@sylphx/contract 0.2.0

package/dist/schemas/resources.js

@@ -0,0 +1,220 @@
+/**
+ * Resources — Console-plane, org-scoped platform resource schemas.
+ * Covers database, kv, blob, volume, search resources and their bindings
+ * to project environments. Mirrors
+ * `apps/api/src/server/platform/routes/resources/**` wire shapes.
+ *
+ * Plane: `management`. Tier is IMMUTABLE after creation — update inputs
+ * never accept `tier`.
+ */
+import { Schema } from 'effect';
+// ── Enums ──────────────────────────────────────────────────────────────────
+export const ResourceTier = Schema.Literal('standard');
+export const ResourceType = Schema.Literal('database', 'kv', 'blob', 'volume', 'search');
+export const VolumeStatus = Schema.Literal('provisioning', 'active', 'error');
+/**
+ * Volume access mode — immutable after creation.
+ * - ReadWriteOnce: single-node mount (rook-ceph-block, default)
+ * - ReadWriteMany: concurrent multi-pod mount (rook-cephfs, for shared
+ *   caches / parallel workers)
+ */
+export const VolumeAccessMode = Schema.Literal('ReadWriteOnce', 'ReadWriteMany');
+export const BindingRole = Schema.Literal('primary', 'replica', 'analytics', 'backup');
+// ── Tier Badge (display) ───────────────────────────────────────────────────
+export const TierBadge = Schema.Struct({
+    tier: ResourceTier,
+    label: Schema.String,
+    icon: Schema.String,
+});
+// ── Params ─────────────────────────────────────────────────────────────────
+export const ResourcesOrgSlugParams = Schema.Struct({ orgSlug: Schema.String });
+export const ResourcesResourceIdParams = Schema.Struct({ resourceId: Schema.String });
+// ── Database Resource ──────────────────────────────────────────────────────
+export const DatabaseResource = Schema.Struct({
+    id: Schema.String,
+    orgId: Schema.String,
+    name: Schema.String,
+    provider: Schema.String,
+    tier: ResourceTier,
+    /** Plaintext metadata — safe to return (not secret) */
+    host: Schema.NullOr(Schema.String),
+    port: Schema.NullOr(Schema.Number),
+    dbUser: Schema.NullOr(Schema.String),
+    dbName: Schema.NullOr(Schema.String),
+    clusterName: Schema.NullOr(Schema.String),
+    branchName: Schema.NullOr(Schema.String),
+    bindingCount: Schema.Number,
+    createdAt: Schema.String,
+    updatedAt: Schema.String,
+});
+export const CreateDatabaseResourceInput = Schema.Struct({
+    name: Schema.String,
+    provider: Schema.optional(Schema.String),
+    tier: Schema.optional(ResourceTier),
+    /**
+     * BYOD (bring your own database): if provided, skips auto-provisioning
+     * and stores this encrypted connection string directly.
+     */
+    connectionStringEncrypted: Schema.optional(Schema.String),
+    clusterName: Schema.optional(Schema.String),
+    branchName: Schema.optional(Schema.String),
+});
+export const UpdateDatabaseResourceInput = Schema.Struct({
+    name: Schema.optional(Schema.String),
+    provider: Schema.optional(Schema.String),
+    connectionStringEncrypted: Schema.optional(Schema.String),
+    clusterName: Schema.optional(Schema.String),
+    branchName: Schema.optional(Schema.String),
+});
+export const ListDatabaseResourcesResult = Schema.Struct({
+    resources: Schema.Array(DatabaseResource),
+});
+// ── KV Resource ────────────────────────────────────────────────────────────
+export const KvResource = Schema.Struct({
+    id: Schema.String,
+    orgId: Schema.String,
+    name: Schema.String,
+    provider: Schema.String,
+    host: Schema.String,
+    port: Schema.Number,
+    /** Plaintext metadata — safe to return */
+    cacheUser: Schema.NullOr(Schema.String),
+    keyPrefix: Schema.NullOr(Schema.String),
+    bindingCount: Schema.Number,
+    createdAt: Schema.String,
+    updatedAt: Schema.String,
+});
+export const CreateKvResourceInput = Schema.Struct({
+    name: Schema.String,
+    provider: Schema.optional(Schema.String),
+    host: Schema.optional(Schema.String),
+    port: Schema.optional(Schema.Number),
+    passwordEncrypted: Schema.optional(Schema.String),
+});
+export const UpdateKvResourceInput = Schema.Struct({
+    name: Schema.optional(Schema.String),
+    provider: Schema.optional(Schema.String),
+    host: Schema.optional(Schema.String),
+    port: Schema.optional(Schema.Number),
+    passwordEncrypted: Schema.optional(Schema.String),
+});
+export const ListKvResourcesResult = Schema.Struct({
+    resources: Schema.Array(KvResource),
+});
+// ── Blob (Storage) Resource ────────────────────────────────────────────────
+export const BlobResource = Schema.Struct({
+    id: Schema.String,
+    orgId: Schema.String,
+    name: Schema.String,
+    provider: Schema.String,
+    bucket: Schema.String,
+    endpoint: Schema.NullOr(Schema.String),
+    region: Schema.NullOr(Schema.String),
+    /** Plaintext metadata — safe to return */
+    prefix: Schema.NullOr(Schema.String),
+    publicUrl: Schema.NullOr(Schema.String),
+    bindingCount: Schema.Number,
+    createdAt: Schema.String,
+    updatedAt: Schema.String,
+});
+export const CreateBlobResourceInput = Schema.Struct({
+    name: Schema.String,
+    provider: Schema.optional(Schema.String),
+    bucket: Schema.optional(Schema.String),
+    endpoint: Schema.optional(Schema.String),
+    region: Schema.optional(Schema.String),
+    accessKeyEncrypted: Schema.optional(Schema.String),
+    secretKeyEncrypted: Schema.optional(Schema.String),
+});
+export const UpdateBlobResourceInput = Schema.Struct({
+    name: Schema.optional(Schema.String),
+    provider: Schema.optional(Schema.String),
+    bucket: Schema.optional(Schema.String),
+    endpoint: Schema.optional(Schema.String),
+    region: Schema.optional(Schema.String),
+    accessKeyEncrypted: Schema.optional(Schema.String),
+    secretKeyEncrypted: Schema.optional(Schema.String),
+});
+export const ListBlobResourcesResult = Schema.Struct({
+    resources: Schema.Array(BlobResource),
+});
+// ── Volume Resource ────────────────────────────────────────────────────────
+export const VolumeResource = Schema.Struct({
+    id: Schema.String,
+    orgId: Schema.String,
+    name: Schema.String,
+    tier: ResourceTier,
+    accessMode: VolumeAccessMode,
+    /** Plaintext metadata — safe to return */
+    hostPath: Schema.NullOr(Schema.String),
+    mountPath: Schema.NullOr(Schema.String),
+    sizeGb: Schema.NullOr(Schema.Number),
+    status: VolumeStatus,
+    bindingCount: Schema.Number,
+    createdAt: Schema.String,
+    updatedAt: Schema.String,
+});
+export const CreateVolumeResourceInput = Schema.Struct({
+    name: Schema.String,
+    tier: ResourceTier,
+    accessMode: Schema.optional(VolumeAccessMode),
+    hostPath: Schema.optional(Schema.String),
+    mountPath: Schema.optional(Schema.String),
+    sizeGb: Schema.optional(Schema.Number),
+});
+export const UpdateVolumeResourceInput = Schema.Struct({
+    name: Schema.optional(Schema.String),
+    hostPath: Schema.optional(Schema.String),
+    mountPath: Schema.optional(Schema.String),
+    sizeGb: Schema.optional(Schema.Number),
+});
+export const ListVolumeResourcesResult = Schema.Struct({
+    resources: Schema.Array(VolumeResource),
+});
+// ── Resource Binding ───────────────────────────────────────────────────────
+export const ResourceBinding = Schema.Struct({
+    id: Schema.String,
+    projectEnvironmentId: Schema.String,
+    resourceType: ResourceType,
+    resourceId: Schema.String,
+    role: BindingRole,
+    createdAt: Schema.String,
+    // Denormalized for display
+    envName: Schema.String,
+    projectName: Schema.String,
+    projectSlug: Schema.String,
+});
+export const CreateResourceBindingInput = Schema.Struct({
+    projectEnvironmentId: Schema.String,
+    role: Schema.optional(BindingRole),
+});
+export const ListResourceBindingsResult = Schema.Struct({
+    bindings: Schema.Array(ResourceBinding),
+});
+// ── Search Resource ────────────────────────────────────────────────────────
+export const SearchResource = Schema.Struct({
+    id: Schema.String,
+    orgId: Schema.String,
+    name: Schema.String,
+    provider: Schema.String,
+    storageGb: Schema.Number,
+    memoryGb: Schema.Number,
+    nodes: Schema.Number,
+    host: Schema.NullOr(Schema.String),
+    port: Schema.Number,
+    publicPort: Schema.NullOr(Schema.Number),
+    reconcileStatus: Schema.String,
+    bindingCount: Schema.Number,
+    createdAt: Schema.String,
+    updatedAt: Schema.String,
+});
+export const SearchResourceWithApiKey = Schema.extend(SearchResource, Schema.Struct({ apiKey: Schema.NullOr(Schema.String) }));
+export const CreateSearchResourceInput = Schema.Struct({
+    name: Schema.String,
+    storageGb: Schema.optional(Schema.Number),
+    memoryGb: Schema.optional(Schema.Number),
+    nodes: Schema.optional(Schema.Number),
+});
+export const ListSearchResourcesResult = Schema.Struct({
+    resources: Schema.Array(SearchResource),
+});

package/dist/schemas/runners.d.ts

@@ -0,0 +1,93 @@
+/**
+ * Runners — schemas for self-hosted CI runner CRUD.
+ * Mirrors `routes/runners.ts`.
+ *
+ * Plane: `management`.
+ */
+import { Schema } from 'effect';
+export declare const RunnerPlatform: Schema.Literal<["linux", "macos", "windows"]>;
+export type RunnerPlatform = typeof RunnerPlatform.Type;
+export declare const RunnerArch: Schema.Literal<["x64", "arm64"]>;
+export type RunnerArch = typeof RunnerArch.Type;
+export declare const Runner: Schema.Struct<{
+    id: typeof Schema.String;
+    orgId: typeof Schema.String;
+    name: typeof Schema.String;
+    platform: typeof Schema.String;
+    arch: typeof Schema.String;
+    version: Schema.NullOr<typeof Schema.String>;
+    status: typeof Schema.String;
+    lastSeenAt: Schema.NullOr<typeof Schema.String>;
+    createdAt: typeof Schema.String;
+}>;
+export type Runner = typeof Runner.Type;
+export declare const RunnerJob: Schema.Struct<{
+    id: typeof Schema.String;
+    runnerId: Schema.NullOr<typeof Schema.String>;
+    envId: typeof Schema.String;
+    orgId: typeof Schema.String;
+    status: typeof Schema.String;
+    platform: Schema.NullOr<typeof Schema.String>;
+    gitRepo: typeof Schema.String;
+    gitBranch: typeof Schema.String;
+    gitCommit: Schema.NullOr<typeof Schema.String>;
+    buildCommand: Schema.NullOr<typeof Schema.String>;
+    exitCode: Schema.NullOr<typeof Schema.String>;
+    startedAt: Schema.NullOr<typeof Schema.String>;
+    finishedAt: Schema.NullOr<typeof Schema.String>;
+    createdAt: typeof Schema.String;
+}>;
+export type RunnerJob = typeof RunnerJob.Type;
+export declare const RunnerIdParams: Schema.Struct<{
+    runnerId: typeof Schema.String;
+}>;
+export type RunnerIdParams = typeof RunnerIdParams.Type;
+export declare const CreateRunnerInput: Schema.Struct<{
+    name: typeof Schema.String;
+    platform: Schema.Literal<["linux", "macos", "windows"]>;
+    arch: Schema.Literal<["x64", "arm64"]>;
+}>;
+export type CreateRunnerInput = typeof CreateRunnerInput.Type;
+export declare const ListRunnersResult: Schema.Struct<{
+    runners: Schema.Array$<Schema.Struct<{
+        id: typeof Schema.String;
+        orgId: typeof Schema.String;
+        name: typeof Schema.String;
+        platform: typeof Schema.String;
+        arch: typeof Schema.String;
+        version: Schema.NullOr<typeof Schema.String>;
+        status: typeof Schema.String;
+        lastSeenAt: Schema.NullOr<typeof Schema.String>;
+        createdAt: typeof Schema.String;
+    }>>;
+}>;
+export type ListRunnersResult = typeof ListRunnersResult.Type;
+export declare const CreateRunnerResult: Schema.Struct<{
+    runnerId: typeof Schema.String;
+    registrationToken: typeof Schema.String;
+}>;
+export type CreateRunnerResult = typeof CreateRunnerResult.Type;
+export declare const DeleteRunnerResult: Schema.Struct<{
+    success: typeof Schema.Boolean;
+}>;
+export type DeleteRunnerResult = typeof DeleteRunnerResult.Type;
+export declare const ListRunnerJobsResult: Schema.Struct<{
+    jobs: Schema.Array$<Schema.Struct<{
+        id: typeof Schema.String;
+        runnerId: Schema.NullOr<typeof Schema.String>;
+        envId: typeof Schema.String;
+        orgId: typeof Schema.String;
+        status: typeof Schema.String;
+        platform: Schema.NullOr<typeof Schema.String>;
+        gitRepo: typeof Schema.String;
+        gitBranch: typeof Schema.String;
+        gitCommit: Schema.NullOr<typeof Schema.String>;
+        buildCommand: Schema.NullOr<typeof Schema.String>;
+        exitCode: Schema.NullOr<typeof Schema.String>;
+        startedAt: Schema.NullOr<typeof Schema.String>;
+        finishedAt: Schema.NullOr<typeof Schema.String>;
+        createdAt: typeof Schema.String;
+    }>>;
+}>;
+export type ListRunnerJobsResult = typeof ListRunnerJobsResult.Type;
+//# sourceMappingURL=runners.d.ts.map

package/dist/schemas/runners.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runners.d.ts","sourceRoot":"","sources":["../../src/schemas/runners.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAE/B,eAAO,MAAM,cAAc,+CAA8C,CAAA;AACzE,MAAM,MAAM,cAAc,GAAG,OAAO,cAAc,CAAC,IAAI,CAAA;AACvD,eAAO,MAAM,UAAU,kCAAiC,CAAA;AACxD,MAAM,MAAM,UAAU,GAAG,OAAO,UAAU,CAAC,IAAI,CAAA;AAE/C,eAAO,MAAM,MAAM;;;;;;;;;;EAUjB,CAAA;AACF,MAAM,MAAM,MAAM,GAAG,OAAO,MAAM,CAAC,IAAI,CAAA;AAEvC,eAAO,MAAM,SAAS;;;;;;;;;;;;;;;EAepB,CAAA;AACF,MAAM,MAAM,SAAS,GAAG,OAAO,SAAS,CAAC,IAAI,CAAA;AAE7C,eAAO,MAAM,cAAc;;EAA6C,CAAA;AACxE,MAAM,MAAM,cAAc,GAAG,OAAO,cAAc,CAAC,IAAI,CAAA;AAEvD,eAAO,MAAM,iBAAiB;;;;EAI5B,CAAA;AACF,MAAM,MAAM,iBAAiB,GAAG,OAAO,iBAAiB,CAAC,IAAI,CAAA;AAE7D,eAAO,MAAM,iBAAiB;;;;;;;;;;;;EAAmD,CAAA;AACjF,MAAM,MAAM,iBAAiB,GAAG,OAAO,iBAAiB,CAAC,IAAI,CAAA;AAC7D,eAAO,MAAM,kBAAkB;;;EAG7B,CAAA;AACF,MAAM,MAAM,kBAAkB,GAAG,OAAO,kBAAkB,CAAC,IAAI,CAAA;AAC/D,eAAO,MAAM,kBAAkB;;EAA6C,CAAA;AAC5E,MAAM,MAAM,kBAAkB,GAAG,OAAO,kBAAkB,CAAC,IAAI,CAAA;AAC/D,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;EAAmD,CAAA;AACpF,MAAM,MAAM,oBAAoB,GAAG,OAAO,oBAAoB,CAAC,IAAI,CAAA"}

package/dist/schemas/runners.js

@@ -0,0 +1,49 @@
+/**
+ * Runners — schemas for self-hosted CI runner CRUD.
+ * Mirrors `routes/runners.ts`.
+ *
+ * Plane: `management`.
+ */
+import { Schema } from 'effect';
+export const RunnerPlatform = Schema.Literal('linux', 'macos', 'windows');
+export const RunnerArch = Schema.Literal('x64', 'arm64');
+export const Runner = Schema.Struct({
+    id: Schema.String,
+    orgId: Schema.String,
+    name: Schema.String,
+    platform: Schema.String,
+    arch: Schema.String,
+    version: Schema.NullOr(Schema.String),
+    status: Schema.String,
+    lastSeenAt: Schema.NullOr(Schema.String),
+    createdAt: Schema.String,
+});
+export const RunnerJob = Schema.Struct({
+    id: Schema.String,
+    runnerId: Schema.NullOr(Schema.String),
+    envId: Schema.String,
+    orgId: Schema.String,
+    status: Schema.String,
+    platform: Schema.NullOr(Schema.String),
+    gitRepo: Schema.String,
+    gitBranch: Schema.String,
+    gitCommit: Schema.NullOr(Schema.String),
+    buildCommand: Schema.NullOr(Schema.String),
+    exitCode: Schema.NullOr(Schema.String),
+    startedAt: Schema.NullOr(Schema.String),
+    finishedAt: Schema.NullOr(Schema.String),
+    createdAt: Schema.String,
+});
+export const RunnerIdParams = Schema.Struct({ runnerId: Schema.String });
+export const CreateRunnerInput = Schema.Struct({
+    name: Schema.String,
+    platform: RunnerPlatform,
+    arch: RunnerArch,
+});
+export const ListRunnersResult = Schema.Struct({ runners: Schema.Array(Runner) });
+export const CreateRunnerResult = Schema.Struct({
+    runnerId: Schema.String,
+    registrationToken: Schema.String,
+});
+export const DeleteRunnerResult = Schema.Struct({ success: Schema.Boolean });
+export const ListRunnerJobsResult = Schema.Struct({ jobs: Schema.Array(RunnerJob) });

package/dist/schemas/saml.d.ts

@@ -0,0 +1,254 @@
+/**
+ * SAML — Enterprise SSO configuration. Console-plane admin endpoints manage
+ * the IdP catalogue, SP metadata, authentication logs, and config validation.
+ *
+ * Mirrors the wire shapes served at `/saml/*` in
+ * `apps/api/src/server/platform/routes/saml.ts`.
+ */
+import { Schema } from 'effect';
+export declare const SAMLProviderType: Schema.Literal<["okta", "azure_ad", "google_workspace", "onelogin", "ping_identity", "jumpcloud", "custom"]>;
+export type SAMLProviderType = typeof SAMLProviderType.Type;
+export declare const SAMLNameIdFormat: Schema.Literal<["email", "persistent", "transient", "unspecified"]>;
+export type SAMLNameIdFormat = typeof SAMLNameIdFormat.Type;
+export declare const SAMLSignatureAlgorithm: Schema.Literal<["rsa-sha256", "rsa-sha384", "rsa-sha512"]>;
+export type SAMLSignatureAlgorithm = typeof SAMLSignatureAlgorithm.Type;
+export declare const SAMLProviderStatus: Schema.Literal<["pending", "active", "disabled", "error"]>;
+export type SAMLProviderStatus = typeof SAMLProviderStatus.Type;
+/** SAML IdP attribute → internal user field mapping. */
+export declare const SAMLAttributeMapping: Schema.Struct<{
+    email: Schema.optional<typeof Schema.String>;
+    firstName: Schema.optional<typeof Schema.String>;
+    lastName: Schema.optional<typeof Schema.String>;
+    displayName: Schema.optional<typeof Schema.String>;
+    groups: Schema.optional<typeof Schema.String>;
+}>;
+export type SAMLAttributeMapping = typeof SAMLAttributeMapping.Type;
+export declare const SAMLProvider: Schema.Struct<{
+    id: typeof Schema.String;
+    name: typeof Schema.String;
+    type: Schema.Literal<["okta", "azure_ad", "google_workspace", "onelogin", "ping_identity", "jumpcloud", "custom"]>;
+    status: Schema.Literal<["pending", "active", "disabled", "error"]>;
+    entityId: typeof Schema.String;
+    ssoUrl: typeof Schema.String;
+    sloUrl: Schema.NullOr<typeof Schema.String>;
+    nameIdFormat: Schema.Literal<["email", "persistent", "transient", "unspecified"]>;
+    signatureAlgorithm: Schema.Literal<["rsa-sha256", "rsa-sha384", "rsa-sha512"]>;
+    allowedDomains: Schema.NullOr<Schema.Array$<typeof Schema.String>>;
+    enforceSSO: typeof Schema.Boolean;
+    attributeMapping: Schema.NullOr<Schema.Struct<{
+        email: Schema.optional<typeof Schema.String>;
+        firstName: Schema.optional<typeof Schema.String>;
+        lastName: Schema.optional<typeof Schema.String>;
+        displayName: Schema.optional<typeof Schema.String>;
+        groups: Schema.optional<typeof Schema.String>;
+    }>>;
+    spEntityId: Schema.NullOr<typeof Schema.String>;
+    spAcsUrl: Schema.NullOr<typeof Schema.String>;
+    certificateExpiresAt: Schema.NullOr<typeof Schema.String>;
+    lastLoginAt: Schema.NullOr<typeof Schema.String>;
+    loginCount: typeof Schema.Number;
+    lastError: Schema.NullOr<typeof Schema.String>;
+    lastErrorAt: Schema.NullOr<typeof Schema.String>;
+    createdAt: typeof Schema.String;
+    updatedAt: Schema.NullOr<typeof Schema.String>;
+}>;
+export type SAMLProvider = typeof SAMLProvider.Type;
+export declare const SAMLAuthLog: Schema.Struct<{
+    id: typeof Schema.String;
+    success: typeof Schema.Boolean;
+    errorCode: Schema.NullOr<typeof Schema.String>;
+    errorMessage: Schema.NullOr<typeof Schema.String>;
+    nameId: Schema.NullOr<typeof Schema.String>;
+    ipAddress: Schema.NullOr<typeof Schema.String>;
+    createdAt: typeof Schema.String;
+}>;
+export type SAMLAuthLog = typeof SAMLAuthLog.Type;
+export declare const SAMLIdPTemplate: Schema.Struct<{
+    type: Schema.Literal<["okta", "azure_ad", "google_workspace", "onelogin", "ping_identity", "jumpcloud", "custom"]>;
+    name: typeof Schema.String;
+    instructions: typeof Schema.String;
+    requiredFields: Schema.Array$<typeof Schema.String>;
+}>;
+export type SAMLIdPTemplate = typeof SAMLIdPTemplate.Type;
+export declare const SAMLNameIdFormatOption: Schema.Struct<{
+    key: typeof Schema.String;
+    value: typeof Schema.String;
+    description: typeof Schema.String;
+}>;
+export type SAMLNameIdFormatOption = typeof SAMLNameIdFormatOption.Type;
+export declare const SAMLSignatureAlgorithmOption: Schema.Struct<{
+    key: typeof Schema.String;
+    value: typeof Schema.String;
+    recommended: typeof Schema.Boolean;
+}>;
+export type SAMLSignatureAlgorithmOption = typeof SAMLSignatureAlgorithmOption.Type;
+/**
+ * `organizationId` is carried as a query param on read endpoints so the
+ * Console can look up providers before selecting an org in the UI context.
+ */
+export declare const GetSAMLProviderQuery: Schema.Struct<{
+    organizationId: typeof Schema.String;
+}>;
+export type GetSAMLProviderQuery = typeof GetSAMLProviderQuery.Type;
+export declare const GetSAMLMetadataQuery: Schema.Struct<{
+    organizationId: typeof Schema.String;
+}>;
+export type GetSAMLMetadataQuery = typeof GetSAMLMetadataQuery.Type;
+export declare const GetSAMLLogsQuery: Schema.Struct<{
+    providerId: typeof Schema.String;
+    limit: Schema.optional<typeof Schema.String>;
+}>;
+export type GetSAMLLogsQuery = typeof GetSAMLLogsQuery.Type;
+export declare const CreateSAMLProviderInput: Schema.Struct<{
+    organizationId: typeof Schema.String;
+    name: typeof Schema.String;
+    type: Schema.optional<Schema.Literal<["okta", "azure_ad", "google_workspace", "onelogin", "ping_identity", "jumpcloud", "custom"]>>;
+    entityId: typeof Schema.String;
+    ssoUrl: typeof Schema.String;
+    sloUrl: Schema.optional<typeof Schema.String>;
+    certificate: typeof Schema.String;
+    nameIdFormat: Schema.optional<Schema.Literal<["email", "persistent", "transient", "unspecified"]>>;
+    signatureAlgorithm: Schema.optional<Schema.Literal<["rsa-sha256", "rsa-sha384", "rsa-sha512"]>>;
+    allowedDomains: Schema.optional<Schema.Array$<typeof Schema.String>>;
+    enforceSSO: Schema.optional<typeof Schema.Boolean>;
+    attributeMapping: Schema.optional<Schema.Struct<{
+        email: Schema.optional<typeof Schema.String>;
+        firstName: Schema.optional<typeof Schema.String>;
+        lastName: Schema.optional<typeof Schema.String>;
+        displayName: Schema.optional<typeof Schema.String>;
+        groups: Schema.optional<typeof Schema.String>;
+    }>>;
+}>;
+export type CreateSAMLProviderInput = typeof CreateSAMLProviderInput.Type;
+export declare const UpdateSAMLProviderInput: Schema.Struct<{
+    providerId: typeof Schema.String;
+    name: Schema.optional<typeof Schema.String>;
+    entityId: Schema.optional<typeof Schema.String>;
+    ssoUrl: Schema.optional<typeof Schema.String>;
+    sloUrl: Schema.optional<Schema.NullOr<typeof Schema.String>>;
+    certificate: Schema.optional<typeof Schema.String>;
+    nameIdFormat: Schema.optional<Schema.Literal<["email", "persistent", "transient", "unspecified"]>>;
+    signatureAlgorithm: Schema.optional<Schema.Literal<["rsa-sha256", "rsa-sha384", "rsa-sha512"]>>;
+    allowedDomains: Schema.optional<Schema.Array$<typeof Schema.String>>;
+    enforceSSO: Schema.optional<typeof Schema.Boolean>;
+    attributeMapping: Schema.optional<Schema.Struct<{
+        email: Schema.optional<typeof Schema.String>;
+        firstName: Schema.optional<typeof Schema.String>;
+        lastName: Schema.optional<typeof Schema.String>;
+        displayName: Schema.optional<typeof Schema.String>;
+        groups: Schema.optional<typeof Schema.String>;
+    }>>;
+}>;
+export type UpdateSAMLProviderInput = typeof UpdateSAMLProviderInput.Type;
+export declare const SetSAMLProviderStatusInput: Schema.Struct<{
+    providerId: typeof Schema.String;
+    enabled: typeof Schema.Boolean;
+}>;
+export type SetSAMLProviderStatusInput = typeof SetSAMLProviderStatusInput.Type;
+export declare const DeleteSAMLProviderInput: Schema.Struct<{
+    providerId: typeof Schema.String;
+}>;
+export type DeleteSAMLProviderInput = typeof DeleteSAMLProviderInput.Type;
+export declare const TestSAMLConfigInput: Schema.Struct<{
+    entityId: typeof Schema.String;
+    ssoUrl: typeof Schema.String;
+    certificate: typeof Schema.String;
+}>;
+export type TestSAMLConfigInput = typeof TestSAMLConfigInput.Type;
+export declare const GetSAMLProviderResult: Schema.NullOr<Schema.Struct<{
+    id: typeof Schema.String;
+    name: typeof Schema.String;
+    type: Schema.Literal<["okta", "azure_ad", "google_workspace", "onelogin", "ping_identity", "jumpcloud", "custom"]>;
+    status: Schema.Literal<["pending", "active", "disabled", "error"]>;
+    entityId: typeof Schema.String;
+    ssoUrl: typeof Schema.String;
+    sloUrl: Schema.NullOr<typeof Schema.String>;
+    nameIdFormat: Schema.Literal<["email", "persistent", "transient", "unspecified"]>;
+    signatureAlgorithm: Schema.Literal<["rsa-sha256", "rsa-sha384", "rsa-sha512"]>;
+    allowedDomains: Schema.NullOr<Schema.Array$<typeof Schema.String>>;
+    enforceSSO: typeof Schema.Boolean;
+    attributeMapping: Schema.NullOr<Schema.Struct<{
+        email: Schema.optional<typeof Schema.String>;
+        firstName: Schema.optional<typeof Schema.String>;
+        lastName: Schema.optional<typeof Schema.String>;
+        displayName: Schema.optional<typeof Schema.String>;
+        groups: Schema.optional<typeof Schema.String>;
+    }>>;
+    spEntityId: Schema.NullOr<typeof Schema.String>;
+    spAcsUrl: Schema.NullOr<typeof Schema.String>;
+    certificateExpiresAt: Schema.NullOr<typeof Schema.String>;
+    lastLoginAt: Schema.NullOr<typeof Schema.String>;
+    loginCount: typeof Schema.Number;
+    lastError: Schema.NullOr<typeof Schema.String>;
+    lastErrorAt: Schema.NullOr<typeof Schema.String>;
+    createdAt: typeof Schema.String;
+    updatedAt: Schema.NullOr<typeof Schema.String>;
+}>>;
+export type GetSAMLProviderResult = typeof GetSAMLProviderResult.Type;
+export declare const CreateSAMLProviderResult: Schema.Struct<{
+    id: typeof Schema.String;
+    spEntityId: Schema.NullOr<typeof Schema.String>;
+    spAcsUrl: Schema.NullOr<typeof Schema.String>;
+}>;
+export type CreateSAMLProviderResult = typeof CreateSAMLProviderResult.Type;
+export declare const UpdateSAMLProviderResult: Schema.Struct<{
+    success: typeof Schema.Boolean;
+}>;
+export type UpdateSAMLProviderResult = typeof UpdateSAMLProviderResult.Type;
+export declare const SetSAMLProviderStatusResult: Schema.Struct<{
+    success: typeof Schema.Boolean;
+}>;
+export type SetSAMLProviderStatusResult = typeof SetSAMLProviderStatusResult.Type;
+export declare const DeleteSAMLProviderResult: Schema.Struct<{
+    success: typeof Schema.Boolean;
+}>;
+export type DeleteSAMLProviderResult = typeof DeleteSAMLProviderResult.Type;
+export declare const GetSAMLMetadataResult: Schema.Struct<{
+    metadata: typeof Schema.String;
+    spEntityId: Schema.NullOr<typeof Schema.String>;
+    spAcsUrl: Schema.NullOr<typeof Schema.String>;
+}>;
+export type GetSAMLMetadataResult = typeof GetSAMLMetadataResult.Type;
+export declare const GetSAMLLogsResult: Schema.Struct<{
+    logs: Schema.Array$<Schema.Struct<{
+        id: typeof Schema.String;
+        success: typeof Schema.Boolean;
+        errorCode: Schema.NullOr<typeof Schema.String>;
+        errorMessage: Schema.NullOr<typeof Schema.String>;
+        nameId: Schema.NullOr<typeof Schema.String>;
+        ipAddress: Schema.NullOr<typeof Schema.String>;
+        createdAt: typeof Schema.String;
+    }>>;
+}>;
+export type GetSAMLLogsResult = typeof GetSAMLLogsResult.Type;
+export declare const TestSAMLConfigResult: Schema.Struct<{
+    valid: typeof Schema.Boolean;
+    issues: Schema.Array$<typeof Schema.String>;
+}>;
+export type TestSAMLConfigResult = typeof TestSAMLConfigResult.Type;
+export declare const ListSAMLIdPTemplatesResult: Schema.Struct<{
+    templates: Schema.Array$<Schema.Struct<{
+        type: Schema.Literal<["okta", "azure_ad", "google_workspace", "onelogin", "ping_identity", "jumpcloud", "custom"]>;
+        name: typeof Schema.String;
+        instructions: typeof Schema.String;
+        requiredFields: Schema.Array$<typeof Schema.String>;
+    }>>;
+}>;
+export type ListSAMLIdPTemplatesResult = typeof ListSAMLIdPTemplatesResult.Type;
+export declare const ListSAMLNameIdFormatsResult: Schema.Struct<{
+    formats: Schema.Array$<Schema.Struct<{
+        key: typeof Schema.String;
+        value: typeof Schema.String;
+        description: typeof Schema.String;
+    }>>;
+}>;
+export type ListSAMLNameIdFormatsResult = typeof ListSAMLNameIdFormatsResult.Type;
+export declare const ListSAMLSignatureAlgorithmsResult: Schema.Struct<{
+    algorithms: Schema.Array$<Schema.Struct<{
+        key: typeof Schema.String;
+        value: typeof Schema.String;
+        recommended: typeof Schema.Boolean;
+    }>>;
+}>;
+export type ListSAMLSignatureAlgorithmsResult = typeof ListSAMLSignatureAlgorithmsResult.Type;
+//# sourceMappingURL=saml.d.ts.map

package/dist/schemas/saml.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"saml.d.ts","sourceRoot":"","sources":["../../src/schemas/saml.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAE/B,eAAO,MAAM,gBAAgB,8GAQ5B,CAAA;AACD,MAAM,MAAM,gBAAgB,GAAG,OAAO,gBAAgB,CAAC,IAAI,CAAA;AAE3D,eAAO,MAAM,gBAAgB,qEAAoE,CAAA;AACjG,MAAM,MAAM,gBAAgB,GAAG,OAAO,gBAAgB,CAAC,IAAI,CAAA;AAE3D,eAAO,MAAM,sBAAsB,4DAA2D,CAAA;AAC9F,MAAM,MAAM,sBAAsB,GAAG,OAAO,sBAAsB,CAAC,IAAI,CAAA;AAEvE,eAAO,MAAM,kBAAkB,4DAA2D,CAAA;AAC1F,MAAM,MAAM,kBAAkB,GAAG,OAAO,kBAAkB,CAAC,IAAI,CAAA;AAE/D,wDAAwD;AACxD,eAAO,MAAM,oBAAoB;;;;;;EAM/B,CAAA;AACF,MAAM,MAAM,oBAAoB,GAAG,OAAO,oBAAoB,CAAC,IAAI,CAAA;AAEnE,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAsBvB,CAAA;AACF,MAAM,MAAM,YAAY,GAAG,OAAO,YAAY,CAAC,IAAI,CAAA;AAEnD,eAAO,MAAM,WAAW;;;;;;;;EAQtB,CAAA;AACF,MAAM,MAAM,WAAW,GAAG,OAAO,WAAW,CAAC,IAAI,CAAA;AAEjD,eAAO,MAAM,eAAe;;;;;EAK1B,CAAA;AACF,MAAM,MAAM,eAAe,GAAG,OAAO,eAAe,CAAC,IAAI,CAAA;AAEzD,eAAO,MAAM,sBAAsB;;;;EAIjC,CAAA;AACF,MAAM,MAAM,sBAAsB,GAAG,OAAO,sBAAsB,CAAC,IAAI,CAAA;AAEvE,eAAO,MAAM,4BAA4B;;;;EAIvC,CAAA;AACF,MAAM,MAAM,4BAA4B,GAAG,OAAO,4BAA4B,CAAC,IAAI,CAAA;AAInF;;;GAGG;AACH,eAAO,MAAM,oBAAoB;;EAE/B,CAAA;AACF,MAAM,MAAM,oBAAoB,GAAG,OAAO,oBAAoB,CAAC,IAAI,CAAA;AAEnE,eAAO,MAAM,oBAAoB;;EAE/B,CAAA;AACF,MAAM,MAAM,oBAAoB,GAAG,OAAO,oBAAoB,CAAC,IAAI,CAAA;AAEnE,eAAO,MAAM,gBAAgB;;;EAG3B,CAAA;AACF,MAAM,MAAM,gBAAgB,GAAG,OAAO,gBAAgB,CAAC,IAAI,CAAA;AAE3D,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;EAalC,CAAA;AACF,MAAM,MAAM,uBAAuB,GAAG,OAAO,uBAAuB,CAAC,IAAI,CAAA;AAEzE,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;EAYlC,CAAA;AACF,MAAM,MAAM,uBAAuB,GAAG,OAAO,uBAAuB,CAAC,IAAI,CAAA;AAEzE,eAAO,MAAM,0BAA0B;;;EAGrC,CAAA;AACF,MAAM,MAAM,0BAA0B,GAAG,OAAO,0BAA0B,CAAC,IAAI,CAAA;AAE/E,eAAO,MAAM,uBAAuB;;EAElC,CAAA;AACF,MAAM,MAAM,uBAAuB,GAAG,OAAO,uBAAuB,CAAC,IAAI,CAAA;AAEzE,eAAO,MAAM,mBAAmB;;;;EAI9B,CAAA;AACF,MAAM,MAAM,mBAAmB,GAAG,OAAO,mBAAmB,CAAC,IAAI,CAAA;AAIjE,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAA8B,CAAA;AAChE,MAAM,MAAM,qBAAqB,GAAG,OAAO,qBAAqB,CAAC,IAAI,CAAA;AAErE,eAAO,MAAM,wBAAwB;;;;EAInC,CAAA;AACF,MAAM,MAAM,wBAAwB,GAAG,OAAO,wBAAwB,CAAC,IAAI,CAAA;AAE3E,eAAO,MAAM,wBAAwB;;EAEnC,CAAA;AACF,MAAM,MAAM,wBAAwB,GAAG,OAAO,wBAAwB,CAAC,IAAI,CAAA;AAE3E,eAAO,MAAM,2BAA2B;;EAEtC,CAAA;AACF,MAAM,MAAM,2BAA2B,GAAG,OAAO,2BAA2B,CAAC,IAAI,CAAA;AAEjF,eAAO,MAAM,wBAAwB;;EAEnC,CAAA;AACF,MAAM,MAAM,wBAAwB,GAAG,OAAO,wBAAwB,CAAC,IAAI,CAAA;AAE3E,eAAO,MAAM,qBAAqB;;;;EAIhC,CAAA;AACF,MAAM,MAAM,qBAAqB,GAAG,OAAO,qBAAqB,CAAC,IAAI,CAAA;AAErE,eAAO,MAAM,iBAAiB;;;;;;;;;;EAE5B,CAAA;AACF,MAAM,MAAM,iBAAiB,GAAG,OAAO,iBAAiB,CAAC,IAAI,CAAA;AAE7D,eAAO,MAAM,oBAAoB;;;EAG/B,CAAA;AACF,MAAM,MAAM,oBAAoB,GAAG,OAAO,oBAAoB,CAAC,IAAI,CAAA;AAEnE,eAAO,MAAM,0BAA0B;;;;;;;EAErC,CAAA;AACF,MAAM,MAAM,0BAA0B,GAAG,OAAO,0BAA0B,CAAC,IAAI,CAAA;AAE/E,eAAO,MAAM,2BAA2B;;;;;;EAEtC,CAAA;AACF,MAAM,MAAM,2BAA2B,GAAG,OAAO,2BAA2B,CAAC,IAAI,CAAA;AAEjF,eAAO,MAAM,iCAAiC;;;;;;EAE5C,CAAA;AACF,MAAM,MAAM,iCAAiC,GAAG,OAAO,iCAAiC,CAAC,IAAI,CAAA"}