@tai42/api-client 16.0.0 → 17.0.0

package/dist/schemas/observability.js

@@ -0,0 +1,74 @@
+/** Run metrics, listing, span and trace response schemas. */
+import { z } from 'zod';
+import { jsonValue } from './shared';
+export const dashboardMetrics = z.object({
+    summary: z.object({
+        totalRuns: z.number(),
+        totalCost: z.number(),
+        totalTokens: z.number(),
+        averageLatencyMs: z.number(),
+        avgCostPerRun: z.number(),
+        avgTokensPerRun: z.number(),
+        timeToFirstTokenMs: z.number().nullable(),
+    }),
+    timeSeries: z.array(z.object({
+        bucket: z.string().nullable(),
+        runs: z.number(),
+        cost: z.number(),
+        avgLatencyMs: z.number(),
+        totalTokens: z.number(),
+    })),
+    byModel: z.array(z.object({
+        model: z.string(),
+        calls: z.number(),
+        cost: z.number(),
+        totalTokens: z.number(),
+        avgLatencyMs: z.number(),
+    })),
+    granularity: z.enum(['hour', 'day', 'week']),
+});
+export const run = z.object({
+    id: z.string(),
+    traceId: z.string(),
+    createdAt: z.string().nullable(),
+    tags: z.array(z.string()),
+    status: z.enum(['error', 'success']),
+    cost: z.number().nullable(),
+    latencyMs: z.number().nullable(),
+    totalTokens: z.number().nullable(),
+    inputPreview: jsonValue,
+    outputPreview: jsonValue,
+});
+export const runsPage = z.object({
+    items: z.array(run),
+    page: z.number(),
+    nextPage: z.number().nullable(),
+});
+export const runSpan = z.object({
+    id: z.string(),
+    parentId: z.string().nullable(),
+    traceId: z.string().nullable(),
+    name: z.string().nullable(),
+    type: z.string().nullable(),
+    level: z.string().nullable(),
+    statusMessage: z.string().nullable(),
+    start: z.string().nullable(),
+    end: z.string().nullable(),
+    model: z.string().nullable(),
+    usage: jsonValue.nullable(),
+    metadata: jsonValue.nullable(),
+    input: jsonValue,
+    output: jsonValue,
+    nodeId: z.string().nullable(),
+});
+export const runTrace = z.object({
+    traceId: z.string(),
+    timestamp: z.string().nullable(),
+    tags: z.array(z.string()),
+    totalCost: z.number().nullable(),
+    input: jsonValue,
+    output: jsonValue,
+    metadata: jsonValue.nullable(),
+    spans: z.array(runSpan),
+});
+//# sourceMappingURL=observability.js.map

package/dist/schemas/observability.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"observability.js","sourceRoot":"","sources":["../../src/schemas/observability.ts"],"names":[],"mappings":"AAAA,6DAA6D;AAC7D,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAErC,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;QAChB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;QACrB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;QACrB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;QACvB,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE;QAC5B,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;QACzB,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE;QAC3B,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAC1C,CAAC;IACF,UAAU,EAAE,CAAC,CAAC,KAAK,CACjB,CAAC,CAAC,MAAM,CAAC;QACP,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC7B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;QACxB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;KACxB,CAAC,CACH;IACD,OAAO,EAAE,CAAC,CAAC,KAAK,CACd,CAAC,CAAC,MAAM,CAAC;QACP,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;QACjB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;QACjB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;QACvB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;KACzB,CAAC,CACH;IACD,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;CAC7C,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1B,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACzB,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IACpC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,YAAY,EAAE,SAAS;IACvB,aAAa,EAAE,SAAS;CACzB,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/B,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC;IACnB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAChC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9B,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACpC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,KAAK,EAAE,SAAS,CAAC,QAAQ,EAAE;IAC3B,QAAQ,EAAE,SAAS,CAAC,QAAQ,EAAE;IAC9B,KAAK,EAAE,SAAS;IAChB,MAAM,EAAE,SAAS;IACjB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC9B,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACzB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,KAAK,EAAE,SAAS;IAChB,MAAM,EAAE,SAAS;IACjB,QAAQ,EAAE,SAAS,CAAC,QAAQ,EAAE;IAC9B,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC;CACxB,CAAC,CAAC"}

package/dist/schemas/policy.d.ts

@@ -0,0 +1,58 @@
+/** Access-policy validation, version and rollback response schemas. */
+import { z } from 'zod';
+/**
+ * `POST /api/auth/validate-condition` — the fail-closed jq guard. `ok` is the
+ * compile/render result; `result` is the boolean of a sample evaluation, or
+ * `null` when no `sample_context` was supplied (compile-only). A broken condition
+ * is a `400 {error}` surfaced by the transport, NEVER a false `ok` — so a
+ * syntactically-broken condition can be caught before it locks a key out. A drift
+ * throws `ApiSchemaError`.
+ */
+export declare const validateConditionResult: z.ZodObject<{
+    ok: z.ZodBoolean;
+    result: z.ZodNullable<z.ZodBoolean>;
+}, z.core.$strip>;
+export type ValidateConditionResult = z.infer<typeof validateConditionResult>;
+/**
+ * One immutable policy version row
+ * (`GET /api/auth/api-keys/{user_id}/policy/versions`). `is_current` flags the
+ * active pointer; `tags` is the generic per-version label list (kind-agnostic),
+ * mirroring the preset version shape.
+ */
+export declare const policyVersion: z.ZodObject<{
+    version: z.ZodNumber;
+    body: z.ZodObject<{
+        condition: z.ZodDefault<z.ZodUnion<readonly [z.ZodObject<{
+            content: z.ZodOptional<z.ZodString>;
+            id: z.ZodOptional<z.ZodString>;
+            kwargs: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        }, z.core.$strict>, z.ZodNull]>>;
+        policy_data: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        scopes: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    }, z.core.$strip>;
+    tags: z.ZodArray<z.ZodString>;
+    created_at: z.ZodString;
+    is_current: z.ZodBoolean;
+}, z.core.$strip>;
+export type PolicyVersion = z.infer<typeof policyVersion>;
+export declare const policyVersionList: z.ZodArray<z.ZodObject<{
+    version: z.ZodNumber;
+    body: z.ZodObject<{
+        condition: z.ZodDefault<z.ZodUnion<readonly [z.ZodObject<{
+            content: z.ZodOptional<z.ZodString>;
+            id: z.ZodOptional<z.ZodString>;
+            kwargs: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        }, z.core.$strict>, z.ZodNull]>>;
+        policy_data: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        scopes: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    }, z.core.$strip>;
+    tags: z.ZodArray<z.ZodString>;
+    created_at: z.ZodString;
+    is_current: z.ZodBoolean;
+}, z.core.$strip>>;
+/** `POST /api/auth/api-keys/{user_id}/policy/rollback` — the re-pointed version. */
+export declare const policyRollback: z.ZodObject<{
+    user_id: z.ZodString;
+    active_version: z.ZodNumber;
+}, z.core.$strip>;
+//# sourceMappingURL=policy.d.ts.map

package/dist/schemas/policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../../src/schemas/policy.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB;;;;;;;GAOG;AACH,eAAO,MAAM,uBAAuB;;;iBAGlC,CAAC;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAE9E;;;;;GAKG;AACH,eAAO,MAAM,aAAa;;;;;;;;;;;;;;iBAMxB,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAE1D,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;kBAAyB,CAAC;AAExD,oFAAoF;AACpF,eAAO,MAAM,cAAc;;;iBAAgE,CAAC"}

package/dist/schemas/policy.js

@@ -0,0 +1,32 @@
+/** Access-policy validation, version and rollback response schemas. */
+import { z } from 'zod';
+import { policyBody } from './served';
+/**
+ * `POST /api/auth/validate-condition` — the fail-closed jq guard. `ok` is the
+ * compile/render result; `result` is the boolean of a sample evaluation, or
+ * `null` when no `sample_context` was supplied (compile-only). A broken condition
+ * is a `400 {error}` surfaced by the transport, NEVER a false `ok` — so a
+ * syntactically-broken condition can be caught before it locks a key out. A drift
+ * throws `ApiSchemaError`.
+ */
+export const validateConditionResult = z.object({
+    ok: z.boolean(),
+    result: z.boolean().nullable(),
+});
+/**
+ * One immutable policy version row
+ * (`GET /api/auth/api-keys/{user_id}/policy/versions`). `is_current` flags the
+ * active pointer; `tags` is the generic per-version label list (kind-agnostic),
+ * mirroring the preset version shape.
+ */
+export const policyVersion = z.object({
+    version: z.number(),
+    body: policyBody,
+    tags: z.array(z.string()),
+    created_at: z.string(),
+    is_current: z.boolean(),
+});
+export const policyVersionList = z.array(policyVersion);
+/** `POST /api/auth/api-keys/{user_id}/policy/rollback` — the re-pointed version. */
+export const policyRollback = z.object({ user_id: z.string(), active_version: z.number() });
+//# sourceMappingURL=policy.js.map

package/dist/schemas/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../src/schemas/policy.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAEtC;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE;IACf,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CAC/B,CAAC,CAAC;AAGH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,IAAI,EAAE,UAAU;IAChB,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACzB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE;CACxB,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;AAExD,oFAAoF;AACpF,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC"}

package/dist/schemas/presets.d.ts

@@ -0,0 +1,258 @@
+/** Preset record, version and validation response schemas. */
+import { z } from 'zod';
+/** A list of extension COMBOS — each combo an ordered list of elements. */
+export declare const presetExtensions: z.ZodArray<z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
+    name: z.ZodString;
+    config: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+}, z.core.$strip>]>>>;
+/**
+ * One preset as `GET /api/presets` returns it. Every preset is versioned, so
+ * `active_version` is always an int; `conflicted` marks a QUARANTINED row (its
+ * name collided with a foreign tool at boot — delete-only). `extensions` are the
+ * ACTIVE version's extension combos, `output_schema` the optional author-set
+ * output JSON Schema, and `input_schema` the optional author-set input JSON
+ * Schema. Categorization tags live in the tool_meta overlay
+ * (`GET /api/tool-meta`), never on the record. A drift throws `ApiSchemaError`;
+ * nothing is coerced.
+ */
+export declare const presetRecord: z.ZodObject<{
+    name: z.ZodString;
+    base_tool: z.ZodString;
+    description: z.ZodString;
+    active_version: z.ZodNumber;
+    extensions: z.ZodArray<z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
+        name: z.ZodString;
+        config: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+    }, z.core.$strip>]>>>;
+    output_schema: z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    input_schema: z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    conflicted: z.ZodBoolean;
+    conflicted_reason: z.ZodNullable<z.ZodString>;
+    uses: z.ZodArray<z.ZodString>;
+    used_by: z.ZodArray<z.ZodString>;
+}, z.core.$strip>;
+export type PresetRecord = z.infer<typeof presetRecord>;
+export declare const presetList: z.ZodArray<z.ZodObject<{
+    name: z.ZodString;
+    base_tool: z.ZodString;
+    description: z.ZodString;
+    active_version: z.ZodNumber;
+    extensions: z.ZodArray<z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
+        name: z.ZodString;
+        config: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+    }, z.core.$strip>]>>>;
+    output_schema: z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    input_schema: z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    conflicted: z.ZodBoolean;
+    conflicted_reason: z.ZodNullable<z.ZodString>;
+    uses: z.ZodArray<z.ZodString>;
+    used_by: z.ZodArray<z.ZodString>;
+}, z.core.$strip>>;
+/** `GET /api/presets/{name}` — the record plus the active version's baked kwargs. */
+export declare const presetDetail: z.ZodObject<{
+    name: z.ZodString;
+    base_tool: z.ZodString;
+    description: z.ZodString;
+    active_version: z.ZodNumber;
+    extensions: z.ZodArray<z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
+        name: z.ZodString;
+        config: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+    }, z.core.$strip>]>>>;
+    output_schema: z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    input_schema: z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    conflicted: z.ZodBoolean;
+    conflicted_reason: z.ZodNullable<z.ZodString>;
+    uses: z.ZodArray<z.ZodString>;
+    used_by: z.ZodArray<z.ZodString>;
+    fixed_kwargs: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+}, z.core.$strip>;
+export type PresetDetail = z.infer<typeof presetDetail>;
+/**
+ * One immutable version row (`GET /api/presets/{name}/versions[/{version}]`).
+ * `is_current` flags the active version; `tags` here is the GENERIC per-version
+ * label list (kind-agnostic) — the only preset tags that remain, distinct from the
+ * removed record-level categorization and from the tool_meta overlay.
+ */
+export declare const presetVersion: z.ZodObject<{
+    version: z.ZodNumber;
+    body: z.ZodObject<{
+        base_tool: z.ZodString;
+        description: z.ZodDefault<z.ZodString>;
+        extensions: z.ZodDefault<z.ZodArray<z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodRecord<z.ZodString, z.ZodUnknown>]>>>>;
+        fixed_kwargs: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        input_schema: z.ZodDefault<z.ZodUnion<readonly [z.ZodObject<{
+            content: z.ZodOptional<z.ZodString>;
+            id: z.ZodOptional<z.ZodString>;
+            kwargs: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        }, z.core.$strict>, z.ZodRecord<z.ZodString, z.ZodUnknown>, z.ZodNull]>>;
+        output_schema: z.ZodDefault<z.ZodUnion<readonly [z.ZodObject<{
+            content: z.ZodOptional<z.ZodString>;
+            id: z.ZodOptional<z.ZodString>;
+            kwargs: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        }, z.core.$strict>, z.ZodRecord<z.ZodString, z.ZodUnknown>, z.ZodNull]>>;
+        state_binding: z.ZodDefault<z.ZodUnion<readonly [z.ZodObject<{
+            states: z.ZodArray<z.ZodObject<{
+                input_injections: z.ZodDefault<z.ZodArray<z.ZodObject<{
+                    into: z.ZodString;
+                    jq: z.ZodDefault<z.ZodUnion<readonly [z.ZodObject<{
+                        content: z.ZodOptional<z.ZodString>;
+                        id: z.ZodOptional<z.ZodString>;
+                        kwargs: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+                    }, z.core.$strict>, z.ZodNull]>>;
+                    template_jq: z.ZodDefault<z.ZodUnion<readonly [z.ZodString, z.ZodNull]>>;
+                }, z.core.$strict>>>;
+                scope_expr: z.ZodDefault<z.ZodUnion<readonly [z.ZodObject<{
+                    content: z.ZodOptional<z.ZodString>;
+                    id: z.ZodOptional<z.ZodString>;
+                    kwargs: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+                }, z.core.$strict>, z.ZodNull]>>;
+                state: z.ZodString;
+                subject_expr: z.ZodObject<{
+                    content: z.ZodOptional<z.ZodString>;
+                    id: z.ZodOptional<z.ZodString>;
+                    kwargs: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+                }, z.core.$strict>;
+                templates: z.ZodDefault<z.ZodArray<z.ZodString>>;
+                updates: z.ZodDefault<z.ZodArray<z.ZodObject<{
+                    adapter: z.ZodDefault<z.ZodUnion<readonly [z.ZodObject<{
+                        content: z.ZodOptional<z.ZodString>;
+                        id: z.ZodOptional<z.ZodString>;
+                        kwargs: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+                    }, z.core.$strict>, z.ZodNull]>>;
+                    jq: z.ZodDefault<z.ZodUnion<readonly [z.ZodObject<{
+                        content: z.ZodOptional<z.ZodString>;
+                        id: z.ZodOptional<z.ZodString>;
+                        kwargs: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+                    }, z.core.$strict>, z.ZodNull]>>;
+                    op_id: z.ZodDefault<z.ZodUnion<readonly [z.ZodObject<{
+                        content: z.ZodOptional<z.ZodString>;
+                        id: z.ZodOptional<z.ZodString>;
+                        kwargs: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+                    }, z.core.$strict>, z.ZodNull]>>;
+                    template_jq: z.ZodDefault<z.ZodUnion<readonly [z.ZodString, z.ZodNull]>>;
+                }, z.core.$strict>>>;
+            }, z.core.$strict>>;
+        }, z.core.$strict>, z.ZodNull]>>;
+    }, z.core.$strip>;
+    tags: z.ZodArray<z.ZodString>;
+    created_at: z.ZodString;
+    is_current: z.ZodBoolean;
+}, z.core.$strip>;
+export type PresetVersion = z.infer<typeof presetVersion>;
+export declare const presetVersionList: z.ZodArray<z.ZodObject<{
+    version: z.ZodNumber;
+    body: z.ZodObject<{
+        base_tool: z.ZodString;
+        description: z.ZodDefault<z.ZodString>;
+        extensions: z.ZodDefault<z.ZodArray<z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodRecord<z.ZodString, z.ZodUnknown>]>>>>;
+        fixed_kwargs: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        input_schema: z.ZodDefault<z.ZodUnion<readonly [z.ZodObject<{
+            content: z.ZodOptional<z.ZodString>;
+            id: z.ZodOptional<z.ZodString>;
+            kwargs: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        }, z.core.$strict>, z.ZodRecord<z.ZodString, z.ZodUnknown>, z.ZodNull]>>;
+        output_schema: z.ZodDefault<z.ZodUnion<readonly [z.ZodObject<{
+            content: z.ZodOptional<z.ZodString>;
+            id: z.ZodOptional<z.ZodString>;
+            kwargs: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        }, z.core.$strict>, z.ZodRecord<z.ZodString, z.ZodUnknown>, z.ZodNull]>>;
+        state_binding: z.ZodDefault<z.ZodUnion<readonly [z.ZodObject<{
+            states: z.ZodArray<z.ZodObject<{
+                input_injections: z.ZodDefault<z.ZodArray<z.ZodObject<{
+                    into: z.ZodString;
+                    jq: z.ZodDefault<z.ZodUnion<readonly [z.ZodObject<{
+                        content: z.ZodOptional<z.ZodString>;
+                        id: z.ZodOptional<z.ZodString>;
+                        kwargs: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+                    }, z.core.$strict>, z.ZodNull]>>;
+                    template_jq: z.ZodDefault<z.ZodUnion<readonly [z.ZodString, z.ZodNull]>>;
+                }, z.core.$strict>>>;
+                scope_expr: z.ZodDefault<z.ZodUnion<readonly [z.ZodObject<{
+                    content: z.ZodOptional<z.ZodString>;
+                    id: z.ZodOptional<z.ZodString>;
+                    kwargs: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+                }, z.core.$strict>, z.ZodNull]>>;
+                state: z.ZodString;
+                subject_expr: z.ZodObject<{
+                    content: z.ZodOptional<z.ZodString>;
+                    id: z.ZodOptional<z.ZodString>;
+                    kwargs: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+                }, z.core.$strict>;
+                templates: z.ZodDefault<z.ZodArray<z.ZodString>>;
+                updates: z.ZodDefault<z.ZodArray<z.ZodObject<{
+                    adapter: z.ZodDefault<z.ZodUnion<readonly [z.ZodObject<{
+                        content: z.ZodOptional<z.ZodString>;
+                        id: z.ZodOptional<z.ZodString>;
+                        kwargs: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+                    }, z.core.$strict>, z.ZodNull]>>;
+                    jq: z.ZodDefault<z.ZodUnion<readonly [z.ZodObject<{
+                        content: z.ZodOptional<z.ZodString>;
+                        id: z.ZodOptional<z.ZodString>;
+                        kwargs: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+                    }, z.core.$strict>, z.ZodNull]>>;
+                    op_id: z.ZodDefault<z.ZodUnion<readonly [z.ZodObject<{
+                        content: z.ZodOptional<z.ZodString>;
+                        id: z.ZodOptional<z.ZodString>;
+                        kwargs: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+                    }, z.core.$strict>, z.ZodNull]>>;
+                    template_jq: z.ZodDefault<z.ZodUnion<readonly [z.ZodString, z.ZodNull]>>;
+                }, z.core.$strict>>>;
+            }, z.core.$strict>>;
+        }, z.core.$strict>, z.ZodNull]>>;
+    }, z.core.$strip>;
+    tags: z.ZodArray<z.ZodString>;
+    created_at: z.ZodString;
+    is_current: z.ZodBoolean;
+}, z.core.$strip>>;
+/** `POST /api/presets/{name}/rollback` — the re-pointed active version. */
+export declare const presetRollback: z.ZodObject<{
+    name: z.ZodString;
+    active_version: z.ZodNumber;
+}, z.core.$strip>;
+/** `DELETE /api/presets/{name}` — the removed preset. */
+export declare const presetDeleted: z.ZodObject<{
+    name: z.ZodString;
+    deleted: z.ZodLiteral<true>;
+}, z.core.$strip>;
+/** `POST /api/presets/{name}/rename` — the re-keyed record identity. */
+export declare const presetRenamed: z.ZodObject<{
+    name: z.ZodString;
+    renamed_from: z.ZodString;
+    active_version: z.ZodNumber;
+}, z.core.$strip>;
+export type PresetRenamed = z.infer<typeof presetRenamed>;
+/**
+ * `GET /api/presets/{name}/referees` — every OTHER preset whose active authored
+ * composition names this one as a tool (the referees a rename would strand). An
+ * empty list is the clean case; a non-empty list means a rename is blocked until
+ * those presets are updated. A drift throws `ApiSchemaError`.
+ */
+export declare const presetReferees: z.ZodObject<{
+    name: z.ZodString;
+    referees: z.ZodArray<z.ZodString>;
+}, z.core.$strip>;
+export type PresetReferees = z.infer<typeof presetReferees>;
+/**
+ * `POST /api/presets/validate` — the dry-run verdict for a preset draft. `valid`
+ * is the absence of an `error`; an invalid draft is a SUCCESSFUL validation (HTTP
+ * 200), so `error` carries the server's verbatim message. A drift throws
+ * `ApiSchemaError`.
+ */
+export declare const presetValidation: z.ZodObject<{
+    valid: z.ZodBoolean;
+    error: z.ZodNullable<z.ZodString>;
+}, z.core.$strip>;
+export type PresetValidation = z.infer<typeof presetValidation>;
+/**
+ * `PUT /api/presets/{name}/versions/{version}/tags` — the re-annotated version.
+ * Version tags are labels on an immutable body, so this rebinds nothing; the
+ * response echoes the identity plus the new tag list. A drift throws
+ * `ApiSchemaError`.
+ */
+export declare const presetVersionTags: z.ZodObject<{
+    name: z.ZodString;
+    version: z.ZodNumber;
+    tags: z.ZodArray<z.ZodString>;
+}, z.core.$strip>;
+export type PresetVersionTags = z.infer<typeof presetVersionTags>;
+//# sourceMappingURL=presets.d.ts.map

package/dist/schemas/presets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"presets.d.ts","sourceRoot":"","sources":["../../src/schemas/presets.ts"],"names":[],"mappings":"AAAA,8DAA8D;AAC9D,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAKxB,2EAA2E;AAC3E,eAAO,MAAM,gBAAgB;;;qBAA2C,CAAC;AAEzE;;;;;;;;;GASG;AACH,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;iBAiBvB,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAExD,eAAO,MAAM,UAAU;;;;;;;;;;;;;;;kBAAwB,CAAC;AAEhD,qFAAqF;AACrF,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;iBAEvB,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAExD;;;;;GAKG;AACH,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAMxB,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAE1D,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAAyB,CAAC;AAExD,2EAA2E;AAC3E,eAAO,MAAM,cAAc;;;iBAA6D,CAAC;AAEzF,yDAAyD;AACzD,eAAO,MAAM,aAAa;;;iBAA2D,CAAC;AAEtF,wEAAwE;AACxE,eAAO,MAAM,aAAa;;;;iBAIxB,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAE1D;;;;;GAKG;AACH,eAAO,MAAM,cAAc;;;iBAGzB,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAE5D;;;;;GAKG;AACH,eAAO,MAAM,gBAAgB;;;iBAG3B,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAEhE;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB;;;;iBAI5B,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC"}

package/dist/schemas/presets.js

@@ -0,0 +1,95 @@
+/** Preset record, version and validation response schemas. */
+import { z } from 'zod';
+import { presetExtensionElement } from './extensions';
+import { presetBody } from './served';
+/** A list of extension COMBOS — each combo an ordered list of elements. */
+export const presetExtensions = z.array(z.array(presetExtensionElement));
+/**
+ * One preset as `GET /api/presets` returns it. Every preset is versioned, so
+ * `active_version` is always an int; `conflicted` marks a QUARANTINED row (its
+ * name collided with a foreign tool at boot — delete-only). `extensions` are the
+ * ACTIVE version's extension combos, `output_schema` the optional author-set
+ * output JSON Schema, and `input_schema` the optional author-set input JSON
+ * Schema. Categorization tags live in the tool_meta overlay
+ * (`GET /api/tool-meta`), never on the record. A drift throws `ApiSchemaError`;
+ * nothing is coerced.
+ */
+export const presetRecord = z.object({
+    name: z.string(),
+    base_tool: z.string(),
+    description: z.string(),
+    active_version: z.number(),
+    extensions: presetExtensions,
+    output_schema: z.record(z.string(), z.unknown()).nullable(),
+    input_schema: z.record(z.string(), z.unknown()).nullable(),
+    conflicted: z.boolean(),
+    // The human-readable cause a row is quarantined (its name collided with a
+    // foreign tool at boot), or `null` when the row is not conflicted. Rendered
+    // verbatim; nothing is coerced.
+    conflicted_reason: z.string().nullable(),
+    // Sorted preset-name cross-references: `uses` names the presets this one
+    // composes as tools; `used_by` names the presets that compose this one.
+    uses: z.array(z.string()),
+    used_by: z.array(z.string()),
+});
+export const presetList = z.array(presetRecord);
+/** `GET /api/presets/{name}` — the record plus the active version's baked kwargs. */
+export const presetDetail = presetRecord.extend({
+    fixed_kwargs: z.record(z.string(), z.unknown()),
+});
+/**
+ * One immutable version row (`GET /api/presets/{name}/versions[/{version}]`).
+ * `is_current` flags the active version; `tags` here is the GENERIC per-version
+ * label list (kind-agnostic) — the only preset tags that remain, distinct from the
+ * removed record-level categorization and from the tool_meta overlay.
+ */
+export const presetVersion = z.object({
+    version: z.number(),
+    body: presetBody,
+    tags: z.array(z.string()),
+    created_at: z.string(),
+    is_current: z.boolean(),
+});
+export const presetVersionList = z.array(presetVersion);
+/** `POST /api/presets/{name}/rollback` — the re-pointed active version. */
+export const presetRollback = z.object({ name: z.string(), active_version: z.number() });
+/** `DELETE /api/presets/{name}` — the removed preset. */
+export const presetDeleted = z.object({ name: z.string(), deleted: z.literal(true) });
+/** `POST /api/presets/{name}/rename` — the re-keyed record identity. */
+export const presetRenamed = z.object({
+    name: z.string(),
+    renamed_from: z.string(),
+    active_version: z.number(),
+});
+/**
+ * `GET /api/presets/{name}/referees` — every OTHER preset whose active authored
+ * composition names this one as a tool (the referees a rename would strand). An
+ * empty list is the clean case; a non-empty list means a rename is blocked until
+ * those presets are updated. A drift throws `ApiSchemaError`.
+ */
+export const presetReferees = z.object({
+    name: z.string(),
+    referees: z.array(z.string()),
+});
+/**
+ * `POST /api/presets/validate` — the dry-run verdict for a preset draft. `valid`
+ * is the absence of an `error`; an invalid draft is a SUCCESSFUL validation (HTTP
+ * 200), so `error` carries the server's verbatim message. A drift throws
+ * `ApiSchemaError`.
+ */
+export const presetValidation = z.object({
+    valid: z.boolean(),
+    error: z.string().nullable(),
+});
+/**
+ * `PUT /api/presets/{name}/versions/{version}/tags` — the re-annotated version.
+ * Version tags are labels on an immutable body, so this rebinds nothing; the
+ * response echoes the identity plus the new tag list. A drift throws
+ * `ApiSchemaError`.
+ */
+export const presetVersionTags = z.object({
+    name: z.string(),
+    version: z.number(),
+    tags: z.array(z.string()),
+});
+//# sourceMappingURL=presets.js.map

package/dist/schemas/presets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"presets.js","sourceRoot":"","sources":["../../src/schemas/presets.ts"],"names":[],"mappings":"AAAA,8DAA8D;AAC9D,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAEtC,2EAA2E;AAC3E,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC;AAEzE;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;IAC1B,UAAU,EAAE,gBAAgB;IAC5B,aAAa,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC3D,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC1D,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE;IACvB,0EAA0E;IAC1E,4EAA4E;IAC5E,gCAAgC;IAChC,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACxC,yEAAyE;IACzE,wEAAwE;IACxE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACzB,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;CAC7B,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;AAEhD,qFAAqF;AACrF,MAAM,CAAC,MAAM,YAAY,GAAG,YAAY,CAAC,MAAM,CAAC;IAC9C,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;CAChD,CAAC,CAAC;AAGH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,IAAI,EAAE,UAAU;IAChB,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACzB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE;CACxB,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;AAExD,2EAA2E;AAC3E,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAEzF,yDAAyD;AACzD,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAEtF,wEAAwE;AACxE,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;IACxB,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;CAC3B,CAAC,CAAC;AAGH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;CAC9B,CAAC,CAAC;AAGH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE;IAClB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC7B,CAAC,CAAC;AAGH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;CAC1B,CAAC,CAAC"}

package/dist/schemas/principals.d.ts

@@ -0,0 +1,54 @@
+/** Principal (identity) reference, row, listing and delete-result schemas. */
+import { z } from 'zod';
+/**
+ * A compact reference to a principal — the owner of a key, or the human behind a
+ * session — carried inline on payloads that name one.
+ */
+export declare const principalRef: z.ZodObject<{
+    user_id: z.ZodString;
+    kind: z.ZodEnum<{
+        human: "human";
+        service: "service";
+    }>;
+    display_name: z.ZodString;
+}, z.core.$strip>;
+export type PrincipalRef = z.infer<typeof principalRef>;
+/**
+ * A principal row (`/api/auth/principals`). `kind` is `human` (logs in
+ * interactively) or `service` (holds keys only, never logs in). `created_by` is
+ * the principal that created this one, or `null` for the owner the setup door
+ * mints. `disabled` turns off every credential the principal owns. `created_at`
+ * is an ISO-8601 instant.
+ */
+export declare const principal: z.ZodObject<{
+    user_id: z.ZodString;
+    kind: z.ZodEnum<{
+        human: "human";
+        service: "service";
+    }>;
+    display_name: z.ZodString;
+    created_by: z.ZodNullable<z.ZodString>;
+    disabled: z.ZodBoolean;
+    created_at: z.ZodString;
+}, z.core.$strip>;
+export type Principal = z.infer<typeof principal>;
+/** The principals listing (`GET /api/auth/principals`). */
+export declare const principalList: z.ZodArray<z.ZodObject<{
+    user_id: z.ZodString;
+    kind: z.ZodEnum<{
+        human: "human";
+        service: "service";
+    }>;
+    display_name: z.ZodString;
+    created_by: z.ZodNullable<z.ZodString>;
+    disabled: z.ZodBoolean;
+    created_at: z.ZodString;
+}, z.core.$strip>>;
+export type PrincipalList = z.infer<typeof principalList>;
+/** The delete result (`DELETE /api/auth/principals/{user_id}`). */
+export declare const principalDeleted: z.ZodObject<{
+    user_id: z.ZodString;
+    deleted: z.ZodBoolean;
+}, z.core.$strip>;
+export type PrincipalDeleted = z.infer<typeof principalDeleted>;
+//# sourceMappingURL=principals.d.ts.map

package/dist/schemas/principals.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"principals.d.ts","sourceRoot":"","sources":["../../src/schemas/principals.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;GAGG;AACH,eAAO,MAAM,YAAY;;;;;;;iBAIvB,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAExD;;;;;;GAMG;AACH,eAAO,MAAM,SAAS;;;;;;;;;;iBAOpB,CAAC;AACH,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,SAAS,CAAC,CAAC;AAElD,2DAA2D;AAC3D,eAAO,MAAM,aAAa;;;;;;;;;;kBAAqB,CAAC;AAChD,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAE1D,mEAAmE;AACnE,eAAO,MAAM,gBAAgB;;;iBAG3B,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC"}

package/dist/schemas/principals.js

@@ -0,0 +1,34 @@
+/** Principal (identity) reference, row, listing and delete-result schemas. */
+import { z } from 'zod';
+/**
+ * A compact reference to a principal — the owner of a key, or the human behind a
+ * session — carried inline on payloads that name one.
+ */
+export const principalRef = z.object({
+    user_id: z.string(),
+    kind: z.enum(['human', 'service']),
+    display_name: z.string(),
+});
+/**
+ * A principal row (`/api/auth/principals`). `kind` is `human` (logs in
+ * interactively) or `service` (holds keys only, never logs in). `created_by` is
+ * the principal that created this one, or `null` for the owner the setup door
+ * mints. `disabled` turns off every credential the principal owns. `created_at`
+ * is an ISO-8601 instant.
+ */
+export const principal = z.object({
+    user_id: z.string(),
+    kind: z.enum(['human', 'service']),
+    display_name: z.string(),
+    created_by: z.string().nullable(),
+    disabled: z.boolean(),
+    created_at: z.string(),
+});
+/** The principals listing (`GET /api/auth/principals`). */
+export const principalList = z.array(principal);
+/** The delete result (`DELETE /api/auth/principals/{user_id}`). */
+export const principalDeleted = z.object({
+    user_id: z.string(),
+    deleted: z.boolean(),
+});
+//# sourceMappingURL=principals.js.map

package/dist/schemas/principals.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"principals.js","sourceRoot":"","sources":["../../src/schemas/principals.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;GAGG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAClC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;CACzB,CAAC,CAAC;AAGH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAClC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;IACxB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;IACrB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;CACvB,CAAC,CAAC;AAGH,2DAA2D;AAC3D,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;AAGhD,mEAAmE;AACnE,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;CACrB,CAAC,CAAC"}