@qlever-llc/trellis 0.5.1 → 0.6.0

package/esm/auth/protocol.d.ts

@@ -0,0 +1,1212 @@
+import type { StaticDecode } from "typebox";
+import { Type } from "typebox";
+export declare const DigestSchema: Type.TString;
+export declare const OpenObjectSchema: Type.TUnsafe<Record<string, unknown>>;
+export declare const ServiceViewSchema: Type.TObject<{
+    sessionKey: Type.TString;
+    displayName: Type.TString;
+    active: Type.TBoolean;
+    capabilities: Type.TArray<Type.TString>;
+    namespaces: Type.TArray<Type.TString>;
+    description: Type.TString;
+    contractId: Type.TOptional<Type.TString>;
+    contractDigest: Type.TOptional<Type.TString>;
+    resourceBindings: any;
+    createdAt: Type.TString;
+}>;
+export declare const ApprovalDecisionSchema: Type.TUnion<[Type.TLiteral<"approved">, Type.TLiteral<"denied">]>;
+export declare const ContractApprovalViewSchema: Type.TObject<{
+    contractDigest: Type.TString;
+    contractId: Type.TString;
+    displayName: Type.TString;
+    description: Type.TString;
+    capabilities: Type.TArray<Type.TString>;
+}>;
+export declare const ApprovalRecordViewSchema: Type.TObject<{
+    user: Type.TString;
+    answer: Type.TUnion<[Type.TLiteral<"approved">, Type.TLiteral<"denied">]>;
+    answeredAt: Type.TString;
+    updatedAt: Type.TString;
+    approval: Type.TObject<{
+        contractDigest: Type.TString;
+        contractId: Type.TString;
+        displayName: Type.TString;
+        description: Type.TString;
+        capabilities: Type.TArray<Type.TString>;
+    }>;
+}>;
+export declare const AuthListServicesSchema: Type.TObject<{}>;
+export declare const AuthListServicesResponseSchema: Type.TObject<{
+    services: Type.TArray<Type.TObject<{
+        sessionKey: Type.TString;
+        displayName: Type.TString;
+        active: Type.TBoolean;
+        capabilities: Type.TArray<Type.TString>;
+        namespaces: Type.TArray<Type.TString>;
+        description: Type.TString;
+        contractId: Type.TOptional<Type.TString>;
+        contractDigest: Type.TOptional<Type.TString>;
+        resourceBindings: any;
+        createdAt: Type.TString;
+    }>>;
+}>;
+export declare const AuthInstallServiceSchema: Type.TObject<{
+    sessionKey: Type.TString;
+    displayName: Type.TString;
+    active: Type.TOptional<Type.TBoolean>;
+    namespaces: Type.TArray<Type.TString>;
+    description: Type.TString;
+    contract: Type.TUnsafe<Record<string, unknown>>;
+}>;
+export declare const AuthInstallServiceResponseSchema: Type.TObject<{
+    success: Type.TBoolean;
+    sessionKey: Type.TString;
+    contractId: Type.TString;
+    contractDigest: Type.TString;
+    resourceBindings: any;
+}>;
+export declare const AuthUpgradeServiceContractSchema: Type.TObject<{
+    sessionKey: Type.TString;
+    contract: Type.TUnsafe<Record<string, unknown>>;
+}>;
+export declare const AuthUpgradeServiceContractResponseSchema: Type.TObject<{
+    success: Type.TBoolean;
+    sessionKey: Type.TString;
+    contractId: Type.TString;
+    contractDigest: Type.TString;
+    resourceBindings: any;
+}>;
+export declare const ContractAnalysisSummarySchema: Type.TObject<{
+    namespaces: Type.TArray<Type.TString>;
+    rpcMethods: Type.TNumber;
+    events: Type.TNumber;
+    natsPublish: Type.TNumber;
+    natsSubscribe: Type.TNumber;
+    kvResources: Type.TNumber;
+    jobsQueues: Type.TNumber;
+    streamResources: Type.TNumber;
+}>;
+export declare const ContractAnalysisKvResourceSchema: Type.TObject<{
+    alias: Type.TString;
+    purpose: Type.TString;
+    required: Type.TBoolean;
+    history: Type.TNumber;
+    ttlMs: Type.TNumber;
+    maxValueBytes: Type.TOptional<Type.TNumber>;
+}>;
+export declare const ContractAnalysisJobsQueueSchema: Type.TObject<{
+    queueType: Type.TString;
+    payload: Type.TObject<{
+        schema: Type.TString;
+    }>;
+    result: Type.TOptional<Type.TObject<{
+        schema: Type.TString;
+    }>>;
+    maxDeliver: Type.TNumber;
+    backoffMs: Type.TArray<Type.TNumber>;
+    ackWaitMs: Type.TNumber;
+    defaultDeadlineMs: Type.TOptional<Type.TNumber>;
+    progress: Type.TBoolean;
+    logs: Type.TBoolean;
+    dlq: Type.TBoolean;
+    concurrency: Type.TNumber;
+}>;
+export declare const ContractAnalysisStreamResourceSchema: Type.TObject<{
+    alias: Type.TString;
+    purpose: Type.TString;
+    required: Type.TBoolean;
+    retention: Type.TOptional<Type.TString>;
+    storage: Type.TOptional<Type.TString>;
+    numReplicas: Type.TOptional<Type.TNumber>;
+    maxAgeMs: Type.TOptional<Type.TNumber>;
+    maxBytes: Type.TOptional<Type.TNumber>;
+    maxMsgs: Type.TOptional<Type.TNumber>;
+    discard: Type.TOptional<Type.TString>;
+    subjects: Type.TArray<Type.TString>;
+    sources: Type.TOptional<Type.TArray<Type.TObject<{
+        fromAlias: Type.TString;
+        streamName: Type.TString;
+        filterSubject: Type.TOptional<Type.TString>;
+        subjectTransformDest: Type.TOptional<Type.TString>;
+    }>>>;
+}>;
+export declare const ContractAnalysisRpcMethodSchema: Type.TObject<{
+    key: Type.TString;
+    subject: Type.TString;
+    wildcardSubject: Type.TString;
+    callerCapabilities: Type.TArray<Type.TString>;
+}>;
+export declare const ContractAnalysisEventSchema: Type.TObject<{
+    key: Type.TString;
+    subject: Type.TString;
+    wildcardSubject: Type.TString;
+    publishCapabilities: Type.TArray<Type.TString>;
+    subscribeCapabilities: Type.TArray<Type.TString>;
+}>;
+export declare const ContractAnalysisSubjectSchema: Type.TObject<{
+    key: Type.TString;
+    subject: Type.TString;
+    publishCapabilities: Type.TArray<Type.TString>;
+    subscribeCapabilities: Type.TArray<Type.TString>;
+}>;
+export declare const ContractAnalysisNatsRuleSchema: Type.TObject<{
+    kind: Type.TString;
+    subject: Type.TString;
+    wildcardSubject: Type.TString;
+    requiredCapabilities: Type.TArray<Type.TString>;
+}>;
+export declare const ContractAnalysisSchema: Type.TObject<{
+    namespaces: Type.TArray<Type.TString>;
+    rpc: Type.TObject<{
+        methods: Type.TArray<Type.TObject<{
+            key: Type.TString;
+            subject: Type.TString;
+            wildcardSubject: Type.TString;
+            callerCapabilities: Type.TArray<Type.TString>;
+        }>>;
+    }>;
+    events: Type.TObject<{
+        events: Type.TArray<Type.TObject<{
+            key: Type.TString;
+            subject: Type.TString;
+            wildcardSubject: Type.TString;
+            publishCapabilities: Type.TArray<Type.TString>;
+            subscribeCapabilities: Type.TArray<Type.TString>;
+        }>>;
+    }>;
+    subjects: Type.TOptional<Type.TObject<{
+        subjects: Type.TArray<Type.TObject<{
+            key: Type.TString;
+            subject: Type.TString;
+            publishCapabilities: Type.TArray<Type.TString>;
+            subscribeCapabilities: Type.TArray<Type.TString>;
+        }>>;
+    }>>;
+    nats: Type.TObject<{
+        publish: Type.TArray<Type.TObject<{
+            kind: Type.TString;
+            subject: Type.TString;
+            wildcardSubject: Type.TString;
+            requiredCapabilities: Type.TArray<Type.TString>;
+        }>>;
+        subscribe: Type.TArray<Type.TObject<{
+            kind: Type.TString;
+            subject: Type.TString;
+            wildcardSubject: Type.TString;
+            requiredCapabilities: Type.TArray<Type.TString>;
+        }>>;
+    }>;
+    resources: Type.TObject<{
+        kv: Type.TArray<Type.TObject<{
+            alias: Type.TString;
+            purpose: Type.TString;
+            required: Type.TBoolean;
+            history: Type.TNumber;
+            ttlMs: Type.TNumber;
+            maxValueBytes: Type.TOptional<Type.TNumber>;
+        }>>;
+        jobs: Type.TArray<Type.TObject<{
+            queueType: Type.TString;
+            payload: Type.TObject<{
+                schema: Type.TString;
+            }>;
+            result: Type.TOptional<Type.TObject<{
+                schema: Type.TString;
+            }>>;
+            maxDeliver: Type.TNumber;
+            backoffMs: Type.TArray<Type.TNumber>;
+            ackWaitMs: Type.TNumber;
+            defaultDeadlineMs: Type.TOptional<Type.TNumber>;
+            progress: Type.TBoolean;
+            logs: Type.TBoolean;
+            dlq: Type.TBoolean;
+            concurrency: Type.TNumber;
+        }>>;
+        streams: Type.TArray<Type.TObject<{
+            alias: Type.TString;
+            purpose: Type.TString;
+            required: Type.TBoolean;
+            retention: Type.TOptional<Type.TString>;
+            storage: Type.TOptional<Type.TString>;
+            numReplicas: Type.TOptional<Type.TNumber>;
+            maxAgeMs: Type.TOptional<Type.TNumber>;
+            maxBytes: Type.TOptional<Type.TNumber>;
+            maxMsgs: Type.TOptional<Type.TNumber>;
+            discard: Type.TOptional<Type.TString>;
+            subjects: Type.TArray<Type.TString>;
+            sources: Type.TOptional<Type.TArray<Type.TObject<{
+                fromAlias: Type.TString;
+                streamName: Type.TString;
+                filterSubject: Type.TOptional<Type.TString>;
+                subjectTransformDest: Type.TOptional<Type.TString>;
+            }>>>;
+        }>>;
+    }>;
+}>;
+export declare const InstalledContractSchema: Type.TObject<{
+    digest: Type.TString;
+    id: Type.TString;
+    displayName: Type.TString;
+    description: Type.TString;
+    sessionKey: Type.TOptional<Type.TString>;
+    installedAt: Type.TString;
+    analysisSummary: Type.TOptional<Type.TObject<{
+        namespaces: Type.TArray<Type.TString>;
+        rpcMethods: Type.TNumber;
+        events: Type.TNumber;
+        natsPublish: Type.TNumber;
+        natsSubscribe: Type.TNumber;
+        kvResources: Type.TNumber;
+        jobsQueues: Type.TNumber;
+        streamResources: Type.TNumber;
+    }>>;
+    resourceBindings: any;
+}>;
+export declare const InstalledContractDetailSchema: Type.TObject<{
+    digest: Type.TString;
+    id: Type.TString;
+    displayName: Type.TString;
+    description: Type.TString;
+    sessionKey: Type.TOptional<Type.TString>;
+    installedAt: Type.TString;
+    analysisSummary: Type.TOptional<Type.TObject<{
+        namespaces: Type.TArray<Type.TString>;
+        rpcMethods: Type.TNumber;
+        events: Type.TNumber;
+        natsPublish: Type.TNumber;
+        natsSubscribe: Type.TNumber;
+        kvResources: Type.TNumber;
+        jobsQueues: Type.TNumber;
+        streamResources: Type.TNumber;
+    }>>;
+    analysis: Type.TOptional<Type.TObject<{
+        namespaces: Type.TArray<Type.TString>;
+        rpc: Type.TObject<{
+            methods: Type.TArray<Type.TObject<{
+                key: Type.TString;
+                subject: Type.TString;
+                wildcardSubject: Type.TString;
+                callerCapabilities: Type.TArray<Type.TString>;
+            }>>;
+        }>;
+        events: Type.TObject<{
+            events: Type.TArray<Type.TObject<{
+                key: Type.TString;
+                subject: Type.TString;
+                wildcardSubject: Type.TString;
+                publishCapabilities: Type.TArray<Type.TString>;
+                subscribeCapabilities: Type.TArray<Type.TString>;
+            }>>;
+        }>;
+        subjects: Type.TOptional<Type.TObject<{
+            subjects: Type.TArray<Type.TObject<{
+                key: Type.TString;
+                subject: Type.TString;
+                publishCapabilities: Type.TArray<Type.TString>;
+                subscribeCapabilities: Type.TArray<Type.TString>;
+            }>>;
+        }>>;
+        nats: Type.TObject<{
+            publish: Type.TArray<Type.TObject<{
+                kind: Type.TString;
+                subject: Type.TString;
+                wildcardSubject: Type.TString;
+                requiredCapabilities: Type.TArray<Type.TString>;
+            }>>;
+            subscribe: Type.TArray<Type.TObject<{
+                kind: Type.TString;
+                subject: Type.TString;
+                wildcardSubject: Type.TString;
+                requiredCapabilities: Type.TArray<Type.TString>;
+            }>>;
+        }>;
+        resources: Type.TObject<{
+            kv: Type.TArray<Type.TObject<{
+                alias: Type.TString;
+                purpose: Type.TString;
+                required: Type.TBoolean;
+                history: Type.TNumber;
+                ttlMs: Type.TNumber;
+                maxValueBytes: Type.TOptional<Type.TNumber>;
+            }>>;
+            jobs: Type.TArray<Type.TObject<{
+                queueType: Type.TString;
+                payload: Type.TObject<{
+                    schema: Type.TString;
+                }>;
+                result: Type.TOptional<Type.TObject<{
+                    schema: Type.TString;
+                }>>;
+                maxDeliver: Type.TNumber;
+                backoffMs: Type.TArray<Type.TNumber>;
+                ackWaitMs: Type.TNumber;
+                defaultDeadlineMs: Type.TOptional<Type.TNumber>;
+                progress: Type.TBoolean;
+                logs: Type.TBoolean;
+                dlq: Type.TBoolean;
+                concurrency: Type.TNumber;
+            }>>;
+            streams: Type.TArray<Type.TObject<{
+                alias: Type.TString;
+                purpose: Type.TString;
+                required: Type.TBoolean;
+                retention: Type.TOptional<Type.TString>;
+                storage: Type.TOptional<Type.TString>;
+                numReplicas: Type.TOptional<Type.TNumber>;
+                maxAgeMs: Type.TOptional<Type.TNumber>;
+                maxBytes: Type.TOptional<Type.TNumber>;
+                maxMsgs: Type.TOptional<Type.TNumber>;
+                discard: Type.TOptional<Type.TString>;
+                subjects: Type.TArray<Type.TString>;
+                sources: Type.TOptional<Type.TArray<Type.TObject<{
+                    fromAlias: Type.TString;
+                    streamName: Type.TString;
+                    filterSubject: Type.TOptional<Type.TString>;
+                    subjectTransformDest: Type.TOptional<Type.TString>;
+                }>>>;
+            }>>;
+        }>;
+    }>>;
+    resources: any;
+    resourceBindings: any;
+    contract: Type.TUnsafe<Record<string, unknown>>;
+}>;
+export declare const AuthListInstalledContractsSchema: Type.TObject<{
+    sessionKey: Type.TOptional<Type.TString>;
+}>;
+export declare const AuthListInstalledContractsResponseSchema: Type.TObject<{
+    contracts: Type.TArray<Type.TObject<{
+        digest: Type.TString;
+        id: Type.TString;
+        displayName: Type.TString;
+        description: Type.TString;
+        sessionKey: Type.TOptional<Type.TString>;
+        installedAt: Type.TString;
+        analysisSummary: Type.TOptional<Type.TObject<{
+            namespaces: Type.TArray<Type.TString>;
+            rpcMethods: Type.TNumber;
+            events: Type.TNumber;
+            natsPublish: Type.TNumber;
+            natsSubscribe: Type.TNumber;
+            kvResources: Type.TNumber;
+            jobsQueues: Type.TNumber;
+            streamResources: Type.TNumber;
+        }>>;
+        resourceBindings: any;
+    }>>;
+}>;
+export declare const AuthGetInstalledContractSchema: Type.TObject<{
+    digest: Type.TString;
+}>;
+export declare const AuthGetInstalledContractResponseSchema: Type.TObject<{
+    contract: Type.TObject<{
+        digest: Type.TString;
+        id: Type.TString;
+        displayName: Type.TString;
+        description: Type.TString;
+        sessionKey: Type.TOptional<Type.TString>;
+        installedAt: Type.TString;
+        analysisSummary: Type.TOptional<Type.TObject<{
+            namespaces: Type.TArray<Type.TString>;
+            rpcMethods: Type.TNumber;
+            events: Type.TNumber;
+            natsPublish: Type.TNumber;
+            natsSubscribe: Type.TNumber;
+            kvResources: Type.TNumber;
+            jobsQueues: Type.TNumber;
+            streamResources: Type.TNumber;
+        }>>;
+        analysis: Type.TOptional<Type.TObject<{
+            namespaces: Type.TArray<Type.TString>;
+            rpc: Type.TObject<{
+                methods: Type.TArray<Type.TObject<{
+                    key: Type.TString;
+                    subject: Type.TString;
+                    wildcardSubject: Type.TString;
+                    callerCapabilities: Type.TArray<Type.TString>;
+                }>>;
+            }>;
+            events: Type.TObject<{
+                events: Type.TArray<Type.TObject<{
+                    key: Type.TString;
+                    subject: Type.TString;
+                    wildcardSubject: Type.TString;
+                    publishCapabilities: Type.TArray<Type.TString>;
+                    subscribeCapabilities: Type.TArray<Type.TString>;
+                }>>;
+            }>;
+            subjects: Type.TOptional<Type.TObject<{
+                subjects: Type.TArray<Type.TObject<{
+                    key: Type.TString;
+                    subject: Type.TString;
+                    publishCapabilities: Type.TArray<Type.TString>;
+                    subscribeCapabilities: Type.TArray<Type.TString>;
+                }>>;
+            }>>;
+            nats: Type.TObject<{
+                publish: Type.TArray<Type.TObject<{
+                    kind: Type.TString;
+                    subject: Type.TString;
+                    wildcardSubject: Type.TString;
+                    requiredCapabilities: Type.TArray<Type.TString>;
+                }>>;
+                subscribe: Type.TArray<Type.TObject<{
+                    kind: Type.TString;
+                    subject: Type.TString;
+                    wildcardSubject: Type.TString;
+                    requiredCapabilities: Type.TArray<Type.TString>;
+                }>>;
+            }>;
+            resources: Type.TObject<{
+                kv: Type.TArray<Type.TObject<{
+                    alias: Type.TString;
+                    purpose: Type.TString;
+                    required: Type.TBoolean;
+                    history: Type.TNumber;
+                    ttlMs: Type.TNumber;
+                    maxValueBytes: Type.TOptional<Type.TNumber>;
+                }>>;
+                jobs: Type.TArray<Type.TObject<{
+                    queueType: Type.TString;
+                    payload: Type.TObject<{
+                        schema: Type.TString;
+                    }>;
+                    result: Type.TOptional<Type.TObject<{
+                        schema: Type.TString;
+                    }>>;
+                    maxDeliver: Type.TNumber;
+                    backoffMs: Type.TArray<Type.TNumber>;
+                    ackWaitMs: Type.TNumber;
+                    defaultDeadlineMs: Type.TOptional<Type.TNumber>;
+                    progress: Type.TBoolean;
+                    logs: Type.TBoolean;
+                    dlq: Type.TBoolean;
+                    concurrency: Type.TNumber;
+                }>>;
+                streams: Type.TArray<Type.TObject<{
+                    alias: Type.TString;
+                    purpose: Type.TString;
+                    required: Type.TBoolean;
+                    retention: Type.TOptional<Type.TString>;
+                    storage: Type.TOptional<Type.TString>;
+                    numReplicas: Type.TOptional<Type.TNumber>;
+                    maxAgeMs: Type.TOptional<Type.TNumber>;
+                    maxBytes: Type.TOptional<Type.TNumber>;
+                    maxMsgs: Type.TOptional<Type.TNumber>;
+                    discard: Type.TOptional<Type.TString>;
+                    subjects: Type.TArray<Type.TString>;
+                    sources: Type.TOptional<Type.TArray<Type.TObject<{
+                        fromAlias: Type.TString;
+                        streamName: Type.TString;
+                        filterSubject: Type.TOptional<Type.TString>;
+                        subjectTransformDest: Type.TOptional<Type.TString>;
+                    }>>>;
+                }>>;
+            }>;
+        }>>;
+        resources: any;
+        resourceBindings: any;
+        contract: Type.TUnsafe<Record<string, unknown>>;
+    }>;
+}>;
+export declare const AuthenticatedUserSchema: Type.TObject<{
+    id: Type.TString;
+    origin: Type.TString;
+    active: Type.TBoolean;
+    name: Type.TString;
+    email: Type.TString;
+    image: Type.TOptional<Type.TString>;
+    capabilities: Type.TArray<Type.TString>;
+    lastLogin: Type.TOptional<Type.TString>;
+}>;
+export type AuthenticatedUser = StaticDecode<typeof AuthenticatedUserSchema>;
+export declare const AuthMeSchema: Type.TObject<{}>;
+export declare const AuthValidateRequestSchema: Type.TObject<{
+    sessionKey: Type.TString;
+    proof: Type.TString;
+    subject: Type.TString;
+    payloadHash: Type.TString;
+    capabilities: Type.TOptional<Type.TArray<Type.TString>>;
+}>;
+export declare const AuthenticatedServiceSchema: Type.TObject<{
+    type: Type.TLiteral<"service">;
+    id: Type.TString;
+    name: Type.TString;
+    active: Type.TBoolean;
+    capabilities: Type.TArray<Type.TString>;
+}>;
+export type AuthenticatedService = StaticDecode<typeof AuthenticatedServiceSchema>;
+export declare const AuthenticatedDeviceSchema: Type.TObject<{
+    type: Type.TLiteral<"device">;
+    deviceId: Type.TString;
+    deviceType: Type.TString;
+    runtimePublicKey: Type.TString;
+    profileId: Type.TString;
+    active: Type.TBoolean;
+    capabilities: Type.TArray<Type.TString>;
+}>;
+export declare const AuthenticatedWorkloadSchema: Type.TObject<{
+    type: Type.TLiteral<"workload">;
+    instanceId: Type.TString;
+    publicIdentityKey: Type.TString;
+    profileId: Type.TString;
+    active: Type.TBoolean;
+    capabilities: Type.TArray<Type.TString>;
+}>;
+export type AuthenticatedWorkload = StaticDecode<typeof AuthenticatedWorkloadSchema>;
+export declare const AuthMeResponseSchema: Type.TObject<{
+    user: Type.TUnion<[Type.TObject<{
+        id: Type.TString;
+        origin: Type.TString;
+        active: Type.TBoolean;
+        name: Type.TString;
+        email: Type.TString;
+        image: Type.TOptional<Type.TString>;
+        capabilities: Type.TArray<Type.TString>;
+        lastLogin: Type.TOptional<Type.TString>;
+    }>, Type.TNull]>;
+    workload: Type.TUnion<[Type.TObject<{
+        type: Type.TLiteral<"workload">;
+        instanceId: Type.TString;
+        publicIdentityKey: Type.TString;
+        profileId: Type.TString;
+        active: Type.TBoolean;
+        capabilities: Type.TArray<Type.TString>;
+    }>, Type.TNull]>;
+    service: Type.TUnion<[Type.TObject<{
+        type: Type.TLiteral<"service">;
+        id: Type.TString;
+        name: Type.TString;
+        active: Type.TBoolean;
+        capabilities: Type.TArray<Type.TString>;
+    }>, Type.TNull]>;
+}>;
+export type AuthMeResponse = StaticDecode<typeof AuthMeResponseSchema>;
+export declare const CallerViewSchema: Type.TUnion<[Type.TObject<{
+    type: Type.TLiteral<"user">;
+    id: Type.TString;
+    origin: Type.TString;
+    active: Type.TBoolean;
+    name: Type.TString;
+    email: Type.TString;
+    image: Type.TOptional<Type.TString>;
+    capabilities: Type.TArray<Type.TString>;
+}>, Type.TObject<{
+    type: Type.TLiteral<"service">;
+    id: Type.TString;
+    name: Type.TString;
+    active: Type.TBoolean;
+    capabilities: Type.TArray<Type.TString>;
+}>, Type.TObject<{
+    type: Type.TLiteral<"workload">;
+    instanceId: Type.TString;
+    publicIdentityKey: Type.TString;
+    profileId: Type.TString;
+    active: Type.TBoolean;
+    capabilities: Type.TArray<Type.TString>;
+}>]>;
+export declare const AuthValidateRequestResponseSchema: Type.TObject<{
+    allowed: Type.TBoolean;
+    inboxPrefix: Type.TString;
+    caller: Type.TUnion<[Type.TObject<{
+        type: Type.TLiteral<"user">;
+        id: Type.TString;
+        origin: Type.TString;
+        active: Type.TBoolean;
+        name: Type.TString;
+        email: Type.TString;
+        image: Type.TOptional<Type.TString>;
+        capabilities: Type.TArray<Type.TString>;
+    }>, Type.TObject<{
+        type: Type.TLiteral<"service">;
+        id: Type.TString;
+        name: Type.TString;
+        active: Type.TBoolean;
+        capabilities: Type.TArray<Type.TString>;
+    }>, Type.TObject<{
+        type: Type.TLiteral<"workload">;
+        instanceId: Type.TString;
+        publicIdentityKey: Type.TString;
+        profileId: Type.TString;
+        active: Type.TBoolean;
+        capabilities: Type.TArray<Type.TString>;
+    }>]>;
+}>;
+export declare const AuthListApprovalsSchema: Type.TObject<{
+    user: Type.TOptional<Type.TString>;
+    digest: Type.TOptional<Type.TString>;
+}>;
+export declare const AuthListApprovalsResponseSchema: Type.TObject<{
+    approvals: Type.TArray<Type.TObject<{
+        user: Type.TString;
+        answer: Type.TUnion<[Type.TLiteral<"approved">, Type.TLiteral<"denied">]>;
+        answeredAt: Type.TString;
+        updatedAt: Type.TString;
+        approval: Type.TObject<{
+            contractDigest: Type.TString;
+            contractId: Type.TString;
+            displayName: Type.TString;
+            description: Type.TString;
+            capabilities: Type.TArray<Type.TString>;
+        }>;
+    }>>;
+}>;
+export declare const AuthRevokeApprovalSchema: Type.TObject<{
+    contractDigest: Type.TString;
+    user: Type.TOptional<Type.TString>;
+}>;
+export declare const AuthRevokeApprovalResponseSchema: Type.TObject<{
+    success: Type.TBoolean;
+}>;
+export declare const PortalSchema: Type.TObject<{
+    portalId: Type.TString;
+    appContractId: Type.TOptional<Type.TString>;
+    entryUrl: Type.TString;
+    disabled: Type.TBoolean;
+}>;
+export declare const LoginPortalDefaultSchema: Type.TObject<{
+    portalId: Type.TUnion<[Type.TString, Type.TNull]>;
+}>;
+export type LoginPortalDefault = StaticDecode<typeof LoginPortalDefaultSchema>;
+export declare const WorkloadPortalDefaultSchema: Type.TObject<{
+    portalId: Type.TUnion<[Type.TString, Type.TNull]>;
+}>;
+export type WorkloadPortalDefault = StaticDecode<typeof WorkloadPortalDefaultSchema>;
+export declare const LoginPortalSelectionSchema: Type.TObject<{
+    contractId: Type.TString;
+    portalId: Type.TUnion<[Type.TString, Type.TNull]>;
+}>;
+export type LoginPortalSelection = StaticDecode<typeof LoginPortalSelectionSchema>;
+export declare const WorkloadPortalSelectionSchema: Type.TObject<{
+    profileId: Type.TString;
+    portalId: Type.TUnion<[Type.TString, Type.TNull]>;
+}>;
+export type WorkloadPortalSelection = StaticDecode<typeof WorkloadPortalSelectionSchema>;
+export declare const PortalFlowStateSchema: Type.TUnion<[Type.TObject<{
+    status: Type.TLiteral<"choose_provider">;
+    flowId: Type.TString;
+    providers: Type.TArray<Type.TObject<{
+        id: Type.TString;
+        displayName: Type.TString;
+    }>>;
+    app: Type.TObject<{
+        contractId: Type.TString;
+        contractDigest: Type.TString;
+        displayName: Type.TString;
+        description: Type.TString;
+        context: Type.TOptional<Type.TUnsafe<Record<string, unknown>>>;
+    }>;
+}>, Type.TObject<{
+    status: Type.TLiteral<"approval_required">;
+    flowId: Type.TString;
+    user: Type.TObject<{
+        origin: Type.TString;
+        id: Type.TString;
+        name: Type.TOptional<Type.TString>;
+        email: Type.TOptional<Type.TString>;
+        image: Type.TOptional<Type.TString>;
+    }>;
+    approval: Type.TObject<{
+        contractDigest: Type.TString;
+        contractId: Type.TString;
+        displayName: Type.TString;
+        description: Type.TString;
+        capabilities: Type.TArray<Type.TString>;
+    }>;
+}>, Type.TObject<{
+    status: Type.TLiteral<"approval_denied">;
+    flowId: Type.TString;
+    approval: Type.TObject<{
+        contractDigest: Type.TString;
+        contractId: Type.TString;
+        displayName: Type.TString;
+        description: Type.TString;
+        capabilities: Type.TArray<Type.TString>;
+    }>;
+    returnLocation: Type.TOptional<Type.TString>;
+}>, Type.TObject<{
+    status: Type.TLiteral<"insufficient_capabilities">;
+    flowId: Type.TString;
+    user: Type.TOptional<Type.TObject<{
+        origin: Type.TString;
+        id: Type.TString;
+        name: Type.TOptional<Type.TString>;
+    }>>;
+    approval: Type.TObject<{
+        contractDigest: Type.TString;
+        contractId: Type.TString;
+        displayName: Type.TString;
+        description: Type.TString;
+        capabilities: Type.TArray<Type.TString>;
+    }>;
+    missingCapabilities: Type.TArray<Type.TString>;
+    userCapabilities: Type.TArray<Type.TString>;
+    returnLocation: Type.TOptional<Type.TString>;
+}>, Type.TObject<{
+    status: Type.TLiteral<"redirect">;
+    location: Type.TString;
+}>, Type.TObject<{
+    status: Type.TLiteral<"expired">;
+}>]>;
+export type PortalFlowState = StaticDecode<typeof PortalFlowStateSchema>;
+export type PortalFlowChooseProviderState = Extract<PortalFlowState, {
+    status: "choose_provider";
+}>;
+export type PortalFlowApprovalRequiredState = Extract<PortalFlowState, {
+    status: "approval_required";
+}>;
+export type PortalFlowApprovalDeniedState = Extract<PortalFlowState, {
+    status: "approval_denied";
+}>;
+export type PortalFlowInsufficientCapabilitiesState = Extract<PortalFlowState, {
+    status: "insufficient_capabilities";
+}>;
+export type PortalFlowRedirectState = Extract<PortalFlowState, {
+    status: "redirect";
+}>;
+export type PortalFlowExpiredState = Extract<PortalFlowState, {
+    status: "expired";
+}>;
+export type PortalFlowApp = PortalFlowChooseProviderState["app"];
+export type PortalFlowProvider = PortalFlowChooseProviderState["providers"][number];
+export type PortalFlowApproval = PortalFlowApprovalRequiredState["approval"];
+export type PortalFlowUser = PortalFlowApprovalRequiredState["user"];
+export declare const WorkloadProfileSchema: Type.TObject<{
+    profileId: Type.TString;
+    contractId: Type.TString;
+    allowedDigests: Type.TArray<Type.TString>;
+    reviewMode: Type.TOptional<Type.TUnion<[Type.TLiteral<"none">, Type.TLiteral<"required">]>>;
+    disabled: Type.TBoolean;
+}>;
+export declare const WorkloadSchema: Type.TObject<{
+    instanceId: Type.TString;
+    publicIdentityKey: Type.TString;
+    profileId: Type.TString;
+    state: Type.TUnion<[Type.TLiteral<"registered">, Type.TLiteral<"activated">, Type.TLiteral<"revoked">, Type.TLiteral<"disabled">]>;
+    createdAt: Type.TString;
+    activatedAt: Type.TUnion<[Type.TString, Type.TNull]>;
+    revokedAt: Type.TUnion<[Type.TString, Type.TNull]>;
+}>;
+export declare const WorkloadActivationActorSchema: Type.TObject<{
+    origin: Type.TString;
+    id: Type.TString;
+}>;
+export type WorkloadActivationActor = StaticDecode<typeof WorkloadActivationActorSchema>;
+export declare const WorkloadActivationRecordSchema: Type.TObject<{
+    instanceId: Type.TString;
+    publicIdentityKey: Type.TString;
+    profileId: Type.TString;
+    activatedBy: Type.TOptional<Type.TObject<{
+        origin: Type.TString;
+        id: Type.TString;
+    }>>;
+    state: Type.TUnion<[Type.TLiteral<"activated">, Type.TLiteral<"revoked">]>;
+    activatedAt: Type.TString;
+    revokedAt: Type.TUnion<[Type.TString, Type.TNull]>;
+}>;
+export type WorkloadActivationRecord = StaticDecode<typeof WorkloadActivationRecordSchema>;
+export declare const WorkloadActivationReviewSchema: Type.TObject<{
+    reviewId: Type.TString;
+    instanceId: Type.TString;
+    publicIdentityKey: Type.TString;
+    profileId: Type.TString;
+    state: Type.TUnion<[Type.TLiteral<"pending">, Type.TLiteral<"approved">, Type.TLiteral<"rejected">]>;
+    requestedAt: Type.TString;
+    decidedAt: Type.TUnion<[Type.TString, Type.TNull]>;
+    reason: Type.TOptional<Type.TString>;
+}>;
+export declare const AuthWorkloadActivationReviewRequestedEventSchema: Type.TObject<{
+    reviewId: Type.TString;
+    handoffId: Type.TString;
+    instanceId: Type.TString;
+    publicIdentityKey: Type.TString;
+    profileId: Type.TString;
+    requestedAt: Type.TString;
+    requestedBy: Type.TObject<{
+        origin: Type.TString;
+        id: Type.TString;
+    }>;
+}>;
+export declare const WorkloadConnectInfoSchema: Type.TObject<{
+    instanceId: Type.TString;
+    profileId: Type.TString;
+    contractId: Type.TString;
+    contractDigest: Type.TString;
+    transport: Type.TObject<{
+        natsServers: Type.TArray<Type.TString>;
+        sentinel: Type.TObject<{
+            jwt: Type.TString;
+            seed: Type.TString;
+        }>;
+    }>;
+    auth: Type.TObject<{
+        mode: Type.TLiteral<"workload_identity">;
+        iatSkewSeconds: Type.TNumber;
+    }>;
+}>;
+export declare const AuthCreatePortalSchema: Type.TObject<{
+    portalId: Type.TString;
+    appContractId: Type.TOptional<Type.TString>;
+    entryUrl: Type.TString;
+}>;
+export declare const AuthCreatePortalResponseSchema: Type.TObject<{
+    portal: Type.TObject<{
+        portalId: Type.TString;
+        appContractId: Type.TOptional<Type.TString>;
+        entryUrl: Type.TString;
+        disabled: Type.TBoolean;
+    }>;
+}>;
+export declare const AuthListPortalsSchema: Type.TObject<{}>;
+export declare const AuthListPortalsResponseSchema: Type.TObject<{
+    portals: Type.TArray<Type.TObject<{
+        portalId: Type.TString;
+        appContractId: Type.TOptional<Type.TString>;
+        entryUrl: Type.TString;
+        disabled: Type.TBoolean;
+    }>>;
+}>;
+export declare const AuthDisablePortalSchema: Type.TObject<{
+    portalId: Type.TString;
+}>;
+export declare const AuthDisablePortalResponseSchema: Type.TObject<{
+    success: Type.TBoolean;
+}>;
+export declare const AuthGetLoginPortalDefaultSchema: Type.TObject<{}>;
+export declare const AuthGetLoginPortalDefaultResponseSchema: Type.TObject<{
+    defaultPortal: Type.TObject<{
+        portalId: Type.TUnion<[Type.TString, Type.TNull]>;
+    }>;
+}>;
+export declare const AuthSetLoginPortalDefaultSchema: Type.TObject<{
+    portalId: Type.TUnion<[Type.TString, Type.TNull]>;
+}>;
+export declare const AuthSetLoginPortalDefaultResponseSchema: Type.TObject<{
+    defaultPortal: Type.TObject<{
+        portalId: Type.TUnion<[Type.TString, Type.TNull]>;
+    }>;
+}>;
+export declare const AuthListLoginPortalSelectionsSchema: Type.TObject<{}>;
+export declare const AuthListLoginPortalSelectionsResponseSchema: Type.TObject<{
+    selections: Type.TArray<Type.TObject<{
+        contractId: Type.TString;
+        portalId: Type.TUnion<[Type.TString, Type.TNull]>;
+    }>>;
+}>;
+export declare const AuthSetLoginPortalSelectionSchema: Type.TObject<{
+    contractId: Type.TString;
+    portalId: Type.TUnion<[Type.TString, Type.TNull]>;
+}>;
+export declare const AuthSetLoginPortalSelectionResponseSchema: Type.TObject<{
+    selection: Type.TObject<{
+        contractId: Type.TString;
+        portalId: Type.TUnion<[Type.TString, Type.TNull]>;
+    }>;
+}>;
+export declare const AuthClearLoginPortalSelectionSchema: Type.TObject<{
+    contractId: Type.TString;
+}>;
+export declare const AuthClearLoginPortalSelectionResponseSchema: Type.TObject<{
+    success: Type.TBoolean;
+}>;
+export declare const AuthGetWorkloadPortalDefaultSchema: Type.TObject<{}>;
+export declare const AuthGetWorkloadPortalDefaultResponseSchema: Type.TObject<{
+    defaultPortal: Type.TObject<{
+        portalId: Type.TUnion<[Type.TString, Type.TNull]>;
+    }>;
+}>;
+export declare const AuthSetWorkloadPortalDefaultSchema: Type.TObject<{
+    portalId: Type.TUnion<[Type.TString, Type.TNull]>;
+}>;
+export declare const AuthSetWorkloadPortalDefaultResponseSchema: Type.TObject<{
+    defaultPortal: Type.TObject<{
+        portalId: Type.TUnion<[Type.TString, Type.TNull]>;
+    }>;
+}>;
+export declare const AuthListWorkloadPortalSelectionsSchema: Type.TObject<{}>;
+export declare const AuthListWorkloadPortalSelectionsResponseSchema: Type.TObject<{
+    selections: Type.TArray<Type.TObject<{
+        profileId: Type.TString;
+        portalId: Type.TUnion<[Type.TString, Type.TNull]>;
+    }>>;
+}>;
+export declare const AuthSetWorkloadPortalSelectionSchema: Type.TObject<{
+    profileId: Type.TString;
+    portalId: Type.TUnion<[Type.TString, Type.TNull]>;
+}>;
+export declare const AuthSetWorkloadPortalSelectionResponseSchema: Type.TObject<{
+    selection: Type.TObject<{
+        profileId: Type.TString;
+        portalId: Type.TUnion<[Type.TString, Type.TNull]>;
+    }>;
+}>;
+export declare const AuthClearWorkloadPortalSelectionSchema: Type.TObject<{
+    profileId: Type.TString;
+}>;
+export declare const AuthClearWorkloadPortalSelectionResponseSchema: Type.TObject<{
+    success: Type.TBoolean;
+}>;
+export declare const AuthCreateWorkloadProfileSchema: Type.TObject<{
+    profileId: Type.TString;
+    contractId: Type.TString;
+    allowedDigests: Type.TArray<Type.TString>;
+    reviewMode: Type.TOptional<Type.TUnion<[Type.TLiteral<"none">, Type.TLiteral<"required">]>>;
+    contract: Type.TOptional<Type.TObject<{}>>;
+}>;
+export declare const AuthCreateWorkloadProfileResponseSchema: Type.TObject<{
+    profile: Type.TObject<{
+        profileId: Type.TString;
+        contractId: Type.TString;
+        allowedDigests: Type.TArray<Type.TString>;
+        reviewMode: Type.TOptional<Type.TUnion<[Type.TLiteral<"none">, Type.TLiteral<"required">]>>;
+        disabled: Type.TBoolean;
+    }>;
+}>;
+export declare const AuthListWorkloadProfilesSchema: Type.TObject<{
+    contractId: Type.TOptional<Type.TString>;
+    disabled: Type.TOptional<Type.TBoolean>;
+}>;
+export declare const AuthListWorkloadProfilesResponseSchema: Type.TObject<{
+    profiles: Type.TArray<Type.TObject<{
+        profileId: Type.TString;
+        contractId: Type.TString;
+        allowedDigests: Type.TArray<Type.TString>;
+        reviewMode: Type.TOptional<Type.TUnion<[Type.TLiteral<"none">, Type.TLiteral<"required">]>>;
+        disabled: Type.TBoolean;
+    }>>;
+}>;
+export declare const AuthDisableWorkloadProfileSchema: Type.TObject<{
+    profileId: Type.TString;
+}>;
+export declare const AuthDisableWorkloadProfileResponseSchema: Type.TObject<{
+    success: Type.TBoolean;
+}>;
+export declare const AuthProvisionWorkloadInstanceSchema: Type.TObject<{
+    profileId: Type.TString;
+    publicIdentityKey: Type.TString;
+    activationKey: Type.TString;
+}>;
+export declare const AuthProvisionWorkloadInstanceResponseSchema: Type.TObject<{
+    instance: Type.TObject<{
+        instanceId: Type.TString;
+        publicIdentityKey: Type.TString;
+        profileId: Type.TString;
+        state: Type.TUnion<[Type.TLiteral<"registered">, Type.TLiteral<"activated">, Type.TLiteral<"revoked">, Type.TLiteral<"disabled">]>;
+        createdAt: Type.TString;
+        activatedAt: Type.TUnion<[Type.TString, Type.TNull]>;
+        revokedAt: Type.TUnion<[Type.TString, Type.TNull]>;
+    }>;
+}>;
+export declare const AuthListWorkloadInstancesSchema: Type.TObject<{
+    profileId: Type.TOptional<Type.TString>;
+    state: Type.TOptional<Type.TUnion<[Type.TLiteral<"registered">, Type.TLiteral<"activated">, Type.TLiteral<"revoked">, Type.TLiteral<"disabled">]>>;
+}>;
+export declare const AuthListWorkloadInstancesResponseSchema: Type.TObject<{
+    instances: Type.TArray<Type.TObject<{
+        instanceId: Type.TString;
+        publicIdentityKey: Type.TString;
+        profileId: Type.TString;
+        state: Type.TUnion<[Type.TLiteral<"registered">, Type.TLiteral<"activated">, Type.TLiteral<"revoked">, Type.TLiteral<"disabled">]>;
+        createdAt: Type.TString;
+        activatedAt: Type.TUnion<[Type.TString, Type.TNull]>;
+        revokedAt: Type.TUnion<[Type.TString, Type.TNull]>;
+    }>>;
+}>;
+export declare const AuthDisableWorkloadInstanceSchema: Type.TObject<{
+    instanceId: Type.TString;
+}>;
+export declare const AuthDisableWorkloadInstanceResponseSchema: Type.TObject<{
+    success: Type.TBoolean;
+}>;
+export declare const AuthActivateWorkloadSchema: Type.TObject<{
+    handoffId: Type.TString;
+}>;
+export declare const AuthActivateWorkloadResponseSchema: Type.TUnion<[Type.TObject<{
+    status: Type.TLiteral<"activated">;
+    instanceId: Type.TString;
+    profileId: Type.TString;
+    activatedAt: Type.TString;
+    confirmationCode: Type.TOptional<Type.TString>;
+}>, Type.TObject<{
+    status: Type.TLiteral<"pending_review">;
+    reviewId: Type.TString;
+    instanceId: Type.TString;
+    profileId: Type.TString;
+    requestedAt: Type.TString;
+}>, Type.TObject<{
+    status: Type.TLiteral<"rejected">;
+    reason: Type.TOptional<Type.TString>;
+}>]>;
+export declare const AuthGetWorkloadActivationStatusSchema: Type.TObject<{
+    handoffId: Type.TString;
+}>;
+export declare const AuthGetWorkloadActivationStatusResponseSchema: Type.TUnion<[Type.TObject<{
+    status: Type.TLiteral<"activated">;
+    instanceId: Type.TString;
+    profileId: Type.TString;
+    activatedAt: Type.TString;
+    confirmationCode: Type.TOptional<Type.TString>;
+}>, Type.TObject<{
+    status: Type.TLiteral<"pending_review">;
+    reviewId: Type.TString;
+    instanceId: Type.TString;
+    profileId: Type.TString;
+    requestedAt: Type.TString;
+}>, Type.TObject<{
+    status: Type.TLiteral<"rejected">;
+    reason: Type.TOptional<Type.TString>;
+}>]>;
+export declare const WaitForWorkloadActivationResponseSchema: Type.TUnion<[Type.TObject<{
+    status: Type.TLiteral<"pending">;
+}>, Type.TObject<{
+    status: Type.TLiteral<"activated">;
+    activatedAt: Type.TString;
+    confirmationCode: Type.TOptional<Type.TString>;
+    connectInfo: Type.TObject<{
+        instanceId: Type.TString;
+        profileId: Type.TString;
+        contractId: Type.TString;
+        contractDigest: Type.TString;
+        transport: Type.TObject<{
+            natsServers: Type.TArray<Type.TString>;
+            sentinel: Type.TObject<{
+                jwt: Type.TString;
+                seed: Type.TString;
+            }>;
+        }>;
+        auth: Type.TObject<{
+            mode: Type.TLiteral<"workload_identity">;
+            iatSkewSeconds: Type.TNumber;
+        }>;
+    }>;
+}>, Type.TObject<{
+    status: Type.TLiteral<"rejected">;
+    reason: Type.TOptional<Type.TString>;
+}>]>;
+export declare const AuthGetWorkloadConnectInfoSchema: Type.TObject<{
+    publicIdentityKey: Type.TString;
+    contractDigest: Type.TString;
+    iat: Type.TNumber;
+    sig: Type.TString;
+}>;
+export declare const AuthGetWorkloadConnectInfoResponseSchema: Type.TObject<{
+    status: Type.TLiteral<"ready">;
+    connectInfo: Type.TObject<{
+        instanceId: Type.TString;
+        profileId: Type.TString;
+        contractId: Type.TString;
+        contractDigest: Type.TString;
+        transport: Type.TObject<{
+            natsServers: Type.TArray<Type.TString>;
+            sentinel: Type.TObject<{
+                jwt: Type.TString;
+                seed: Type.TString;
+            }>;
+        }>;
+        auth: Type.TObject<{
+            mode: Type.TLiteral<"workload_identity">;
+            iatSkewSeconds: Type.TNumber;
+        }>;
+    }>;
+}>;
+export declare const AuthListWorkloadActivationsSchema: Type.TObject<{
+    instanceId: Type.TOptional<Type.TString>;
+    profileId: Type.TOptional<Type.TString>;
+    state: Type.TOptional<Type.TUnion<[Type.TLiteral<"activated">, Type.TLiteral<"revoked">]>>;
+}>;
+export declare const AuthListWorkloadActivationsResponseSchema: Type.TObject<{
+    activations: Type.TArray<Type.TObject<{
+        instanceId: Type.TString;
+        publicIdentityKey: Type.TString;
+        profileId: Type.TString;
+        activatedBy: Type.TOptional<Type.TObject<{
+            origin: Type.TString;
+            id: Type.TString;
+        }>>;
+        state: Type.TUnion<[Type.TLiteral<"activated">, Type.TLiteral<"revoked">]>;
+        activatedAt: Type.TString;
+        revokedAt: Type.TUnion<[Type.TString, Type.TNull]>;
+    }>>;
+}>;
+export declare const AuthRevokeWorkloadActivationSchema: Type.TObject<{
+    instanceId: Type.TString;
+}>;
+export declare const AuthRevokeWorkloadActivationResponseSchema: Type.TObject<{
+    success: Type.TBoolean;
+}>;
+export declare const AuthListWorkloadActivationReviewsSchema: Type.TObject<{
+    instanceId: Type.TOptional<Type.TString>;
+    profileId: Type.TOptional<Type.TString>;
+    state: Type.TOptional<Type.TUnion<[Type.TLiteral<"pending">, Type.TLiteral<"approved">, Type.TLiteral<"rejected">]>>;
+}>;
+export declare const AuthListWorkloadActivationReviewsResponseSchema: Type.TObject<{
+    reviews: Type.TArray<Type.TObject<{
+        reviewId: Type.TString;
+        instanceId: Type.TString;
+        publicIdentityKey: Type.TString;
+        profileId: Type.TString;
+        state: Type.TUnion<[Type.TLiteral<"pending">, Type.TLiteral<"approved">, Type.TLiteral<"rejected">]>;
+        requestedAt: Type.TString;
+        decidedAt: Type.TUnion<[Type.TString, Type.TNull]>;
+        reason: Type.TOptional<Type.TString>;
+    }>>;
+}>;
+export declare const AuthDecideWorkloadActivationReviewSchema: Type.TObject<{
+    reviewId: Type.TString;
+    decision: Type.TUnion<[Type.TLiteral<"approve">, Type.TLiteral<"reject">]>;
+    reason: Type.TOptional<Type.TString>;
+}>;
+export declare const AuthDecideWorkloadActivationReviewResponseSchema: Type.TObject<{
+    review: Type.TObject<{
+        reviewId: Type.TString;
+        instanceId: Type.TString;
+        publicIdentityKey: Type.TString;
+        profileId: Type.TString;
+        state: Type.TUnion<[Type.TLiteral<"pending">, Type.TLiteral<"approved">, Type.TLiteral<"rejected">]>;
+        requestedAt: Type.TString;
+        decidedAt: Type.TUnion<[Type.TString, Type.TNull]>;
+        reason: Type.TOptional<Type.TString>;
+    }>;
+    activation: Type.TOptional<Type.TObject<{
+        instanceId: Type.TString;
+        publicIdentityKey: Type.TString;
+        profileId: Type.TString;
+        activatedBy: Type.TOptional<Type.TObject<{
+            origin: Type.TString;
+            id: Type.TString;
+        }>>;
+        state: Type.TUnion<[Type.TLiteral<"activated">, Type.TLiteral<"revoked">]>;
+        activatedAt: Type.TString;
+        revokedAt: Type.TUnion<[Type.TString, Type.TNull]>;
+    }>>;
+    confirmationCode: Type.TOptional<Type.TString>;
+}>;
+export declare const UserViewSchema: Type.TObject<{
+    origin: Type.TString;
+    id: Type.TString;
+    name: Type.TOptional<Type.TString>;
+    email: Type.TOptional<Type.TString>;
+    active: Type.TBoolean;
+    capabilities: Type.TArray<Type.TString>;
+}>;
+export declare const AuthListUsersSchema: Type.TObject<{}>;
+export declare const AuthListUsersResponseSchema: Type.TObject<{
+    users: Type.TArray<Type.TObject<{
+        origin: Type.TString;
+        id: Type.TString;
+        name: Type.TOptional<Type.TString>;
+        email: Type.TOptional<Type.TString>;
+        active: Type.TBoolean;
+        capabilities: Type.TArray<Type.TString>;
+    }>>;
+}>;
+export declare const AuthUpdateUserSchema: Type.TObject<{
+    origin: Type.TString;
+    id: Type.TString;
+    active: Type.TOptional<Type.TBoolean>;
+    capabilities: Type.TOptional<Type.TArray<Type.TString>>;
+}>;
+export declare const AuthUpdateUserResponseSchema: Type.TObject<{
+    success: Type.TBoolean;
+}>;
+//# sourceMappingURL=protocol.d.ts.map