@qlever-llc/trellis 0.8.3 → 0.9.0-rc.10

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (693) hide show
  1. package/README.md +1 -1
  2. package/bin/trellis-generate.js +132 -0
  3. package/esm/auth/browser/login.d.ts.map +1 -1
  4. package/esm/auth/browser/login.js +46 -3
  5. package/esm/auth/browser/portal.d.ts.map +1 -1
  6. package/esm/auth/browser/portal.js +5 -1
  7. package/esm/auth/browser/session.d.ts +18 -7
  8. package/esm/auth/browser/session.d.ts.map +1 -1
  9. package/esm/auth/browser/session.js +47 -11
  10. package/esm/auth/browser/storage.d.ts +6 -1
  11. package/esm/auth/browser/storage.d.ts.map +1 -1
  12. package/esm/auth/browser/storage.js +15 -3
  13. package/esm/auth/browser.d.ts +2 -2
  14. package/esm/auth/browser.d.ts.map +1 -1
  15. package/esm/auth/browser.js +1 -1
  16. package/esm/auth/device_activation.d.ts +36 -33
  17. package/esm/auth/device_activation.d.ts.map +1 -1
  18. package/esm/auth/device_activation.js +26 -22
  19. package/esm/auth/mod.d.ts +4 -4
  20. package/esm/auth/mod.d.ts.map +1 -1
  21. package/esm/auth/mod.js +2 -2
  22. package/esm/auth/proof.d.ts +3 -1
  23. package/esm/auth/proof.d.ts.map +1 -1
  24. package/esm/auth/proof.js +21 -15
  25. package/esm/auth/protocol.d.ts +2457 -941
  26. package/esm/auth/protocol.d.ts.map +1 -1
  27. package/esm/auth/protocol.js +747 -375
  28. package/esm/auth/schemas.d.ts +25 -4
  29. package/esm/auth/schemas.d.ts.map +1 -1
  30. package/esm/auth/schemas.js +14 -4
  31. package/esm/auth/session_auth.d.ts +1 -1
  32. package/esm/auth/session_auth.d.ts.map +1 -1
  33. package/esm/auth/session_auth.js +7 -1
  34. package/esm/client_connect.d.ts +2 -0
  35. package/esm/client_connect.d.ts.map +1 -1
  36. package/esm/client_connect.js +76 -15
  37. package/esm/contract.d.ts +3 -0
  38. package/esm/contract.d.ts.map +1 -1
  39. package/esm/contract_support/mod.d.ts +422 -43
  40. package/esm/contract_support/mod.d.ts.map +1 -1
  41. package/esm/contract_support/mod.js +734 -33
  42. package/esm/contract_support/protocol.d.ts +20 -5
  43. package/esm/contract_support/protocol.d.ts.map +1 -1
  44. package/esm/contract_support/protocol.js +18 -10
  45. package/esm/contract_support/runtime.d.ts +11 -0
  46. package/esm/contract_support/runtime.d.ts.map +1 -1
  47. package/esm/contract_support/schema_pointers.d.ts.map +1 -1
  48. package/esm/contract_support/schema_pointers.js +32 -14
  49. package/esm/device.d.ts +2 -0
  50. package/esm/device.d.ts.map +1 -1
  51. package/esm/device.js +3 -0
  52. package/esm/errors/AuthError.d.ts +2 -1
  53. package/esm/errors/AuthError.d.ts.map +1 -1
  54. package/esm/errors/AuthError.js +8 -3
  55. package/esm/errors/index.d.ts +4 -4
  56. package/esm/errors/index.d.ts.map +1 -1
  57. package/esm/errors/index.js +1 -0
  58. package/esm/generated-sdk/auth/api.d.ts +27 -9
  59. package/esm/generated-sdk/auth/api.d.ts.map +1 -1
  60. package/esm/generated-sdk/auth/api.js +16 -590
  61. package/esm/generated-sdk/auth/client.d.ts +91 -85
  62. package/esm/generated-sdk/auth/client.d.ts.map +1 -1
  63. package/esm/generated-sdk/auth/contract.d.ts +1 -1
  64. package/esm/generated-sdk/auth/contract.d.ts.map +1 -1
  65. package/esm/generated-sdk/auth/contract.js +4 -2
  66. package/esm/generated-sdk/auth/mod.d.ts +1 -0
  67. package/esm/generated-sdk/auth/mod.d.ts.map +1 -1
  68. package/esm/generated-sdk/auth/owned_api.d.ts +3 -0
  69. package/esm/generated-sdk/auth/owned_api.d.ts.map +1 -0
  70. package/esm/generated-sdk/auth/owned_api.js +594 -0
  71. package/esm/generated-sdk/auth/schemas.d.ts +9959 -5160
  72. package/esm/generated-sdk/auth/schemas.d.ts.map +1 -1
  73. package/esm/generated-sdk/auth/schemas.js +136 -137
  74. package/esm/generated-sdk/auth/types.d.ts +2418 -1557
  75. package/esm/generated-sdk/auth/types.d.ts.map +1 -1
  76. package/esm/generated-sdk/auth/types.js +1 -1
  77. package/esm/generated-sdk/health/api.d.ts +24 -9
  78. package/esm/generated-sdk/health/api.d.ts.map +1 -1
  79. package/esm/generated-sdk/health/api.js +12 -20
  80. package/esm/generated-sdk/health/client.d.ts +2 -1
  81. package/esm/generated-sdk/health/client.d.ts.map +1 -1
  82. package/esm/generated-sdk/health/contract.d.ts.map +1 -1
  83. package/esm/generated-sdk/health/contract.js +2 -0
  84. package/esm/generated-sdk/health/owned_api.d.ts +3 -0
  85. package/esm/generated-sdk/health/owned_api.d.ts.map +1 -0
  86. package/esm/generated-sdk/health/owned_api.js +16 -0
  87. package/esm/generated-sdk/health/types.d.ts +2 -0
  88. package/esm/generated-sdk/health/types.d.ts.map +1 -1
  89. package/esm/generated-sdk/jobs/api.d.ts +33 -9
  90. package/esm/generated-sdk/jobs/api.d.ts.map +1 -1
  91. package/esm/generated-sdk/jobs/api.js +22 -87
  92. package/esm/generated-sdk/jobs/client.d.ts +9 -2
  93. package/esm/generated-sdk/jobs/client.d.ts.map +1 -1
  94. package/esm/generated-sdk/jobs/contract.d.ts +1 -1
  95. package/esm/generated-sdk/jobs/contract.d.ts.map +1 -1
  96. package/esm/generated-sdk/jobs/contract.js +4 -2
  97. package/esm/generated-sdk/jobs/owned_api.d.ts +3 -0
  98. package/esm/generated-sdk/jobs/owned_api.d.ts.map +1 -0
  99. package/esm/generated-sdk/jobs/owned_api.js +118 -0
  100. package/esm/generated-sdk/jobs/schemas.d.ts +336 -123
  101. package/esm/generated-sdk/jobs/schemas.d.ts.map +1 -1
  102. package/esm/generated-sdk/jobs/schemas.js +17 -15
  103. package/esm/generated-sdk/jobs/types.d.ts +144 -34
  104. package/esm/generated-sdk/jobs/types.d.ts.map +1 -1
  105. package/esm/generated-sdk/jobs/types.js +36 -1
  106. package/esm/generated-sdk/state/api.d.ts +27 -9
  107. package/esm/generated-sdk/state/api.d.ts.map +1 -1
  108. package/esm/generated-sdk/state/api.js +16 -71
  109. package/esm/generated-sdk/state/client.d.ts +4 -2
  110. package/esm/generated-sdk/state/client.d.ts.map +1 -1
  111. package/esm/generated-sdk/state/contract.d.ts +1 -1
  112. package/esm/generated-sdk/state/contract.d.ts.map +1 -1
  113. package/esm/generated-sdk/state/contract.js +4 -2
  114. package/esm/generated-sdk/state/owned_api.d.ts +3 -0
  115. package/esm/generated-sdk/state/owned_api.d.ts.map +1 -0
  116. package/esm/generated-sdk/state/owned_api.js +66 -0
  117. package/esm/generated-sdk/state/schemas.d.ts +264 -284
  118. package/esm/generated-sdk/state/schemas.d.ts.map +1 -1
  119. package/esm/generated-sdk/state/schemas.js +6 -6
  120. package/esm/generated-sdk/state/types.d.ts +24 -23
  121. package/esm/generated-sdk/state/types.d.ts.map +1 -1
  122. package/esm/generated-sdk/state/types.js +1 -1
  123. package/esm/generated-sdk/trellis-core/api.d.ts +27 -9
  124. package/esm/generated-sdk/trellis-core/api.d.ts.map +1 -1
  125. package/esm/generated-sdk/trellis-core/api.js +16 -39
  126. package/esm/generated-sdk/trellis-core/client.d.ts +5 -2
  127. package/esm/generated-sdk/trellis-core/client.d.ts.map +1 -1
  128. package/esm/generated-sdk/trellis-core/contract.d.ts +1 -1
  129. package/esm/generated-sdk/trellis-core/contract.d.ts.map +1 -1
  130. package/esm/generated-sdk/trellis-core/contract.js +4 -2
  131. package/esm/generated-sdk/trellis-core/owned_api.d.ts +3 -0
  132. package/esm/generated-sdk/trellis-core/owned_api.d.ts.map +1 -0
  133. package/esm/generated-sdk/trellis-core/owned_api.js +42 -0
  134. package/esm/generated-sdk/trellis-core/schemas.d.ts +259 -11
  135. package/esm/generated-sdk/trellis-core/schemas.d.ts.map +1 -1
  136. package/esm/generated-sdk/trellis-core/schemas.js +5 -3
  137. package/esm/generated-sdk/trellis-core/types.d.ts +56 -1
  138. package/esm/generated-sdk/trellis-core/types.d.ts.map +1 -1
  139. package/esm/generated-sdk/trellis-core/types.js +1 -1
  140. package/esm/helpers.d.ts.map +1 -1
  141. package/esm/index.d.ts +4 -3
  142. package/esm/index.d.ts.map +1 -1
  143. package/esm/index.js +1 -0
  144. package/esm/jobs.d.ts +10 -1
  145. package/esm/jobs.d.ts.map +1 -1
  146. package/esm/jobs.js +16 -1
  147. package/esm/kv.d.ts.map +1 -1
  148. package/esm/kv.js +10 -4
  149. package/esm/models/auth/rpc/Logout.d.ts +4 -4
  150. package/esm/models/auth/rpc/Logout.d.ts.map +1 -1
  151. package/esm/models/auth/rpc/Logout.js +2 -2
  152. package/esm/models/trellis/Page.d.ts +2 -0
  153. package/esm/models/trellis/Page.d.ts.map +1 -0
  154. package/esm/models/trellis/Page.js +1 -0
  155. package/esm/models/trellis/State.d.ts +1 -0
  156. package/esm/models/trellis/State.d.ts.map +1 -1
  157. package/esm/models/trellis/State.js +1 -0
  158. package/esm/models/trellis/rpc/StateList.d.ts +9 -12
  159. package/esm/models/trellis/rpc/StateList.d.ts.map +1 -1
  160. package/esm/models/trellis/rpc/StateList.js +16 -18
  161. package/esm/npm/src/auth/browser/login.d.ts.map +1 -1
  162. package/esm/npm/src/auth/browser/login.js +46 -3
  163. package/esm/npm/src/auth/browser/portal.d.ts.map +1 -1
  164. package/esm/npm/src/auth/browser/portal.js +5 -1
  165. package/esm/npm/src/auth/browser/session.d.ts +18 -7
  166. package/esm/npm/src/auth/browser/session.d.ts.map +1 -1
  167. package/esm/npm/src/auth/browser/session.js +47 -11
  168. package/esm/npm/src/auth/browser/storage.d.ts +6 -1
  169. package/esm/npm/src/auth/browser/storage.d.ts.map +1 -1
  170. package/esm/npm/src/auth/browser/storage.js +15 -3
  171. package/esm/npm/src/auth/browser.d.ts +2 -2
  172. package/esm/npm/src/auth/browser.d.ts.map +1 -1
  173. package/esm/npm/src/auth/browser.js +1 -1
  174. package/esm/npm/src/auth/device_activation.d.ts +36 -33
  175. package/esm/npm/src/auth/device_activation.d.ts.map +1 -1
  176. package/esm/npm/src/auth/device_activation.js +26 -22
  177. package/esm/npm/src/auth/mod.d.ts +4 -4
  178. package/esm/npm/src/auth/mod.d.ts.map +1 -1
  179. package/esm/npm/src/auth/mod.js +2 -2
  180. package/esm/npm/src/auth/proof.d.ts +3 -1
  181. package/esm/npm/src/auth/proof.d.ts.map +1 -1
  182. package/esm/npm/src/auth/proof.js +21 -15
  183. package/esm/npm/src/auth/protocol.d.ts +2457 -941
  184. package/esm/npm/src/auth/protocol.d.ts.map +1 -1
  185. package/esm/npm/src/auth/protocol.js +747 -375
  186. package/esm/npm/src/auth/schemas.d.ts +25 -4
  187. package/esm/npm/src/auth/schemas.d.ts.map +1 -1
  188. package/esm/npm/src/auth/schemas.js +14 -4
  189. package/esm/npm/src/auth/session_auth.d.ts +1 -1
  190. package/esm/npm/src/auth/session_auth.d.ts.map +1 -1
  191. package/esm/npm/src/auth/session_auth.js +7 -1
  192. package/esm/npm/src/client_connect.d.ts +2 -0
  193. package/esm/npm/src/client_connect.d.ts.map +1 -1
  194. package/esm/npm/src/client_connect.js +76 -15
  195. package/esm/npm/src/contract.d.ts +3 -0
  196. package/esm/npm/src/contract.d.ts.map +1 -1
  197. package/esm/npm/src/contract_support/mod.d.ts +422 -43
  198. package/esm/npm/src/contract_support/mod.d.ts.map +1 -1
  199. package/esm/npm/src/contract_support/mod.js +734 -33
  200. package/esm/npm/src/contract_support/protocol.d.ts +20 -5
  201. package/esm/npm/src/contract_support/protocol.d.ts.map +1 -1
  202. package/esm/npm/src/contract_support/protocol.js +18 -10
  203. package/esm/npm/src/contract_support/runtime.d.ts +11 -0
  204. package/esm/npm/src/contract_support/runtime.d.ts.map +1 -1
  205. package/esm/npm/src/contract_support/schema_pointers.d.ts.map +1 -1
  206. package/esm/npm/src/contract_support/schema_pointers.js +32 -14
  207. package/esm/npm/src/device/deno.d.ts.map +1 -1
  208. package/esm/npm/src/device/deno.js +6 -0
  209. package/esm/npm/src/device.d.ts +2 -0
  210. package/esm/npm/src/device.d.ts.map +1 -1
  211. package/esm/npm/src/device.js +3 -0
  212. package/esm/npm/src/errors/AuthError.d.ts +2 -1
  213. package/esm/npm/src/errors/AuthError.d.ts.map +1 -1
  214. package/esm/npm/src/errors/AuthError.js +8 -3
  215. package/esm/npm/src/errors/index.d.ts +4 -4
  216. package/esm/npm/src/errors/index.d.ts.map +1 -1
  217. package/esm/npm/src/errors/index.js +1 -0
  218. package/esm/npm/src/generate.js +54 -24
  219. package/esm/npm/src/helpers.d.ts.map +1 -1
  220. package/esm/npm/src/index.d.ts +4 -3
  221. package/esm/npm/src/index.d.ts.map +1 -1
  222. package/esm/npm/src/index.js +1 -0
  223. package/esm/npm/src/jobs.d.ts +10 -1
  224. package/esm/npm/src/jobs.d.ts.map +1 -1
  225. package/esm/npm/src/jobs.js +16 -1
  226. package/esm/npm/src/kv.d.ts.map +1 -1
  227. package/esm/npm/src/kv.js +10 -4
  228. package/esm/npm/src/models/auth/rpc/Logout.d.ts +4 -4
  229. package/esm/npm/src/models/auth/rpc/Logout.d.ts.map +1 -1
  230. package/esm/npm/src/models/auth/rpc/Logout.js +2 -2
  231. package/esm/npm/src/models/trellis/Page.d.ts +2 -0
  232. package/esm/npm/src/models/trellis/Page.d.ts.map +1 -0
  233. package/esm/npm/src/models/trellis/Page.js +1 -0
  234. package/esm/npm/src/models/trellis/State.d.ts +1 -0
  235. package/esm/npm/src/models/trellis/State.d.ts.map +1 -1
  236. package/esm/npm/src/models/trellis/State.js +1 -0
  237. package/esm/npm/src/models/trellis/rpc/StateList.d.ts +9 -12
  238. package/esm/npm/src/models/trellis/rpc/StateList.d.ts.map +1 -1
  239. package/esm/npm/src/models/trellis/rpc/StateList.js +16 -18
  240. package/esm/npm/src/operations.d.ts +16 -7
  241. package/esm/npm/src/operations.d.ts.map +1 -1
  242. package/esm/npm/src/operations.js +84 -19
  243. package/esm/npm/src/runtime_transport.d.ts +2 -0
  244. package/esm/npm/src/runtime_transport.d.ts.map +1 -1
  245. package/esm/npm/src/runtime_transport.js +1 -0
  246. package/esm/npm/src/server/internal_jobs/active-job.d.ts +2 -1
  247. package/esm/npm/src/server/internal_jobs/active-job.d.ts.map +1 -1
  248. package/esm/npm/src/server/internal_jobs/active-job.js +3 -0
  249. package/esm/npm/src/server/internal_jobs/job-manager.d.ts +4 -1
  250. package/esm/npm/src/server/internal_jobs/job-manager.d.ts.map +1 -1
  251. package/esm/npm/src/server/internal_jobs/job-manager.js +61 -1
  252. package/esm/npm/src/server/internal_jobs/projection.js +1 -0
  253. package/esm/npm/src/server/internal_jobs/runtime-worker.d.ts +13 -1
  254. package/esm/npm/src/server/internal_jobs/runtime-worker.d.ts.map +1 -1
  255. package/esm/npm/src/server/internal_jobs/runtime-worker.js +73 -13
  256. package/esm/npm/src/server/internal_jobs/types.d.ts +19 -0
  257. package/esm/npm/src/server/internal_jobs/types.d.ts.map +1 -1
  258. package/esm/npm/src/server/internal_jobs/types.js +10 -0
  259. package/esm/npm/src/server/runtime.d.ts +1 -0
  260. package/esm/npm/src/server/runtime.d.ts.map +1 -1
  261. package/esm/npm/src/server/service.d.ts +10 -1
  262. package/esm/npm/src/server/service.d.ts.map +1 -1
  263. package/esm/npm/src/server/service.js +210 -64
  264. package/esm/npm/src/server/transfer.d.ts.map +1 -1
  265. package/esm/npm/src/server/transfer.js +4 -0
  266. package/esm/npm/src/server.d.ts.map +1 -1
  267. package/esm/npm/src/server.js +337 -34
  268. package/esm/npm/src/store.d.ts +8 -1
  269. package/esm/npm/src/store.d.ts.map +1 -1
  270. package/esm/npm/src/store.js +46 -8
  271. package/esm/npm/src/transfer.d.ts +3 -0
  272. package/esm/npm/src/transfer.d.ts.map +1 -1
  273. package/esm/npm/src/transfer.js +20 -30
  274. package/esm/npm/src/trellis.d.ts +85 -22
  275. package/esm/npm/src/trellis.d.ts.map +1 -1
  276. package/esm/npm/src/trellis.js +525 -61
  277. package/esm/operations.d.ts +16 -7
  278. package/esm/operations.d.ts.map +1 -1
  279. package/esm/operations.js +84 -19
  280. package/esm/runtime_transport.d.ts +2 -0
  281. package/esm/runtime_transport.d.ts.map +1 -1
  282. package/esm/runtime_transport.js +1 -0
  283. package/esm/store.d.ts +8 -1
  284. package/esm/store.d.ts.map +1 -1
  285. package/esm/store.js +46 -8
  286. package/esm/transfer.d.ts +3 -0
  287. package/esm/transfer.d.ts.map +1 -1
  288. package/esm/transfer.js +20 -30
  289. package/esm/trellis.d.ts +85 -22
  290. package/esm/trellis.d.ts.map +1 -1
  291. package/esm/trellis.js +525 -61
  292. package/package.json +6 -4
  293. package/script/auth/browser/login.d.ts.map +1 -1
  294. package/script/auth/browser/login.js +46 -3
  295. package/script/auth/browser/portal.d.ts.map +1 -1
  296. package/script/auth/browser/portal.js +5 -1
  297. package/script/auth/browser/session.d.ts +18 -7
  298. package/script/auth/browser/session.d.ts.map +1 -1
  299. package/script/auth/browser/session.js +47 -11
  300. package/script/auth/browser/storage.d.ts +6 -1
  301. package/script/auth/browser/storage.d.ts.map +1 -1
  302. package/script/auth/browser/storage.js +15 -3
  303. package/script/auth/browser.d.ts +2 -2
  304. package/script/auth/browser.d.ts.map +1 -1
  305. package/script/auth/browser.js +2 -1
  306. package/script/auth/device_activation.d.ts +36 -33
  307. package/script/auth/device_activation.d.ts.map +1 -1
  308. package/script/auth/device_activation.js +25 -21
  309. package/script/auth/mod.d.ts +4 -4
  310. package/script/auth/mod.d.ts.map +1 -1
  311. package/script/auth/mod.js +132 -137
  312. package/script/auth/proof.d.ts +3 -1
  313. package/script/auth/proof.d.ts.map +1 -1
  314. package/script/auth/proof.js +21 -15
  315. package/script/auth/protocol.d.ts +2457 -941
  316. package/script/auth/protocol.d.ts.map +1 -1
  317. package/script/auth/protocol.js +749 -377
  318. package/script/auth/schemas.d.ts +25 -4
  319. package/script/auth/schemas.d.ts.map +1 -1
  320. package/script/auth/schemas.js +16 -5
  321. package/script/auth/session_auth.d.ts +1 -1
  322. package/script/auth/session_auth.d.ts.map +1 -1
  323. package/script/auth/session_auth.js +7 -1
  324. package/script/client_connect.d.ts +2 -0
  325. package/script/client_connect.d.ts.map +1 -1
  326. package/script/client_connect.js +76 -15
  327. package/script/contract.d.ts +3 -0
  328. package/script/contract.d.ts.map +1 -1
  329. package/script/contract_support/mod.d.ts +422 -43
  330. package/script/contract_support/mod.d.ts.map +1 -1
  331. package/script/contract_support/mod.js +757 -51
  332. package/script/contract_support/protocol.d.ts +20 -5
  333. package/script/contract_support/protocol.d.ts.map +1 -1
  334. package/script/contract_support/protocol.js +20 -11
  335. package/script/contract_support/runtime.d.ts +11 -0
  336. package/script/contract_support/runtime.d.ts.map +1 -1
  337. package/script/contract_support/schema_pointers.d.ts.map +1 -1
  338. package/script/contract_support/schema_pointers.js +32 -14
  339. package/script/device.d.ts +2 -0
  340. package/script/device.d.ts.map +1 -1
  341. package/script/device.js +3 -0
  342. package/script/errors/AuthError.d.ts +2 -1
  343. package/script/errors/AuthError.d.ts.map +1 -1
  344. package/script/errors/AuthError.js +8 -3
  345. package/script/errors/index.d.ts +4 -4
  346. package/script/errors/index.d.ts.map +1 -1
  347. package/script/errors/index.js +1 -0
  348. package/script/generated-sdk/auth/api.d.ts +27 -9
  349. package/script/generated-sdk/auth/api.d.ts.map +1 -1
  350. package/script/generated-sdk/auth/api.js +17 -591
  351. package/script/generated-sdk/auth/client.d.ts +91 -85
  352. package/script/generated-sdk/auth/client.d.ts.map +1 -1
  353. package/script/generated-sdk/auth/contract.d.ts +1 -1
  354. package/script/generated-sdk/auth/contract.d.ts.map +1 -1
  355. package/script/generated-sdk/auth/contract.js +4 -2
  356. package/script/generated-sdk/auth/mod.d.ts +1 -0
  357. package/script/generated-sdk/auth/mod.d.ts.map +1 -1
  358. package/script/generated-sdk/auth/owned_api.d.ts +3 -0
  359. package/script/generated-sdk/auth/owned_api.d.ts.map +1 -0
  360. package/script/generated-sdk/auth/owned_api.js +597 -0
  361. package/script/generated-sdk/auth/schemas.d.ts +9959 -5160
  362. package/script/generated-sdk/auth/schemas.d.ts.map +1 -1
  363. package/script/generated-sdk/auth/schemas.js +139 -140
  364. package/script/generated-sdk/auth/types.d.ts +2418 -1557
  365. package/script/generated-sdk/auth/types.d.ts.map +1 -1
  366. package/script/generated-sdk/auth/types.js +1 -1
  367. package/script/generated-sdk/health/api.d.ts +24 -9
  368. package/script/generated-sdk/health/api.d.ts.map +1 -1
  369. package/script/generated-sdk/health/api.js +13 -21
  370. package/script/generated-sdk/health/client.d.ts +2 -1
  371. package/script/generated-sdk/health/client.d.ts.map +1 -1
  372. package/script/generated-sdk/health/contract.d.ts.map +1 -1
  373. package/script/generated-sdk/health/contract.js +2 -0
  374. package/script/generated-sdk/health/owned_api.d.ts +3 -0
  375. package/script/generated-sdk/health/owned_api.d.ts.map +1 -0
  376. package/script/generated-sdk/health/owned_api.js +19 -0
  377. package/script/generated-sdk/health/types.d.ts +2 -0
  378. package/script/generated-sdk/health/types.d.ts.map +1 -1
  379. package/script/generated-sdk/jobs/api.d.ts +33 -9
  380. package/script/generated-sdk/jobs/api.d.ts.map +1 -1
  381. package/script/generated-sdk/jobs/api.js +23 -88
  382. package/script/generated-sdk/jobs/client.d.ts +9 -2
  383. package/script/generated-sdk/jobs/client.d.ts.map +1 -1
  384. package/script/generated-sdk/jobs/contract.d.ts +1 -1
  385. package/script/generated-sdk/jobs/contract.d.ts.map +1 -1
  386. package/script/generated-sdk/jobs/contract.js +4 -2
  387. package/script/generated-sdk/jobs/owned_api.d.ts +3 -0
  388. package/script/generated-sdk/jobs/owned_api.d.ts.map +1 -0
  389. package/script/generated-sdk/jobs/owned_api.js +154 -0
  390. package/script/generated-sdk/jobs/schemas.d.ts +336 -123
  391. package/script/generated-sdk/jobs/schemas.d.ts.map +1 -1
  392. package/script/generated-sdk/jobs/schemas.js +18 -16
  393. package/script/generated-sdk/jobs/types.d.ts +144 -34
  394. package/script/generated-sdk/jobs/types.d.ts.map +1 -1
  395. package/script/generated-sdk/jobs/types.js +38 -2
  396. package/script/generated-sdk/state/api.d.ts +27 -9
  397. package/script/generated-sdk/state/api.d.ts.map +1 -1
  398. package/script/generated-sdk/state/api.js +17 -72
  399. package/script/generated-sdk/state/client.d.ts +4 -2
  400. package/script/generated-sdk/state/client.d.ts.map +1 -1
  401. package/script/generated-sdk/state/contract.d.ts +1 -1
  402. package/script/generated-sdk/state/contract.d.ts.map +1 -1
  403. package/script/generated-sdk/state/contract.js +4 -2
  404. package/script/generated-sdk/state/owned_api.d.ts +3 -0
  405. package/script/generated-sdk/state/owned_api.d.ts.map +1 -0
  406. package/script/generated-sdk/state/owned_api.js +69 -0
  407. package/script/generated-sdk/state/schemas.d.ts +264 -284
  408. package/script/generated-sdk/state/schemas.d.ts.map +1 -1
  409. package/script/generated-sdk/state/schemas.js +6 -6
  410. package/script/generated-sdk/state/types.d.ts +24 -23
  411. package/script/generated-sdk/state/types.d.ts.map +1 -1
  412. package/script/generated-sdk/state/types.js +1 -1
  413. package/script/generated-sdk/trellis-core/api.d.ts +27 -9
  414. package/script/generated-sdk/trellis-core/api.d.ts.map +1 -1
  415. package/script/generated-sdk/trellis-core/api.js +17 -40
  416. package/script/generated-sdk/trellis-core/client.d.ts +5 -2
  417. package/script/generated-sdk/trellis-core/client.d.ts.map +1 -1
  418. package/script/generated-sdk/trellis-core/contract.d.ts +1 -1
  419. package/script/generated-sdk/trellis-core/contract.d.ts.map +1 -1
  420. package/script/generated-sdk/trellis-core/contract.js +4 -2
  421. package/script/generated-sdk/trellis-core/owned_api.d.ts +3 -0
  422. package/script/generated-sdk/trellis-core/owned_api.d.ts.map +1 -0
  423. package/script/generated-sdk/trellis-core/owned_api.js +45 -0
  424. package/script/generated-sdk/trellis-core/schemas.d.ts +259 -11
  425. package/script/generated-sdk/trellis-core/schemas.d.ts.map +1 -1
  426. package/script/generated-sdk/trellis-core/schemas.js +6 -4
  427. package/script/generated-sdk/trellis-core/types.d.ts +56 -1
  428. package/script/generated-sdk/trellis-core/types.d.ts.map +1 -1
  429. package/script/generated-sdk/trellis-core/types.js +1 -1
  430. package/script/helpers.d.ts.map +1 -1
  431. package/script/index.d.ts +4 -3
  432. package/script/index.d.ts.map +1 -1
  433. package/script/index.js +5 -2
  434. package/script/jobs.d.ts +10 -1
  435. package/script/jobs.d.ts.map +1 -1
  436. package/script/jobs.js +17 -2
  437. package/script/kv.d.ts.map +1 -1
  438. package/script/kv.js +10 -4
  439. package/script/models/auth/rpc/Logout.d.ts +4 -4
  440. package/script/models/auth/rpc/Logout.d.ts.map +1 -1
  441. package/script/models/auth/rpc/Logout.js +3 -3
  442. package/script/models/trellis/Page.d.ts +2 -0
  443. package/script/models/trellis/Page.d.ts.map +1 -0
  444. package/script/models/trellis/Page.js +6 -0
  445. package/script/models/trellis/State.d.ts +1 -0
  446. package/script/models/trellis/State.d.ts.map +1 -1
  447. package/script/models/trellis/State.js +1 -0
  448. package/script/models/trellis/rpc/StateList.d.ts +9 -12
  449. package/script/models/trellis/rpc/StateList.d.ts.map +1 -1
  450. package/script/models/trellis/rpc/StateList.js +16 -18
  451. package/script/npm/src/auth/browser/login.d.ts.map +1 -1
  452. package/script/npm/src/auth/browser/login.js +46 -3
  453. package/script/npm/src/auth/browser/portal.d.ts.map +1 -1
  454. package/script/npm/src/auth/browser/portal.js +5 -1
  455. package/script/npm/src/auth/browser/session.d.ts +18 -7
  456. package/script/npm/src/auth/browser/session.d.ts.map +1 -1
  457. package/script/npm/src/auth/browser/session.js +47 -11
  458. package/script/npm/src/auth/browser/storage.d.ts +6 -1
  459. package/script/npm/src/auth/browser/storage.d.ts.map +1 -1
  460. package/script/npm/src/auth/browser/storage.js +15 -3
  461. package/script/npm/src/auth/browser.d.ts +2 -2
  462. package/script/npm/src/auth/browser.d.ts.map +1 -1
  463. package/script/npm/src/auth/browser.js +2 -1
  464. package/script/npm/src/auth/device_activation.d.ts +36 -33
  465. package/script/npm/src/auth/device_activation.d.ts.map +1 -1
  466. package/script/npm/src/auth/device_activation.js +25 -21
  467. package/script/npm/src/auth/mod.d.ts +4 -4
  468. package/script/npm/src/auth/mod.d.ts.map +1 -1
  469. package/script/npm/src/auth/mod.js +132 -137
  470. package/script/npm/src/auth/proof.d.ts +3 -1
  471. package/script/npm/src/auth/proof.d.ts.map +1 -1
  472. package/script/npm/src/auth/proof.js +21 -15
  473. package/script/npm/src/auth/protocol.d.ts +2457 -941
  474. package/script/npm/src/auth/protocol.d.ts.map +1 -1
  475. package/script/npm/src/auth/protocol.js +749 -377
  476. package/script/npm/src/auth/schemas.d.ts +25 -4
  477. package/script/npm/src/auth/schemas.d.ts.map +1 -1
  478. package/script/npm/src/auth/schemas.js +16 -5
  479. package/script/npm/src/auth/session_auth.d.ts +1 -1
  480. package/script/npm/src/auth/session_auth.d.ts.map +1 -1
  481. package/script/npm/src/auth/session_auth.js +7 -1
  482. package/script/npm/src/client_connect.d.ts +2 -0
  483. package/script/npm/src/client_connect.d.ts.map +1 -1
  484. package/script/npm/src/client_connect.js +76 -15
  485. package/script/npm/src/contract.d.ts +3 -0
  486. package/script/npm/src/contract.d.ts.map +1 -1
  487. package/script/npm/src/contract_support/mod.d.ts +422 -43
  488. package/script/npm/src/contract_support/mod.d.ts.map +1 -1
  489. package/script/npm/src/contract_support/mod.js +757 -51
  490. package/script/npm/src/contract_support/protocol.d.ts +20 -5
  491. package/script/npm/src/contract_support/protocol.d.ts.map +1 -1
  492. package/script/npm/src/contract_support/protocol.js +20 -11
  493. package/script/npm/src/contract_support/runtime.d.ts +11 -0
  494. package/script/npm/src/contract_support/runtime.d.ts.map +1 -1
  495. package/script/npm/src/contract_support/schema_pointers.d.ts.map +1 -1
  496. package/script/npm/src/contract_support/schema_pointers.js +32 -14
  497. package/script/npm/src/device/deno.d.ts.map +1 -1
  498. package/script/npm/src/device/deno.js +6 -0
  499. package/script/npm/src/device.d.ts +2 -0
  500. package/script/npm/src/device.d.ts.map +1 -1
  501. package/script/npm/src/device.js +3 -0
  502. package/script/npm/src/errors/AuthError.d.ts +2 -1
  503. package/script/npm/src/errors/AuthError.d.ts.map +1 -1
  504. package/script/npm/src/errors/AuthError.js +8 -3
  505. package/script/npm/src/errors/index.d.ts +4 -4
  506. package/script/npm/src/errors/index.d.ts.map +1 -1
  507. package/script/npm/src/errors/index.js +1 -0
  508. package/script/npm/src/generate.js +54 -57
  509. package/script/npm/src/helpers.d.ts.map +1 -1
  510. package/script/npm/src/index.d.ts +4 -3
  511. package/script/npm/src/index.d.ts.map +1 -1
  512. package/script/npm/src/index.js +5 -2
  513. package/script/npm/src/jobs.d.ts +10 -1
  514. package/script/npm/src/jobs.d.ts.map +1 -1
  515. package/script/npm/src/jobs.js +17 -2
  516. package/script/npm/src/kv.d.ts.map +1 -1
  517. package/script/npm/src/kv.js +10 -4
  518. package/script/npm/src/models/auth/rpc/Logout.d.ts +4 -4
  519. package/script/npm/src/models/auth/rpc/Logout.d.ts.map +1 -1
  520. package/script/npm/src/models/auth/rpc/Logout.js +3 -3
  521. package/script/npm/src/models/trellis/Page.d.ts +2 -0
  522. package/script/npm/src/models/trellis/Page.d.ts.map +1 -0
  523. package/script/npm/src/models/trellis/Page.js +6 -0
  524. package/script/npm/src/models/trellis/State.d.ts +1 -0
  525. package/script/npm/src/models/trellis/State.d.ts.map +1 -1
  526. package/script/npm/src/models/trellis/State.js +1 -0
  527. package/script/npm/src/models/trellis/rpc/StateList.d.ts +9 -12
  528. package/script/npm/src/models/trellis/rpc/StateList.d.ts.map +1 -1
  529. package/script/npm/src/models/trellis/rpc/StateList.js +16 -18
  530. package/script/npm/src/operations.d.ts +16 -7
  531. package/script/npm/src/operations.d.ts.map +1 -1
  532. package/script/npm/src/operations.js +84 -19
  533. package/script/npm/src/runtime_transport.d.ts +2 -0
  534. package/script/npm/src/runtime_transport.d.ts.map +1 -1
  535. package/script/npm/src/runtime_transport.js +2 -1
  536. package/script/npm/src/server/internal_jobs/active-job.d.ts +2 -1
  537. package/script/npm/src/server/internal_jobs/active-job.d.ts.map +1 -1
  538. package/script/npm/src/server/internal_jobs/active-job.js +3 -0
  539. package/script/npm/src/server/internal_jobs/job-manager.d.ts +4 -1
  540. package/script/npm/src/server/internal_jobs/job-manager.d.ts.map +1 -1
  541. package/script/npm/src/server/internal_jobs/job-manager.js +61 -1
  542. package/script/npm/src/server/internal_jobs/projection.js +1 -0
  543. package/script/npm/src/server/internal_jobs/runtime-worker.d.ts +13 -1
  544. package/script/npm/src/server/internal_jobs/runtime-worker.d.ts.map +1 -1
  545. package/script/npm/src/server/internal_jobs/runtime-worker.js +74 -13
  546. package/script/npm/src/server/internal_jobs/types.d.ts +19 -0
  547. package/script/npm/src/server/internal_jobs/types.d.ts.map +1 -1
  548. package/script/npm/src/server/internal_jobs/types.js +11 -1
  549. package/script/npm/src/server/runtime.d.ts +1 -0
  550. package/script/npm/src/server/runtime.d.ts.map +1 -1
  551. package/script/npm/src/server/service.d.ts +10 -1
  552. package/script/npm/src/server/service.d.ts.map +1 -1
  553. package/script/npm/src/server/service.js +208 -62
  554. package/script/npm/src/server/transfer.d.ts.map +1 -1
  555. package/script/npm/src/server/transfer.js +4 -0
  556. package/script/npm/src/server.d.ts.map +1 -1
  557. package/script/npm/src/server.js +336 -33
  558. package/script/npm/src/store.d.ts +8 -1
  559. package/script/npm/src/store.d.ts.map +1 -1
  560. package/script/npm/src/store.js +46 -8
  561. package/script/npm/src/transfer.d.ts +3 -0
  562. package/script/npm/src/transfer.d.ts.map +1 -1
  563. package/script/npm/src/transfer.js +19 -29
  564. package/script/npm/src/trellis.d.ts +85 -22
  565. package/script/npm/src/trellis.d.ts.map +1 -1
  566. package/script/npm/src/trellis.js +525 -61
  567. package/script/operations.d.ts +16 -7
  568. package/script/operations.d.ts.map +1 -1
  569. package/script/operations.js +84 -19
  570. package/script/runtime_transport.d.ts +2 -0
  571. package/script/runtime_transport.d.ts.map +1 -1
  572. package/script/runtime_transport.js +2 -1
  573. package/script/store.d.ts +8 -1
  574. package/script/store.d.ts.map +1 -1
  575. package/script/store.js +46 -8
  576. package/script/transfer.d.ts +3 -0
  577. package/script/transfer.d.ts.map +1 -1
  578. package/script/transfer.js +19 -29
  579. package/script/trellis.d.ts +85 -22
  580. package/script/trellis.d.ts.map +1 -1
  581. package/script/trellis.js +525 -61
  582. package/src/_dnt.polyfills.ts +274 -0
  583. package/src/_dnt.shims.ts +64 -0
  584. package/src/auth/browser/login.ts +295 -0
  585. package/src/auth/browser/portal.ts +75 -0
  586. package/src/auth/browser/session.ts +197 -0
  587. package/src/auth/browser/storage.ts +105 -0
  588. package/src/auth/browser.ts +82 -0
  589. package/src/auth/device_activation.ts +715 -0
  590. package/src/auth/keys.ts +116 -0
  591. package/src/auth/mod.ts +298 -0
  592. package/src/auth/proof.ts +111 -0
  593. package/src/auth/protocol.ts +1629 -0
  594. package/src/auth/schemas.ts +145 -0
  595. package/src/auth/session_auth.ts +167 -0
  596. package/src/auth/time.ts +15 -0
  597. package/src/auth/trellis_id.ts +9 -0
  598. package/src/auth/types.ts +4 -0
  599. package/src/auth/utils.ts +87 -0
  600. package/src/auth.ts +2 -0
  601. package/src/browser.ts +8 -0
  602. package/src/client.ts +164 -0
  603. package/src/client_connect.ts +1328 -0
  604. package/src/codec.ts +107 -0
  605. package/src/connection.ts +466 -0
  606. package/src/contract.ts +84 -0
  607. package/src/contract_support/canonical.ts +217 -0
  608. package/src/contract_support/mod.ts +5079 -0
  609. package/src/contract_support/protocol.ts +213 -0
  610. package/src/contract_support/runtime.ts +129 -0
  611. package/src/contract_support/schema_pointers.ts +161 -0
  612. package/src/contracts.ts +9 -0
  613. package/src/device/deno.ts +941 -0
  614. package/src/device.ts +989 -0
  615. package/src/env.ts +1 -0
  616. package/src/errors/AuthError.ts +82 -0
  617. package/src/errors/KVError.ts +47 -0
  618. package/src/errors/RemoteError.ts +111 -0
  619. package/src/errors/StoreError.ts +43 -0
  620. package/src/errors/TransferError.ts +43 -0
  621. package/src/errors/TransportError.ts +48 -0
  622. package/src/errors/TrellisError.ts +20 -0
  623. package/src/errors/ValidationError.ts +80 -0
  624. package/src/errors/index.ts +195 -0
  625. package/src/generate.ts +329 -0
  626. package/src/globals.ts +26 -0
  627. package/src/health.ts +28 -0
  628. package/src/helpers.ts +63 -0
  629. package/src/host/mod.ts +9 -0
  630. package/src/host/node.ts +9 -0
  631. package/src/index.ts +233 -0
  632. package/src/jobs.ts +344 -0
  633. package/src/kv.ts +564 -0
  634. package/src/models/auth/rpc/Logout.ts +15 -0
  635. package/src/models/trellis/Page.ts +6 -0
  636. package/src/models/trellis/State.ts +55 -0
  637. package/src/models/trellis/TrellisError.ts +21 -0
  638. package/src/models/trellis/rpc/StateDelete.ts +13 -0
  639. package/src/models/trellis/rpc/StateGet.ts +25 -0
  640. package/src/models/trellis/rpc/StateList.ts +26 -0
  641. package/src/models/trellis/rpc/StatePut.ts +42 -0
  642. package/src/operations.ts +1508 -0
  643. package/src/runtime_transport.ts +132 -0
  644. package/src/sdk/auth.ts +2 -0
  645. package/src/sdk/core.ts +2 -0
  646. package/src/sdk/health.ts +2 -0
  647. package/src/sdk/jobs.ts +2 -0
  648. package/src/sdk/state.ts +2 -0
  649. package/src/server/health.ts +379 -0
  650. package/src/server/health_rpc.ts +51 -0
  651. package/src/server/health_schemas.ts +61 -0
  652. package/src/server/internal_jobs/active-job.ts +115 -0
  653. package/src/server/internal_jobs/bindings.ts +26 -0
  654. package/src/server/internal_jobs/cancellation-registry.ts +71 -0
  655. package/src/server/internal_jobs/heartbeat.ts +120 -0
  656. package/src/server/internal_jobs/job-manager.ts +456 -0
  657. package/src/server/internal_jobs/projection.ts +48 -0
  658. package/src/server/internal_jobs/runtime-worker.ts +741 -0
  659. package/src/server/internal_jobs/types.ts +124 -0
  660. package/src/server/runtime.ts +27 -0
  661. package/src/server/service.ts +2377 -0
  662. package/src/server/subscription.ts +143 -0
  663. package/src/server/transfer.ts +962 -0
  664. package/src/server.ts +1725 -0
  665. package/src/server_logger.ts +10 -0
  666. package/src/service/deno.ts +18 -0
  667. package/src/service/mod.ts +68 -0
  668. package/src/service/node.ts +18 -0
  669. package/src/store.ts +658 -0
  670. package/src/tasks.ts +34 -0
  671. package/src/telemetry/carrier.ts +35 -0
  672. package/src/telemetry/core.ts +31 -0
  673. package/src/telemetry/env.ts +23 -0
  674. package/src/telemetry/mod.ts +26 -0
  675. package/src/telemetry/nats.ts +15 -0
  676. package/src/telemetry/result.ts +20 -0
  677. package/src/telemetry/trace.ts +39 -0
  678. package/src/telemetry/trellis.ts +1 -0
  679. package/src/tracing.ts +28 -0
  680. package/src/transfer.ts +602 -0
  681. package/src/trellis.ts +3650 -0
  682. package/esm/models/trellis/Paginate.d.ts +0 -7
  683. package/esm/models/trellis/Paginate.d.ts.map +0 -1
  684. package/esm/models/trellis/Paginate.js +0 -5
  685. package/esm/npm/src/models/trellis/Paginate.d.ts +0 -7
  686. package/esm/npm/src/models/trellis/Paginate.d.ts.map +0 -1
  687. package/esm/npm/src/models/trellis/Paginate.js +0 -5
  688. package/script/models/trellis/Paginate.d.ts +0 -7
  689. package/script/models/trellis/Paginate.d.ts.map +0 -1
  690. package/script/models/trellis/Paginate.js +0 -11
  691. package/script/npm/src/models/trellis/Paginate.d.ts +0 -7
  692. package/script/npm/src/models/trellis/Paginate.d.ts.map +0 -1
  693. package/script/npm/src/models/trellis/Paginate.js +0 -11
package/script/auth/protocol.js CHANGED
@@ -1,11 +1,12 @@
1
1
  "use strict";
2
2
  Object.defineProperty(exports, "__esModule", { value: true });
3
- exports.ContractAnalysisOperationSchema = exports.ContractAnalysisRpcMethodSchema = exports.ContractAnalysisJobsQueueSchema = exports.ContractAnalysisStoreResourceSchema = exports.ContractAnalysisKvResourceSchema = exports.ContractAnalysisSummarySchema = exports.AuthRemoveServiceInstanceResponseSchema = exports.AuthRemoveServiceInstanceSchema = exports.AuthEnableServiceInstanceResponseSchema = exports.AuthEnableServiceInstanceSchema = exports.AuthDisableServiceInstanceResponseSchema = exports.AuthDisableServiceInstanceSchema = exports.AuthListServiceInstancesResponseSchema = exports.AuthListServiceInstancesSchema = exports.AuthProvisionServiceInstanceResponseSchema = exports.AuthProvisionServiceInstanceSchema = exports.AuthRemoveServiceDeploymentResponseSchema = exports.AuthRemoveServiceDeploymentSchema = exports.AuthEnableServiceDeploymentResponseSchema = exports.AuthEnableServiceDeploymentSchema = exports.AuthDisableServiceDeploymentResponseSchema = exports.AuthDisableServiceDeploymentSchema = exports.AuthUnapplyServiceDeploymentContractResponseSchema = exports.AuthUnapplyServiceDeploymentContractSchema = exports.AuthApplyServiceDeploymentContractResponseSchema = exports.AuthApplyServiceDeploymentContractSchema = exports.AuthListServiceDeploymentsResponseSchema = exports.AuthListServiceDeploymentsSchema = exports.AuthCreateServiceDeploymentResponseSchema = exports.AuthCreateServiceDeploymentSchema = exports.AuthDisableInstanceGrantPolicyResponseSchema = exports.AuthDisableInstanceGrantPolicySchema = exports.AuthUpsertInstanceGrantPolicyResponseSchema = exports.AuthUpsertInstanceGrantPolicySchema = exports.AuthListInstanceGrantPoliciesResponseSchema = exports.AuthListInstanceGrantPoliciesSchema = exports.InstanceGrantPolicySchema = exports.AdminPolicySourceSchema = exports.PortalProfileSourceSchema = exports.InstanceGrantPolicyActorSchema = exports.ApprovalRecordViewSchema = exports.ContractApprovalViewSchema = exports.ApprovalDecisionSchema = exports.ServiceInstanceSchema = exports.ServiceDeploymentSchema = exports.DeviceAppliedDeploymentContractSchema = exports.ServiceAppliedDeploymentContractSchema = exports.OpenObjectSchema = exports.DigestSchema = exports.ParticipantKindSchema = void 0;
4
- exports.AuthListPortalsResponseSchema = exports.AuthListPortalsSchema = exports.AuthCreatePortalResponseSchema = exports.AuthCreatePortalSchema = exports.DeviceConnectInfoSchema = exports.AuthDeviceActivatedEventSchema = exports.AuthDeviceActivationApprovedEventSchema = exports.AuthDeviceActivationRequestedEventSchema = exports.AuthDeviceActivationReviewRequestedEventSchema = exports.DeviceActivationReviewSchema = exports.DeviceActivationRecordSchema = exports.DeviceActivationActorSchema = exports.DeviceSchema = exports.DeviceMetadataSchema = exports.DeviceDeploymentSchema = exports.PortalFlowStateSchema = exports.DevicePortalSelectionSchema = exports.LoginPortalSelectionSchema = exports.DevicePortalDefaultSchema = exports.LoginPortalDefaultSchema = exports.PortalProfileSchema = exports.PortalSchema = exports.AuthRevokeUserGrantResponseSchema = exports.AuthRevokeUserGrantSchema = exports.AuthListUserGrantsResponseSchema = exports.AuthListUserGrantsSchema = exports.UserGrantViewSchema = exports.AuthRevokeApprovalResponseSchema = exports.AuthRevokeApprovalSchema = exports.AuthListApprovalsResponseSchema = exports.AuthListApprovalsSchema = exports.AuthValidateRequestResponseSchema = exports.CallerViewSchema = exports.AuthMeResponseSchema = exports.AuthenticatedDeviceSchema = exports.AuthenticatedServiceSchema = exports.AuthValidateRequestSchema = exports.AuthMeSchema = exports.AuthenticatedUserSchema = exports.AuthGetInstalledContractResponseSchema = exports.AuthGetInstalledContractSchema = exports.AuthListInstalledContractsResponseSchema = exports.AuthListInstalledContractsSchema = exports.InstalledContractDetailSchema = exports.InstalledContractSchema = exports.ContractAnalysisSchema = exports.ContractAnalysisNatsRuleSchema = exports.ContractAnalysisSubjectSchema = exports.ContractAnalysisEventSchema = exports.ContractAnalysisOperationControlSchema = void 0;
5
- exports.AuthEnableDeviceInstanceResponseSchema = exports.AuthEnableDeviceInstanceSchema = exports.AuthDisableDeviceInstanceResponseSchema = exports.AuthDisableDeviceInstanceSchema = exports.AuthListDeviceInstancesResponseSchema = exports.AuthListDeviceInstancesSchema = exports.AuthProvisionDeviceInstanceResponseSchema = exports.AuthProvisionDeviceInstanceSchema = exports.AuthRemoveDeviceDeploymentResponseSchema = exports.AuthRemoveDeviceDeploymentSchema = exports.AuthEnableDeviceDeploymentResponseSchema = exports.AuthEnableDeviceDeploymentSchema = exports.AuthDisableDeviceDeploymentResponseSchema = exports.AuthDisableDeviceDeploymentSchema = exports.AuthUnapplyDeviceDeploymentContractResponseSchema = exports.AuthUnapplyDeviceDeploymentContractSchema = exports.AuthApplyDeviceDeploymentContractResponseSchema = exports.AuthApplyDeviceDeploymentContractSchema = exports.AuthListDeviceDeploymentsResponseSchema = exports.AuthListDeviceDeploymentsSchema = exports.AuthCreateDeviceDeploymentResponseSchema = exports.AuthCreateDeviceDeploymentSchema = exports.AuthClearDevicePortalSelectionResponseSchema = exports.AuthClearDevicePortalSelectionSchema = exports.AuthSetDevicePortalSelectionResponseSchema = exports.AuthSetDevicePortalSelectionSchema = exports.AuthListDevicePortalSelectionsResponseSchema = exports.AuthListDevicePortalSelectionsSchema = exports.AuthSetDevicePortalDefaultResponseSchema = exports.AuthSetDevicePortalDefaultSchema = exports.AuthGetDevicePortalDefaultResponseSchema = exports.AuthGetDevicePortalDefaultSchema = exports.AuthClearLoginPortalSelectionResponseSchema = exports.AuthClearLoginPortalSelectionSchema = exports.AuthSetLoginPortalSelectionResponseSchema = exports.AuthSetLoginPortalSelectionSchema = exports.AuthListLoginPortalSelectionsResponseSchema = exports.AuthListLoginPortalSelectionsSchema = exports.AuthSetLoginPortalDefaultResponseSchema = exports.AuthSetLoginPortalDefaultSchema = exports.AuthGetLoginPortalDefaultResponseSchema = exports.AuthGetLoginPortalDefaultSchema = exports.AuthDisablePortalProfileResponseSchema = exports.AuthDisablePortalProfileSchema = exports.AuthSetPortalProfileResponseSchema = exports.AuthSetPortalProfileSchema = exports.AuthListPortalProfilesResponseSchema = exports.AuthListPortalProfilesSchema = exports.AuthDisablePortalResponseSchema = exports.AuthDisablePortalSchema = void 0;
6
- exports.AuthUpdateUserResponseSchema = exports.AuthUpdateUserSchema = exports.AuthListUsersResponseSchema = exports.AuthListUsersSchema = exports.UserViewSchema = exports.AuthDecideDeviceActivationReviewResponseSchema = exports.AuthDecideDeviceActivationReviewSchema = exports.AuthListDeviceActivationReviewsResponseSchema = exports.AuthListDeviceActivationReviewsSchema = exports.AuthRevokeDeviceActivationResponseSchema = exports.AuthRevokeDeviceActivationSchema = exports.AuthListDeviceActivationsResponseSchema = exports.AuthListDeviceActivationsSchema = exports.AuthGetDeviceConnectInfoResponseSchema = exports.AuthGetDeviceConnectInfoSchema = exports.WaitForDeviceActivationResponseSchema = exports.AuthActivateDeviceResponseSchema = exports.AuthActivateDeviceProgressSchema = exports.AuthActivateDeviceSchema = exports.AuthRemoveDeviceInstanceResponseSchema = exports.AuthRemoveDeviceInstanceSchema = void 0;
3
+ exports.AuthEnvelopesChangesPreviewResponseSchema = exports.AuthEnvelopesChangesPreviewSchema = exports.AuthEnvelopeChangeImpactSchema = exports.AuthEnvelopeShrinkImpactedRequestSchema = exports.AuthEnvelopeShrinkImpactedIdentityEnvelopeSchema = exports.AuthEnvelopeShrinkImpactedSessionSchema = exports.AuthEnvelopeShrinkMissingBoundarySchema = exports.AuthEnvelopeShrinkResourceSchema = exports.AuthEnvelopeExpansionsRejectResponseSchema = exports.AuthEnvelopeExpansionsRejectSchema = exports.AuthEnvelopeExpansionsListResponseSchema = exports.AuthEnvelopeExpansionsListSchema = exports.AuthEnvelopesApproveRequestResponseSchema = exports.AuthEnvelopesApproveRequestSchema = exports.AuthEnvelopesExpandResponseSchema = exports.AuthEnvelopesExpandSchema = exports.AuthEnvelopesGrantOverridesRemoveSchema = exports.AuthEnvelopesGrantOverridesResponseSchema = exports.AuthEnvelopesGrantOverridesListResponseSchema = exports.AuthEnvelopesGrantOverridesListSchema = exports.AuthEnvelopesGrantOverridesPutSchema = exports.AuthEnvelopesGetResponseSchema = exports.AuthEnvelopesGetSchema = exports.AuthEnvelopesListResponseSchema = exports.AuthEnvelopesListSchema = exports.EnvelopeExpansionRequestSchema = exports.DeploymentGrantOverrideSchema = exports.DeploymentPortalRouteSchema = exports.DeploymentContractEvidenceSchema = exports.DeploymentResourceBindingSchema = exports.DeploymentEnvelopeSchema = exports.EnvelopeBoundarySchema = exports.EnvelopeBoundaryResourceSchema = exports.EnvelopeBoundarySurfaceSchema = exports.EnvelopeBoundaryContractSchema = exports.EnvelopeResourceKindSchema = exports.EnvelopeSurfaceActionSchema = exports.EnvelopeSurfaceKindSchema = exports.DeploymentEnvelopeKindSchema = exports.ApprovalRecordViewSchema = exports.IdentityEnvelopeApprovalViewSchema = exports.ApprovalEvidenceViewSchema = exports.ContractEvidenceViewSchema = exports.IdentityAnchorViewSchema = exports.ApprovalDecisionSchema = exports.ServiceInstanceSchema = exports.ServiceDeploymentSchema = exports.OpenObjectSchema = exports.DigestSchema = exports.ParticipantKindSchema = void 0;
4
+ exports.AuthPortalsRemoveSchema = exports.AuthPortalsPutResponseSchema = exports.AuthPortalsPutSchema = exports.AuthPortalsGetResponseSchema = exports.AuthPortalsGetSchema = exports.AuthPortalsListResponseSchema = exports.AuthPortalsListSchema = exports.LoginPortalSummarySchema = exports.LoginPortalRouteSchema = exports.LoginPortalFederatedProviderSchema = exports.LoginPortalSettingsSchema = exports.LoginPortalRecordSchema = exports.AuthIdentitiesGrantsListResponseSchema = exports.AuthIdentitiesGrantsListSchema = exports.UserGrantViewSchema = exports.AuthIdentityEnvelopesRevokeResponseSchema = exports.AuthIdentityEnvelopesRevokeSchema = exports.AuthIdentitiesListResponseSchema = exports.AuthIdentitiesListSchema = exports.AuthRequestsValidateResponseSchema = exports.CallerViewSchema = exports.AuthSessionsMeResponseSchema = exports.AuthenticatedDeviceSchema = exports.AuthenticatedServiceSchema = exports.AuthRequestsValidateSchema = exports.AuthSessionsMeSchema = exports.AuthenticatedUserSchema = exports.ContractAnalysisSchema = exports.ContractAnalysisNatsRuleSchema = exports.ContractAnalysisSubjectSchema = exports.ContractAnalysisEventSchema = exports.ContractAnalysisOperationControlSchema = exports.ContractAnalysisOperationSchema = exports.ContractAnalysisRpcMethodSchema = exports.ContractAnalysisJobsQueueSchema = exports.ContractAnalysisStoreResourceSchema = exports.ContractAnalysisKvResourceSchema = exports.ContractAnalysisSummarySchema = exports.AuthServiceInstancesRemoveResponseSchema = exports.AuthServiceInstancesRemoveSchema = exports.AuthServiceInstancesEnableResponseSchema = exports.AuthServiceInstancesEnableSchema = exports.AuthServiceInstancesDisableResponseSchema = exports.AuthServiceInstancesDisableSchema = exports.AuthServiceInstancesListResponseSchema = exports.AuthServiceInstancesListSchema = exports.AuthServiceInstancesProvisionResponseSchema = exports.AuthServiceInstancesProvisionSchema = exports.AuthEnvelopesShrinkResponseSchema = exports.AuthEnvelopesShrinkSchema = void 0;
5
+ exports.WaitForDeviceActivationRequestSchema = exports.WaitForDeviceActivationResponseSchema = exports.AuthResolveDeviceUserAuthoritiesResponseSchema = exports.AuthResolveDeviceUserAuthoritiesProgressSchema = exports.AuthResolveDeviceUserAuthoritiesSchema = exports.AuthDevicesRemoveResponseSchema = exports.AuthDevicesRemoveSchema = exports.AuthDevicesEnableResponseSchema = exports.AuthDevicesEnableSchema = exports.AuthDevicesDisableResponseSchema = exports.AuthDevicesDisableSchema = exports.AuthDevicesListResponseSchema = exports.AuthDevicesListSchema = exports.AuthDevicesProvisionResponseSchema = exports.AuthDevicesProvisionSchema = exports.DeviceConnectInfoSchema = exports.AuthDeviceUserAuthoritiesResolvedEventSchema = exports.AuthDeviceUserAuthoritiesApprovedEventSchema = exports.AuthDeviceUserAuthoritiesRequestedEventSchema = exports.AuthDeviceUserAuthoritiesReviewRequestedEventSchema = exports.DeviceActivationReviewSchema = exports.DeviceActivationRecordSchema = exports.DeviceActivationActorSchema = exports.DeviceSchema = exports.DeviceMetadataSchema = exports.AuthDeploymentsRemoveResponseSchema = exports.AuthDeploymentsRemoveSchema = exports.AuthDeploymentsEnableResponseSchema = exports.AuthDeploymentsEnableSchema = exports.AuthCatalogIssuesResolveResponseSchema = exports.AuthCatalogIssuesResolveSchema = exports.AuthDeploymentsDisableResponseSchema = exports.AuthDeploymentsDisableSchema = exports.AuthDeploymentsListResponseSchema = exports.AuthDeploymentsListSchema = exports.AuthDeploymentsCreateResponseSchema = exports.AuthDeploymentsCreateSchema = exports.AuthDeploymentSchema = exports.AuthDeploymentKindSchema = exports.DeviceDeploymentSchema = exports.PortalFlowStateSchema = exports.FlowRegistrationAvailabilitySchema = exports.AuthPortalsRoutesRemoveResponseSchema = exports.AuthPortalsRoutesRemoveSchema = exports.AuthPortalsRoutesPutResponseSchema = exports.AuthPortalsRoutesPutSchema = exports.AuthPortalsLoginSettingsUpdateSchema = exports.AuthPortalsLoginSettingsResponseSchema = exports.AuthPortalsLoginSettingsGetSchema = exports.AuthPortalsRemoveResponseSchema = void 0;
6
+ exports.AuthUserIdentitiesUnlinkResponseSchema = exports.AuthUserIdentitiesUnlinkSchema = exports.AuthUserIdentitiesListResponseSchema = exports.AuthUserIdentitiesListSchema = exports.AuthUsersUpdateResponseSchema = exports.AuthUsersUpdateSchema = exports.AuthCapabilityGroupsDeleteResponseSchema = exports.AuthCapabilityGroupsDeleteSchema = exports.AuthCapabilityGroupsPutResponseSchema = exports.AuthCapabilityGroupsPutSchema = exports.AuthCapabilityGroupsGetResponseSchema = exports.AuthCapabilityGroupsGetSchema = exports.AuthCapabilityGroupsListResponseSchema = exports.AuthCapabilityGroupsListSchema = exports.CapabilityGroupSchema = exports.AuthCapabilitiesListResponseSchema = exports.AuthCapabilitiesListSchema = exports.CapabilityDefinitionSchema = exports.AuthUsersAccountFlowCreateResponseSchema = exports.AuthUsersPasswordResetCreateSchema = exports.AuthUsersPasswordChangeResponseSchema = exports.AuthUsersPasswordChangeSchema = exports.AuthUsersIdentityLinkCreateSchema = exports.AuthUsersCreateResponseSchema = exports.AuthUsersCreateSchema = exports.AuthUsersGetResponseSchema = exports.AuthUsersGetSchema = exports.AuthUsersListResponseSchema = exports.AuthUsersListSchema = exports.UserViewSchema = exports.UserIdentityViewSchema = exports.AuthDeviceUserAuthoritiesReviewsDecideResponseSchema = exports.AuthDeviceUserAuthoritiesReviewsDecideSchema = exports.AuthDeviceUserAuthoritiesReviewsListResponseSchema = exports.AuthDeviceUserAuthoritiesReviewsListSchema = exports.AuthDeviceUserAuthoritiesRevokeResponseSchema = exports.AuthDeviceUserAuthoritiesRevokeSchema = exports.AuthDeviceUserAuthoritiesListResponseSchema = exports.AuthDeviceUserAuthoritiesListSchema = exports.AuthDevicesConnectInfoGetResponseSchema = exports.AuthDevicesConnectInfoGetSchema = void 0;
7
7
  const contracts_1 = require("@qlever-llc/trellis/contracts");
8
8
  const typebox_1 = require("typebox");
9
+ const protocol_ts_1 = require("../contract_support/protocol.js");
9
10
  const schemas_ts_1 = require("./schemas.js");
10
11
  const IsoDateStringSchema = typebox_1.Type.String({ format: "date-time" });
11
12
  exports.ParticipantKindSchema = typebox_1.Type.Union([
@@ -17,21 +18,11 @@ exports.DigestSchema = typebox_1.Type.String({ pattern: "^[A-Za-z0-9_-]+$" });
17
18
  exports.OpenObjectSchema = typebox_1.Type.Unsafe({
18
19
  type: "object",
19
20
  });
20
- exports.ServiceAppliedDeploymentContractSchema = typebox_1.Type.Object({
21
- contractId: typebox_1.Type.String({ minLength: 1 }),
22
- allowedDigests: typebox_1.Type.Array(exports.DigestSchema),
23
- resourceBindingsByDigest: typebox_1.Type.Optional(typebox_1.Type.Record(exports.DigestSchema, contracts_1.ContractResourceBindingsSchema)),
24
- });
25
- exports.DeviceAppliedDeploymentContractSchema = typebox_1.Type.Object({
26
- contractId: typebox_1.Type.String({ minLength: 1 }),
27
- allowedDigests: typebox_1.Type.Array(exports.DigestSchema),
28
- }, { additionalProperties: false });
29
- exports.ServiceDeploymentSchema = typebox_1.Type.Object({
21
+ exports.ServiceDeploymentSchema = typebox_1.Type.Unsafe(typebox_1.Type.Object({
30
22
  deploymentId: typebox_1.Type.String({ minLength: 1 }),
31
23
  namespaces: typebox_1.Type.Array(typebox_1.Type.String({ minLength: 1 })),
32
24
  disabled: typebox_1.Type.Boolean(),
33
- appliedContracts: typebox_1.Type.Array(exports.ServiceAppliedDeploymentContractSchema),
34
- });
25
+ }));
35
26
  exports.ServiceInstanceSchema = typebox_1.Type.Object({
36
27
  instanceId: typebox_1.Type.String({ minLength: 1 }),
37
28
  deploymentId: typebox_1.Type.String({ minLength: 1 }),
@@ -47,147 +38,377 @@ exports.ApprovalDecisionSchema = typebox_1.Type.Union([
47
38
  typebox_1.Type.Literal("approved"),
48
39
  typebox_1.Type.Literal("denied"),
49
40
  ]);
50
- exports.ContractApprovalViewSchema = typebox_1.Type.Object({
41
+ exports.IdentityAnchorViewSchema = typebox_1.Type.Union([
42
+ typebox_1.Type.Object({
43
+ kind: typebox_1.Type.Literal("web"),
44
+ contractId: typebox_1.Type.String({ minLength: 1 }),
45
+ origin: typebox_1.Type.String({ minLength: 1 }),
46
+ }),
47
+ typebox_1.Type.Object({
48
+ kind: typebox_1.Type.Literal("cli"),
49
+ contractId: typebox_1.Type.String({ minLength: 1 }),
50
+ sessionPublicKey: typebox_1.Type.String({ minLength: 1 }),
51
+ }),
52
+ typebox_1.Type.Object({
53
+ kind: typebox_1.Type.Literal("native"),
54
+ contractId: typebox_1.Type.String({ minLength: 1 }),
55
+ sessionPublicKey: typebox_1.Type.String({ minLength: 1 }),
56
+ }),
57
+ typebox_1.Type.Object({
58
+ kind: typebox_1.Type.Literal("device-user"),
59
+ contractId: typebox_1.Type.String({ minLength: 1 }),
60
+ devicePublicKey: typebox_1.Type.String({ minLength: 1 }),
61
+ }),
62
+ ]);
63
+ exports.ContractEvidenceViewSchema = typebox_1.Type.Object({
64
+ contractDigest: exports.DigestSchema,
65
+ contractId: typebox_1.Type.String({ minLength: 1 }),
66
+ });
67
+ exports.ApprovalEvidenceViewSchema = typebox_1.Type.Object({
51
68
  contractDigest: exports.DigestSchema,
52
69
  contractId: typebox_1.Type.String({ minLength: 1 }),
53
70
  displayName: typebox_1.Type.String({ minLength: 1 }),
54
71
  description: typebox_1.Type.String({ minLength: 1 }),
55
- capabilities: typebox_1.Type.Array(typebox_1.Type.String()),
72
+ capabilities: typebox_1.Type.Record(typebox_1.Type.String(), schemas_ts_1.ContractApprovalCapabilitySchema),
73
+ });
74
+ exports.IdentityEnvelopeApprovalViewSchema = typebox_1.Type.Object({
75
+ identityEnvelopeId: typebox_1.Type.String({ minLength: 1 }),
76
+ identityAnchor: exports.IdentityAnchorViewSchema,
77
+ contractEvidence: exports.ContractEvidenceViewSchema,
78
+ displayName: typebox_1.Type.String({ minLength: 1 }),
79
+ description: typebox_1.Type.String({ minLength: 1 }),
80
+ capabilities: typebox_1.Type.Record(typebox_1.Type.String(), schemas_ts_1.ContractApprovalCapabilitySchema),
56
81
  });
57
82
  exports.ApprovalRecordViewSchema = typebox_1.Type.Object({
58
83
  user: typebox_1.Type.String({ minLength: 1 }),
59
84
  answer: exports.ApprovalDecisionSchema,
60
85
  answeredAt: IsoDateStringSchema,
61
86
  updatedAt: IsoDateStringSchema,
62
- approval: exports.ContractApprovalViewSchema,
87
+ identityEnvelopeId: typebox_1.Type.String({ minLength: 1 }),
88
+ identityAnchor: exports.IdentityAnchorViewSchema,
89
+ contractEvidence: exports.ContractEvidenceViewSchema,
90
+ displayName: typebox_1.Type.String({ minLength: 1 }),
91
+ description: typebox_1.Type.String({ minLength: 1 }),
92
+ capabilities: typebox_1.Type.Record(typebox_1.Type.String(), schemas_ts_1.ContractApprovalCapabilitySchema),
63
93
  participantKind: schemas_ts_1.UserParticipantKindSchema,
64
94
  });
65
- exports.InstanceGrantPolicyActorSchema = typebox_1.Type.Object({
66
- origin: typebox_1.Type.String({ minLength: 1 }),
67
- id: typebox_1.Type.String({ minLength: 1 }),
95
+ exports.DeploymentEnvelopeKindSchema = typebox_1.Type.Union([
96
+ typebox_1.Type.Literal("service"),
97
+ typebox_1.Type.Literal("device"),
98
+ typebox_1.Type.Literal("app"),
99
+ typebox_1.Type.Literal("cli"),
100
+ typebox_1.Type.Literal("native"),
101
+ typebox_1.Type.Literal("device-user"),
102
+ ]);
103
+ exports.EnvelopeSurfaceKindSchema = typebox_1.Type.Union([
104
+ typebox_1.Type.Literal("rpc"),
105
+ typebox_1.Type.Literal("operation"),
106
+ typebox_1.Type.Literal("event"),
107
+ typebox_1.Type.Literal("feed"),
108
+ ]);
109
+ exports.EnvelopeSurfaceActionSchema = typebox_1.Type.Union([
110
+ typebox_1.Type.Literal("call"),
111
+ typebox_1.Type.Literal("publish"),
112
+ typebox_1.Type.Literal("subscribe"),
113
+ typebox_1.Type.Literal("read"),
114
+ typebox_1.Type.Literal("cancel"),
115
+ ]);
116
+ exports.EnvelopeResourceKindSchema = typebox_1.Type.Union([
117
+ typebox_1.Type.Literal("kv"),
118
+ typebox_1.Type.Literal("store"),
119
+ typebox_1.Type.Literal("jobs"),
120
+ typebox_1.Type.Literal("transfer"),
121
+ ]);
122
+ exports.EnvelopeBoundaryContractSchema = typebox_1.Type.Object({
123
+ contractId: typebox_1.Type.String({ minLength: 1 }),
124
+ required: typebox_1.Type.Boolean(),
68
125
  });
69
- exports.PortalProfileSourceSchema = typebox_1.Type.Object({
70
- kind: typebox_1.Type.Literal("portal_profile"),
71
- portalId: typebox_1.Type.String({ minLength: 1 }),
72
- entryUrl: typebox_1.Type.String({ minLength: 1 }),
126
+ exports.EnvelopeBoundarySurfaceSchema = typebox_1.Type.Object({
127
+ contractId: typebox_1.Type.String({ minLength: 1 }),
128
+ kind: exports.EnvelopeSurfaceKindSchema,
129
+ name: typebox_1.Type.String({ minLength: 1 }),
130
+ action: exports.EnvelopeSurfaceActionSchema,
131
+ required: typebox_1.Type.Boolean(),
132
+ });
133
+ exports.EnvelopeBoundaryResourceSchema = typebox_1.Type.Object({
134
+ kind: exports.EnvelopeResourceKindSchema,
135
+ alias: typebox_1.Type.String({ minLength: 1 }),
136
+ required: typebox_1.Type.Boolean(),
73
137
  });
74
- exports.AdminPolicySourceSchema = typebox_1.Type.Object({
75
- kind: typebox_1.Type.Literal("admin_policy"),
76
- createdBy: typebox_1.Type.Optional(exports.InstanceGrantPolicyActorSchema),
77
- updatedBy: typebox_1.Type.Optional(exports.InstanceGrantPolicyActorSchema),
138
+ exports.EnvelopeBoundarySchema = typebox_1.Type.Object({
139
+ contracts: typebox_1.Type.Array(exports.EnvelopeBoundaryContractSchema),
140
+ surfaces: typebox_1.Type.Array(exports.EnvelopeBoundarySurfaceSchema),
141
+ capabilities: typebox_1.Type.Array(typebox_1.Type.String({ minLength: 1 })),
142
+ resources: typebox_1.Type.Array(exports.EnvelopeBoundaryResourceSchema),
78
143
  });
79
- exports.InstanceGrantPolicySchema = typebox_1.Type.Object({
80
- contractId: typebox_1.Type.String({ minLength: 1 }),
81
- allowedOrigins: typebox_1.Type.Optional(typebox_1.Type.Array(typebox_1.Type.String({ minLength: 1 }))),
82
- impliedCapabilities: typebox_1.Type.Array(typebox_1.Type.String()),
144
+ exports.DeploymentEnvelopeSchema = typebox_1.Type.Object({
145
+ deploymentId: typebox_1.Type.String({ minLength: 1 }),
146
+ kind: exports.DeploymentEnvelopeKindSchema,
83
147
  disabled: typebox_1.Type.Boolean(),
84
148
  createdAt: IsoDateStringSchema,
85
149
  updatedAt: IsoDateStringSchema,
86
- source: typebox_1.Type.Union([exports.AdminPolicySourceSchema, exports.PortalProfileSourceSchema]),
150
+ boundary: exports.EnvelopeBoundarySchema,
87
151
  });
88
- exports.AuthListInstanceGrantPoliciesSchema = typebox_1.Type.Object({});
89
- exports.AuthListInstanceGrantPoliciesResponseSchema = typebox_1.Type.Object({
90
- policies: typebox_1.Type.Array(exports.InstanceGrantPolicySchema),
152
+ exports.DeploymentResourceBindingSchema = typebox_1.Type.Object({
153
+ deploymentId: typebox_1.Type.String({ minLength: 1 }),
154
+ kind: exports.EnvelopeResourceKindSchema,
155
+ alias: typebox_1.Type.String({ minLength: 1 }),
156
+ binding: typebox_1.Type.Record(typebox_1.Type.String(), typebox_1.Type.Unknown()),
157
+ limits: typebox_1.Type.Union([typebox_1.Type.Record(typebox_1.Type.String(), typebox_1.Type.Unknown()), typebox_1.Type.Null()]),
158
+ createdAt: IsoDateStringSchema,
159
+ updatedAt: IsoDateStringSchema,
91
160
  });
92
- exports.AuthUpsertInstanceGrantPolicySchema = typebox_1.Type.Object({
161
+ exports.DeploymentContractEvidenceSchema = typebox_1.Type.Object({
162
+ deploymentId: typebox_1.Type.String({ minLength: 1 }),
93
163
  contractId: typebox_1.Type.String({ minLength: 1 }),
94
- allowedOrigins: typebox_1.Type.Optional(typebox_1.Type.Array(typebox_1.Type.String({ minLength: 1 }))),
95
- impliedCapabilities: typebox_1.Type.Array(typebox_1.Type.String()),
164
+ contractDigest: exports.DigestSchema,
165
+ contract: exports.OpenObjectSchema,
166
+ firstSeenAt: IsoDateStringSchema,
167
+ lastSeenAt: IsoDateStringSchema,
168
+ ignoredAt: typebox_1.Type.Optional(typebox_1.Type.Union([IsoDateStringSchema, typebox_1.Type.Null()])),
169
+ ignoredBy: typebox_1.Type.Optional(typebox_1.Type.Union([typebox_1.Type.Record(typebox_1.Type.String(), typebox_1.Type.Unknown()), typebox_1.Type.Null()])),
170
+ ignoreReason: typebox_1.Type.Optional(typebox_1.Type.Union([typebox_1.Type.String({ minLength: 1 }), typebox_1.Type.Null()])),
96
171
  });
97
- exports.AuthUpsertInstanceGrantPolicyResponseSchema = typebox_1.Type.Object({
98
- policy: exports.InstanceGrantPolicySchema,
172
+ exports.DeploymentPortalRouteSchema = typebox_1.Type.Object({
173
+ deploymentId: typebox_1.Type.String({ minLength: 1 }),
174
+ portalId: typebox_1.Type.Union([typebox_1.Type.String({ minLength: 1 }), typebox_1.Type.Null()]),
175
+ entryUrl: typebox_1.Type.Union([typebox_1.Type.String({ minLength: 1 }), typebox_1.Type.Null()]),
176
+ disabled: typebox_1.Type.Boolean(),
177
+ updatedAt: IsoDateStringSchema,
99
178
  });
100
- exports.AuthDisableInstanceGrantPolicySchema = typebox_1.Type.Object({
179
+ exports.DeploymentGrantOverrideSchema = typebox_1.Type.Union([
180
+ typebox_1.Type.Object({
181
+ deploymentId: typebox_1.Type.String({ minLength: 1 }),
182
+ identityKind: typebox_1.Type.Literal("web"),
183
+ grantKind: typebox_1.Type.Literal("capability"),
184
+ contractId: typebox_1.Type.String({ minLength: 1 }),
185
+ origin: typebox_1.Type.String({ minLength: 1 }),
186
+ sessionPublicKey: typebox_1.Type.Null(),
187
+ capability: typebox_1.Type.String({ minLength: 1 }),
188
+ capabilityGroupKey: typebox_1.Type.Null(),
189
+ }),
190
+ typebox_1.Type.Object({
191
+ deploymentId: typebox_1.Type.String({ minLength: 1 }),
192
+ identityKind: typebox_1.Type.Literal("web"),
193
+ grantKind: typebox_1.Type.Literal("capability-group"),
194
+ contractId: typebox_1.Type.String({ minLength: 1 }),
195
+ origin: typebox_1.Type.String({ minLength: 1 }),
196
+ sessionPublicKey: typebox_1.Type.Null(),
197
+ capability: typebox_1.Type.Null(),
198
+ capabilityGroupKey: typebox_1.Type.String({ minLength: 1 }),
199
+ }),
200
+ typebox_1.Type.Object({
201
+ deploymentId: typebox_1.Type.String({ minLength: 1 }),
202
+ identityKind: typebox_1.Type.Literal("session"),
203
+ grantKind: typebox_1.Type.Literal("capability"),
204
+ contractId: typebox_1.Type.String({ minLength: 1 }),
205
+ origin: typebox_1.Type.Null(),
206
+ sessionPublicKey: typebox_1.Type.String({ minLength: 1 }),
207
+ capability: typebox_1.Type.String({ minLength: 1 }),
208
+ capabilityGroupKey: typebox_1.Type.Null(),
209
+ }),
210
+ typebox_1.Type.Object({
211
+ deploymentId: typebox_1.Type.String({ minLength: 1 }),
212
+ identityKind: typebox_1.Type.Literal("session"),
213
+ grantKind: typebox_1.Type.Literal("capability-group"),
214
+ contractId: typebox_1.Type.String({ minLength: 1 }),
215
+ origin: typebox_1.Type.Null(),
216
+ sessionPublicKey: typebox_1.Type.String({ minLength: 1 }),
217
+ capability: typebox_1.Type.Null(),
218
+ capabilityGroupKey: typebox_1.Type.String({ minLength: 1 }),
219
+ }),
220
+ ]);
221
+ exports.EnvelopeExpansionRequestSchema = typebox_1.Type.Object({
222
+ requestId: typebox_1.Type.String({ minLength: 1 }),
223
+ deploymentId: typebox_1.Type.String({ minLength: 1 }),
224
+ requestedByKind: typebox_1.Type.Union([
225
+ typebox_1.Type.Literal("service"),
226
+ typebox_1.Type.Literal("device"),
227
+ typebox_1.Type.Literal("user"),
228
+ typebox_1.Type.Literal("admin"),
229
+ typebox_1.Type.Literal("automation"),
230
+ ]),
231
+ requestedBy: typebox_1.Type.Record(typebox_1.Type.String(), typebox_1.Type.Unknown()),
101
232
  contractId: typebox_1.Type.String({ minLength: 1 }),
233
+ contractDigest: exports.DigestSchema,
234
+ contract: exports.OpenObjectSchema,
235
+ state: typebox_1.Type.Union([
236
+ typebox_1.Type.Literal("pending"),
237
+ typebox_1.Type.Literal("approved"),
238
+ typebox_1.Type.Literal("rejected"),
239
+ ]),
240
+ createdAt: IsoDateStringSchema,
241
+ decidedAt: typebox_1.Type.Union([IsoDateStringSchema, typebox_1.Type.Null()]),
242
+ decidedBy: typebox_1.Type.Union([
243
+ typebox_1.Type.Record(typebox_1.Type.String(), typebox_1.Type.Unknown()),
244
+ typebox_1.Type.Null(),
245
+ ]),
246
+ decisionReason: typebox_1.Type.Union([typebox_1.Type.String({ minLength: 1 }), typebox_1.Type.Null()]),
247
+ delta: exports.EnvelopeBoundarySchema,
102
248
  });
103
- exports.AuthDisableInstanceGrantPolicyResponseSchema = typebox_1.Type.Object({
104
- policy: exports.InstanceGrantPolicySchema,
249
+ exports.AuthEnvelopesListSchema = typebox_1.Type.Object({
250
+ kind: typebox_1.Type.Optional(exports.DeploymentEnvelopeKindSchema),
251
+ disabled: typebox_1.Type.Optional(typebox_1.Type.Boolean()),
252
+ offset: typebox_1.Type.Optional(typebox_1.Type.Integer({ minimum: 0 })),
253
+ limit: typebox_1.Type.Integer({ minimum: 0, maximum: 500 }),
105
254
  });
106
- exports.AuthCreateServiceDeploymentSchema = typebox_1.Type.Object({
255
+ exports.AuthEnvelopesListResponseSchema = typebox_1.Type.Object({
256
+ ...(0, protocol_ts_1.PageResponseSchema)(exports.DeploymentEnvelopeSchema).properties,
257
+ });
258
+ exports.AuthEnvelopesGetSchema = typebox_1.Type.Object({
107
259
  deploymentId: typebox_1.Type.String({ minLength: 1 }),
108
- namespaces: typebox_1.Type.Array(typebox_1.Type.String({ minLength: 1 })),
109
260
  });
110
- exports.AuthCreateServiceDeploymentResponseSchema = typebox_1.Type.Object({
111
- deployment: exports.ServiceDeploymentSchema,
261
+ exports.AuthEnvelopesGetResponseSchema = typebox_1.Type.Object({
262
+ envelope: exports.DeploymentEnvelopeSchema,
263
+ resourceBindings: typebox_1.Type.Array(exports.DeploymentResourceBindingSchema),
264
+ contractEvidence: typebox_1.Type.Array(exports.DeploymentContractEvidenceSchema),
265
+ expansionRequests: typebox_1.Type.Array(exports.EnvelopeExpansionRequestSchema),
266
+ portalRoute: typebox_1.Type.Union([exports.DeploymentPortalRouteSchema, typebox_1.Type.Null()]),
267
+ grantOverrides: typebox_1.Type.Array(exports.DeploymentGrantOverrideSchema),
112
268
  });
113
- exports.AuthListServiceDeploymentsSchema = typebox_1.Type.Object({
114
- disabled: typebox_1.Type.Optional(typebox_1.Type.Boolean()),
269
+ exports.AuthEnvelopesGrantOverridesPutSchema = typebox_1.Type.Object({
270
+ deploymentId: typebox_1.Type.String({ minLength: 1 }),
271
+ overrides: typebox_1.Type.Array(exports.DeploymentGrantOverrideSchema),
272
+ });
273
+ exports.AuthEnvelopesGrantOverridesListSchema = typebox_1.Type.Object({
274
+ offset: typebox_1.Type.Optional(typebox_1.Type.Integer({ minimum: 0 })),
275
+ limit: typebox_1.Type.Integer({ minimum: 0, maximum: 500 }),
276
+ });
277
+ exports.AuthEnvelopesGrantOverridesListResponseSchema = typebox_1.Type.Object({
278
+ ...(0, protocol_ts_1.PageResponseSchema)(exports.DeploymentGrantOverrideSchema).properties,
279
+ });
280
+ exports.AuthEnvelopesGrantOverridesResponseSchema = typebox_1.Type.Object({
281
+ grantOverrides: typebox_1.Type.Array(exports.DeploymentGrantOverrideSchema),
115
282
  });
116
- exports.AuthListServiceDeploymentsResponseSchema = typebox_1.Type.Object({
117
- deployments: typebox_1.Type.Array(exports.ServiceDeploymentSchema),
283
+ exports.AuthEnvelopesGrantOverridesRemoveSchema = typebox_1.Type.Object({
284
+ deploymentId: typebox_1.Type.String({ minLength: 1 }),
285
+ overrides: typebox_1.Type.Array(exports.DeploymentGrantOverrideSchema),
118
286
  });
119
- exports.AuthApplyServiceDeploymentContractSchema = typebox_1.Type.Object({
287
+ exports.AuthEnvelopesExpandSchema = typebox_1.Type.Object({
120
288
  deploymentId: typebox_1.Type.String({ minLength: 1 }),
121
289
  contract: exports.OpenObjectSchema,
122
290
  expectedDigest: exports.DigestSchema,
123
- replaceExisting: typebox_1.Type.Optional(typebox_1.Type.Boolean()),
124
291
  });
125
- exports.AuthApplyServiceDeploymentContractResponseSchema = typebox_1.Type.Object({
126
- deployment: exports.ServiceDeploymentSchema,
127
- contract: typebox_1.Type.Object({
128
- digest: exports.DigestSchema,
129
- id: typebox_1.Type.String({ minLength: 1 }),
130
- displayName: typebox_1.Type.String({ minLength: 1 }),
131
- description: typebox_1.Type.String({ minLength: 1 }),
132
- installedAt: IsoDateStringSchema,
133
- }),
292
+ exports.AuthEnvelopesExpandResponseSchema = typebox_1.Type.Object({
293
+ envelope: exports.DeploymentEnvelopeSchema,
294
+ delta: exports.EnvelopeBoundarySchema,
295
+ contractEvidence: exports.DeploymentContractEvidenceSchema,
296
+ resourceBindings: typebox_1.Type.Array(exports.DeploymentResourceBindingSchema),
134
297
  });
135
- exports.AuthUnapplyServiceDeploymentContractSchema = typebox_1.Type.Object({
136
- deploymentId: typebox_1.Type.String({ minLength: 1 }),
137
- contractId: typebox_1.Type.String({ minLength: 1 }),
138
- digests: typebox_1.Type.Optional(typebox_1.Type.Array(exports.DigestSchema)),
298
+ exports.AuthEnvelopesApproveRequestSchema = typebox_1.Type.Object({
299
+ requestId: typebox_1.Type.String({ minLength: 1 }),
300
+ reason: typebox_1.Type.Optional(typebox_1.Type.String({ minLength: 1 })),
139
301
  });
140
- exports.AuthUnapplyServiceDeploymentContractResponseSchema = typebox_1.Type.Object({
141
- deployment: exports.ServiceDeploymentSchema,
302
+ exports.AuthEnvelopesApproveRequestResponseSchema = typebox_1.Type.Object({
303
+ request: exports.EnvelopeExpansionRequestSchema,
304
+ envelope: exports.DeploymentEnvelopeSchema,
305
+ delta: exports.EnvelopeBoundarySchema,
306
+ contractEvidence: exports.DeploymentContractEvidenceSchema,
307
+ resourceBindings: typebox_1.Type.Array(exports.DeploymentResourceBindingSchema),
142
308
  });
143
- exports.AuthDisableServiceDeploymentSchema = typebox_1.Type.Object({
144
- deploymentId: typebox_1.Type.String({ minLength: 1 }),
309
+ exports.AuthEnvelopeExpansionsListSchema = typebox_1.Type.Object({
310
+ deploymentId: typebox_1.Type.Optional(typebox_1.Type.String({ minLength: 1 })),
311
+ state: typebox_1.Type.Optional(typebox_1.Type.Union([
312
+ typebox_1.Type.Literal("pending"),
313
+ typebox_1.Type.Literal("approved"),
314
+ typebox_1.Type.Literal("rejected"),
315
+ ])),
316
+ offset: typebox_1.Type.Optional(typebox_1.Type.Integer({ minimum: 0 })),
317
+ limit: typebox_1.Type.Integer({ minimum: 0, maximum: 500 }),
318
+ });
319
+ exports.AuthEnvelopeExpansionsListResponseSchema = typebox_1.Type.Object({
320
+ ...(0, protocol_ts_1.PageResponseSchema)(exports.EnvelopeExpansionRequestSchema).properties,
321
+ });
322
+ exports.AuthEnvelopeExpansionsRejectSchema = typebox_1.Type.Object({
323
+ requestId: typebox_1.Type.String({ minLength: 1 }),
324
+ reason: typebox_1.Type.Optional(typebox_1.Type.String({ minLength: 1 })),
325
+ });
326
+ exports.AuthEnvelopeExpansionsRejectResponseSchema = typebox_1.Type.Object({
327
+ request: exports.EnvelopeExpansionRequestSchema,
145
328
  });
146
- exports.AuthDisableServiceDeploymentResponseSchema = typebox_1.Type.Object({
147
- deployment: exports.ServiceDeploymentSchema,
329
+ exports.AuthEnvelopeShrinkResourceSchema = typebox_1.Type.Object({
330
+ kind: exports.EnvelopeResourceKindSchema,
331
+ alias: typebox_1.Type.String({ minLength: 1 }),
148
332
  });
149
- exports.AuthEnableServiceDeploymentSchema = typebox_1.Type.Object({
333
+ exports.AuthEnvelopeShrinkMissingBoundarySchema = typebox_1.Type.Object({
334
+ missing: exports.EnvelopeBoundarySchema,
335
+ });
336
+ exports.AuthEnvelopeShrinkImpactedSessionSchema = typebox_1.Type.Object({
337
+ sessionKey: typebox_1.Type.String({ minLength: 1 }),
338
+ type: exports.ParticipantKindSchema,
339
+ contractId: typebox_1.Type.Union([typebox_1.Type.String({ minLength: 1 }), typebox_1.Type.Null()]),
340
+ contractDigest: typebox_1.Type.Union([exports.DigestSchema, typebox_1.Type.Null()]),
341
+ missing: exports.EnvelopeBoundarySchema,
342
+ });
343
+ exports.AuthEnvelopeShrinkImpactedIdentityEnvelopeSchema = typebox_1.Type.Object({
344
+ identityEnvelopeId: typebox_1.Type.String({ minLength: 1 }),
345
+ identityAnchor: exports.IdentityAnchorViewSchema,
346
+ missing: exports.EnvelopeBoundarySchema,
347
+ });
348
+ exports.AuthEnvelopeShrinkImpactedRequestSchema = typebox_1.Type.Object({
349
+ requestId: typebox_1.Type.String({ minLength: 1 }),
350
+ missing: exports.EnvelopeBoundarySchema,
351
+ });
352
+ exports.AuthEnvelopeChangeImpactSchema = typebox_1.Type.Object({
353
+ removed: exports.EnvelopeBoundarySchema,
354
+ impactedSessions: typebox_1.Type.Array(exports.AuthEnvelopeShrinkImpactedSessionSchema),
355
+ impactedServiceInstances: typebox_1.Type.Array(exports.AuthEnvelopeShrinkMissingBoundarySchema),
356
+ impactedDeviceSessions: typebox_1.Type.Array(exports.AuthEnvelopeShrinkImpactedSessionSchema),
357
+ impactedIdentityEnvelopes: typebox_1.Type.Array(exports.AuthEnvelopeShrinkImpactedIdentityEnvelopeSchema),
358
+ impactedPendingRequests: typebox_1.Type.Array(exports.AuthEnvelopeShrinkImpactedRequestSchema),
359
+ orphanedResources: typebox_1.Type.Array(exports.AuthEnvelopeShrinkResourceSchema),
360
+ });
361
+ exports.AuthEnvelopesChangesPreviewSchema = typebox_1.Type.Object({
150
362
  deploymentId: typebox_1.Type.String({ minLength: 1 }),
363
+ proposedBoundary: exports.EnvelopeBoundarySchema,
151
364
  });
152
- exports.AuthEnableServiceDeploymentResponseSchema = typebox_1.Type.Object({
153
- deployment: exports.ServiceDeploymentSchema,
365
+ exports.AuthEnvelopesChangesPreviewResponseSchema = typebox_1.Type.Object({
366
+ current: exports.DeploymentEnvelopeSchema,
367
+ proposed: exports.DeploymentEnvelopeSchema,
368
+ impact: exports.AuthEnvelopeChangeImpactSchema,
154
369
  });
155
- exports.AuthRemoveServiceDeploymentSchema = typebox_1.Type.Object({
370
+ exports.AuthEnvelopesShrinkSchema = typebox_1.Type.Object({
156
371
  deploymentId: typebox_1.Type.String({ minLength: 1 }),
372
+ proposedBoundary: exports.EnvelopeBoundarySchema,
373
+ confirm: typebox_1.Type.Boolean(),
157
374
  });
158
- exports.AuthRemoveServiceDeploymentResponseSchema = typebox_1.Type.Object({
159
- success: typebox_1.Type.Boolean(),
375
+ exports.AuthEnvelopesShrinkResponseSchema = typebox_1.Type.Object({
376
+ envelope: exports.DeploymentEnvelopeSchema,
377
+ impact: exports.AuthEnvelopeChangeImpactSchema,
378
+ retainedResources: typebox_1.Type.Array(exports.AuthEnvelopeShrinkResourceSchema),
160
379
  });
161
- exports.AuthProvisionServiceInstanceSchema = typebox_1.Type.Object({
380
+ exports.AuthServiceInstancesProvisionSchema = typebox_1.Type.Object({
162
381
  deploymentId: typebox_1.Type.String({ minLength: 1 }),
163
382
  instanceKey: typebox_1.Type.String({ minLength: 1 }),
164
383
  });
165
- exports.AuthProvisionServiceInstanceResponseSchema = typebox_1.Type.Object({
384
+ exports.AuthServiceInstancesProvisionResponseSchema = typebox_1.Type.Object({
166
385
  instance: exports.ServiceInstanceSchema,
167
386
  });
168
- exports.AuthListServiceInstancesSchema = typebox_1.Type.Object({
387
+ exports.AuthServiceInstancesListSchema = typebox_1.Type.Object({
169
388
  deploymentId: typebox_1.Type.Optional(typebox_1.Type.String({ minLength: 1 })),
170
389
  disabled: typebox_1.Type.Optional(typebox_1.Type.Boolean()),
390
+ offset: typebox_1.Type.Optional(typebox_1.Type.Integer({ minimum: 0 })),
391
+ limit: typebox_1.Type.Integer({ minimum: 0, maximum: 500 }),
171
392
  });
172
- exports.AuthListServiceInstancesResponseSchema = typebox_1.Type.Object({
173
- instances: typebox_1.Type.Array(exports.ServiceInstanceSchema),
393
+ exports.AuthServiceInstancesListResponseSchema = typebox_1.Type.Object({
394
+ ...(0, protocol_ts_1.PageResponseSchema)(exports.ServiceInstanceSchema).properties,
174
395
  });
175
- exports.AuthDisableServiceInstanceSchema = typebox_1.Type.Object({
396
+ exports.AuthServiceInstancesDisableSchema = typebox_1.Type.Object({
176
397
  instanceId: typebox_1.Type.String({ minLength: 1 }),
177
398
  });
178
- exports.AuthDisableServiceInstanceResponseSchema = typebox_1.Type.Object({
399
+ exports.AuthServiceInstancesDisableResponseSchema = typebox_1.Type.Object({
179
400
  instance: exports.ServiceInstanceSchema,
180
401
  });
181
- exports.AuthEnableServiceInstanceSchema = typebox_1.Type.Object({
402
+ exports.AuthServiceInstancesEnableSchema = typebox_1.Type.Object({
182
403
  instanceId: typebox_1.Type.String({ minLength: 1 }),
183
404
  });
184
- exports.AuthEnableServiceInstanceResponseSchema = typebox_1.Type.Object({
405
+ exports.AuthServiceInstancesEnableResponseSchema = typebox_1.Type.Object({
185
406
  instance: exports.ServiceInstanceSchema,
186
407
  });
187
- exports.AuthRemoveServiceInstanceSchema = typebox_1.Type.Object({
408
+ exports.AuthServiceInstancesRemoveSchema = typebox_1.Type.Object({
188
409
  instanceId: typebox_1.Type.String({ minLength: 1 }),
189
410
  });
190
- exports.AuthRemoveServiceInstanceResponseSchema = typebox_1.Type.Object({
411
+ exports.AuthServiceInstancesRemoveResponseSchema = typebox_1.Type.Object({
191
412
  success: typebox_1.Type.Boolean(),
192
413
  });
193
414
  exports.ContractAnalysisSummarySchema = typebox_1.Type.Object({
@@ -298,53 +519,30 @@ exports.ContractAnalysisSchema = typebox_1.Type.Object({
298
519
  jobs: typebox_1.Type.Array(exports.ContractAnalysisJobsQueueSchema),
299
520
  }),
300
521
  });
301
- exports.InstalledContractSchema = typebox_1.Type.Object({
302
- digest: exports.DigestSchema,
303
- id: typebox_1.Type.String({ minLength: 1 }),
304
- displayName: typebox_1.Type.String({ minLength: 1 }),
305
- description: typebox_1.Type.String({ minLength: 1 }),
306
- installedAt: IsoDateStringSchema,
307
- analysisSummary: typebox_1.Type.Optional(exports.ContractAnalysisSummarySchema),
308
- });
309
- exports.InstalledContractDetailSchema = typebox_1.Type.Object({
310
- digest: exports.DigestSchema,
311
- id: typebox_1.Type.String({ minLength: 1 }),
312
- displayName: typebox_1.Type.String({ minLength: 1 }),
313
- description: typebox_1.Type.String({ minLength: 1 }),
314
- installedAt: IsoDateStringSchema,
315
- analysisSummary: typebox_1.Type.Optional(exports.ContractAnalysisSummarySchema),
316
- analysis: typebox_1.Type.Optional(exports.ContractAnalysisSchema),
317
- resources: typebox_1.Type.Optional(contracts_1.ContractResourcesSchema),
318
- contract: exports.OpenObjectSchema,
319
- });
320
- exports.AuthListInstalledContractsSchema = typebox_1.Type.Object({});
321
- exports.AuthListInstalledContractsResponseSchema = typebox_1.Type.Object({
322
- contracts: typebox_1.Type.Array(exports.InstalledContractSchema),
323
- });
324
- exports.AuthGetInstalledContractSchema = typebox_1.Type.Object({
325
- digest: exports.DigestSchema,
326
- });
327
- exports.AuthGetInstalledContractResponseSchema = typebox_1.Type.Object({
328
- contract: exports.InstalledContractDetailSchema,
329
- });
330
522
  exports.AuthenticatedUserSchema = typebox_1.Type.Object({
331
- id: typebox_1.Type.String(),
332
- origin: typebox_1.Type.String(),
523
+ userId: typebox_1.Type.String({ minLength: 1 }),
333
524
  active: typebox_1.Type.Boolean(),
334
525
  name: typebox_1.Type.String(),
335
526
  email: typebox_1.Type.String(),
336
527
  image: typebox_1.Type.Optional(typebox_1.Type.String()),
337
528
  capabilities: typebox_1.Type.Array(typebox_1.Type.String()),
529
+ identity: typebox_1.Type.Object({
530
+ identityId: typebox_1.Type.String({ minLength: 1 }),
531
+ provider: typebox_1.Type.String({ minLength: 1 }),
532
+ subject: typebox_1.Type.String({ minLength: 1 }),
533
+ }),
338
534
  lastLogin: typebox_1.Type.Optional(IsoDateStringSchema),
339
535
  });
340
- exports.AuthMeSchema = typebox_1.Type.Object({});
341
- exports.AuthValidateRequestSchema = typebox_1.Type.Object({
342
- sessionKey: typebox_1.Type.String(),
343
- proof: typebox_1.Type.String(),
344
- subject: typebox_1.Type.String(),
345
- payloadHash: typebox_1.Type.String(),
346
- capabilities: typebox_1.Type.Optional(typebox_1.Type.Array(typebox_1.Type.String())),
347
- }, { additionalProperties: false });
536
+ exports.AuthSessionsMeSchema = typebox_1.Type.Object({});
537
+ exports.AuthRequestsValidateSchema = typebox_1.Type.Object({
538
+ sessionKey: typebox_1.Type.String({ minLength: 1 }),
539
+ proof: typebox_1.Type.String({ minLength: 1 }),
540
+ subject: typebox_1.Type.String({ minLength: 1 }),
541
+ payloadHash: typebox_1.Type.String({ minLength: 1 }),
542
+ iat: typebox_1.Type.Integer(),
543
+ requestId: typebox_1.Type.String({ minLength: 1 }),
544
+ capabilities: typebox_1.Type.Optional(typebox_1.Type.Array(typebox_1.Type.String({ minLength: 1 }))),
545
+ });
348
546
  exports.AuthenticatedServiceSchema = typebox_1.Type.Object({
349
547
  type: typebox_1.Type.Literal("service"),
350
548
  id: typebox_1.Type.String(),
@@ -373,7 +571,7 @@ const NullableAuthenticatedServiceSchema = typebox_1.Type.Union([
373
571
  exports.AuthenticatedServiceSchema,
374
572
  typebox_1.Type.Null(),
375
573
  ]);
376
- exports.AuthMeResponseSchema = typebox_1.Type.Object({
574
+ exports.AuthSessionsMeResponseSchema = typebox_1.Type.Object({
377
575
  participantKind: exports.ParticipantKindSchema,
378
576
  user: NullableAuthenticatedUserSchema,
379
577
  device: NullableAuthenticatedDeviceSchema,
@@ -383,40 +581,46 @@ exports.CallerViewSchema = typebox_1.Type.Union([
383
581
  typebox_1.Type.Object({
384
582
  type: typebox_1.Type.Literal("user"),
385
583
  participantKind: schemas_ts_1.UserParticipantKindSchema,
386
- trellisId: typebox_1.Type.String(),
387
- id: typebox_1.Type.String(),
388
- origin: typebox_1.Type.String(),
584
+ userId: typebox_1.Type.String({ minLength: 1 }),
585
+ identity: typebox_1.Type.Object({
586
+ identityId: typebox_1.Type.String({ minLength: 1 }),
587
+ provider: typebox_1.Type.String({ minLength: 1 }),
588
+ subject: typebox_1.Type.String({ minLength: 1 }),
589
+ }),
389
590
  active: typebox_1.Type.Boolean(),
390
591
  name: typebox_1.Type.String(),
391
592
  email: typebox_1.Type.String(),
392
593
  image: typebox_1.Type.Optional(typebox_1.Type.String()),
393
594
  capabilities: typebox_1.Type.Array(typebox_1.Type.String()),
595
+ lastAuth: IsoDateStringSchema,
394
596
  }),
395
597
  exports.AuthenticatedServiceSchema,
396
598
  exports.AuthenticatedDeviceSchema,
397
599
  ]);
398
- exports.AuthValidateRequestResponseSchema = typebox_1.Type.Object({
600
+ exports.AuthRequestsValidateResponseSchema = typebox_1.Type.Object({
399
601
  allowed: typebox_1.Type.Boolean(),
400
602
  inboxPrefix: typebox_1.Type.String(),
401
603
  caller: exports.CallerViewSchema,
402
604
  });
403
- exports.AuthListApprovalsSchema = typebox_1.Type.Object({
605
+ exports.AuthIdentitiesListSchema = typebox_1.Type.Object({
404
606
  user: typebox_1.Type.Optional(typebox_1.Type.String({ minLength: 1 })),
405
- digest: typebox_1.Type.Optional(exports.DigestSchema),
607
+ offset: typebox_1.Type.Optional(typebox_1.Type.Integer({ minimum: 0 })),
608
+ limit: typebox_1.Type.Integer({ minimum: 0, maximum: 500 }),
406
609
  });
407
- exports.AuthListApprovalsResponseSchema = typebox_1.Type.Object({
408
- approvals: typebox_1.Type.Array(exports.ApprovalRecordViewSchema),
610
+ exports.AuthIdentitiesListResponseSchema = typebox_1.Type.Object({
611
+ ...(0, protocol_ts_1.PageResponseSchema)(exports.ApprovalRecordViewSchema).properties,
409
612
  });
410
- exports.AuthRevokeApprovalSchema = typebox_1.Type.Object({
411
- contractDigest: exports.DigestSchema,
613
+ exports.AuthIdentityEnvelopesRevokeSchema = typebox_1.Type.Object({
614
+ identityEnvelopeId: typebox_1.Type.String({ minLength: 1 }),
412
615
  user: typebox_1.Type.Optional(typebox_1.Type.String({ minLength: 1 })),
413
616
  });
414
- exports.AuthRevokeApprovalResponseSchema = typebox_1.Type.Object({
617
+ exports.AuthIdentityEnvelopesRevokeResponseSchema = typebox_1.Type.Object({
415
618
  success: typebox_1.Type.Boolean(),
416
619
  });
417
620
  exports.UserGrantViewSchema = typebox_1.Type.Object({
418
- contractDigest: exports.DigestSchema,
419
- contractId: typebox_1.Type.String({ minLength: 1 }),
621
+ identityEnvelopeId: typebox_1.Type.String({ minLength: 1 }),
622
+ identityAnchor: exports.IdentityAnchorViewSchema,
623
+ contractEvidence: exports.ContractEvidenceViewSchema,
420
624
  displayName: typebox_1.Type.String({ minLength: 1 }),
421
625
  description: typebox_1.Type.String({ minLength: 1 }),
422
626
  participantKind: schemas_ts_1.UserParticipantKindSchema,
@@ -424,48 +628,140 @@ exports.UserGrantViewSchema = typebox_1.Type.Object({
424
628
  grantedAt: IsoDateStringSchema,
425
629
  updatedAt: IsoDateStringSchema,
426
630
  });
427
- exports.AuthListUserGrantsSchema = typebox_1.Type.Object({});
428
- exports.AuthListUserGrantsResponseSchema = typebox_1.Type.Object({
429
- grants: typebox_1.Type.Array(exports.UserGrantViewSchema),
631
+ exports.AuthIdentitiesGrantsListSchema = typebox_1.Type.Object({
632
+ offset: typebox_1.Type.Optional(typebox_1.Type.Integer({ minimum: 0 })),
633
+ limit: typebox_1.Type.Integer({ minimum: 0, maximum: 500 }),
430
634
  });
431
- exports.AuthRevokeUserGrantSchema = typebox_1.Type.Object({
432
- contractDigest: exports.DigestSchema,
635
+ exports.AuthIdentitiesGrantsListResponseSchema = typebox_1.Type.Object({
636
+ ...(0, protocol_ts_1.PageResponseSchema)(exports.UserGrantViewSchema).properties,
433
637
  });
434
- exports.AuthRevokeUserGrantResponseSchema = typebox_1.Type.Object({
435
- success: typebox_1.Type.Boolean(),
436
- });
437
- exports.PortalSchema = typebox_1.Type.Object({
638
+ exports.LoginPortalRecordSchema = typebox_1.Type.Object({
438
639
  portalId: typebox_1.Type.String({ minLength: 1 }),
439
- entryUrl: typebox_1.Type.String({ minLength: 1 }),
640
+ displayName: typebox_1.Type.String({ minLength: 1 }),
641
+ entryUrl: typebox_1.Type.Union([typebox_1.Type.String({ minLength: 1 }), typebox_1.Type.Null()]),
642
+ builtIn: typebox_1.Type.Boolean(),
440
643
  disabled: typebox_1.Type.Boolean(),
644
+ createdAt: IsoDateStringSchema,
645
+ updatedAt: IsoDateStringSchema,
441
646
  });
442
- exports.PortalProfileSchema = typebox_1.Type.Object({
647
+ exports.LoginPortalSettingsSchema = typebox_1.Type.Object({
443
648
  portalId: typebox_1.Type.String({ minLength: 1 }),
444
- entryUrl: typebox_1.Type.String({ minLength: 1 }),
445
- contractId: typebox_1.Type.String({ minLength: 1 }),
446
- allowedOrigins: typebox_1.Type.Optional(typebox_1.Type.Array(typebox_1.Type.String({ minLength: 1 }))),
447
- impliedCapabilities: typebox_1.Type.Array(typebox_1.Type.String()),
649
+ localRegistrationEnabled: typebox_1.Type.Boolean(),
650
+ federatedRegistrationEnabled: typebox_1.Type.Boolean(),
651
+ allowedFederatedProviders: typebox_1.Type.Union([
652
+ typebox_1.Type.Array(typebox_1.Type.String({ minLength: 1 })),
653
+ typebox_1.Type.Null(),
654
+ ]),
655
+ selfRegisteredAccountActive: typebox_1.Type.Boolean(),
656
+ updatedAt: IsoDateStringSchema,
657
+ });
658
+ exports.LoginPortalFederatedProviderSchema = typebox_1.Type.Object({
659
+ id: typebox_1.Type.String({ minLength: 1 }),
660
+ displayName: typebox_1.Type.String({ minLength: 1 }),
661
+ type: typebox_1.Type.String({ minLength: 1 }),
662
+ });
663
+ exports.LoginPortalRouteSchema = typebox_1.Type.Object({
664
+ routeKey: typebox_1.Type.String({ minLength: 1 }),
665
+ portalId: typebox_1.Type.String({ minLength: 1 }),
666
+ contractId: typebox_1.Type.Union([typebox_1.Type.String({ minLength: 1 }), typebox_1.Type.Null()]),
667
+ origin: typebox_1.Type.Union([typebox_1.Type.String({ minLength: 1 }), typebox_1.Type.Null()]),
448
668
  disabled: typebox_1.Type.Boolean(),
449
- createdAt: IsoDateStringSchema,
450
669
  updatedAt: IsoDateStringSchema,
451
670
  });
452
- const NullablePortalIdSchema = typebox_1.Type.Union([
453
- typebox_1.Type.String({ minLength: 1 }),
454
- typebox_1.Type.Null(),
455
- ]);
456
- exports.LoginPortalDefaultSchema = typebox_1.Type.Object({
457
- portalId: NullablePortalIdSchema,
671
+ exports.LoginPortalSummarySchema = typebox_1.Type.Object({
672
+ ...exports.LoginPortalRecordSchema.properties,
673
+ routeCount: typebox_1.Type.Integer({ minimum: 0 }),
674
+ activeRouteCount: typebox_1.Type.Integer({ minimum: 0 }),
458
675
  });
459
- exports.DevicePortalDefaultSchema = typebox_1.Type.Object({
460
- portalId: NullablePortalIdSchema,
676
+ exports.AuthPortalsListSchema = typebox_1.Type.Object({
677
+ offset: typebox_1.Type.Optional(typebox_1.Type.Integer({ minimum: 0 })),
678
+ limit: typebox_1.Type.Integer({ minimum: 0, maximum: 500 }),
461
679
  });
462
- exports.LoginPortalSelectionSchema = typebox_1.Type.Object({
463
- contractId: typebox_1.Type.String({ minLength: 1 }),
464
- portalId: NullablePortalIdSchema,
680
+ exports.AuthPortalsListResponseSchema = typebox_1.Type.Object({
681
+ ...(0, protocol_ts_1.PageResponseSchema)(exports.LoginPortalSummarySchema).properties,
465
682
  });
466
- exports.DevicePortalSelectionSchema = typebox_1.Type.Object({
467
- deploymentId: typebox_1.Type.String({ minLength: 1 }),
468
- portalId: NullablePortalIdSchema,
683
+ exports.AuthPortalsGetSchema = typebox_1.Type.Object({
684
+ portalId: typebox_1.Type.String({ minLength: 1 }),
685
+ });
686
+ exports.AuthPortalsGetResponseSchema = typebox_1.Type.Object({
687
+ portal: exports.LoginPortalRecordSchema,
688
+ settings: exports.LoginPortalSettingsSchema,
689
+ routes: typebox_1.Type.Array(exports.LoginPortalRouteSchema),
690
+ defaultCapabilities: typebox_1.Type.Array(typebox_1.Type.String({ minLength: 1 })),
691
+ defaultCapabilityGroups: typebox_1.Type.Array(typebox_1.Type.String({ minLength: 1 })),
692
+ federatedProviders: typebox_1.Type.Array(exports.LoginPortalFederatedProviderSchema),
693
+ });
694
+ exports.AuthPortalsPutSchema = typebox_1.Type.Object({
695
+ portalId: typebox_1.Type.String({ minLength: 1 }),
696
+ displayName: typebox_1.Type.String({ minLength: 1 }),
697
+ entryUrl: typebox_1.Type.String({ minLength: 1 }),
698
+ disabled: typebox_1.Type.Optional(typebox_1.Type.Boolean()),
699
+ });
700
+ exports.AuthPortalsPutResponseSchema = typebox_1.Type.Object({
701
+ portal: exports.LoginPortalRecordSchema,
702
+ });
703
+ exports.AuthPortalsRemoveSchema = typebox_1.Type.Object({
704
+ portalId: typebox_1.Type.String({ minLength: 1 }),
705
+ });
706
+ exports.AuthPortalsRemoveResponseSchema = typebox_1.Type.Object({
707
+ success: typebox_1.Type.Boolean(),
708
+ });
709
+ exports.AuthPortalsLoginSettingsGetSchema = typebox_1.Type.Object({
710
+ portalId: typebox_1.Type.String({ minLength: 1 }),
711
+ });
712
+ exports.AuthPortalsLoginSettingsResponseSchema = typebox_1.Type.Object({
713
+ portal: exports.LoginPortalRecordSchema,
714
+ settings: exports.LoginPortalSettingsSchema,
715
+ defaultCapabilities: typebox_1.Type.Array(typebox_1.Type.String({ minLength: 1 })),
716
+ defaultCapabilityGroups: typebox_1.Type.Array(typebox_1.Type.String({ minLength: 1 })),
717
+ federatedProviders: typebox_1.Type.Array(exports.LoginPortalFederatedProviderSchema),
718
+ });
719
+ exports.AuthPortalsLoginSettingsUpdateSchema = typebox_1.Type.Object({
720
+ portalId: typebox_1.Type.String({ minLength: 1 }),
721
+ localRegistrationEnabled: typebox_1.Type.Boolean(),
722
+ federatedRegistrationEnabled: typebox_1.Type.Boolean(),
723
+ allowedFederatedProviders: typebox_1.Type.Union([
724
+ typebox_1.Type.Array(typebox_1.Type.String({ minLength: 1 })),
725
+ typebox_1.Type.Null(),
726
+ ]),
727
+ selfRegisteredAccountActive: typebox_1.Type.Boolean(),
728
+ defaultCapabilities: typebox_1.Type.Array(typebox_1.Type.String({ minLength: 1 })),
729
+ defaultCapabilityGroups: typebox_1.Type.Array(typebox_1.Type.String({ minLength: 1 })),
730
+ });
731
+ exports.AuthPortalsRoutesPutSchema = typebox_1.Type.Object({
732
+ portalId: typebox_1.Type.String({ minLength: 1 }),
733
+ contractId: typebox_1.Type.Optional(typebox_1.Type.Union([
734
+ typebox_1.Type.String({ minLength: 1 }),
735
+ typebox_1.Type.Null(),
736
+ ])),
737
+ origin: typebox_1.Type.Optional(typebox_1.Type.Union([typebox_1.Type.String({ minLength: 1 }), typebox_1.Type.Null()])),
738
+ disabled: typebox_1.Type.Optional(typebox_1.Type.Boolean()),
739
+ });
740
+ exports.AuthPortalsRoutesPutResponseSchema = typebox_1.Type.Object({
741
+ route: exports.LoginPortalRouteSchema,
742
+ });
743
+ exports.AuthPortalsRoutesRemoveSchema = typebox_1.Type.Object({
744
+ portalId: typebox_1.Type.String({ minLength: 1 }),
745
+ contractId: typebox_1.Type.Optional(typebox_1.Type.Union([
746
+ typebox_1.Type.String({ minLength: 1 }),
747
+ typebox_1.Type.Null(),
748
+ ])),
749
+ origin: typebox_1.Type.Optional(typebox_1.Type.Union([typebox_1.Type.String({ minLength: 1 }), typebox_1.Type.Null()])),
750
+ });
751
+ exports.AuthPortalsRoutesRemoveResponseSchema = typebox_1.Type.Object({
752
+ success: typebox_1.Type.Boolean(),
753
+ });
754
+ exports.FlowRegistrationAvailabilitySchema = typebox_1.Type.Object({
755
+ localIdentity: typebox_1.Type.Object({
756
+ available: typebox_1.Type.Boolean(),
757
+ }),
758
+ federatedIdentity: typebox_1.Type.Object({
759
+ available: typebox_1.Type.Boolean(),
760
+ providers: typebox_1.Type.Array(typebox_1.Type.Object({
761
+ id: typebox_1.Type.String({ minLength: 1 }),
762
+ displayName: typebox_1.Type.String({ minLength: 1 }),
763
+ })),
764
+ }),
469
765
  });
470
766
  exports.PortalFlowStateSchema = typebox_1.Type.Union([
471
767
  typebox_1.Type.Object({
@@ -482,6 +778,8 @@ exports.PortalFlowStateSchema = typebox_1.Type.Union([
482
778
  description: typebox_1.Type.String({ minLength: 1 }),
483
779
  context: typebox_1.Type.Optional(exports.OpenObjectSchema),
484
780
  }),
781
+ portal: typebox_1.Type.Optional(exports.LoginPortalRecordSchema),
782
+ registration: typebox_1.Type.Optional(exports.FlowRegistrationAvailabilitySchema),
485
783
  }),
486
784
  typebox_1.Type.Object({
487
785
  status: typebox_1.Type.Literal("approval_required"),
@@ -493,12 +791,12 @@ exports.PortalFlowStateSchema = typebox_1.Type.Union([
493
791
  email: typebox_1.Type.Optional(typebox_1.Type.String({ minLength: 1 })),
494
792
  image: typebox_1.Type.Optional(typebox_1.Type.String({ minLength: 1 })),
495
793
  }),
496
- approval: exports.ContractApprovalViewSchema,
794
+ approval: exports.ApprovalEvidenceViewSchema,
497
795
  }),
498
796
  typebox_1.Type.Object({
499
797
  status: typebox_1.Type.Literal("approval_denied"),
500
798
  flowId: typebox_1.Type.String({ minLength: 1 }),
501
- approval: exports.ContractApprovalViewSchema,
799
+ approval: exports.ApprovalEvidenceViewSchema,
502
800
  returnLocation: typebox_1.Type.Optional(typebox_1.Type.String({ minLength: 1 })),
503
801
  }),
504
802
  typebox_1.Type.Object({
@@ -509,7 +807,7 @@ exports.PortalFlowStateSchema = typebox_1.Type.Union([
509
807
  id: typebox_1.Type.String({ minLength: 1 }),
510
808
  name: typebox_1.Type.Optional(typebox_1.Type.String({ minLength: 1 })),
511
809
  })),
512
- approval: exports.ContractApprovalViewSchema,
810
+ approval: exports.ApprovalEvidenceViewSchema,
513
811
  missingCapabilities: typebox_1.Type.Array(typebox_1.Type.String()),
514
812
  userCapabilities: typebox_1.Type.Array(typebox_1.Type.String()),
515
813
  returnLocation: typebox_1.Type.Optional(typebox_1.Type.String({ minLength: 1 })),
@@ -522,11 +820,91 @@ exports.PortalFlowStateSchema = typebox_1.Type.Union([
522
820
  status: typebox_1.Type.Literal("expired"),
523
821
  }),
524
822
  ]);
525
- exports.DeviceDeploymentSchema = typebox_1.Type.Object({
823
+ exports.DeviceDeploymentSchema = typebox_1.Type.Unsafe(typebox_1.Type.Object({
526
824
  deploymentId: typebox_1.Type.String({ minLength: 1 }),
527
825
  reviewMode: typebox_1.Type.Optional(typebox_1.Type.Union([typebox_1.Type.Literal("none"), typebox_1.Type.Literal("required")])),
528
826
  disabled: typebox_1.Type.Boolean(),
529
- appliedContracts: typebox_1.Type.Array(exports.DeviceAppliedDeploymentContractSchema),
827
+ }));
828
+ exports.AuthDeploymentKindSchema = typebox_1.Type.Union([
829
+ typebox_1.Type.Literal("service"),
830
+ typebox_1.Type.Literal("device"),
831
+ ]);
832
+ exports.AuthDeploymentSchema = typebox_1.Type.Union([
833
+ typebox_1.Type.Object({
834
+ kind: typebox_1.Type.Literal("service"),
835
+ deploymentId: typebox_1.Type.String({ minLength: 1 }),
836
+ namespaces: typebox_1.Type.Array(typebox_1.Type.String({ minLength: 1 })),
837
+ disabled: typebox_1.Type.Boolean(),
838
+ }),
839
+ typebox_1.Type.Object({
840
+ kind: typebox_1.Type.Literal("device"),
841
+ deploymentId: typebox_1.Type.String({ minLength: 1 }),
842
+ reviewMode: typebox_1.Type.Optional(typebox_1.Type.Union([typebox_1.Type.Literal("none"), typebox_1.Type.Literal("required")])),
843
+ disabled: typebox_1.Type.Boolean(),
844
+ }),
845
+ ]);
846
+ exports.AuthDeploymentsCreateSchema = typebox_1.Type.Union([
847
+ typebox_1.Type.Object({
848
+ kind: typebox_1.Type.Literal("service"),
849
+ deploymentId: typebox_1.Type.String({ minLength: 1 }),
850
+ namespaces: typebox_1.Type.Array(typebox_1.Type.String({ minLength: 1 })),
851
+ }),
852
+ typebox_1.Type.Object({
853
+ kind: typebox_1.Type.Literal("device"),
854
+ deploymentId: typebox_1.Type.String({ minLength: 1 }),
855
+ reviewMode: typebox_1.Type.Optional(typebox_1.Type.Union([typebox_1.Type.Literal("none"), typebox_1.Type.Literal("required")])),
856
+ }),
857
+ ]);
858
+ exports.AuthDeploymentsCreateResponseSchema = typebox_1.Type.Object({
859
+ deployment: exports.AuthDeploymentSchema,
860
+ });
861
+ exports.AuthDeploymentsListSchema = typebox_1.Type.Object({
862
+ kind: typebox_1.Type.Optional(exports.AuthDeploymentKindSchema),
863
+ disabled: typebox_1.Type.Optional(typebox_1.Type.Boolean()),
864
+ offset: typebox_1.Type.Optional(typebox_1.Type.Integer({ minimum: 0 })),
865
+ limit: typebox_1.Type.Integer({ minimum: 0, maximum: 500 }),
866
+ });
867
+ exports.AuthDeploymentsListResponseSchema = typebox_1.Type.Object({
868
+ ...(0, protocol_ts_1.PageResponseSchema)(exports.AuthDeploymentSchema).properties,
869
+ });
870
+ exports.AuthDeploymentsDisableSchema = typebox_1.Type.Object({
871
+ kind: exports.AuthDeploymentKindSchema,
872
+ deploymentId: typebox_1.Type.String({ minLength: 1 }),
873
+ });
874
+ exports.AuthDeploymentsDisableResponseSchema = typebox_1.Type.Object({
875
+ deployment: exports.AuthDeploymentSchema,
876
+ });
877
+ exports.AuthCatalogIssuesResolveSchema = typebox_1.Type.Object({
878
+ issueId: typebox_1.Type.String({ minLength: 1 }),
879
+ action: typebox_1.Type.Union([
880
+ typebox_1.Type.Literal("keep-current"),
881
+ typebox_1.Type.Literal("force-replace"),
882
+ ]),
883
+ });
884
+ exports.AuthCatalogIssuesResolveResponseSchema = typebox_1.Type.Object({
885
+ success: typebox_1.Type.Literal(true),
886
+ issueId: typebox_1.Type.String({ minLength: 1 }),
887
+ action: typebox_1.Type.Union([
888
+ typebox_1.Type.Literal("keep-current"),
889
+ typebox_1.Type.Literal("force-replace"),
890
+ ]),
891
+ deletedEvidence: typebox_1.Type.Array(exports.DeploymentContractEvidenceSchema),
892
+ });
893
+ exports.AuthDeploymentsEnableSchema = typebox_1.Type.Object({
894
+ kind: exports.AuthDeploymentKindSchema,
895
+ deploymentId: typebox_1.Type.String({ minLength: 1 }),
896
+ });
897
+ exports.AuthDeploymentsEnableResponseSchema = typebox_1.Type.Object({
898
+ deployment: exports.AuthDeploymentSchema,
899
+ });
900
+ exports.AuthDeploymentsRemoveSchema = typebox_1.Type.Object({
901
+ kind: exports.AuthDeploymentKindSchema,
902
+ deploymentId: typebox_1.Type.String({ minLength: 1 }),
903
+ cascade: typebox_1.Type.Optional(typebox_1.Type.Boolean()),
904
+ purgeUnusedContracts: typebox_1.Type.Optional(typebox_1.Type.Boolean()),
905
+ });
906
+ exports.AuthDeploymentsRemoveResponseSchema = typebox_1.Type.Object({
907
+ success: typebox_1.Type.Boolean(),
530
908
  });
531
909
  exports.DeviceMetadataSchema = typebox_1.Type.Record(typebox_1.Type.String({ minLength: 1 }), typebox_1.Type.String({ minLength: 1 }));
532
910
  exports.DeviceSchema = typebox_1.Type.Object({
@@ -547,8 +925,13 @@ exports.DeviceSchema = typebox_1.Type.Object({
547
925
  revokedAt: typebox_1.Type.Union([IsoDateStringSchema, typebox_1.Type.Null()]),
548
926
  });
549
927
  exports.DeviceActivationActorSchema = typebox_1.Type.Object({
550
- origin: typebox_1.Type.String({ minLength: 1 }),
551
- id: typebox_1.Type.String({ minLength: 1 }),
928
+ participantKind: schemas_ts_1.UserParticipantKindSchema,
929
+ userId: typebox_1.Type.String({ minLength: 1 }),
930
+ identity: typebox_1.Type.Object({
931
+ identityId: typebox_1.Type.String({ minLength: 1 }),
932
+ provider: typebox_1.Type.String({ minLength: 1 }),
933
+ subject: typebox_1.Type.String({ minLength: 1 }),
934
+ }),
552
935
  });
553
936
  exports.DeviceActivationRecordSchema = typebox_1.Type.Object({
554
937
  instanceId: typebox_1.Type.String({ minLength: 1 }),
@@ -573,19 +956,16 @@ exports.DeviceActivationReviewSchema = typebox_1.Type.Object({
573
956
  decidedAt: typebox_1.Type.Union([IsoDateStringSchema, typebox_1.Type.Null()]),
574
957
  reason: typebox_1.Type.Optional(typebox_1.Type.String({ minLength: 1 })),
575
958
  });
576
- exports.AuthDeviceActivationReviewRequestedEventSchema = typebox_1.Type.Object({
959
+ exports.AuthDeviceUserAuthoritiesReviewRequestedEventSchema = typebox_1.Type.Object({
577
960
  reviewId: typebox_1.Type.String({ minLength: 1 }),
578
961
  flowId: typebox_1.Type.String({ minLength: 1 }),
579
962
  instanceId: typebox_1.Type.String({ minLength: 1 }),
580
963
  publicIdentityKey: typebox_1.Type.String({ minLength: 1 }),
581
964
  deploymentId: typebox_1.Type.String({ minLength: 1 }),
582
965
  requestedAt: IsoDateStringSchema,
583
- requestedBy: typebox_1.Type.Object({
584
- origin: typebox_1.Type.String({ minLength: 1 }),
585
- id: typebox_1.Type.String({ minLength: 1 }),
586
- }),
966
+ requestedBy: exports.DeviceActivationActorSchema,
587
967
  });
588
- exports.AuthDeviceActivationRequestedEventSchema = typebox_1.Type.Object({
968
+ exports.AuthDeviceUserAuthoritiesRequestedEventSchema = typebox_1.Type.Object({
589
969
  flowId: typebox_1.Type.String({ minLength: 1 }),
590
970
  instanceId: typebox_1.Type.String({ minLength: 1 }),
591
971
  publicIdentityKey: typebox_1.Type.String({ minLength: 1 }),
@@ -593,7 +973,7 @@ exports.AuthDeviceActivationRequestedEventSchema = typebox_1.Type.Object({
593
973
  requestedAt: IsoDateStringSchema,
594
974
  requestedBy: exports.DeviceActivationActorSchema,
595
975
  });
596
- exports.AuthDeviceActivationApprovedEventSchema = typebox_1.Type.Object({
976
+ exports.AuthDeviceUserAuthoritiesApprovedEventSchema = typebox_1.Type.Object({
597
977
  reviewId: typebox_1.Type.String({ minLength: 1 }),
598
978
  flowId: typebox_1.Type.String({ minLength: 1 }),
599
979
  instanceId: typebox_1.Type.String({ minLength: 1 }),
@@ -602,17 +982,14 @@ exports.AuthDeviceActivationApprovedEventSchema = typebox_1.Type.Object({
602
982
  requestedAt: IsoDateStringSchema,
603
983
  approvedAt: IsoDateStringSchema,
604
984
  requestedBy: exports.DeviceActivationActorSchema,
605
- approvedBy: typebox_1.Type.Object({
606
- id: typebox_1.Type.String({ minLength: 1 }),
607
- origin: typebox_1.Type.Optional(typebox_1.Type.String({ minLength: 1 })),
608
- }),
985
+ approvedBy: exports.DeviceActivationActorSchema,
609
986
  });
610
- exports.AuthDeviceActivatedEventSchema = typebox_1.Type.Object({
987
+ exports.AuthDeviceUserAuthoritiesResolvedEventSchema = typebox_1.Type.Object({
611
988
  instanceId: typebox_1.Type.String({ minLength: 1 }),
612
989
  publicIdentityKey: typebox_1.Type.String({ minLength: 1 }),
613
990
  deploymentId: typebox_1.Type.String({ minLength: 1 }),
614
- activatedAt: IsoDateStringSchema,
615
- activatedBy: exports.DeviceActivationActorSchema,
991
+ resolvedAt: IsoDateStringSchema,
992
+ resolvedBy: exports.DeviceActivationActorSchema,
616
993
  flowId: typebox_1.Type.Optional(typebox_1.Type.String({ minLength: 1 })),
617
994
  reviewId: typebox_1.Type.Optional(typebox_1.Type.String({ minLength: 1 })),
618
995
  });
@@ -627,164 +1004,23 @@ exports.DeviceConnectInfoSchema = typebox_1.Type.Object({
627
1004
  }),
628
1005
  auth: typebox_1.Type.Object({
629
1006
  mode: typebox_1.Type.Literal("device_identity"),
1007
+ authority: typebox_1.Type.Union([
1008
+ typebox_1.Type.Literal("admin_reviewed"),
1009
+ typebox_1.Type.Literal("user_delegated"),
1010
+ ]),
630
1011
  iatSkewSeconds: typebox_1.Type.Number(),
631
1012
  }),
632
1013
  });
633
- exports.AuthCreatePortalSchema = typebox_1.Type.Object({
634
- portalId: typebox_1.Type.String({ minLength: 1 }),
635
- entryUrl: typebox_1.Type.String({ minLength: 1 }),
636
- });
637
- exports.AuthCreatePortalResponseSchema = typebox_1.Type.Object({
638
- portal: exports.PortalSchema,
639
- });
640
- exports.AuthListPortalsSchema = typebox_1.Type.Object({});
641
- exports.AuthListPortalsResponseSchema = typebox_1.Type.Object({
642
- portals: typebox_1.Type.Array(exports.PortalSchema),
643
- });
644
- exports.AuthDisablePortalSchema = typebox_1.Type.Object({
645
- portalId: typebox_1.Type.String({ minLength: 1 }),
646
- });
647
- exports.AuthDisablePortalResponseSchema = typebox_1.Type.Object({
648
- success: typebox_1.Type.Boolean(),
649
- });
650
- exports.AuthListPortalProfilesSchema = typebox_1.Type.Object({});
651
- exports.AuthListPortalProfilesResponseSchema = typebox_1.Type.Object({
652
- profiles: typebox_1.Type.Array(exports.PortalProfileSchema),
653
- });
654
- exports.AuthSetPortalProfileSchema = typebox_1.Type.Object({
655
- portalId: typebox_1.Type.String({ minLength: 1 }),
656
- entryUrl: typebox_1.Type.String({ minLength: 1 }),
657
- contractId: typebox_1.Type.String({ minLength: 1 }),
658
- allowedOrigins: typebox_1.Type.Optional(typebox_1.Type.Array(typebox_1.Type.String({ minLength: 1 }))),
659
- });
660
- exports.AuthSetPortalProfileResponseSchema = typebox_1.Type.Object({
661
- profile: exports.PortalProfileSchema,
662
- });
663
- exports.AuthDisablePortalProfileSchema = typebox_1.Type.Object({
664
- portalId: typebox_1.Type.String({ minLength: 1 }),
665
- });
666
- exports.AuthDisablePortalProfileResponseSchema = typebox_1.Type.Object({
667
- profile: exports.PortalProfileSchema,
668
- });
669
- exports.AuthGetLoginPortalDefaultSchema = typebox_1.Type.Object({});
670
- exports.AuthGetLoginPortalDefaultResponseSchema = typebox_1.Type.Object({
671
- defaultPortal: exports.LoginPortalDefaultSchema,
672
- });
673
- exports.AuthSetLoginPortalDefaultSchema = typebox_1.Type.Object({
674
- portalId: NullablePortalIdSchema,
675
- });
676
- exports.AuthSetLoginPortalDefaultResponseSchema = typebox_1.Type.Object({
677
- defaultPortal: exports.LoginPortalDefaultSchema,
678
- });
679
- exports.AuthListLoginPortalSelectionsSchema = typebox_1.Type.Object({});
680
- exports.AuthListLoginPortalSelectionsResponseSchema = typebox_1.Type.Object({
681
- selections: typebox_1.Type.Array(exports.LoginPortalSelectionSchema),
682
- });
683
- exports.AuthSetLoginPortalSelectionSchema = typebox_1.Type.Object({
684
- contractId: typebox_1.Type.String({ minLength: 1 }),
685
- portalId: NullablePortalIdSchema,
686
- });
687
- exports.AuthSetLoginPortalSelectionResponseSchema = typebox_1.Type.Object({
688
- selection: exports.LoginPortalSelectionSchema,
689
- });
690
- exports.AuthClearLoginPortalSelectionSchema = typebox_1.Type.Object({
691
- contractId: typebox_1.Type.String({ minLength: 1 }),
692
- });
693
- exports.AuthClearLoginPortalSelectionResponseSchema = typebox_1.Type.Object({
694
- success: typebox_1.Type.Boolean(),
695
- });
696
- exports.AuthGetDevicePortalDefaultSchema = typebox_1.Type.Object({});
697
- exports.AuthGetDevicePortalDefaultResponseSchema = typebox_1.Type.Object({
698
- defaultPortal: exports.DevicePortalDefaultSchema,
699
- });
700
- exports.AuthSetDevicePortalDefaultSchema = typebox_1.Type.Object({
701
- portalId: NullablePortalIdSchema,
702
- });
703
- exports.AuthSetDevicePortalDefaultResponseSchema = typebox_1.Type.Object({
704
- defaultPortal: exports.DevicePortalDefaultSchema,
705
- });
706
- exports.AuthListDevicePortalSelectionsSchema = typebox_1.Type.Object({});
707
- exports.AuthListDevicePortalSelectionsResponseSchema = typebox_1.Type.Object({
708
- selections: typebox_1.Type.Array(exports.DevicePortalSelectionSchema),
709
- });
710
- exports.AuthSetDevicePortalSelectionSchema = typebox_1.Type.Object({
711
- deploymentId: typebox_1.Type.String({ minLength: 1 }),
712
- portalId: NullablePortalIdSchema,
713
- });
714
- exports.AuthSetDevicePortalSelectionResponseSchema = typebox_1.Type.Object({
715
- selection: exports.DevicePortalSelectionSchema,
716
- });
717
- exports.AuthClearDevicePortalSelectionSchema = typebox_1.Type.Object({
718
- deploymentId: typebox_1.Type.String({ minLength: 1 }),
719
- });
720
- exports.AuthClearDevicePortalSelectionResponseSchema = typebox_1.Type.Object({
721
- success: typebox_1.Type.Boolean(),
722
- });
723
- exports.AuthCreateDeviceDeploymentSchema = typebox_1.Type.Object({
724
- deploymentId: typebox_1.Type.String({ minLength: 1 }),
725
- reviewMode: typebox_1.Type.Optional(typebox_1.Type.Union([typebox_1.Type.Literal("none"), typebox_1.Type.Literal("required")])),
726
- });
727
- exports.AuthCreateDeviceDeploymentResponseSchema = typebox_1.Type.Object({
728
- deployment: exports.DeviceDeploymentSchema,
729
- });
730
- exports.AuthListDeviceDeploymentsSchema = typebox_1.Type.Object({
731
- disabled: typebox_1.Type.Optional(typebox_1.Type.Boolean()),
732
- });
733
- exports.AuthListDeviceDeploymentsResponseSchema = typebox_1.Type.Object({
734
- deployments: typebox_1.Type.Array(exports.DeviceDeploymentSchema),
735
- });
736
- exports.AuthApplyDeviceDeploymentContractSchema = typebox_1.Type.Object({
737
- deploymentId: typebox_1.Type.String({ minLength: 1 }),
738
- contract: exports.OpenObjectSchema,
739
- expectedDigest: exports.DigestSchema,
740
- replaceExisting: typebox_1.Type.Optional(typebox_1.Type.Boolean()),
741
- });
742
- exports.AuthApplyDeviceDeploymentContractResponseSchema = typebox_1.Type.Object({
743
- deployment: exports.DeviceDeploymentSchema,
744
- contract: typebox_1.Type.Object({
745
- digest: exports.DigestSchema,
746
- id: typebox_1.Type.String({ minLength: 1 }),
747
- displayName: typebox_1.Type.String({ minLength: 1 }),
748
- description: typebox_1.Type.String({ minLength: 1 }),
749
- installedAt: IsoDateStringSchema,
750
- }),
751
- });
752
- exports.AuthUnapplyDeviceDeploymentContractSchema = typebox_1.Type.Object({
753
- deploymentId: typebox_1.Type.String({ minLength: 1 }),
754
- contractId: typebox_1.Type.String({ minLength: 1 }),
755
- digests: typebox_1.Type.Optional(typebox_1.Type.Array(exports.DigestSchema)),
756
- });
757
- exports.AuthUnapplyDeviceDeploymentContractResponseSchema = typebox_1.Type.Object({
758
- deployment: exports.DeviceDeploymentSchema,
759
- });
760
- exports.AuthDisableDeviceDeploymentSchema = typebox_1.Type.Object({
761
- deploymentId: typebox_1.Type.String({ minLength: 1 }),
762
- });
763
- exports.AuthDisableDeviceDeploymentResponseSchema = typebox_1.Type.Object({
764
- deployment: exports.DeviceDeploymentSchema,
765
- });
766
- exports.AuthEnableDeviceDeploymentSchema = typebox_1.Type.Object({
767
- deploymentId: typebox_1.Type.String({ minLength: 1 }),
768
- });
769
- exports.AuthEnableDeviceDeploymentResponseSchema = typebox_1.Type.Object({
770
- deployment: exports.DeviceDeploymentSchema,
771
- });
772
- exports.AuthRemoveDeviceDeploymentSchema = typebox_1.Type.Object({
773
- deploymentId: typebox_1.Type.String({ minLength: 1 }),
774
- });
775
- exports.AuthRemoveDeviceDeploymentResponseSchema = typebox_1.Type.Object({
776
- success: typebox_1.Type.Boolean(),
777
- });
778
- exports.AuthProvisionDeviceInstanceSchema = typebox_1.Type.Object({
1014
+ exports.AuthDevicesProvisionSchema = typebox_1.Type.Object({
779
1015
  deploymentId: typebox_1.Type.String({ minLength: 1 }),
780
1016
  publicIdentityKey: typebox_1.Type.String({ minLength: 1 }),
781
1017
  activationKey: typebox_1.Type.String({ minLength: 1 }),
782
1018
  metadata: typebox_1.Type.Optional(exports.DeviceMetadataSchema),
783
1019
  });
784
- exports.AuthProvisionDeviceInstanceResponseSchema = typebox_1.Type.Object({
1020
+ exports.AuthDevicesProvisionResponseSchema = typebox_1.Type.Object({
785
1021
  instance: exports.DeviceSchema,
786
1022
  });
787
- exports.AuthListDeviceInstancesSchema = typebox_1.Type.Object({
1023
+ exports.AuthDevicesListSchema = typebox_1.Type.Object({
788
1024
  deploymentId: typebox_1.Type.Optional(typebox_1.Type.String({ minLength: 1 })),
789
1025
  state: typebox_1.Type.Optional(typebox_1.Type.Union([
790
1026
  typebox_1.Type.Literal("registered"),
@@ -792,39 +1028,41 @@ exports.AuthListDeviceInstancesSchema = typebox_1.Type.Object({
792
1028
  typebox_1.Type.Literal("revoked"),
793
1029
  typebox_1.Type.Literal("disabled"),
794
1030
  ])),
1031
+ offset: typebox_1.Type.Optional(typebox_1.Type.Integer({ minimum: 0 })),
1032
+ limit: typebox_1.Type.Integer({ minimum: 0, maximum: 500 }),
795
1033
  });
796
- exports.AuthListDeviceInstancesResponseSchema = typebox_1.Type.Object({
797
- instances: typebox_1.Type.Array(exports.DeviceSchema),
1034
+ exports.AuthDevicesListResponseSchema = typebox_1.Type.Object({
1035
+ ...(0, protocol_ts_1.PageResponseSchema)(exports.DeviceSchema).properties,
798
1036
  });
799
- exports.AuthDisableDeviceInstanceSchema = typebox_1.Type.Object({
1037
+ exports.AuthDevicesDisableSchema = typebox_1.Type.Object({
800
1038
  instanceId: typebox_1.Type.String({ minLength: 1 }),
801
1039
  });
802
- exports.AuthDisableDeviceInstanceResponseSchema = typebox_1.Type.Object({
1040
+ exports.AuthDevicesDisableResponseSchema = typebox_1.Type.Object({
803
1041
  instance: exports.DeviceSchema,
804
1042
  });
805
- exports.AuthEnableDeviceInstanceSchema = typebox_1.Type.Object({
1043
+ exports.AuthDevicesEnableSchema = typebox_1.Type.Object({
806
1044
  instanceId: typebox_1.Type.String({ minLength: 1 }),
807
1045
  });
808
- exports.AuthEnableDeviceInstanceResponseSchema = typebox_1.Type.Object({
1046
+ exports.AuthDevicesEnableResponseSchema = typebox_1.Type.Object({
809
1047
  instance: exports.DeviceSchema,
810
1048
  });
811
- exports.AuthRemoveDeviceInstanceSchema = typebox_1.Type.Object({
1049
+ exports.AuthDevicesRemoveSchema = typebox_1.Type.Object({
812
1050
  instanceId: typebox_1.Type.String({ minLength: 1 }),
813
1051
  });
814
- exports.AuthRemoveDeviceInstanceResponseSchema = typebox_1.Type.Object({
1052
+ exports.AuthDevicesRemoveResponseSchema = typebox_1.Type.Object({
815
1053
  success: typebox_1.Type.Boolean(),
816
1054
  });
817
- exports.AuthActivateDeviceSchema = typebox_1.Type.Object({
1055
+ exports.AuthResolveDeviceUserAuthoritiesSchema = typebox_1.Type.Object({
818
1056
  flowId: typebox_1.Type.String({ minLength: 1 }),
819
1057
  });
820
- exports.AuthActivateDeviceProgressSchema = typebox_1.Type.Object({
1058
+ exports.AuthResolveDeviceUserAuthoritiesProgressSchema = typebox_1.Type.Object({
821
1059
  status: typebox_1.Type.Literal("pending_review"),
822
1060
  reviewId: typebox_1.Type.String({ minLength: 1 }),
823
1061
  instanceId: typebox_1.Type.String({ minLength: 1 }),
824
1062
  deploymentId: typebox_1.Type.String({ minLength: 1 }),
825
1063
  requestedAt: IsoDateStringSchema,
826
1064
  });
827
- exports.AuthActivateDeviceResponseSchema = typebox_1.Type.Union([
1065
+ exports.AuthResolveDeviceUserAuthoritiesResponseSchema = typebox_1.Type.Union([
828
1066
  typebox_1.Type.Object({
829
1067
  status: typebox_1.Type.Literal("activated"),
830
1068
  instanceId: typebox_1.Type.String({ minLength: 1 }),
@@ -850,31 +1088,41 @@ exports.WaitForDeviceActivationResponseSchema = typebox_1.Type.Union([
850
1088
  reason: typebox_1.Type.Optional(typebox_1.Type.String({ minLength: 1 })),
851
1089
  }),
852
1090
  ]);
853
- exports.AuthGetDeviceConnectInfoSchema = typebox_1.Type.Object({
1091
+ exports.WaitForDeviceActivationRequestSchema = typebox_1.Type.Object({
1092
+ flowId: typebox_1.Type.String({ minLength: 1 }),
1093
+ publicIdentityKey: typebox_1.Type.String({ minLength: 1 }),
1094
+ nonce: typebox_1.Type.String({ minLength: 1 }),
1095
+ contractDigest: exports.DigestSchema,
1096
+ iat: typebox_1.Type.Number(),
1097
+ sig: typebox_1.Type.String({ minLength: 1 }),
1098
+ });
1099
+ exports.AuthDevicesConnectInfoGetSchema = typebox_1.Type.Object({
854
1100
  publicIdentityKey: typebox_1.Type.String({ minLength: 1 }),
855
1101
  contractDigest: exports.DigestSchema,
856
1102
  iat: typebox_1.Type.Number(),
857
1103
  sig: typebox_1.Type.String({ minLength: 1 }),
858
- }, { additionalProperties: false });
859
- exports.AuthGetDeviceConnectInfoResponseSchema = typebox_1.Type.Object({
1104
+ });
1105
+ exports.AuthDevicesConnectInfoGetResponseSchema = typebox_1.Type.Object({
860
1106
  status: typebox_1.Type.Literal("ready"),
861
1107
  connectInfo: exports.DeviceConnectInfoSchema,
862
1108
  });
863
- exports.AuthListDeviceActivationsSchema = typebox_1.Type.Object({
1109
+ exports.AuthDeviceUserAuthoritiesListSchema = typebox_1.Type.Object({
864
1110
  instanceId: typebox_1.Type.Optional(typebox_1.Type.String({ minLength: 1 })),
865
1111
  deploymentId: typebox_1.Type.Optional(typebox_1.Type.String({ minLength: 1 })),
866
1112
  state: typebox_1.Type.Optional(typebox_1.Type.Union([typebox_1.Type.Literal("activated"), typebox_1.Type.Literal("revoked")])),
1113
+ offset: typebox_1.Type.Optional(typebox_1.Type.Integer({ minimum: 0 })),
1114
+ limit: typebox_1.Type.Integer({ minimum: 0, maximum: 500 }),
867
1115
  });
868
- exports.AuthListDeviceActivationsResponseSchema = typebox_1.Type.Object({
869
- activations: typebox_1.Type.Array(exports.DeviceActivationRecordSchema),
1116
+ exports.AuthDeviceUserAuthoritiesListResponseSchema = typebox_1.Type.Object({
1117
+ ...(0, protocol_ts_1.PageResponseSchema)(exports.DeviceActivationRecordSchema).properties,
870
1118
  });
871
- exports.AuthRevokeDeviceActivationSchema = typebox_1.Type.Object({
1119
+ exports.AuthDeviceUserAuthoritiesRevokeSchema = typebox_1.Type.Object({
872
1120
  instanceId: typebox_1.Type.String({ minLength: 1 }),
873
1121
  });
874
- exports.AuthRevokeDeviceActivationResponseSchema = typebox_1.Type.Object({
1122
+ exports.AuthDeviceUserAuthoritiesRevokeResponseSchema = typebox_1.Type.Object({
875
1123
  success: typebox_1.Type.Boolean(),
876
1124
  });
877
- exports.AuthListDeviceActivationReviewsSchema = typebox_1.Type.Object({
1125
+ exports.AuthDeviceUserAuthoritiesReviewsListSchema = typebox_1.Type.Object({
878
1126
  instanceId: typebox_1.Type.Optional(typebox_1.Type.String({ minLength: 1 })),
879
1127
  deploymentId: typebox_1.Type.Optional(typebox_1.Type.String({ minLength: 1 })),
880
1128
  state: typebox_1.Type.Optional(typebox_1.Type.Union([
@@ -882,38 +1130,162 @@ exports.AuthListDeviceActivationReviewsSchema = typebox_1.Type.Object({
882
1130
  typebox_1.Type.Literal("approved"),
883
1131
  typebox_1.Type.Literal("rejected"),
884
1132
  ])),
1133
+ offset: typebox_1.Type.Optional(typebox_1.Type.Integer({ minimum: 0 })),
1134
+ limit: typebox_1.Type.Integer({ minimum: 0, maximum: 500 }),
885
1135
  });
886
- exports.AuthListDeviceActivationReviewsResponseSchema = typebox_1.Type.Object({
887
- reviews: typebox_1.Type.Array(exports.DeviceActivationReviewSchema),
1136
+ exports.AuthDeviceUserAuthoritiesReviewsListResponseSchema = typebox_1.Type.Object({
1137
+ ...(0, protocol_ts_1.PageResponseSchema)(exports.DeviceActivationReviewSchema).properties,
888
1138
  });
889
- exports.AuthDecideDeviceActivationReviewSchema = typebox_1.Type.Object({
1139
+ exports.AuthDeviceUserAuthoritiesReviewsDecideSchema = typebox_1.Type.Object({
890
1140
  reviewId: typebox_1.Type.String({ minLength: 1 }),
891
1141
  decision: typebox_1.Type.Union([typebox_1.Type.Literal("approve"), typebox_1.Type.Literal("reject")]),
892
1142
  reason: typebox_1.Type.Optional(typebox_1.Type.String({ minLength: 1 })),
893
1143
  });
894
- exports.AuthDecideDeviceActivationReviewResponseSchema = typebox_1.Type.Object({
1144
+ exports.AuthDeviceUserAuthoritiesReviewsDecideResponseSchema = typebox_1.Type.Object({
895
1145
  review: exports.DeviceActivationReviewSchema,
896
1146
  activation: typebox_1.Type.Optional(exports.DeviceActivationRecordSchema),
897
1147
  confirmationCode: typebox_1.Type.Optional(typebox_1.Type.String({ minLength: 1 })),
898
1148
  });
1149
+ exports.UserIdentityViewSchema = typebox_1.Type.Object({
1150
+ identityId: typebox_1.Type.String({ minLength: 1 }),
1151
+ provider: typebox_1.Type.String({ minLength: 1 }),
1152
+ subject: typebox_1.Type.String({ minLength: 1 }),
1153
+ displayName: typebox_1.Type.Union([typebox_1.Type.String({ minLength: 1 }), typebox_1.Type.Null()]),
1154
+ email: typebox_1.Type.Union([typebox_1.Type.String({ minLength: 1 }), typebox_1.Type.Null()]),
1155
+ emailVerified: typebox_1.Type.Boolean(),
1156
+ linkedAt: IsoDateStringSchema,
1157
+ lastLoginAt: typebox_1.Type.Union([IsoDateStringSchema, typebox_1.Type.Null()]),
1158
+ });
899
1159
  exports.UserViewSchema = typebox_1.Type.Object({
900
- origin: typebox_1.Type.String(),
901
- id: typebox_1.Type.String(),
1160
+ userId: typebox_1.Type.String({ minLength: 1 }),
902
1161
  name: typebox_1.Type.Optional(typebox_1.Type.String()),
903
1162
  email: typebox_1.Type.Optional(typebox_1.Type.String()),
904
1163
  active: typebox_1.Type.Boolean(),
905
1164
  capabilities: typebox_1.Type.Array(typebox_1.Type.String()),
1165
+ capabilityGroups: typebox_1.Type.Array(typebox_1.Type.String()),
1166
+ identities: typebox_1.Type.Array(exports.UserIdentityViewSchema),
906
1167
  });
907
- exports.AuthListUsersSchema = typebox_1.Type.Object({});
908
- exports.AuthListUsersResponseSchema = typebox_1.Type.Object({
909
- users: typebox_1.Type.Array(exports.UserViewSchema),
1168
+ exports.AuthUsersListSchema = typebox_1.Type.Object({
1169
+ offset: typebox_1.Type.Optional(typebox_1.Type.Integer({ minimum: 0 })),
1170
+ limit: typebox_1.Type.Integer({ minimum: 0, maximum: 500 }),
910
1171
  });
911
- exports.AuthUpdateUserSchema = typebox_1.Type.Object({
912
- origin: typebox_1.Type.String(),
913
- id: typebox_1.Type.String(),
1172
+ exports.AuthUsersListResponseSchema = typebox_1.Type.Object({
1173
+ ...(0, protocol_ts_1.PageResponseSchema)(exports.UserViewSchema).properties,
1174
+ });
1175
+ exports.AuthUsersGetSchema = typebox_1.Type.Object({
1176
+ userId: typebox_1.Type.String({ minLength: 1 }),
1177
+ });
1178
+ exports.AuthUsersGetResponseSchema = typebox_1.Type.Object({
1179
+ user: exports.UserViewSchema,
1180
+ });
1181
+ exports.AuthUsersCreateSchema = typebox_1.Type.Object({
1182
+ name: typebox_1.Type.Optional(typebox_1.Type.String({ minLength: 1 })),
1183
+ email: typebox_1.Type.Optional(typebox_1.Type.String({ minLength: 1 })),
1184
+ username: typebox_1.Type.Optional(typebox_1.Type.String({ minLength: 1 })),
1185
+ active: typebox_1.Type.Optional(typebox_1.Type.Boolean()),
1186
+ capabilities: typebox_1.Type.Optional(typebox_1.Type.Array(typebox_1.Type.String({ minLength: 1 }))),
1187
+ capabilityGroups: typebox_1.Type.Optional(typebox_1.Type.Array(typebox_1.Type.String({ minLength: 1 }))),
1188
+ });
1189
+ exports.AuthUsersCreateResponseSchema = typebox_1.Type.Object({
1190
+ user: exports.UserViewSchema,
1191
+ });
1192
+ exports.AuthUsersIdentityLinkCreateSchema = typebox_1.Type.Object({
1193
+ returnTo: typebox_1.Type.Optional(typebox_1.Type.String({ minLength: 1 })),
1194
+ });
1195
+ exports.AuthUsersPasswordChangeSchema = typebox_1.Type.Object({
1196
+ currentPassword: typebox_1.Type.String({ minLength: 1 }),
1197
+ newPassword: typebox_1.Type.String({ minLength: 1 }),
1198
+ });
1199
+ exports.AuthUsersPasswordChangeResponseSchema = typebox_1.Type.Object({
1200
+ success: typebox_1.Type.Boolean(),
1201
+ });
1202
+ exports.AuthUsersPasswordResetCreateSchema = typebox_1.Type.Object({
1203
+ userId: typebox_1.Type.String({ minLength: 1 }),
1204
+ expiresInSeconds: typebox_1.Type.Optional(typebox_1.Type.Integer({ minimum: 60, maximum: 2592000 })),
1205
+ });
1206
+ exports.AuthUsersAccountFlowCreateResponseSchema = typebox_1.Type.Object({
1207
+ flowId: typebox_1.Type.String({ minLength: 1 }),
1208
+ url: typebox_1.Type.String({ minLength: 1 }),
1209
+ expiresAt: IsoDateStringSchema,
1210
+ });
1211
+ exports.CapabilityDefinitionSchema = typebox_1.Type.Object({
1212
+ key: typebox_1.Type.String({ minLength: 1 }),
1213
+ displayName: typebox_1.Type.String({ minLength: 1 }),
1214
+ description: typebox_1.Type.String({ minLength: 1 }),
1215
+ consequence: typebox_1.Type.Optional(typebox_1.Type.String({ minLength: 1 })),
1216
+ source: typebox_1.Type.Union([typebox_1.Type.Literal("contract"), typebox_1.Type.Literal("platform")]),
1217
+ contractId: typebox_1.Type.Optional(typebox_1.Type.String({ minLength: 1 })),
1218
+ contractDigest: typebox_1.Type.Optional(exports.DigestSchema),
1219
+ contractDisplayName: typebox_1.Type.Optional(typebox_1.Type.String({ minLength: 1 })),
1220
+ });
1221
+ exports.AuthCapabilitiesListSchema = typebox_1.Type.Object({
1222
+ offset: typebox_1.Type.Optional(typebox_1.Type.Integer({ minimum: 0 })),
1223
+ limit: typebox_1.Type.Integer({ minimum: 0, maximum: 500 }),
1224
+ });
1225
+ exports.AuthCapabilitiesListResponseSchema = typebox_1.Type.Object({
1226
+ ...(0, protocol_ts_1.PageResponseSchema)(exports.CapabilityDefinitionSchema).properties,
1227
+ });
1228
+ exports.CapabilityGroupSchema = typebox_1.Type.Object({
1229
+ groupKey: typebox_1.Type.String({ minLength: 1 }),
1230
+ displayName: typebox_1.Type.String({ minLength: 1 }),
1231
+ description: typebox_1.Type.String({ minLength: 1 }),
1232
+ capabilities: typebox_1.Type.Array(typebox_1.Type.String({ minLength: 1 })),
1233
+ includedGroups: typebox_1.Type.Array(typebox_1.Type.String({ minLength: 1 })),
1234
+ createdAt: IsoDateStringSchema,
1235
+ updatedAt: IsoDateStringSchema,
1236
+ });
1237
+ exports.AuthCapabilityGroupsListSchema = typebox_1.Type.Object({
1238
+ offset: typebox_1.Type.Optional(typebox_1.Type.Integer({ minimum: 0 })),
1239
+ limit: typebox_1.Type.Integer({ minimum: 0, maximum: 500 }),
1240
+ });
1241
+ exports.AuthCapabilityGroupsListResponseSchema = typebox_1.Type.Object({
1242
+ ...(0, protocol_ts_1.PageResponseSchema)(exports.CapabilityGroupSchema).properties,
1243
+ });
1244
+ exports.AuthCapabilityGroupsGetSchema = typebox_1.Type.Object({
1245
+ groupKey: typebox_1.Type.String({ minLength: 1 }),
1246
+ });
1247
+ exports.AuthCapabilityGroupsGetResponseSchema = typebox_1.Type.Object({
1248
+ group: exports.CapabilityGroupSchema,
1249
+ });
1250
+ exports.AuthCapabilityGroupsPutSchema = typebox_1.Type.Object({
1251
+ groupKey: typebox_1.Type.String({ minLength: 1 }),
1252
+ displayName: typebox_1.Type.String({ minLength: 1 }),
1253
+ description: typebox_1.Type.String({ minLength: 1 }),
1254
+ capabilities: typebox_1.Type.Optional(typebox_1.Type.Array(typebox_1.Type.String({ minLength: 1 }))),
1255
+ includedGroups: typebox_1.Type.Optional(typebox_1.Type.Array(typebox_1.Type.String({ minLength: 1 }))),
1256
+ });
1257
+ exports.AuthCapabilityGroupsPutResponseSchema = typebox_1.Type.Object({
1258
+ group: exports.CapabilityGroupSchema,
1259
+ });
1260
+ exports.AuthCapabilityGroupsDeleteSchema = typebox_1.Type.Object({
1261
+ groupKey: typebox_1.Type.String({ minLength: 1 }),
1262
+ });
1263
+ exports.AuthCapabilityGroupsDeleteResponseSchema = typebox_1.Type.Object({
1264
+ success: typebox_1.Type.Boolean(),
1265
+ });
1266
+ exports.AuthUsersUpdateSchema = typebox_1.Type.Object({
1267
+ userId: typebox_1.Type.String({ minLength: 1 }),
914
1268
  active: typebox_1.Type.Optional(typebox_1.Type.Boolean()),
915
1269
  capabilities: typebox_1.Type.Optional(typebox_1.Type.Array(typebox_1.Type.String())),
1270
+ capabilityGroups: typebox_1.Type.Optional(typebox_1.Type.Array(typebox_1.Type.String({ minLength: 1 }))),
1271
+ name: typebox_1.Type.Optional(typebox_1.Type.String()),
1272
+ email: typebox_1.Type.Optional(typebox_1.Type.String()),
1273
+ });
1274
+ exports.AuthUsersUpdateResponseSchema = typebox_1.Type.Object({
1275
+ success: typebox_1.Type.Boolean(),
1276
+ });
1277
+ exports.AuthUserIdentitiesListSchema = typebox_1.Type.Object({
1278
+ userId: typebox_1.Type.String({ minLength: 1 }),
1279
+ offset: typebox_1.Type.Optional(typebox_1.Type.Integer({ minimum: 0 })),
1280
+ limit: typebox_1.Type.Integer({ minimum: 0, maximum: 500 }),
1281
+ });
1282
+ exports.AuthUserIdentitiesListResponseSchema = typebox_1.Type.Object({
1283
+ ...(0, protocol_ts_1.PageResponseSchema)(exports.UserIdentityViewSchema).properties,
1284
+ });
1285
+ exports.AuthUserIdentitiesUnlinkSchema = typebox_1.Type.Object({
1286
+ userId: typebox_1.Type.String({ minLength: 1 }),
1287
+ identityId: typebox_1.Type.String({ minLength: 1 }),
916
1288
  });
917
- exports.AuthUpdateUserResponseSchema = typebox_1.Type.Object({
1289
+ exports.AuthUserIdentitiesUnlinkResponseSchema = typebox_1.Type.Object({
918
1290
  success: typebox_1.Type.Boolean(),
919
1291
  });