@opsregistry/contracts 0.0.4 → 0.0.6

package/README.md

@@ -24,6 +24,15 @@
 - `finance.fiscalReceipt.create`
 - `finance.fiscalReceipt.getStatus`
 
+И первые спецификации из домена S3-совместимого объектного хранилища:
+
+- `storage.object.uploadFile`
+- `storage.object.deleteFile`
+- `storage.object.list`
+- `storage.website.put`
+- `storage.website.get`
+- `storage.website.delete`
+
 Каждая операция экспортирует:
 
 - `operationCode`
@@ -70,3 +79,9 @@ import {
 - `finance.billPayment.create` для оплаты услуг внешнего поставщика.
 
 Если меняется только метод оплаты внутри merchant checkout, например карта или СБП QR, это параметр `finance.merchantPayment.*`, а не отдельный провайдерский код операции.
+
+## Граница storage website операций
+
+`storage.object.*` описывает работу с объектами внутри бакета: загрузить файл, удалить файл, получить список объектов. Опциональный `websiteRedirectLocation` в `storage.object.uploadFile` отражает object-level redirect header и зависит от поддержки конкретного S3-провайдера.
+
+`storage.website.*` описывает конфигурацию static website hosting на уровне бакета: index/error documents, redirect-all requests и routing rules. Эти операции отделены от object-операций, потому что меняют настройки сайта целиком, а не отдельный файл.

package/dist/index.d.ts

@@ -13,4 +13,14 @@ export * as storageObjectStorageCommon from './storage/object-storage-common.js'
 export * as storageObjectUploadFile from './storage/object-upload-file.js';
 export * as storageObjectDeleteFile from './storage/object-delete-file.js';
 export * as storageObjectList from './storage/object-list.js';
+export * as storageWebsiteCommon from './storage/website-common.js';
+export * as storageWebsitePut from './storage/website-put.js';
+export * as storageWebsiteGet from './storage/website-get.js';
+export * as storageWebsiteDelete from './storage/website-delete.js';
+export * as itIamCommon from './it/iam-common.js';
+export * as itIdentityAuthenticate from './it/identity-authenticate.js';
+export * as itIdentityTokenRefresh from './it/identity-token-refresh.js';
+export * as itIdentityTokenRevoke from './it/identity-token-revoke.js';
+export * as itAccessAuthorize from './it/access-authorize.js';
+export * as itAccessPolicyEvaluate from './it/access-policy-evaluate.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,aAAa,MAAM,qBAAqB,CAAC;AACrD,OAAO,KAAK,sBAAsB,MAAM,+BAA+B,CAAC;AACxE,OAAO,KAAK,aAAa,MAAM,qBAAqB,CAAC;AACrD,OAAO,KAAK,oBAAoB,MAAM,6BAA6B,CAAC;AACpE,OAAO,KAAK,sBAAsB,MAAM,gCAAgC,CAAC;AACzE,OAAO,KAAK,uBAAuB,MAAM,iCAAiC,CAAC;AAC3E,OAAO,KAAK,oBAAoB,MAAM,6BAA6B,CAAC;AACpE,OAAO,KAAK,oBAAoB,MAAM,6BAA6B,CAAC;AACpE,OAAO,KAAK,oBAAoB,MAAM,6BAA6B,CAAC;AACpE,OAAO,KAAK,2BAA2B,MAAM,qCAAqC,CAAC;AACnF,OAAO,KAAK,uBAAuB,MAAM,iCAAiC,CAAC;AAC3E,OAAO,KAAK,0BAA0B,MAAM,oCAAoC,CAAC;AACjF,OAAO,KAAK,uBAAuB,MAAM,iCAAiC,CAAC;AAC3E,OAAO,KAAK,uBAAuB,MAAM,iCAAiC,CAAC;AAC3E,OAAO,KAAK,iBAAiB,MAAM,0BAA0B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,aAAa,MAAM,qBAAqB,CAAC;AACrD,OAAO,KAAK,sBAAsB,MAAM,+BAA+B,CAAC;AACxE,OAAO,KAAK,aAAa,MAAM,qBAAqB,CAAC;AACrD,OAAO,KAAK,oBAAoB,MAAM,6BAA6B,CAAC;AACpE,OAAO,KAAK,sBAAsB,MAAM,gCAAgC,CAAC;AACzE,OAAO,KAAK,uBAAuB,MAAM,iCAAiC,CAAC;AAC3E,OAAO,KAAK,oBAAoB,MAAM,6BAA6B,CAAC;AACpE,OAAO,KAAK,oBAAoB,MAAM,6BAA6B,CAAC;AACpE,OAAO,KAAK,oBAAoB,MAAM,6BAA6B,CAAC;AACpE,OAAO,KAAK,2BAA2B,MAAM,qCAAqC,CAAC;AACnF,OAAO,KAAK,uBAAuB,MAAM,iCAAiC,CAAC;AAC3E,OAAO,KAAK,0BAA0B,MAAM,oCAAoC,CAAC;AACjF,OAAO,KAAK,uBAAuB,MAAM,iCAAiC,CAAC;AAC3E,OAAO,KAAK,uBAAuB,MAAM,iCAAiC,CAAC;AAC3E,OAAO,KAAK,iBAAiB,MAAM,0BAA0B,CAAC;AAC9D,OAAO,KAAK,oBAAoB,MAAM,6BAA6B,CAAC;AACpE,OAAO,KAAK,iBAAiB,MAAM,0BAA0B,CAAC;AAC9D,OAAO,KAAK,iBAAiB,MAAM,0BAA0B,CAAC;AAC9D,OAAO,KAAK,oBAAoB,MAAM,6BAA6B,CAAC;AACpE,OAAO,KAAK,WAAW,MAAM,oBAAoB,CAAC;AAClD,OAAO,KAAK,sBAAsB,MAAM,+BAA+B,CAAC;AACxE,OAAO,KAAK,sBAAsB,MAAM,gCAAgC,CAAC;AACzE,OAAO,KAAK,qBAAqB,MAAM,+BAA+B,CAAC;AACvE,OAAO,KAAK,iBAAiB,MAAM,0BAA0B,CAAC;AAC9D,OAAO,KAAK,sBAAsB,MAAM,gCAAgC,CAAC"}

package/dist/index.js

@@ -13,4 +13,14 @@ export * as storageObjectStorageCommon from './storage/object-storage-common.js'
 export * as storageObjectUploadFile from './storage/object-upload-file.js';
 export * as storageObjectDeleteFile from './storage/object-delete-file.js';
 export * as storageObjectList from './storage/object-list.js';
+export * as storageWebsiteCommon from './storage/website-common.js';
+export * as storageWebsitePut from './storage/website-put.js';
+export * as storageWebsiteGet from './storage/website-get.js';
+export * as storageWebsiteDelete from './storage/website-delete.js';
+export * as itIamCommon from './it/iam-common.js';
+export * as itIdentityAuthenticate from './it/identity-authenticate.js';
+export * as itIdentityTokenRefresh from './it/identity-token-refresh.js';
+export * as itIdentityTokenRevoke from './it/identity-token-revoke.js';
+export * as itAccessAuthorize from './it/access-authorize.js';
+export * as itAccessPolicyEvaluate from './it/access-policy-evaluate.js';
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,aAAa,MAAM,qBAAqB,CAAC;AACrD,OAAO,KAAK,sBAAsB,MAAM,+BAA+B,CAAC;AACxE,OAAO,KAAK,aAAa,MAAM,qBAAqB,CAAC;AACrD,OAAO,KAAK,oBAAoB,MAAM,6BAA6B,CAAC;AACpE,OAAO,KAAK,sBAAsB,MAAM,gCAAgC,CAAC;AACzE,OAAO,KAAK,uBAAuB,MAAM,iCAAiC,CAAC;AAC3E,OAAO,KAAK,oBAAoB,MAAM,6BAA6B,CAAC;AACpE,OAAO,KAAK,oBAAoB,MAAM,6BAA6B,CAAC;AACpE,OAAO,KAAK,oBAAoB,MAAM,6BAA6B,CAAC;AACpE,OAAO,KAAK,2BAA2B,MAAM,qCAAqC,CAAC;AACnF,OAAO,KAAK,uBAAuB,MAAM,iCAAiC,CAAC;AAC3E,OAAO,KAAK,0BAA0B,MAAM,oCAAoC,CAAC;AACjF,OAAO,KAAK,uBAAuB,MAAM,iCAAiC,CAAC;AAC3E,OAAO,KAAK,uBAAuB,MAAM,iCAAiC,CAAC;AAC3E,OAAO,KAAK,iBAAiB,MAAM,0BAA0B,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,aAAa,MAAM,qBAAqB,CAAC;AACrD,OAAO,KAAK,sBAAsB,MAAM,+BAA+B,CAAC;AACxE,OAAO,KAAK,aAAa,MAAM,qBAAqB,CAAC;AACrD,OAAO,KAAK,oBAAoB,MAAM,6BAA6B,CAAC;AACpE,OAAO,KAAK,sBAAsB,MAAM,gCAAgC,CAAC;AACzE,OAAO,KAAK,uBAAuB,MAAM,iCAAiC,CAAC;AAC3E,OAAO,KAAK,oBAAoB,MAAM,6BAA6B,CAAC;AACpE,OAAO,KAAK,oBAAoB,MAAM,6BAA6B,CAAC;AACpE,OAAO,KAAK,oBAAoB,MAAM,6BAA6B,CAAC;AACpE,OAAO,KAAK,2BAA2B,MAAM,qCAAqC,CAAC;AACnF,OAAO,KAAK,uBAAuB,MAAM,iCAAiC,CAAC;AAC3E,OAAO,KAAK,0BAA0B,MAAM,oCAAoC,CAAC;AACjF,OAAO,KAAK,uBAAuB,MAAM,iCAAiC,CAAC;AAC3E,OAAO,KAAK,uBAAuB,MAAM,iCAAiC,CAAC;AAC3E,OAAO,KAAK,iBAAiB,MAAM,0BAA0B,CAAC;AAC9D,OAAO,KAAK,oBAAoB,MAAM,6BAA6B,CAAC;AACpE,OAAO,KAAK,iBAAiB,MAAM,0BAA0B,CAAC;AAC9D,OAAO,KAAK,iBAAiB,MAAM,0BAA0B,CAAC;AAC9D,OAAO,KAAK,oBAAoB,MAAM,6BAA6B,CAAC;AACpE,OAAO,KAAK,WAAW,MAAM,oBAAoB,CAAC;AAClD,OAAO,KAAK,sBAAsB,MAAM,+BAA+B,CAAC;AACxE,OAAO,KAAK,sBAAsB,MAAM,gCAAgC,CAAC;AACzE,OAAO,KAAK,qBAAqB,MAAM,+BAA+B,CAAC;AACvE,OAAO,KAAK,iBAAiB,MAAM,0BAA0B,CAAC;AAC9D,OAAO,KAAK,sBAAsB,MAAM,gCAAgC,CAAC"}

package/dist/it/access-authorize.d.ts

@@ -0,0 +1,58 @@
+import { z } from "zod";
+export declare const operationCode: "it.access.authorize";
+export declare const accessAuthorizeInputSchema: z.ZodObject<{
+    subject: z.ZodObject<{
+        kind: z.ZodEnum<{
+            user: "user";
+            serviceAccount: "serviceAccount";
+            application: "application";
+            integration: "integration";
+            providerAccount: "providerAccount";
+            anonymous: "anonymous";
+        }>;
+        id: z.ZodOptional<z.ZodString>;
+        externalId: z.ZodOptional<z.ZodString>;
+        displayName: z.ZodOptional<z.ZodString>;
+        tenantId: z.ZodOptional<z.ZodString>;
+        providerCode: z.ZodOptional<z.ZodString>;
+        roles: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        permissions: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        scopes: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        claims: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    }, z.core.$strip>;
+    action: z.ZodString;
+    resource: z.ZodObject<{
+        type: z.ZodString;
+        id: z.ZodOptional<z.ZodString>;
+        operationCode: z.ZodOptional<z.ZodString>;
+        attributes: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    }, z.core.$strip>;
+    requiredPermissions: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    requiredScopes: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    context: z.ZodOptional<z.ZodObject<{
+        requestId: z.ZodOptional<z.ZodString>;
+        tenantId: z.ZodOptional<z.ZodString>;
+        audience: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        ipAddress: z.ZodOptional<z.ZodString>;
+        userAgent: z.ZodOptional<z.ZodString>;
+        metadata: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export declare const accessAuthorizeResultSchema: z.ZodObject<{
+    operationCode: z.ZodLiteral<"it.access.authorize">;
+    decision: z.ZodEnum<{
+        allow: "allow";
+        deny: "deny";
+        indeterminate: "indeterminate";
+    }>;
+    reasonCodes: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    matchedPermissions: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    missingPermissions: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    matchedScopes: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    missingScopes: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    obligations: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    metadata: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+}, z.core.$strip>;
+export type AccessAuthorizeInput = z.infer<typeof accessAuthorizeInputSchema>;
+export type AccessAuthorizeResult = z.infer<typeof accessAuthorizeResultSchema>;
+//# sourceMappingURL=access-authorize.d.ts.map

package/dist/it/access-authorize.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"access-authorize.d.ts","sourceRoot":"","sources":["../../src/it/access-authorize.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAQxB,eAAO,MAAM,aAAa,EAAG,qBAA8B,CAAC;AAE5D,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAOrC,CAAC;AAEH,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;iBAUtC,CAAC;AAEH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAC9E,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC"}

package/dist/it/access-authorize.js

@@ -0,0 +1,23 @@
+import { z } from "zod";
+import { authContextSchema, authDecisionSchema, identitySubjectSchema, resourceRefSchema, } from "./iam-common.js";
+export const operationCode = "it.access.authorize";
+export const accessAuthorizeInputSchema = z.object({
+    subject: identitySubjectSchema,
+    action: z.string().min(1),
+    resource: resourceRefSchema,
+    requiredPermissions: z.array(z.string().min(1)).default([]),
+    requiredScopes: z.array(z.string().min(1)).default([]),
+    context: authContextSchema.optional(),
+});
+export const accessAuthorizeResultSchema = z.object({
+    operationCode: z.literal(operationCode),
+    decision: authDecisionSchema,
+    reasonCodes: z.array(z.string().min(1)).default([]),
+    matchedPermissions: z.array(z.string().min(1)).default([]),
+    missingPermissions: z.array(z.string().min(1)).default([]),
+    matchedScopes: z.array(z.string().min(1)).default([]),
+    missingScopes: z.array(z.string().min(1)).default([]),
+    obligations: z.record(z.string(), z.unknown()).default({}),
+    metadata: z.record(z.string(), z.unknown()).default({}),
+});
+//# sourceMappingURL=access-authorize.js.map

package/dist/it/access-authorize.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"access-authorize.js","sourceRoot":"","sources":["../../src/it/access-authorize.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,qBAAqB,EACrB,iBAAiB,GAClB,MAAM,iBAAiB,CAAC;AAEzB,MAAM,CAAC,MAAM,aAAa,GAAG,qBAA8B,CAAC;AAE5D,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,OAAO,EAAE,qBAAqB;IAC9B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,QAAQ,EAAE,iBAAiB;IAC3B,mBAAmB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC3D,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACtD,OAAO,EAAE,iBAAiB,CAAC,QAAQ,EAAE;CACtC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IAClD,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;IACvC,QAAQ,EAAE,kBAAkB;IAC5B,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACnD,kBAAkB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC1D,kBAAkB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC1D,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACrD,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACrD,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC1D,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CACxD,CAAC,CAAC"}

package/dist/it/access-policy-evaluate.d.ts

@@ -0,0 +1,69 @@
+import { z } from "zod";
+export declare const operationCode: "it.access.policy.evaluate";
+export declare const accessPolicyEvaluateInputSchema: z.ZodObject<{
+    subject: z.ZodObject<{
+        kind: z.ZodEnum<{
+            user: "user";
+            serviceAccount: "serviceAccount";
+            application: "application";
+            integration: "integration";
+            providerAccount: "providerAccount";
+            anonymous: "anonymous";
+        }>;
+        id: z.ZodOptional<z.ZodString>;
+        externalId: z.ZodOptional<z.ZodString>;
+        displayName: z.ZodOptional<z.ZodString>;
+        tenantId: z.ZodOptional<z.ZodString>;
+        providerCode: z.ZodOptional<z.ZodString>;
+        roles: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        permissions: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        scopes: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        claims: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    }, z.core.$strip>;
+    resources: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        type: z.ZodString;
+        id: z.ZodOptional<z.ZodString>;
+        operationCode: z.ZodOptional<z.ZodString>;
+        attributes: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    }, z.core.$strip>>>;
+    policySetId: z.ZodOptional<z.ZodString>;
+    context: z.ZodOptional<z.ZodObject<{
+        requestId: z.ZodOptional<z.ZodString>;
+        tenantId: z.ZodOptional<z.ZodString>;
+        audience: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        ipAddress: z.ZodOptional<z.ZodString>;
+        userAgent: z.ZodOptional<z.ZodString>;
+        metadata: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export declare const accessPolicyEvaluateResultSchema: z.ZodObject<{
+    operationCode: z.ZodLiteral<"it.access.policy.evaluate">;
+    decision: z.ZodEnum<{
+        allow: "allow";
+        deny: "deny";
+        indeterminate: "indeterminate";
+    }>;
+    effectiveRoles: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    effectivePermissions: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    effectiveScopes: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    resourceDecisions: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        resource: z.ZodObject<{
+            type: z.ZodString;
+            id: z.ZodOptional<z.ZodString>;
+            operationCode: z.ZodOptional<z.ZodString>;
+            attributes: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        }, z.core.$strip>;
+        decision: z.ZodEnum<{
+            allow: "allow";
+            deny: "deny";
+            indeterminate: "indeterminate";
+        }>;
+        permissions: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        scopes: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        reasonCodes: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    }, z.core.$strip>>>;
+    metadata: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+}, z.core.$strip>;
+export type AccessPolicyEvaluateInput = z.infer<typeof accessPolicyEvaluateInputSchema>;
+export type AccessPolicyEvaluateResult = z.infer<typeof accessPolicyEvaluateResultSchema>;
+//# sourceMappingURL=access-policy-evaluate.d.ts.map

package/dist/it/access-policy-evaluate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"access-policy-evaluate.d.ts","sourceRoot":"","sources":["../../src/it/access-policy-evaluate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAQxB,eAAO,MAAM,aAAa,EAAG,2BAAoC,CAAC;AAElE,eAAO,MAAM,+BAA+B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAK1C,CAAC;AAEH,eAAO,MAAM,gCAAgC;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAkB3C,CAAC;AAEH,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAC7C,OAAO,+BAA+B,CACvC,CAAC;AACF,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAC9C,OAAO,gCAAgC,CACxC,CAAC"}

package/dist/it/access-policy-evaluate.js

@@ -0,0 +1,27 @@
+import { z } from "zod";
+import { authContextSchema, authDecisionSchema, identitySubjectSchema, resourceRefSchema, } from "./iam-common.js";
+export const operationCode = "it.access.policy.evaluate";
+export const accessPolicyEvaluateInputSchema = z.object({
+    subject: identitySubjectSchema,
+    resources: z.array(resourceRefSchema).default([]),
+    policySetId: z.string().min(1).optional(),
+    context: authContextSchema.optional(),
+});
+export const accessPolicyEvaluateResultSchema = z.object({
+    operationCode: z.literal(operationCode),
+    decision: authDecisionSchema,
+    effectiveRoles: z.array(z.string().min(1)).default([]),
+    effectivePermissions: z.array(z.string().min(1)).default([]),
+    effectiveScopes: z.array(z.string().min(1)).default([]),
+    resourceDecisions: z
+        .array(z.object({
+        resource: resourceRefSchema,
+        decision: authDecisionSchema,
+        permissions: z.array(z.string().min(1)).default([]),
+        scopes: z.array(z.string().min(1)).default([]),
+        reasonCodes: z.array(z.string().min(1)).default([]),
+    }))
+        .default([]),
+    metadata: z.record(z.string(), z.unknown()).default({}),
+});
+//# sourceMappingURL=access-policy-evaluate.js.map

package/dist/it/access-policy-evaluate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"access-policy-evaluate.js","sourceRoot":"","sources":["../../src/it/access-policy-evaluate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,qBAAqB,EACrB,iBAAiB,GAClB,MAAM,iBAAiB,CAAC;AAEzB,MAAM,CAAC,MAAM,aAAa,GAAG,2BAAoC,CAAC;AAElE,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,CAAC,MAAM,CAAC;IACtD,OAAO,EAAE,qBAAqB;IAC9B,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACjD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACzC,OAAO,EAAE,iBAAiB,CAAC,QAAQ,EAAE;CACtC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC,CAAC,MAAM,CAAC;IACvD,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;IACvC,QAAQ,EAAE,kBAAkB;IAC5B,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACtD,oBAAoB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC5D,eAAe,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACvD,iBAAiB,EAAE,CAAC;SACjB,KAAK,CACJ,CAAC,CAAC,MAAM,CAAC;QACP,QAAQ,EAAE,iBAAiB;QAC3B,QAAQ,EAAE,kBAAkB;QAC5B,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;QACnD,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9C,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;KACpD,CAAC,CACH;SACA,OAAO,CAAC,EAAE,CAAC;IACd,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CACxD,CAAC,CAAC"}

package/dist/it/iam-common.d.ts

@@ -0,0 +1,127 @@
+import { z } from "zod";
+export declare const accessModeSchema: z.ZodEnum<{
+    public: "public";
+    authorized: "authorized";
+}>;
+export declare const requestedAccessModeSchema: z.ZodEnum<{
+    public: "public";
+    authorized: "authorized";
+    auto: "auto";
+}>;
+export declare const subjectKindSchema: z.ZodEnum<{
+    user: "user";
+    serviceAccount: "serviceAccount";
+    application: "application";
+    integration: "integration";
+    providerAccount: "providerAccount";
+    anonymous: "anonymous";
+}>;
+export declare const authMethodSchema: z.ZodEnum<{
+    custom: "custom";
+    none: "none";
+    password: "password";
+    apiKey: "apiKey";
+    basic: "basic";
+    bearerToken: "bearerToken";
+    oauth2ClientCredentials: "oauth2ClientCredentials";
+    refreshToken: "refreshToken";
+    sessionCredential: "sessionCredential";
+}>;
+export declare const credentialKindSchema: z.ZodEnum<{
+    custom: "custom";
+    none: "none";
+    apiKey: "apiKey";
+    basic: "basic";
+    refreshToken: "refreshToken";
+    accessToken: "accessToken";
+    session: "session";
+}>;
+export declare const credentialTransportSchema: z.ZodEnum<{
+    none: "none";
+    header: "header";
+    query: "query";
+    cookie: "cookie";
+    body: "body";
+}>;
+export declare const authStatusSchema: z.ZodEnum<{
+    failed: "failed";
+    anonymous: "anonymous";
+    authenticated: "authenticated";
+    challengeRequired: "challengeRequired";
+}>;
+export declare const authDecisionSchema: z.ZodEnum<{
+    allow: "allow";
+    deny: "deny";
+    indeterminate: "indeterminate";
+}>;
+export declare const identitySubjectSchema: z.ZodObject<{
+    kind: z.ZodEnum<{
+        user: "user";
+        serviceAccount: "serviceAccount";
+        application: "application";
+        integration: "integration";
+        providerAccount: "providerAccount";
+        anonymous: "anonymous";
+    }>;
+    id: z.ZodOptional<z.ZodString>;
+    externalId: z.ZodOptional<z.ZodString>;
+    displayName: z.ZodOptional<z.ZodString>;
+    tenantId: z.ZodOptional<z.ZodString>;
+    providerCode: z.ZodOptional<z.ZodString>;
+    roles: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    permissions: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    scopes: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    claims: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+}, z.core.$strip>;
+export declare const credentialMaterialSchema: z.ZodObject<{
+    kind: z.ZodEnum<{
+        custom: "custom";
+        none: "none";
+        apiKey: "apiKey";
+        basic: "basic";
+        refreshToken: "refreshToken";
+        accessToken: "accessToken";
+        session: "session";
+    }>;
+    transport: z.ZodDefault<z.ZodEnum<{
+        none: "none";
+        header: "header";
+        query: "query";
+        cookie: "cookie";
+        body: "body";
+    }>>;
+    scheme: z.ZodOptional<z.ZodString>;
+    name: z.ZodOptional<z.ZodString>;
+    value: z.ZodOptional<z.ZodString>;
+    expiresAt: z.ZodOptional<z.ZodString>;
+    refreshExpiresAt: z.ZodOptional<z.ZodString>;
+    scopes: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    metadata: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+}, z.core.$strip>;
+export declare const resourceRefSchema: z.ZodObject<{
+    type: z.ZodString;
+    id: z.ZodOptional<z.ZodString>;
+    operationCode: z.ZodOptional<z.ZodString>;
+    attributes: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+}, z.core.$strip>;
+export declare const authContextSchema: z.ZodObject<{
+    requestId: z.ZodOptional<z.ZodString>;
+    tenantId: z.ZodOptional<z.ZodString>;
+    audience: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    ipAddress: z.ZodOptional<z.ZodString>;
+    userAgent: z.ZodOptional<z.ZodString>;
+    metadata: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+}, z.core.$strip>;
+export type AccessMode = z.infer<typeof accessModeSchema>;
+export type RequestedAccessMode = z.infer<typeof requestedAccessModeSchema>;
+export type SubjectKind = z.infer<typeof subjectKindSchema>;
+export type AuthMethod = z.infer<typeof authMethodSchema>;
+export type CredentialKind = z.infer<typeof credentialKindSchema>;
+export type CredentialTransport = z.infer<typeof credentialTransportSchema>;
+export type AuthStatus = z.infer<typeof authStatusSchema>;
+export type AuthDecision = z.infer<typeof authDecisionSchema>;
+export type IdentitySubject = z.infer<typeof identitySubjectSchema>;
+export type CredentialMaterial = z.infer<typeof credentialMaterialSchema>;
+export type ResourceRef = z.infer<typeof resourceRefSchema>;
+export type AuthContext = z.infer<typeof authContextSchema>;
+//# sourceMappingURL=iam-common.d.ts.map

package/dist/it/iam-common.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"iam-common.d.ts","sourceRoot":"","sources":["../../src/it/iam-common.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,gBAAgB;;;EAAmC,CAAC;AACjE,eAAO,MAAM,yBAAyB;;;;EAIpC,CAAC;AAEH,eAAO,MAAM,iBAAiB;;;;;;;EAO5B,CAAC;AAEH,eAAO,MAAM,gBAAgB;;;;;;;;;;EAU3B,CAAC;AAEH,eAAO,MAAM,oBAAoB;;;;;;;;EAQ/B,CAAC;AAEH,eAAO,MAAM,yBAAyB;;;;;;EAMpC,CAAC;AAEH,eAAO,MAAM,gBAAgB;;;;;EAK3B,CAAC;AAEH,eAAO,MAAM,kBAAkB;;;;EAA6C,CAAC;AAE7E,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;iBAWhC,CAAC;AAEH,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;iBAUnC,CAAC;AAEH,eAAO,MAAM,iBAAiB;;;;;iBAK5B,CAAC;AAEH,eAAO,MAAM,iBAAiB;;;;;;;iBAO5B,CAAC;AAEH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAC1D,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAC5E,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAC5D,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAC1D,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAClE,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAC5E,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAC1D,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAC9D,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AACpE,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAC1E,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAC5D,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC"}

package/dist/it/iam-common.js

@@ -0,0 +1,87 @@
+import { z } from "zod";
+export const accessModeSchema = z.enum(["public", "authorized"]);
+export const requestedAccessModeSchema = z.enum([
+    "auto",
+    "public",
+    "authorized",
+]);
+export const subjectKindSchema = z.enum([
+    "user",
+    "serviceAccount",
+    "application",
+    "integration",
+    "providerAccount",
+    "anonymous",
+]);
+export const authMethodSchema = z.enum([
+    "none",
+    "password",
+    "apiKey",
+    "basic",
+    "bearerToken",
+    "oauth2ClientCredentials",
+    "refreshToken",
+    "sessionCredential",
+    "custom",
+]);
+export const credentialKindSchema = z.enum([
+    "none",
+    "accessToken",
+    "refreshToken",
+    "apiKey",
+    "session",
+    "basic",
+    "custom",
+]);
+export const credentialTransportSchema = z.enum([
+    "header",
+    "query",
+    "cookie",
+    "body",
+    "none",
+]);
+export const authStatusSchema = z.enum([
+    "authenticated",
+    "anonymous",
+    "challengeRequired",
+    "failed",
+]);
+export const authDecisionSchema = z.enum(["allow", "deny", "indeterminate"]);
+export const identitySubjectSchema = z.object({
+    kind: subjectKindSchema,
+    id: z.string().min(1).optional(),
+    externalId: z.string().min(1).optional(),
+    displayName: z.string().min(1).optional(),
+    tenantId: z.string().min(1).optional(),
+    providerCode: z.string().min(1).optional(),
+    roles: z.array(z.string().min(1)).default([]),
+    permissions: z.array(z.string().min(1)).default([]),
+    scopes: z.array(z.string().min(1)).default([]),
+    claims: z.record(z.string(), z.unknown()).default({}),
+});
+export const credentialMaterialSchema = z.object({
+    kind: credentialKindSchema,
+    transport: credentialTransportSchema.default("header"),
+    scheme: z.string().min(1).optional(),
+    name: z.string().min(1).optional(),
+    value: z.string().min(1).optional(),
+    expiresAt: z.string().min(1).optional(),
+    refreshExpiresAt: z.string().min(1).optional(),
+    scopes: z.array(z.string().min(1)).default([]),
+    metadata: z.record(z.string(), z.unknown()).default({}),
+});
+export const resourceRefSchema = z.object({
+    type: z.string().min(1),
+    id: z.string().min(1).optional(),
+    operationCode: z.string().min(1).optional(),
+    attributes: z.record(z.string(), z.unknown()).default({}),
+});
+export const authContextSchema = z.object({
+    requestId: z.string().min(1).optional(),
+    tenantId: z.string().min(1).optional(),
+    audience: z.array(z.string().min(1)).default([]),
+    ipAddress: z.string().min(1).optional(),
+    userAgent: z.string().min(1).optional(),
+    metadata: z.record(z.string(), z.unknown()).default({}),
+});
+//# sourceMappingURL=iam-common.js.map

package/dist/it/iam-common.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"iam-common.js","sourceRoot":"","sources":["../../src/it/iam-common.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC;AACjE,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,IAAI,CAAC;IAC9C,MAAM;IACN,QAAQ;IACR,YAAY;CACb,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,IAAI,CAAC;IACtC,MAAM;IACN,gBAAgB;IAChB,aAAa;IACb,aAAa;IACb,iBAAiB;IACjB,WAAW;CACZ,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,IAAI,CAAC;IACrC,MAAM;IACN,UAAU;IACV,QAAQ;IACR,OAAO;IACP,aAAa;IACb,yBAAyB;IACzB,cAAc;IACd,mBAAmB;IACnB,QAAQ;CACT,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,IAAI,CAAC;IACzC,MAAM;IACN,aAAa;IACb,cAAc;IACd,QAAQ;IACR,SAAS;IACT,OAAO;IACP,QAAQ;CACT,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,IAAI,CAAC;IAC9C,QAAQ;IACR,OAAO;IACP,QAAQ;IACR,MAAM;IACN,MAAM;CACP,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,IAAI,CAAC;IACrC,eAAe;IACf,WAAW;IACX,mBAAmB;IACnB,QAAQ;CACT,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,eAAe,CAAC,CAAC,CAAC;AAE7E,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,IAAI,EAAE,iBAAiB;IACvB,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAChC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACxC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACzC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACtC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC1C,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC7C,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACnD,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC9C,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CACtD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,IAAI,EAAE,oBAAoB;IAC1B,SAAS,EAAE,yBAAyB,CAAC,OAAO,CAAC,QAAQ,CAAC;IACtD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACpC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAClC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACnC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACvC,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC9C,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC9C,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CACxD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAChC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC3C,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CAC1D,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACvC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACtC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAChD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACvC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACvC,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CACxD,CAAC,CAAC"}

package/dist/it/identity-authenticate.d.ts

@@ -0,0 +1,115 @@
+import { z } from "zod";
+export declare const operationCode: "it.identity.authenticate";
+export declare const identityAuthenticateInputSchema: z.ZodObject<{
+    subject: z.ZodObject<{
+        id: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+        externalId: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+        displayName: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+        tenantId: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+        providerCode: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+        roles: z.ZodOptional<z.ZodDefault<z.ZodArray<z.ZodString>>>;
+        permissions: z.ZodOptional<z.ZodDefault<z.ZodArray<z.ZodString>>>;
+        scopes: z.ZodOptional<z.ZodDefault<z.ZodArray<z.ZodString>>>;
+        claims: z.ZodOptional<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
+        kind: z.ZodEnum<{
+            user: "user";
+            serviceAccount: "serviceAccount";
+            application: "application";
+            integration: "integration";
+            providerAccount: "providerAccount";
+            anonymous: "anonymous";
+        }>;
+    }, z.core.$strip>;
+    method: z.ZodEnum<{
+        custom: "custom";
+        none: "none";
+        password: "password";
+        apiKey: "apiKey";
+        basic: "basic";
+        bearerToken: "bearerToken";
+        oauth2ClientCredentials: "oauth2ClientCredentials";
+        refreshToken: "refreshToken";
+        sessionCredential: "sessionCredential";
+    }>;
+    credentials: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    requestedAccessMode: z.ZodDefault<z.ZodEnum<{
+        public: "public";
+        authorized: "authorized";
+        auto: "auto";
+    }>>;
+    requestedScopes: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    context: z.ZodOptional<z.ZodObject<{
+        requestId: z.ZodOptional<z.ZodString>;
+        tenantId: z.ZodOptional<z.ZodString>;
+        audience: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        ipAddress: z.ZodOptional<z.ZodString>;
+        userAgent: z.ZodOptional<z.ZodString>;
+        metadata: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export declare const identityAuthenticateResultSchema: z.ZodObject<{
+    operationCode: z.ZodLiteral<"it.identity.authenticate">;
+    status: z.ZodEnum<{
+        failed: "failed";
+        anonymous: "anonymous";
+        authenticated: "authenticated";
+        challengeRequired: "challengeRequired";
+    }>;
+    subject: z.ZodOptional<z.ZodObject<{
+        kind: z.ZodEnum<{
+            user: "user";
+            serviceAccount: "serviceAccount";
+            application: "application";
+            integration: "integration";
+            providerAccount: "providerAccount";
+            anonymous: "anonymous";
+        }>;
+        id: z.ZodOptional<z.ZodString>;
+        externalId: z.ZodOptional<z.ZodString>;
+        displayName: z.ZodOptional<z.ZodString>;
+        tenantId: z.ZodOptional<z.ZodString>;
+        providerCode: z.ZodOptional<z.ZodString>;
+        roles: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        permissions: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        scopes: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        claims: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    }, z.core.$strip>>;
+    accessModeUsed: z.ZodEnum<{
+        public: "public";
+        authorized: "authorized";
+    }>;
+    credential: z.ZodOptional<z.ZodObject<{
+        kind: z.ZodEnum<{
+            custom: "custom";
+            none: "none";
+            apiKey: "apiKey";
+            basic: "basic";
+            refreshToken: "refreshToken";
+            accessToken: "accessToken";
+            session: "session";
+        }>;
+        transport: z.ZodDefault<z.ZodEnum<{
+            none: "none";
+            header: "header";
+            query: "query";
+            cookie: "cookie";
+            body: "body";
+        }>>;
+        scheme: z.ZodOptional<z.ZodString>;
+        name: z.ZodOptional<z.ZodString>;
+        value: z.ZodOptional<z.ZodString>;
+        expiresAt: z.ZodOptional<z.ZodString>;
+        refreshExpiresAt: z.ZodOptional<z.ZodString>;
+        scopes: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        metadata: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    }, z.core.$strip>>;
+    challenge: z.ZodOptional<z.ZodObject<{
+        type: z.ZodString;
+        description: z.ZodOptional<z.ZodString>;
+        parameters: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    }, z.core.$strip>>;
+    metadata: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+}, z.core.$strip>;
+export type IdentityAuthenticateInput = z.infer<typeof identityAuthenticateInputSchema>;
+export type IdentityAuthenticateResult = z.infer<typeof identityAuthenticateResultSchema>;
+//# sourceMappingURL=identity-authenticate.d.ts.map

package/dist/it/identity-authenticate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity-authenticate.d.ts","sourceRoot":"","sources":["../../src/it/identity-authenticate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAWxB,eAAO,MAAM,aAAa,EAAG,0BAAmC,CAAC;AAEjE,eAAO,MAAM,+BAA+B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAS1C,CAAC;AAEH,eAAO,MAAM,gCAAgC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAc3C,CAAC;AAEH,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAC7C,OAAO,+BAA+B,CACvC,CAAC;AACF,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAC9C,OAAO,gCAAgC,CACxC,CAAC"}