@spacefast/common 0.0.26 → 0.2.2

package/dist/contracts/superadmin-tenants.d.ts

@@ -1,7 +1,10 @@
 import { z } from "zod";
 export declare const SuperadminProviderClientSchema: z.ZodObject<{
     id: z.ZodString;
-    provider: z.ZodLiteral<"wpcloud">;
+    provider: z.ZodEnum<{
+        wpcloud: "wpcloud";
+        simulated: "simulated";
+    }>;
     tenantId: z.ZodString;
     name: z.ZodString;
     label: z.ZodString;
@@ -18,7 +21,10 @@ export declare const SuperadminProviderClientSchema: z.ZodObject<{
 export declare const SuperadminProviderClientListSchema: z.ZodObject<{
     clients: z.ZodArray<z.ZodObject<{
         id: z.ZodString;
-        provider: z.ZodLiteral<"wpcloud">;
+        provider: z.ZodEnum<{
+            wpcloud: "wpcloud";
+            simulated: "simulated";
+        }>;
         tenantId: z.ZodString;
         name: z.ZodString;
         label: z.ZodString;
@@ -63,9 +69,13 @@ export declare const SuperadminTenantSchema: z.ZodObject<{
     kind: z.ZodEnum<{
         internal: "internal";
         main: "main";
-        platform: "platform";
         partner: "partner";
     }>;
+    mode: z.ZodEnum<{
+        live: "live";
+        test: "test";
+    }>;
+    liveTenantId: z.ZodNullable<z.ZodString>;
     name: z.ZodString;
     status: z.ZodEnum<{
         active: "active";
@@ -78,7 +88,10 @@ export declare const SuperadminTenantSchema: z.ZodObject<{
     metadata: z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodString>>;
     providerClient: z.ZodNullable<z.ZodObject<{
         id: z.ZodString;
-        provider: z.ZodLiteral<"wpcloud">;
+        provider: z.ZodEnum<{
+            wpcloud: "wpcloud";
+            simulated: "simulated";
+        }>;
         tenantId: z.ZodString;
         name: z.ZodString;
         label: z.ZodString;
@@ -104,9 +117,13 @@ export declare const SuperadminTenantListSchema: z.ZodObject<{
         kind: z.ZodEnum<{
             internal: "internal";
             main: "main";
-            platform: "platform";
             partner: "partner";
         }>;
+        mode: z.ZodEnum<{
+            live: "live";
+            test: "test";
+        }>;
+        liveTenantId: z.ZodNullable<z.ZodString>;
         name: z.ZodString;
         status: z.ZodEnum<{
             active: "active";
@@ -119,7 +136,10 @@ export declare const SuperadminTenantListSchema: z.ZodObject<{
         metadata: z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodString>>;
         providerClient: z.ZodNullable<z.ZodObject<{
             id: z.ZodString;
-            provider: z.ZodLiteral<"wpcloud">;
+            provider: z.ZodEnum<{
+                wpcloud: "wpcloud";
+                simulated: "simulated";
+            }>;
             tenantId: z.ZodString;
             name: z.ZodString;
             label: z.ZodString;
@@ -170,5 +190,606 @@ export declare const superadminTenantPatchSchema: z.ZodObject<{
     defaultRegion: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     metadata: z.ZodOptional<z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodString>>>;
 }, z.core.$strip>;
+export declare const SuperadminBootstrapKeySchema: z.ZodObject<{
+    id: z.ZodString;
+    name: z.ZodNullable<z.ZodString>;
+    tenantId: z.ZodNullable<z.ZodString>;
+    mode: z.ZodEnum<{
+        live: "live";
+        test: "test";
+    }>;
+    subject: z.ZodNullable<z.ZodObject<{
+        type: z.ZodEnum<{
+            team: "team";
+            external: "external";
+            system: "system";
+            user: "user";
+        }>;
+        id: z.ZodString;
+    }, z.core.$strip>>;
+    ownerPrincipal: z.ZodNullable<z.ZodObject<{
+        type: z.ZodEnum<{
+            team: "team";
+            external: "external";
+        }>;
+        id: z.ZodString;
+    }, z.core.$strip>>;
+    createdByUserId: z.ZodString;
+    preset: z.ZodNullable<z.ZodEnum<{
+        ci_deploy: "ci_deploy";
+        space_publisher: "space_publisher";
+        space_admin: "space_admin";
+        domain_manager: "domain_manager";
+        team_admin: "team_admin";
+        billing_viewer: "billing_viewer";
+        partner_admin: "partner_admin";
+    }>>;
+    teamScope: z.ZodNullable<z.ZodType<import("./device-team-scope.js").DeviceTeamScope, unknown, z.core.$ZodTypeInternals<import("./device-team-scope.js").DeviceTeamScope, unknown>>>;
+    policy: z.ZodNullable<z.ZodObject<{
+        version: z.ZodLiteral<"2026-06-09">;
+        statements: z.ZodArray<z.ZodObject<{
+            effect: z.ZodEnum<{
+                allow: "allow";
+                deny: "deny";
+            }>;
+            actions: z.ZodArray<z.ZodEnum<{
+                "teams:read": "teams:read";
+                "teams:create": "teams:create";
+                "spaces:read": "spaces:read";
+                "spaces:write": "spaces:write";
+                "spaces:rename": "spaces:rename";
+                "domains:read": "domains:read";
+                "spaces:publish": "spaces:publish";
+                "builds:trigger": "builds:trigger";
+                "*": "*";
+                "spaces:create": "spaces:create";
+                "spaces:delete": "spaces:delete";
+                "spaces:transfer": "spaces:transfer";
+                "spaces:export": "spaces:export";
+                "spaces:import": "spaces:import";
+                "spaces:policy.write": "spaces:policy.write";
+                "versions:read": "versions:read";
+                "versions:promote": "versions:promote";
+                "versions:delete": "versions:delete";
+                "versions:download": "versions:download";
+                "domains:create": "domains:create";
+                "domains:verify": "domains:verify";
+                "domains:assign": "domains:assign";
+                "domains:bind": "domains:bind";
+                "domains:delete": "domains:delete";
+                "domains:dns.write": "domains:dns.write";
+                "domains:dns.credentials.write": "domains:dns.credentials.write";
+                "domains:purchase": "domains:purchase";
+                "webhooks:read": "webhooks:read";
+                "webhooks:write": "webhooks:write";
+                "builds:read": "builds:read";
+                "builds:create": "builds:create";
+                "variables:read": "variables:read";
+                "variables:write": "variables:write";
+                "tenants:read": "tenants:read";
+                "tenants:write": "tenants:write";
+                "principals:read": "principals:read";
+                "principals:write": "principals:write";
+                "infrastructure:read": "infrastructure:read";
+                "teams:write": "teams:write";
+                "teams:members.write": "teams:members.write";
+                "billing:read": "billing:read";
+                "billing:write": "billing:write";
+                "tokens:read": "tokens:read";
+                "tokens:create": "tokens:create";
+                "tokens:revoke": "tokens:revoke";
+                "runtime:manage": "runtime:manage";
+            }>>;
+            resources: z.ZodArray<z.ZodString>;
+            conditions: z.ZodOptional<z.ZodObject<{
+                "request.client": z.ZodOptional<z.ZodEnum<{
+                    api: "api";
+                    dashboard: "dashboard";
+                    cli: "cli";
+                    worker: "worker";
+                }>>;
+            }, z.core.$strict>>;
+        }, z.core.$strict>>;
+    }, z.core.$strict>>;
+    metadata: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+    secretPreview: z.ZodString;
+    secret: z.ZodOptional<z.ZodString>;
+    notBefore: z.ZodNullable<z.ZodString>;
+    expiresAt: z.ZodNullable<z.ZodString>;
+    ipAllowlist: z.ZodNullable<z.ZodArray<z.ZodString>>;
+    revokedAt: z.ZodNullable<z.ZodString>;
+    enabled: z.ZodBoolean;
+    createdAt: z.ZodString;
+    updatedAt: z.ZodString;
+    lastRequestAt: z.ZodNullable<z.ZodString>;
+}, z.core.$strip>;
+export declare const SuperadminTenantWithBootstrapKeySchema: z.ZodObject<{
+    tenant: z.ZodObject<{
+        id: z.ZodString;
+        kind: z.ZodEnum<{
+            internal: "internal";
+            main: "main";
+            partner: "partner";
+        }>;
+        mode: z.ZodEnum<{
+            live: "live";
+            test: "test";
+        }>;
+        liveTenantId: z.ZodNullable<z.ZodString>;
+        name: z.ZodString;
+        status: z.ZodEnum<{
+            active: "active";
+            past_due: "past_due";
+            suspended: "suspended";
+            deleted: "deleted";
+        }>;
+        servingGraceUntil: z.ZodNullable<z.ZodString>;
+        defaultRegion: z.ZodNullable<z.ZodString>;
+        metadata: z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodString>>;
+        providerClient: z.ZodNullable<z.ZodObject<{
+            id: z.ZodString;
+            provider: z.ZodEnum<{
+                wpcloud: "wpcloud";
+                simulated: "simulated";
+            }>;
+            tenantId: z.ZodString;
+            name: z.ZodString;
+            label: z.ZodString;
+            apiBase: z.ZodNullable<z.ZodString>;
+            defaultDatacenter: z.ZodNullable<z.ZodString>;
+            status: z.ZodEnum<{
+                active: "active";
+                disabled: "disabled";
+            }>;
+            tokenHint: z.ZodNullable<z.ZodString>;
+            createdAt: z.ZodString;
+            updatedAt: z.ZodString;
+        }, z.core.$strip>>;
+        teamCount: z.ZodNumber;
+        siteCount: z.ZodNumber;
+        spaceCount: z.ZodNumber;
+        createdAt: z.ZodString;
+        updatedAt: z.ZodString;
+    }, z.core.$strip>;
+    bootstrapKey: z.ZodObject<{
+        id: z.ZodString;
+        name: z.ZodNullable<z.ZodString>;
+        tenantId: z.ZodNullable<z.ZodString>;
+        mode: z.ZodEnum<{
+            live: "live";
+            test: "test";
+        }>;
+        subject: z.ZodNullable<z.ZodObject<{
+            type: z.ZodEnum<{
+                team: "team";
+                external: "external";
+                system: "system";
+                user: "user";
+            }>;
+            id: z.ZodString;
+        }, z.core.$strip>>;
+        ownerPrincipal: z.ZodNullable<z.ZodObject<{
+            type: z.ZodEnum<{
+                team: "team";
+                external: "external";
+            }>;
+            id: z.ZodString;
+        }, z.core.$strip>>;
+        createdByUserId: z.ZodString;
+        preset: z.ZodNullable<z.ZodEnum<{
+            ci_deploy: "ci_deploy";
+            space_publisher: "space_publisher";
+            space_admin: "space_admin";
+            domain_manager: "domain_manager";
+            team_admin: "team_admin";
+            billing_viewer: "billing_viewer";
+            partner_admin: "partner_admin";
+        }>>;
+        teamScope: z.ZodNullable<z.ZodType<import("./device-team-scope.js").DeviceTeamScope, unknown, z.core.$ZodTypeInternals<import("./device-team-scope.js").DeviceTeamScope, unknown>>>;
+        policy: z.ZodNullable<z.ZodObject<{
+            version: z.ZodLiteral<"2026-06-09">;
+            statements: z.ZodArray<z.ZodObject<{
+                effect: z.ZodEnum<{
+                    allow: "allow";
+                    deny: "deny";
+                }>;
+                actions: z.ZodArray<z.ZodEnum<{
+                    "teams:read": "teams:read";
+                    "teams:create": "teams:create";
+                    "spaces:read": "spaces:read";
+                    "spaces:write": "spaces:write";
+                    "spaces:rename": "spaces:rename";
+                    "domains:read": "domains:read";
+                    "spaces:publish": "spaces:publish";
+                    "builds:trigger": "builds:trigger";
+                    "*": "*";
+                    "spaces:create": "spaces:create";
+                    "spaces:delete": "spaces:delete";
+                    "spaces:transfer": "spaces:transfer";
+                    "spaces:export": "spaces:export";
+                    "spaces:import": "spaces:import";
+                    "spaces:policy.write": "spaces:policy.write";
+                    "versions:read": "versions:read";
+                    "versions:promote": "versions:promote";
+                    "versions:delete": "versions:delete";
+                    "versions:download": "versions:download";
+                    "domains:create": "domains:create";
+                    "domains:verify": "domains:verify";
+                    "domains:assign": "domains:assign";
+                    "domains:bind": "domains:bind";
+                    "domains:delete": "domains:delete";
+                    "domains:dns.write": "domains:dns.write";
+                    "domains:dns.credentials.write": "domains:dns.credentials.write";
+                    "domains:purchase": "domains:purchase";
+                    "webhooks:read": "webhooks:read";
+                    "webhooks:write": "webhooks:write";
+                    "builds:read": "builds:read";
+                    "builds:create": "builds:create";
+                    "variables:read": "variables:read";
+                    "variables:write": "variables:write";
+                    "tenants:read": "tenants:read";
+                    "tenants:write": "tenants:write";
+                    "principals:read": "principals:read";
+                    "principals:write": "principals:write";
+                    "infrastructure:read": "infrastructure:read";
+                    "teams:write": "teams:write";
+                    "teams:members.write": "teams:members.write";
+                    "billing:read": "billing:read";
+                    "billing:write": "billing:write";
+                    "tokens:read": "tokens:read";
+                    "tokens:create": "tokens:create";
+                    "tokens:revoke": "tokens:revoke";
+                    "runtime:manage": "runtime:manage";
+                }>>;
+                resources: z.ZodArray<z.ZodString>;
+                conditions: z.ZodOptional<z.ZodObject<{
+                    "request.client": z.ZodOptional<z.ZodEnum<{
+                        api: "api";
+                        dashboard: "dashboard";
+                        cli: "cli";
+                        worker: "worker";
+                    }>>;
+                }, z.core.$strict>>;
+            }, z.core.$strict>>;
+        }, z.core.$strict>>;
+        metadata: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+        secretPreview: z.ZodString;
+        secret: z.ZodOptional<z.ZodString>;
+        notBefore: z.ZodNullable<z.ZodString>;
+        expiresAt: z.ZodNullable<z.ZodString>;
+        ipAllowlist: z.ZodNullable<z.ZodArray<z.ZodString>>;
+        revokedAt: z.ZodNullable<z.ZodString>;
+        enabled: z.ZodBoolean;
+        createdAt: z.ZodString;
+        updatedAt: z.ZodString;
+        lastRequestAt: z.ZodNullable<z.ZodString>;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+export declare const SuperadminTenantPairSchema: z.ZodObject<{
+    live: z.ZodObject<{
+        tenant: z.ZodObject<{
+            id: z.ZodString;
+            kind: z.ZodEnum<{
+                internal: "internal";
+                main: "main";
+                partner: "partner";
+            }>;
+            mode: z.ZodEnum<{
+                live: "live";
+                test: "test";
+            }>;
+            liveTenantId: z.ZodNullable<z.ZodString>;
+            name: z.ZodString;
+            status: z.ZodEnum<{
+                active: "active";
+                past_due: "past_due";
+                suspended: "suspended";
+                deleted: "deleted";
+            }>;
+            servingGraceUntil: z.ZodNullable<z.ZodString>;
+            defaultRegion: z.ZodNullable<z.ZodString>;
+            metadata: z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodString>>;
+            providerClient: z.ZodNullable<z.ZodObject<{
+                id: z.ZodString;
+                provider: z.ZodEnum<{
+                    wpcloud: "wpcloud";
+                    simulated: "simulated";
+                }>;
+                tenantId: z.ZodString;
+                name: z.ZodString;
+                label: z.ZodString;
+                apiBase: z.ZodNullable<z.ZodString>;
+                defaultDatacenter: z.ZodNullable<z.ZodString>;
+                status: z.ZodEnum<{
+                    active: "active";
+                    disabled: "disabled";
+                }>;
+                tokenHint: z.ZodNullable<z.ZodString>;
+                createdAt: z.ZodString;
+                updatedAt: z.ZodString;
+            }, z.core.$strip>>;
+            teamCount: z.ZodNumber;
+            siteCount: z.ZodNumber;
+            spaceCount: z.ZodNumber;
+            createdAt: z.ZodString;
+            updatedAt: z.ZodString;
+        }, z.core.$strip>;
+        bootstrapKey: z.ZodObject<{
+            id: z.ZodString;
+            name: z.ZodNullable<z.ZodString>;
+            tenantId: z.ZodNullable<z.ZodString>;
+            mode: z.ZodEnum<{
+                live: "live";
+                test: "test";
+            }>;
+            subject: z.ZodNullable<z.ZodObject<{
+                type: z.ZodEnum<{
+                    team: "team";
+                    external: "external";
+                    system: "system";
+                    user: "user";
+                }>;
+                id: z.ZodString;
+            }, z.core.$strip>>;
+            ownerPrincipal: z.ZodNullable<z.ZodObject<{
+                type: z.ZodEnum<{
+                    team: "team";
+                    external: "external";
+                }>;
+                id: z.ZodString;
+            }, z.core.$strip>>;
+            createdByUserId: z.ZodString;
+            preset: z.ZodNullable<z.ZodEnum<{
+                ci_deploy: "ci_deploy";
+                space_publisher: "space_publisher";
+                space_admin: "space_admin";
+                domain_manager: "domain_manager";
+                team_admin: "team_admin";
+                billing_viewer: "billing_viewer";
+                partner_admin: "partner_admin";
+            }>>;
+            teamScope: z.ZodNullable<z.ZodType<import("./device-team-scope.js").DeviceTeamScope, unknown, z.core.$ZodTypeInternals<import("./device-team-scope.js").DeviceTeamScope, unknown>>>;
+            policy: z.ZodNullable<z.ZodObject<{
+                version: z.ZodLiteral<"2026-06-09">;
+                statements: z.ZodArray<z.ZodObject<{
+                    effect: z.ZodEnum<{
+                        allow: "allow";
+                        deny: "deny";
+                    }>;
+                    actions: z.ZodArray<z.ZodEnum<{
+                        "teams:read": "teams:read";
+                        "teams:create": "teams:create";
+                        "spaces:read": "spaces:read";
+                        "spaces:write": "spaces:write";
+                        "spaces:rename": "spaces:rename";
+                        "domains:read": "domains:read";
+                        "spaces:publish": "spaces:publish";
+                        "builds:trigger": "builds:trigger";
+                        "*": "*";
+                        "spaces:create": "spaces:create";
+                        "spaces:delete": "spaces:delete";
+                        "spaces:transfer": "spaces:transfer";
+                        "spaces:export": "spaces:export";
+                        "spaces:import": "spaces:import";
+                        "spaces:policy.write": "spaces:policy.write";
+                        "versions:read": "versions:read";
+                        "versions:promote": "versions:promote";
+                        "versions:delete": "versions:delete";
+                        "versions:download": "versions:download";
+                        "domains:create": "domains:create";
+                        "domains:verify": "domains:verify";
+                        "domains:assign": "domains:assign";
+                        "domains:bind": "domains:bind";
+                        "domains:delete": "domains:delete";
+                        "domains:dns.write": "domains:dns.write";
+                        "domains:dns.credentials.write": "domains:dns.credentials.write";
+                        "domains:purchase": "domains:purchase";
+                        "webhooks:read": "webhooks:read";
+                        "webhooks:write": "webhooks:write";
+                        "builds:read": "builds:read";
+                        "builds:create": "builds:create";
+                        "variables:read": "variables:read";
+                        "variables:write": "variables:write";
+                        "tenants:read": "tenants:read";
+                        "tenants:write": "tenants:write";
+                        "principals:read": "principals:read";
+                        "principals:write": "principals:write";
+                        "infrastructure:read": "infrastructure:read";
+                        "teams:write": "teams:write";
+                        "teams:members.write": "teams:members.write";
+                        "billing:read": "billing:read";
+                        "billing:write": "billing:write";
+                        "tokens:read": "tokens:read";
+                        "tokens:create": "tokens:create";
+                        "tokens:revoke": "tokens:revoke";
+                        "runtime:manage": "runtime:manage";
+                    }>>;
+                    resources: z.ZodArray<z.ZodString>;
+                    conditions: z.ZodOptional<z.ZodObject<{
+                        "request.client": z.ZodOptional<z.ZodEnum<{
+                            api: "api";
+                            dashboard: "dashboard";
+                            cli: "cli";
+                            worker: "worker";
+                        }>>;
+                    }, z.core.$strict>>;
+                }, z.core.$strict>>;
+            }, z.core.$strict>>;
+            metadata: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+            secretPreview: z.ZodString;
+            secret: z.ZodOptional<z.ZodString>;
+            notBefore: z.ZodNullable<z.ZodString>;
+            expiresAt: z.ZodNullable<z.ZodString>;
+            ipAllowlist: z.ZodNullable<z.ZodArray<z.ZodString>>;
+            revokedAt: z.ZodNullable<z.ZodString>;
+            enabled: z.ZodBoolean;
+            createdAt: z.ZodString;
+            updatedAt: z.ZodString;
+            lastRequestAt: z.ZodNullable<z.ZodString>;
+        }, z.core.$strip>;
+    }, z.core.$strip>;
+    test: z.ZodObject<{
+        tenant: z.ZodObject<{
+            id: z.ZodString;
+            kind: z.ZodEnum<{
+                internal: "internal";
+                main: "main";
+                partner: "partner";
+            }>;
+            mode: z.ZodEnum<{
+                live: "live";
+                test: "test";
+            }>;
+            liveTenantId: z.ZodNullable<z.ZodString>;
+            name: z.ZodString;
+            status: z.ZodEnum<{
+                active: "active";
+                past_due: "past_due";
+                suspended: "suspended";
+                deleted: "deleted";
+            }>;
+            servingGraceUntil: z.ZodNullable<z.ZodString>;
+            defaultRegion: z.ZodNullable<z.ZodString>;
+            metadata: z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodString>>;
+            providerClient: z.ZodNullable<z.ZodObject<{
+                id: z.ZodString;
+                provider: z.ZodEnum<{
+                    wpcloud: "wpcloud";
+                    simulated: "simulated";
+                }>;
+                tenantId: z.ZodString;
+                name: z.ZodString;
+                label: z.ZodString;
+                apiBase: z.ZodNullable<z.ZodString>;
+                defaultDatacenter: z.ZodNullable<z.ZodString>;
+                status: z.ZodEnum<{
+                    active: "active";
+                    disabled: "disabled";
+                }>;
+                tokenHint: z.ZodNullable<z.ZodString>;
+                createdAt: z.ZodString;
+                updatedAt: z.ZodString;
+            }, z.core.$strip>>;
+            teamCount: z.ZodNumber;
+            siteCount: z.ZodNumber;
+            spaceCount: z.ZodNumber;
+            createdAt: z.ZodString;
+            updatedAt: z.ZodString;
+        }, z.core.$strip>;
+        bootstrapKey: z.ZodObject<{
+            id: z.ZodString;
+            name: z.ZodNullable<z.ZodString>;
+            tenantId: z.ZodNullable<z.ZodString>;
+            mode: z.ZodEnum<{
+                live: "live";
+                test: "test";
+            }>;
+            subject: z.ZodNullable<z.ZodObject<{
+                type: z.ZodEnum<{
+                    team: "team";
+                    external: "external";
+                    system: "system";
+                    user: "user";
+                }>;
+                id: z.ZodString;
+            }, z.core.$strip>>;
+            ownerPrincipal: z.ZodNullable<z.ZodObject<{
+                type: z.ZodEnum<{
+                    team: "team";
+                    external: "external";
+                }>;
+                id: z.ZodString;
+            }, z.core.$strip>>;
+            createdByUserId: z.ZodString;
+            preset: z.ZodNullable<z.ZodEnum<{
+                ci_deploy: "ci_deploy";
+                space_publisher: "space_publisher";
+                space_admin: "space_admin";
+                domain_manager: "domain_manager";
+                team_admin: "team_admin";
+                billing_viewer: "billing_viewer";
+                partner_admin: "partner_admin";
+            }>>;
+            teamScope: z.ZodNullable<z.ZodType<import("./device-team-scope.js").DeviceTeamScope, unknown, z.core.$ZodTypeInternals<import("./device-team-scope.js").DeviceTeamScope, unknown>>>;
+            policy: z.ZodNullable<z.ZodObject<{
+                version: z.ZodLiteral<"2026-06-09">;
+                statements: z.ZodArray<z.ZodObject<{
+                    effect: z.ZodEnum<{
+                        allow: "allow";
+                        deny: "deny";
+                    }>;
+                    actions: z.ZodArray<z.ZodEnum<{
+                        "teams:read": "teams:read";
+                        "teams:create": "teams:create";
+                        "spaces:read": "spaces:read";
+                        "spaces:write": "spaces:write";
+                        "spaces:rename": "spaces:rename";
+                        "domains:read": "domains:read";
+                        "spaces:publish": "spaces:publish";
+                        "builds:trigger": "builds:trigger";
+                        "*": "*";
+                        "spaces:create": "spaces:create";
+                        "spaces:delete": "spaces:delete";
+                        "spaces:transfer": "spaces:transfer";
+                        "spaces:export": "spaces:export";
+                        "spaces:import": "spaces:import";
+                        "spaces:policy.write": "spaces:policy.write";
+                        "versions:read": "versions:read";
+                        "versions:promote": "versions:promote";
+                        "versions:delete": "versions:delete";
+                        "versions:download": "versions:download";
+                        "domains:create": "domains:create";
+                        "domains:verify": "domains:verify";
+                        "domains:assign": "domains:assign";
+                        "domains:bind": "domains:bind";
+                        "domains:delete": "domains:delete";
+                        "domains:dns.write": "domains:dns.write";
+                        "domains:dns.credentials.write": "domains:dns.credentials.write";
+                        "domains:purchase": "domains:purchase";
+                        "webhooks:read": "webhooks:read";
+                        "webhooks:write": "webhooks:write";
+                        "builds:read": "builds:read";
+                        "builds:create": "builds:create";
+                        "variables:read": "variables:read";
+                        "variables:write": "variables:write";
+                        "tenants:read": "tenants:read";
+                        "tenants:write": "tenants:write";
+                        "principals:read": "principals:read";
+                        "principals:write": "principals:write";
+                        "infrastructure:read": "infrastructure:read";
+                        "teams:write": "teams:write";
+                        "teams:members.write": "teams:members.write";
+                        "billing:read": "billing:read";
+                        "billing:write": "billing:write";
+                        "tokens:read": "tokens:read";
+                        "tokens:create": "tokens:create";
+                        "tokens:revoke": "tokens:revoke";
+                        "runtime:manage": "runtime:manage";
+                    }>>;
+                    resources: z.ZodArray<z.ZodString>;
+                    conditions: z.ZodOptional<z.ZodObject<{
+                        "request.client": z.ZodOptional<z.ZodEnum<{
+                            api: "api";
+                            dashboard: "dashboard";
+                            cli: "cli";
+                            worker: "worker";
+                        }>>;
+                    }, z.core.$strict>>;
+                }, z.core.$strict>>;
+            }, z.core.$strict>>;
+            metadata: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+            secretPreview: z.ZodString;
+            secret: z.ZodOptional<z.ZodString>;
+            notBefore: z.ZodNullable<z.ZodString>;
+            expiresAt: z.ZodNullable<z.ZodString>;
+            ipAllowlist: z.ZodNullable<z.ZodArray<z.ZodString>>;
+            revokedAt: z.ZodNullable<z.ZodString>;
+            enabled: z.ZodBoolean;
+            createdAt: z.ZodString;
+            updatedAt: z.ZodString;
+            lastRequestAt: z.ZodNullable<z.ZodString>;
+        }, z.core.$strip>;
+    }, z.core.$strip>;
+}, z.core.$strip>;
 export type SuperadminTenant = z.infer<typeof SuperadminTenantSchema>;
 export type SuperadminProviderClient = z.infer<typeof SuperadminProviderClientSchema>;