@opengeni/contracts 0.50.0 → 2.2.0-canary.0

package/dist/organization-membership-lifecycle.d.ts

@@ -0,0 +1,516 @@
+import { z } from "zod";
+export declare const OrganizationMembershipRole: z.ZodEnum<{
+    admin: "admin";
+    member: "member";
+    owner: "owner";
+}>;
+export type OrganizationMembershipRole = z.infer<typeof OrganizationMembershipRole>;
+export declare const OrganizationInvitationStatus: z.ZodEnum<{
+    accepted: "accepted";
+    expired: "expired";
+    pending: "pending";
+    revoked: "revoked";
+}>;
+export type OrganizationInvitationStatus = z.infer<typeof OrganizationInvitationStatus>;
+export declare const OrganizationInvitation: z.ZodObject<{
+    id: z.ZodString;
+    organizationId: z.ZodString;
+    targetEmail: z.ZodString;
+    targetName: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+    initialWorkspaceIds: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    role: z.ZodEnum<{
+        admin: "admin";
+        member: "member";
+        owner: "owner";
+    }>;
+    status: z.ZodEnum<{
+        accepted: "accepted";
+        expired: "expired";
+        pending: "pending";
+        revoked: "revoked";
+    }>;
+    revision: z.ZodNumber;
+    expiresAt: z.ZodString;
+    acceptedMembershipId: z.ZodNullable<z.ZodString>;
+    createdAt: z.ZodString;
+    updatedAt: z.ZodString;
+}, z.core.$strip>;
+export type OrganizationInvitation = z.infer<typeof OrganizationInvitation>;
+export declare const OrganizationMember: z.ZodObject<{
+    id: z.ZodString;
+    organizationId: z.ZodString;
+    subjectId: z.ZodString;
+    name: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+    email: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+    role: z.ZodEnum<{
+        admin: "admin";
+        member: "member";
+        owner: "owner";
+    }>;
+    status: z.ZodEnum<{
+        active: "active";
+        provisioning: "provisioning";
+        revoked: "revoked";
+        suspended: "suspended";
+    }>;
+    authorizationRevision: z.ZodNumber;
+    personalWorkspaceId: z.ZodNullable<z.ZodString>;
+    revokedAt: z.ZodNullable<z.ZodString>;
+    personalRetentionUntil: z.ZodNullable<z.ZodString>;
+    createdAt: z.ZodString;
+    updatedAt: z.ZodString;
+}, z.core.$strip>;
+export type OrganizationMember = z.infer<typeof OrganizationMember>;
+export declare const OrganizationSummary: z.ZodObject<{
+    id: z.ZodString;
+    name: z.ZodString;
+    createdAt: z.ZodString;
+    updatedAt: z.ZodString;
+}, z.core.$strip>;
+export type OrganizationSummary = z.infer<typeof OrganizationSummary>;
+export declare const OrganizationPrivateSessionSettings: z.ZodObject<{
+    organizationId: z.ZodString;
+    enabled: z.ZodBoolean;
+    available: z.ZodBoolean;
+    version: z.ZodNumber;
+    updatedAt: z.ZodString;
+    changed: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$strip>;
+export type OrganizationPrivateSessionSettings = z.infer<typeof OrganizationPrivateSessionSettings>;
+export declare const UpdateOrganizationPrivateSessionSettingsRequest: z.ZodObject<{
+    enabled: z.ZodBoolean;
+    expectedVersion: z.ZodNumber;
+    operationId: z.ZodString;
+}, z.core.$strict>;
+export type UpdateOrganizationPrivateSessionSettingsRequest = z.infer<typeof UpdateOrganizationPrivateSessionSettingsRequest>;
+export declare const OrganizationWorkspaceAccessMember: z.ZodObject<{
+    membershipId: z.ZodString;
+    subjectId: z.ZodString;
+    subjectLabel: z.ZodNullable<z.ZodString>;
+    principalKind: z.ZodEnum<{
+        human: "human";
+        service: "service";
+    }>;
+    role: z.ZodString;
+    permissions: z.ZodArray<z.ZodString>;
+    createdAt: z.ZodString;
+}, z.core.$strip>;
+export type OrganizationWorkspaceAccessMember = z.infer<typeof OrganizationWorkspaceAccessMember>;
+export declare const OrganizationWorkspaceAccess: z.ZodObject<{
+    id: z.ZodString;
+    name: z.ZodString;
+    slug: z.ZodNullable<z.ZodString>;
+    createdAt: z.ZodString;
+    updatedAt: z.ZodString;
+    members: z.ZodArray<z.ZodObject<{
+        membershipId: z.ZodString;
+        subjectId: z.ZodString;
+        subjectLabel: z.ZodNullable<z.ZodString>;
+        principalKind: z.ZodEnum<{
+            human: "human";
+            service: "service";
+        }>;
+        role: z.ZodString;
+        permissions: z.ZodArray<z.ZodString>;
+        createdAt: z.ZodString;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type OrganizationWorkspaceAccess = z.infer<typeof OrganizationWorkspaceAccess>;
+export declare const OrganizationAdministrationOverview: z.ZodObject<{
+    organization: z.ZodObject<{
+        id: z.ZodString;
+        name: z.ZodString;
+        createdAt: z.ZodString;
+        updatedAt: z.ZodString;
+    }, z.core.$strip>;
+    workspaces: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        name: z.ZodString;
+        slug: z.ZodNullable<z.ZodString>;
+        createdAt: z.ZodString;
+        updatedAt: z.ZodString;
+        members: z.ZodArray<z.ZodObject<{
+            membershipId: z.ZodString;
+            subjectId: z.ZodString;
+            subjectLabel: z.ZodNullable<z.ZodString>;
+            principalKind: z.ZodEnum<{
+                human: "human";
+                service: "service";
+            }>;
+            role: z.ZodString;
+            permissions: z.ZodArray<z.ZodString>;
+            createdAt: z.ZodString;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type OrganizationAdministrationOverview = z.infer<typeof OrganizationAdministrationOverview>;
+export declare const AddOrganizationWorkspaceMemberRequest: z.ZodObject<{
+    organizationMembershipId: z.ZodString;
+    role: z.ZodOptional<z.ZodString>;
+    permissions: z.ZodArray<z.ZodEnum<{
+        "account:admin": "account:admin";
+        "account:read": "account:read";
+        "api_keys:manage": "api_keys:manage";
+        "artifacts:publish": "artifacts:publish";
+        "artifacts:read": "artifacts:read";
+        "billing:manage": "billing:manage";
+        "billing:read": "billing:read";
+        "codemode:call": "codemode:call";
+        "connections:read": "connections:read";
+        "connections:write": "connections:write";
+        "documents:manage": "documents:manage";
+        "documents:search": "documents:search";
+        "enrollments:manage": "enrollments:manage";
+        "enrollments:read": "enrollments:read";
+        "environments:manage": "environments:manage";
+        "environments:use": "environments:use";
+        "files:read": "files:read";
+        "files:upload": "files:upload";
+        "files:write": "files:write";
+        "github:manage": "github:manage";
+        "github:use": "github:use";
+        "goals:manage": "goals:manage";
+        "mcp_servers:attach": "mcp_servers:attach";
+        "members:manage": "members:manage";
+        "rigs:manage": "rigs:manage";
+        "rigs:use": "rigs:use";
+        "scheduled_tasks:manage": "scheduled_tasks:manage";
+        "scheduled_tasks:run": "scheduled_tasks:run";
+        "secrets:list": "secrets:list";
+        "secrets:read": "secrets:read";
+        "secrets:write": "secrets:write";
+        "sessions:control": "sessions:control";
+        "sessions:create": "sessions:create";
+        "sessions:read": "sessions:read";
+        "stream:acknowledge": "stream:acknowledge";
+        "stream:control": "stream:control";
+        "stream:view": "stream:view";
+        "terminal:attach": "terminal:attach";
+        "variable-sets:attach": "variable-sets:attach";
+        "variable-sets:list": "variable-sets:list";
+        "variable-sets:manage": "variable-sets:manage";
+        "variable-sets:read": "variable-sets:read";
+        "variable-sets:use": "variable-sets:use";
+        "variable-sets:write": "variable-sets:write";
+        "workspace:admin": "workspace:admin";
+        "workspace:create": "workspace:create";
+        "workspace:read": "workspace:read";
+    }>>;
+}, z.core.$strip>;
+export type AddOrganizationWorkspaceMemberRequest = z.infer<typeof AddOrganizationWorkspaceMemberRequest>;
+export declare const CreateOrganizationWorkspaceRequest: z.ZodObject<{
+    name: z.ZodString;
+    slug: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    agentInstructions: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    operationId: z.ZodString;
+}, z.core.$strip>;
+export type CreateOrganizationWorkspaceRequest = z.infer<typeof CreateOrganizationWorkspaceRequest>;
+export declare const CreateOrganizationRequest: z.ZodObject<{
+    name: z.ZodString;
+    operationId: z.ZodString;
+}, z.core.$strip>;
+export type CreateOrganizationRequest = z.infer<typeof CreateOrganizationRequest>;
+export declare const CreateOrganizationResponse: z.ZodObject<{
+    organization: z.ZodObject<{
+        id: z.ZodString;
+        name: z.ZodString;
+        createdAt: z.ZodString;
+        updatedAt: z.ZodString;
+    }, z.core.$strip>;
+    workspaceId: z.ZodString;
+}, z.core.$strip>;
+export type CreateOrganizationResponse = z.infer<typeof CreateOrganizationResponse>;
+export declare const UpdateOrganizationNameRequest: z.ZodObject<{
+    name: z.ZodString;
+    expectedUpdatedAt: z.ZodString;
+    operationId: z.ZodString;
+}, z.core.$strip>;
+export type UpdateOrganizationNameRequest = z.infer<typeof UpdateOrganizationNameRequest>;
+export declare const OrganizationRetentionPolicy: z.ZodObject<{
+    organizationId: z.ZodString;
+    mode: z.ZodEnum<{
+        delete_after: "delete_after";
+        retain: "retain";
+    }>;
+    retentionDays: z.ZodNullable<z.ZodNumber>;
+    version: z.ZodNumber;
+    updatedAt: z.ZodString;
+}, z.core.$strip>;
+export type OrganizationRetentionPolicy = z.infer<typeof OrganizationRetentionPolicy>;
+export declare const OrganizationRetentionDeletionClaim: z.ZodObject<{
+    organizationId: z.ZodString;
+    membershipId: z.ZodString;
+    operationId: z.ZodString;
+    retentionUntil: z.ZodString;
+    claimExpiresAt: z.ZodString;
+    personalWorkspaceId: z.ZodNullable<z.ZodString>;
+    objectCount: z.ZodNumber;
+    deletedObjectCount: z.ZodNumber;
+}, z.core.$strip>;
+export type OrganizationRetentionDeletionClaim = z.infer<typeof OrganizationRetentionDeletionClaim>;
+export declare const OrganizationRetentionDeletionObject: z.ZodObject<{
+    objectKind: z.ZodEnum<{
+        browser_state_artifact: "browser_state_artifact";
+        browser_state_upload: "browser_state_upload";
+        editable_artifact_blob: "editable_artifact_blob";
+        file: "file";
+        session_recording: "session_recording";
+        transcription_recording_object: "transcription_recording_object";
+        video_staging_reference: "video_staging_reference";
+        workspace_artifact_version: "workspace_artifact_version";
+        workspace_capture_blob: "workspace_capture_blob";
+        workspace_capture_manifest: "workspace_capture_manifest";
+        workspace_capture_tree_index: "workspace_capture_tree_index";
+    }>;
+    sourceId: z.ZodString;
+    objectBucket: z.ZodString;
+    objectKey: z.ZodString;
+}, z.core.$strip>;
+export type OrganizationRetentionDeletionObject = z.infer<typeof OrganizationRetentionDeletionObject>;
+export declare const OrganizationRetentionDatabaseFinalization: z.ZodObject<{
+    organizationId: z.ZodString;
+    membershipId: z.ZodString;
+    operationId: z.ZodString;
+    outcome: z.ZodLiteral<"cleanup_pending">;
+    objectBucket: z.ZodString;
+    objectCount: z.ZodNumber;
+    deletedResources: z.ZodRecord<z.ZodString, z.ZodNumber>;
+    databaseFinalizedAt: z.ZodString;
+}, z.core.$strip>;
+export type OrganizationRetentionDatabaseFinalization = z.infer<typeof OrganizationRetentionDatabaseFinalization>;
+export declare const OrganizationRetentionDeletionResult: z.ZodObject<{
+    organizationId: z.ZodString;
+    membershipId: z.ZodString;
+    operationId: z.ZodString;
+    outcome: z.ZodEnum<{
+        already_completed: "already_completed";
+        completed: "completed";
+    }>;
+    deletedResources: z.ZodRecord<z.ZodString, z.ZodNumber>;
+    completedAt: z.ZodString;
+}, z.core.$strip>;
+export type OrganizationRetentionDeletionResult = z.infer<typeof OrganizationRetentionDeletionResult>;
+export declare const OrganizationRetentionDeletionPreview: z.ZodObject<{
+    membershipId: z.ZodString;
+    retentionUntil: z.ZodString;
+    personalWorkspaceId: z.ZodNullable<z.ZodString>;
+    resourceCount: z.ZodNumber;
+    objectCount: z.ZodNumber;
+}, z.core.$strip>;
+export type OrganizationRetentionDeletionPreview = z.infer<typeof OrganizationRetentionDeletionPreview>;
+export declare const CreateOrganizationInvitationRequest: z.ZodObject<{
+    email: z.ZodString;
+    name: z.ZodOptional<z.ZodString>;
+    initialWorkspaceIds: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    role: z.ZodDefault<z.ZodEnum<{
+        admin: "admin";
+        member: "member";
+        owner: "owner";
+    }>>;
+    expiresAt: z.ZodString;
+    operationId: z.ZodString;
+}, z.core.$strip>;
+export type CreateOrganizationInvitationRequest = z.infer<typeof CreateOrganizationInvitationRequest>;
+export declare const AcceptOrganizationInvitationRequest: z.ZodObject<{
+    expectedRevision: z.ZodNumber;
+    operationId: z.ZodString;
+}, z.core.$strip>;
+export type AcceptOrganizationInvitationRequest = z.infer<typeof AcceptOrganizationInvitationRequest>;
+export declare const RevokeOrganizationInvitationRequest: z.ZodObject<{
+    expectedRevision: z.ZodNumber;
+    operationId: z.ZodString;
+}, z.core.$strip>;
+export type RevokeOrganizationInvitationRequest = z.infer<typeof RevokeOrganizationInvitationRequest>;
+export declare const OrganizationMemberTransitionKind: z.ZodEnum<{
+    change_role: "change_role";
+    offboard: "offboard";
+    reactivate: "reactivate";
+    suspend: "suspend";
+}>;
+export type OrganizationMemberTransitionKind = z.infer<typeof OrganizationMemberTransitionKind>;
+export declare const UpdateOrganizationMemberRequest: z.ZodObject<{
+    kind: z.ZodEnum<{
+        change_role: "change_role";
+        offboard: "offboard";
+        reactivate: "reactivate";
+        suspend: "suspend";
+    }>;
+    role: z.ZodOptional<z.ZodEnum<{
+        admin: "admin";
+        member: "member";
+        owner: "owner";
+    }>>;
+    expectedAuthorizationRevision: z.ZodNumber;
+    operationId: z.ZodString;
+    reason: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type UpdateOrganizationMemberRequest = z.infer<typeof UpdateOrganizationMemberRequest>;
+export declare const UpdateOrganizationRetentionPolicyRequest: z.ZodObject<{
+    mode: z.ZodEnum<{
+        delete_after: "delete_after";
+        retain: "retain";
+    }>;
+    retentionDays: z.ZodNullable<z.ZodNumber>;
+    expectedVersion: z.ZodNumber;
+    operationId: z.ZodString;
+}, z.core.$strip>;
+export type UpdateOrganizationRetentionPolicyRequest = z.infer<typeof UpdateOrganizationRetentionPolicyRequest>;
+export declare const ListOrganizationInvitationsResponse: z.ZodObject<{
+    invitations: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        organizationId: z.ZodString;
+        targetEmail: z.ZodString;
+        targetName: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        initialWorkspaceIds: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        role: z.ZodEnum<{
+            admin: "admin";
+            member: "member";
+            owner: "owner";
+        }>;
+        status: z.ZodEnum<{
+            accepted: "accepted";
+            expired: "expired";
+            pending: "pending";
+            revoked: "revoked";
+        }>;
+        revision: z.ZodNumber;
+        expiresAt: z.ZodString;
+        acceptedMembershipId: z.ZodNullable<z.ZodString>;
+        createdAt: z.ZodString;
+        updatedAt: z.ZodString;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export declare const ListOrganizationInvitationsPageQuery: z.ZodObject<{
+    cursor: z.ZodOptional<z.ZodString>;
+    limit: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
+}, z.core.$strip>;
+export type ListOrganizationInvitationsPageQuery = z.infer<typeof ListOrganizationInvitationsPageQuery>;
+export declare const ListOrganizationInvitationsPageResponse: z.ZodObject<{
+    invitations: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        organizationId: z.ZodString;
+        targetEmail: z.ZodString;
+        targetName: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        initialWorkspaceIds: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        role: z.ZodEnum<{
+            admin: "admin";
+            member: "member";
+            owner: "owner";
+        }>;
+        status: z.ZodEnum<{
+            accepted: "accepted";
+            expired: "expired";
+            pending: "pending";
+            revoked: "revoked";
+        }>;
+        revision: z.ZodNumber;
+        expiresAt: z.ZodString;
+        acceptedMembershipId: z.ZodNullable<z.ZodString>;
+        createdAt: z.ZodString;
+        updatedAt: z.ZodString;
+    }, z.core.$strip>>;
+    nextCursor: z.ZodNullable<z.ZodString>;
+}, z.core.$strip>;
+export type ListOrganizationInvitationsPageResponse = z.infer<typeof ListOrganizationInvitationsPageResponse>;
+export declare const AcceptOrganizationInvitationResponse: z.ZodObject<{
+    invitation: z.ZodObject<{
+        id: z.ZodString;
+        organizationId: z.ZodString;
+        targetEmail: z.ZodString;
+        targetName: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        initialWorkspaceIds: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        role: z.ZodEnum<{
+            admin: "admin";
+            member: "member";
+            owner: "owner";
+        }>;
+        status: z.ZodEnum<{
+            accepted: "accepted";
+            expired: "expired";
+            pending: "pending";
+            revoked: "revoked";
+        }>;
+        revision: z.ZodNumber;
+        expiresAt: z.ZodString;
+        acceptedMembershipId: z.ZodNullable<z.ZodString>;
+        createdAt: z.ZodString;
+        updatedAt: z.ZodString;
+    }, z.core.$strip>;
+    membership: z.ZodObject<{
+        id: z.ZodString;
+        organizationId: z.ZodString;
+        subjectId: z.ZodString;
+        name: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        email: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        role: z.ZodEnum<{
+            admin: "admin";
+            member: "member";
+            owner: "owner";
+        }>;
+        status: z.ZodEnum<{
+            active: "active";
+            provisioning: "provisioning";
+            revoked: "revoked";
+            suspended: "suspended";
+        }>;
+        authorizationRevision: z.ZodNumber;
+        personalWorkspaceId: z.ZodNullable<z.ZodString>;
+        revokedAt: z.ZodNullable<z.ZodString>;
+        personalRetentionUntil: z.ZodNullable<z.ZodString>;
+        createdAt: z.ZodString;
+        updatedAt: z.ZodString;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+export type AcceptOrganizationInvitationResponse = z.infer<typeof AcceptOrganizationInvitationResponse>;
+export declare const ListOrganizationMembersResponse: z.ZodObject<{
+    members: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        organizationId: z.ZodString;
+        subjectId: z.ZodString;
+        name: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        email: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        role: z.ZodEnum<{
+            admin: "admin";
+            member: "member";
+            owner: "owner";
+        }>;
+        status: z.ZodEnum<{
+            active: "active";
+            provisioning: "provisioning";
+            revoked: "revoked";
+            suspended: "suspended";
+        }>;
+        authorizationRevision: z.ZodNumber;
+        personalWorkspaceId: z.ZodNullable<z.ZodString>;
+        revokedAt: z.ZodNullable<z.ZodString>;
+        personalRetentionUntil: z.ZodNullable<z.ZodString>;
+        createdAt: z.ZodString;
+        updatedAt: z.ZodString;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export declare const ListSelfOrganizationMembershipsResponse: z.ZodObject<{
+    memberships: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        organizationId: z.ZodString;
+        subjectId: z.ZodString;
+        name: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        email: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        role: z.ZodEnum<{
+            admin: "admin";
+            member: "member";
+            owner: "owner";
+        }>;
+        status: z.ZodEnum<{
+            active: "active";
+            provisioning: "provisioning";
+            revoked: "revoked";
+            suspended: "suspended";
+        }>;
+        authorizationRevision: z.ZodNumber;
+        personalWorkspaceId: z.ZodNullable<z.ZodString>;
+        revokedAt: z.ZodNullable<z.ZodString>;
+        personalRetentionUntil: z.ZodNullable<z.ZodString>;
+        createdAt: z.ZodString;
+        updatedAt: z.ZodString;
+    }, z.core.$strip>>;
+}, z.core.$strip>;

package/dist/permissions.d.ts

@@ -0,0 +1,52 @@
+import { z } from "zod";
+/** Canonical public permission vocabulary shared by operational and control-plane contracts. */
+export declare const Permission: z.ZodEnum<{
+    "account:admin": "account:admin";
+    "account:read": "account:read";
+    "api_keys:manage": "api_keys:manage";
+    "artifacts:publish": "artifacts:publish";
+    "artifacts:read": "artifacts:read";
+    "billing:manage": "billing:manage";
+    "billing:read": "billing:read";
+    "codemode:call": "codemode:call";
+    "connections:read": "connections:read";
+    "connections:write": "connections:write";
+    "documents:manage": "documents:manage";
+    "documents:search": "documents:search";
+    "enrollments:manage": "enrollments:manage";
+    "enrollments:read": "enrollments:read";
+    "environments:manage": "environments:manage";
+    "environments:use": "environments:use";
+    "files:read": "files:read";
+    "files:upload": "files:upload";
+    "files:write": "files:write";
+    "github:manage": "github:manage";
+    "github:use": "github:use";
+    "goals:manage": "goals:manage";
+    "mcp_servers:attach": "mcp_servers:attach";
+    "members:manage": "members:manage";
+    "rigs:manage": "rigs:manage";
+    "rigs:use": "rigs:use";
+    "scheduled_tasks:manage": "scheduled_tasks:manage";
+    "scheduled_tasks:run": "scheduled_tasks:run";
+    "secrets:list": "secrets:list";
+    "secrets:read": "secrets:read";
+    "secrets:write": "secrets:write";
+    "sessions:control": "sessions:control";
+    "sessions:create": "sessions:create";
+    "sessions:read": "sessions:read";
+    "stream:acknowledge": "stream:acknowledge";
+    "stream:control": "stream:control";
+    "stream:view": "stream:view";
+    "terminal:attach": "terminal:attach";
+    "variable-sets:attach": "variable-sets:attach";
+    "variable-sets:list": "variable-sets:list";
+    "variable-sets:manage": "variable-sets:manage";
+    "variable-sets:read": "variable-sets:read";
+    "variable-sets:use": "variable-sets:use";
+    "variable-sets:write": "variable-sets:write";
+    "workspace:admin": "workspace:admin";
+    "workspace:create": "workspace:create";
+    "workspace:read": "workspace:read";
+}>;
+export type Permission = z.infer<typeof Permission>;