@numa-tech/numa 1.20.7 → 1.22.0

package/dist/oss/governance.d.ts

@@ -0,0 +1,144 @@
+import { z } from "zod";
+import { OssClient } from "./client.js";
+export declare const policyInputSchema: z.ZodObject<{
+    accountId: z.ZodNumber;
+    code: z.ZodString;
+    name: z.ZodString;
+    region: z.ZodString;
+    bucketName: z.ZodString;
+    scopeType: z.ZodEnum<{
+        BUCKET: "BUCKET";
+        PREFIX: "PREFIX";
+    }>;
+    objectPrefix: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    actionTemplateRevisionIds: z.ZodArray<z.ZodNumber>;
+    platformAccessEnabled: z.ZodBoolean;
+    consoleAccessEnabled: z.ZodOptional<z.ZodBoolean>;
+    cloudPolicyName: z.ZodString;
+    status: z.ZodEnum<{
+        ACTIVE: "ACTIVE";
+        DISABLED: "DISABLED";
+    }>;
+    description: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    version: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strict>;
+export declare const clientBindingInputSchema: z.ZodObject<{
+    issuerId: z.ZodString;
+    subjectKey: z.ZodString;
+    clientId: z.ZodString;
+    serviceAccountSubject: z.ZodString;
+    status: z.ZodEnum<{
+        ACTIVE: "ACTIVE";
+        DISABLED: "DISABLED";
+    }>;
+    maxSessionSeconds: z.ZodNumber;
+    description: z.ZodOptional<z.ZodString>;
+    accessPriority: z.ZodOptional<z.ZodEnum<{
+        HIGH: "HIGH";
+        HIGHEST: "HIGHEST";
+        LOW: "LOW";
+        LOWEST: "LOWEST";
+        NORMAL: "NORMAL";
+    }>>;
+    version: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strict>;
+/** OSS control plane uses platform identity. It never requests Client secrets or STS. */
+export declare class OssGovernanceClient extends OssClient {
+    protected requestPolicy(init: RequestInit): {
+        redirect: "error";
+        retryUnauthorized: boolean;
+    };
+    identity(): Promise<{
+        [x: string]: unknown;
+        managementIssuerId: string;
+        identityKey: string;
+        issuerUrl: string;
+    }>;
+    clients(issuerId: string, search?: string, page?: number): Promise<{
+        [x: string]: unknown;
+        issuerId: string;
+        identityKey: string;
+        items: {
+            [x: string]: unknown;
+            id: string;
+            clientId: string;
+            subject: string;
+        }[];
+        total: number;
+    }>;
+    templates(search?: string, page?: number): Promise<{
+        [x: string]: unknown;
+        items: Record<string, unknown>[];
+        total: number;
+    }>;
+    template(revisionId: number): Promise<{
+        [x: string]: unknown;
+        id: number;
+        templateId: number;
+        version: number;
+        code: string;
+        actions: string[];
+        status: string;
+    }>;
+    policies(accountId: number, search?: string, page?: number): Promise<{
+        [x: string]: unknown;
+        items: Record<string, unknown>[];
+        total: number;
+    }>;
+    policy(policyId: number): Promise<{
+        [x: string]: unknown;
+        id: number;
+        accountId: number;
+        version: number;
+        code: string;
+        status: string;
+        platformAccessEnabled?: boolean | null | undefined;
+    }>;
+    state(policyId: number): Promise<{
+        [x: string]: unknown;
+        policyId: number;
+        draftChecksum: string;
+        draftVersion: number;
+        pending: boolean;
+        health: string;
+    }>;
+    check(policyId: number): Promise<{
+        [x: string]: unknown;
+        policyId: number;
+        draftChecksum: string;
+        draftVersion: number;
+        pending: boolean;
+        health: string;
+    }>;
+    publish(policyId: number, expectedChecksum: string, idempotencyKey: string): Promise<{
+        [x: string]: unknown;
+        id: string;
+        policyId: number;
+        status: string;
+        checksum: string;
+    }>;
+    jobs(accountId: number, page?: number): Promise<{
+        [x: string]: unknown;
+        items: Record<string, unknown>[];
+        total: number;
+    }>;
+    savePolicy(value: unknown, policyId?: number, preview?: boolean): Promise<Record<string, unknown>>;
+    bindings(policyId: number, page?: number): Promise<{
+        [x: string]: unknown;
+        items: Record<string, unknown>[];
+        total: number;
+    }>;
+    private allBindings;
+    bindClient(policyId: number, value: unknown, bindingId?: number): Promise<{
+        [x: string]: unknown;
+        id: number;
+        policyId: number;
+        subjectType: "CLIENT";
+        subjectKey: string;
+        issuerId: string | null;
+        clientId: string;
+        serviceAccountSubject: string;
+        version: number;
+        status: string;
+    }>;
+}

package/dist/oss/governance.js

@@ -0,0 +1,187 @@
+import { z } from "zod";
+import { OssClient } from "./client.js";
+import { OssError } from "./errors.js";
+const id = z.number().int().positive().safe();
+const version = z.number().int().nonnegative().safe();
+const uuid = z.string().uuid();
+const record = z.record(z.string(), z.unknown());
+const policySchema = z.object({ id, accountId: id, version, code: z.string(), status: z.string(), platformAccessEnabled: z.boolean().nullable().optional() }).passthrough();
+const pageSchema = z.object({ items: z.array(record), total: z.number().int().nonnegative() }).passthrough();
+const stateSchema = z.object({ policyId: id, draftChecksum: z.string().min(1), draftVersion: version, pending: z.boolean(), health: z.string() }).passthrough();
+const jobSchema = z.object({ id: uuid, policyId: id, status: z.string(), checksum: z.string() }).passthrough();
+const directorySchema = z.object({ issuerId: uuid, identityKey: z.string(), items: z.array(z.object({ id: uuid, clientId: z.string(), subject: z.string() }).passthrough()), total: z.number().int().nonnegative() }).passthrough();
+const bindingSchema = z.object({ id, policyId: id, subjectType: z.literal("CLIENT"), subjectKey: uuid, issuerId: uuid.nullable(), clientId: z.string(), serviceAccountSubject: z.string(), version, status: z.string() }).passthrough();
+const templateSchema = z.object({ id, templateId: id, version, code: z.string(), actions: z.array(z.string()), status: z.string() }).passthrough();
+export const policyInputSchema = z.object({
+    accountId: id, code: z.string().min(1).max(120), name: z.string().min(1).max(160),
+    region: z.string().min(1), bucketName: z.string().min(1), scopeType: z.enum(["BUCKET", "PREFIX"]),
+    objectPrefix: z.string().nullable().optional(), actionTemplateRevisionIds: z.array(id).min(1).max(16),
+    platformAccessEnabled: z.boolean(), consoleAccessEnabled: z.boolean().optional(),
+    cloudPolicyName: z.string().min(1), status: z.enum(["ACTIVE", "DISABLED"]),
+    description: z.string().max(2000).nullable().optional(), version: version.optional()
+}).strict().refine(v => v.scopeType !== "PREFIX" || Boolean(v.objectPrefix?.trim()), "PREFIX requires objectPrefix");
+export const clientBindingInputSchema = z.object({
+    issuerId: uuid, subjectKey: uuid, clientId: z.string().min(1), serviceAccountSubject: z.string().min(1),
+    status: z.enum(["ACTIVE", "DISABLED"]), maxSessionSeconds: z.number().int().min(900).max(3600),
+    description: z.string().max(2000).optional(), accessPriority: z.enum(["HIGHEST", "HIGH", "NORMAL", "LOW", "LOWEST"]).optional(),
+    version: version.optional()
+}).strict();
+function input(schema, value) {
+    const result = schema.safeParse(value);
+    if (!result.success)
+        throw new OssError("Invalid OSS governance input; check required fields, IDs and versions.", "oss_input_invalid");
+    return result.data;
+}
+function conflict(message) { throw new OssError(message, "oss_governance_conflict", 409); }
+function query(values) {
+    return new URLSearchParams(Object.entries(values).filter(([, v]) => v !== undefined).map(([k, v]) => [k, String(v)])).toString();
+}
+const policyPath = (value) => `/api/v1/admin/oss-policy-authorizations/${input(id, value)}`;
+/** OSS control plane uses platform identity. It never requests Client secrets or STS. */
+export class OssGovernanceClient extends OssClient {
+    requestPolicy(init) {
+        return { redirect: "error", retryUnauthorized: (init.method ?? "GET").toUpperCase() === "GET" };
+    }
+    async identity() {
+        return this.json("/api/v1/admin/oss-authorization-options/identity", z.object({ managementIssuerId: uuid, identityKey: z.string(), issuerUrl: z.string() }).passthrough());
+    }
+    async clients(issuerId, search = "", page = 1) {
+        input(uuid, issuerId);
+        input(id, page);
+        const result = await this.json(`/api/v1/admin/oss-authorization-options/service-accounts?${query({ issuerId, query: search, page, limit: 100 })}`, directorySchema);
+        if (result.issuerId.toLowerCase() !== issuerId.toLowerCase())
+            conflict("Client directory belongs to a different issuer.");
+        return result;
+    }
+    async templates(search = "", page = 1) {
+        input(id, page);
+        return this.json(`/api/v1/admin/oss-action-templates?${query({ q: search, page, size: 100, activeOnly: true })}`, pageSchema);
+    }
+    async template(revisionId) {
+        const result = await this.json(`/api/v1/admin/oss-action-templates/revisions/${input(id, revisionId)}`, templateSchema);
+        if (result.id !== revisionId)
+            conflict("Template revision mismatch.");
+        return result;
+    }
+    async policies(accountId, search = "", page = 1) {
+        input(id, accountId);
+        input(id, page);
+        return this.json(`/api/v1/admin/oss-policy-authorizations/policies?${query({ accountId, q: search, page })}`, pageSchema);
+    }
+    async policy(policyId) {
+        const result = await this.json(policyPath(policyId), policySchema);
+        if (result.id !== policyId)
+            conflict("Policy identity mismatch.");
+        return result;
+    }
+    async state(policyId) {
+        const result = await this.json(`/api/v1/admin/oss-publications/policies/${input(id, policyId)}`, stateSchema);
+        if (result.policyId !== policyId)
+            conflict("Policy state identity mismatch.");
+        return result;
+    }
+    async check(policyId) {
+        await this.policy(policyId);
+        const result = await this.json(`/api/v1/admin/oss-publications/policies/${policyId}/check`, stateSchema, { method: "POST", body: "{}" });
+        if (result.policyId !== policyId)
+            conflict("Policy check identity mismatch.");
+        return result;
+    }
+    async publish(policyId, expectedChecksum, idempotencyKey) {
+        input(z.string().min(1).max(256), expectedChecksum);
+        input(z.string().regex(/^[a-zA-Z0-9_-]{8,128}$/u), idempotencyKey);
+        await this.policy(policyId);
+        // The server checks the reviewed checksum atomically and preserves retries by key.
+        // Do not replace it with a newly fetched checksum or silently create a new key.
+        const result = await this.json(`/api/v1/admin/oss-publications/policies/${policyId}/publish`, jobSchema, { method: "POST", body: JSON.stringify({ expectedChecksum, idempotencyKey }) });
+        if (result.policyId !== policyId || result.checksum !== expectedChecksum)
+            conflict("Publication result does not match the requested policy/checksum; inspect job state before retrying.");
+        return result;
+    }
+    async jobs(accountId, page = 1) {
+        input(id, accountId);
+        input(id, page);
+        return this.json(`/api/v1/admin/oss-publications?${query({ accountId, page, size: 100 })}`, pageSchema);
+    }
+    async savePolicy(value, policyId, preview = false) {
+        const data = input(policyInputSchema, value);
+        if (policyId !== undefined) {
+            if (data.version === undefined)
+                throw new OssError("Policy update requires its reviewed version.", "oss_input_invalid");
+            if (data.consoleAccessEnabled === undefined)
+                throw new OssError("Policy update requires explicit consoleAccessEnabled to preserve reviewed access.", "oss_input_invalid");
+            const current = await this.policy(policyId);
+            if (current.version !== data.version)
+                conflict("Policy version changed; reload and review before saving.");
+            if (current.accountId !== data.accountId || current.code !== data.code)
+                conflict("Policy account and code cannot be replaced.");
+        }
+        else if (data.version !== undefined)
+            throw new OssError("New policies must omit version.", "oss_input_invalid");
+        if (policyId === undefined)
+            data.consoleAccessEnabled ??= false;
+        for (const revision of data.actionTemplateRevisionIds)
+            await this.template(revision);
+        const root = "/api/v1/admin/aliyun-oss-access-policies";
+        if (preview)
+            return this.json(`${root}/preview${policyId === undefined ? "" : `?policyId=${policyId}`}`, record, { method: "POST", body: JSON.stringify(data) });
+        const result = await this.json(policyId === undefined ? root : `${root}/${policyId}`, policySchema, { method: policyId === undefined ? "POST" : "PUT", body: JSON.stringify(data) }, policyId === undefined ? [201] : [200]);
+        if (result.accountId !== data.accountId || result.code !== data.code || (policyId !== undefined && result.id !== policyId))
+            conflict("Saved policy identity mismatch; inspect state before retrying.");
+        return result;
+    }
+    async bindings(policyId, page = 1) {
+        input(id, page);
+        return this.json(`${policyPath(policyId)}/bindings?${query({ page, history: true, mode: "STS" })}`, pageSchema);
+    }
+    async allBindings(policyId) {
+        const rows = [];
+        for (let page = 1; page <= 1000; page++) {
+            const result = await this.bindings(policyId, page);
+            rows.push(...result.items);
+            if (page * 20 >= result.total)
+                return rows;
+        }
+        conflict("Too many policy bindings to verify safely; use the explicit record after narrowing the policy.");
+    }
+    async bindClient(policyId, value, bindingId) {
+        const data = input(clientBindingInputSchema, value);
+        if (bindingId !== undefined) {
+            input(id, bindingId);
+            if (data.version === undefined)
+                throw new OssError("Binding update requires its reviewed version.", "oss_input_invalid");
+        }
+        else if (data.version !== undefined)
+            throw new OssError("New Client bindings must omit version.", "oss_input_invalid");
+        const policy = await this.policy(policyId);
+        const identity = await this.identity();
+        const rows = await this.allBindings(policyId);
+        const matches = (row) => row.type === "CLIENT" && row.subjectKey === data.subjectKey
+            && (row.issuerId === data.issuerId || (row.issuerId === null && identity.managementIssuerId === data.issuerId));
+        if (bindingId === undefined && rows.some(matches))
+            conflict("This Client already has a binding, including disabled history; update its record/version instead of creating a duplicate.");
+        if (bindingId !== undefined) {
+            const current = rows.find(row => row.recordId === bindingId);
+            if (!current || !matches(current) || current.version !== data.version)
+                conflict("Binding identity/version changed; reload before updating.");
+            if (data.status === "DISABLED" && (current.clientId !== data.clientId || current.serviceAccountSubject !== data.serviceAccountSubject))
+                conflict("Revocation must retain the reviewed stored Client and service-account identity.");
+        }
+        if (bindingId === undefined || data.status !== "DISABLED") {
+            const directory = await this.clients(data.issuerId, data.clientId);
+            const machine = directory.items.find(row => row.id.toLowerCase() === data.subjectKey.toLowerCase());
+            if (!machine || machine.clientId !== data.clientId || machine.subject !== data.serviceAccountSubject)
+                conflict("Client instance or service-account subject changed; review the issuer Client directory again.");
+        }
+        if (data.status === "ACTIVE" && (!policy.platformAccessEnabled || policy.status !== "ACTIVE"))
+            conflict("Client grants need an active policy with platform access enabled and published; inspect policy state first.");
+        // Client ID and SA subject are evidence, not caller-controlled identity fields in the API.
+        const { clientId: _clientId, serviceAccountSubject: _subject, ...fields } = data;
+        const result = await this.json(`${policyPath(policyId)}/bindings${bindingId === undefined ? "" : `/${bindingId}`}`, bindingSchema, { method: bindingId === undefined ? "POST" : "PUT", body: JSON.stringify({ ...fields, type: "CLIENT" }) });
+        if ((bindingId !== undefined && result.id !== bindingId) || result.policyId !== policyId || result.subjectKey !== data.subjectKey || result.clientId !== data.clientId || result.serviceAccountSubject !== data.serviceAccountSubject
+            || !(result.issuerId === data.issuerId || (result.issuerId === null && identity.managementIssuerId === data.issuerId)))
+            conflict("Saved Client binding identity mismatch; inspect bindings before retrying.");
+        return result;
+    }
+}
+//# sourceMappingURL=governance.js.map

package/dist/oss/governance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"governance.js","sourceRoot":"","sources":["../../src/oss/governance.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAEvC,MAAM,EAAE,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,CAAC;AAC9C,MAAM,OAAO,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;AACtD,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC;AAC/B,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;AACjD,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,qBAAqB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;AAC5K,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;AAC7G,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;AAChK,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;AAC/G,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;AACpO,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;AACxO,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;AAEnJ,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACjF,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACjG,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,EAAE,yBAAyB,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IACrG,qBAAqB,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,oBAAoB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAChF,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAC1E,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,QAAQ,EAAE;CACrF,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC,EAAE,8BAA8B,CAAC,CAAC;AACrH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvG,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;IAC9F,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC/H,OAAO,EAAE,OAAO,CAAC,QAAQ,EAAE;CAC5B,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,SAAS,KAAK,CAAI,MAAoB,EAAE,KAAc;IACpD,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACvC,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,MAAM,IAAI,QAAQ,CAAC,wEAAwE,EAAE,mBAAmB,CAAC,CAAC;IACvI,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AACD,SAAS,QAAQ,CAAC,OAAe,IAAW,MAAM,IAAI,QAAQ,CAAC,OAAO,EAAE,yBAAyB,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;AAC1G,SAAS,KAAK,CAAC,MAA6D;IAC1E,OAAO,IAAI,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;AACnI,CAAC;AACD,MAAM,UAAU,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,2CAA2C,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,CAAC;AAEpG,yFAAyF;AACzF,MAAM,OAAO,mBAAoB,SAAQ,SAAS;IAC7B,aAAa,CAAC,IAAiB;QAChD,OAAO,EAAE,QAAQ,EAAE,OAAgB,EAAE,iBAAiB,EAAE,CAAC,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,KAAK,KAAK,EAAE,CAAC;IAC3G,CAAC;IACD,KAAK,CAAC,QAAQ;QACZ,OAAO,IAAI,CAAC,IAAI,CAAC,kDAAkD,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,kBAAkB,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;IAC7K,CAAC;IACD,KAAK,CAAC,OAAO,CAAC,QAAgB,EAAE,MAAM,GAAG,EAAE,EAAE,IAAI,GAAG,CAAC;QACnD,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAAC,KAAK,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QACvC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,4DAA4D,KAAK,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,eAAe,CAAC,CAAC;QACpK,IAAI,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC,WAAW,EAAE;YAAE,QAAQ,CAAC,iDAAiD,CAAC,CAAC;QAC1H,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,KAAK,CAAC,SAAS,CAAC,MAAM,GAAG,EAAE,EAAE,IAAI,GAAG,CAAC;QACnC,KAAK,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAChB,OAAO,IAAI,CAAC,IAAI,CAAC,sCAAsC,KAAK,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;IAChI,CAAC;IACD,KAAK,CAAC,QAAQ,CAAC,UAAkB;QAC/B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,gDAAgD,KAAK,CAAC,EAAE,EAAE,UAAU,CAAC,EAAE,EAAE,cAAc,CAAC,CAAC;QACxH,IAAI,MAAM,CAAC,EAAE,KAAK,UAAU;YAAE,QAAQ,CAAC,6BAA6B,CAAC,CAAC;QACtE,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,KAAK,CAAC,QAAQ,CAAC,SAAiB,EAAE,MAAM,GAAG,EAAE,EAAE,IAAI,GAAG,CAAC;QACrD,KAAK,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;QAAC,KAAK,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QACtC,OAAO,IAAI,CAAC,IAAI,CAAC,oDAAoD,KAAK,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;IAC5H,CAAC;IACD,KAAK,CAAC,MAAM,CAAC,QAAgB;QAC3B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,YAAY,CAAC,CAAC;QACnE,IAAI,MAAM,CAAC,EAAE,KAAK,QAAQ;YAAE,QAAQ,CAAC,2BAA2B,CAAC,CAAC;QAClE,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,KAAK,CAAC,KAAK,CAAC,QAAgB;QAC1B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,2CAA2C,KAAK,CAAC,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;QAC9G,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ;YAAE,QAAQ,CAAC,iCAAiC,CAAC,CAAC;QAC9E,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,KAAK,CAAC,KAAK,CAAC,QAAgB;QAC1B,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC5B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,2CAA2C,QAAQ,QAAQ,EAAE,WAAW,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACzI,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ;YAAE,QAAQ,CAAC,iCAAiC,CAAC,CAAC;QAC9E,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,KAAK,CAAC,OAAO,CAAC,QAAgB,EAAE,gBAAwB,EAAE,cAAsB;QAC9E,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,gBAAgB,CAAC,CAAC;QACpD,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,yBAAyB,CAAC,EAAE,cAAc,CAAC,CAAC;QACnE,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC5B,mFAAmF;QACnF,gFAAgF;QAChF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,2CAA2C,QAAQ,UAAU,EAAE,SAAS,EACrG,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,gBAAgB,EAAE,cAAc,EAAE,CAAC,EAAE,CAAC,CAAC;QAClF,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,KAAK,gBAAgB;YAAE,QAAQ,CAAC,qGAAqG,CAAC,CAAC;QAC1L,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,SAAiB,EAAE,IAAI,GAAG,CAAC;QACpC,KAAK,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;QAAC,KAAK,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QACtC,OAAO,IAAI,CAAC,IAAI,CAAC,kCAAkC,KAAK,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;IAC1G,CAAC;IACD,KAAK,CAAC,UAAU,CAAC,KAAc,EAAE,QAAiB,EAAE,OAAO,GAAG,KAAK;QACjE,MAAM,IAAI,GAAG,KAAK,CAAC,iBAAiB,EAAE,KAAK,CAAC,CAAC;QAC7C,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS;gBAAE,MAAM,IAAI,QAAQ,CAAC,8CAA8C,EAAE,mBAAmB,CAAC,CAAC;YACxH,IAAI,IAAI,CAAC,oBAAoB,KAAK,SAAS;gBAAE,MAAM,IAAI,QAAQ,CAAC,mFAAmF,EAAE,mBAAmB,CAAC,CAAC;YAC1K,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC5C,IAAI,OAAO,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO;gBAAE,QAAQ,CAAC,0DAA0D,CAAC,CAAC;YAC3G,IAAI,OAAO,CAAC,SAAS,KAAK,IAAI,CAAC,SAAS,IAAI,OAAO,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI;gBAAE,QAAQ,CAAC,6CAA6C,CAAC,CAAC;QAClI,CAAC;aAAM,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS;YAAE,MAAM,IAAI,QAAQ,CAAC,iCAAiC,EAAE,mBAAmB,CAAC,CAAC;QAClH,IAAI,QAAQ,KAAK,SAAS;YAAE,IAAI,CAAC,oBAAoB,KAAK,KAAK,CAAC;QAChE,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,yBAAyB;YAAE,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACrF,MAAM,IAAI,GAAG,0CAA0C,CAAC;QACxD,IAAI,OAAO;YAAE,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,WAAW,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjK,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,QAAQ,EAAE,EAAE,YAAY,EAChG,EAAE,MAAM,EAAE,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3H,IAAI,MAAM,CAAC,SAAS,KAAK,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,IAAI,MAAM,CAAC,EAAE,KAAK,QAAQ,CAAC;YAAE,QAAQ,CAAC,gEAAgE,CAAC,CAAC;QACvM,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,KAAK,CAAC,QAAQ,CAAC,QAAgB,EAAE,IAAI,GAAG,CAAC;QACvC,KAAK,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAChB,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,QAAQ,CAAC,aAAa,KAAK,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;IAClH,CAAC;IACO,KAAK,CAAC,WAAW,CAAC,QAAgB;QACxC,MAAM,IAAI,GAA8B,EAAE,CAAC;QAC3C,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,IAAI,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC;YACxC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YACnD,IAAI,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;YAC3B,IAAI,IAAI,GAAG,EAAE,IAAI,MAAM,CAAC,KAAK;gBAAE,OAAO,IAAI,CAAC;QAC7C,CAAC;QACD,QAAQ,CAAC,gGAAgG,CAAC,CAAC;IAC7G,CAAC;IACD,KAAK,CAAC,UAAU,CAAC,QAAgB,EAAE,KAAc,EAAE,SAAkB;QACnE,MAAM,IAAI,GAAG,KAAK,CAAC,wBAAwB,EAAE,KAAK,CAAC,CAAC;QACpD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,KAAK,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;YACrB,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS;gBAAE,MAAM,IAAI,QAAQ,CAAC,+CAA+C,EAAE,mBAAmB,CAAC,CAAC;QAC3H,CAAC;aAAM,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS;YAAE,MAAM,IAAI,QAAQ,CAAC,wCAAwC,EAAE,mBAAmB,CAAC,CAAC;QACzH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC3C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QACvC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;QAC9C,MAAM,OAAO,GAAG,CAAC,GAA4B,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,GAAG,CAAC,UAAU,KAAK,IAAI,CAAC,UAAU;eACxG,CAAC,GAAG,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ,IAAI,CAAC,GAAG,CAAC,QAAQ,KAAK,IAAI,IAAI,QAAQ,CAAC,kBAAkB,KAAK,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;QAClH,IAAI,SAAS,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,QAAQ,CAAC,2HAA2H,CAAC,CAAC;QACzL,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC;YAC7D,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO;gBAAE,QAAQ,CAAC,2DAA2D,CAAC,CAAC;YAC7I,IAAI,IAAI,CAAC,MAAM,KAAK,UAAU,IAAI,CAAC,OAAO,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,qBAAqB,KAAK,IAAI,CAAC,qBAAqB,CAAC;gBACpI,QAAQ,CAAC,iFAAiF,CAAC,CAAC;QAChG,CAAC;QACD,IAAI,SAAS,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YAC1D,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;YACnE,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,CAAC;YACpG,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,OAAO,KAAK,IAAI,CAAC,qBAAqB;gBAClG,QAAQ,CAAC,+FAA+F,CAAC,CAAC;QAC9G,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,CAAC,qBAAqB,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC;YAAE,QAAQ,CAAC,6GAA6G,CAAC,CAAC;QACvN,2FAA2F;QAC3F,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,qBAAqB,EAAE,QAAQ,EAAE,GAAG,MAAM,EAAE,GAAG,IAAI,CAAC;QACjF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,QAAQ,CAAC,YAAY,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,SAAS,EAAE,EAAE,EAAE,aAAa,EAC/H,EAAE,MAAM,EAAE,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC;QAC7G,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI,MAAM,CAAC,EAAE,KAAK,SAAS,CAAC,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,UAAU,KAAK,IAAI,CAAC,UAAU,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAC,qBAAqB,KAAK,IAAI,CAAC,qBAAqB;eAChO,CAAC,CAAC,MAAM,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,KAAK,IAAI,IAAI,QAAQ,CAAC,kBAAkB,KAAK,IAAI,CAAC,QAAQ,CAAC,CAAC;YAAE,QAAQ,CAAC,2EAA2E,CAAC,CAAC;QAChN,OAAO,MAAM,CAAC;IAChB,CAAC;CACF"}

package/dist/platform-profile.d.ts

@@ -12,6 +12,8 @@ declare const ServiceSchema: z.ZodObject<{
     audience: z.ZodString;
     roleClientId: z.ZodString;
     apiVersion: z.ZodString;
+    applicationCode: z.ZodOptional<z.ZodString>;
+    issuerAuthorities: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
     capabilityUrl: z.ZodOptional<z.ZodString>;
     configuration: z.ZodOptional<z.ZodObject<{
         defaultNamespaceKey: z.ZodOptional<z.ZodString>;
@@ -45,7 +47,7 @@ declare const ServiceSchema: z.ZodObject<{
     }, z.core.$loose>>;
 }, z.core.$loose>;
 declare const ProfileSchema: z.ZodObject<{
-    schemaVersion: z.ZodLiteral<1>;
+    schemaVersion: z.ZodUnion<readonly [z.ZodLiteral<1>, z.ZodLiteral<2>]>;
     profileId: z.ZodString;
     revision: z.ZodNumber;
     environment: z.ZodString;
@@ -66,6 +68,8 @@ declare const ProfileSchema: z.ZodObject<{
         audience: z.ZodString;
         roleClientId: z.ZodString;
         apiVersion: z.ZodString;
+        applicationCode: z.ZodOptional<z.ZodString>;
+        issuerAuthorities: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
         capabilityUrl: z.ZodOptional<z.ZodString>;
         configuration: z.ZodOptional<z.ZodObject<{
             defaultNamespaceKey: z.ZodOptional<z.ZodString>;
@@ -98,6 +102,7 @@ declare const ProfileSchema: z.ZodObject<{
             }, z.core.$loose>>;
         }, z.core.$loose>>;
     }, z.core.$loose>, z.ZodRecord<z.ZodString, z.ZodUnknown>]>>;
+    defaultLoginService: z.ZodOptional<z.ZodString>;
     authentication: z.ZodOptional<z.ZodObject<{
         platformAuthority: z.ZodString;
         businessDefaultAuthority: z.ZodString;
@@ -115,12 +120,18 @@ export type PlatformServiceKey = "platform" | "oss" | "media" | "pipeline" | "ai
 export interface ResolvedPlatformProfile extends WireProfile {
     sourceUrl: string;
     stale: boolean;
+    /** Local migration compatibility; never accepted from a downloaded profile. */
+    legacyLocalOverrides?: true;
 }
 export declare class ModuleUnavailableError extends Error {
     readonly serviceKey: string;
     readonly code = "module_unavailable";
     constructor(serviceKey: string);
 }
+export declare class ClientUpgradeRequiredError extends Error {
+    readonly code = "client_upgrade_required";
+    constructor(minimumVersion: string);
+}
 export declare function currentPlatformProfile(): ResolvedPlatformProfile | undefined;
 export declare function setPlatformProfileForTests(profile: ResolvedPlatformProfile | undefined): void;
 export interface ProfileReplacement {