@sylphx/contract 0.2.0

package/dist/endpoints/challenge.js

@@ -0,0 +1,52 @@
+/**
+ * Challenge endpoints — Console-plane step-up authentication. Production
+ * mounts at `/challenge/*` (see `apps/api/src/server/platform/app.ts`).
+ * Mirrors `apps/api/src/server/platform/routes/challenge.ts`.
+ */
+import { defineEndpoint } from '../endpoint.js';
+import { ChallengeRequiredQuery, ChallengeRequiredResult, ChallengeStatusResult, SendChallengeCodeResult, VerifyChallengeResult, VerifyIdentityInput, VerifyMfaInput, } from '../schemas/challenge.js';
+export const challengeEndpoints = {
+    required: defineEndpoint({
+        method: 'GET',
+        path: '/challenge/required',
+        query: ChallengeRequiredQuery,
+        response: ChallengeRequiredResult,
+        plane: 'management',
+        summary: 'Check if step-up authentication is required for an operation',
+        tags: ['challenge'],
+    }),
+    sendCode: defineEndpoint({
+        method: 'POST',
+        path: '/challenge/send-code',
+        response: SendChallengeCodeResult,
+        plane: 'management',
+        summary: 'Send a 6-digit email verification code for identity verification',
+        tags: ['challenge'],
+    }),
+    verifyIdentity: defineEndpoint({
+        method: 'POST',
+        path: '/challenge/verify-identity',
+        body: VerifyIdentityInput,
+        response: VerifyChallengeResult,
+        plane: 'management',
+        summary: 'Verify identity with password or email verification code',
+        tags: ['challenge'],
+    }),
+    verifyMfa: defineEndpoint({
+        method: 'POST',
+        path: '/challenge/verify-mfa',
+        body: VerifyMfaInput,
+        response: VerifyChallengeResult,
+        plane: 'management',
+        summary: 'Verify MFA with TOTP authenticator or backup code',
+        tags: ['challenge'],
+    }),
+    status: defineEndpoint({
+        method: 'GET',
+        path: '/challenge/status',
+        response: ChallengeStatusResult,
+        plane: 'management',
+        summary: 'Get the current identity and MFA verification status',
+        tags: ['challenge'],
+    }),
+};

package/dist/endpoints/ci-settings.d.ts

@@ -0,0 +1,89 @@
+/**
+ * CI Settings endpoints — Console-plane runner configuration.
+ * Mirrors `apps/api/src/server/platform/routes/ci-settings.ts`.
+ *
+ * Production mount: `/ci-settings/*`.
+ */
+export declare const ciSettingsEndpoints: {
+    readonly getOrgSettings: import("../endpoint.js").Endpoint<"GET", "/ci-settings", import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Struct<{
+        id: import("effect/Schema").optional<typeof import("effect/Schema").String>;
+        isDefault: typeof import("effect/Schema").Boolean;
+        runnerCpu: typeof import("effect/Schema").String;
+        runnerMemory: typeof import("effect/Schema").String;
+        maxConcurrentRunners: typeof import("effect/Schema").Number;
+    }>>;
+    readonly upsertOrgSettings: import("../endpoint.js").Endpoint<"PUT", "/ci-settings", import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Struct<{
+        runnerCpu: typeof import("effect/Schema").String;
+        runnerMemory: typeof import("effect/Schema").String;
+        maxConcurrentRunners: typeof import("effect/Schema").Number;
+    }>, import("effect/Schema").Struct<{
+        id: import("effect/Schema").optional<typeof import("effect/Schema").String>;
+        isDefault: typeof import("effect/Schema").Boolean;
+        runnerCpu: typeof import("effect/Schema").String;
+        runnerMemory: typeof import("effect/Schema").String;
+        maxConcurrentRunners: typeof import("effect/Schema").Number;
+    }>>;
+    readonly listRepoOverrides: import("../endpoint.js").Endpoint<"GET", "/ci-settings/repos", import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Struct<{
+        repos: import("effect/Schema").Array$<import("effect/Schema").Struct<{
+            id: typeof import("effect/Schema").String;
+            repo: typeof import("effect/Schema").String;
+            runnerCpu: import("effect/Schema").NullOr<typeof import("effect/Schema").String>;
+            runnerMemory: import("effect/Schema").NullOr<typeof import("effect/Schema").String>;
+            maxConcurrentRunners: import("effect/Schema").NullOr<typeof import("effect/Schema").Number>;
+            createdAt: typeof import("effect/Schema").String;
+            updatedAt: typeof import("effect/Schema").String;
+        }>>;
+    }>>;
+    readonly upsertRepoOverride: import("../endpoint.js").Endpoint<"POST", "/ci-settings/repos", import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Struct<{
+        repo: typeof import("effect/Schema").String;
+        runnerCpu: import("effect/Schema").NullOr<typeof import("effect/Schema").String>;
+        runnerMemory: import("effect/Schema").NullOr<typeof import("effect/Schema").String>;
+        maxConcurrentRunners: import("effect/Schema").NullOr<typeof import("effect/Schema").Number>;
+    }>, import("effect/Schema").Struct<{
+        id: typeof import("effect/Schema").String;
+        repo: typeof import("effect/Schema").String;
+        runnerCpu: import("effect/Schema").NullOr<typeof import("effect/Schema").String>;
+        runnerMemory: import("effect/Schema").NullOr<typeof import("effect/Schema").String>;
+        maxConcurrentRunners: import("effect/Schema").NullOr<typeof import("effect/Schema").Number>;
+        createdAt: typeof import("effect/Schema").String;
+        updatedAt: typeof import("effect/Schema").String;
+    }>>;
+    readonly deleteRepoOverride: import("../endpoint.js").Endpoint<"DELETE", "/ci-settings/repos/:repo", import("effect/Schema").Struct<{
+        repo: typeof import("effect/Schema").String;
+    }>, import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Struct<{
+        success: typeof import("effect/Schema").Boolean;
+    }>>;
+    readonly listInstallations: import("../endpoint.js").Endpoint<"GET", "/ci-settings/installations", import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Struct<{
+        installations: import("effect/Schema").Array$<import("effect/Schema").Struct<{
+            id: typeof import("effect/Schema").String;
+            installationId: typeof import("effect/Schema").Number;
+            org: typeof import("effect/Schema").String;
+            avatarUrl: import("effect/Schema").NullOr<typeof import("effect/Schema").String>;
+            status: import("effect/Schema").Literal<["active", "suspended", "inactive"]>;
+            installedAt: typeof import("effect/Schema").String;
+            repoCount: import("effect/Schema").NullOr<typeof import("effect/Schema").Number>;
+        }>>;
+    }>>;
+    readonly getUsage: import("../endpoint.js").Endpoint<"GET", "/ci-settings/usage", import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Struct<{
+        currentMonth: import("effect/Schema").Struct<{
+            used: typeof import("effect/Schema").Number;
+            included: typeof import("effect/Schema").Number;
+            overage: typeof import("effect/Schema").Number;
+            overageCost: typeof import("effect/Schema").Number;
+        }>;
+        byOrg: import("effect/Schema").Array$<import("effect/Schema").Struct<{
+            name: typeof import("effect/Schema").String;
+            minutes: typeof import("effect/Schema").Number;
+        }>>;
+        byRepo: import("effect/Schema").Array$<import("effect/Schema").Struct<{
+            name: typeof import("effect/Schema").String;
+            minutes: typeof import("effect/Schema").Number;
+        }>>;
+    }>>;
+    readonly disconnectInstallation: import("../endpoint.js").Endpoint<"POST", "/ci-settings/installations/:installationId/disconnect", import("effect/Schema").Struct<{
+        installationId: typeof import("effect/Schema").String;
+    }>, import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Struct<{
+        success: typeof import("effect/Schema").Boolean;
+    }>>;
+};
+//# sourceMappingURL=ci-settings.d.ts.map

package/dist/endpoints/ci-settings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ci-settings.d.ts","sourceRoot":"","sources":["../../src/endpoints/ci-settings.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAiBH,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAqEtB,CAAA"}

package/dist/endpoints/ci-settings.js

@@ -0,0 +1,78 @@
+/**
+ * CI Settings endpoints — Console-plane runner configuration.
+ * Mirrors `apps/api/src/server/platform/routes/ci-settings.ts`.
+ *
+ * Production mount: `/ci-settings/*`.
+ */
+import { defineEndpoint } from '../endpoint.js';
+import { CiDisconnectInstallationResult, CiInstallationIdParams, CiRepoSlugParams, CiSettingsResult, CiUsageResult, DeleteCiRepoOverrideResult, ListCiInstallationsResult, ListCiRepoOverridesResult, UpsertCiRepoOverrideInput, UpsertCiRepoOverrideResult, UpsertCiSettingsInput, } from '../schemas/ci-settings.js';
+export const ciSettingsEndpoints = {
+    getOrgSettings: defineEndpoint({
+        method: 'GET',
+        path: '/ci-settings',
+        response: CiSettingsResult,
+        plane: 'management',
+        summary: 'Get org CI runner settings (or defaults)',
+        tags: ['ci-settings'],
+    }),
+    upsertOrgSettings: defineEndpoint({
+        method: 'PUT',
+        path: '/ci-settings',
+        body: UpsertCiSettingsInput,
+        response: CiSettingsResult,
+        plane: 'management',
+        summary: 'Upsert org CI runner settings',
+        tags: ['ci-settings'],
+    }),
+    listRepoOverrides: defineEndpoint({
+        method: 'GET',
+        path: '/ci-settings/repos',
+        response: ListCiRepoOverridesResult,
+        plane: 'management',
+        summary: 'List repo-level CI overrides for the org',
+        tags: ['ci-settings'],
+    }),
+    upsertRepoOverride: defineEndpoint({
+        method: 'POST',
+        path: '/ci-settings/repos',
+        body: UpsertCiRepoOverrideInput,
+        response: UpsertCiRepoOverrideResult,
+        plane: 'management',
+        summary: 'Upsert a repo-level CI override',
+        tags: ['ci-settings'],
+    }),
+    deleteRepoOverride: defineEndpoint({
+        method: 'DELETE',
+        path: '/ci-settings/repos/:repo',
+        params: CiRepoSlugParams,
+        response: DeleteCiRepoOverrideResult,
+        plane: 'management',
+        summary: 'Delete a repo CI override',
+        tags: ['ci-settings'],
+    }),
+    listInstallations: defineEndpoint({
+        method: 'GET',
+        path: '/ci-settings/installations',
+        response: ListCiInstallationsResult,
+        plane: 'management',
+        summary: 'List connected GitHub App installations',
+        tags: ['ci-settings'],
+    }),
+    getUsage: defineEndpoint({
+        method: 'GET',
+        path: '/ci-settings/usage',
+        response: CiUsageResult,
+        plane: 'management',
+        summary: 'Get CI build minute usage for the current billing period',
+        tags: ['ci-settings'],
+    }),
+    disconnectInstallation: defineEndpoint({
+        method: 'POST',
+        path: '/ci-settings/installations/:installationId/disconnect',
+        params: CiInstallationIdParams,
+        response: CiDisconnectInstallationResult,
+        plane: 'management',
+        summary: 'Disconnect a GitHub App installation from the org',
+        tags: ['ci-settings'],
+    }),
+};

package/dist/endpoints/consent-admin.d.ts

@@ -0,0 +1,134 @@
+/**
+ * Consent Admin endpoints — Console-plane consent type catalogue + history +
+ * stats. Mirrors `apps/api/src/server/platform/routes/consent.ts`.
+ *
+ * Production mount: `/consent/*` (see `apps/api/src/server/platform/app.ts`).
+ * Project-scoped reads (`list`, `history`, `stats`) accept a project ID or
+ * slug via `{id}`; mutations (`update`, `delete`) carry the project via
+ * `?projectId=` because the consent type is addressed by its own ID.
+ */
+import { Schema } from 'effect';
+export declare const consentAdminEndpoints: {
+    readonly listConsentTypes: import("../endpoint.js").Endpoint<"GET", "/consent/projects/:id/consent-types", Schema.Struct<{
+        id: typeof Schema.String;
+    }>, Schema.Schema.AnyNoContext | undefined, Schema.Schema.AnyNoContext | undefined, Schema.Struct<{
+        consentTypes: Schema.Array$<Schema.Struct<{
+            id: typeof Schema.String;
+            slug: typeof Schema.String;
+            category: Schema.Literal<["necessary", "analytics", "marketing", "preferences", "functional"]>;
+            name: typeof Schema.String;
+            description: typeof Schema.String;
+            required: typeof Schema.Boolean;
+            defaultEnabled: typeof Schema.Boolean;
+            sortOrder: typeof Schema.Number;
+            isActive: typeof Schema.Boolean;
+            createdAt: typeof Schema.String;
+            updatedAt: typeof Schema.String;
+        }>>;
+        total: typeof Schema.Number;
+    }>>;
+    readonly createConsentType: import("../endpoint.js").Endpoint<"POST", "/consent/consent-types", Schema.Schema.AnyNoContext | undefined, Schema.Schema.AnyNoContext | undefined, Schema.Struct<{
+        projectId: typeof Schema.String;
+        category: Schema.Literal<["necessary", "analytics", "marketing", "preferences", "functional"]>;
+        slug: typeof Schema.String;
+        name: typeof Schema.String;
+        description: typeof Schema.String;
+        required: Schema.optional<typeof Schema.Boolean>;
+        defaultEnabled: Schema.optional<typeof Schema.Boolean>;
+        sortOrder: Schema.optional<typeof Schema.Number>;
+    }>, Schema.Struct<{
+        id: typeof Schema.String;
+        slug: typeof Schema.String;
+        category: Schema.Literal<["necessary", "analytics", "marketing", "preferences", "functional"]>;
+        name: typeof Schema.String;
+        description: typeof Schema.String;
+        required: typeof Schema.Boolean;
+        defaultEnabled: typeof Schema.Boolean;
+        sortOrder: typeof Schema.Number;
+        isActive: typeof Schema.Boolean;
+        createdAt: typeof Schema.String;
+        updatedAt: typeof Schema.String;
+    }>>;
+    readonly updateConsentType: import("../endpoint.js").Endpoint<"PATCH", "/consent/consent-types/:consentTypeId", Schema.Struct<{
+        consentTypeId: typeof Schema.String;
+    }>, Schema.Struct<{
+        projectId: typeof Schema.String;
+    }>, Schema.Struct<{
+        category: Schema.optional<Schema.Literal<["necessary", "analytics", "marketing", "preferences", "functional"]>>;
+        slug: Schema.optional<typeof Schema.String>;
+        name: Schema.optional<typeof Schema.String>;
+        description: Schema.optional<typeof Schema.String>;
+        required: Schema.optional<typeof Schema.Boolean>;
+        defaultEnabled: Schema.optional<typeof Schema.Boolean>;
+        sortOrder: Schema.optional<typeof Schema.Number>;
+        isActive: Schema.optional<typeof Schema.Boolean>;
+    }>, Schema.Struct<{
+        id: typeof Schema.String;
+        slug: typeof Schema.String;
+        category: Schema.Literal<["necessary", "analytics", "marketing", "preferences", "functional"]>;
+        name: typeof Schema.String;
+        description: typeof Schema.String;
+        required: typeof Schema.Boolean;
+        defaultEnabled: typeof Schema.Boolean;
+        sortOrder: typeof Schema.Number;
+        isActive: typeof Schema.Boolean;
+        createdAt: typeof Schema.String;
+        updatedAt: typeof Schema.String;
+    }>>;
+    readonly deleteConsentType: import("../endpoint.js").Endpoint<"DELETE", "/consent/consent-types/:consentTypeId", Schema.Struct<{
+        consentTypeId: typeof Schema.String;
+    }>, Schema.Struct<{
+        projectId: typeof Schema.String;
+    }>, Schema.Schema.AnyNoContext | undefined, Schema.Struct<{
+        success: typeof Schema.Boolean;
+    }>>;
+    readonly bulkDeleteConsentTypes: import("../endpoint.js").Endpoint<"POST", "/consent/consent-types/bulk-delete", Schema.Schema.AnyNoContext | undefined, Schema.Schema.AnyNoContext | undefined, Schema.Struct<{
+        projectId: typeof Schema.String;
+        consentTypeIds: Schema.Array$<typeof Schema.String>;
+    }>, Schema.Struct<{
+        deleted: typeof Schema.Number;
+        errors: Schema.optional<Schema.Array$<Schema.Struct<{
+            id: typeof Schema.String;
+            error: typeof Schema.String;
+        }>>>;
+    }>>;
+    readonly getConsentHistory: import("../endpoint.js").Endpoint<"GET", "/consent/projects/:id/consent-history", Schema.Struct<{
+        id: typeof Schema.String;
+    }>, Schema.Struct<{
+        userId: Schema.optional<typeof Schema.String>;
+        limit: Schema.optional<typeof Schema.String>;
+        offset: Schema.optional<typeof Schema.String>;
+    }>, Schema.Schema.AnyNoContext | undefined, Schema.Struct<{
+        history: Schema.Array$<Schema.Struct<{
+            id: typeof Schema.String;
+            userId: Schema.NullOr<typeof Schema.String>;
+            anonymousId: Schema.NullOr<typeof Schema.String>;
+            consentType: Schema.Struct<{
+                slug: typeof Schema.String;
+                name: typeof Schema.String;
+                category: Schema.Literal<["necessary", "analytics", "marketing", "preferences", "functional"]>;
+            }>;
+            previousGranted: Schema.NullOr<typeof Schema.Boolean>;
+            newGranted: typeof Schema.Boolean;
+            source: typeof Schema.String;
+            reason: Schema.NullOr<typeof Schema.String>;
+            version: Schema.NullOr<typeof Schema.Number>;
+            createdAt: typeof Schema.String;
+        }>>;
+        total: Schema.optional<typeof Schema.Number>;
+    }>>;
+    readonly getConsentStats: import("../endpoint.js").Endpoint<"GET", "/consent/projects/:id/consent-stats", Schema.Struct<{
+        id: typeof Schema.String;
+    }>, Schema.Schema.AnyNoContext | undefined, Schema.Schema.AnyNoContext | undefined, Schema.Struct<{
+        stats: Schema.Array$<Schema.Struct<{
+            category: Schema.Literal<["necessary", "analytics", "marketing", "preferences", "functional"]>;
+            slug: typeof Schema.String;
+            name: typeof Schema.String;
+            totalConsents: typeof Schema.Number;
+            granted: typeof Schema.Number;
+            denied: typeof Schema.Number;
+            grantRate: typeof Schema.String;
+        }>>;
+    }>>;
+};
+//# sourceMappingURL=consent-admin.d.ts.map

package/dist/endpoints/consent-admin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"consent-admin.d.ts","sourceRoot":"","sources":["../../src/endpoints/consent-admin.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAmB/B,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAoExB,CAAA"}

package/dist/endpoints/consent-admin.js

@@ -0,0 +1,83 @@
+/**
+ * Consent Admin endpoints — Console-plane consent type catalogue + history +
+ * stats. Mirrors `apps/api/src/server/platform/routes/consent.ts`.
+ *
+ * Production mount: `/consent/*` (see `apps/api/src/server/platform/app.ts`).
+ * Project-scoped reads (`list`, `history`, `stats`) accept a project ID or
+ * slug via `{id}`; mutations (`update`, `delete`) carry the project via
+ * `?projectId=` because the consent type is addressed by its own ID.
+ */
+import { Schema } from 'effect';
+import { defineEndpoint } from '../endpoint.js';
+import { BulkDeleteConsentTypesInput, BulkDeleteConsentTypesResult, ConsentHistoryQuery, ConsentType, ConsentTypeProjectQuery, CreateConsentTypeInput, DeleteConsentTypeResult, GetConsentHistoryResult, GetConsentStatsResult, ListConsentTypesResult, UpdateConsentTypeInput, } from '../schemas/consent-admin.js';
+const ProjectPath = Schema.Struct({ id: Schema.String });
+const ConsentTypePath = Schema.Struct({ consentTypeId: Schema.String });
+export const consentAdminEndpoints = {
+    listConsentTypes: defineEndpoint({
+        method: 'GET',
+        path: '/consent/projects/:id/consent-types',
+        params: ProjectPath,
+        response: ListConsentTypesResult,
+        plane: 'management',
+        summary: 'List consent types for a project',
+        tags: ['consent-admin'],
+    }),
+    createConsentType: defineEndpoint({
+        method: 'POST',
+        path: '/consent/consent-types',
+        body: CreateConsentTypeInput,
+        response: ConsentType,
+        plane: 'management',
+        summary: 'Create a new consent type for a project',
+        tags: ['consent-admin'],
+    }),
+    updateConsentType: defineEndpoint({
+        method: 'PATCH',
+        path: '/consent/consent-types/:consentTypeId',
+        params: ConsentTypePath,
+        query: ConsentTypeProjectQuery,
+        body: UpdateConsentTypeInput,
+        response: ConsentType,
+        plane: 'management',
+        summary: 'Update an existing consent type (scoped by ?projectId=)',
+        tags: ['consent-admin'],
+    }),
+    deleteConsentType: defineEndpoint({
+        method: 'DELETE',
+        path: '/consent/consent-types/:consentTypeId',
+        params: ConsentTypePath,
+        query: ConsentTypeProjectQuery,
+        response: DeleteConsentTypeResult,
+        plane: 'management',
+        summary: 'Soft delete a consent type (scoped by ?projectId=)',
+        tags: ['consent-admin'],
+    }),
+    bulkDeleteConsentTypes: defineEndpoint({
+        method: 'POST',
+        path: '/consent/consent-types/bulk-delete',
+        body: BulkDeleteConsentTypesInput,
+        response: BulkDeleteConsentTypesResult,
+        plane: 'management',
+        summary: 'Soft delete up to 50 consent types in one call',
+        tags: ['consent-admin'],
+    }),
+    getConsentHistory: defineEndpoint({
+        method: 'GET',
+        path: '/consent/projects/:id/consent-history',
+        params: ProjectPath,
+        query: ConsentHistoryQuery,
+        response: GetConsentHistoryResult,
+        plane: 'management',
+        summary: 'Get consent change history for compliance auditing',
+        tags: ['consent-admin'],
+    }),
+    getConsentStats: defineEndpoint({
+        method: 'GET',
+        path: '/consent/projects/:id/consent-stats',
+        params: ProjectPath,
+        response: GetConsentStatsResult,
+        plane: 'management',
+        summary: 'Get aggregated grant/deny rates by consent type',
+        tags: ['consent-admin'],
+    }),
+};