@qlever-llc/trellis 0.7.0 → 0.8.0-rc.2

package/esm/auth/protocol.js

@@ -1,24 +1,34 @@
 import { ContractResourceBindingsSchema, ContractResourcesSchema, } from "@qlever-llc/trellis/contracts";
 import { Type } from "typebox";
-import { ClientTransportsSchema, SentinelCredsSchema } from "./schemas.js";
+import { ClientTransportsSchema, SentinelCredsSchema, UserParticipantKindSchema, } from "./schemas.js";
 const IsoDateStringSchema = Type.String({ format: "date-time" });
+export const ParticipantKindSchema = Type.Union([
+    UserParticipantKindSchema,
+    Type.Literal("device"),
+    Type.Literal("service"),
+]);
 export const DigestSchema = Type.String({ pattern: "^[A-Za-z0-9_-]+$" });
 export const OpenObjectSchema = Type.Unsafe({
     type: "object",
 });
-export const AppliedProfileContractSchema = Type.Object({
+export const ServiceAppliedDeploymentContractSchema = Type.Object({
     contractId: Type.String({ minLength: 1 }),
     allowedDigests: Type.Array(DigestSchema),
+    resourceBindingsByDigest: Type.Optional(Type.Record(DigestSchema, ContractResourceBindingsSchema)),
 });
-export const ServiceProfileSchema = Type.Object({
-    profileId: Type.String({ minLength: 1 }),
+export const DeviceAppliedDeploymentContractSchema = Type.Object({
+    contractId: Type.String({ minLength: 1 }),
+    allowedDigests: Type.Array(DigestSchema),
+}, { additionalProperties: false });
+export const ServiceDeploymentSchema = Type.Object({
+    deploymentId: Type.String({ minLength: 1 }),
     namespaces: Type.Array(Type.String({ minLength: 1 })),
     disabled: Type.Boolean(),
-    appliedContracts: Type.Array(AppliedProfileContractSchema),
+    appliedContracts: Type.Array(ServiceAppliedDeploymentContractSchema),
 });
 export const ServiceInstanceSchema = Type.Object({
     instanceId: Type.String({ minLength: 1 }),
-    profileId: Type.String({ minLength: 1 }),
+    deploymentId: Type.String({ minLength: 1 }),
     instanceKey: Type.String({ minLength: 1 }),
     disabled: Type.Boolean(),
     currentContractId: Type.Optional(Type.String({ minLength: 1 })),
@@ -44,11 +54,22 @@ export const ApprovalRecordViewSchema = Type.Object({
     answeredAt: IsoDateStringSchema,
     updatedAt: IsoDateStringSchema,
     approval: ContractApprovalViewSchema,
+    participantKind: UserParticipantKindSchema,
 });
 export const InstanceGrantPolicyActorSchema = Type.Object({
     origin: Type.String({ minLength: 1 }),
     id: Type.String({ minLength: 1 }),
 });
+export const PortalProfileSourceSchema = Type.Object({
+    kind: Type.Literal("portal_profile"),
+    portalId: Type.String({ minLength: 1 }),
+    entryUrl: Type.String({ minLength: 1 }),
+});
+export const AdminPolicySourceSchema = Type.Object({
+    kind: Type.Literal("admin_policy"),
+    createdBy: Type.Optional(InstanceGrantPolicyActorSchema),
+    updatedBy: Type.Optional(InstanceGrantPolicyActorSchema),
+});
 export const InstanceGrantPolicySchema = Type.Object({
     contractId: Type.String({ minLength: 1 }),
     allowedOrigins: Type.Optional(Type.Array(Type.String({ minLength: 1 }))),
@@ -56,11 +77,7 @@ export const InstanceGrantPolicySchema = Type.Object({
     disabled: Type.Boolean(),
     createdAt: IsoDateStringSchema,
     updatedAt: IsoDateStringSchema,
-    source: Type.Object({
-        kind: Type.Literal("admin_policy"),
-        createdBy: Type.Optional(InstanceGrantPolicyActorSchema),
-        updatedBy: Type.Optional(InstanceGrantPolicyActorSchema),
-    }),
+    source: Type.Union([AdminPolicySourceSchema, PortalProfileSourceSchema]),
 });
 export const AuthListInstanceGrantPoliciesSchema = Type.Object({});
 export const AuthListInstanceGrantPoliciesResponseSchema = Type.Object({
@@ -80,25 +97,27 @@ export const AuthDisableInstanceGrantPolicySchema = Type.Object({
 export const AuthDisableInstanceGrantPolicyResponseSchema = Type.Object({
     policy: InstanceGrantPolicySchema,
 });
-export const AuthCreateServiceProfileSchema = Type.Object({
-    profileId: Type.String({ minLength: 1 }),
+export const AuthCreateServiceDeploymentSchema = Type.Object({
+    deploymentId: Type.String({ minLength: 1 }),
     namespaces: Type.Array(Type.String({ minLength: 1 })),
 });
-export const AuthCreateServiceProfileResponseSchema = Type.Object({
-    profile: ServiceProfileSchema,
+export const AuthCreateServiceDeploymentResponseSchema = Type.Object({
+    deployment: ServiceDeploymentSchema,
 });
-export const AuthListServiceProfilesSchema = Type.Object({
+export const AuthListServiceDeploymentsSchema = Type.Object({
     disabled: Type.Optional(Type.Boolean()),
 });
-export const AuthListServiceProfilesResponseSchema = Type.Object({
-    profiles: Type.Array(ServiceProfileSchema),
+export const AuthListServiceDeploymentsResponseSchema = Type.Object({
+    deployments: Type.Array(ServiceDeploymentSchema),
 });
-export const AuthApplyServiceProfileContractSchema = Type.Object({
-    profileId: Type.String({ minLength: 1 }),
+export const AuthApplyServiceDeploymentContractSchema = Type.Object({
+    deploymentId: Type.String({ minLength: 1 }),
     contract: OpenObjectSchema,
+    expectedDigest: DigestSchema,
+    replaceExisting: Type.Optional(Type.Boolean()),
 });
-export const AuthApplyServiceProfileContractResponseSchema = Type.Object({
-    profile: ServiceProfileSchema,
+export const AuthApplyServiceDeploymentContractResponseSchema = Type.Object({
+    deployment: ServiceDeploymentSchema,
     contract: Type.Object({
         digest: DigestSchema,
         id: Type.String({ minLength: 1 }),
@@ -107,41 +126,41 @@ export const AuthApplyServiceProfileContractResponseSchema = Type.Object({
         installedAt: IsoDateStringSchema,
     }),
 });
-export const AuthUnapplyServiceProfileContractSchema = Type.Object({
-    profileId: Type.String({ minLength: 1 }),
+export const AuthUnapplyServiceDeploymentContractSchema = Type.Object({
+    deploymentId: Type.String({ minLength: 1 }),
     contractId: Type.String({ minLength: 1 }),
     digests: Type.Optional(Type.Array(DigestSchema)),
 });
-export const AuthUnapplyServiceProfileContractResponseSchema = Type.Object({
-    profile: ServiceProfileSchema,
+export const AuthUnapplyServiceDeploymentContractResponseSchema = Type.Object({
+    deployment: ServiceDeploymentSchema,
 });
-export const AuthDisableServiceProfileSchema = Type.Object({
-    profileId: Type.String({ minLength: 1 }),
+export const AuthDisableServiceDeploymentSchema = Type.Object({
+    deploymentId: Type.String({ minLength: 1 }),
 });
-export const AuthDisableServiceProfileResponseSchema = Type.Object({
-    profile: ServiceProfileSchema,
+export const AuthDisableServiceDeploymentResponseSchema = Type.Object({
+    deployment: ServiceDeploymentSchema,
 });
-export const AuthEnableServiceProfileSchema = Type.Object({
-    profileId: Type.String({ minLength: 1 }),
+export const AuthEnableServiceDeploymentSchema = Type.Object({
+    deploymentId: Type.String({ minLength: 1 }),
 });
-export const AuthEnableServiceProfileResponseSchema = Type.Object({
-    profile: ServiceProfileSchema,
+export const AuthEnableServiceDeploymentResponseSchema = Type.Object({
+    deployment: ServiceDeploymentSchema,
 });
-export const AuthRemoveServiceProfileSchema = Type.Object({
-    profileId: Type.String({ minLength: 1 }),
+export const AuthRemoveServiceDeploymentSchema = Type.Object({
+    deploymentId: Type.String({ minLength: 1 }),
 });
-export const AuthRemoveServiceProfileResponseSchema = Type.Object({
+export const AuthRemoveServiceDeploymentResponseSchema = Type.Object({
     success: Type.Boolean(),
 });
 export const AuthProvisionServiceInstanceSchema = Type.Object({
-    profileId: Type.String({ minLength: 1 }),
+    deploymentId: Type.String({ minLength: 1 }),
     instanceKey: Type.String({ minLength: 1 }),
 });
 export const AuthProvisionServiceInstanceResponseSchema = Type.Object({
     instance: ServiceInstanceSchema,
 });
 export const AuthListServiceInstancesSchema = Type.Object({
-    profileId: Type.Optional(Type.String({ minLength: 1 })),
+    deploymentId: Type.Optional(Type.String({ minLength: 1 })),
     disabled: Type.Optional(Type.Boolean()),
 });
 export const AuthListServiceInstancesResponseSchema = Type.Object({
@@ -168,12 +187,14 @@ export const AuthRemoveServiceInstanceResponseSchema = Type.Object({
 export const ContractAnalysisSummarySchema = Type.Object({
     namespaces: Type.Array(Type.String()),
     rpcMethods: Type.Number(),
+    operations: Type.Number(),
+    operationControls: Type.Number(),
     events: Type.Number(),
     natsPublish: Type.Number(),
     natsSubscribe: Type.Number(),
     kvResources: Type.Number(),
+    storeResources: Type.Number(),
     jobsQueues: Type.Number(),
-    streamResources: Type.Number(),
 });
 export const ContractAnalysisKvResourceSchema = Type.Object({
     alias: Type.String({ minLength: 1 }),
@@ -183,6 +204,14 @@ export const ContractAnalysisKvResourceSchema = Type.Object({
     ttlMs: Type.Number(),
     maxValueBytes: Type.Optional(Type.Number()),
 });
+export const ContractAnalysisStoreResourceSchema = Type.Object({
+    alias: Type.String({ minLength: 1 }),
+    purpose: Type.String({ minLength: 1 }),
+    required: Type.Boolean(),
+    ttlMs: Type.Number(),
+    maxObjectBytes: Type.Optional(Type.Number()),
+    maxTotalBytes: Type.Optional(Type.Number()),
+});
 export const ContractAnalysisJobsQueueSchema = Type.Object({
     queueType: Type.String({ minLength: 1 }),
     payload: Type.Object({ schema: Type.String({ minLength: 1 }) }),
@@ -196,31 +225,35 @@ export const ContractAnalysisJobsQueueSchema = Type.Object({
     dlq: Type.Boolean(),
     concurrency: Type.Number(),
 });
-export const ContractAnalysisStreamResourceSchema = Type.Object({
-    alias: Type.String({ minLength: 1 }),
-    purpose: Type.String({ minLength: 1 }),
-    required: Type.Boolean(),
-    retention: Type.Optional(Type.String({ minLength: 1 })),
-    storage: Type.Optional(Type.String({ minLength: 1 })),
-    numReplicas: Type.Optional(Type.Number()),
-    maxAgeMs: Type.Optional(Type.Number()),
-    maxBytes: Type.Optional(Type.Number()),
-    maxMsgs: Type.Optional(Type.Number()),
-    discard: Type.Optional(Type.String({ minLength: 1 })),
-    subjects: Type.Array(Type.String({ minLength: 1 }), { minItems: 1 }),
-    sources: Type.Optional(Type.Array(Type.Object({
-        fromAlias: Type.String({ minLength: 1 }),
-        streamName: Type.String({ minLength: 1 }),
-        filterSubject: Type.Optional(Type.String({ minLength: 1 })),
-        subjectTransformDest: Type.Optional(Type.String({ minLength: 1 })),
-    }))),
-});
 export const ContractAnalysisRpcMethodSchema = Type.Object({
     key: Type.String(),
     subject: Type.String(),
     wildcardSubject: Type.String(),
     callerCapabilities: Type.Array(Type.String()),
 });
+export const ContractAnalysisOperationSchema = Type.Object({
+    key: Type.String(),
+    subject: Type.String(),
+    wildcardSubject: Type.String(),
+    controlSubject: Type.String(),
+    wildcardControlSubject: Type.String(),
+    callCapabilities: Type.Array(Type.String()),
+    readCapabilities: Type.Array(Type.String()),
+    cancelCapabilities: Type.Array(Type.String()),
+    cancel: Type.Boolean(),
+});
+export const ContractAnalysisOperationControlSchema = Type.Object({
+    key: Type.String(),
+    action: Type.Union([
+        Type.Literal("get"),
+        Type.Literal("wait"),
+        Type.Literal("watch"),
+        Type.Literal("cancel"),
+    ]),
+    subject: Type.String(),
+    wildcardSubject: Type.String(),
+    requiredCapabilities: Type.Array(Type.String()),
+});
 export const ContractAnalysisEventSchema = Type.Object({
     key: Type.String(),
     subject: Type.String(),
@@ -243,6 +276,10 @@ export const ContractAnalysisNatsRuleSchema = Type.Object({
 export const ContractAnalysisSchema = Type.Object({
     namespaces: Type.Array(Type.String()),
     rpc: Type.Object({ methods: Type.Array(ContractAnalysisRpcMethodSchema) }),
+    operations: Type.Object({
+        operations: Type.Array(ContractAnalysisOperationSchema),
+        control: Type.Array(ContractAnalysisOperationControlSchema),
+    }),
     events: Type.Object({ events: Type.Array(ContractAnalysisEventSchema) }),
     subjects: Type.Optional(Type.Object({ subjects: Type.Array(ContractAnalysisSubjectSchema) })),
     nats: Type.Object({
@@ -251,8 +288,8 @@ export const ContractAnalysisSchema = Type.Object({
     }),
     resources: Type.Object({
         kv: Type.Array(ContractAnalysisKvResourceSchema),
+        store: Type.Array(ContractAnalysisStoreResourceSchema),
         jobs: Type.Array(ContractAnalysisJobsQueueSchema),
-        streams: Type.Array(ContractAnalysisStreamResourceSchema),
     }),
 });
 export const InstalledContractSchema = Type.Object({
@@ -314,7 +351,7 @@ export const AuthenticatedDeviceSchema = Type.Object({
     deviceId: Type.String({ minLength: 1 }),
     deviceType: Type.String({ minLength: 1 }),
     runtimePublicKey: Type.String({ minLength: 1 }),
-    profileId: Type.String({ minLength: 1 }),
+    deploymentId: Type.String({ minLength: 1 }),
     active: Type.Boolean(),
     capabilities: Type.Array(Type.String()),
 });
@@ -331,6 +368,7 @@ const NullableAuthenticatedServiceSchema = Type.Union([
     Type.Null(),
 ]);
 export const AuthMeResponseSchema = Type.Object({
+    participantKind: ParticipantKindSchema,
     user: NullableAuthenticatedUserSchema,
     device: NullableAuthenticatedDeviceSchema,
     service: NullableAuthenticatedServiceSchema,
@@ -338,6 +376,7 @@ export const AuthMeResponseSchema = Type.Object({
 export const CallerViewSchema = Type.Union([
     Type.Object({
         type: Type.Literal("user"),
+        participantKind: UserParticipantKindSchema,
         trellisId: Type.String(),
         id: Type.String(),
         origin: Type.String(),
@@ -369,12 +408,41 @@ export const AuthRevokeApprovalSchema = Type.Object({
 export const AuthRevokeApprovalResponseSchema = Type.Object({
     success: Type.Boolean(),
 });
+export const UserGrantViewSchema = Type.Object({
+    contractDigest: DigestSchema,
+    contractId: Type.String({ minLength: 1 }),
+    displayName: Type.String({ minLength: 1 }),
+    description: Type.String({ minLength: 1 }),
+    participantKind: UserParticipantKindSchema,
+    capabilities: Type.Array(Type.String()),
+    grantedAt: IsoDateStringSchema,
+    updatedAt: IsoDateStringSchema,
+});
+export const AuthListUserGrantsSchema = Type.Object({});
+export const AuthListUserGrantsResponseSchema = Type.Object({
+    grants: Type.Array(UserGrantViewSchema),
+});
+export const AuthRevokeUserGrantSchema = Type.Object({
+    contractDigest: DigestSchema,
+});
+export const AuthRevokeUserGrantResponseSchema = Type.Object({
+    success: Type.Boolean(),
+});
 export const PortalSchema = Type.Object({
     portalId: Type.String({ minLength: 1 }),
-    appContractId: Type.Optional(Type.String({ minLength: 1 })),
     entryUrl: Type.String({ minLength: 1 }),
     disabled: Type.Boolean(),
 });
+export const PortalProfileSchema = Type.Object({
+    portalId: Type.String({ minLength: 1 }),
+    entryUrl: Type.String({ minLength: 1 }),
+    contractId: Type.String({ minLength: 1 }),
+    allowedOrigins: Type.Optional(Type.Array(Type.String({ minLength: 1 }))),
+    impliedCapabilities: Type.Array(Type.String()),
+    disabled: Type.Boolean(),
+    createdAt: IsoDateStringSchema,
+    updatedAt: IsoDateStringSchema,
+});
 const NullablePortalIdSchema = Type.Union([
     Type.String({ minLength: 1 }),
     Type.Null(),
@@ -390,7 +458,7 @@ export const LoginPortalSelectionSchema = Type.Object({
     portalId: NullablePortalIdSchema,
 });
 export const DevicePortalSelectionSchema = Type.Object({
-    profileId: Type.String({ minLength: 1 }),
+    deploymentId: Type.String({ minLength: 1 }),
     portalId: NullablePortalIdSchema,
 });
 export const PortalFlowStateSchema = Type.Union([
@@ -448,17 +516,17 @@ export const PortalFlowStateSchema = Type.Union([
         status: Type.Literal("expired"),
     }),
 ]);
-export const DeviceProfileSchema = Type.Object({
-    profileId: Type.String({ minLength: 1 }),
+export const DeviceDeploymentSchema = Type.Object({
+    deploymentId: Type.String({ minLength: 1 }),
     reviewMode: Type.Optional(Type.Union([Type.Literal("none"), Type.Literal("required")])),
     disabled: Type.Boolean(),
-    appliedContracts: Type.Array(AppliedProfileContractSchema),
+    appliedContracts: Type.Array(DeviceAppliedDeploymentContractSchema),
 });
 export const DeviceMetadataSchema = Type.Record(Type.String({ minLength: 1 }), Type.String({ minLength: 1 }));
 export const DeviceSchema = Type.Object({
     instanceId: Type.String({ minLength: 1 }),
     publicIdentityKey: Type.String({ minLength: 1 }),
-    profileId: Type.String({ minLength: 1 }),
+    deploymentId: Type.String({ minLength: 1 }),
     metadata: Type.Optional(DeviceMetadataSchema),
     state: Type.Union([
         Type.Literal("registered"),
@@ -479,7 +547,7 @@ export const DeviceActivationActorSchema = Type.Object({
 export const DeviceActivationRecordSchema = Type.Object({
     instanceId: Type.String({ minLength: 1 }),
     publicIdentityKey: Type.String({ minLength: 1 }),
-    profileId: Type.String({ minLength: 1 }),
+    deploymentId: Type.String({ minLength: 1 }),
     activatedBy: Type.Optional(DeviceActivationActorSchema),
     state: Type.Union([Type.Literal("activated"), Type.Literal("revoked")]),
     activatedAt: IsoDateStringSchema,
@@ -487,10 +555,9 @@ export const DeviceActivationRecordSchema = Type.Object({
 });
 export const DeviceActivationReviewSchema = Type.Object({
     reviewId: Type.String({ minLength: 1 }),
-    linkRequestId: Type.String({ minLength: 1 }),
     instanceId: Type.String({ minLength: 1 }),
     publicIdentityKey: Type.String({ minLength: 1 }),
-    profileId: Type.String({ minLength: 1 }),
+    deploymentId: Type.String({ minLength: 1 }),
     state: Type.Union([
         Type.Literal("pending"),
         Type.Literal("approved"),
@@ -502,20 +569,50 @@ export const DeviceActivationReviewSchema = Type.Object({
 });
 export const AuthDeviceActivationReviewRequestedEventSchema = Type.Object({
     reviewId: Type.String({ minLength: 1 }),
-    linkRequestId: Type.String({ minLength: 1 }),
     flowId: Type.String({ minLength: 1 }),
     instanceId: Type.String({ minLength: 1 }),
     publicIdentityKey: Type.String({ minLength: 1 }),
-    profileId: Type.String({ minLength: 1 }),
+    deploymentId: Type.String({ minLength: 1 }),
     requestedAt: IsoDateStringSchema,
     requestedBy: Type.Object({
         origin: Type.String({ minLength: 1 }),
         id: Type.String({ minLength: 1 }),
     }),
 });
+export const AuthDeviceActivationRequestedEventSchema = Type.Object({
+    flowId: Type.String({ minLength: 1 }),
+    instanceId: Type.String({ minLength: 1 }),
+    publicIdentityKey: Type.String({ minLength: 1 }),
+    deploymentId: Type.String({ minLength: 1 }),
+    requestedAt: IsoDateStringSchema,
+    requestedBy: DeviceActivationActorSchema,
+});
+export const AuthDeviceActivationApprovedEventSchema = Type.Object({
+    reviewId: Type.String({ minLength: 1 }),
+    flowId: Type.String({ minLength: 1 }),
+    instanceId: Type.String({ minLength: 1 }),
+    publicIdentityKey: Type.String({ minLength: 1 }),
+    deploymentId: Type.String({ minLength: 1 }),
+    requestedAt: IsoDateStringSchema,
+    approvedAt: IsoDateStringSchema,
+    requestedBy: DeviceActivationActorSchema,
+    approvedBy: Type.Object({
+        id: Type.String({ minLength: 1 }),
+        origin: Type.Optional(Type.String({ minLength: 1 })),
+    }),
+});
+export const AuthDeviceActivatedEventSchema = Type.Object({
+    instanceId: Type.String({ minLength: 1 }),
+    publicIdentityKey: Type.String({ minLength: 1 }),
+    deploymentId: Type.String({ minLength: 1 }),
+    activatedAt: IsoDateStringSchema,
+    activatedBy: DeviceActivationActorSchema,
+    flowId: Type.Optional(Type.String({ minLength: 1 })),
+    reviewId: Type.Optional(Type.String({ minLength: 1 })),
+});
 export const DeviceConnectInfoSchema = Type.Object({
     instanceId: Type.String({ minLength: 1 }),
-    profileId: Type.String({ minLength: 1 }),
+    deploymentId: Type.String({ minLength: 1 }),
     contractId: Type.String({ minLength: 1 }),
     contractDigest: DigestSchema,
     transports: ClientTransportsSchema,
@@ -529,7 +626,6 @@ export const DeviceConnectInfoSchema = Type.Object({
 });
 export const AuthCreatePortalSchema = Type.Object({
     portalId: Type.String({ minLength: 1 }),
-    appContractId: Type.Optional(Type.String({ minLength: 1 })),
     entryUrl: Type.String({ minLength: 1 }),
 });
 export const AuthCreatePortalResponseSchema = Type.Object({
@@ -545,6 +641,25 @@ export const AuthDisablePortalSchema = Type.Object({
 export const AuthDisablePortalResponseSchema = Type.Object({
     success: Type.Boolean(),
 });
+export const AuthListPortalProfilesSchema = Type.Object({});
+export const AuthListPortalProfilesResponseSchema = Type.Object({
+    profiles: Type.Array(PortalProfileSchema),
+});
+export const AuthSetPortalProfileSchema = Type.Object({
+    portalId: Type.String({ minLength: 1 }),
+    entryUrl: Type.String({ minLength: 1 }),
+    contractId: Type.String({ minLength: 1 }),
+    allowedOrigins: Type.Optional(Type.Array(Type.String({ minLength: 1 }))),
+});
+export const AuthSetPortalProfileResponseSchema = Type.Object({
+    profile: PortalProfileSchema,
+});
+export const AuthDisablePortalProfileSchema = Type.Object({
+    portalId: Type.String({ minLength: 1 }),
+});
+export const AuthDisablePortalProfileResponseSchema = Type.Object({
+    profile: PortalProfileSchema,
+});
 export const AuthGetLoginPortalDefaultSchema = Type.Object({});
 export const AuthGetLoginPortalDefaultResponseSchema = Type.Object({
     defaultPortal: LoginPortalDefaultSchema,
@@ -587,37 +702,39 @@ export const AuthListDevicePortalSelectionsResponseSchema = Type.Object({
     selections: Type.Array(DevicePortalSelectionSchema),
 });
 export const AuthSetDevicePortalSelectionSchema = Type.Object({
-    profileId: Type.String({ minLength: 1 }),
+    deploymentId: Type.String({ minLength: 1 }),
     portalId: NullablePortalIdSchema,
 });
 export const AuthSetDevicePortalSelectionResponseSchema = Type.Object({
     selection: DevicePortalSelectionSchema,
 });
 export const AuthClearDevicePortalSelectionSchema = Type.Object({
-    profileId: Type.String({ minLength: 1 }),
+    deploymentId: Type.String({ minLength: 1 }),
 });
 export const AuthClearDevicePortalSelectionResponseSchema = Type.Object({
     success: Type.Boolean(),
 });
-export const AuthCreateDeviceProfileSchema = Type.Object({
-    profileId: Type.String({ minLength: 1 }),
+export const AuthCreateDeviceDeploymentSchema = Type.Object({
+    deploymentId: Type.String({ minLength: 1 }),
     reviewMode: Type.Optional(Type.Union([Type.Literal("none"), Type.Literal("required")])),
 });
-export const AuthCreateDeviceProfileResponseSchema = Type.Object({
-    profile: DeviceProfileSchema,
+export const AuthCreateDeviceDeploymentResponseSchema = Type.Object({
+    deployment: DeviceDeploymentSchema,
 });
-export const AuthListDeviceProfilesSchema = Type.Object({
+export const AuthListDeviceDeploymentsSchema = Type.Object({
     disabled: Type.Optional(Type.Boolean()),
 });
-export const AuthListDeviceProfilesResponseSchema = Type.Object({
-    profiles: Type.Array(DeviceProfileSchema),
+export const AuthListDeviceDeploymentsResponseSchema = Type.Object({
+    deployments: Type.Array(DeviceDeploymentSchema),
 });
-export const AuthApplyDeviceProfileContractSchema = Type.Object({
-    profileId: Type.String({ minLength: 1 }),
+export const AuthApplyDeviceDeploymentContractSchema = Type.Object({
+    deploymentId: Type.String({ minLength: 1 }),
     contract: OpenObjectSchema,
+    expectedDigest: DigestSchema,
+    replaceExisting: Type.Optional(Type.Boolean()),
 });
-export const AuthApplyDeviceProfileContractResponseSchema = Type.Object({
-    profile: DeviceProfileSchema,
+export const AuthApplyDeviceDeploymentContractResponseSchema = Type.Object({
+    deployment: DeviceDeploymentSchema,
     contract: Type.Object({
         digest: DigestSchema,
         id: Type.String({ minLength: 1 }),
@@ -626,34 +743,34 @@ export const AuthApplyDeviceProfileContractResponseSchema = Type.Object({
         installedAt: IsoDateStringSchema,
     }),
 });
-export const AuthUnapplyDeviceProfileContractSchema = Type.Object({
-    profileId: Type.String({ minLength: 1 }),
+export const AuthUnapplyDeviceDeploymentContractSchema = Type.Object({
+    deploymentId: Type.String({ minLength: 1 }),
     contractId: Type.String({ minLength: 1 }),
     digests: Type.Optional(Type.Array(DigestSchema)),
 });
-export const AuthUnapplyDeviceProfileContractResponseSchema = Type.Object({
-    profile: DeviceProfileSchema,
+export const AuthUnapplyDeviceDeploymentContractResponseSchema = Type.Object({
+    deployment: DeviceDeploymentSchema,
 });
-export const AuthDisableDeviceProfileSchema = Type.Object({
-    profileId: Type.String({ minLength: 1 }),
+export const AuthDisableDeviceDeploymentSchema = Type.Object({
+    deploymentId: Type.String({ minLength: 1 }),
 });
-export const AuthDisableDeviceProfileResponseSchema = Type.Object({
-    profile: DeviceProfileSchema,
+export const AuthDisableDeviceDeploymentResponseSchema = Type.Object({
+    deployment: DeviceDeploymentSchema,
 });
-export const AuthEnableDeviceProfileSchema = Type.Object({
-    profileId: Type.String({ minLength: 1 }),
+export const AuthEnableDeviceDeploymentSchema = Type.Object({
+    deploymentId: Type.String({ minLength: 1 }),
 });
-export const AuthEnableDeviceProfileResponseSchema = Type.Object({
-    profile: DeviceProfileSchema,
+export const AuthEnableDeviceDeploymentResponseSchema = Type.Object({
+    deployment: DeviceDeploymentSchema,
 });
-export const AuthRemoveDeviceProfileSchema = Type.Object({
-    profileId: Type.String({ minLength: 1 }),
+export const AuthRemoveDeviceDeploymentSchema = Type.Object({
+    deploymentId: Type.String({ minLength: 1 }),
 });
-export const AuthRemoveDeviceProfileResponseSchema = Type.Object({
+export const AuthRemoveDeviceDeploymentResponseSchema = Type.Object({
     success: Type.Boolean(),
 });
 export const AuthProvisionDeviceInstanceSchema = Type.Object({
-    profileId: Type.String({ minLength: 1 }),
+    deploymentId: Type.String({ minLength: 1 }),
     publicIdentityKey: Type.String({ minLength: 1 }),
     activationKey: Type.String({ minLength: 1 }),
     metadata: Type.Optional(DeviceMetadataSchema),
@@ -662,7 +779,7 @@ export const AuthProvisionDeviceInstanceResponseSchema = Type.Object({
     instance: DeviceSchema,
 });
 export const AuthListDeviceInstancesSchema = Type.Object({
-    profileId: Type.Optional(Type.String({ minLength: 1 })),
+    deploymentId: Type.Optional(Type.String({ minLength: 1 })),
     state: Type.Optional(Type.Union([
         Type.Literal("registered"),
         Type.Literal("activated"),
@@ -693,33 +810,27 @@ export const AuthRemoveDeviceInstanceResponseSchema = Type.Object({
 });
 export const AuthActivateDeviceSchema = Type.Object({
     flowId: Type.String({ minLength: 1 }),
-    linkRequestId: Type.String({ minLength: 1 }),
+});
+export const AuthActivateDeviceProgressSchema = Type.Object({
+    status: Type.Literal("pending_review"),
+    reviewId: Type.String({ minLength: 1 }),
+    instanceId: Type.String({ minLength: 1 }),
+    deploymentId: Type.String({ minLength: 1 }),
+    requestedAt: IsoDateStringSchema,
 });
 export const AuthActivateDeviceResponseSchema = Type.Union([
     Type.Object({
         status: Type.Literal("activated"),
         instanceId: Type.String({ minLength: 1 }),
-        profileId: Type.String({ minLength: 1 }),
+        deploymentId: Type.String({ minLength: 1 }),
         activatedAt: IsoDateStringSchema,
         confirmationCode: Type.Optional(Type.String({ minLength: 1 })),
     }),
-    Type.Object({
-        status: Type.Literal("pending_review"),
-        reviewId: Type.String({ minLength: 1 }),
-        linkRequestId: Type.String({ minLength: 1 }),
-        instanceId: Type.String({ minLength: 1 }),
-        profileId: Type.String({ minLength: 1 }),
-        requestedAt: IsoDateStringSchema,
-    }),
     Type.Object({
         status: Type.Literal("rejected"),
         reason: Type.Optional(Type.String({ minLength: 1 })),
     }),
 ]);
-export const AuthGetDeviceActivationStatusSchema = Type.Object({
-    flowId: Type.String({ minLength: 1 }),
-});
-export const AuthGetDeviceActivationStatusResponseSchema = AuthActivateDeviceResponseSchema;
 export const WaitForDeviceActivationResponseSchema = Type.Union([
     Type.Object({ status: Type.Literal("pending") }),
     Type.Object({
@@ -745,7 +856,7 @@ export const AuthGetDeviceConnectInfoResponseSchema = Type.Object({
 });
 export const AuthListDeviceActivationsSchema = Type.Object({
     instanceId: Type.Optional(Type.String({ minLength: 1 })),
-    profileId: Type.Optional(Type.String({ minLength: 1 })),
+    deploymentId: Type.Optional(Type.String({ minLength: 1 })),
     state: Type.Optional(Type.Union([Type.Literal("activated"), Type.Literal("revoked")])),
 });
 export const AuthListDeviceActivationsResponseSchema = Type.Object({
@@ -759,7 +870,7 @@ export const AuthRevokeDeviceActivationResponseSchema = Type.Object({
 });
 export const AuthListDeviceActivationReviewsSchema = Type.Object({
     instanceId: Type.Optional(Type.String({ minLength: 1 })),
-    profileId: Type.Optional(Type.String({ minLength: 1 })),
+    deploymentId: Type.Optional(Type.String({ minLength: 1 })),
     state: Type.Optional(Type.Union([
         Type.Literal("pending"),
         Type.Literal("approved"),