@opengeni/contracts 0.50.0 → 1.0.0

package/dist/organization-usage.d.ts

@@ -0,0 +1,138 @@
+import { z } from "zod";
+export declare const OrganizationUsagePeriod: z.ZodEnum<{
+    month: "month";
+    today: "today";
+    week: "week";
+    ytd: "ytd";
+}>;
+export type OrganizationUsagePeriod = z.infer<typeof OrganizationUsagePeriod>;
+export declare const OrganizationUsageQuery: z.ZodObject<{
+    period: z.ZodDefault<z.ZodEnum<{
+        month: "month";
+        today: "today";
+        week: "week";
+        ytd: "ytd";
+    }>>;
+}, z.core.$strip>;
+export declare const OrganizationUsageWorkspacePageQuery: z.ZodObject<{
+    period: z.ZodDefault<z.ZodEnum<{
+        month: "month";
+        today: "today";
+        week: "week";
+        ytd: "ytd";
+    }>>;
+    until: z.ZodString;
+    afterWorkspaceId: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export declare const OrganizationUsageTotal: z.ZodObject<{
+    eventType: z.ZodString;
+    unit: z.ZodString;
+    quantity: z.ZodString;
+    eventCount: z.ZodString;
+}, z.core.$strip>;
+/** One member's Personal workspace, as usage only. */
+export declare const OrganizationUsagePersonalWorkspace: z.ZodObject<{
+    membershipId: z.ZodString;
+    totals: z.ZodArray<z.ZodObject<{
+        eventType: z.ZodString;
+        unit: z.ZodString;
+        quantity: z.ZodString;
+        eventCount: z.ZodString;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type OrganizationUsagePersonalWorkspace = z.infer<typeof OrganizationUsagePersonalWorkspace>;
+export declare const OrganizationUsageSummary: z.ZodObject<{
+    accountId: z.ZodString;
+    period: z.ZodEnum<{
+        month: "month";
+        today: "today";
+        week: "week";
+        ytd: "ytd";
+    }>;
+    since: z.ZodString;
+    until: z.ZodString;
+    granularity: z.ZodEnum<{
+        day: "day";
+        hour: "hour";
+    }>;
+    totals: z.ZodArray<z.ZodObject<{
+        eventType: z.ZodString;
+        unit: z.ZodString;
+        quantity: z.ZodString;
+        eventCount: z.ZodString;
+    }, z.core.$strip>>;
+    buckets: z.ZodArray<z.ZodObject<{
+        bucket: z.ZodString;
+        totals: z.ZodArray<z.ZodObject<{
+            eventType: z.ZodString;
+            unit: z.ZodString;
+            quantity: z.ZodString;
+            eventCount: z.ZodString;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
+    workspaces: z.ZodArray<z.ZodObject<{
+        workspaceId: z.ZodString;
+        name: z.ZodNullable<z.ZodString>;
+        totals: z.ZodArray<z.ZodObject<{
+            eventType: z.ZodString;
+            unit: z.ZodString;
+            quantity: z.ZodString;
+            eventCount: z.ZodString;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
+    nextWorkspaceCursor: z.ZodNullable<z.ZodString>;
+    personalWorkspaces: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        membershipId: z.ZodString;
+        totals: z.ZodArray<z.ZodObject<{
+            eventType: z.ZodString;
+            unit: z.ZodString;
+            quantity: z.ZodString;
+            eventCount: z.ZodString;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>>;
+    personalWorkspaceCount: z.ZodDefault<z.ZodNumber>;
+    privateChats: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        workspaceId: z.ZodString;
+        membershipId: z.ZodNullable<z.ZodString>;
+        name: z.ZodNullable<z.ZodString>;
+        totals: z.ZodArray<z.ZodObject<{
+            eventType: z.ZodString;
+            unit: z.ZodString;
+            quantity: z.ZodString;
+            eventCount: z.ZodString;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>>;
+    privateChatsTruncated: z.ZodDefault<z.ZodBoolean>;
+}, z.core.$strip>;
+export type OrganizationUsageSummary = z.infer<typeof OrganizationUsageSummary>;
+/**
+ * A page deliberately excludes totals, charts and Personal rows: those are not
+ * recomputed. Pages continue the shared workspaces only.
+ */
+export declare const OrganizationUsageWorkspacePage: z.ZodObject<{
+    accountId: z.ZodString;
+    period: z.ZodEnum<{
+        month: "month";
+        today: "today";
+        week: "week";
+        ytd: "ytd";
+    }>;
+    since: z.ZodString;
+    until: z.ZodString;
+    granularity: z.ZodEnum<{
+        day: "day";
+        hour: "hour";
+    }>;
+    workspaces: z.ZodArray<z.ZodObject<{
+        workspaceId: z.ZodString;
+        name: z.ZodNullable<z.ZodString>;
+        totals: z.ZodArray<z.ZodObject<{
+            eventType: z.ZodString;
+            unit: z.ZodString;
+            quantity: z.ZodString;
+            eventCount: z.ZodString;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
+    nextWorkspaceCursor: z.ZodNullable<z.ZodString>;
+}, z.core.$strip>;
+export type OrganizationUsageWorkspacePage = z.infer<typeof OrganizationUsageWorkspacePage>;

package/dist/permissions.d.ts

@@ -0,0 +1,54 @@
+import { z } from "zod";
+/** Canonical public permission vocabulary shared by operational and control-plane contracts. */
+export declare const Permission: z.ZodEnum<{
+    "account:admin": "account:admin";
+    "account:read": "account:read";
+    "api_keys:manage": "api_keys:manage";
+    "artifacts:publish": "artifacts:publish";
+    "artifacts:read": "artifacts:read";
+    "billing:manage": "billing:manage";
+    "billing:read": "billing:read";
+    "capabilities:manage": "capabilities:manage";
+    "codemode:call": "codemode:call";
+    "connections:read": "connections:read";
+    "connections:write": "connections:write";
+    "documents:manage": "documents:manage";
+    "documents:search": "documents:search";
+    "enrollments:manage": "enrollments:manage";
+    "enrollments:read": "enrollments:read";
+    "environments:manage": "environments:manage";
+    "environments:use": "environments:use";
+    "files:read": "files:read";
+    "files:upload": "files:upload";
+    "files:write": "files:write";
+    "github:manage": "github:manage";
+    "github:use": "github:use";
+    "goals:manage": "goals:manage";
+    "mcp_servers:attach": "mcp_servers:attach";
+    "members:manage": "members:manage";
+    "rigs:manage": "rigs:manage";
+    "rigs:use": "rigs:use";
+    "scheduled_tasks:manage": "scheduled_tasks:manage";
+    "scheduled_tasks:run": "scheduled_tasks:run";
+    "secrets:list": "secrets:list";
+    "secrets:read": "secrets:read";
+    "secrets:write": "secrets:write";
+    "sessions:control": "sessions:control";
+    "sessions:create": "sessions:create";
+    "sessions:read": "sessions:read";
+    "stream:acknowledge": "stream:acknowledge";
+    "stream:control": "stream:control";
+    "stream:view": "stream:view";
+    "terminal:attach": "terminal:attach";
+    "usage_allowances:manage": "usage_allowances:manage";
+    "variable-sets:attach": "variable-sets:attach";
+    "variable-sets:list": "variable-sets:list";
+    "variable-sets:manage": "variable-sets:manage";
+    "variable-sets:read": "variable-sets:read";
+    "variable-sets:use": "variable-sets:use";
+    "variable-sets:write": "variable-sets:write";
+    "workspace:admin": "workspace:admin";
+    "workspace:create": "workspace:create";
+    "workspace:read": "workspace:read";
+}>;
+export type Permission = z.infer<typeof Permission>;

package/dist/personal-github.d.ts

@@ -0,0 +1,320 @@
+import { z } from "zod";
+import { ConnectionMetadata } from "./index.js";
+export declare const PERSONAL_GITHUB_PROVIDER_DOMAIN: "github.com";
+export declare const PERSONAL_GITHUB_PROVIDER_FAMILY: "github";
+export declare const PERSONAL_GITHUB_CREDENTIAL_ROLE: "opengeni_github_personal";
+export declare const PERSONAL_GITHUB_CONNECTION_SURFACE_ID: "github:personal";
+export declare const PERSONAL_GITHUB_REQUESTED_SCOPES: readonly ["repo"];
+export declare const PERSONAL_GITHUB_AUTHORIZATION_URL: "https://github.com/login/oauth/authorize";
+export declare const PERSONAL_GITHUB_TOKEN_URL: "https://github.com/login/oauth/access_token";
+export declare const PERSONAL_GITHUB_USER_URL: "https://api.github.com/user";
+export declare const PERSONAL_GITHUB_API_ORIGIN: "https://api.github.com";
+export declare const PERSONAL_GITHUB_REPOSITORY_CATALOG_MAX: 100;
+export declare const PersonalGitHubRepositoryId: z.ZodString;
+export type PersonalGitHubRepositoryId = z.infer<typeof PersonalGitHubRepositoryId>;
+export declare const PersonalGitHubRepositoryAccess: z.ZodEnum<{
+    read: "read";
+    write: "write";
+}>;
+export type PersonalGitHubRepositoryAccess = z.infer<typeof PersonalGitHubRepositoryAccess>;
+export declare const PersonalGitHubRepositoryPermissions: z.ZodObject<{
+    pull: z.ZodBoolean;
+    push: z.ZodBoolean;
+    admin: z.ZodBoolean;
+    maintain: z.ZodBoolean;
+    triage: z.ZodBoolean;
+}, z.core.$strict>;
+export type PersonalGitHubRepositoryPermissions = z.infer<typeof PersonalGitHubRepositoryPermissions>;
+export declare const PersonalGitHubRepositoryVisibility: z.ZodEnum<{
+    internal: "internal";
+    private: "private";
+    public: "public";
+}>;
+export type PersonalGitHubRepositoryVisibility = z.infer<typeof PersonalGitHubRepositoryVisibility>;
+export declare function canonicalPersonalGitHubRepositoryUrl(fullName: string): string;
+/** A bounded, credential-free projection verified directly against GitHub. */
+export declare const PersonalGitHubRepository: z.ZodObject<{
+    repositoryId: z.ZodString;
+    fullName: z.ZodString;
+    canonicalUrl: z.ZodString;
+    defaultBranch: z.ZodString;
+    visibility: z.ZodEnum<{
+        internal: "internal";
+        private: "private";
+        public: "public";
+    }>;
+    private: z.ZodBoolean;
+    archived: z.ZodBoolean;
+    disabled: z.ZodBoolean;
+    permissions: z.ZodObject<{
+        pull: z.ZodBoolean;
+        push: z.ZodBoolean;
+        admin: z.ZodBoolean;
+        maintain: z.ZodBoolean;
+        triage: z.ZodBoolean;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+export type PersonalGitHubRepository = z.infer<typeof PersonalGitHubRepository>;
+export declare const PersonalGitHubSelectedRepository: z.ZodObject<{
+    repositoryId: z.ZodString;
+    fullName: z.ZodString;
+    canonicalUrl: z.ZodString;
+    defaultBranch: z.ZodString;
+    visibility: z.ZodEnum<{
+        internal: "internal";
+        private: "private";
+        public: "public";
+    }>;
+    private: z.ZodBoolean;
+    archived: z.ZodBoolean;
+    disabled: z.ZodBoolean;
+    permissions: z.ZodObject<{
+        pull: z.ZodBoolean;
+        push: z.ZodBoolean;
+        admin: z.ZodBoolean;
+        maintain: z.ZodBoolean;
+        triage: z.ZodBoolean;
+    }, z.core.$strict>;
+    selectedAccess: z.ZodEnum<{
+        read: "read";
+        write: "write";
+    }>;
+    selectionGeneration: z.ZodNumber;
+    selectedAt: z.ZodString;
+    lastVerifiedAt: z.ZodString;
+}, z.core.$strict>;
+export type PersonalGitHubSelectedRepository = z.infer<typeof PersonalGitHubSelectedRepository>;
+export declare const PersonalGitHubRepositorySelectionState: z.ZodObject<{
+    connectionAuthorityGeneration: z.ZodNumber;
+    credentialBindingId: z.ZodString;
+    providerPrincipalId: z.ZodString;
+    selectionGeneration: z.ZodNumber;
+    repositories: z.ZodArray<z.ZodObject<{
+        repositoryId: z.ZodString;
+        fullName: z.ZodString;
+        canonicalUrl: z.ZodString;
+        defaultBranch: z.ZodString;
+        visibility: z.ZodEnum<{
+            internal: "internal";
+            private: "private";
+            public: "public";
+        }>;
+        private: z.ZodBoolean;
+        archived: z.ZodBoolean;
+        disabled: z.ZodBoolean;
+        permissions: z.ZodObject<{
+            pull: z.ZodBoolean;
+            push: z.ZodBoolean;
+            admin: z.ZodBoolean;
+            maintain: z.ZodBoolean;
+            triage: z.ZodBoolean;
+        }, z.core.$strict>;
+        selectedAccess: z.ZodEnum<{
+            read: "read";
+            write: "write";
+        }>;
+        selectionGeneration: z.ZodNumber;
+        selectedAt: z.ZodString;
+        lastVerifiedAt: z.ZodString;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type PersonalGitHubRepositorySelectionState = z.infer<typeof PersonalGitHubRepositorySelectionState>;
+export declare const ListPersonalGitHubRepositoriesQuery: z.ZodObject<{
+    cursor: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
+    limit: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
+}, z.core.$strict>;
+export type ListPersonalGitHubRepositoriesQuery = z.infer<typeof ListPersonalGitHubRepositoriesQuery>;
+export declare const PersonalGitHubRepositoryCatalogItem: z.ZodObject<{
+    repositoryId: z.ZodString;
+    fullName: z.ZodString;
+    canonicalUrl: z.ZodString;
+    defaultBranch: z.ZodString;
+    visibility: z.ZodEnum<{
+        internal: "internal";
+        private: "private";
+        public: "public";
+    }>;
+    private: z.ZodBoolean;
+    archived: z.ZodBoolean;
+    disabled: z.ZodBoolean;
+    permissions: z.ZodObject<{
+        pull: z.ZodBoolean;
+        push: z.ZodBoolean;
+        admin: z.ZodBoolean;
+        maintain: z.ZodBoolean;
+        triage: z.ZodBoolean;
+    }, z.core.$strict>;
+    selectedAccess: z.ZodNullable<z.ZodEnum<{
+        read: "read";
+        write: "write";
+    }>>;
+}, z.core.$strict>;
+export type PersonalGitHubRepositoryCatalogItem = z.infer<typeof PersonalGitHubRepositoryCatalogItem>;
+export declare const ListPersonalGitHubRepositoriesResponse: z.ZodObject<{
+    repositories: z.ZodArray<z.ZodObject<{
+        repositoryId: z.ZodString;
+        fullName: z.ZodString;
+        canonicalUrl: z.ZodString;
+        defaultBranch: z.ZodString;
+        visibility: z.ZodEnum<{
+            internal: "internal";
+            private: "private";
+            public: "public";
+        }>;
+        private: z.ZodBoolean;
+        archived: z.ZodBoolean;
+        disabled: z.ZodBoolean;
+        permissions: z.ZodObject<{
+            pull: z.ZodBoolean;
+            push: z.ZodBoolean;
+            admin: z.ZodBoolean;
+            maintain: z.ZodBoolean;
+            triage: z.ZodBoolean;
+        }, z.core.$strict>;
+        selectedAccess: z.ZodNullable<z.ZodEnum<{
+            read: "read";
+            write: "write";
+        }>>;
+    }, z.core.$strict>>;
+    nextCursor: z.ZodNullable<z.ZodNumber>;
+    selection: z.ZodObject<{
+        connectionAuthorityGeneration: z.ZodNumber;
+        credentialBindingId: z.ZodString;
+        providerPrincipalId: z.ZodString;
+        selectionGeneration: z.ZodNumber;
+        repositories: z.ZodArray<z.ZodObject<{
+            repositoryId: z.ZodString;
+            fullName: z.ZodString;
+            canonicalUrl: z.ZodString;
+            defaultBranch: z.ZodString;
+            visibility: z.ZodEnum<{
+                internal: "internal";
+                private: "private";
+                public: "public";
+            }>;
+            private: z.ZodBoolean;
+            archived: z.ZodBoolean;
+            disabled: z.ZodBoolean;
+            permissions: z.ZodObject<{
+                pull: z.ZodBoolean;
+                push: z.ZodBoolean;
+                admin: z.ZodBoolean;
+                maintain: z.ZodBoolean;
+                triage: z.ZodBoolean;
+            }, z.core.$strict>;
+            selectedAccess: z.ZodEnum<{
+                read: "read";
+                write: "write";
+            }>;
+            selectionGeneration: z.ZodNumber;
+            selectedAt: z.ZodString;
+            lastVerifiedAt: z.ZodString;
+        }, z.core.$strict>>;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+export type ListPersonalGitHubRepositoriesResponse = z.infer<typeof ListPersonalGitHubRepositoriesResponse>;
+export declare const PersonalGitHubRepositorySelectionInput: z.ZodObject<{
+    repositoryId: z.ZodString;
+    fullName: z.ZodString;
+    access: z.ZodEnum<{
+        read: "read";
+        write: "write";
+    }>;
+}, z.core.$strict>;
+export type PersonalGitHubRepositorySelectionInput = z.infer<typeof PersonalGitHubRepositorySelectionInput>;
+export declare const ReplacePersonalGitHubRepositorySelectionsRequest: z.ZodObject<{
+    expectedConnectionAuthorityGeneration: z.ZodNumber;
+    expectedSelectionGeneration: z.ZodNumber;
+    idempotencyKey: z.ZodString;
+    repositories: z.ZodArray<z.ZodObject<{
+        repositoryId: z.ZodString;
+        fullName: z.ZodString;
+        access: z.ZodEnum<{
+            read: "read";
+            write: "write";
+        }>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type ReplacePersonalGitHubRepositorySelectionsRequest = z.infer<typeof ReplacePersonalGitHubRepositorySelectionsRequest>;
+export declare const VerifyPersonalGitHubRepositorySelectionsRequest: z.ZodObject<{
+    expectedConnectionAuthorityGeneration: z.ZodNumber;
+    expectedSelectionGeneration: z.ZodNumber;
+    idempotencyKey: z.ZodString;
+}, z.core.$strict>;
+export type VerifyPersonalGitHubRepositorySelectionsRequest = z.infer<typeof VerifyPersonalGitHubRepositorySelectionsRequest>;
+/**
+ * Owner-visible, credential-free metadata for one dedicated personal GitHub
+ * OAuth connection. Repository selections are a separate authority and never
+ * live in this credential record.
+ */
+export declare const PersonalGitHubConnectionMetadata: z.ZodObject<{
+    credentialRole: z.ZodLiteral<"opengeni_github_personal">;
+    providerFamily: z.ZodLiteral<"github">;
+    providerPrincipalId: z.ZodString;
+    githubUserId: z.ZodString;
+    githubLogin: z.ZodString;
+    oauthEnvironment: z.ZodString;
+    oauthClientMarker: z.ZodString;
+    credentialBindingId: z.ZodString;
+    connectedAt: z.ZodString;
+    lastVerifiedAt: z.ZodString;
+    disconnectedAt: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    refreshTokenExpiresAt: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+}, z.core.$loose>;
+export type PersonalGitHubConnectionMetadata = z.infer<typeof PersonalGitHubConnectionMetadata>;
+export declare const PersonalGitHubOAuthStartRequest: z.ZodObject<{
+    connectionId: z.ZodOptional<z.ZodString>;
+    returnPath: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export type PersonalGitHubOAuthStartRequest = z.infer<typeof PersonalGitHubOAuthStartRequest>;
+export declare const PersonalGitHubOAuthStartResponse: z.ZodObject<{
+    authorizationUrl: z.ZodString;
+    expiresAt: z.ZodString;
+}, z.core.$strict>;
+export type PersonalGitHubOAuthStartResponse = z.infer<typeof PersonalGitHubOAuthStartResponse>;
+export declare const PersonalGitHubConnectionStatusResponse: z.ZodObject<{
+    enabled: z.ZodBoolean;
+    connection: z.ZodNullable<z.ZodObject<{
+        id: z.ZodString;
+        authorityId: z.ZodOptional<z.ZodString>;
+        connectionAuthorityGeneration: z.ZodOptional<z.ZodNumber>;
+        accountId: z.ZodString;
+        workspaceId: z.ZodString;
+        subjectId: z.ZodNullable<z.ZodString>;
+        providerDomain: z.ZodString;
+        kind: z.ZodEnum<{
+            api_key: "api_key";
+            app_install: "app_install";
+            delegated: "delegated";
+            oauth2: "oauth2";
+        }>;
+        status: z.ZodEnum<{
+            active: "active";
+            error: "error";
+            needs_reauth: "needs_reauth";
+            revoked: "revoked";
+        }>;
+        grantedScopes: z.ZodArray<z.ZodString>;
+        expiresAt: z.ZodNullable<z.ZodString>;
+        lastRefreshAt: z.ZodNullable<z.ZodString>;
+        lastUsedAt: z.ZodNullable<z.ZodString>;
+        lastError: z.ZodNullable<z.ZodString>;
+        version: z.ZodNumber;
+        verifiedInstallAt: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        verifiedInstallVersion: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+        metadata: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+        createdBySubjectId: z.ZodNullable<z.ZodString>;
+        updatedBySubjectId: z.ZodNullable<z.ZodString>;
+        createdAt: z.ZodString;
+        updatedAt: z.ZodString;
+    }, z.core.$strip>>;
+    reviewUrl: z.ZodNullable<z.ZodString>;
+}, z.core.$strict>;
+export type PersonalGitHubConnectionStatusResponse = z.infer<typeof PersonalGitHubConnectionStatusResponse>;
+export declare const PersonalGitHubDisconnectRequest: z.ZodObject<{
+    expectedVersion: z.ZodNumber;
+    idempotencyKey: z.ZodString;
+}, z.core.$strict>;
+export type PersonalGitHubDisconnectRequest = z.infer<typeof PersonalGitHubDisconnectRequest>;
+export declare function isPersonalGitHubConnection(connection: Pick<z.infer<typeof ConnectionMetadata>, "providerDomain" | "kind" | "metadata">): boolean;
+export declare function hasReservedPersonalGitHubMetadata(metadata: Record<string, unknown> | undefined): boolean;