@opengeni/contracts 3.1.2 → 3.2.2

package/dist/vaults.d.ts

@@ -16,9 +16,13 @@ export declare const VaultOwnerKind: z.ZodEnum<{
 }>;
 export type VaultOwnerKind = z.infer<typeof VaultOwnerKind>;
 export declare const VaultSource: z.ZodEnum<{
+    bitwarden: "bitwarden";
+    external: "external";
     host: "host";
+    keeper: "keeper";
     onepassword: "onepassword";
     opengeni: "opengeni";
+    protonpass: "protonpass";
 }>;
 export type VaultSource = z.infer<typeof VaultSource>;
 export declare const VaultMode: z.ZodEnum<{
@@ -49,6 +53,52 @@ export declare const VaultFieldKind: z.ZodEnum<{
     totp: "totp";
 }>;
 export type VaultFieldKind = z.infer<typeof VaultFieldKind>;
+/** Effective operations, not a promise that upstream permissions cannot change. */
+export declare const VaultProviderOperations: z.ZodObject<{
+    createItemTypes: z.ZodArray<z.ZodEnum<{
+        api_key: "api_key";
+        file: "file";
+        login: "login";
+        note: "note";
+        passkey: "passkey";
+    }>>;
+    updateItem: z.ZodBoolean;
+    removeField: z.ZodBoolean;
+    archiveItem: z.ZodBoolean;
+    archiveKind: z.ZodEnum<{
+        archive: "archive";
+        none: "none";
+        trash: "trash";
+    }>;
+    deleteItem: z.ZodLiteral<false>;
+    restoreItem: z.ZodBoolean;
+    readFiles: z.ZodBoolean;
+    writeFiles: z.ZodBoolean;
+    createTotp: z.ZodBoolean;
+    updateTotp: z.ZodBoolean;
+    createVault: z.ZodBoolean;
+    restoreFieldHistory: z.ZodBoolean;
+}, z.core.$strict>;
+export type VaultProviderOperations = z.infer<typeof VaultProviderOperations>;
+/** A successful mirror check does not prove a customer's upstream cache is current. */
+export declare const VaultProviderFreshness: z.ZodObject<{
+    state: z.ZodEnum<{
+        current: "current";
+        refreshing: "refreshing";
+        stale: "stale";
+        unavailable: "unavailable";
+    }>;
+    lastCheckedAt: z.ZodNullable<z.ZodString>;
+    sourceSyncedAt: z.ZodNullable<z.ZodString>;
+    source: z.ZodEnum<{
+        cache: "cache";
+        live: "live";
+        unknown: "unknown";
+    }>;
+    errorCode: z.ZodNullable<z.ZodString>;
+    retryAt: z.ZodNullable<z.ZodString>;
+}, z.core.$strict>;
+export type VaultProviderFreshness = z.infer<typeof VaultProviderFreshness>;
 /** Lookup order for references that name no vault; index = tier. */
 export declare const VAULT_LOOKUP_TIERS: readonly ["task", "user", "workspace", "organization"];
 export type VaultLookupTier = (typeof VAULT_LOOKUP_TIERS)[number];
@@ -126,9 +176,13 @@ export declare const VaultSummary: z.ZodObject<{
     name: z.ZodString;
     description: z.ZodNullable<z.ZodString>;
     source: z.ZodEnum<{
+        bitwarden: "bitwarden";
+        external: "external";
         host: "host";
+        keeper: "keeper";
         onepassword: "onepassword";
         opengeni: "opengeni";
+        protonpass: "protonpass";
     }>;
     mode: z.ZodEnum<{
         read_only: "read_only";
@@ -146,6 +200,48 @@ export declare const VaultSummary: z.ZodObject<{
     lastSyncedAt: z.ZodNullable<z.ZodString>;
     rateLimitedUntil: z.ZodNullable<z.ZodString>;
     providerConnectionId: z.ZodNullable<z.ZodString>;
+    providerOperations: z.ZodOptional<z.ZodObject<{
+        createItemTypes: z.ZodArray<z.ZodEnum<{
+            api_key: "api_key";
+            file: "file";
+            login: "login";
+            note: "note";
+            passkey: "passkey";
+        }>>;
+        updateItem: z.ZodBoolean;
+        removeField: z.ZodBoolean;
+        archiveItem: z.ZodBoolean;
+        archiveKind: z.ZodEnum<{
+            archive: "archive";
+            none: "none";
+            trash: "trash";
+        }>;
+        deleteItem: z.ZodLiteral<false>;
+        restoreItem: z.ZodBoolean;
+        readFiles: z.ZodBoolean;
+        writeFiles: z.ZodBoolean;
+        createTotp: z.ZodBoolean;
+        updateTotp: z.ZodBoolean;
+        createVault: z.ZodBoolean;
+        restoreFieldHistory: z.ZodBoolean;
+    }, z.core.$strict>>;
+    freshness: z.ZodOptional<z.ZodObject<{
+        state: z.ZodEnum<{
+            current: "current";
+            refreshing: "refreshing";
+            stale: "stale";
+            unavailable: "unavailable";
+        }>;
+        lastCheckedAt: z.ZodNullable<z.ZodString>;
+        sourceSyncedAt: z.ZodNullable<z.ZodString>;
+        source: z.ZodEnum<{
+            cache: "cache";
+            live: "live";
+            unknown: "unknown";
+        }>;
+        errorCode: z.ZodNullable<z.ZodString>;
+        retryAt: z.ZodNullable<z.ZodString>;
+    }, z.core.$strict>>;
     availability: z.ZodNullable<z.ZodObject<{
         allowedWorkspaceIds: z.ZodNullable<z.ZodArray<z.ZodString>>;
         allowPersonalWorkspaces: z.ZodBoolean;
@@ -498,9 +594,13 @@ export declare const ListVaultsResponse: z.ZodObject<{
         name: z.ZodString;
         description: z.ZodNullable<z.ZodString>;
         source: z.ZodEnum<{
+            bitwarden: "bitwarden";
+            external: "external";
             host: "host";
+            keeper: "keeper";
             onepassword: "onepassword";
             opengeni: "opengeni";
+            protonpass: "protonpass";
         }>;
         mode: z.ZodEnum<{
             read_only: "read_only";
@@ -518,6 +618,48 @@ export declare const ListVaultsResponse: z.ZodObject<{
         lastSyncedAt: z.ZodNullable<z.ZodString>;
         rateLimitedUntil: z.ZodNullable<z.ZodString>;
         providerConnectionId: z.ZodNullable<z.ZodString>;
+        providerOperations: z.ZodOptional<z.ZodObject<{
+            createItemTypes: z.ZodArray<z.ZodEnum<{
+                api_key: "api_key";
+                file: "file";
+                login: "login";
+                note: "note";
+                passkey: "passkey";
+            }>>;
+            updateItem: z.ZodBoolean;
+            removeField: z.ZodBoolean;
+            archiveItem: z.ZodBoolean;
+            archiveKind: z.ZodEnum<{
+                archive: "archive";
+                none: "none";
+                trash: "trash";
+            }>;
+            deleteItem: z.ZodLiteral<false>;
+            restoreItem: z.ZodBoolean;
+            readFiles: z.ZodBoolean;
+            writeFiles: z.ZodBoolean;
+            createTotp: z.ZodBoolean;
+            updateTotp: z.ZodBoolean;
+            createVault: z.ZodBoolean;
+            restoreFieldHistory: z.ZodBoolean;
+        }, z.core.$strict>>;
+        freshness: z.ZodOptional<z.ZodObject<{
+            state: z.ZodEnum<{
+                current: "current";
+                refreshing: "refreshing";
+                stale: "stale";
+                unavailable: "unavailable";
+            }>;
+            lastCheckedAt: z.ZodNullable<z.ZodString>;
+            sourceSyncedAt: z.ZodNullable<z.ZodString>;
+            source: z.ZodEnum<{
+                cache: "cache";
+                live: "live";
+                unknown: "unknown";
+            }>;
+            errorCode: z.ZodNullable<z.ZodString>;
+            retryAt: z.ZodNullable<z.ZodString>;
+        }, z.core.$strict>>;
         availability: z.ZodNullable<z.ZodObject<{
             allowedWorkspaceIds: z.ZodNullable<z.ZodArray<z.ZodString>>;
             allowPersonalWorkspaces: z.ZodBoolean;
@@ -611,9 +753,13 @@ export declare const SessionSecretsView: z.ZodObject<{
         name: z.ZodString;
         description: z.ZodNullable<z.ZodString>;
         source: z.ZodEnum<{
+            bitwarden: "bitwarden";
+            external: "external";
             host: "host";
+            keeper: "keeper";
             onepassword: "onepassword";
             opengeni: "opengeni";
+            protonpass: "protonpass";
         }>;
         mode: z.ZodEnum<{
             read_only: "read_only";
@@ -631,6 +777,48 @@ export declare const SessionSecretsView: z.ZodObject<{
         lastSyncedAt: z.ZodNullable<z.ZodString>;
         rateLimitedUntil: z.ZodNullable<z.ZodString>;
         providerConnectionId: z.ZodNullable<z.ZodString>;
+        providerOperations: z.ZodOptional<z.ZodObject<{
+            createItemTypes: z.ZodArray<z.ZodEnum<{
+                api_key: "api_key";
+                file: "file";
+                login: "login";
+                note: "note";
+                passkey: "passkey";
+            }>>;
+            updateItem: z.ZodBoolean;
+            removeField: z.ZodBoolean;
+            archiveItem: z.ZodBoolean;
+            archiveKind: z.ZodEnum<{
+                archive: "archive";
+                none: "none";
+                trash: "trash";
+            }>;
+            deleteItem: z.ZodLiteral<false>;
+            restoreItem: z.ZodBoolean;
+            readFiles: z.ZodBoolean;
+            writeFiles: z.ZodBoolean;
+            createTotp: z.ZodBoolean;
+            updateTotp: z.ZodBoolean;
+            createVault: z.ZodBoolean;
+            restoreFieldHistory: z.ZodBoolean;
+        }, z.core.$strict>>;
+        freshness: z.ZodOptional<z.ZodObject<{
+            state: z.ZodEnum<{
+                current: "current";
+                refreshing: "refreshing";
+                stale: "stale";
+                unavailable: "unavailable";
+            }>;
+            lastCheckedAt: z.ZodNullable<z.ZodString>;
+            sourceSyncedAt: z.ZodNullable<z.ZodString>;
+            source: z.ZodEnum<{
+                cache: "cache";
+                live: "live";
+                unknown: "unknown";
+            }>;
+            errorCode: z.ZodNullable<z.ZodString>;
+            retryAt: z.ZodNullable<z.ZodString>;
+        }, z.core.$strict>>;
         availability: z.ZodNullable<z.ZodObject<{
             allowedWorkspaceIds: z.ZodNullable<z.ZodArray<z.ZodString>>;
             allowPersonalWorkspaces: z.ZodBoolean;
@@ -682,9 +870,13 @@ export declare const SessionSecretsView: z.ZodObject<{
         name: z.ZodString;
         description: z.ZodNullable<z.ZodString>;
         source: z.ZodEnum<{
+            bitwarden: "bitwarden";
+            external: "external";
             host: "host";
+            keeper: "keeper";
             onepassword: "onepassword";
             opengeni: "opengeni";
+            protonpass: "protonpass";
         }>;
         mode: z.ZodEnum<{
             read_only: "read_only";
@@ -702,6 +894,48 @@ export declare const SessionSecretsView: z.ZodObject<{
         lastSyncedAt: z.ZodNullable<z.ZodString>;
         rateLimitedUntil: z.ZodNullable<z.ZodString>;
         providerConnectionId: z.ZodNullable<z.ZodString>;
+        providerOperations: z.ZodOptional<z.ZodObject<{
+            createItemTypes: z.ZodArray<z.ZodEnum<{
+                api_key: "api_key";
+                file: "file";
+                login: "login";
+                note: "note";
+                passkey: "passkey";
+            }>>;
+            updateItem: z.ZodBoolean;
+            removeField: z.ZodBoolean;
+            archiveItem: z.ZodBoolean;
+            archiveKind: z.ZodEnum<{
+                archive: "archive";
+                none: "none";
+                trash: "trash";
+            }>;
+            deleteItem: z.ZodLiteral<false>;
+            restoreItem: z.ZodBoolean;
+            readFiles: z.ZodBoolean;
+            writeFiles: z.ZodBoolean;
+            createTotp: z.ZodBoolean;
+            updateTotp: z.ZodBoolean;
+            createVault: z.ZodBoolean;
+            restoreFieldHistory: z.ZodBoolean;
+        }, z.core.$strict>>;
+        freshness: z.ZodOptional<z.ZodObject<{
+            state: z.ZodEnum<{
+                current: "current";
+                refreshing: "refreshing";
+                stale: "stale";
+                unavailable: "unavailable";
+            }>;
+            lastCheckedAt: z.ZodNullable<z.ZodString>;
+            sourceSyncedAt: z.ZodNullable<z.ZodString>;
+            source: z.ZodEnum<{
+                cache: "cache";
+                live: "live";
+                unknown: "unknown";
+            }>;
+            errorCode: z.ZodNullable<z.ZodString>;
+            retryAt: z.ZodNullable<z.ZodString>;
+        }, z.core.$strict>>;
         availability: z.ZodNullable<z.ZodObject<{
             allowedWorkspaceIds: z.ZodNullable<z.ZodArray<z.ZodString>>;
             allowPersonalWorkspaces: z.ZodBoolean;
@@ -738,6 +972,36 @@ export declare const ProviderVaultMeta: z.ZodObject<{
     name: z.ZodString;
     itemCount: z.ZodNullable<z.ZodNumber>;
     linkedVaultId: z.ZodNullable<z.ZodString>;
+    writeAccess: z.ZodOptional<z.ZodEnum<{
+        read_only: "read_only";
+        read_write: "read_write";
+        unknown: "unknown";
+    }>>;
+    operations: z.ZodOptional<z.ZodObject<{
+        createItemTypes: z.ZodArray<z.ZodEnum<{
+            api_key: "api_key";
+            file: "file";
+            login: "login";
+            note: "note";
+            passkey: "passkey";
+        }>>;
+        updateItem: z.ZodBoolean;
+        removeField: z.ZodBoolean;
+        archiveItem: z.ZodBoolean;
+        archiveKind: z.ZodEnum<{
+            archive: "archive";
+            none: "none";
+            trash: "trash";
+        }>;
+        deleteItem: z.ZodLiteral<false>;
+        restoreItem: z.ZodBoolean;
+        readFiles: z.ZodBoolean;
+        writeFiles: z.ZodBoolean;
+        createTotp: z.ZodBoolean;
+        updateTotp: z.ZodBoolean;
+        createVault: z.ZodBoolean;
+        restoreFieldHistory: z.ZodBoolean;
+    }, z.core.$strict>>;
 }, z.core.$strip>;
 export type ProviderVaultMeta = z.infer<typeof ProviderVaultMeta>;
 export declare const InstallOnePasswordResponse: z.ZodObject<{
@@ -748,6 +1012,36 @@ export declare const InstallOnePasswordResponse: z.ZodObject<{
         name: z.ZodString;
         itemCount: z.ZodNullable<z.ZodNumber>;
         linkedVaultId: z.ZodNullable<z.ZodString>;
+        writeAccess: z.ZodOptional<z.ZodEnum<{
+            read_only: "read_only";
+            read_write: "read_write";
+            unknown: "unknown";
+        }>>;
+        operations: z.ZodOptional<z.ZodObject<{
+            createItemTypes: z.ZodArray<z.ZodEnum<{
+                api_key: "api_key";
+                file: "file";
+                login: "login";
+                note: "note";
+                passkey: "passkey";
+            }>>;
+            updateItem: z.ZodBoolean;
+            removeField: z.ZodBoolean;
+            archiveItem: z.ZodBoolean;
+            archiveKind: z.ZodEnum<{
+                archive: "archive";
+                none: "none";
+                trash: "trash";
+            }>;
+            deleteItem: z.ZodLiteral<false>;
+            restoreItem: z.ZodBoolean;
+            readFiles: z.ZodBoolean;
+            writeFiles: z.ZodBoolean;
+            createTotp: z.ZodBoolean;
+            updateTotp: z.ZodBoolean;
+            createVault: z.ZodBoolean;
+            restoreFieldHistory: z.ZodBoolean;
+        }, z.core.$strict>>;
     }, z.core.$strip>>;
 }, z.core.$strip>;
 export type InstallOnePasswordResponse = z.infer<typeof InstallOnePasswordResponse>;
@@ -808,10 +1102,307 @@ export declare const DisconnectOnePasswordResponse: z.ZodObject<{
     unlinkedVaultIds: z.ZodArray<z.ZodString>;
 }, z.core.$strip>;
 export type DisconnectOnePasswordResponse = z.infer<typeof DisconnectOnePasswordResponse>;
+/** Providers installed through the generic connection lifecycle. */
+export declare const ExternalVaultProviderKind: z.ZodEnum<{
+    bitwarden: "bitwarden";
+    external: "external";
+    keeper: "keeper";
+    protonpass: "protonpass";
+}>;
+export type ExternalVaultProviderKind = z.infer<typeof ExternalVaultProviderKind>;
+/** Write-only setup material. Never included in connection summaries or logs. */
+export declare const VaultProviderCredentials: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    provider: z.ZodLiteral<"external">;
+    endpoint: z.ZodString;
+    signingSecret: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    provider: z.ZodLiteral<"bitwarden">;
+    endpoint: z.ZodString;
+    signingSecret: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    provider: z.ZodLiteral<"protonpass">;
+    token: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    provider: z.ZodLiteral<"keeper">;
+    oneTimeToken: z.ZodString;
+    hostname: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>], "provider">;
+export type VaultProviderCredentials = z.infer<typeof VaultProviderCredentials>;
+export declare const InstallVaultProviderRequest: z.ZodObject<{
+    credentials: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        provider: z.ZodLiteral<"external">;
+        endpoint: z.ZodString;
+        signingSecret: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        provider: z.ZodLiteral<"bitwarden">;
+        endpoint: z.ZodString;
+        signingSecret: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        provider: z.ZodLiteral<"protonpass">;
+        token: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        provider: z.ZodLiteral<"keeper">;
+        oneTimeToken: z.ZodString;
+        hostname: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>], "provider">;
+    ownership: z.ZodEnum<{
+        organization: "organization";
+        user: "user";
+        workspace: "workspace";
+    }>;
+    label: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export type InstallVaultProviderRequest = z.infer<typeof InstallVaultProviderRequest>;
+export declare const ReplaceVaultProviderCredentialsRequest: z.ZodObject<{
+    credentials: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        provider: z.ZodLiteral<"external">;
+        endpoint: z.ZodString;
+        signingSecret: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        provider: z.ZodLiteral<"bitwarden">;
+        endpoint: z.ZodString;
+        signingSecret: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        provider: z.ZodLiteral<"protonpass">;
+        token: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        provider: z.ZodLiteral<"keeper">;
+        oneTimeToken: z.ZodString;
+        hostname: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>], "provider">;
+}, z.core.$strict>;
+export type ReplaceVaultProviderCredentialsRequest = z.infer<typeof ReplaceVaultProviderCredentialsRequest>;
+/** Includes legacy 1Password connections; existing 1Password routes remain supported. */
+export declare const VaultProviderConnectionSummary: z.ZodObject<{
+    id: z.ZodString;
+    provider: z.ZodEnum<{
+        bitwarden: "bitwarden";
+        external: "external";
+        keeper: "keeper";
+        onepassword: "onepassword";
+        protonpass: "protonpass";
+    }>;
+    ownership: z.ZodEnum<{
+        organization: "organization";
+        user: "user";
+        workspace: "workspace";
+    }>;
+    accountName: z.ZodNullable<z.ZodString>;
+    label: z.ZodNullable<z.ZodString>;
+    verifiedAt: z.ZodString;
+    createdAt: z.ZodString;
+    createdBySubjectId: z.ZodNullable<z.ZodString>;
+    canManage: z.ZodBoolean;
+    operations: z.ZodObject<{
+        createItemTypes: z.ZodArray<z.ZodEnum<{
+            api_key: "api_key";
+            file: "file";
+            login: "login";
+            note: "note";
+            passkey: "passkey";
+        }>>;
+        updateItem: z.ZodBoolean;
+        removeField: z.ZodBoolean;
+        archiveItem: z.ZodBoolean;
+        archiveKind: z.ZodEnum<{
+            archive: "archive";
+            none: "none";
+            trash: "trash";
+        }>;
+        deleteItem: z.ZodLiteral<false>;
+        restoreItem: z.ZodBoolean;
+        readFiles: z.ZodBoolean;
+        writeFiles: z.ZodBoolean;
+        createTotp: z.ZodBoolean;
+        updateTotp: z.ZodBoolean;
+        createVault: z.ZodBoolean;
+        restoreFieldHistory: z.ZodBoolean;
+    }, z.core.$strict>;
+    planTier: z.ZodOptional<z.ZodEnum<{
+        business: "business";
+        family: "family";
+        teams: "teams";
+    }>>;
+    available: z.ZodBoolean;
+    verificationStatus: z.ZodOptional<z.ZodEnum<{
+        pending: "pending";
+        ready: "ready";
+    }>>;
+}, z.core.$strip>;
+export type VaultProviderConnectionSummary = z.infer<typeof VaultProviderConnectionSummary>;
+/** Deployment configuration, independent of whether anyone has connected yet. */
+export declare const VaultProviderAvailability: z.ZodObject<{
+    provider: z.ZodEnum<{
+        bitwarden: "bitwarden";
+        external: "external";
+        keeper: "keeper";
+        onepassword: "onepassword";
+        protonpass: "protonpass";
+    }>;
+    available: z.ZodBoolean;
+    reason: z.ZodNullable<z.ZodEnum<{
+        not_enabled: "not_enabled";
+    }>>;
+}, z.core.$strip>;
+export type VaultProviderAvailability = z.infer<typeof VaultProviderAvailability>;
+export declare const ListVaultProviderConnectionsResponse: z.ZodObject<{
+    connections: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        provider: z.ZodEnum<{
+            bitwarden: "bitwarden";
+            external: "external";
+            keeper: "keeper";
+            onepassword: "onepassword";
+            protonpass: "protonpass";
+        }>;
+        ownership: z.ZodEnum<{
+            organization: "organization";
+            user: "user";
+            workspace: "workspace";
+        }>;
+        accountName: z.ZodNullable<z.ZodString>;
+        label: z.ZodNullable<z.ZodString>;
+        verifiedAt: z.ZodString;
+        createdAt: z.ZodString;
+        createdBySubjectId: z.ZodNullable<z.ZodString>;
+        canManage: z.ZodBoolean;
+        operations: z.ZodObject<{
+            createItemTypes: z.ZodArray<z.ZodEnum<{
+                api_key: "api_key";
+                file: "file";
+                login: "login";
+                note: "note";
+                passkey: "passkey";
+            }>>;
+            updateItem: z.ZodBoolean;
+            removeField: z.ZodBoolean;
+            archiveItem: z.ZodBoolean;
+            archiveKind: z.ZodEnum<{
+                archive: "archive";
+                none: "none";
+                trash: "trash";
+            }>;
+            deleteItem: z.ZodLiteral<false>;
+            restoreItem: z.ZodBoolean;
+            readFiles: z.ZodBoolean;
+            writeFiles: z.ZodBoolean;
+            createTotp: z.ZodBoolean;
+            updateTotp: z.ZodBoolean;
+            createVault: z.ZodBoolean;
+            restoreFieldHistory: z.ZodBoolean;
+        }, z.core.$strict>;
+        planTier: z.ZodOptional<z.ZodEnum<{
+            business: "business";
+            family: "family";
+            teams: "teams";
+        }>>;
+        available: z.ZodBoolean;
+        verificationStatus: z.ZodOptional<z.ZodEnum<{
+            pending: "pending";
+            ready: "ready";
+        }>>;
+    }, z.core.$strip>>;
+    providers: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        provider: z.ZodEnum<{
+            bitwarden: "bitwarden";
+            external: "external";
+            keeper: "keeper";
+            onepassword: "onepassword";
+            protonpass: "protonpass";
+        }>;
+        available: z.ZodBoolean;
+        reason: z.ZodNullable<z.ZodEnum<{
+            not_enabled: "not_enabled";
+        }>>;
+    }, z.core.$strip>>>;
+}, z.core.$strip>;
+export type ListVaultProviderConnectionsResponse = z.infer<typeof ListVaultProviderConnectionsResponse>;
+export declare const InstallVaultProviderResponse: z.ZodObject<{
+    connectionId: z.ZodString;
+    accountName: z.ZodNullable<z.ZodString>;
+    provider: z.ZodEnum<{
+        bitwarden: "bitwarden";
+        external: "external";
+        keeper: "keeper";
+        protonpass: "protonpass";
+    }>;
+    operations: z.ZodObject<{
+        createItemTypes: z.ZodArray<z.ZodEnum<{
+            api_key: "api_key";
+            file: "file";
+            login: "login";
+            note: "note";
+            passkey: "passkey";
+        }>>;
+        updateItem: z.ZodBoolean;
+        removeField: z.ZodBoolean;
+        archiveItem: z.ZodBoolean;
+        archiveKind: z.ZodEnum<{
+            archive: "archive";
+            none: "none";
+            trash: "trash";
+        }>;
+        deleteItem: z.ZodLiteral<false>;
+        restoreItem: z.ZodBoolean;
+        readFiles: z.ZodBoolean;
+        writeFiles: z.ZodBoolean;
+        createTotp: z.ZodBoolean;
+        updateTotp: z.ZodBoolean;
+        createVault: z.ZodBoolean;
+        restoreFieldHistory: z.ZodBoolean;
+    }, z.core.$strict>;
+    vaults: z.ZodArray<z.ZodObject<{
+        externalVaultId: z.ZodString;
+        name: z.ZodString;
+        itemCount: z.ZodNullable<z.ZodNumber>;
+        linkedVaultId: z.ZodNullable<z.ZodString>;
+        writeAccess: z.ZodOptional<z.ZodEnum<{
+            read_only: "read_only";
+            read_write: "read_write";
+            unknown: "unknown";
+        }>>;
+        operations: z.ZodOptional<z.ZodObject<{
+            createItemTypes: z.ZodArray<z.ZodEnum<{
+                api_key: "api_key";
+                file: "file";
+                login: "login";
+                note: "note";
+                passkey: "passkey";
+            }>>;
+            updateItem: z.ZodBoolean;
+            removeField: z.ZodBoolean;
+            archiveItem: z.ZodBoolean;
+            archiveKind: z.ZodEnum<{
+                archive: "archive";
+                none: "none";
+                trash: "trash";
+            }>;
+            deleteItem: z.ZodLiteral<false>;
+            restoreItem: z.ZodBoolean;
+            readFiles: z.ZodBoolean;
+            writeFiles: z.ZodBoolean;
+            createTotp: z.ZodBoolean;
+            updateTotp: z.ZodBoolean;
+            createVault: z.ZodBoolean;
+            restoreFieldHistory: z.ZodBoolean;
+        }, z.core.$strict>>;
+    }, z.core.$strip>>;
+    discoveryPending: z.ZodOptional<z.ZodBoolean>;
+    errorCode: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type InstallVaultProviderResponse = z.infer<typeof InstallVaultProviderResponse>;
+export declare const DisconnectVaultProviderResponse: z.ZodObject<{
+    unlinkedVaultIds: z.ZodArray<z.ZodString>;
+}, z.core.$strip>;
+export type DisconnectVaultProviderResponse = z.infer<typeof DisconnectVaultProviderResponse>;
 export declare const LinkProviderVaultRequest: z.ZodObject<{
     provider: z.ZodEnum<{
+        bitwarden: "bitwarden";
+        external: "external";
         host: "host";
+        keeper: "keeper";
         onepassword: "onepassword";
+        protonpass: "protonpass";
     }>;
     connectionId: z.ZodOptional<z.ZodString>;
     externalVaultId: z.ZodString;
@@ -848,6 +1439,9 @@ export declare const VaultErrorCode: z.ZodEnum<{
     provider_auth_expired: "provider_auth_expired";
     provider_auth_invalid: "provider_auth_invalid";
     provider_conflict: "provider_conflict";
+    provider_inventory_incomplete: "provider_inventory_incomplete";
+    provider_locked: "provider_locked";
+    provider_outcome_unknown: "provider_outcome_unknown";
     provider_rate_limited: "provider_rate_limited";
     provider_unavailable: "provider_unavailable";
     secret_save_forbidden: "secret_save_forbidden";
@@ -875,6 +1469,9 @@ export declare const VaultApiError: z.ZodObject<{
         provider_auth_expired: "provider_auth_expired";
         provider_auth_invalid: "provider_auth_invalid";
         provider_conflict: "provider_conflict";
+        provider_inventory_incomplete: "provider_inventory_incomplete";
+        provider_locked: "provider_locked";
+        provider_outcome_unknown: "provider_outcome_unknown";
         provider_rate_limited: "provider_rate_limited";
         provider_unavailable: "provider_unavailable";
         secret_save_forbidden: "secret_save_forbidden";
@@ -920,6 +1517,7 @@ export declare const SecretSearchInput: z.ZodObject<{
     vault: z.ZodOptional<z.ZodString>;
     limit: z.ZodDefault<z.ZodNumber>;
     cursor: z.ZodOptional<z.ZodString>;
+    refresh: z.ZodOptional<z.ZodBoolean>;
 }, z.core.$strict>;
 export type SecretSearchInput = z.infer<typeof SecretSearchInput>;
 export declare const SecretSearchResult: z.ZodObject<{
@@ -933,9 +1531,13 @@ export declare const SecretSearchResult: z.ZodObject<{
             workspace: "workspace";
         }>;
         source: z.ZodEnum<{
+            bitwarden: "bitwarden";
+            external: "external";
             host: "host";
+            keeper: "keeper";
             onepassword: "onepassword";
             opengeni: "opengeni";
+            protonpass: "protonpass";
         }>;
         mode: z.ZodEnum<{
             read_only: "read_only";
@@ -984,15 +1586,36 @@ export declare const SecretSearchVault: z.ZodObject<{
         workspace: "workspace";
     }>;
     source: z.ZodEnum<{
+        bitwarden: "bitwarden";
+        external: "external";
         host: "host";
+        keeper: "keeper";
         onepassword: "onepassword";
         opengeni: "opengeni";
+        protonpass: "protonpass";
     }>;
     mode: z.ZodEnum<{
         read_only: "read_only";
         read_write: "read_write";
     }>;
     itemCount: z.ZodNumber;
+    freshness: z.ZodOptional<z.ZodObject<{
+        state: z.ZodEnum<{
+            current: "current";
+            refreshing: "refreshing";
+            stale: "stale";
+            unavailable: "unavailable";
+        }>;
+        lastCheckedAt: z.ZodNullable<z.ZodString>;
+        sourceSyncedAt: z.ZodNullable<z.ZodString>;
+        source: z.ZodEnum<{
+            cache: "cache";
+            live: "live";
+            unknown: "unknown";
+        }>;
+        errorCode: z.ZodNullable<z.ZodString>;
+        retryAt: z.ZodNullable<z.ZodString>;
+    }, z.core.$strict>>;
 }, z.core.$strip>;
 export type SecretSearchVault = z.infer<typeof SecretSearchVault>;
 export declare const SecretSearchOutput: z.ZodObject<{
@@ -1007,9 +1630,13 @@ export declare const SecretSearchOutput: z.ZodObject<{
                 workspace: "workspace";
             }>;
             source: z.ZodEnum<{
+                bitwarden: "bitwarden";
+                external: "external";
                 host: "host";
+                keeper: "keeper";
                 onepassword: "onepassword";
                 opengeni: "opengeni";
+                protonpass: "protonpass";
             }>;
             mode: z.ZodEnum<{
                 read_only: "read_only";
@@ -1059,15 +1686,57 @@ export declare const SecretSearchOutput: z.ZodObject<{
             workspace: "workspace";
         }>;
         source: z.ZodEnum<{
+            bitwarden: "bitwarden";
+            external: "external";
             host: "host";
+            keeper: "keeper";
             onepassword: "onepassword";
             opengeni: "opengeni";
+            protonpass: "protonpass";
         }>;
         mode: z.ZodEnum<{
             read_only: "read_only";
             read_write: "read_write";
         }>;
         itemCount: z.ZodNumber;
+        freshness: z.ZodOptional<z.ZodObject<{
+            state: z.ZodEnum<{
+                current: "current";
+                refreshing: "refreshing";
+                stale: "stale";
+                unavailable: "unavailable";
+            }>;
+            lastCheckedAt: z.ZodNullable<z.ZodString>;
+            sourceSyncedAt: z.ZodNullable<z.ZodString>;
+            source: z.ZodEnum<{
+                cache: "cache";
+                live: "live";
+                unknown: "unknown";
+            }>;
+            errorCode: z.ZodNullable<z.ZodString>;
+            retryAt: z.ZodNullable<z.ZodString>;
+        }, z.core.$strict>>;
+    }, z.core.$strip>>>;
+    complete: z.ZodOptional<z.ZodBoolean>;
+    sources: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        vaultId: z.ZodString;
+        freshness: z.ZodObject<{
+            state: z.ZodEnum<{
+                current: "current";
+                refreshing: "refreshing";
+                stale: "stale";
+                unavailable: "unavailable";
+            }>;
+            lastCheckedAt: z.ZodNullable<z.ZodString>;
+            sourceSyncedAt: z.ZodNullable<z.ZodString>;
+            source: z.ZodEnum<{
+                cache: "cache";
+                live: "live";
+                unknown: "unknown";
+            }>;
+            errorCode: z.ZodNullable<z.ZodString>;
+            retryAt: z.ZodNullable<z.ZodString>;
+        }, z.core.$strict>;
     }, z.core.$strip>>>;
 }, z.core.$strip>;
 export type SecretSearchOutput = z.infer<typeof SecretSearchOutput>;