@qlever-llc/trellis 0.8.3 → 0.9.0-rc.10

package/esm/generated-sdk/auth/mod.d.ts

@@ -3,5 +3,6 @@ export type { Api, ApiViews, OwnedApi } from "./api.js";
 export * from "./types.js";
 export * from "./schemas.js";
 export type { Client, TrellisAuthClient, TrellisAuthState } from "./client.js";
+export type { AuthDeviceUserAuthoritiesResolveOperation, AuthDeviceUserAuthoritiesResolveOperationRef, AuthDeviceUserAuthoritiesResolveTerminal } from "./client.js";
 export { CONTRACT, CONTRACT_DIGEST, CONTRACT_ID, use, sdk } from "./contract.js";
 //# sourceMappingURL=mod.d.ts.map

package/esm/generated-sdk/auth/mod.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mod.d.ts","sourceRoot":"","sources":["../../../../../../src/.build/generated-sdk/auth/mod.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAC1C,YAAY,EAAE,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AACxD,cAAc,YAAY,CAAC;AAC3B,cAAc,cAAc,CAAC;AAC7B,YAAY,EAAE,MAAM,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC/E,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,WAAW,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,eAAe,CAAC"}
+{"version":3,"file":"mod.d.ts","sourceRoot":"","sources":["../../../../../../src/.build/generated-sdk/auth/mod.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAC1C,YAAY,EAAE,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AACxD,cAAc,YAAY,CAAC;AAC3B,cAAc,cAAc,CAAC;AAC7B,YAAY,EAAE,MAAM,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC/E,YAAY,EAAE,yCAAyC,EAAE,4CAA4C,EAAE,wCAAwC,EAAE,MAAM,aAAa,CAAC;AACrK,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,WAAW,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,eAAe,CAAC"}

package/esm/generated-sdk/auth/owned_api.d.ts

@@ -0,0 +1,3 @@
+import type { TrellisAPI } from "@qlever-llc/trellis/contracts";
+export declare const OWNED_API: TrellisAPI;
+//# sourceMappingURL=owned_api.d.ts.map

package/esm/generated-sdk/auth/owned_api.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"owned_api.d.ts","sourceRoot":"","sources":["../../../../../../src/.build/generated-sdk/auth/owned_api.ts"],"names":[],"mappings":"AAMA,eAAO,MAAM,SAAS,YAilBA,CAAC"}

package/esm/generated-sdk/auth/owned_api.js

@@ -0,0 +1,594 @@
+import { schema } from "@qlever-llc/trellis/contracts";
+import { AuthCapabilitiesListRequestSchema, AuthCapabilitiesListResponseSchema, AuthCapabilityGroupsDeleteRequestSchema, AuthCapabilityGroupsDeleteResponseSchema, AuthCapabilityGroupsGetRequestSchema, AuthCapabilityGroupsGetResponseSchema, AuthCapabilityGroupsListRequestSchema, AuthCapabilityGroupsListResponseSchema, AuthCapabilityGroupsPutRequestSchema, AuthCapabilityGroupsPutResponseSchema, AuthCatalogIssuesResolveRequestSchema, AuthCatalogIssuesResolveResponseSchema, AuthConnectionsClosedEventSchema, AuthConnectionsKickRequestSchema, AuthConnectionsKickResponseSchema, AuthConnectionsKickedEventSchema, AuthConnectionsListRequestSchema, AuthConnectionsListResponseSchema, AuthConnectionsOpenedEventSchema, AuthDeploymentsCreateRequestSchema, AuthDeploymentsCreateResponseSchema, AuthDeploymentsDisableRequestSchema, AuthDeploymentsDisableResponseSchema, AuthDeploymentsEnableRequestSchema, AuthDeploymentsEnableResponseSchema, AuthDeploymentsListRequestSchema, AuthDeploymentsListResponseSchema, AuthDeploymentsRemoveRequestSchema, AuthDeploymentsRemoveResponseSchema, AuthDeviceUserAuthoritiesApprovedEventSchema, AuthDeviceUserAuthoritiesListRequestSchema, AuthDeviceUserAuthoritiesListResponseSchema, AuthDeviceUserAuthoritiesRequestedEventSchema, AuthDeviceUserAuthoritiesResolvedEventSchema, AuthDeviceUserAuthoritiesReviewRequestedEventSchema, AuthDeviceUserAuthoritiesReviewsDecideRequestSchema, AuthDeviceUserAuthoritiesReviewsDecideResponseSchema, AuthDeviceUserAuthoritiesReviewsListRequestSchema, AuthDeviceUserAuthoritiesReviewsListResponseSchema, AuthDeviceUserAuthoritiesRevokeRequestSchema, AuthDeviceUserAuthoritiesRevokeResponseSchema, AuthDevicesConnectInfoGetRequestSchema, AuthDevicesConnectInfoGetResponseSchema, AuthDevicesDisableRequestSchema, AuthDevicesDisableResponseSchema, AuthDevicesEnableRequestSchema, AuthDevicesEnableResponseSchema, AuthDevicesListRequestSchema, AuthDevicesListResponseSchema, AuthDevicesProvisionRequestSchema, AuthDevicesProvisionResponseSchema, AuthDevicesRemoveRequestSchema, AuthDevicesRemoveResponseSchema, AuthEnvelopeExpansionsListRequestSchema, AuthEnvelopeExpansionsListResponseSchema, AuthEnvelopeExpansionsRejectRequestSchema, AuthEnvelopeExpansionsRejectResponseSchema, AuthEnvelopesApproveRequestRequestSchema, AuthEnvelopesApproveRequestResponseSchema, AuthEnvelopesChangesPreviewRequestSchema, AuthEnvelopesChangesPreviewResponseSchema, AuthEnvelopesExpandRequestSchema, AuthEnvelopesExpandResponseSchema, AuthEnvelopesGetRequestSchema, AuthEnvelopesGetResponseSchema, AuthEnvelopesGrantOverridesListRequestSchema, AuthEnvelopesGrantOverridesListResponseSchema, AuthEnvelopesGrantOverridesPutRequestSchema, AuthEnvelopesGrantOverridesRemoveRequestSchema, AuthEnvelopesGrantOverridesResponseSchema, AuthEnvelopesListRequestSchema, AuthEnvelopesListResponseSchema, AuthEnvelopesShrinkRequestSchema, AuthEnvelopesShrinkResponseSchema, AuthIdentitiesGrantsListRequestSchema, AuthIdentitiesGrantsListResponseSchema, AuthIdentitiesListRequestSchema, AuthIdentitiesListResponseSchema, AuthIdentityEnvelopesRevokeRequestSchema, AuthIdentityEnvelopesRevokeResponseSchema, AuthPortalsGetRequestSchema, AuthPortalsGetResponseSchema, AuthPortalsListRequestSchema, AuthPortalsListResponseSchema, AuthPortalsLoginSettingsGetRequestSchema, AuthPortalsLoginSettingsResponseSchema, AuthPortalsLoginSettingsUpdateRequestSchema, AuthPortalsPutRequestSchema, AuthPortalsPutResponseSchema, AuthPortalsRemoveRequestSchema, AuthPortalsRemoveResponseSchema, AuthPortalsRoutesPutRequestSchema, AuthPortalsRoutesPutResponseSchema, AuthPortalsRoutesRemoveRequestSchema, AuthPortalsRoutesRemoveResponseSchema, AuthRequestsValidateRequestSchema, AuthRequestsValidateResponseSchema, AuthResolveDeviceUserAuthoritiesProgressSchema, AuthResolveDeviceUserAuthoritiesRequestSchema, AuthResolveDeviceUserAuthoritiesResponseSchema, AuthServiceInstancesDisableRequestSchema, AuthServiceInstancesDisableResponseSchema, AuthServiceInstancesEnableRequestSchema, AuthServiceInstancesEnableResponseSchema, AuthServiceInstancesListRequestSchema, AuthServiceInstancesListResponseSchema, AuthServiceInstancesProvisionRequestSchema, AuthServiceInstancesProvisionResponseSchema, AuthServiceInstancesRemoveRequestSchema, AuthServiceInstancesRemoveResponseSchema, AuthSessionsListRequestSchema, AuthSessionsListResponseSchema, AuthSessionsLogoutRequestSchema, AuthSessionsLogoutResponseSchema, AuthSessionsMeRequestSchema, AuthSessionsMeResponseSchema, AuthSessionsRevokeRequestSchema, AuthSessionsRevokeResponseSchema, AuthSessionsRevokedEventSchema, AuthUserIdentitiesListRequestSchema, AuthUserIdentitiesListResponseSchema, AuthUserIdentitiesUnlinkRequestSchema, AuthUserIdentitiesUnlinkResponseSchema, AuthUsersAccountFlowCreateResponseSchema, AuthUsersCreateRequestSchema, AuthUsersCreateResponseSchema, AuthUsersGetRequestSchema, AuthUsersGetResponseSchema, AuthUsersIdentityLinkCreateRequestSchema, AuthUsersListRequestSchema, AuthUsersListResponseSchema, AuthUsersPasswordChangeRequestSchema, AuthUsersPasswordChangeResponseSchema, AuthUsersPasswordResetCreateRequestSchema, AuthUsersUpdateRequestSchema, AuthUsersUpdateResponseSchema, HealthRequestSchema, HealthResponseSchema } from "./schemas.js";
+export const OWNED_API = {
+    rpc: {
+        "Auth.Capabilities.List": {
+            subject: "rpc.v1.Auth.Capabilities.List",
+            input: schema(AuthCapabilitiesListRequestSchema),
+            output: schema(AuthCapabilitiesListResponseSchema),
+            callerCapabilities: ["admin"],
+            errors: ["AuthError", "UnexpectedError", "ValidationError"],
+            declaredErrorTypes: ["AuthError", "UnexpectedError", "ValidationError"],
+        },
+        "Auth.CapabilityGroups.Delete": {
+            subject: "rpc.v1.Auth.CapabilityGroups.Delete",
+            input: schema(AuthCapabilityGroupsDeleteRequestSchema),
+            output: schema(AuthCapabilityGroupsDeleteResponseSchema),
+            callerCapabilities: ["admin"],
+            errors: ["AuthError", "UnexpectedError", "ValidationError"],
+            declaredErrorTypes: ["AuthError", "UnexpectedError", "ValidationError"],
+        },
+        "Auth.CapabilityGroups.Get": {
+            subject: "rpc.v1.Auth.CapabilityGroups.Get",
+            input: schema(AuthCapabilityGroupsGetRequestSchema),
+            output: schema(AuthCapabilityGroupsGetResponseSchema),
+            callerCapabilities: ["admin"],
+            errors: ["AuthError", "UnexpectedError", "ValidationError"],
+            declaredErrorTypes: ["AuthError", "UnexpectedError", "ValidationError"],
+        },
+        "Auth.CapabilityGroups.List": {
+            subject: "rpc.v1.Auth.CapabilityGroups.List",
+            input: schema(AuthCapabilityGroupsListRequestSchema),
+            output: schema(AuthCapabilityGroupsListResponseSchema),
+            callerCapabilities: ["admin"],
+            errors: ["AuthError", "UnexpectedError", "ValidationError"],
+            declaredErrorTypes: ["AuthError", "UnexpectedError", "ValidationError"],
+        },
+        "Auth.CapabilityGroups.Put": {
+            subject: "rpc.v1.Auth.CapabilityGroups.Put",
+            input: schema(AuthCapabilityGroupsPutRequestSchema),
+            output: schema(AuthCapabilityGroupsPutResponseSchema),
+            callerCapabilities: ["admin"],
+            errors: ["AuthError", "UnexpectedError", "ValidationError"],
+            declaredErrorTypes: ["AuthError", "UnexpectedError", "ValidationError"],
+        },
+        "Auth.CatalogIssues.Resolve": {
+            subject: "rpc.v1.Auth.CatalogIssues.Resolve",
+            input: schema(AuthCatalogIssuesResolveRequestSchema),
+            output: schema(AuthCatalogIssuesResolveResponseSchema),
+            callerCapabilities: ["admin"],
+            errors: ["AuthError", "UnexpectedError", "ValidationError"],
+            declaredErrorTypes: ["AuthError", "UnexpectedError", "ValidationError"],
+        },
+        "Auth.Connections.Kick": {
+            subject: "rpc.v1.Auth.Connections.Kick",
+            input: schema(AuthConnectionsKickRequestSchema),
+            output: schema(AuthConnectionsKickResponseSchema),
+            callerCapabilities: ["admin"],
+            errors: ["AuthError", "UnexpectedError", "ValidationError"],
+            declaredErrorTypes: ["AuthError", "UnexpectedError", "ValidationError"],
+        },
+        "Auth.Connections.List": {
+            subject: "rpc.v1.Auth.Connections.List",
+            input: schema(AuthConnectionsListRequestSchema),
+            output: schema(AuthConnectionsListResponseSchema),
+            callerCapabilities: ["admin"],
+            errors: ["AuthError", "UnexpectedError", "ValidationError"],
+            declaredErrorTypes: ["AuthError", "UnexpectedError", "ValidationError"],
+        },
+        "Auth.Deployments.Create": {
+            subject: "rpc.v1.Auth.Deployments.Create",
+            input: schema(AuthDeploymentsCreateRequestSchema),
+            output: schema(AuthDeploymentsCreateResponseSchema),
+            callerCapabilities: ["admin"],
+            errors: ["AuthError", "UnexpectedError", "ValidationError"],
+            declaredErrorTypes: ["AuthError", "UnexpectedError", "ValidationError"],
+        },
+        "Auth.Deployments.Disable": {
+            subject: "rpc.v1.Auth.Deployments.Disable",
+            input: schema(AuthDeploymentsDisableRequestSchema),
+            output: schema(AuthDeploymentsDisableResponseSchema),
+            callerCapabilities: ["admin"],
+            errors: ["AuthError", "UnexpectedError", "ValidationError"],
+            declaredErrorTypes: ["AuthError", "UnexpectedError", "ValidationError"],
+        },
+        "Auth.Deployments.Enable": {
+            subject: "rpc.v1.Auth.Deployments.Enable",
+            input: schema(AuthDeploymentsEnableRequestSchema),
+            output: schema(AuthDeploymentsEnableResponseSchema),
+            callerCapabilities: ["admin"],
+            errors: ["AuthError", "UnexpectedError", "ValidationError"],
+            declaredErrorTypes: ["AuthError", "UnexpectedError", "ValidationError"],
+        },
+        "Auth.Deployments.List": {
+            subject: "rpc.v1.Auth.Deployments.List",
+            input: schema(AuthDeploymentsListRequestSchema),
+            output: schema(AuthDeploymentsListResponseSchema),
+            callerCapabilities: ["admin"],
+            errors: ["AuthError", "UnexpectedError", "ValidationError"],
+            declaredErrorTypes: ["AuthError", "UnexpectedError", "ValidationError"],
+        },
+        "Auth.Deployments.Remove": {
+            subject: "rpc.v1.Auth.Deployments.Remove",
+            input: schema(AuthDeploymentsRemoveRequestSchema),
+            output: schema(AuthDeploymentsRemoveResponseSchema),
+            callerCapabilities: ["admin"],
+            errors: ["AuthError", "UnexpectedError", "ValidationError"],
+            declaredErrorTypes: ["AuthError", "UnexpectedError", "ValidationError"],
+        },
+        "Auth.DeviceUserAuthorities.List": {
+            subject: "rpc.v1.Auth.DeviceUserAuthorities.List",
+            input: schema(AuthDeviceUserAuthoritiesListRequestSchema),
+            output: schema(AuthDeviceUserAuthoritiesListResponseSchema),
+            callerCapabilities: ["admin"],
+            errors: ["AuthError", "UnexpectedError", "ValidationError"],
+            declaredErrorTypes: ["AuthError", "UnexpectedError", "ValidationError"],
+        },
+        "Auth.DeviceUserAuthorities.Reviews.Decide": {
+            subject: "rpc.v1.Auth.DeviceUserAuthorities.Reviews.Decide",
+            input: schema(AuthDeviceUserAuthoritiesReviewsDecideRequestSchema),
+            output: schema(AuthDeviceUserAuthoritiesReviewsDecideResponseSchema),
+            callerCapabilities: ["trellis.auth::device.review"],
+            errors: ["AuthError", "UnexpectedError", "ValidationError"],
+            declaredErrorTypes: ["AuthError", "UnexpectedError", "ValidationError"],
+        },
+        "Auth.DeviceUserAuthorities.Reviews.List": {
+            subject: "rpc.v1.Auth.DeviceUserAuthorities.Reviews.List",
+            input: schema(AuthDeviceUserAuthoritiesReviewsListRequestSchema),
+            output: schema(AuthDeviceUserAuthoritiesReviewsListResponseSchema),
+            callerCapabilities: ["trellis.auth::device.review"],
+            errors: ["AuthError", "UnexpectedError", "ValidationError"],
+            declaredErrorTypes: ["AuthError", "UnexpectedError", "ValidationError"],
+        },
+        "Auth.DeviceUserAuthorities.Revoke": {
+            subject: "rpc.v1.Auth.DeviceUserAuthorities.Revoke",
+            input: schema(AuthDeviceUserAuthoritiesRevokeRequestSchema),
+            output: schema(AuthDeviceUserAuthoritiesRevokeResponseSchema),
+            callerCapabilities: ["admin"],
+            errors: ["AuthError", "UnexpectedError", "ValidationError"],
+            declaredErrorTypes: ["AuthError", "UnexpectedError", "ValidationError"],
+        },
+        "Auth.Devices.ConnectInfo.Get": {
+            subject: "rpc.v1.Auth.Devices.ConnectInfo.Get",
+            input: schema(AuthDevicesConnectInfoGetRequestSchema),
+            output: schema(AuthDevicesConnectInfoGetResponseSchema),
+            callerCapabilities: [],
+            errors: ["AuthError", "UnexpectedError", "ValidationError"],
+            declaredErrorTypes: ["AuthError", "UnexpectedError", "ValidationError"],
+        },
+        "Auth.Devices.Disable": {
+            subject: "rpc.v1.Auth.Devices.Disable",
+            input: schema(AuthDevicesDisableRequestSchema),
+            output: schema(AuthDevicesDisableResponseSchema),
+            callerCapabilities: ["admin"],
+            errors: ["AuthError", "UnexpectedError", "ValidationError"],
+            declaredErrorTypes: ["AuthError", "UnexpectedError", "ValidationError"],
+        },
+        "Auth.Devices.Enable": {
+            subject: "rpc.v1.Auth.Devices.Enable",
+            input: schema(AuthDevicesEnableRequestSchema),
+            output: schema(AuthDevicesEnableResponseSchema),
+            callerCapabilities: ["admin"],
+            errors: ["AuthError", "UnexpectedError", "ValidationError"],
+            declaredErrorTypes: ["AuthError", "UnexpectedError", "ValidationError"],
+        },
+        "Auth.Devices.List": {
+            subject: "rpc.v1.Auth.Devices.List",
+            input: schema(AuthDevicesListRequestSchema),
+            output: schema(AuthDevicesListResponseSchema),
+            callerCapabilities: ["admin"],
+            errors: ["AuthError", "UnexpectedError", "ValidationError"],
+            declaredErrorTypes: ["AuthError", "UnexpectedError", "ValidationError"],
+        },
+        "Auth.Devices.Provision": {
+            subject: "rpc.v1.Auth.Devices.Provision",
+            input: schema(AuthDevicesProvisionRequestSchema),
+            output: schema(AuthDevicesProvisionResponseSchema),
+            callerCapabilities: ["admin"],
+            errors: ["AuthError", "UnexpectedError", "ValidationError"],
+            declaredErrorTypes: ["AuthError", "UnexpectedError", "ValidationError"],
+        },
+        "Auth.Devices.Remove": {
+            subject: "rpc.v1.Auth.Devices.Remove",
+            input: schema(AuthDevicesRemoveRequestSchema),
+            output: schema(AuthDevicesRemoveResponseSchema),
+            callerCapabilities: ["admin"],
+            errors: ["AuthError", "UnexpectedError", "ValidationError"],
+            declaredErrorTypes: ["AuthError", "UnexpectedError", "ValidationError"],
+        },
+        "Auth.EnvelopeExpansions.Approve": {
+            subject: "rpc.v1.Auth.EnvelopeExpansions.Approve",
+            input: schema(AuthEnvelopesApproveRequestRequestSchema),
+            output: schema(AuthEnvelopesApproveRequestResponseSchema),
+            callerCapabilities: ["admin"],
+            errors: ["AuthError", "UnexpectedError", "ValidationError"],
+            declaredErrorTypes: ["AuthError", "UnexpectedError", "ValidationError"],
+        },
+        "Auth.EnvelopeExpansions.List": {
+            subject: "rpc.v1.Auth.EnvelopeExpansions.List",
+            input: schema(AuthEnvelopeExpansionsListRequestSchema),
+            output: schema(AuthEnvelopeExpansionsListResponseSchema),
+            callerCapabilities: ["admin"],
+            errors: ["AuthError", "UnexpectedError", "ValidationError"],
+            declaredErrorTypes: ["AuthError", "UnexpectedError", "ValidationError"],
+        },
+        "Auth.EnvelopeExpansions.Reject": {
+            subject: "rpc.v1.Auth.EnvelopeExpansions.Reject",
+            input: schema(AuthEnvelopeExpansionsRejectRequestSchema),
+            output: schema(AuthEnvelopeExpansionsRejectResponseSchema),
+            callerCapabilities: ["admin"],
+            errors: ["AuthError", "UnexpectedError", "ValidationError"],
+            declaredErrorTypes: ["AuthError", "UnexpectedError", "ValidationError"],
+        },
+        "Auth.Envelopes.Changes.Preview": {
+            subject: "rpc.v1.Auth.Envelopes.Changes.Preview",
+            input: schema(AuthEnvelopesChangesPreviewRequestSchema),
+            output: schema(AuthEnvelopesChangesPreviewResponseSchema),
+            callerCapabilities: ["admin"],
+            errors: ["AuthError", "UnexpectedError", "ValidationError"],
+            declaredErrorTypes: ["AuthError", "UnexpectedError", "ValidationError"],
+        },
+        "Auth.Envelopes.Expand": {
+            subject: "rpc.v1.Auth.Envelopes.Expand",
+            input: schema(AuthEnvelopesExpandRequestSchema),
+            output: schema(AuthEnvelopesExpandResponseSchema),
+            callerCapabilities: ["admin"],
+            errors: ["AuthError", "UnexpectedError", "ValidationError"],
+            declaredErrorTypes: ["AuthError", "UnexpectedError", "ValidationError"],
+        },
+        "Auth.Envelopes.Get": {
+            subject: "rpc.v1.Auth.Envelopes.Get",
+            input: schema(AuthEnvelopesGetRequestSchema),
+            output: schema(AuthEnvelopesGetResponseSchema),
+            callerCapabilities: ["admin"],
+            errors: ["AuthError", "UnexpectedError", "ValidationError"],
+            declaredErrorTypes: ["AuthError", "UnexpectedError", "ValidationError"],
+        },
+        "Auth.Envelopes.GrantOverrides.List": {
+            subject: "rpc.v1.Auth.Envelopes.GrantOverrides.List",
+            input: schema(AuthEnvelopesGrantOverridesListRequestSchema),
+            output: schema(AuthEnvelopesGrantOverridesListResponseSchema),
+            callerCapabilities: ["admin"],
+            errors: ["AuthError", "UnexpectedError", "ValidationError"],
+            declaredErrorTypes: ["AuthError", "UnexpectedError", "ValidationError"],
+        },
+        "Auth.Envelopes.GrantOverrides.Put": {
+            subject: "rpc.v1.Auth.Envelopes.GrantOverrides.Put",
+            input: schema(AuthEnvelopesGrantOverridesPutRequestSchema),
+            output: schema(AuthEnvelopesGrantOverridesResponseSchema),
+            callerCapabilities: ["admin"],
+            errors: ["AuthError", "UnexpectedError", "ValidationError"],
+            declaredErrorTypes: ["AuthError", "UnexpectedError", "ValidationError"],
+        },
+        "Auth.Envelopes.GrantOverrides.Remove": {
+            subject: "rpc.v1.Auth.Envelopes.GrantOverrides.Remove",
+            input: schema(AuthEnvelopesGrantOverridesRemoveRequestSchema),
+            output: schema(AuthEnvelopesGrantOverridesResponseSchema),
+            callerCapabilities: ["admin"],
+            errors: ["AuthError", "UnexpectedError", "ValidationError"],
+            declaredErrorTypes: ["AuthError", "UnexpectedError", "ValidationError"],
+        },
+        "Auth.Envelopes.List": {
+            subject: "rpc.v1.Auth.Envelopes.List",
+            input: schema(AuthEnvelopesListRequestSchema),
+            output: schema(AuthEnvelopesListResponseSchema),
+            callerCapabilities: ["admin"],
+            errors: ["AuthError", "UnexpectedError", "ValidationError"],
+            declaredErrorTypes: ["AuthError", "UnexpectedError", "ValidationError"],
+        },
+        "Auth.Envelopes.Shrink": {
+            subject: "rpc.v1.Auth.Envelopes.Shrink",
+            input: schema(AuthEnvelopesShrinkRequestSchema),
+            output: schema(AuthEnvelopesShrinkResponseSchema),
+            callerCapabilities: ["admin"],
+            errors: ["AuthError", "UnexpectedError", "ValidationError"],
+            declaredErrorTypes: ["AuthError", "UnexpectedError", "ValidationError"],
+        },
+        "Auth.Health": {
+            subject: "rpc.v1.Auth.Health",
+            input: schema(HealthRequestSchema),
+            output: schema(HealthResponseSchema),
+            callerCapabilities: [],
+            errors: ["UnexpectedError"],
+            declaredErrorTypes: ["UnexpectedError"],
+        },
+        "Auth.Identities.Grants.List": {
+            subject: "rpc.v1.Auth.Identities.Grants.List",
+            input: schema(AuthIdentitiesGrantsListRequestSchema),
+            output: schema(AuthIdentitiesGrantsListResponseSchema),
+            callerCapabilities: [],
+            errors: ["AuthError", "UnexpectedError"],
+            declaredErrorTypes: ["AuthError", "UnexpectedError"],
+        },
+        "Auth.Identities.List": {
+            subject: "rpc.v1.Auth.Identities.List",
+            input: schema(AuthIdentitiesListRequestSchema),
+            output: schema(AuthIdentitiesListResponseSchema),
+            callerCapabilities: [],
+            errors: ["AuthError", "UnexpectedError", "ValidationError"],
+            declaredErrorTypes: ["AuthError", "UnexpectedError", "ValidationError"],
+        },
+        "Auth.IdentityEnvelopes.Revoke": {
+            subject: "rpc.v1.Auth.IdentityEnvelopes.Revoke",
+            input: schema(AuthIdentityEnvelopesRevokeRequestSchema),
+            output: schema(AuthIdentityEnvelopesRevokeResponseSchema),
+            callerCapabilities: [],
+            errors: ["AuthError", "UnexpectedError", "ValidationError"],
+            declaredErrorTypes: ["AuthError", "UnexpectedError", "ValidationError"],
+        },
+        "Auth.Portals.Get": {
+            subject: "rpc.v1.Auth.Portals.Get",
+            input: schema(AuthPortalsGetRequestSchema),
+            output: schema(AuthPortalsGetResponseSchema),
+            callerCapabilities: ["admin"],
+            errors: ["AuthError", "UnexpectedError", "ValidationError"],
+            declaredErrorTypes: ["AuthError", "UnexpectedError", "ValidationError"],
+        },
+        "Auth.Portals.List": {
+            subject: "rpc.v1.Auth.Portals.List",
+            input: schema(AuthPortalsListRequestSchema),
+            output: schema(AuthPortalsListResponseSchema),
+            callerCapabilities: ["admin"],
+            errors: ["AuthError", "UnexpectedError"],
+            declaredErrorTypes: ["AuthError", "UnexpectedError"],
+        },
+        "Auth.Portals.LoginSettings.Get": {
+            subject: "rpc.v1.Auth.Portals.LoginSettings.Get",
+            input: schema(AuthPortalsLoginSettingsGetRequestSchema),
+            output: schema(AuthPortalsLoginSettingsResponseSchema),
+            callerCapabilities: ["admin"],
+            errors: ["AuthError", "UnexpectedError", "ValidationError"],
+            declaredErrorTypes: ["AuthError", "UnexpectedError", "ValidationError"],
+        },
+        "Auth.Portals.LoginSettings.Update": {
+            subject: "rpc.v1.Auth.Portals.LoginSettings.Update",
+            input: schema(AuthPortalsLoginSettingsUpdateRequestSchema),
+            output: schema(AuthPortalsLoginSettingsResponseSchema),
+            callerCapabilities: ["admin"],
+            errors: ["AuthError", "UnexpectedError", "ValidationError"],
+            declaredErrorTypes: ["AuthError", "UnexpectedError", "ValidationError"],
+        },
+        "Auth.Portals.Put": {
+            subject: "rpc.v1.Auth.Portals.Put",
+            input: schema(AuthPortalsPutRequestSchema),
+            output: schema(AuthPortalsPutResponseSchema),
+            callerCapabilities: ["admin"],
+            errors: ["AuthError", "UnexpectedError", "ValidationError"],
+            declaredErrorTypes: ["AuthError", "UnexpectedError", "ValidationError"],
+        },
+        "Auth.Portals.Remove": {
+            subject: "rpc.v1.Auth.Portals.Remove",
+            input: schema(AuthPortalsRemoveRequestSchema),
+            output: schema(AuthPortalsRemoveResponseSchema),
+            callerCapabilities: ["admin"],
+            errors: ["AuthError", "UnexpectedError", "ValidationError"],
+            declaredErrorTypes: ["AuthError", "UnexpectedError", "ValidationError"],
+        },
+        "Auth.Portals.Routes.Put": {
+            subject: "rpc.v1.Auth.Portals.Routes.Put",
+            input: schema(AuthPortalsRoutesPutRequestSchema),
+            output: schema(AuthPortalsRoutesPutResponseSchema),
+            callerCapabilities: ["admin"],
+            errors: ["AuthError", "UnexpectedError", "ValidationError"],
+            declaredErrorTypes: ["AuthError", "UnexpectedError", "ValidationError"],
+        },
+        "Auth.Portals.Routes.Remove": {
+            subject: "rpc.v1.Auth.Portals.Routes.Remove",
+            input: schema(AuthPortalsRoutesRemoveRequestSchema),
+            output: schema(AuthPortalsRoutesRemoveResponseSchema),
+            callerCapabilities: ["admin"],
+            errors: ["AuthError", "UnexpectedError", "ValidationError"],
+            declaredErrorTypes: ["AuthError", "UnexpectedError", "ValidationError"],
+        },
+        "Auth.Requests.Validate": {
+            subject: "rpc.v1.Auth.Requests.Validate",
+            input: schema(AuthRequestsValidateRequestSchema),
+            output: schema(AuthRequestsValidateResponseSchema),
+            callerCapabilities: ["service"],
+            errors: ["AuthError", "UnexpectedError", "ValidationError"],
+            declaredErrorTypes: ["AuthError", "UnexpectedError", "ValidationError"],
+        },
+        "Auth.ServiceInstances.Disable": {
+            subject: "rpc.v1.Auth.ServiceInstances.Disable",
+            input: schema(AuthServiceInstancesDisableRequestSchema),
+            output: schema(AuthServiceInstancesDisableResponseSchema),
+            callerCapabilities: ["admin"],
+            errors: ["AuthError", "UnexpectedError", "ValidationError"],
+            declaredErrorTypes: ["AuthError", "UnexpectedError", "ValidationError"],
+        },
+        "Auth.ServiceInstances.Enable": {
+            subject: "rpc.v1.Auth.ServiceInstances.Enable",
+            input: schema(AuthServiceInstancesEnableRequestSchema),
+            output: schema(AuthServiceInstancesEnableResponseSchema),
+            callerCapabilities: ["admin"],
+            errors: ["AuthError", "UnexpectedError", "ValidationError"],
+            declaredErrorTypes: ["AuthError", "UnexpectedError", "ValidationError"],
+        },
+        "Auth.ServiceInstances.List": {
+            subject: "rpc.v1.Auth.ServiceInstances.List",
+            input: schema(AuthServiceInstancesListRequestSchema),
+            output: schema(AuthServiceInstancesListResponseSchema),
+            callerCapabilities: ["admin"],
+            errors: ["AuthError", "UnexpectedError", "ValidationError"],
+            declaredErrorTypes: ["AuthError", "UnexpectedError", "ValidationError"],
+        },
+        "Auth.ServiceInstances.Provision": {
+            subject: "rpc.v1.Auth.ServiceInstances.Provision",
+            input: schema(AuthServiceInstancesProvisionRequestSchema),
+            output: schema(AuthServiceInstancesProvisionResponseSchema),
+            callerCapabilities: ["admin"],
+            errors: ["AuthError", "UnexpectedError", "ValidationError"],
+            declaredErrorTypes: ["AuthError", "UnexpectedError", "ValidationError"],
+        },
+        "Auth.ServiceInstances.Remove": {
+            subject: "rpc.v1.Auth.ServiceInstances.Remove",
+            input: schema(AuthServiceInstancesRemoveRequestSchema),
+            output: schema(AuthServiceInstancesRemoveResponseSchema),
+            callerCapabilities: ["admin"],
+            errors: ["AuthError", "UnexpectedError", "ValidationError"],
+            declaredErrorTypes: ["AuthError", "UnexpectedError", "ValidationError"],
+        },
+        "Auth.Sessions.List": {
+            subject: "rpc.v1.Auth.Sessions.List",
+            input: schema(AuthSessionsListRequestSchema),
+            output: schema(AuthSessionsListResponseSchema),
+            callerCapabilities: ["admin"],
+            errors: ["AuthError", "UnexpectedError", "ValidationError"],
+            declaredErrorTypes: ["AuthError", "UnexpectedError", "ValidationError"],
+        },
+        "Auth.Sessions.Logout": {
+            subject: "rpc.v1.Auth.Sessions.Logout",
+            input: schema(AuthSessionsLogoutRequestSchema),
+            output: schema(AuthSessionsLogoutResponseSchema),
+            callerCapabilities: [],
+            errors: ["AuthError", "UnexpectedError"],
+            declaredErrorTypes: ["AuthError", "UnexpectedError"],
+        },
+        "Auth.Sessions.Me": {
+            subject: "rpc.v1.Auth.Sessions.Me",
+            input: schema(AuthSessionsMeRequestSchema),
+            output: schema(AuthSessionsMeResponseSchema),
+            callerCapabilities: [],
+            errors: ["AuthError", "UnexpectedError"],
+            declaredErrorTypes: ["AuthError", "UnexpectedError"],
+        },
+        "Auth.Sessions.Revoke": {
+            subject: "rpc.v1.Auth.Sessions.Revoke",
+            input: schema(AuthSessionsRevokeRequestSchema),
+            output: schema(AuthSessionsRevokeResponseSchema),
+            callerCapabilities: ["admin"],
+            errors: ["AuthError", "UnexpectedError", "ValidationError"],
+            declaredErrorTypes: ["AuthError", "UnexpectedError", "ValidationError"],
+        },
+        "Auth.UserIdentities.List": {
+            subject: "rpc.v1.Auth.UserIdentities.List",
+            input: schema(AuthUserIdentitiesListRequestSchema),
+            output: schema(AuthUserIdentitiesListResponseSchema),
+            callerCapabilities: ["admin"],
+            errors: ["AuthError", "UnexpectedError", "ValidationError"],
+            declaredErrorTypes: ["AuthError", "UnexpectedError", "ValidationError"],
+        },
+        "Auth.UserIdentities.Unlink": {
+            subject: "rpc.v1.Auth.UserIdentities.Unlink",
+            input: schema(AuthUserIdentitiesUnlinkRequestSchema),
+            output: schema(AuthUserIdentitiesUnlinkResponseSchema),
+            callerCapabilities: ["admin"],
+            errors: ["AuthError", "UnexpectedError", "ValidationError"],
+            declaredErrorTypes: ["AuthError", "UnexpectedError", "ValidationError"],
+        },
+        "Auth.Users.Create": {
+            subject: "rpc.v1.Auth.Users.Create",
+            input: schema(AuthUsersCreateRequestSchema),
+            output: schema(AuthUsersCreateResponseSchema),
+            callerCapabilities: ["admin"],
+            errors: ["AuthError", "UnexpectedError", "ValidationError"],
+            declaredErrorTypes: ["AuthError", "UnexpectedError", "ValidationError"],
+        },
+        "Auth.Users.Get": {
+            subject: "rpc.v1.Auth.Users.Get",
+            input: schema(AuthUsersGetRequestSchema),
+            output: schema(AuthUsersGetResponseSchema),
+            callerCapabilities: ["admin"],
+            errors: ["AuthError", "UnexpectedError", "ValidationError"],
+            declaredErrorTypes: ["AuthError", "UnexpectedError", "ValidationError"],
+        },
+        "Auth.Users.IdentityLink.Create": {
+            subject: "rpc.v1.Auth.Users.IdentityLink.Create",
+            input: schema(AuthUsersIdentityLinkCreateRequestSchema),
+            output: schema(AuthUsersAccountFlowCreateResponseSchema),
+            callerCapabilities: [],
+            errors: ["AuthError", "UnexpectedError", "ValidationError"],
+            declaredErrorTypes: ["AuthError", "UnexpectedError", "ValidationError"],
+        },
+        "Auth.Users.List": {
+            subject: "rpc.v1.Auth.Users.List",
+            input: schema(AuthUsersListRequestSchema),
+            output: schema(AuthUsersListResponseSchema),
+            callerCapabilities: ["admin"],
+            errors: ["AuthError", "UnexpectedError", "ValidationError"],
+            declaredErrorTypes: ["AuthError", "UnexpectedError", "ValidationError"],
+        },
+        "Auth.Users.Password.Change": {
+            subject: "rpc.v1.Auth.Users.Password.Change",
+            input: schema(AuthUsersPasswordChangeRequestSchema),
+            output: schema(AuthUsersPasswordChangeResponseSchema),
+            callerCapabilities: [],
+            errors: ["AuthError", "UnexpectedError", "ValidationError"],
+            declaredErrorTypes: ["AuthError", "UnexpectedError", "ValidationError"],
+        },
+        "Auth.Users.PasswordReset.Create": {
+            subject: "rpc.v1.Auth.Users.PasswordReset.Create",
+            input: schema(AuthUsersPasswordResetCreateRequestSchema),
+            output: schema(AuthUsersAccountFlowCreateResponseSchema),
+            callerCapabilities: ["admin"],
+            errors: ["AuthError", "UnexpectedError", "ValidationError"],
+            declaredErrorTypes: ["AuthError", "UnexpectedError", "ValidationError"],
+        },
+        "Auth.Users.Update": {
+            subject: "rpc.v1.Auth.Users.Update",
+            input: schema(AuthUsersUpdateRequestSchema),
+            output: schema(AuthUsersUpdateResponseSchema),
+            callerCapabilities: ["admin"],
+            errors: ["AuthError", "UnexpectedError", "ValidationError"],
+            declaredErrorTypes: ["AuthError", "UnexpectedError", "ValidationError"],
+        },
+    },
+    operations: {
+        "Auth.DeviceUserAuthorities.Resolve": {
+            subject: "operations.v1.Auth.DeviceUserAuthorities.Resolve",
+            input: schema(AuthResolveDeviceUserAuthoritiesRequestSchema),
+            progress: schema(AuthResolveDeviceUserAuthoritiesProgressSchema),
+            output: schema(AuthResolveDeviceUserAuthoritiesResponseSchema),
+            callerCapabilities: [],
+            readCapabilities: [],
+            cancelCapabilities: [],
+            controlCapabilities: [],
+        },
+    },
+    events: {
+        "Auth.Connections.Closed": {
+            subject: "events.v1.Auth.Connections.Closed",
+            event: schema(AuthConnectionsClosedEventSchema),
+            publishCapabilities: ["trellis.auth::events.auth"],
+            subscribeCapabilities: ["trellis.auth::events.auth"],
+        },
+        "Auth.Connections.Kicked": {
+            subject: "events.v1.Auth.Connections.Kicked",
+            event: schema(AuthConnectionsKickedEventSchema),
+            publishCapabilities: ["trellis.auth::events.auth"],
+            subscribeCapabilities: ["trellis.auth::events.auth"],
+        },
+        "Auth.Connections.Opened": {
+            subject: "events.v1.Auth.Connections.Opened",
+            event: schema(AuthConnectionsOpenedEventSchema),
+            publishCapabilities: ["trellis.auth::events.auth"],
+            subscribeCapabilities: ["trellis.auth::events.auth"],
+        },
+        "Auth.DeviceUserAuthorities.Approved": {
+            subject: "events.v1.Auth.DeviceUserAuthorities.Approved.{/deploymentId}",
+            params: ["/deploymentId"],
+            event: schema(AuthDeviceUserAuthoritiesApprovedEventSchema),
+            publishCapabilities: ["trellis.auth::events.auth"],
+            subscribeCapabilities: ["trellis.auth::device.review"],
+        },
+        "Auth.DeviceUserAuthorities.Requested": {
+            subject: "events.v1.Auth.DeviceUserAuthorities.Requested.{/deploymentId}",
+            params: ["/deploymentId"],
+            event: schema(AuthDeviceUserAuthoritiesRequestedEventSchema),
+            publishCapabilities: ["trellis.auth::events.auth"],
+            subscribeCapabilities: ["trellis.auth::device.review"],
+        },
+        "Auth.DeviceUserAuthorities.Resolved": {
+            subject: "events.v1.Auth.DeviceUserAuthorities.Resolved.{/deploymentId}",
+            params: ["/deploymentId"],
+            event: schema(AuthDeviceUserAuthoritiesResolvedEventSchema),
+            publishCapabilities: ["trellis.auth::events.auth"],
+            subscribeCapabilities: ["trellis.auth::device.review", "trellis.auth::events.auth"],
+        },
+        "Auth.DeviceUserAuthorities.ReviewRequested": {
+            subject: "events.v1.Auth.DeviceUserAuthorities.ReviewRequested.{/deploymentId}",
+            params: ["/deploymentId"],
+            event: schema(AuthDeviceUserAuthoritiesReviewRequestedEventSchema),
+            publishCapabilities: ["trellis.auth::events.auth"],
+            subscribeCapabilities: ["trellis.auth::device.review"],
+        },
+        "Auth.Sessions.Revoked": {
+            subject: "events.v1.Auth.Sessions.Revoked",
+            event: schema(AuthSessionsRevokedEventSchema),
+            publishCapabilities: ["trellis.auth::events.auth"],
+            subscribeCapabilities: ["trellis.auth::events.auth"],
+        },
+    },
+    feeds: {},
+    subjects: {},
+};