@qlever-llc/trellis 0.7.0-rc.5 → 0.7.0

package/script/js/packages/trellis/auth/protocol.js

@@ -0,0 +1,808 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.InstalledContractSchema = exports.ContractAnalysisSchema = exports.ContractAnalysisNatsRuleSchema = exports.ContractAnalysisSubjectSchema = exports.ContractAnalysisEventSchema = exports.ContractAnalysisRpcMethodSchema = exports.ContractAnalysisStreamResourceSchema = exports.ContractAnalysisJobsQueueSchema = exports.ContractAnalysisKvResourceSchema = exports.ContractAnalysisSummarySchema = exports.AuthRemoveServiceInstanceResponseSchema = exports.AuthRemoveServiceInstanceSchema = exports.AuthEnableServiceInstanceResponseSchema = exports.AuthEnableServiceInstanceSchema = exports.AuthDisableServiceInstanceResponseSchema = exports.AuthDisableServiceInstanceSchema = exports.AuthListServiceInstancesResponseSchema = exports.AuthListServiceInstancesSchema = exports.AuthProvisionServiceInstanceResponseSchema = exports.AuthProvisionServiceInstanceSchema = exports.AuthRemoveServiceProfileResponseSchema = exports.AuthRemoveServiceProfileSchema = exports.AuthEnableServiceProfileResponseSchema = exports.AuthEnableServiceProfileSchema = exports.AuthDisableServiceProfileResponseSchema = exports.AuthDisableServiceProfileSchema = exports.AuthUnapplyServiceProfileContractResponseSchema = exports.AuthUnapplyServiceProfileContractSchema = exports.AuthApplyServiceProfileContractResponseSchema = exports.AuthApplyServiceProfileContractSchema = exports.AuthListServiceProfilesResponseSchema = exports.AuthListServiceProfilesSchema = exports.AuthCreateServiceProfileResponseSchema = exports.AuthCreateServiceProfileSchema = exports.AuthDisableInstanceGrantPolicyResponseSchema = exports.AuthDisableInstanceGrantPolicySchema = exports.AuthUpsertInstanceGrantPolicyResponseSchema = exports.AuthUpsertInstanceGrantPolicySchema = exports.AuthListInstanceGrantPoliciesResponseSchema = exports.AuthListInstanceGrantPoliciesSchema = exports.InstanceGrantPolicySchema = exports.InstanceGrantPolicyActorSchema = exports.ApprovalRecordViewSchema = exports.ContractApprovalViewSchema = exports.ApprovalDecisionSchema = exports.ServiceInstanceSchema = exports.ServiceProfileSchema = exports.AppliedProfileContractSchema = exports.OpenObjectSchema = exports.DigestSchema = void 0;
+exports.AuthSetDevicePortalDefaultSchema = exports.AuthGetDevicePortalDefaultResponseSchema = exports.AuthGetDevicePortalDefaultSchema = exports.AuthClearLoginPortalSelectionResponseSchema = exports.AuthClearLoginPortalSelectionSchema = exports.AuthSetLoginPortalSelectionResponseSchema = exports.AuthSetLoginPortalSelectionSchema = exports.AuthListLoginPortalSelectionsResponseSchema = exports.AuthListLoginPortalSelectionsSchema = exports.AuthSetLoginPortalDefaultResponseSchema = exports.AuthSetLoginPortalDefaultSchema = exports.AuthGetLoginPortalDefaultResponseSchema = exports.AuthGetLoginPortalDefaultSchema = exports.AuthDisablePortalResponseSchema = exports.AuthDisablePortalSchema = exports.AuthListPortalsResponseSchema = exports.AuthListPortalsSchema = exports.AuthCreatePortalResponseSchema = exports.AuthCreatePortalSchema = exports.DeviceConnectInfoSchema = exports.AuthDeviceActivationReviewRequestedEventSchema = exports.DeviceActivationReviewSchema = exports.DeviceActivationRecordSchema = exports.DeviceActivationActorSchema = exports.DeviceSchema = exports.DeviceMetadataSchema = exports.DeviceProfileSchema = exports.PortalFlowStateSchema = exports.DevicePortalSelectionSchema = exports.LoginPortalSelectionSchema = exports.DevicePortalDefaultSchema = exports.LoginPortalDefaultSchema = exports.PortalSchema = exports.AuthRevokeApprovalResponseSchema = exports.AuthRevokeApprovalSchema = exports.AuthListApprovalsResponseSchema = exports.AuthListApprovalsSchema = exports.AuthValidateRequestResponseSchema = exports.CallerViewSchema = exports.AuthMeResponseSchema = exports.AuthenticatedDeviceSchema = exports.AuthenticatedServiceSchema = exports.AuthValidateRequestSchema = exports.AuthMeSchema = exports.AuthenticatedUserSchema = exports.AuthGetInstalledContractResponseSchema = exports.AuthGetInstalledContractSchema = exports.AuthListInstalledContractsResponseSchema = exports.AuthListInstalledContractsSchema = exports.InstalledContractDetailSchema = void 0;
+exports.AuthUpdateUserSchema = exports.AuthListUsersResponseSchema = exports.AuthListUsersSchema = exports.UserViewSchema = exports.AuthDecideDeviceActivationReviewResponseSchema = exports.AuthDecideDeviceActivationReviewSchema = exports.AuthListDeviceActivationReviewsResponseSchema = exports.AuthListDeviceActivationReviewsSchema = exports.AuthRevokeDeviceActivationResponseSchema = exports.AuthRevokeDeviceActivationSchema = exports.AuthListDeviceActivationsResponseSchema = exports.AuthListDeviceActivationsSchema = exports.AuthGetDeviceConnectInfoResponseSchema = exports.AuthGetDeviceConnectInfoSchema = exports.WaitForDeviceActivationResponseSchema = exports.AuthGetDeviceActivationStatusResponseSchema = exports.AuthGetDeviceActivationStatusSchema = exports.AuthActivateDeviceResponseSchema = exports.AuthActivateDeviceSchema = exports.AuthRemoveDeviceInstanceResponseSchema = exports.AuthRemoveDeviceInstanceSchema = exports.AuthEnableDeviceInstanceResponseSchema = exports.AuthEnableDeviceInstanceSchema = exports.AuthDisableDeviceInstanceResponseSchema = exports.AuthDisableDeviceInstanceSchema = exports.AuthListDeviceInstancesResponseSchema = exports.AuthListDeviceInstancesSchema = exports.AuthProvisionDeviceInstanceResponseSchema = exports.AuthProvisionDeviceInstanceSchema = exports.AuthRemoveDeviceProfileResponseSchema = exports.AuthRemoveDeviceProfileSchema = exports.AuthEnableDeviceProfileResponseSchema = exports.AuthEnableDeviceProfileSchema = exports.AuthDisableDeviceProfileResponseSchema = exports.AuthDisableDeviceProfileSchema = exports.AuthUnapplyDeviceProfileContractResponseSchema = exports.AuthUnapplyDeviceProfileContractSchema = exports.AuthApplyDeviceProfileContractResponseSchema = exports.AuthApplyDeviceProfileContractSchema = exports.AuthListDeviceProfilesResponseSchema = exports.AuthListDeviceProfilesSchema = exports.AuthCreateDeviceProfileResponseSchema = exports.AuthCreateDeviceProfileSchema = exports.AuthClearDevicePortalSelectionResponseSchema = exports.AuthClearDevicePortalSelectionSchema = exports.AuthSetDevicePortalSelectionResponseSchema = exports.AuthSetDevicePortalSelectionSchema = exports.AuthListDevicePortalSelectionsResponseSchema = exports.AuthListDevicePortalSelectionsSchema = exports.AuthSetDevicePortalDefaultResponseSchema = void 0;
+exports.AuthUpdateUserResponseSchema = void 0;
+const contracts_1 = require("@qlever-llc/trellis/contracts");
+const typebox_1 = require("typebox");
+const schemas_ts_1 = require("./schemas.js");
+const IsoDateStringSchema = typebox_1.Type.String({ format: "date-time" });
+exports.DigestSchema = typebox_1.Type.String({ pattern: "^[A-Za-z0-9_-]+$" });
+exports.OpenObjectSchema = typebox_1.Type.Unsafe({
+    type: "object",
+});
+exports.AppliedProfileContractSchema = typebox_1.Type.Object({
+    contractId: typebox_1.Type.String({ minLength: 1 }),
+    allowedDigests: typebox_1.Type.Array(exports.DigestSchema),
+});
+exports.ServiceProfileSchema = typebox_1.Type.Object({
+    profileId: typebox_1.Type.String({ minLength: 1 }),
+    namespaces: typebox_1.Type.Array(typebox_1.Type.String({ minLength: 1 })),
+    disabled: typebox_1.Type.Boolean(),
+    appliedContracts: typebox_1.Type.Array(exports.AppliedProfileContractSchema),
+});
+exports.ServiceInstanceSchema = typebox_1.Type.Object({
+    instanceId: typebox_1.Type.String({ minLength: 1 }),
+    profileId: typebox_1.Type.String({ minLength: 1 }),
+    instanceKey: typebox_1.Type.String({ minLength: 1 }),
+    disabled: typebox_1.Type.Boolean(),
+    currentContractId: typebox_1.Type.Optional(typebox_1.Type.String({ minLength: 1 })),
+    currentContractDigest: typebox_1.Type.Optional(exports.DigestSchema),
+    capabilities: typebox_1.Type.Array(typebox_1.Type.String()),
+    resourceBindings: typebox_1.Type.Optional(contracts_1.ContractResourceBindingsSchema),
+    createdAt: IsoDateStringSchema,
+});
+exports.ApprovalDecisionSchema = typebox_1.Type.Union([
+    typebox_1.Type.Literal("approved"),
+    typebox_1.Type.Literal("denied"),
+]);
+exports.ContractApprovalViewSchema = typebox_1.Type.Object({
+    contractDigest: exports.DigestSchema,
+    contractId: typebox_1.Type.String({ minLength: 1 }),
+    displayName: typebox_1.Type.String({ minLength: 1 }),
+    description: typebox_1.Type.String({ minLength: 1 }),
+    capabilities: typebox_1.Type.Array(typebox_1.Type.String()),
+});
+exports.ApprovalRecordViewSchema = typebox_1.Type.Object({
+    user: typebox_1.Type.String({ minLength: 1 }),
+    answer: exports.ApprovalDecisionSchema,
+    answeredAt: IsoDateStringSchema,
+    updatedAt: IsoDateStringSchema,
+    approval: exports.ContractApprovalViewSchema,
+});
+exports.InstanceGrantPolicyActorSchema = typebox_1.Type.Object({
+    origin: typebox_1.Type.String({ minLength: 1 }),
+    id: typebox_1.Type.String({ minLength: 1 }),
+});
+exports.InstanceGrantPolicySchema = typebox_1.Type.Object({
+    contractId: typebox_1.Type.String({ minLength: 1 }),
+    allowedOrigins: typebox_1.Type.Optional(typebox_1.Type.Array(typebox_1.Type.String({ minLength: 1 }))),
+    impliedCapabilities: typebox_1.Type.Array(typebox_1.Type.String()),
+    disabled: typebox_1.Type.Boolean(),
+    createdAt: IsoDateStringSchema,
+    updatedAt: IsoDateStringSchema,
+    source: typebox_1.Type.Object({
+        kind: typebox_1.Type.Literal("admin_policy"),
+        createdBy: typebox_1.Type.Optional(exports.InstanceGrantPolicyActorSchema),
+        updatedBy: typebox_1.Type.Optional(exports.InstanceGrantPolicyActorSchema),
+    }),
+});
+exports.AuthListInstanceGrantPoliciesSchema = typebox_1.Type.Object({});
+exports.AuthListInstanceGrantPoliciesResponseSchema = typebox_1.Type.Object({
+    policies: typebox_1.Type.Array(exports.InstanceGrantPolicySchema),
+});
+exports.AuthUpsertInstanceGrantPolicySchema = typebox_1.Type.Object({
+    contractId: typebox_1.Type.String({ minLength: 1 }),
+    allowedOrigins: typebox_1.Type.Optional(typebox_1.Type.Array(typebox_1.Type.String({ minLength: 1 }))),
+    impliedCapabilities: typebox_1.Type.Array(typebox_1.Type.String()),
+});
+exports.AuthUpsertInstanceGrantPolicyResponseSchema = typebox_1.Type.Object({
+    policy: exports.InstanceGrantPolicySchema,
+});
+exports.AuthDisableInstanceGrantPolicySchema = typebox_1.Type.Object({
+    contractId: typebox_1.Type.String({ minLength: 1 }),
+});
+exports.AuthDisableInstanceGrantPolicyResponseSchema = typebox_1.Type.Object({
+    policy: exports.InstanceGrantPolicySchema,
+});
+exports.AuthCreateServiceProfileSchema = typebox_1.Type.Object({
+    profileId: typebox_1.Type.String({ minLength: 1 }),
+    namespaces: typebox_1.Type.Array(typebox_1.Type.String({ minLength: 1 })),
+});
+exports.AuthCreateServiceProfileResponseSchema = typebox_1.Type.Object({
+    profile: exports.ServiceProfileSchema,
+});
+exports.AuthListServiceProfilesSchema = typebox_1.Type.Object({
+    disabled: typebox_1.Type.Optional(typebox_1.Type.Boolean()),
+});
+exports.AuthListServiceProfilesResponseSchema = typebox_1.Type.Object({
+    profiles: typebox_1.Type.Array(exports.ServiceProfileSchema),
+});
+exports.AuthApplyServiceProfileContractSchema = typebox_1.Type.Object({
+    profileId: typebox_1.Type.String({ minLength: 1 }),
+    contract: exports.OpenObjectSchema,
+});
+exports.AuthApplyServiceProfileContractResponseSchema = typebox_1.Type.Object({
+    profile: exports.ServiceProfileSchema,
+    contract: typebox_1.Type.Object({
+        digest: exports.DigestSchema,
+        id: typebox_1.Type.String({ minLength: 1 }),
+        displayName: typebox_1.Type.String({ minLength: 1 }),
+        description: typebox_1.Type.String({ minLength: 1 }),
+        installedAt: IsoDateStringSchema,
+    }),
+});
+exports.AuthUnapplyServiceProfileContractSchema = typebox_1.Type.Object({
+    profileId: typebox_1.Type.String({ minLength: 1 }),
+    contractId: typebox_1.Type.String({ minLength: 1 }),
+    digests: typebox_1.Type.Optional(typebox_1.Type.Array(exports.DigestSchema)),
+});
+exports.AuthUnapplyServiceProfileContractResponseSchema = typebox_1.Type.Object({
+    profile: exports.ServiceProfileSchema,
+});
+exports.AuthDisableServiceProfileSchema = typebox_1.Type.Object({
+    profileId: typebox_1.Type.String({ minLength: 1 }),
+});
+exports.AuthDisableServiceProfileResponseSchema = typebox_1.Type.Object({
+    profile: exports.ServiceProfileSchema,
+});
+exports.AuthEnableServiceProfileSchema = typebox_1.Type.Object({
+    profileId: typebox_1.Type.String({ minLength: 1 }),
+});
+exports.AuthEnableServiceProfileResponseSchema = typebox_1.Type.Object({
+    profile: exports.ServiceProfileSchema,
+});
+exports.AuthRemoveServiceProfileSchema = typebox_1.Type.Object({
+    profileId: typebox_1.Type.String({ minLength: 1 }),
+});
+exports.AuthRemoveServiceProfileResponseSchema = typebox_1.Type.Object({
+    success: typebox_1.Type.Boolean(),
+});
+exports.AuthProvisionServiceInstanceSchema = typebox_1.Type.Object({
+    profileId: typebox_1.Type.String({ minLength: 1 }),
+    instanceKey: typebox_1.Type.String({ minLength: 1 }),
+});
+exports.AuthProvisionServiceInstanceResponseSchema = typebox_1.Type.Object({
+    instance: exports.ServiceInstanceSchema,
+});
+exports.AuthListServiceInstancesSchema = typebox_1.Type.Object({
+    profileId: typebox_1.Type.Optional(typebox_1.Type.String({ minLength: 1 })),
+    disabled: typebox_1.Type.Optional(typebox_1.Type.Boolean()),
+});
+exports.AuthListServiceInstancesResponseSchema = typebox_1.Type.Object({
+    instances: typebox_1.Type.Array(exports.ServiceInstanceSchema),
+});
+exports.AuthDisableServiceInstanceSchema = typebox_1.Type.Object({
+    instanceId: typebox_1.Type.String({ minLength: 1 }),
+});
+exports.AuthDisableServiceInstanceResponseSchema = typebox_1.Type.Object({
+    instance: exports.ServiceInstanceSchema,
+});
+exports.AuthEnableServiceInstanceSchema = typebox_1.Type.Object({
+    instanceId: typebox_1.Type.String({ minLength: 1 }),
+});
+exports.AuthEnableServiceInstanceResponseSchema = typebox_1.Type.Object({
+    instance: exports.ServiceInstanceSchema,
+});
+exports.AuthRemoveServiceInstanceSchema = typebox_1.Type.Object({
+    instanceId: typebox_1.Type.String({ minLength: 1 }),
+});
+exports.AuthRemoveServiceInstanceResponseSchema = typebox_1.Type.Object({
+    success: typebox_1.Type.Boolean(),
+});
+exports.ContractAnalysisSummarySchema = typebox_1.Type.Object({
+    namespaces: typebox_1.Type.Array(typebox_1.Type.String()),
+    rpcMethods: typebox_1.Type.Number(),
+    events: typebox_1.Type.Number(),
+    natsPublish: typebox_1.Type.Number(),
+    natsSubscribe: typebox_1.Type.Number(),
+    kvResources: typebox_1.Type.Number(),
+    jobsQueues: typebox_1.Type.Number(),
+    streamResources: typebox_1.Type.Number(),
+});
+exports.ContractAnalysisKvResourceSchema = typebox_1.Type.Object({
+    alias: typebox_1.Type.String({ minLength: 1 }),
+    purpose: typebox_1.Type.String({ minLength: 1 }),
+    required: typebox_1.Type.Boolean(),
+    history: typebox_1.Type.Number(),
+    ttlMs: typebox_1.Type.Number(),
+    maxValueBytes: typebox_1.Type.Optional(typebox_1.Type.Number()),
+});
+exports.ContractAnalysisJobsQueueSchema = typebox_1.Type.Object({
+    queueType: typebox_1.Type.String({ minLength: 1 }),
+    payload: typebox_1.Type.Object({ schema: typebox_1.Type.String({ minLength: 1 }) }),
+    result: typebox_1.Type.Optional(typebox_1.Type.Object({ schema: typebox_1.Type.String({ minLength: 1 }) })),
+    maxDeliver: typebox_1.Type.Number(),
+    backoffMs: typebox_1.Type.Array(typebox_1.Type.Number()),
+    ackWaitMs: typebox_1.Type.Number(),
+    defaultDeadlineMs: typebox_1.Type.Optional(typebox_1.Type.Number()),
+    progress: typebox_1.Type.Boolean(),
+    logs: typebox_1.Type.Boolean(),
+    dlq: typebox_1.Type.Boolean(),
+    concurrency: typebox_1.Type.Number(),
+});
+exports.ContractAnalysisStreamResourceSchema = typebox_1.Type.Object({
+    alias: typebox_1.Type.String({ minLength: 1 }),
+    purpose: typebox_1.Type.String({ minLength: 1 }),
+    required: typebox_1.Type.Boolean(),
+    retention: typebox_1.Type.Optional(typebox_1.Type.String({ minLength: 1 })),
+    storage: typebox_1.Type.Optional(typebox_1.Type.String({ minLength: 1 })),
+    numReplicas: typebox_1.Type.Optional(typebox_1.Type.Number()),
+    maxAgeMs: typebox_1.Type.Optional(typebox_1.Type.Number()),
+    maxBytes: typebox_1.Type.Optional(typebox_1.Type.Number()),
+    maxMsgs: typebox_1.Type.Optional(typebox_1.Type.Number()),
+    discard: typebox_1.Type.Optional(typebox_1.Type.String({ minLength: 1 })),
+    subjects: typebox_1.Type.Array(typebox_1.Type.String({ minLength: 1 }), { minItems: 1 }),
+    sources: typebox_1.Type.Optional(typebox_1.Type.Array(typebox_1.Type.Object({
+        fromAlias: typebox_1.Type.String({ minLength: 1 }),
+        streamName: typebox_1.Type.String({ minLength: 1 }),
+        filterSubject: typebox_1.Type.Optional(typebox_1.Type.String({ minLength: 1 })),
+        subjectTransformDest: typebox_1.Type.Optional(typebox_1.Type.String({ minLength: 1 })),
+    }))),
+});
+exports.ContractAnalysisRpcMethodSchema = typebox_1.Type.Object({
+    key: typebox_1.Type.String(),
+    subject: typebox_1.Type.String(),
+    wildcardSubject: typebox_1.Type.String(),
+    callerCapabilities: typebox_1.Type.Array(typebox_1.Type.String()),
+});
+exports.ContractAnalysisEventSchema = typebox_1.Type.Object({
+    key: typebox_1.Type.String(),
+    subject: typebox_1.Type.String(),
+    wildcardSubject: typebox_1.Type.String(),
+    publishCapabilities: typebox_1.Type.Array(typebox_1.Type.String()),
+    subscribeCapabilities: typebox_1.Type.Array(typebox_1.Type.String()),
+});
+exports.ContractAnalysisSubjectSchema = typebox_1.Type.Object({
+    key: typebox_1.Type.String(),
+    subject: typebox_1.Type.String(),
+    publishCapabilities: typebox_1.Type.Array(typebox_1.Type.String()),
+    subscribeCapabilities: typebox_1.Type.Array(typebox_1.Type.String()),
+});
+exports.ContractAnalysisNatsRuleSchema = typebox_1.Type.Object({
+    kind: typebox_1.Type.String(),
+    subject: typebox_1.Type.String(),
+    wildcardSubject: typebox_1.Type.String(),
+    requiredCapabilities: typebox_1.Type.Array(typebox_1.Type.String()),
+});
+exports.ContractAnalysisSchema = typebox_1.Type.Object({
+    namespaces: typebox_1.Type.Array(typebox_1.Type.String()),
+    rpc: typebox_1.Type.Object({ methods: typebox_1.Type.Array(exports.ContractAnalysisRpcMethodSchema) }),
+    events: typebox_1.Type.Object({ events: typebox_1.Type.Array(exports.ContractAnalysisEventSchema) }),
+    subjects: typebox_1.Type.Optional(typebox_1.Type.Object({ subjects: typebox_1.Type.Array(exports.ContractAnalysisSubjectSchema) })),
+    nats: typebox_1.Type.Object({
+        publish: typebox_1.Type.Array(exports.ContractAnalysisNatsRuleSchema),
+        subscribe: typebox_1.Type.Array(exports.ContractAnalysisNatsRuleSchema),
+    }),
+    resources: typebox_1.Type.Object({
+        kv: typebox_1.Type.Array(exports.ContractAnalysisKvResourceSchema),
+        jobs: typebox_1.Type.Array(exports.ContractAnalysisJobsQueueSchema),
+        streams: typebox_1.Type.Array(exports.ContractAnalysisStreamResourceSchema),
+    }),
+});
+exports.InstalledContractSchema = typebox_1.Type.Object({
+    digest: exports.DigestSchema,
+    id: typebox_1.Type.String({ minLength: 1 }),
+    displayName: typebox_1.Type.String({ minLength: 1 }),
+    description: typebox_1.Type.String({ minLength: 1 }),
+    installedAt: IsoDateStringSchema,
+    analysisSummary: typebox_1.Type.Optional(exports.ContractAnalysisSummarySchema),
+});
+exports.InstalledContractDetailSchema = typebox_1.Type.Object({
+    digest: exports.DigestSchema,
+    id: typebox_1.Type.String({ minLength: 1 }),
+    displayName: typebox_1.Type.String({ minLength: 1 }),
+    description: typebox_1.Type.String({ minLength: 1 }),
+    installedAt: IsoDateStringSchema,
+    analysisSummary: typebox_1.Type.Optional(exports.ContractAnalysisSummarySchema),
+    analysis: typebox_1.Type.Optional(exports.ContractAnalysisSchema),
+    resources: typebox_1.Type.Optional(contracts_1.ContractResourcesSchema),
+    contract: exports.OpenObjectSchema,
+});
+exports.AuthListInstalledContractsSchema = typebox_1.Type.Object({});
+exports.AuthListInstalledContractsResponseSchema = typebox_1.Type.Object({
+    contracts: typebox_1.Type.Array(exports.InstalledContractSchema),
+});
+exports.AuthGetInstalledContractSchema = typebox_1.Type.Object({
+    digest: exports.DigestSchema,
+});
+exports.AuthGetInstalledContractResponseSchema = typebox_1.Type.Object({
+    contract: exports.InstalledContractDetailSchema,
+});
+exports.AuthenticatedUserSchema = typebox_1.Type.Object({
+    id: typebox_1.Type.String(),
+    origin: typebox_1.Type.String(),
+    active: typebox_1.Type.Boolean(),
+    name: typebox_1.Type.String(),
+    email: typebox_1.Type.String(),
+    image: typebox_1.Type.Optional(typebox_1.Type.String()),
+    capabilities: typebox_1.Type.Array(typebox_1.Type.String()),
+    lastLogin: typebox_1.Type.Optional(IsoDateStringSchema),
+});
+exports.AuthMeSchema = typebox_1.Type.Object({});
+exports.AuthValidateRequestSchema = typebox_1.Type.Object({
+    sessionKey: typebox_1.Type.String(),
+    proof: typebox_1.Type.String(),
+    subject: typebox_1.Type.String(),
+    payloadHash: typebox_1.Type.String(),
+    capabilities: typebox_1.Type.Optional(typebox_1.Type.Array(typebox_1.Type.String())),
+}, { additionalProperties: false });
+exports.AuthenticatedServiceSchema = typebox_1.Type.Object({
+    type: typebox_1.Type.Literal("service"),
+    id: typebox_1.Type.String(),
+    name: typebox_1.Type.String(),
+    active: typebox_1.Type.Boolean(),
+    capabilities: typebox_1.Type.Array(typebox_1.Type.String()),
+});
+exports.AuthenticatedDeviceSchema = typebox_1.Type.Object({
+    type: typebox_1.Type.Literal("device"),
+    deviceId: typebox_1.Type.String({ minLength: 1 }),
+    deviceType: typebox_1.Type.String({ minLength: 1 }),
+    runtimePublicKey: typebox_1.Type.String({ minLength: 1 }),
+    profileId: typebox_1.Type.String({ minLength: 1 }),
+    active: typebox_1.Type.Boolean(),
+    capabilities: typebox_1.Type.Array(typebox_1.Type.String()),
+});
+const NullableAuthenticatedUserSchema = typebox_1.Type.Union([
+    exports.AuthenticatedUserSchema,
+    typebox_1.Type.Null(),
+]);
+const NullableAuthenticatedDeviceSchema = typebox_1.Type.Union([
+    exports.AuthenticatedDeviceSchema,
+    typebox_1.Type.Null(),
+]);
+const NullableAuthenticatedServiceSchema = typebox_1.Type.Union([
+    exports.AuthenticatedServiceSchema,
+    typebox_1.Type.Null(),
+]);
+exports.AuthMeResponseSchema = typebox_1.Type.Object({
+    user: NullableAuthenticatedUserSchema,
+    device: NullableAuthenticatedDeviceSchema,
+    service: NullableAuthenticatedServiceSchema,
+});
+exports.CallerViewSchema = typebox_1.Type.Union([
+    typebox_1.Type.Object({
+        type: typebox_1.Type.Literal("user"),
+        trellisId: typebox_1.Type.String(),
+        id: typebox_1.Type.String(),
+        origin: typebox_1.Type.String(),
+        active: typebox_1.Type.Boolean(),
+        name: typebox_1.Type.String(),
+        email: typebox_1.Type.String(),
+        image: typebox_1.Type.Optional(typebox_1.Type.String()),
+        capabilities: typebox_1.Type.Array(typebox_1.Type.String()),
+    }),
+    exports.AuthenticatedServiceSchema,
+    exports.AuthenticatedDeviceSchema,
+]);
+exports.AuthValidateRequestResponseSchema = typebox_1.Type.Object({
+    allowed: typebox_1.Type.Boolean(),
+    inboxPrefix: typebox_1.Type.String(),
+    caller: exports.CallerViewSchema,
+});
+exports.AuthListApprovalsSchema = typebox_1.Type.Object({
+    user: typebox_1.Type.Optional(typebox_1.Type.String({ minLength: 1 })),
+    digest: typebox_1.Type.Optional(exports.DigestSchema),
+});
+exports.AuthListApprovalsResponseSchema = typebox_1.Type.Object({
+    approvals: typebox_1.Type.Array(exports.ApprovalRecordViewSchema),
+});
+exports.AuthRevokeApprovalSchema = typebox_1.Type.Object({
+    contractDigest: exports.DigestSchema,
+    user: typebox_1.Type.Optional(typebox_1.Type.String({ minLength: 1 })),
+});
+exports.AuthRevokeApprovalResponseSchema = typebox_1.Type.Object({
+    success: typebox_1.Type.Boolean(),
+});
+exports.PortalSchema = typebox_1.Type.Object({
+    portalId: typebox_1.Type.String({ minLength: 1 }),
+    appContractId: typebox_1.Type.Optional(typebox_1.Type.String({ minLength: 1 })),
+    entryUrl: typebox_1.Type.String({ minLength: 1 }),
+    disabled: typebox_1.Type.Boolean(),
+});
+const NullablePortalIdSchema = typebox_1.Type.Union([
+    typebox_1.Type.String({ minLength: 1 }),
+    typebox_1.Type.Null(),
+]);
+exports.LoginPortalDefaultSchema = typebox_1.Type.Object({
+    portalId: NullablePortalIdSchema,
+});
+exports.DevicePortalDefaultSchema = typebox_1.Type.Object({
+    portalId: NullablePortalIdSchema,
+});
+exports.LoginPortalSelectionSchema = typebox_1.Type.Object({
+    contractId: typebox_1.Type.String({ minLength: 1 }),
+    portalId: NullablePortalIdSchema,
+});
+exports.DevicePortalSelectionSchema = typebox_1.Type.Object({
+    profileId: typebox_1.Type.String({ minLength: 1 }),
+    portalId: NullablePortalIdSchema,
+});
+exports.PortalFlowStateSchema = typebox_1.Type.Union([
+    typebox_1.Type.Object({
+        status: typebox_1.Type.Literal("choose_provider"),
+        flowId: typebox_1.Type.String({ minLength: 1 }),
+        providers: typebox_1.Type.Array(typebox_1.Type.Object({
+            id: typebox_1.Type.String({ minLength: 1 }),
+            displayName: typebox_1.Type.String({ minLength: 1 }),
+        })),
+        app: typebox_1.Type.Object({
+            contractId: typebox_1.Type.String({ minLength: 1 }),
+            contractDigest: exports.DigestSchema,
+            displayName: typebox_1.Type.String({ minLength: 1 }),
+            description: typebox_1.Type.String({ minLength: 1 }),
+            context: typebox_1.Type.Optional(exports.OpenObjectSchema),
+        }),
+    }),
+    typebox_1.Type.Object({
+        status: typebox_1.Type.Literal("approval_required"),
+        flowId: typebox_1.Type.String({ minLength: 1 }),
+        user: typebox_1.Type.Object({
+            origin: typebox_1.Type.String({ minLength: 1 }),
+            id: typebox_1.Type.String({ minLength: 1 }),
+            name: typebox_1.Type.Optional(typebox_1.Type.String({ minLength: 1 })),
+            email: typebox_1.Type.Optional(typebox_1.Type.String({ minLength: 1 })),
+            image: typebox_1.Type.Optional(typebox_1.Type.String({ minLength: 1 })),
+        }),
+        approval: exports.ContractApprovalViewSchema,
+    }),
+    typebox_1.Type.Object({
+        status: typebox_1.Type.Literal("approval_denied"),
+        flowId: typebox_1.Type.String({ minLength: 1 }),
+        approval: exports.ContractApprovalViewSchema,
+        returnLocation: typebox_1.Type.Optional(typebox_1.Type.String({ minLength: 1 })),
+    }),
+    typebox_1.Type.Object({
+        status: typebox_1.Type.Literal("insufficient_capabilities"),
+        flowId: typebox_1.Type.String({ minLength: 1 }),
+        user: typebox_1.Type.Optional(typebox_1.Type.Object({
+            origin: typebox_1.Type.String({ minLength: 1 }),
+            id: typebox_1.Type.String({ minLength: 1 }),
+            name: typebox_1.Type.Optional(typebox_1.Type.String({ minLength: 1 })),
+        })),
+        approval: exports.ContractApprovalViewSchema,
+        missingCapabilities: typebox_1.Type.Array(typebox_1.Type.String()),
+        userCapabilities: typebox_1.Type.Array(typebox_1.Type.String()),
+        returnLocation: typebox_1.Type.Optional(typebox_1.Type.String({ minLength: 1 })),
+    }),
+    typebox_1.Type.Object({
+        status: typebox_1.Type.Literal("redirect"),
+        location: typebox_1.Type.String({ minLength: 1 }),
+    }),
+    typebox_1.Type.Object({
+        status: typebox_1.Type.Literal("expired"),
+    }),
+]);
+exports.DeviceProfileSchema = typebox_1.Type.Object({
+    profileId: typebox_1.Type.String({ minLength: 1 }),
+    reviewMode: typebox_1.Type.Optional(typebox_1.Type.Union([typebox_1.Type.Literal("none"), typebox_1.Type.Literal("required")])),
+    disabled: typebox_1.Type.Boolean(),
+    appliedContracts: typebox_1.Type.Array(exports.AppliedProfileContractSchema),
+});
+exports.DeviceMetadataSchema = typebox_1.Type.Record(typebox_1.Type.String({ minLength: 1 }), typebox_1.Type.String({ minLength: 1 }));
+exports.DeviceSchema = typebox_1.Type.Object({
+    instanceId: typebox_1.Type.String({ minLength: 1 }),
+    publicIdentityKey: typebox_1.Type.String({ minLength: 1 }),
+    profileId: typebox_1.Type.String({ minLength: 1 }),
+    metadata: typebox_1.Type.Optional(exports.DeviceMetadataSchema),
+    state: typebox_1.Type.Union([
+        typebox_1.Type.Literal("registered"),
+        typebox_1.Type.Literal("activated"),
+        typebox_1.Type.Literal("revoked"),
+        typebox_1.Type.Literal("disabled"),
+    ]),
+    currentContractId: typebox_1.Type.Optional(typebox_1.Type.String({ minLength: 1 })),
+    currentContractDigest: typebox_1.Type.Optional(exports.DigestSchema),
+    createdAt: IsoDateStringSchema,
+    activatedAt: typebox_1.Type.Union([IsoDateStringSchema, typebox_1.Type.Null()]),
+    revokedAt: typebox_1.Type.Union([IsoDateStringSchema, typebox_1.Type.Null()]),
+});
+exports.DeviceActivationActorSchema = typebox_1.Type.Object({
+    origin: typebox_1.Type.String({ minLength: 1 }),
+    id: typebox_1.Type.String({ minLength: 1 }),
+});
+exports.DeviceActivationRecordSchema = typebox_1.Type.Object({
+    instanceId: typebox_1.Type.String({ minLength: 1 }),
+    publicIdentityKey: typebox_1.Type.String({ minLength: 1 }),
+    profileId: typebox_1.Type.String({ minLength: 1 }),
+    activatedBy: typebox_1.Type.Optional(exports.DeviceActivationActorSchema),
+    state: typebox_1.Type.Union([typebox_1.Type.Literal("activated"), typebox_1.Type.Literal("revoked")]),
+    activatedAt: IsoDateStringSchema,
+    revokedAt: typebox_1.Type.Union([IsoDateStringSchema, typebox_1.Type.Null()]),
+});
+exports.DeviceActivationReviewSchema = typebox_1.Type.Object({
+    reviewId: typebox_1.Type.String({ minLength: 1 }),
+    linkRequestId: typebox_1.Type.String({ minLength: 1 }),
+    instanceId: typebox_1.Type.String({ minLength: 1 }),
+    publicIdentityKey: typebox_1.Type.String({ minLength: 1 }),
+    profileId: typebox_1.Type.String({ minLength: 1 }),
+    state: typebox_1.Type.Union([
+        typebox_1.Type.Literal("pending"),
+        typebox_1.Type.Literal("approved"),
+        typebox_1.Type.Literal("rejected"),
+    ]),
+    requestedAt: IsoDateStringSchema,
+    decidedAt: typebox_1.Type.Union([IsoDateStringSchema, typebox_1.Type.Null()]),
+    reason: typebox_1.Type.Optional(typebox_1.Type.String({ minLength: 1 })),
+});
+exports.AuthDeviceActivationReviewRequestedEventSchema = typebox_1.Type.Object({
+    reviewId: typebox_1.Type.String({ minLength: 1 }),
+    linkRequestId: typebox_1.Type.String({ minLength: 1 }),
+    flowId: typebox_1.Type.String({ minLength: 1 }),
+    instanceId: typebox_1.Type.String({ minLength: 1 }),
+    publicIdentityKey: typebox_1.Type.String({ minLength: 1 }),
+    profileId: typebox_1.Type.String({ minLength: 1 }),
+    requestedAt: IsoDateStringSchema,
+    requestedBy: typebox_1.Type.Object({
+        origin: typebox_1.Type.String({ minLength: 1 }),
+        id: typebox_1.Type.String({ minLength: 1 }),
+    }),
+});
+exports.DeviceConnectInfoSchema = typebox_1.Type.Object({
+    instanceId: typebox_1.Type.String({ minLength: 1 }),
+    profileId: typebox_1.Type.String({ minLength: 1 }),
+    contractId: typebox_1.Type.String({ minLength: 1 }),
+    contractDigest: exports.DigestSchema,
+    transports: schemas_ts_1.ClientTransportsSchema,
+    transport: typebox_1.Type.Object({
+        sentinel: schemas_ts_1.SentinelCredsSchema,
+    }),
+    auth: typebox_1.Type.Object({
+        mode: typebox_1.Type.Literal("device_identity"),
+        iatSkewSeconds: typebox_1.Type.Number(),
+    }),
+});
+exports.AuthCreatePortalSchema = typebox_1.Type.Object({
+    portalId: typebox_1.Type.String({ minLength: 1 }),
+    appContractId: typebox_1.Type.Optional(typebox_1.Type.String({ minLength: 1 })),
+    entryUrl: typebox_1.Type.String({ minLength: 1 }),
+});
+exports.AuthCreatePortalResponseSchema = typebox_1.Type.Object({
+    portal: exports.PortalSchema,
+});
+exports.AuthListPortalsSchema = typebox_1.Type.Object({});
+exports.AuthListPortalsResponseSchema = typebox_1.Type.Object({
+    portals: typebox_1.Type.Array(exports.PortalSchema),
+});
+exports.AuthDisablePortalSchema = typebox_1.Type.Object({
+    portalId: typebox_1.Type.String({ minLength: 1 }),
+});
+exports.AuthDisablePortalResponseSchema = typebox_1.Type.Object({
+    success: typebox_1.Type.Boolean(),
+});
+exports.AuthGetLoginPortalDefaultSchema = typebox_1.Type.Object({});
+exports.AuthGetLoginPortalDefaultResponseSchema = typebox_1.Type.Object({
+    defaultPortal: exports.LoginPortalDefaultSchema,
+});
+exports.AuthSetLoginPortalDefaultSchema = typebox_1.Type.Object({
+    portalId: NullablePortalIdSchema,
+});
+exports.AuthSetLoginPortalDefaultResponseSchema = typebox_1.Type.Object({
+    defaultPortal: exports.LoginPortalDefaultSchema,
+});
+exports.AuthListLoginPortalSelectionsSchema = typebox_1.Type.Object({});
+exports.AuthListLoginPortalSelectionsResponseSchema = typebox_1.Type.Object({
+    selections: typebox_1.Type.Array(exports.LoginPortalSelectionSchema),
+});
+exports.AuthSetLoginPortalSelectionSchema = typebox_1.Type.Object({
+    contractId: typebox_1.Type.String({ minLength: 1 }),
+    portalId: NullablePortalIdSchema,
+});
+exports.AuthSetLoginPortalSelectionResponseSchema = typebox_1.Type.Object({
+    selection: exports.LoginPortalSelectionSchema,
+});
+exports.AuthClearLoginPortalSelectionSchema = typebox_1.Type.Object({
+    contractId: typebox_1.Type.String({ minLength: 1 }),
+});
+exports.AuthClearLoginPortalSelectionResponseSchema = typebox_1.Type.Object({
+    success: typebox_1.Type.Boolean(),
+});
+exports.AuthGetDevicePortalDefaultSchema = typebox_1.Type.Object({});
+exports.AuthGetDevicePortalDefaultResponseSchema = typebox_1.Type.Object({
+    defaultPortal: exports.DevicePortalDefaultSchema,
+});
+exports.AuthSetDevicePortalDefaultSchema = typebox_1.Type.Object({
+    portalId: NullablePortalIdSchema,
+});
+exports.AuthSetDevicePortalDefaultResponseSchema = typebox_1.Type.Object({
+    defaultPortal: exports.DevicePortalDefaultSchema,
+});
+exports.AuthListDevicePortalSelectionsSchema = typebox_1.Type.Object({});
+exports.AuthListDevicePortalSelectionsResponseSchema = typebox_1.Type.Object({
+    selections: typebox_1.Type.Array(exports.DevicePortalSelectionSchema),
+});
+exports.AuthSetDevicePortalSelectionSchema = typebox_1.Type.Object({
+    profileId: typebox_1.Type.String({ minLength: 1 }),
+    portalId: NullablePortalIdSchema,
+});
+exports.AuthSetDevicePortalSelectionResponseSchema = typebox_1.Type.Object({
+    selection: exports.DevicePortalSelectionSchema,
+});
+exports.AuthClearDevicePortalSelectionSchema = typebox_1.Type.Object({
+    profileId: typebox_1.Type.String({ minLength: 1 }),
+});
+exports.AuthClearDevicePortalSelectionResponseSchema = typebox_1.Type.Object({
+    success: typebox_1.Type.Boolean(),
+});
+exports.AuthCreateDeviceProfileSchema = typebox_1.Type.Object({
+    profileId: typebox_1.Type.String({ minLength: 1 }),
+    reviewMode: typebox_1.Type.Optional(typebox_1.Type.Union([typebox_1.Type.Literal("none"), typebox_1.Type.Literal("required")])),
+});
+exports.AuthCreateDeviceProfileResponseSchema = typebox_1.Type.Object({
+    profile: exports.DeviceProfileSchema,
+});
+exports.AuthListDeviceProfilesSchema = typebox_1.Type.Object({
+    disabled: typebox_1.Type.Optional(typebox_1.Type.Boolean()),
+});
+exports.AuthListDeviceProfilesResponseSchema = typebox_1.Type.Object({
+    profiles: typebox_1.Type.Array(exports.DeviceProfileSchema),
+});
+exports.AuthApplyDeviceProfileContractSchema = typebox_1.Type.Object({
+    profileId: typebox_1.Type.String({ minLength: 1 }),
+    contract: exports.OpenObjectSchema,
+});
+exports.AuthApplyDeviceProfileContractResponseSchema = typebox_1.Type.Object({
+    profile: exports.DeviceProfileSchema,
+    contract: typebox_1.Type.Object({
+        digest: exports.DigestSchema,
+        id: typebox_1.Type.String({ minLength: 1 }),
+        displayName: typebox_1.Type.String({ minLength: 1 }),
+        description: typebox_1.Type.String({ minLength: 1 }),
+        installedAt: IsoDateStringSchema,
+    }),
+});
+exports.AuthUnapplyDeviceProfileContractSchema = typebox_1.Type.Object({
+    profileId: typebox_1.Type.String({ minLength: 1 }),
+    contractId: typebox_1.Type.String({ minLength: 1 }),
+    digests: typebox_1.Type.Optional(typebox_1.Type.Array(exports.DigestSchema)),
+});
+exports.AuthUnapplyDeviceProfileContractResponseSchema = typebox_1.Type.Object({
+    profile: exports.DeviceProfileSchema,
+});
+exports.AuthDisableDeviceProfileSchema = typebox_1.Type.Object({
+    profileId: typebox_1.Type.String({ minLength: 1 }),
+});
+exports.AuthDisableDeviceProfileResponseSchema = typebox_1.Type.Object({
+    profile: exports.DeviceProfileSchema,
+});
+exports.AuthEnableDeviceProfileSchema = typebox_1.Type.Object({
+    profileId: typebox_1.Type.String({ minLength: 1 }),
+});
+exports.AuthEnableDeviceProfileResponseSchema = typebox_1.Type.Object({
+    profile: exports.DeviceProfileSchema,
+});
+exports.AuthRemoveDeviceProfileSchema = typebox_1.Type.Object({
+    profileId: typebox_1.Type.String({ minLength: 1 }),
+});
+exports.AuthRemoveDeviceProfileResponseSchema = typebox_1.Type.Object({
+    success: typebox_1.Type.Boolean(),
+});
+exports.AuthProvisionDeviceInstanceSchema = typebox_1.Type.Object({
+    profileId: typebox_1.Type.String({ minLength: 1 }),
+    publicIdentityKey: typebox_1.Type.String({ minLength: 1 }),
+    activationKey: typebox_1.Type.String({ minLength: 1 }),
+    metadata: typebox_1.Type.Optional(exports.DeviceMetadataSchema),
+});
+exports.AuthProvisionDeviceInstanceResponseSchema = typebox_1.Type.Object({
+    instance: exports.DeviceSchema,
+});
+exports.AuthListDeviceInstancesSchema = typebox_1.Type.Object({
+    profileId: typebox_1.Type.Optional(typebox_1.Type.String({ minLength: 1 })),
+    state: typebox_1.Type.Optional(typebox_1.Type.Union([
+        typebox_1.Type.Literal("registered"),
+        typebox_1.Type.Literal("activated"),
+        typebox_1.Type.Literal("revoked"),
+        typebox_1.Type.Literal("disabled"),
+    ])),
+});
+exports.AuthListDeviceInstancesResponseSchema = typebox_1.Type.Object({
+    instances: typebox_1.Type.Array(exports.DeviceSchema),
+});
+exports.AuthDisableDeviceInstanceSchema = typebox_1.Type.Object({
+    instanceId: typebox_1.Type.String({ minLength: 1 }),
+});
+exports.AuthDisableDeviceInstanceResponseSchema = typebox_1.Type.Object({
+    instance: exports.DeviceSchema,
+});
+exports.AuthEnableDeviceInstanceSchema = typebox_1.Type.Object({
+    instanceId: typebox_1.Type.String({ minLength: 1 }),
+});
+exports.AuthEnableDeviceInstanceResponseSchema = typebox_1.Type.Object({
+    instance: exports.DeviceSchema,
+});
+exports.AuthRemoveDeviceInstanceSchema = typebox_1.Type.Object({
+    instanceId: typebox_1.Type.String({ minLength: 1 }),
+});
+exports.AuthRemoveDeviceInstanceResponseSchema = typebox_1.Type.Object({
+    success: typebox_1.Type.Boolean(),
+});
+exports.AuthActivateDeviceSchema = typebox_1.Type.Object({
+    flowId: typebox_1.Type.String({ minLength: 1 }),
+    linkRequestId: typebox_1.Type.String({ minLength: 1 }),
+});
+exports.AuthActivateDeviceResponseSchema = typebox_1.Type.Union([
+    typebox_1.Type.Object({
+        status: typebox_1.Type.Literal("activated"),
+        instanceId: typebox_1.Type.String({ minLength: 1 }),
+        profileId: typebox_1.Type.String({ minLength: 1 }),
+        activatedAt: IsoDateStringSchema,
+        confirmationCode: typebox_1.Type.Optional(typebox_1.Type.String({ minLength: 1 })),
+    }),
+    typebox_1.Type.Object({
+        status: typebox_1.Type.Literal("pending_review"),
+        reviewId: typebox_1.Type.String({ minLength: 1 }),
+        linkRequestId: typebox_1.Type.String({ minLength: 1 }),
+        instanceId: typebox_1.Type.String({ minLength: 1 }),
+        profileId: typebox_1.Type.String({ minLength: 1 }),
+        requestedAt: IsoDateStringSchema,
+    }),
+    typebox_1.Type.Object({
+        status: typebox_1.Type.Literal("rejected"),
+        reason: typebox_1.Type.Optional(typebox_1.Type.String({ minLength: 1 })),
+    }),
+]);
+exports.AuthGetDeviceActivationStatusSchema = typebox_1.Type.Object({
+    flowId: typebox_1.Type.String({ minLength: 1 }),
+});
+exports.AuthGetDeviceActivationStatusResponseSchema = exports.AuthActivateDeviceResponseSchema;
+exports.WaitForDeviceActivationResponseSchema = typebox_1.Type.Union([
+    typebox_1.Type.Object({ status: typebox_1.Type.Literal("pending") }),
+    typebox_1.Type.Object({
+        status: typebox_1.Type.Literal("activated"),
+        activatedAt: IsoDateStringSchema,
+        confirmationCode: typebox_1.Type.Optional(typebox_1.Type.String({ minLength: 1 })),
+        connectInfo: exports.DeviceConnectInfoSchema,
+    }),
+    typebox_1.Type.Object({
+        status: typebox_1.Type.Literal("rejected"),
+        reason: typebox_1.Type.Optional(typebox_1.Type.String({ minLength: 1 })),
+    }),
+]);
+exports.AuthGetDeviceConnectInfoSchema = typebox_1.Type.Object({
+    publicIdentityKey: typebox_1.Type.String({ minLength: 1 }),
+    contractDigest: exports.DigestSchema,
+    iat: typebox_1.Type.Number(),
+    sig: typebox_1.Type.String({ minLength: 1 }),
+}, { additionalProperties: false });
+exports.AuthGetDeviceConnectInfoResponseSchema = typebox_1.Type.Object({
+    status: typebox_1.Type.Literal("ready"),
+    connectInfo: exports.DeviceConnectInfoSchema,
+});
+exports.AuthListDeviceActivationsSchema = typebox_1.Type.Object({
+    instanceId: typebox_1.Type.Optional(typebox_1.Type.String({ minLength: 1 })),
+    profileId: typebox_1.Type.Optional(typebox_1.Type.String({ minLength: 1 })),
+    state: typebox_1.Type.Optional(typebox_1.Type.Union([typebox_1.Type.Literal("activated"), typebox_1.Type.Literal("revoked")])),
+});
+exports.AuthListDeviceActivationsResponseSchema = typebox_1.Type.Object({
+    activations: typebox_1.Type.Array(exports.DeviceActivationRecordSchema),
+});
+exports.AuthRevokeDeviceActivationSchema = typebox_1.Type.Object({
+    instanceId: typebox_1.Type.String({ minLength: 1 }),
+});
+exports.AuthRevokeDeviceActivationResponseSchema = typebox_1.Type.Object({
+    success: typebox_1.Type.Boolean(),
+});
+exports.AuthListDeviceActivationReviewsSchema = typebox_1.Type.Object({
+    instanceId: typebox_1.Type.Optional(typebox_1.Type.String({ minLength: 1 })),
+    profileId: typebox_1.Type.Optional(typebox_1.Type.String({ minLength: 1 })),
+    state: typebox_1.Type.Optional(typebox_1.Type.Union([
+        typebox_1.Type.Literal("pending"),
+        typebox_1.Type.Literal("approved"),
+        typebox_1.Type.Literal("rejected"),
+    ])),
+});
+exports.AuthListDeviceActivationReviewsResponseSchema = typebox_1.Type.Object({
+    reviews: typebox_1.Type.Array(exports.DeviceActivationReviewSchema),
+});
+exports.AuthDecideDeviceActivationReviewSchema = typebox_1.Type.Object({
+    reviewId: typebox_1.Type.String({ minLength: 1 }),
+    decision: typebox_1.Type.Union([typebox_1.Type.Literal("approve"), typebox_1.Type.Literal("reject")]),
+    reason: typebox_1.Type.Optional(typebox_1.Type.String({ minLength: 1 })),
+});
+exports.AuthDecideDeviceActivationReviewResponseSchema = typebox_1.Type.Object({
+    review: exports.DeviceActivationReviewSchema,
+    activation: typebox_1.Type.Optional(exports.DeviceActivationRecordSchema),
+    confirmationCode: typebox_1.Type.Optional(typebox_1.Type.String({ minLength: 1 })),
+});
+exports.UserViewSchema = typebox_1.Type.Object({
+    origin: typebox_1.Type.String(),
+    id: typebox_1.Type.String(),
+    name: typebox_1.Type.Optional(typebox_1.Type.String()),
+    email: typebox_1.Type.Optional(typebox_1.Type.String()),
+    active: typebox_1.Type.Boolean(),
+    capabilities: typebox_1.Type.Array(typebox_1.Type.String()),
+});
+exports.AuthListUsersSchema = typebox_1.Type.Object({});
+exports.AuthListUsersResponseSchema = typebox_1.Type.Object({
+    users: typebox_1.Type.Array(exports.UserViewSchema),
+});
+exports.AuthUpdateUserSchema = typebox_1.Type.Object({
+    origin: typebox_1.Type.String(),
+    id: typebox_1.Type.String(),
+    active: typebox_1.Type.Optional(typebox_1.Type.Boolean()),
+    capabilities: typebox_1.Type.Optional(typebox_1.Type.Array(typebox_1.Type.String())),
+});
+exports.AuthUpdateUserResponseSchema = typebox_1.Type.Object({
+    success: typebox_1.Type.Boolean(),
+});