@qlever-llc/trellis 0.7.0 → 0.8.0-rc.2

package/esm/auth/protocol.d.ts

@@ -1,23 +1,31 @@
 import type { StaticDecode } from "typebox";
 import { Type } from "typebox";
+export declare const ParticipantKindSchema: Type.TUnion<[Type.TUnion<[Type.TLiteral<"app">, Type.TLiteral<"agent">]>, Type.TLiteral<"device">, Type.TLiteral<"service">]>;
+export type ParticipantKind = StaticDecode<typeof ParticipantKindSchema>;
 export declare const DigestSchema: Type.TString;
 export declare const OpenObjectSchema: Type.TUnsafe<Record<string, unknown>>;
-export declare const AppliedProfileContractSchema: Type.TObject<{
+export declare const ServiceAppliedDeploymentContractSchema: Type.TObject<{
     contractId: Type.TString;
     allowedDigests: Type.TArray<Type.TString>;
+    resourceBindingsByDigest: Type.TOptional<Type.TRecord<"^.*$", any>>;
 }>;
-export declare const ServiceProfileSchema: Type.TObject<{
-    profileId: Type.TString;
+export declare const DeviceAppliedDeploymentContractSchema: Type.TObject<{
+    contractId: Type.TString;
+    allowedDigests: Type.TArray<Type.TString>;
+}>;
+export declare const ServiceDeploymentSchema: Type.TObject<{
+    deploymentId: Type.TString;
     namespaces: Type.TArray<Type.TString>;
     disabled: Type.TBoolean;
     appliedContracts: Type.TArray<Type.TObject<{
         contractId: Type.TString;
         allowedDigests: Type.TArray<Type.TString>;
+        resourceBindingsByDigest: Type.TOptional<Type.TRecord<"^.*$", any>>;
     }>>;
 }>;
 export declare const ServiceInstanceSchema: Type.TObject<{
     instanceId: Type.TString;
-    profileId: Type.TString;
+    deploymentId: Type.TString;
     instanceKey: Type.TString;
     disabled: Type.TBoolean;
     currentContractId: Type.TOptional<Type.TString>;
@@ -46,11 +54,28 @@ export declare const ApprovalRecordViewSchema: Type.TObject<{
         description: Type.TString;
         capabilities: Type.TArray<Type.TString>;
     }>;
+    participantKind: Type.TUnion<[Type.TLiteral<"app">, Type.TLiteral<"agent">]>;
 }>;
 export declare const InstanceGrantPolicyActorSchema: Type.TObject<{
     origin: Type.TString;
     id: Type.TString;
 }>;
+export declare const PortalProfileSourceSchema: Type.TObject<{
+    kind: Type.TLiteral<"portal_profile">;
+    portalId: Type.TString;
+    entryUrl: Type.TString;
+}>;
+export declare const AdminPolicySourceSchema: Type.TObject<{
+    kind: Type.TLiteral<"admin_policy">;
+    createdBy: Type.TOptional<Type.TObject<{
+        origin: Type.TString;
+        id: Type.TString;
+    }>>;
+    updatedBy: Type.TOptional<Type.TObject<{
+        origin: Type.TString;
+        id: Type.TString;
+    }>>;
+}>;
 export declare const InstanceGrantPolicySchema: Type.TObject<{
     contractId: Type.TString;
     allowedOrigins: Type.TOptional<Type.TArray<Type.TString>>;
@@ -58,7 +83,7 @@ export declare const InstanceGrantPolicySchema: Type.TObject<{
     disabled: Type.TBoolean;
     createdAt: Type.TString;
     updatedAt: Type.TString;
-    source: Type.TObject<{
+    source: Type.TUnion<[Type.TObject<{
         kind: Type.TLiteral<"admin_policy">;
         createdBy: Type.TOptional<Type.TObject<{
             origin: Type.TString;
@@ -68,7 +93,11 @@ export declare const InstanceGrantPolicySchema: Type.TObject<{
             origin: Type.TString;
             id: Type.TString;
         }>>;
-    }>;
+    }>, Type.TObject<{
+        kind: Type.TLiteral<"portal_profile">;
+        portalId: Type.TString;
+        entryUrl: Type.TString;
+    }>]>;
 }>;
 export type InstanceGrantPolicy = StaticDecode<typeof InstanceGrantPolicySchema>;
 export declare const AuthListInstanceGrantPoliciesSchema: Type.TObject<{}>;
@@ -80,7 +109,7 @@ export declare const AuthListInstanceGrantPoliciesResponseSchema: Type.TObject<{
         disabled: Type.TBoolean;
         createdAt: Type.TString;
         updatedAt: Type.TString;
-        source: Type.TObject<{
+        source: Type.TUnion<[Type.TObject<{
             kind: Type.TLiteral<"admin_policy">;
             createdBy: Type.TOptional<Type.TObject<{
                 origin: Type.TString;
@@ -90,7 +119,11 @@ export declare const AuthListInstanceGrantPoliciesResponseSchema: Type.TObject<{
                 origin: Type.TString;
                 id: Type.TString;
             }>>;
-        }>;
+        }>, Type.TObject<{
+            kind: Type.TLiteral<"portal_profile">;
+            portalId: Type.TString;
+            entryUrl: Type.TString;
+        }>]>;
     }>>;
 }>;
 export declare const AuthUpsertInstanceGrantPolicySchema: Type.TObject<{
@@ -106,7 +139,7 @@ export declare const AuthUpsertInstanceGrantPolicyResponseSchema: Type.TObject<{
         disabled: Type.TBoolean;
         createdAt: Type.TString;
         updatedAt: Type.TString;
-        source: Type.TObject<{
+        source: Type.TUnion<[Type.TObject<{
             kind: Type.TLiteral<"admin_policy">;
             createdBy: Type.TOptional<Type.TObject<{
                 origin: Type.TString;
@@ -116,7 +149,11 @@ export declare const AuthUpsertInstanceGrantPolicyResponseSchema: Type.TObject<{
                 origin: Type.TString;
                 id: Type.TString;
             }>>;
-        }>;
+        }>, Type.TObject<{
+            kind: Type.TLiteral<"portal_profile">;
+            portalId: Type.TString;
+            entryUrl: Type.TString;
+        }>]>;
     }>;
 }>;
 export declare const AuthDisableInstanceGrantPolicySchema: Type.TObject<{
@@ -130,7 +167,7 @@ export declare const AuthDisableInstanceGrantPolicyResponseSchema: Type.TObject<
         disabled: Type.TBoolean;
         createdAt: Type.TString;
         updatedAt: Type.TString;
-        source: Type.TObject<{
+        source: Type.TUnion<[Type.TObject<{
             kind: Type.TLiteral<"admin_policy">;
             createdBy: Type.TOptional<Type.TObject<{
                 origin: Type.TString;
@@ -140,50 +177,59 @@ export declare const AuthDisableInstanceGrantPolicyResponseSchema: Type.TObject<
                 origin: Type.TString;
                 id: Type.TString;
             }>>;
-        }>;
+        }>, Type.TObject<{
+            kind: Type.TLiteral<"portal_profile">;
+            portalId: Type.TString;
+            entryUrl: Type.TString;
+        }>]>;
     }>;
 }>;
-export declare const AuthCreateServiceProfileSchema: Type.TObject<{
-    profileId: Type.TString;
+export declare const AuthCreateServiceDeploymentSchema: Type.TObject<{
+    deploymentId: Type.TString;
     namespaces: Type.TArray<Type.TString>;
 }>;
-export declare const AuthCreateServiceProfileResponseSchema: Type.TObject<{
-    profile: Type.TObject<{
-        profileId: Type.TString;
+export declare const AuthCreateServiceDeploymentResponseSchema: Type.TObject<{
+    deployment: Type.TObject<{
+        deploymentId: Type.TString;
         namespaces: Type.TArray<Type.TString>;
         disabled: Type.TBoolean;
         appliedContracts: Type.TArray<Type.TObject<{
             contractId: Type.TString;
             allowedDigests: Type.TArray<Type.TString>;
+            resourceBindingsByDigest: Type.TOptional<Type.TRecord<"^.*$", any>>;
         }>>;
     }>;
 }>;
-export declare const AuthListServiceProfilesSchema: Type.TObject<{
+export declare const AuthListServiceDeploymentsSchema: Type.TObject<{
     disabled: Type.TOptional<Type.TBoolean>;
 }>;
-export declare const AuthListServiceProfilesResponseSchema: Type.TObject<{
-    profiles: Type.TArray<Type.TObject<{
-        profileId: Type.TString;
+export declare const AuthListServiceDeploymentsResponseSchema: Type.TObject<{
+    deployments: Type.TArray<Type.TObject<{
+        deploymentId: Type.TString;
         namespaces: Type.TArray<Type.TString>;
         disabled: Type.TBoolean;
         appliedContracts: Type.TArray<Type.TObject<{
             contractId: Type.TString;
             allowedDigests: Type.TArray<Type.TString>;
+            resourceBindingsByDigest: Type.TOptional<Type.TRecord<"^.*$", any>>;
         }>>;
     }>>;
 }>;
-export declare const AuthApplyServiceProfileContractSchema: Type.TObject<{
-    profileId: Type.TString;
+export declare const AuthApplyServiceDeploymentContractSchema: Type.TObject<{
+    deploymentId: Type.TString;
     contract: Type.TUnsafe<Record<string, unknown>>;
+    expectedDigest: Type.TString;
+    replaceExisting: Type.TOptional<Type.TBoolean>;
 }>;
-export declare const AuthApplyServiceProfileContractResponseSchema: Type.TObject<{
-    profile: Type.TObject<{
-        profileId: Type.TString;
+export declare const AuthApplyServiceDeploymentContractResponseSchema: Type.TObject<{
+    deployment: Type.TObject<{
+        deploymentId: Type.TString;
         namespaces: Type.TArray<Type.TString>;
         disabled: Type.TBoolean;
         appliedContracts: Type.TArray<Type.TObject<{
             contractId: Type.TString;
             allowedDigests: Type.TArray<Type.TString>;
+            resourceBindingsByDigest: Type.TOptional<Type.TRecord<"^.*$", any>>;
         }>>;
     }>;
     contract: Type.TObject<{
@@ -194,64 +240,67 @@ export declare const AuthApplyServiceProfileContractResponseSchema: Type.TObject
         installedAt: Type.TString;
     }>;
 }>;
-export declare const AuthUnapplyServiceProfileContractSchema: Type.TObject<{
-    profileId: Type.TString;
+export declare const AuthUnapplyServiceDeploymentContractSchema: Type.TObject<{
+    deploymentId: Type.TString;
     contractId: Type.TString;
     digests: Type.TOptional<Type.TArray<Type.TString>>;
 }>;
-export declare const AuthUnapplyServiceProfileContractResponseSchema: Type.TObject<{
-    profile: Type.TObject<{
-        profileId: Type.TString;
+export declare const AuthUnapplyServiceDeploymentContractResponseSchema: Type.TObject<{
+    deployment: Type.TObject<{
+        deploymentId: Type.TString;
         namespaces: Type.TArray<Type.TString>;
         disabled: Type.TBoolean;
         appliedContracts: Type.TArray<Type.TObject<{
             contractId: Type.TString;
             allowedDigests: Type.TArray<Type.TString>;
+            resourceBindingsByDigest: Type.TOptional<Type.TRecord<"^.*$", any>>;
         }>>;
     }>;
 }>;
-export declare const AuthDisableServiceProfileSchema: Type.TObject<{
-    profileId: Type.TString;
+export declare const AuthDisableServiceDeploymentSchema: Type.TObject<{
+    deploymentId: Type.TString;
 }>;
-export declare const AuthDisableServiceProfileResponseSchema: Type.TObject<{
-    profile: Type.TObject<{
-        profileId: Type.TString;
+export declare const AuthDisableServiceDeploymentResponseSchema: Type.TObject<{
+    deployment: Type.TObject<{
+        deploymentId: Type.TString;
         namespaces: Type.TArray<Type.TString>;
         disabled: Type.TBoolean;
         appliedContracts: Type.TArray<Type.TObject<{
             contractId: Type.TString;
             allowedDigests: Type.TArray<Type.TString>;
+            resourceBindingsByDigest: Type.TOptional<Type.TRecord<"^.*$", any>>;
         }>>;
     }>;
 }>;
-export declare const AuthEnableServiceProfileSchema: Type.TObject<{
-    profileId: Type.TString;
+export declare const AuthEnableServiceDeploymentSchema: Type.TObject<{
+    deploymentId: Type.TString;
 }>;
-export declare const AuthEnableServiceProfileResponseSchema: Type.TObject<{
-    profile: Type.TObject<{
-        profileId: Type.TString;
+export declare const AuthEnableServiceDeploymentResponseSchema: Type.TObject<{
+    deployment: Type.TObject<{
+        deploymentId: Type.TString;
         namespaces: Type.TArray<Type.TString>;
         disabled: Type.TBoolean;
         appliedContracts: Type.TArray<Type.TObject<{
             contractId: Type.TString;
             allowedDigests: Type.TArray<Type.TString>;
+            resourceBindingsByDigest: Type.TOptional<Type.TRecord<"^.*$", any>>;
         }>>;
     }>;
 }>;
-export declare const AuthRemoveServiceProfileSchema: Type.TObject<{
-    profileId: Type.TString;
+export declare const AuthRemoveServiceDeploymentSchema: Type.TObject<{
+    deploymentId: Type.TString;
 }>;
-export declare const AuthRemoveServiceProfileResponseSchema: Type.TObject<{
+export declare const AuthRemoveServiceDeploymentResponseSchema: Type.TObject<{
     success: Type.TBoolean;
 }>;
 export declare const AuthProvisionServiceInstanceSchema: Type.TObject<{
-    profileId: Type.TString;
+    deploymentId: Type.TString;
     instanceKey: Type.TString;
 }>;
 export declare const AuthProvisionServiceInstanceResponseSchema: Type.TObject<{
     instance: Type.TObject<{
         instanceId: Type.TString;
-        profileId: Type.TString;
+        deploymentId: Type.TString;
         instanceKey: Type.TString;
         disabled: Type.TBoolean;
         currentContractId: Type.TOptional<Type.TString>;
@@ -262,13 +311,13 @@ export declare const AuthProvisionServiceInstanceResponseSchema: Type.TObject<{
     }>;
 }>;
 export declare const AuthListServiceInstancesSchema: Type.TObject<{
-    profileId: Type.TOptional<Type.TString>;
+    deploymentId: Type.TOptional<Type.TString>;
     disabled: Type.TOptional<Type.TBoolean>;
 }>;
 export declare const AuthListServiceInstancesResponseSchema: Type.TObject<{
     instances: Type.TArray<Type.TObject<{
         instanceId: Type.TString;
-        profileId: Type.TString;
+        deploymentId: Type.TString;
         instanceKey: Type.TString;
         disabled: Type.TBoolean;
         currentContractId: Type.TOptional<Type.TString>;
@@ -284,7 +333,7 @@ export declare const AuthDisableServiceInstanceSchema: Type.TObject<{
 export declare const AuthDisableServiceInstanceResponseSchema: Type.TObject<{
     instance: Type.TObject<{
         instanceId: Type.TString;
-        profileId: Type.TString;
+        deploymentId: Type.TString;
         instanceKey: Type.TString;
         disabled: Type.TBoolean;
         currentContractId: Type.TOptional<Type.TString>;
@@ -300,7 +349,7 @@ export declare const AuthEnableServiceInstanceSchema: Type.TObject<{
 export declare const AuthEnableServiceInstanceResponseSchema: Type.TObject<{
     instance: Type.TObject<{
         instanceId: Type.TString;
-        profileId: Type.TString;
+        deploymentId: Type.TString;
         instanceKey: Type.TString;
         disabled: Type.TBoolean;
         currentContractId: Type.TOptional<Type.TString>;
@@ -319,12 +368,14 @@ export declare const AuthRemoveServiceInstanceResponseSchema: Type.TObject<{
 export declare const ContractAnalysisSummarySchema: Type.TObject<{
     namespaces: Type.TArray<Type.TString>;
     rpcMethods: Type.TNumber;
+    operations: Type.TNumber;
+    operationControls: Type.TNumber;
     events: Type.TNumber;
     natsPublish: Type.TNumber;
     natsSubscribe: Type.TNumber;
     kvResources: Type.TNumber;
+    storeResources: Type.TNumber;
     jobsQueues: Type.TNumber;
-    streamResources: Type.TNumber;
 }>;
 export declare const ContractAnalysisKvResourceSchema: Type.TObject<{
     alias: Type.TString;
@@ -334,6 +385,14 @@ export declare const ContractAnalysisKvResourceSchema: Type.TObject<{
     ttlMs: Type.TNumber;
     maxValueBytes: Type.TOptional<Type.TNumber>;
 }>;
+export declare const ContractAnalysisStoreResourceSchema: Type.TObject<{
+    alias: Type.TString;
+    purpose: Type.TString;
+    required: Type.TBoolean;
+    ttlMs: Type.TNumber;
+    maxObjectBytes: Type.TOptional<Type.TNumber>;
+    maxTotalBytes: Type.TOptional<Type.TNumber>;
+}>;
 export declare const ContractAnalysisJobsQueueSchema: Type.TObject<{
     queueType: Type.TString;
     payload: Type.TObject<{
@@ -351,31 +410,30 @@ export declare const ContractAnalysisJobsQueueSchema: Type.TObject<{
     dlq: Type.TBoolean;
     concurrency: Type.TNumber;
 }>;
-export declare const ContractAnalysisStreamResourceSchema: Type.TObject<{
-    alias: Type.TString;
-    purpose: Type.TString;
-    required: Type.TBoolean;
-    retention: Type.TOptional<Type.TString>;
-    storage: Type.TOptional<Type.TString>;
-    numReplicas: Type.TOptional<Type.TNumber>;
-    maxAgeMs: Type.TOptional<Type.TNumber>;
-    maxBytes: Type.TOptional<Type.TNumber>;
-    maxMsgs: Type.TOptional<Type.TNumber>;
-    discard: Type.TOptional<Type.TString>;
-    subjects: Type.TArray<Type.TString>;
-    sources: Type.TOptional<Type.TArray<Type.TObject<{
-        fromAlias: Type.TString;
-        streamName: Type.TString;
-        filterSubject: Type.TOptional<Type.TString>;
-        subjectTransformDest: Type.TOptional<Type.TString>;
-    }>>>;
-}>;
 export declare const ContractAnalysisRpcMethodSchema: Type.TObject<{
     key: Type.TString;
     subject: Type.TString;
     wildcardSubject: Type.TString;
     callerCapabilities: Type.TArray<Type.TString>;
 }>;
+export declare const ContractAnalysisOperationSchema: Type.TObject<{
+    key: Type.TString;
+    subject: Type.TString;
+    wildcardSubject: Type.TString;
+    controlSubject: Type.TString;
+    wildcardControlSubject: Type.TString;
+    callCapabilities: Type.TArray<Type.TString>;
+    readCapabilities: Type.TArray<Type.TString>;
+    cancelCapabilities: Type.TArray<Type.TString>;
+    cancel: Type.TBoolean;
+}>;
+export declare const ContractAnalysisOperationControlSchema: Type.TObject<{
+    key: Type.TString;
+    action: Type.TUnion<[Type.TLiteral<"get">, Type.TLiteral<"wait">, Type.TLiteral<"watch">, Type.TLiteral<"cancel">]>;
+    subject: Type.TString;
+    wildcardSubject: Type.TString;
+    requiredCapabilities: Type.TArray<Type.TString>;
+}>;
 export declare const ContractAnalysisEventSchema: Type.TObject<{
     key: Type.TString;
     subject: Type.TString;
@@ -405,6 +463,26 @@ export declare const ContractAnalysisSchema: Type.TObject<{
             callerCapabilities: Type.TArray<Type.TString>;
         }>>;
     }>;
+    operations: Type.TObject<{
+        operations: Type.TArray<Type.TObject<{
+            key: Type.TString;
+            subject: Type.TString;
+            wildcardSubject: Type.TString;
+            controlSubject: Type.TString;
+            wildcardControlSubject: Type.TString;
+            callCapabilities: Type.TArray<Type.TString>;
+            readCapabilities: Type.TArray<Type.TString>;
+            cancelCapabilities: Type.TArray<Type.TString>;
+            cancel: Type.TBoolean;
+        }>>;
+        control: Type.TArray<Type.TObject<{
+            key: Type.TString;
+            action: Type.TUnion<[Type.TLiteral<"get">, Type.TLiteral<"wait">, Type.TLiteral<"watch">, Type.TLiteral<"cancel">]>;
+            subject: Type.TString;
+            wildcardSubject: Type.TString;
+            requiredCapabilities: Type.TArray<Type.TString>;
+        }>>;
+    }>;
     events: Type.TObject<{
         events: Type.TArray<Type.TObject<{
             key: Type.TString;
@@ -445,6 +523,14 @@ export declare const ContractAnalysisSchema: Type.TObject<{
             ttlMs: Type.TNumber;
             maxValueBytes: Type.TOptional<Type.TNumber>;
         }>>;
+        store: Type.TArray<Type.TObject<{
+            alias: Type.TString;
+            purpose: Type.TString;
+            required: Type.TBoolean;
+            ttlMs: Type.TNumber;
+            maxObjectBytes: Type.TOptional<Type.TNumber>;
+            maxTotalBytes: Type.TOptional<Type.TNumber>;
+        }>>;
         jobs: Type.TArray<Type.TObject<{
             queueType: Type.TString;
             payload: Type.TObject<{
@@ -462,25 +548,6 @@ export declare const ContractAnalysisSchema: Type.TObject<{
             dlq: Type.TBoolean;
             concurrency: Type.TNumber;
         }>>;
-        streams: Type.TArray<Type.TObject<{
-            alias: Type.TString;
-            purpose: Type.TString;
-            required: Type.TBoolean;
-            retention: Type.TOptional<Type.TString>;
-            storage: Type.TOptional<Type.TString>;
-            numReplicas: Type.TOptional<Type.TNumber>;
-            maxAgeMs: Type.TOptional<Type.TNumber>;
-            maxBytes: Type.TOptional<Type.TNumber>;
-            maxMsgs: Type.TOptional<Type.TNumber>;
-            discard: Type.TOptional<Type.TString>;
-            subjects: Type.TArray<Type.TString>;
-            sources: Type.TOptional<Type.TArray<Type.TObject<{
-                fromAlias: Type.TString;
-                streamName: Type.TString;
-                filterSubject: Type.TOptional<Type.TString>;
-                subjectTransformDest: Type.TOptional<Type.TString>;
-            }>>>;
-        }>>;
     }>;
 }>;
 export declare const InstalledContractSchema: Type.TObject<{
@@ -492,12 +559,14 @@ export declare const InstalledContractSchema: Type.TObject<{
     analysisSummary: Type.TOptional<Type.TObject<{
         namespaces: Type.TArray<Type.TString>;
         rpcMethods: Type.TNumber;
+        operations: Type.TNumber;
+        operationControls: Type.TNumber;
         events: Type.TNumber;
         natsPublish: Type.TNumber;
         natsSubscribe: Type.TNumber;
         kvResources: Type.TNumber;
+        storeResources: Type.TNumber;
         jobsQueues: Type.TNumber;
-        streamResources: Type.TNumber;
     }>>;
 }>;
 export declare const InstalledContractDetailSchema: Type.TObject<{
@@ -509,12 +578,14 @@ export declare const InstalledContractDetailSchema: Type.TObject<{
     analysisSummary: Type.TOptional<Type.TObject<{
         namespaces: Type.TArray<Type.TString>;
         rpcMethods: Type.TNumber;
+        operations: Type.TNumber;
+        operationControls: Type.TNumber;
         events: Type.TNumber;
         natsPublish: Type.TNumber;
         natsSubscribe: Type.TNumber;
         kvResources: Type.TNumber;
+        storeResources: Type.TNumber;
         jobsQueues: Type.TNumber;
-        streamResources: Type.TNumber;
     }>>;
     analysis: Type.TOptional<Type.TObject<{
         namespaces: Type.TArray<Type.TString>;
@@ -526,6 +597,26 @@ export declare const InstalledContractDetailSchema: Type.TObject<{
                 callerCapabilities: Type.TArray<Type.TString>;
             }>>;
         }>;
+        operations: Type.TObject<{
+            operations: Type.TArray<Type.TObject<{
+                key: Type.TString;
+                subject: Type.TString;
+                wildcardSubject: Type.TString;
+                controlSubject: Type.TString;
+                wildcardControlSubject: Type.TString;
+                callCapabilities: Type.TArray<Type.TString>;
+                readCapabilities: Type.TArray<Type.TString>;
+                cancelCapabilities: Type.TArray<Type.TString>;
+                cancel: Type.TBoolean;
+            }>>;
+            control: Type.TArray<Type.TObject<{
+                key: Type.TString;
+                action: Type.TUnion<[Type.TLiteral<"get">, Type.TLiteral<"wait">, Type.TLiteral<"watch">, Type.TLiteral<"cancel">]>;
+                subject: Type.TString;
+                wildcardSubject: Type.TString;
+                requiredCapabilities: Type.TArray<Type.TString>;
+            }>>;
+        }>;
         events: Type.TObject<{
             events: Type.TArray<Type.TObject<{
                 key: Type.TString;
@@ -566,6 +657,14 @@ export declare const InstalledContractDetailSchema: Type.TObject<{
                 ttlMs: Type.TNumber;
                 maxValueBytes: Type.TOptional<Type.TNumber>;
             }>>;
+            store: Type.TArray<Type.TObject<{
+                alias: Type.TString;
+                purpose: Type.TString;
+                required: Type.TBoolean;
+                ttlMs: Type.TNumber;
+                maxObjectBytes: Type.TOptional<Type.TNumber>;
+                maxTotalBytes: Type.TOptional<Type.TNumber>;
+            }>>;
             jobs: Type.TArray<Type.TObject<{
                 queueType: Type.TString;
                 payload: Type.TObject<{
@@ -583,25 +682,6 @@ export declare const InstalledContractDetailSchema: Type.TObject<{
                 dlq: Type.TBoolean;
                 concurrency: Type.TNumber;
             }>>;
-            streams: Type.TArray<Type.TObject<{
-                alias: Type.TString;
-                purpose: Type.TString;
-                required: Type.TBoolean;
-                retention: Type.TOptional<Type.TString>;
-                storage: Type.TOptional<Type.TString>;
-                numReplicas: Type.TOptional<Type.TNumber>;
-                maxAgeMs: Type.TOptional<Type.TNumber>;
-                maxBytes: Type.TOptional<Type.TNumber>;
-                maxMsgs: Type.TOptional<Type.TNumber>;
-                discard: Type.TOptional<Type.TString>;
-                subjects: Type.TArray<Type.TString>;
-                sources: Type.TOptional<Type.TArray<Type.TObject<{
-                    fromAlias: Type.TString;
-                    streamName: Type.TString;
-                    filterSubject: Type.TOptional<Type.TString>;
-                    subjectTransformDest: Type.TOptional<Type.TString>;
-                }>>>;
-            }>>;
         }>;
     }>>;
     resources: any;
@@ -618,12 +698,14 @@ export declare const AuthListInstalledContractsResponseSchema: Type.TObject<{
         analysisSummary: Type.TOptional<Type.TObject<{
             namespaces: Type.TArray<Type.TString>;
             rpcMethods: Type.TNumber;
+            operations: Type.TNumber;
+            operationControls: Type.TNumber;
             events: Type.TNumber;
             natsPublish: Type.TNumber;
             natsSubscribe: Type.TNumber;
             kvResources: Type.TNumber;
+            storeResources: Type.TNumber;
             jobsQueues: Type.TNumber;
-            streamResources: Type.TNumber;
         }>>;
     }>>;
 }>;
@@ -640,12 +722,14 @@ export declare const AuthGetInstalledContractResponseSchema: Type.TObject<{
         analysisSummary: Type.TOptional<Type.TObject<{
             namespaces: Type.TArray<Type.TString>;
             rpcMethods: Type.TNumber;
+            operations: Type.TNumber;
+            operationControls: Type.TNumber;
             events: Type.TNumber;
             natsPublish: Type.TNumber;
             natsSubscribe: Type.TNumber;
             kvResources: Type.TNumber;
+            storeResources: Type.TNumber;
             jobsQueues: Type.TNumber;
-            streamResources: Type.TNumber;
         }>>;
         analysis: Type.TOptional<Type.TObject<{
             namespaces: Type.TArray<Type.TString>;
@@ -657,6 +741,26 @@ export declare const AuthGetInstalledContractResponseSchema: Type.TObject<{
                     callerCapabilities: Type.TArray<Type.TString>;
                 }>>;
             }>;
+            operations: Type.TObject<{
+                operations: Type.TArray<Type.TObject<{
+                    key: Type.TString;
+                    subject: Type.TString;
+                    wildcardSubject: Type.TString;
+                    controlSubject: Type.TString;
+                    wildcardControlSubject: Type.TString;
+                    callCapabilities: Type.TArray<Type.TString>;
+                    readCapabilities: Type.TArray<Type.TString>;
+                    cancelCapabilities: Type.TArray<Type.TString>;
+                    cancel: Type.TBoolean;
+                }>>;
+                control: Type.TArray<Type.TObject<{
+                    key: Type.TString;
+                    action: Type.TUnion<[Type.TLiteral<"get">, Type.TLiteral<"wait">, Type.TLiteral<"watch">, Type.TLiteral<"cancel">]>;
+                    subject: Type.TString;
+                    wildcardSubject: Type.TString;
+                    requiredCapabilities: Type.TArray<Type.TString>;
+                }>>;
+            }>;
             events: Type.TObject<{
                 events: Type.TArray<Type.TObject<{
                     key: Type.TString;
@@ -697,6 +801,14 @@ export declare const AuthGetInstalledContractResponseSchema: Type.TObject<{
                     ttlMs: Type.TNumber;
                     maxValueBytes: Type.TOptional<Type.TNumber>;
                 }>>;
+                store: Type.TArray<Type.TObject<{
+                    alias: Type.TString;
+                    purpose: Type.TString;
+                    required: Type.TBoolean;
+                    ttlMs: Type.TNumber;
+                    maxObjectBytes: Type.TOptional<Type.TNumber>;
+                    maxTotalBytes: Type.TOptional<Type.TNumber>;
+                }>>;
                 jobs: Type.TArray<Type.TObject<{
                     queueType: Type.TString;
                     payload: Type.TObject<{
@@ -714,25 +826,6 @@ export declare const AuthGetInstalledContractResponseSchema: Type.TObject<{
                     dlq: Type.TBoolean;
                     concurrency: Type.TNumber;
                 }>>;
-                streams: Type.TArray<Type.TObject<{
-                    alias: Type.TString;
-                    purpose: Type.TString;
-                    required: Type.TBoolean;
-                    retention: Type.TOptional<Type.TString>;
-                    storage: Type.TOptional<Type.TString>;
-                    numReplicas: Type.TOptional<Type.TNumber>;
-                    maxAgeMs: Type.TOptional<Type.TNumber>;
-                    maxBytes: Type.TOptional<Type.TNumber>;
-                    maxMsgs: Type.TOptional<Type.TNumber>;
-                    discard: Type.TOptional<Type.TString>;
-                    subjects: Type.TArray<Type.TString>;
-                    sources: Type.TOptional<Type.TArray<Type.TObject<{
-                        fromAlias: Type.TString;
-                        streamName: Type.TString;
-                        filterSubject: Type.TOptional<Type.TString>;
-                        subjectTransformDest: Type.TOptional<Type.TString>;
-                    }>>>;
-                }>>;
             }>;
         }>>;
         resources: any;
@@ -771,12 +864,13 @@ export declare const AuthenticatedDeviceSchema: Type.TObject<{
     deviceId: Type.TString;
     deviceType: Type.TString;
     runtimePublicKey: Type.TString;
-    profileId: Type.TString;
+    deploymentId: Type.TString;
     active: Type.TBoolean;
     capabilities: Type.TArray<Type.TString>;
 }>;
 export type AuthenticatedDevice = StaticDecode<typeof AuthenticatedDeviceSchema>;
 export declare const AuthMeResponseSchema: Type.TObject<{
+    participantKind: Type.TUnion<[Type.TUnion<[Type.TLiteral<"app">, Type.TLiteral<"agent">]>, Type.TLiteral<"device">, Type.TLiteral<"service">]>;
     user: Type.TUnion<[Type.TObject<{
         id: Type.TString;
         origin: Type.TString;
@@ -792,7 +886,7 @@ export declare const AuthMeResponseSchema: Type.TObject<{
         deviceId: Type.TString;
         deviceType: Type.TString;
         runtimePublicKey: Type.TString;
-        profileId: Type.TString;
+        deploymentId: Type.TString;
         active: Type.TBoolean;
         capabilities: Type.TArray<Type.TString>;
     }>, Type.TNull]>;
@@ -807,6 +901,7 @@ export declare const AuthMeResponseSchema: Type.TObject<{
 export type AuthMeResponse = StaticDecode<typeof AuthMeResponseSchema>;
 export declare const CallerViewSchema: Type.TUnion<[Type.TObject<{
     type: Type.TLiteral<"user">;
+    participantKind: Type.TUnion<[Type.TLiteral<"app">, Type.TLiteral<"agent">]>;
     trellisId: Type.TString;
     id: Type.TString;
     origin: Type.TString;
@@ -826,7 +921,7 @@ export declare const CallerViewSchema: Type.TUnion<[Type.TObject<{
     deviceId: Type.TString;
     deviceType: Type.TString;
     runtimePublicKey: Type.TString;
-    profileId: Type.TString;
+    deploymentId: Type.TString;
     active: Type.TBoolean;
     capabilities: Type.TArray<Type.TString>;
 }>]>;
@@ -835,6 +930,7 @@ export declare const AuthValidateRequestResponseSchema: Type.TObject<{
     inboxPrefix: Type.TString;
     caller: Type.TUnion<[Type.TObject<{
         type: Type.TLiteral<"user">;
+        participantKind: Type.TUnion<[Type.TLiteral<"app">, Type.TLiteral<"agent">]>;
         trellisId: Type.TString;
         id: Type.TString;
         origin: Type.TString;
@@ -854,7 +950,7 @@ export declare const AuthValidateRequestResponseSchema: Type.TObject<{
         deviceId: Type.TString;
         deviceType: Type.TString;
         runtimePublicKey: Type.TString;
-        profileId: Type.TString;
+        deploymentId: Type.TString;
         active: Type.TBoolean;
         capabilities: Type.TArray<Type.TString>;
     }>]>;
@@ -876,6 +972,7 @@ export declare const AuthListApprovalsResponseSchema: Type.TObject<{
             description: Type.TString;
             capabilities: Type.TArray<Type.TString>;
         }>;
+        participantKind: Type.TUnion<[Type.TLiteral<"app">, Type.TLiteral<"agent">]>;
     }>>;
 }>;
 export declare const AuthRevokeApprovalSchema: Type.TObject<{
@@ -885,12 +982,53 @@ export declare const AuthRevokeApprovalSchema: Type.TObject<{
 export declare const AuthRevokeApprovalResponseSchema: Type.TObject<{
     success: Type.TBoolean;
 }>;
+export declare const UserGrantViewSchema: Type.TObject<{
+    contractDigest: Type.TString;
+    contractId: Type.TString;
+    displayName: Type.TString;
+    description: Type.TString;
+    participantKind: Type.TUnion<[Type.TLiteral<"app">, Type.TLiteral<"agent">]>;
+    capabilities: Type.TArray<Type.TString>;
+    grantedAt: Type.TString;
+    updatedAt: Type.TString;
+}>;
+export type UserGrantView = StaticDecode<typeof UserGrantViewSchema>;
+export declare const AuthListUserGrantsSchema: Type.TObject<{}>;
+export declare const AuthListUserGrantsResponseSchema: Type.TObject<{
+    grants: Type.TArray<Type.TObject<{
+        contractDigest: Type.TString;
+        contractId: Type.TString;
+        displayName: Type.TString;
+        description: Type.TString;
+        participantKind: Type.TUnion<[Type.TLiteral<"app">, Type.TLiteral<"agent">]>;
+        capabilities: Type.TArray<Type.TString>;
+        grantedAt: Type.TString;
+        updatedAt: Type.TString;
+    }>>;
+}>;
+export declare const AuthRevokeUserGrantSchema: Type.TObject<{
+    contractDigest: Type.TString;
+}>;
+export declare const AuthRevokeUserGrantResponseSchema: Type.TObject<{
+    success: Type.TBoolean;
+}>;
 export declare const PortalSchema: Type.TObject<{
     portalId: Type.TString;
-    appContractId: Type.TOptional<Type.TString>;
     entryUrl: Type.TString;
     disabled: Type.TBoolean;
 }>;
+export type Portal = StaticDecode<typeof PortalSchema>;
+export declare const PortalProfileSchema: Type.TObject<{
+    portalId: Type.TString;
+    entryUrl: Type.TString;
+    contractId: Type.TString;
+    allowedOrigins: Type.TOptional<Type.TArray<Type.TString>>;
+    impliedCapabilities: Type.TArray<Type.TString>;
+    disabled: Type.TBoolean;
+    createdAt: Type.TString;
+    updatedAt: Type.TString;
+}>;
+export type PortalProfile = StaticDecode<typeof PortalProfileSchema>;
 export declare const LoginPortalDefaultSchema: Type.TObject<{
     portalId: Type.TUnion<[Type.TString, Type.TNull]>;
 }>;
@@ -905,7 +1043,7 @@ export declare const LoginPortalSelectionSchema: Type.TObject<{
 }>;
 export type LoginPortalSelection = StaticDecode<typeof LoginPortalSelectionSchema>;
 export declare const DevicePortalSelectionSchema: Type.TObject<{
-    profileId: Type.TString;
+    deploymentId: Type.TString;
     portalId: Type.TUnion<[Type.TString, Type.TNull]>;
 }>;
 export type DevicePortalSelection = StaticDecode<typeof DevicePortalSelectionSchema>;
@@ -998,8 +1136,8 @@ export type PortalFlowApp = PortalFlowChooseProviderState["app"];
 export type PortalFlowProvider = PortalFlowChooseProviderState["providers"][number];
 export type PortalFlowApproval = PortalFlowApprovalRequiredState["approval"];
 export type PortalFlowUser = PortalFlowApprovalRequiredState["user"];
-export declare const DeviceProfileSchema: Type.TObject<{
-    profileId: Type.TString;
+export declare const DeviceDeploymentSchema: Type.TObject<{
+    deploymentId: Type.TString;
     reviewMode: Type.TOptional<Type.TUnion<[Type.TLiteral<"none">, Type.TLiteral<"required">]>>;
     disabled: Type.TBoolean;
     appliedContracts: Type.TArray<Type.TObject<{
@@ -1011,7 +1149,7 @@ export declare const DeviceMetadataSchema: Type.TRecord<"^.*$", Type.TString>;
 export declare const DeviceSchema: Type.TObject<{
     instanceId: Type.TString;
     publicIdentityKey: Type.TString;
-    profileId: Type.TString;
+    deploymentId: Type.TString;
     metadata: Type.TOptional<Type.TRecord<"^.*$", Type.TString>>;
     state: Type.TUnion<[Type.TLiteral<"registered">, Type.TLiteral<"activated">, Type.TLiteral<"revoked">, Type.TLiteral<"disabled">]>;
     currentContractId: Type.TOptional<Type.TString>;
@@ -1028,7 +1166,7 @@ export type DeviceActivationActor = StaticDecode<typeof DeviceActivationActorSch
 export declare const DeviceActivationRecordSchema: Type.TObject<{
     instanceId: Type.TString;
     publicIdentityKey: Type.TString;
-    profileId: Type.TString;
+    deploymentId: Type.TString;
     activatedBy: Type.TOptional<Type.TObject<{
         origin: Type.TString;
         id: Type.TString;
@@ -1040,10 +1178,9 @@ export declare const DeviceActivationRecordSchema: Type.TObject<{
 export type DeviceActivationRecord = StaticDecode<typeof DeviceActivationRecordSchema>;
 export declare const DeviceActivationReviewSchema: Type.TObject<{
     reviewId: Type.TString;
-    linkRequestId: Type.TString;
     instanceId: Type.TString;
     publicIdentityKey: Type.TString;
-    profileId: Type.TString;
+    deploymentId: Type.TString;
     state: Type.TUnion<[Type.TLiteral<"pending">, Type.TLiteral<"approved">, Type.TLiteral<"rejected">]>;
     requestedAt: Type.TString;
     decidedAt: Type.TUnion<[Type.TString, Type.TNull]>;
@@ -1051,20 +1188,59 @@ export declare const DeviceActivationReviewSchema: Type.TObject<{
 }>;
 export declare const AuthDeviceActivationReviewRequestedEventSchema: Type.TObject<{
     reviewId: Type.TString;
-    linkRequestId: Type.TString;
     flowId: Type.TString;
     instanceId: Type.TString;
     publicIdentityKey: Type.TString;
-    profileId: Type.TString;
+    deploymentId: Type.TString;
+    requestedAt: Type.TString;
+    requestedBy: Type.TObject<{
+        origin: Type.TString;
+        id: Type.TString;
+    }>;
+}>;
+export declare const AuthDeviceActivationRequestedEventSchema: Type.TObject<{
+    flowId: Type.TString;
+    instanceId: Type.TString;
+    publicIdentityKey: Type.TString;
+    deploymentId: Type.TString;
     requestedAt: Type.TString;
     requestedBy: Type.TObject<{
         origin: Type.TString;
         id: Type.TString;
     }>;
 }>;
+export declare const AuthDeviceActivationApprovedEventSchema: Type.TObject<{
+    reviewId: Type.TString;
+    flowId: Type.TString;
+    instanceId: Type.TString;
+    publicIdentityKey: Type.TString;
+    deploymentId: Type.TString;
+    requestedAt: Type.TString;
+    approvedAt: Type.TString;
+    requestedBy: Type.TObject<{
+        origin: Type.TString;
+        id: Type.TString;
+    }>;
+    approvedBy: Type.TObject<{
+        id: Type.TString;
+        origin: Type.TOptional<Type.TString>;
+    }>;
+}>;
+export declare const AuthDeviceActivatedEventSchema: Type.TObject<{
+    instanceId: Type.TString;
+    publicIdentityKey: Type.TString;
+    deploymentId: Type.TString;
+    activatedAt: Type.TString;
+    activatedBy: Type.TObject<{
+        origin: Type.TString;
+        id: Type.TString;
+    }>;
+    flowId: Type.TOptional<Type.TString>;
+    reviewId: Type.TOptional<Type.TString>;
+}>;
 export declare const DeviceConnectInfoSchema: Type.TObject<{
     instanceId: Type.TString;
-    profileId: Type.TString;
+    deploymentId: Type.TString;
     contractId: Type.TString;
     contractDigest: Type.TString;
     transports: Type.TObject<{
@@ -1088,13 +1264,11 @@ export declare const DeviceConnectInfoSchema: Type.TObject<{
 }>;
 export declare const AuthCreatePortalSchema: Type.TObject<{
     portalId: Type.TString;
-    appContractId: Type.TOptional<Type.TString>;
     entryUrl: Type.TString;
 }>;
 export declare const AuthCreatePortalResponseSchema: Type.TObject<{
     portal: Type.TObject<{
         portalId: Type.TString;
-        appContractId: Type.TOptional<Type.TString>;
         entryUrl: Type.TString;
         disabled: Type.TBoolean;
     }>;
@@ -1103,7 +1277,6 @@ export declare const AuthListPortalsSchema: Type.TObject<{}>;
 export declare const AuthListPortalsResponseSchema: Type.TObject<{
     portals: Type.TArray<Type.TObject<{
         portalId: Type.TString;
-        appContractId: Type.TOptional<Type.TString>;
         entryUrl: Type.TString;
         disabled: Type.TBoolean;
     }>>;
@@ -1114,6 +1287,52 @@ export declare const AuthDisablePortalSchema: Type.TObject<{
 export declare const AuthDisablePortalResponseSchema: Type.TObject<{
     success: Type.TBoolean;
 }>;
+export declare const AuthListPortalProfilesSchema: Type.TObject<{}>;
+export declare const AuthListPortalProfilesResponseSchema: Type.TObject<{
+    profiles: Type.TArray<Type.TObject<{
+        portalId: Type.TString;
+        entryUrl: Type.TString;
+        contractId: Type.TString;
+        allowedOrigins: Type.TOptional<Type.TArray<Type.TString>>;
+        impliedCapabilities: Type.TArray<Type.TString>;
+        disabled: Type.TBoolean;
+        createdAt: Type.TString;
+        updatedAt: Type.TString;
+    }>>;
+}>;
+export declare const AuthSetPortalProfileSchema: Type.TObject<{
+    portalId: Type.TString;
+    entryUrl: Type.TString;
+    contractId: Type.TString;
+    allowedOrigins: Type.TOptional<Type.TArray<Type.TString>>;
+}>;
+export declare const AuthSetPortalProfileResponseSchema: Type.TObject<{
+    profile: Type.TObject<{
+        portalId: Type.TString;
+        entryUrl: Type.TString;
+        contractId: Type.TString;
+        allowedOrigins: Type.TOptional<Type.TArray<Type.TString>>;
+        impliedCapabilities: Type.TArray<Type.TString>;
+        disabled: Type.TBoolean;
+        createdAt: Type.TString;
+        updatedAt: Type.TString;
+    }>;
+}>;
+export declare const AuthDisablePortalProfileSchema: Type.TObject<{
+    portalId: Type.TString;
+}>;
+export declare const AuthDisablePortalProfileResponseSchema: Type.TObject<{
+    profile: Type.TObject<{
+        portalId: Type.TString;
+        entryUrl: Type.TString;
+        contractId: Type.TString;
+        allowedOrigins: Type.TOptional<Type.TArray<Type.TString>>;
+        impliedCapabilities: Type.TArray<Type.TString>;
+        disabled: Type.TBoolean;
+        createdAt: Type.TString;
+        updatedAt: Type.TString;
+    }>;
+}>;
 export declare const AuthGetLoginPortalDefaultSchema: Type.TObject<{}>;
 export declare const AuthGetLoginPortalDefaultResponseSchema: Type.TObject<{
     defaultPortal: Type.TObject<{
@@ -1168,33 +1387,33 @@ export declare const AuthSetDevicePortalDefaultResponseSchema: Type.TObject<{
 export declare const AuthListDevicePortalSelectionsSchema: Type.TObject<{}>;
 export declare const AuthListDevicePortalSelectionsResponseSchema: Type.TObject<{
     selections: Type.TArray<Type.TObject<{
-        profileId: Type.TString;
+        deploymentId: Type.TString;
         portalId: Type.TUnion<[Type.TString, Type.TNull]>;
     }>>;
 }>;
 export declare const AuthSetDevicePortalSelectionSchema: Type.TObject<{
-    profileId: Type.TString;
+    deploymentId: Type.TString;
     portalId: Type.TUnion<[Type.TString, Type.TNull]>;
 }>;
 export declare const AuthSetDevicePortalSelectionResponseSchema: Type.TObject<{
     selection: Type.TObject<{
-        profileId: Type.TString;
+        deploymentId: Type.TString;
         portalId: Type.TUnion<[Type.TString, Type.TNull]>;
     }>;
 }>;
 export declare const AuthClearDevicePortalSelectionSchema: Type.TObject<{
-    profileId: Type.TString;
+    deploymentId: Type.TString;
 }>;
 export declare const AuthClearDevicePortalSelectionResponseSchema: Type.TObject<{
     success: Type.TBoolean;
 }>;
-export declare const AuthCreateDeviceProfileSchema: Type.TObject<{
-    profileId: Type.TString;
+export declare const AuthCreateDeviceDeploymentSchema: Type.TObject<{
+    deploymentId: Type.TString;
     reviewMode: Type.TOptional<Type.TUnion<[Type.TLiteral<"none">, Type.TLiteral<"required">]>>;
 }>;
-export declare const AuthCreateDeviceProfileResponseSchema: Type.TObject<{
-    profile: Type.TObject<{
-        profileId: Type.TString;
+export declare const AuthCreateDeviceDeploymentResponseSchema: Type.TObject<{
+    deployment: Type.TObject<{
+        deploymentId: Type.TString;
         reviewMode: Type.TOptional<Type.TUnion<[Type.TLiteral<"none">, Type.TLiteral<"required">]>>;
         disabled: Type.TBoolean;
         appliedContracts: Type.TArray<Type.TObject<{
@@ -1203,12 +1422,12 @@ export declare const AuthCreateDeviceProfileResponseSchema: Type.TObject<{
         }>>;
     }>;
 }>;
-export declare const AuthListDeviceProfilesSchema: Type.TObject<{
+export declare const AuthListDeviceDeploymentsSchema: Type.TObject<{
     disabled: Type.TOptional<Type.TBoolean>;
 }>;
-export declare const AuthListDeviceProfilesResponseSchema: Type.TObject<{
-    profiles: Type.TArray<Type.TObject<{
-        profileId: Type.TString;
+export declare const AuthListDeviceDeploymentsResponseSchema: Type.TObject<{
+    deployments: Type.TArray<Type.TObject<{
+        deploymentId: Type.TString;
         reviewMode: Type.TOptional<Type.TUnion<[Type.TLiteral<"none">, Type.TLiteral<"required">]>>;
         disabled: Type.TBoolean;
         appliedContracts: Type.TArray<Type.TObject<{
@@ -1217,13 +1436,15 @@ export declare const AuthListDeviceProfilesResponseSchema: Type.TObject<{
         }>>;
     }>>;
 }>;
-export declare const AuthApplyDeviceProfileContractSchema: Type.TObject<{
-    profileId: Type.TString;
+export declare const AuthApplyDeviceDeploymentContractSchema: Type.TObject<{
+    deploymentId: Type.TString;
     contract: Type.TUnsafe<Record<string, unknown>>;
+    expectedDigest: Type.TString;
+    replaceExisting: Type.TOptional<Type.TBoolean>;
 }>;
-export declare const AuthApplyDeviceProfileContractResponseSchema: Type.TObject<{
-    profile: Type.TObject<{
-        profileId: Type.TString;
+export declare const AuthApplyDeviceDeploymentContractResponseSchema: Type.TObject<{
+    deployment: Type.TObject<{
+        deploymentId: Type.TString;
         reviewMode: Type.TOptional<Type.TUnion<[Type.TLiteral<"none">, Type.TLiteral<"required">]>>;
         disabled: Type.TBoolean;
         appliedContracts: Type.TArray<Type.TObject<{
@@ -1239,14 +1460,14 @@ export declare const AuthApplyDeviceProfileContractResponseSchema: Type.TObject<
         installedAt: Type.TString;
     }>;
 }>;
-export declare const AuthUnapplyDeviceProfileContractSchema: Type.TObject<{
-    profileId: Type.TString;
+export declare const AuthUnapplyDeviceDeploymentContractSchema: Type.TObject<{
+    deploymentId: Type.TString;
     contractId: Type.TString;
     digests: Type.TOptional<Type.TArray<Type.TString>>;
 }>;
-export declare const AuthUnapplyDeviceProfileContractResponseSchema: Type.TObject<{
-    profile: Type.TObject<{
-        profileId: Type.TString;
+export declare const AuthUnapplyDeviceDeploymentContractResponseSchema: Type.TObject<{
+    deployment: Type.TObject<{
+        deploymentId: Type.TString;
         reviewMode: Type.TOptional<Type.TUnion<[Type.TLiteral<"none">, Type.TLiteral<"required">]>>;
         disabled: Type.TBoolean;
         appliedContracts: Type.TArray<Type.TObject<{
@@ -1255,12 +1476,12 @@ export declare const AuthUnapplyDeviceProfileContractResponseSchema: Type.TObjec
         }>>;
     }>;
 }>;
-export declare const AuthDisableDeviceProfileSchema: Type.TObject<{
-    profileId: Type.TString;
+export declare const AuthDisableDeviceDeploymentSchema: Type.TObject<{
+    deploymentId: Type.TString;
 }>;
-export declare const AuthDisableDeviceProfileResponseSchema: Type.TObject<{
-    profile: Type.TObject<{
-        profileId: Type.TString;
+export declare const AuthDisableDeviceDeploymentResponseSchema: Type.TObject<{
+    deployment: Type.TObject<{
+        deploymentId: Type.TString;
         reviewMode: Type.TOptional<Type.TUnion<[Type.TLiteral<"none">, Type.TLiteral<"required">]>>;
         disabled: Type.TBoolean;
         appliedContracts: Type.TArray<Type.TObject<{
@@ -1269,12 +1490,12 @@ export declare const AuthDisableDeviceProfileResponseSchema: Type.TObject<{
         }>>;
     }>;
 }>;
-export declare const AuthEnableDeviceProfileSchema: Type.TObject<{
-    profileId: Type.TString;
+export declare const AuthEnableDeviceDeploymentSchema: Type.TObject<{
+    deploymentId: Type.TString;
 }>;
-export declare const AuthEnableDeviceProfileResponseSchema: Type.TObject<{
-    profile: Type.TObject<{
-        profileId: Type.TString;
+export declare const AuthEnableDeviceDeploymentResponseSchema: Type.TObject<{
+    deployment: Type.TObject<{
+        deploymentId: Type.TString;
         reviewMode: Type.TOptional<Type.TUnion<[Type.TLiteral<"none">, Type.TLiteral<"required">]>>;
         disabled: Type.TBoolean;
         appliedContracts: Type.TArray<Type.TObject<{
@@ -1283,14 +1504,14 @@ export declare const AuthEnableDeviceProfileResponseSchema: Type.TObject<{
         }>>;
     }>;
 }>;
-export declare const AuthRemoveDeviceProfileSchema: Type.TObject<{
-    profileId: Type.TString;
+export declare const AuthRemoveDeviceDeploymentSchema: Type.TObject<{
+    deploymentId: Type.TString;
 }>;
-export declare const AuthRemoveDeviceProfileResponseSchema: Type.TObject<{
+export declare const AuthRemoveDeviceDeploymentResponseSchema: Type.TObject<{
     success: Type.TBoolean;
 }>;
 export declare const AuthProvisionDeviceInstanceSchema: Type.TObject<{
-    profileId: Type.TString;
+    deploymentId: Type.TString;
     publicIdentityKey: Type.TString;
     activationKey: Type.TString;
     metadata: Type.TOptional<Type.TRecord<"^.*$", Type.TString>>;
@@ -1299,7 +1520,7 @@ export declare const AuthProvisionDeviceInstanceResponseSchema: Type.TObject<{
     instance: Type.TObject<{
         instanceId: Type.TString;
         publicIdentityKey: Type.TString;
-        profileId: Type.TString;
+        deploymentId: Type.TString;
         metadata: Type.TOptional<Type.TRecord<"^.*$", Type.TString>>;
         state: Type.TUnion<[Type.TLiteral<"registered">, Type.TLiteral<"activated">, Type.TLiteral<"revoked">, Type.TLiteral<"disabled">]>;
         currentContractId: Type.TOptional<Type.TString>;
@@ -1310,14 +1531,14 @@ export declare const AuthProvisionDeviceInstanceResponseSchema: Type.TObject<{
     }>;
 }>;
 export declare const AuthListDeviceInstancesSchema: Type.TObject<{
-    profileId: Type.TOptional<Type.TString>;
+    deploymentId: Type.TOptional<Type.TString>;
     state: Type.TOptional<Type.TUnion<[Type.TLiteral<"registered">, Type.TLiteral<"activated">, Type.TLiteral<"revoked">, Type.TLiteral<"disabled">]>>;
 }>;
 export declare const AuthListDeviceInstancesResponseSchema: Type.TObject<{
     instances: Type.TArray<Type.TObject<{
         instanceId: Type.TString;
         publicIdentityKey: Type.TString;
-        profileId: Type.TString;
+        deploymentId: Type.TString;
         metadata: Type.TOptional<Type.TRecord<"^.*$", Type.TString>>;
         state: Type.TUnion<[Type.TLiteral<"registered">, Type.TLiteral<"activated">, Type.TLiteral<"revoked">, Type.TLiteral<"disabled">]>;
         currentContractId: Type.TOptional<Type.TString>;
@@ -1334,7 +1555,7 @@ export declare const AuthDisableDeviceInstanceResponseSchema: Type.TObject<{
     instance: Type.TObject<{
         instanceId: Type.TString;
         publicIdentityKey: Type.TString;
-        profileId: Type.TString;
+        deploymentId: Type.TString;
         metadata: Type.TOptional<Type.TRecord<"^.*$", Type.TString>>;
         state: Type.TUnion<[Type.TLiteral<"registered">, Type.TLiteral<"activated">, Type.TLiteral<"revoked">, Type.TLiteral<"disabled">]>;
         currentContractId: Type.TOptional<Type.TString>;
@@ -1351,7 +1572,7 @@ export declare const AuthEnableDeviceInstanceResponseSchema: Type.TObject<{
     instance: Type.TObject<{
         instanceId: Type.TString;
         publicIdentityKey: Type.TString;
-        profileId: Type.TString;
+        deploymentId: Type.TString;
         metadata: Type.TOptional<Type.TRecord<"^.*$", Type.TString>>;
         state: Type.TUnion<[Type.TLiteral<"registered">, Type.TLiteral<"activated">, Type.TLiteral<"revoked">, Type.TLiteral<"disabled">]>;
         currentContractId: Type.TOptional<Type.TString>;
@@ -1369,41 +1590,20 @@ export declare const AuthRemoveDeviceInstanceResponseSchema: Type.TObject<{
 }>;
 export declare const AuthActivateDeviceSchema: Type.TObject<{
     flowId: Type.TString;
-    linkRequestId: Type.TString;
 }>;
-export declare const AuthActivateDeviceResponseSchema: Type.TUnion<[Type.TObject<{
-    status: Type.TLiteral<"activated">;
-    instanceId: Type.TString;
-    profileId: Type.TString;
-    activatedAt: Type.TString;
-    confirmationCode: Type.TOptional<Type.TString>;
-}>, Type.TObject<{
+export declare const AuthActivateDeviceProgressSchema: Type.TObject<{
     status: Type.TLiteral<"pending_review">;
     reviewId: Type.TString;
-    linkRequestId: Type.TString;
     instanceId: Type.TString;
-    profileId: Type.TString;
+    deploymentId: Type.TString;
     requestedAt: Type.TString;
-}>, Type.TObject<{
-    status: Type.TLiteral<"rejected">;
-    reason: Type.TOptional<Type.TString>;
-}>]>;
-export declare const AuthGetDeviceActivationStatusSchema: Type.TObject<{
-    flowId: Type.TString;
 }>;
-export declare const AuthGetDeviceActivationStatusResponseSchema: Type.TUnion<[Type.TObject<{
+export declare const AuthActivateDeviceResponseSchema: Type.TUnion<[Type.TObject<{
     status: Type.TLiteral<"activated">;
     instanceId: Type.TString;
-    profileId: Type.TString;
+    deploymentId: Type.TString;
     activatedAt: Type.TString;
     confirmationCode: Type.TOptional<Type.TString>;
-}>, Type.TObject<{
-    status: Type.TLiteral<"pending_review">;
-    reviewId: Type.TString;
-    linkRequestId: Type.TString;
-    instanceId: Type.TString;
-    profileId: Type.TString;
-    requestedAt: Type.TString;
 }>, Type.TObject<{
     status: Type.TLiteral<"rejected">;
     reason: Type.TOptional<Type.TString>;
@@ -1416,7 +1616,7 @@ export declare const WaitForDeviceActivationResponseSchema: Type.TUnion<[Type.TO
     confirmationCode: Type.TOptional<Type.TString>;
     connectInfo: Type.TObject<{
         instanceId: Type.TString;
-        profileId: Type.TString;
+        deploymentId: Type.TString;
         contractId: Type.TString;
         contractDigest: Type.TString;
         transports: Type.TObject<{
@@ -1452,7 +1652,7 @@ export declare const AuthGetDeviceConnectInfoResponseSchema: Type.TObject<{
     status: Type.TLiteral<"ready">;
     connectInfo: Type.TObject<{
         instanceId: Type.TString;
-        profileId: Type.TString;
+        deploymentId: Type.TString;
         contractId: Type.TString;
         contractDigest: Type.TString;
         transports: Type.TObject<{
@@ -1477,14 +1677,14 @@ export declare const AuthGetDeviceConnectInfoResponseSchema: Type.TObject<{
 }>;
 export declare const AuthListDeviceActivationsSchema: Type.TObject<{
     instanceId: Type.TOptional<Type.TString>;
-    profileId: Type.TOptional<Type.TString>;
+    deploymentId: Type.TOptional<Type.TString>;
     state: Type.TOptional<Type.TUnion<[Type.TLiteral<"activated">, Type.TLiteral<"revoked">]>>;
 }>;
 export declare const AuthListDeviceActivationsResponseSchema: Type.TObject<{
     activations: Type.TArray<Type.TObject<{
         instanceId: Type.TString;
         publicIdentityKey: Type.TString;
-        profileId: Type.TString;
+        deploymentId: Type.TString;
         activatedBy: Type.TOptional<Type.TObject<{
             origin: Type.TString;
             id: Type.TString;
@@ -1502,16 +1702,15 @@ export declare const AuthRevokeDeviceActivationResponseSchema: Type.TObject<{
 }>;
 export declare const AuthListDeviceActivationReviewsSchema: Type.TObject<{
     instanceId: Type.TOptional<Type.TString>;
-    profileId: Type.TOptional<Type.TString>;
+    deploymentId: Type.TOptional<Type.TString>;
     state: Type.TOptional<Type.TUnion<[Type.TLiteral<"pending">, Type.TLiteral<"approved">, Type.TLiteral<"rejected">]>>;
 }>;
 export declare const AuthListDeviceActivationReviewsResponseSchema: Type.TObject<{
     reviews: Type.TArray<Type.TObject<{
         reviewId: Type.TString;
-        linkRequestId: Type.TString;
         instanceId: Type.TString;
         publicIdentityKey: Type.TString;
-        profileId: Type.TString;
+        deploymentId: Type.TString;
         state: Type.TUnion<[Type.TLiteral<"pending">, Type.TLiteral<"approved">, Type.TLiteral<"rejected">]>;
         requestedAt: Type.TString;
         decidedAt: Type.TUnion<[Type.TString, Type.TNull]>;
@@ -1526,10 +1725,9 @@ export declare const AuthDecideDeviceActivationReviewSchema: Type.TObject<{
 export declare const AuthDecideDeviceActivationReviewResponseSchema: Type.TObject<{
     review: Type.TObject<{
         reviewId: Type.TString;
-        linkRequestId: Type.TString;
         instanceId: Type.TString;
         publicIdentityKey: Type.TString;
-        profileId: Type.TString;
+        deploymentId: Type.TString;
         state: Type.TUnion<[Type.TLiteral<"pending">, Type.TLiteral<"approved">, Type.TLiteral<"rejected">]>;
         requestedAt: Type.TString;
         decidedAt: Type.TUnion<[Type.TString, Type.TNull]>;
@@ -1538,7 +1736,7 @@ export declare const AuthDecideDeviceActivationReviewResponseSchema: Type.TObjec
     activation: Type.TOptional<Type.TObject<{
         instanceId: Type.TString;
         publicIdentityKey: Type.TString;
-        profileId: Type.TString;
+        deploymentId: Type.TString;
         activatedBy: Type.TOptional<Type.TObject<{
             origin: Type.TString;
             id: Type.TString;