber;
+    environmentIds: z.ZodArray<z.ZodString>;
+    clientModes: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEnum<{
+        ADOPT: "ADOPT";
+        CREATE: "CREATE";
+        REPAIR: "REPAIR";
+        UPDATE: "UPDATE";
+    }>>>;
+}, z.core.$strict>;
+export declare const confirmation: z.ZodObject<{
+    expectedVersion: z.ZodNumber;
+    expectedDigest: z.ZodString;
+}, z.core.$strict>;
+export declare const stepConfirmation: z.ZodObject<{
+    expectedVersion: z.ZodNumber;
+    expectedDigest: z.ZodString;
+    expectedStepDigest: z.ZodString;
+}, z.core.$strict>;
+export declare const recheckInput: z.ZodObject<{
+    expectedVersion: z.ZodNumber;
+    expectedDigest: z.ZodString;
+    expectedStepDigest: z.ZodString;
+    note: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export declare const terminateInput: z.ZodObject<{
+    expectedVersion: z.ZodNumber;
+    expectedDigest: z.ZodString;
+    note: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export declare const repreviewInput: z.ZodObject<{
+    requestId: z.ZodString;
+    definitionVersion: z.ZodNumber;
+    environmentIds: z.ZodArray<z.ZodString>;
+    clientModes: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEnum<{
+        ADOPT: "ADOPT";
+        CREATE: "CREATE";
+        REPAIR: "REPAIR";
+        UPDATE: "UPDATE";
+    }>>>;
+    expectedVersion: z.ZodNumber;
+    expectedDigest: z.ZodString;
+}, z.core.$strict>;
+export declare const downloadInput: z.ZodObject<{
+    requestId: z.ZodString;
+    expectedInstanceVersion: z.ZodNumber;
+    expectedContextDigest: z.ZodString;
+}, z.core.$strict>;
+export declare const rotateInput: z.ZodObject<{
+    requestId: z.ZodString;
+    expectedInstanceVersion: z.ZodNumber;
+    expectedContextDigest: z.ZodString;
+    confirmClientId: z.ZodString;
+    acknowledgeImpact: z.ZodLiteral<true>;
+}, z.core.$strict>;
+export declare const credentialContext: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    applicationId: z.ZodNumber;
+    environmentId: z.ZodString;
+    referenceId: z.ZodString;
+    definitionId: z.ZodString;
+    instanceId: z.ZodString;
+    identityKey: z.ZodString;
+    issuerId: z.ZodNullable<z.ZodString>;
+    issuerUrl: z.ZodString;
+    issuerVersion: z.ZodNumber;
+    environmentVersion: z.ZodNumber;
+    gatewayId: z.ZodNullable<z.ZodString>;
+    gatewayVersion: z.ZodNullable<z.ZodNumber>;
+    gatewayBindingId: z.ZodNullable<z.ZodString>;
+    gatewayBindingVersion: z.ZodNullable<z.ZodNumber>;
+    referenceVersion: z.ZodNumber;
+    targetVersion: z.ZodNumber;
+    definitionVersion: z.ZodNumber;
+    publishedRevision: z.ZodNullable<z.ZodNumber>;
+    appliedRevision: z.ZodNullable<z.ZodNumber>;
+    instanceVersion: z.ZodNumber;
+    clientId: z.ZodString;
+    remoteUuid: z.ZodNullable<z.ZodString>;
+    credentialState: z.ZodString;
+    publicClient: z.ZodBoolean;
+    enabled: z.ZodBoolean;
+    verified: z.ZodBoolean;
+    locked: z.ZodBoolean;
+    affectedApplications: z.ZodArray<z.ZodObject<{
+        applicationId: z.ZodNumber;
+        code: z.ZodString;
+        name: z.ZodString;
+        referenceId: z.ZodString;
+        referenceVersion: z.ZodNumber;
+        targetVersion: z.ZodNumber;
+    }, z.core.$loose>>;
+}, z.core.$loose>;
+export declare const publicationJob: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    id: z.ZodString;
+    applicationId: z.ZodNumber;
+    status: z.ZodString;
+    version: z.ZodNumber;
+    planDigest: z.ZodString;
+    predecessorId: z.ZodNullable<z.ZodString>;
+    createdAt: z.ZodString;
+    updatedAt: z.ZodString;
+    steps: z.ZodArray<z.ZodObject<{
+        ordinal: z.ZodNumber;
+        kind: z.ZodString;
+        targetId: z.ZodString;
+        status: z.ZodString;
+        version: z.ZodNumber;
+        stepDigest: z.ZodString;
+        childEvidence: z.ZodOptional<z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
+    }, z.core.$loose>>;
+    collaboration: z.ZodObject<{
+        state: z.ZodString;
+        allowedActions: z.ZodArray<z.ZodString>;
+    }, z.core.$loose>;
+    operation: z.ZodLiteral<"IDENTITY_PUBLICATION">;
+    plan: z.ZodObject<{
+        applicationId: z.ZodNumber;
+        definitionVersion: z.ZodNumber;
+        definitionDigest: z.ZodString;
+        targets: z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        instances: z.ZodRecord<z.ZodString, z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        steps: z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    }, z.core.$loose>;
+}, z.core.$loose>, z.ZodObject<{
+    id: z.ZodString;
+    applicationId: z.ZodNumber;
+    status: z.ZodString;
+    version: z.ZodNumber;
+    planDigest: z.ZodString;
+    predecessorId: z.ZodNullable<z.ZodString>;
+    createdAt: z.ZodString;
+    updatedAt: z.ZodString;
+    steps: z.ZodArray<z.ZodObject<{
+        ordinal: z.ZodNumber;
+        kind: z.ZodString;
+        targetId: z.ZodString;
+        status: z.ZodString;
+        version: z.ZodNumber;
+        stepDigest: z.ZodString;
+        childEvidence: z.ZodOptional<z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
+    }, z.core.$loose>>;
+    collaboration: z.ZodObject<{
+        state: z.ZodString;
+        allowedActions: z.ZodArray<z.ZodString>;
+    }, z.core.$loose>;
+    operation: z.ZodLiteral<"CREDENTIAL_ROTATION">;
+    plan: z.ZodObject<{
+        operation: z.ZodLiteral<"CREDENTIAL_ROTATION">;
+        schemaVersion: z.ZodLiteral<1>;
+        applicationId: z.ZodNumber;
+        credentialContext: z.ZodObject<{
+            schemaVersion: z.ZodLiteral<1>;
+            applicationId: z.ZodNumber;
+            environmentId: z.ZodString;
+            referenceId: z.ZodString;
+            definitionId: z.ZodString;
+            instanceId: z.ZodString;
+            identityKey: z.ZodString;
+            issuerId: z.ZodNullable<z.ZodString>;
+            issuerUrl: z.ZodString;
+            issuerVersion: z.ZodNumber;
+            environmentVersion: z.ZodNumber;
+            gatewayId: z.ZodNullable<z.ZodString>;
+            gatewayVersion: z.ZodNullable<z.ZodNumber>;
+            gatewayBindingId: z.ZodNullable<z.ZodString>;
+            gatewayBindingVersion: z.ZodNullable<z.ZodNumber>;
+            referenceVersion: z.ZodNumber;
+            targetVersion: z.ZodNumber;
+            definitionVersion: z.ZodNumber;
+            publishedRevision: z.ZodNullable<z.ZodNumber>;
+            appliedRevision: z.ZodNullable<z.ZodNumber>;
+            instanceVersion: z.ZodNumber;
+            clientId: z.ZodString;
+            remoteUuid: z.ZodNullable<z.ZodString>;
+            credentialState: z.ZodString;
+            publicClient: z.ZodBoolean;
+            enabled: z.ZodBoolean;
+            verified: z.ZodBoolean;
+            locked: z.ZodBoolean;
+            affectedApplications: z.ZodArray<z.ZodObject<{
+                applicationId: z.ZodNumber;
+                code: z.ZodString;
+                name: z.ZodString;
+                referenceId: z.ZodString;
+                referenceVersion: z.ZodNumber;
+                targetVersion: z.ZodNumber;
+            }, z.core.$loose>>;
+        }, z.core.$loose>;
+        steps: z.ZodArray<z.ZodObject<{
+            kind: z.ZodLiteral<"CREDENTIAL_ROTATE">;
+            targetId: z.ZodString;
+        }, z.core.$loose>>;
+    }, z.core.$loose>;
+    credentialOperation: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+}, z.core.$loose>], "operation">;
+export declare const credentialTarget: z.ZodObject<{
+    context: z.ZodObject<{
+        schemaVersion: z.ZodLiteral<1>;
+        applicationId: z.ZodNumber;
+        environmentId: z.ZodString;
+        referenceId: z.ZodString;
+        definitionId: z.ZodString;
+        instanceId: z.ZodString;
+        identityKey: z.ZodString;
+        issuerId: z.ZodNullable<z.ZodString>;
+        issuerUrl: z.ZodString;
+        issuerVersion: z.ZodNumber;
+        environmentVersion: z.ZodNumber;
+        gatewayId: z.ZodNullable<z.ZodString>;
+        gatewayVersion: z.ZodNullable<z.ZodNumber>;
+        gatewayBindingId: z.ZodNullable<z.ZodString>;
+        gatewayBindingVersion: z.ZodNullable<z.ZodNumber>;
+        referenceVersion: z.ZodNumber;
+        targetVersion: z.ZodNumber;
+        definitionVersion: z.ZodNumber;
+        publishedRevision: z.ZodNullable<z.ZodNumber>;
+        appliedRevision: z.ZodNullable<z.ZodNumber>;
+        instanceVersion: z.ZodNumber;
+        clientId: z.ZodString;
+        remoteUuid: z.ZodNullable<z.ZodString>;
+        credentialState: z.ZodString;
+        publicClient: z.ZodBoolean;
+        enabled: z.ZodBoolean;
+        verified: z.ZodBoolean;
+        locked: z.ZodBoolean;
+        affectedApplications: z.ZodArray<z.ZodObject<{
+            applicationId: z.ZodNumber;
+            code: z.ZodString;
+            name: z.ZodString;
+            referenceId: z.ZodString;
+            referenceVersion: z.ZodNumber;
+            targetVersion: z.ZodNumber;
+        }, z.core.$loose>>;
+    }, z.core.$loose>;
+    contextDigest: z.ZodString;
+    available: z.ZodBoolean;
+    unavailableCode: z.ZodNullable<z.ZodString>;
+    allowedActions: z.ZodArray<z.ZodEnum<{
+        download: "download";
+        rotate: "rotate";
+    }>>;
+}, z.core.$loose>;
+export declare const credentialOperation: z.ZodObject<{
+    requestId: z.ZodString;
+    action: z.ZodEnum<{
+        DOWNLOAD: "DOWNLOAD";
+        ROTATE: "ROTATE";
+    }>;
+    status: z.ZodEnum<{
+        RECOVERED: "RECOVERED";
+        RUNNING: "RUNNING";
+        SUCCEEDED: "SUCCEEDED";
+        UNKNOWN: "UNKNOWN";
+    }>;
+    context: z.ZodObject<{
+        schemaVersion: z.ZodLiteral<1>;
+        applicationId: z.ZodNumber;
+        environmentId: z.ZodString;
+        referenceId: z.ZodString;
+        definitionId: z.ZodString;
+        instanceId: z.ZodString;
+        identityKey: z.ZodString;
+        issuerId: z.ZodNullable<z.ZodString>;
+        issuerUrl: z.ZodString;
+        issuerVersion: z.ZodNumber;
+        environmentVersion: z.ZodNumber;
+        gatewayId: z.ZodNullable<z.ZodString>;
+        gatewayVersion: z.ZodNullable<z.ZodNumber>;
+        gatewayBindingId: z.ZodNullable<z.ZodString>;
+        gatewayBindingVersion: z.ZodNullable<z.ZodNumber>;
+        referenceVersion: z.ZodNumber;
+        targetVersion: z.ZodNumber;
+        definitionVersion: z.ZodNumber;
+        publishedRevision: z.ZodNullable<z.ZodNumber>;
+        appliedRevision: z.ZodNullable<z.ZodNumber>;
+        instanceVersion: z.ZodNumber;
+        clientId: z.ZodString;
+        remoteUuid: z.ZodNullable<z.ZodString>;
+        credentialState: z.ZodString;
+        publicClient: z.ZodBoolean;
+        enabled: z.ZodBoolean;
+        verified: z.ZodBoolean;
+        locked: z.ZodBoolean;
+        affectedApplications: z.ZodArray<z.ZodObject<{
+            applicationId: z.ZodNumber;
+            code: z.ZodString;
+            name: z.ZodString;
+            referenceId: z.ZodString;
+            referenceVersion: z.ZodNumber;
+            targetVersion: z.ZodNumber;
+        }, z.core.$loose>>;
+    }, z.core.$loose>;
+    recoveredBy: z.ZodNullable<z.ZodString>;
+    recoveryBasis: z.ZodNullable<z.ZodString>;
+    errorCode: z.ZodNullable<z.ZodString>;
+    createdAt: z.ZodString;
+    updatedAt: z.ZodString;
+    publicationJob: z.ZodNullable<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        id: z.ZodString;
+        applicationId: z.ZodNumber;
+        status: z.ZodString;
+        version: z.ZodNumber;
+        planDigest: z.ZodString;
+        predecessorId: z.ZodNullable<z.ZodString>;
+        createdAt: z.ZodString;
+        updatedAt: z.ZodString;
+        steps: z.ZodArray<z.ZodObject<{
+            ordinal: z.ZodNumber;
+            kind: z.ZodString;
+            targetId: z.ZodString;
+            status: z.ZodString;
+            version: z.ZodNumber;
+            stepDigest: z.ZodString;
+            childEvidence: z.ZodOptional<z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
+        }, z.core.$loose>>;
+        collaboration: z.ZodObject<{
+            state: z.ZodString;
+            allowedActions: z.ZodArray<z.ZodString>;
+        }, z.core.$loose>;
+        operation: z.ZodLiteral<"IDENTITY_PUBLICATION">;
+        plan: z.ZodObject<{
+            applicationId: z.ZodNumber;
+            definitionVersion: z.ZodNumber;
+            definitionDigest: z.ZodString;
+            targets: z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+            instances: z.ZodRecord<z.ZodString, z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+            steps: z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        }, z.core.$loose>;
+    }, z.core.$loose>, z.ZodObject<{
+        id: z.ZodString;
+        applicationId: z.ZodNumber;
+        status: z.ZodString;
+        version: z.ZodNumber;
+        planDigest: z.ZodString;
+        predecessorId: z.ZodNullable<z.ZodString>;
+        createdAt: z.ZodString;
+        updatedAt: z.ZodString;
+        steps: z.ZodArray<z.ZodObject<{
+            ordinal: z.ZodNumber;
+            kind: z.ZodString;
+            targetId: z.ZodString;
+            status: z.ZodString;
+            version: z.ZodNumber;
+            stepDigest: z.ZodString;
+            childEvidence: z.ZodOptional<z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
+        }, z.core.$loose>>;
+        collaboration: z.ZodObject<{
+            state: z.ZodString;
+            allowedActions: z.ZodArray<z.ZodString>;
+        }, z.core.$loose>;
+        operation: z.ZodLiteral<"CREDENTIAL_ROTATION">;
+        plan: z.ZodObject<{
+            operation: z.ZodLiteral<"CREDENTIAL_ROTATION">;
+            schemaVersion: z.ZodLiteral<1>;
+            applicationId: z.ZodNumber;
+            credentialContext: z.ZodObject<{
+                schemaVersion: z.ZodLiteral<1>;
+                applicationId: z.ZodNumber;
+                environmentId: z.ZodString;
+                referenceId: z.ZodString;
+                definitionId: z.ZodString;
+                instanceId: z.ZodString;
+                identityKey: z.ZodString;
+                issuerId: z.ZodNullable<z.ZodString>;
+                issuerUrl: z.ZodString;
+                issuerVersion: z.ZodNumber;
+                environmentVersion: z.ZodNumber;
+                gatewayId: z.ZodNullable<z.ZodString>;
+                gatewayVersion: z.ZodNullable<z.ZodNumber>;
+                gatewayBindingId: z.ZodNullable<z.ZodString>;
+                gatewayBindingVersion: z.ZodNullable<z.ZodNumber>;
+                referenceVersion: z.ZodNumber;
+                targetVersion: z.ZodNumber;
+                definitionVersion: z.ZodNumber;
+                publishedRevision: z.ZodNullable<z.ZodNumber>;
+                appliedRevision: z.ZodNullable<z.ZodNumber>;
+                instanceVersion: z.ZodNumber;
+                clientId: z.ZodString;
+                remoteUuid: z.ZodNullable<z.ZodString>;
+                credentialState: z.ZodString;
+                publicClient: z.ZodBoolean;
+                enabled: z.ZodBoolean;
+                verified: z.ZodBoolean;
+                locked: z.ZodBoolean;
+                affectedApplications: z.ZodArray<z.ZodObject<{
+                    applicationId: z.ZodNumber;
+                    code: z.ZodString;
+                    name: z.ZodString;
+                    referenceId: z.ZodString;
+                    referenceVersion: z.ZodNumber;
+                    targetVersion: z.ZodNumber;
+                }, z.core.$loose>>;
+            }, z.core.$loose>;
+            steps: z.ZodArray<z.ZodObject<{
+                kind: z.ZodLiteral<"CREDENTIAL_ROTATE">;
+                targetId: z.ZodString;
+            }, z.core.$loose>>;
+        }, z.core.$loose>;
+        credentialOperation: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+    }, z.core.$loose>], "operation">>;
+}, z.core.$loose>;
+export declare function parse<T>(schema: z.ZodType<T>, value: unknown): T;
+export declare function safeEvidence(value: unknown): unknown;
+export declare const draftDefinition: z.ZodObject<{
+    applicationId: z.ZodNumber;
+    applicationCode: z.ZodString;
+    name: z.ZodString;
+    kind: z.ZodEnum<{
+        CATALOG: "CATALOG";
+        DOCUMENT: "DOCUMENT";
+    }>;
+    editable: z.ZodBoolean;
+    defaultRoleClientId: z.ZodString;
+    draftVersion: z.ZodNumber;
+    definition: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+    versions: z.ZodArray<z.ZodObject<{
+        version: z.ZodNumber;
+        createdAt: z.ZodString;
+        digest: z.ZodString;
+    }, z.core.$loose>>;
+}, z.core.$loose>;
+export declare const immutableDefinition: z.ZodObject<{
+    applicationId: z.ZodNumber;
+    version: z.ZodNumber;
+    default_role_client_id: z.ZodString;
+    created_at: z.ZodString;
+    definition: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+    digest: z.ZodString;
+    kind: z.ZodString;
+}, z.core.$loose>;
+export declare const environmentView: z.ZodObject<{
+    code: z.ZodString;
+    name: z.ZodString;
+    enforcementMode: z.ZodEnum<{
+        APPLICATION: "APPLICATION";
+        GATEWAY: "GATEWAY";
+    }>;
+    identitySource: z.ZodEnum<{
+        PLATFORM: "PLATFORM";
+        REGISTERED: "REGISTERED";
+    }>;
+    issuerId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    resourceClientId: z.ZodString;
+    roleClientId: z.ZodString;
+    pathRoot: z.ZodString;
+    objectNamespace: z.ZodString;
+    definitionVersion: z.ZodNumber;
+    status: z.ZodEnum<{
+        ACTIVE: "ACTIVE";
+        DISABLED: "DISABLED";
+    }>;
+    version: z.ZodNumber;
+    gatewayId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    gatewayBindingId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    id: z.ZodString;
+    applicationId: z.ZodNumber;
+    issuerUrl: z.ZodString;
+    ready: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$loose>;
+export declare const instanceTarget: z.ZodObject<{
+    instanceId: z.ZodString;
+    identityKey: z.ZodString;
+    issuerUrl: z.ZodString;
+    instanceVersion: z.ZodNumber;
+    targetVersion: z.ZodNumber;
+    targetStatus: z.ZodString;
+    instanceStatus: z.ZodString;
+    appliedRevision: z.ZodNullable<z.ZodNumber>;
+    mode: z.ZodNullable<z.ZodString>;
+}, z.core.$loose>;
+export declare const draftView: z.ZodObject<{
+    referenceId: z.ZodString;
+    definitionId: z.ZodString;
+    applicationId: z.ZodNumber;
+    definitionVersion: z.ZodNumber;
+    referenceVersion: z.ZodNumber;
+    status: z.ZodString;
+    referenceStatus: z.ZodString;
+    publishedRevision: z.ZodNullable<z.ZodNumber>;
+    ownerApplicationId: z.ZodNullable<z.ZodNumber>;
+    ownership: z.ZodString;
+    configurationReadOnly: z.ZodBoolean;
+    draftStatus: z.ZodString;
+    definition: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+    affectedApplications: z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    instances: z.ZodArray<z.ZodObject<{
+        instanceId: z.ZodString;
+        identityKey: z.ZodString;
+        issuerUrl: z.ZodString;
+        instanceVersion: z.ZodNumber;
+        targetVersion: z.ZodNumber;
+        targetStatus: z.ZodString;
+        instanceStatus: z.ZodString;
+        appliedRevision: z.ZodNullable<z.ZodNumber>;
+        mode: z.ZodNullable<z.ZodString>;
+    }, z.core.$loose>>;
+}, z.core.$loose>;
+export declare const registeredView: z.ZodObject<{
+    applicationId: z.ZodNumber;
+    source: z.ZodObject<{
+        environmentId: z.ZodString;
+        environmentCode: z.ZodString;
+        environmentName: z.ZodString;
+        identityKey: z.ZodString;
+        issuerUrl: z.ZodString;
+        realm: z.ZodString;
+        issuerId: z.ZodNullable<z.ZodString>;
+    }, z.core.$loose>;
+    definitionId: z.ZodString;
+    definition: z.ZodObject<{
+        id: z.ZodString;
+        version: z.ZodNumber;
+        status: z.ZodString;
+        ownerApplicationId: z.ZodNullable<z.ZodNumber>;
+    }, z.core.$loose>;
+    ownerApplicationId: z.ZodNullable<z.ZodNumber>;
+    configurationReadOnly: z.ZodBoolean;
+    instance: z.ZodNullable<z.ZodObject<{
+        id: z.ZodString;
+        definitionId: z.ZodString;
+        identityKey: z.ZodString;
+        issuerUrl: z.ZodString;
+        version: z.ZodNumber;
+        status: z.ZodString;
+    }, z.core.$loose>>;
+    reference: z.ZodNullable<z.ZodObject<{
+        referenceId: z.ZodString;
+        referenceVersion: z.ZodNumber;
+        status: z.ZodString;
+    }, z.core.$loose>>;
+    target: z.ZodNullable<z.ZodObject<{
+        instanceId: z.ZodString;
+        identityKey: z.ZodString;
+        issuerUrl: z.ZodString;
+        instanceVersion: z.ZodNumber;
+        targetVersion: z.ZodNumber;
+        targetStatus: z.ZodString;
+        instanceStatus: z.ZodString;
+        appliedRevision: z.ZodNullable<z.ZodNumber>;
+        mode: z.ZodNullable<z.ZodString>;
+    }, z.core.$loose>>;
+    association: z.ZodEnum<{
+        BOUND: "BOUND";
+        NO_INSTANCE: "NO_INSTANCE";
+        REFERENCE_WITHOUT_TARGET: "REFERENCE_WITHOUT_TARGET";
+        UNREFERENCED: "UNREFERENCED";
+    }>;
+}, z.core.$loose>;