@tai42/api-client 20.0.0 → 21.0.0

package/dist/schemas/capabilities.d.ts

@@ -1,29 +1,34 @@
 /** Caller capability projection and auth-capabilities schemas. */
-import { z } from 'zod';
+import type { z } from 'zod';
 /** A concrete route the caller can reach, with the methods that pass its jq fence. */
 export declare const routeEntry: z.ZodObject<{
-    path: z.ZodString;
     methods: z.ZodArray<z.ZodString>;
+    path: z.ZodString;
 }, z.core.$strip>;
 export type RouteEntry = z.infer<typeof routeEntry>;
 /**
  * A dynamic route pattern the caller can reach — a mount/pattern surface not
  * enumerable into concrete paths, projected only when its scope AND jq admit it.
+ * `open_prefix` is the literal path prefix the pattern opens, or `null` when the pattern
+ * opens none a prefix test can read.
  */
 export declare const patternEntry: z.ZodObject<{
+    open_prefix: z.ZodNullable<z.ZodString>;
     pattern: z.ZodString;
     scope_id: z.ZodString;
 }, z.core.$strip>;
 export type PatternEntry = z.infer<typeof patternEntry>;
 /**
- * A sub-MCP mount the caller can reach, with the tools it exposes and its
- * transport. Shares the {@link subMcpMount} shape with the registry list, adding
- * the `slug` the projection carries inline (the list keys mounts by slug instead).
+ * A sub-MCP mount the caller can reach, with the tools it exposes, its transport and
+ * its served mount URL and access pattern, and the `slug` the projection carries inline
+ * (the registry list keys mounts by slug instead).
  */
 export declare const subMcpEntry: z.ZodObject<{
+    access_pattern: z.ZodString;
+    mount_url: z.ZodString;
+    slug: z.ZodString;
     tools: z.ZodArray<z.ZodString>;
     transport: z.ZodString;
-    slug: z.ZodString;
 }, z.core.$strip>;
 export type SubMcpEntry = z.infer<typeof subMcpEntry>;
 /**
@@ -34,39 +39,44 @@ export type SubMcpEntry = z.infer<typeof subMcpEntry>;
  * session carries `admin: false` and a jq-exact `routes` list. `owner_user_id` is
  * the key's owner claim, `null` for a key with no owner claim. `principal` is the
  * caller's principal (kind + display name), `null` when no principal row backs the
- * credential. The invariant is projection ⊆ gate: every projected surface is one
+ * credential. `public_resource_id` is the deployment's reserved public marker (the
+ * route-table id a public route maps to — never a scope). The invariant is projection ⊆ gate: every projected surface is one
  * the server would admit, so the UI can filter on it without ever advertising a
  * door the gate denies.
  */
 export declare const meProjection: z.ZodObject<{
-    user_id: z.ZodString;
+    admin: z.ZodBoolean;
+    agents: z.ZodArray<z.ZodString>;
+    mintable: z.ZodBoolean;
     owner_user_id: z.ZodNullable<z.ZodString>;
-    principal: z.ZodOptional<z.ZodNullable<z.ZodObject<{
-        user_id: z.ZodString;
+    principal: z.ZodNullable<z.ZodObject<{
+        display_name: z.ZodString;
         kind: z.ZodEnum<{
             human: "human";
             service: "service";
         }>;
-        display_name: z.ZodString;
-    }, z.core.$strip>>>;
-    admin: z.ZodBoolean;
-    scopes: z.ZodArray<z.ZodString>;
-    routes: z.ZodArray<z.ZodObject<{
-        path: z.ZodString;
-        methods: z.ZodArray<z.ZodString>;
+        user_id: z.ZodString;
     }, z.core.$strip>>;
+    public_resource_id: z.ZodString;
     route_patterns: z.ZodArray<z.ZodObject<{
+        open_prefix: z.ZodNullable<z.ZodString>;
         pattern: z.ZodString;
         scope_id: z.ZodString;
     }, z.core.$strip>>;
+    routes: z.ZodArray<z.ZodObject<{
+        methods: z.ZodArray<z.ZodString>;
+        path: z.ZodString;
+    }, z.core.$strip>>;
+    scopes: z.ZodArray<z.ZodString>;
     sub_mcp: z.ZodArray<z.ZodObject<{
+        access_pattern: z.ZodString;
+        mount_url: z.ZodString;
+        slug: z.ZodString;
         tools: z.ZodArray<z.ZodString>;
         transport: z.ZodString;
-        slug: z.ZodString;
     }, z.core.$strip>>;
     tools: z.ZodArray<z.ZodString>;
-    agents: z.ZodArray<z.ZodString>;
-    mintable: z.ZodBoolean;
+    user_id: z.ZodString;
 }, z.core.$strip>;
 export type MeProjection = z.infer<typeof meProjection>;
 /**
@@ -77,8 +87,8 @@ export type MeProjection = z.infer<typeof meProjection>;
  */
 export declare const claimLinkCreated: z.ZodObject<{
     claim_path: z.ZodString;
-    token: z.ZodString;
     expires_at: z.ZodString;
+    token: z.ZodString;
 }, z.core.$strip>;
 export type ClaimLinkCreated = z.infer<typeof claimLinkCreated>;
 /**
@@ -101,8 +111,8 @@ export type LogoutResult = z.infer<typeof logoutResult>;
 export declare const authCapabilities: z.ZodObject<{
     mintable: z.ZodBoolean;
     providers: z.ZodArray<z.ZodObject<{
-        name: z.ZodString;
         mintable: z.ZodBoolean;
+        name: z.ZodString;
     }, z.core.$strip>>;
 }, z.core.$strip>;
 export type AuthCapabilities = z.infer<typeof authCapabilities>;

package/dist/schemas/capabilities.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"capabilities.d.ts","sourceRoot":"","sources":["../../src/schemas/capabilities.ts"],"names":[],"mappings":"AAAA,kEAAkE;AAClE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAKxB,sFAAsF;AACtF,eAAO,MAAM,UAAU;;;iBAGrB,CAAC;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,UAAU,CAAC,CAAC;AAEpD;;;GAGG;AACH,eAAO,MAAM,YAAY;;;iBAGvB,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAExD;;;;GAIG;AACH,eAAO,MAAM,WAAW;;;;iBAA2C,CAAC;AACpE,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC;AAEtD;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAYvB,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAExD;;;;;GAKG;AACH,eAAO,MAAM,gBAAgB;;;;iBAI3B,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAEhE;;;;;;GAMG;AACH,eAAO,MAAM,YAAY;;iBAAqC,CAAC;AAC/D,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAExD;;;;;GAKG;AACH,eAAO,MAAM,gBAAgB;;;;;;iBAG3B,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC"}
+{"version":3,"file":"capabilities.d.ts","sourceRoot":"","sources":["../../src/schemas/capabilities.ts"],"names":[],"mappings":"AAAA,kEAAkE;AAClE,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAI7B,sFAAsF;AACtF,eAAO,MAAM,UAAU;;;iBAAqB,CAAC;AAC7C,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,UAAU,CAAC,CAAC;AAEpD;;;;;GAKG;AACH,eAAO,MAAM,YAAY;;;;iBAAuB,CAAC;AACjD,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAExD;;;;GAIG;AACH,eAAO,MAAM,WAAW;;;;;;iBAAsB,CAAC;AAC/C,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC;AAEtD;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAA2B,CAAC;AACrD,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAExD;;;;;GAKG;AACH,eAAO,MAAM,gBAAgB;;;;iBAA0B,CAAC;AACxD,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAEhE;;;;;;GAMG;AACH,eAAO,MAAM,YAAY;;iBAAuB,CAAC;AACjD,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAExD;;;;;GAKG;AACH,eAAO,MAAM,gBAAgB;;;;;;iBAA2B,CAAC;AACzD,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC"}

package/dist/schemas/capabilities.js

@@ -1,26 +1,19 @@
-/** Caller capability projection and auth-capabilities schemas. */
-import { z } from 'zod';
-import { principalRef } from './principals';
-import { subMcpMount } from './sub-mcp';
+import * as openapi from '../generated/openapi-schemas';
 /** A concrete route the caller can reach, with the methods that pass its jq fence. */
-export const routeEntry = z.object({
-    path: z.string(),
-    methods: z.array(z.string()),
-});
+export const routeEntry = openapi.routeEntry;
 /**
  * A dynamic route pattern the caller can reach — a mount/pattern surface not
  * enumerable into concrete paths, projected only when its scope AND jq admit it.
+ * `open_prefix` is the literal path prefix the pattern opens, or `null` when the pattern
+ * opens none a prefix test can read.
  */
-export const patternEntry = z.object({
-    pattern: z.string(),
-    scope_id: z.string(),
-});
+export const patternEntry = openapi.patternEntry;
 /**
- * A sub-MCP mount the caller can reach, with the tools it exposes and its
- * transport. Shares the {@link subMcpMount} shape with the registry list, adding
- * the `slug` the projection carries inline (the list keys mounts by slug instead).
+ * A sub-MCP mount the caller can reach, with the tools it exposes, its transport and
+ * its served mount URL and access pattern, and the `slug` the projection carries inline
+ * (the registry list keys mounts by slug instead).
  */
-export const subMcpEntry = subMcpMount.extend({ slug: z.string() });
+export const subMcpEntry = openapi.subMcpEntry;
 /**
  * `GET /api/auth/me` — the caller's derived capability projection: the concrete
  * (path, method) surface, dynamic patterns, sub-MCP mounts, tools, and agents it
@@ -29,34 +22,19 @@ export const subMcpEntry = subMcpMount.extend({ slug: z.string() });
  * session carries `admin: false` and a jq-exact `routes` list. `owner_user_id` is
  * the key's owner claim, `null` for a key with no owner claim. `principal` is the
  * caller's principal (kind + display name), `null` when no principal row backs the
- * credential. The invariant is projection ⊆ gate: every projected surface is one
+ * credential. `public_resource_id` is the deployment's reserved public marker (the
+ * route-table id a public route maps to — never a scope). The invariant is projection ⊆ gate: every projected surface is one
  * the server would admit, so the UI can filter on it without ever advertising a
  * door the gate denies.
  */
-export const meProjection = z.object({
-    user_id: z.string(),
-    owner_user_id: z.string().nullable(),
-    principal: principalRef.nullable().optional(),
-    admin: z.boolean(),
-    scopes: z.array(z.string()),
-    routes: z.array(routeEntry),
-    route_patterns: z.array(patternEntry),
-    sub_mcp: z.array(subMcpEntry),
-    tools: z.array(z.string()),
-    agents: z.array(z.string()),
-    mintable: z.boolean(),
-});
+export const meProjection = openapi.projectionResult;
 /**
  * `POST /api/auth/claim-links` — a one-time claim link minted in the key-create
  * flow. `claim_path` is a fragment-carrier path (`/login#claim=<token>`, never an
  * absolute URL — the Studio composes the origin); `token` is the raw claim token
  * returned exactly ONCE; `expires_at` is an ISO-8601 instant.
  */
-export const claimLinkCreated = z.object({
-    claim_path: z.string(),
-    token: z.string(),
-    expires_at: z.string(),
-});
+export const claimLinkCreated = openapi.claimLinkResult;
 /**
  * `POST /api/auth/logout` — the single authed logout dispatcher's result.
  * `revoked` is `true` when a live accounts session was revoked; a plain `sk-` key
@@ -64,15 +42,12 @@ export const claimLinkCreated = z.object({
  * `revoked: false` body. Non-strict, so a SUCCESSFUL logout never throws
  * `ApiSchemaError` on an additive field.
  */
-export const logoutResult = z.object({ revoked: z.boolean() });
+export const logoutResult = openapi.logoutResult;
 /**
  * `GET /api/auth/capabilities` — whether this deployment can MINT API keys
  * locally. `mintable: false` means every configured identity provider is
  * validator-only (keys are issued at an external issuer), so the key-creation
  * UI disables up front instead of surfacing a raw mint failure. Non-strict.
  */
-export const authCapabilities = z.object({
-    mintable: z.boolean(),
-    providers: z.array(z.object({ name: z.string(), mintable: z.boolean() })),
-});
+export const authCapabilities = openapi.mintCapabilities;
 //# sourceMappingURL=capabilities.js.map

package/dist/schemas/capabilities.js.map

@@ -1 +1 @@
-{"version":3,"file":"capabilities.js","sourceRoot":"","sources":["../../src/schemas/capabilities.ts"],"names":[],"mappings":"AAAA,kEAAkE;AAClE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAExC,sFAAsF;AACtF,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;CAC7B,CAAC,CAAC;AAGH;;;GAGG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;CACrB,CAAC,CAAC;AAGH;;;;GAIG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,WAAW,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAGpE;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACpC,SAAS,EAAE,YAAY,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC7C,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE;IAClB,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC3B,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC;IAC3B,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC;IACrC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC;IAC7B,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC1B,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC3B,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;CACtB,CAAC,CAAC;AAGH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;CACvB,CAAC,CAAC;AAGH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;AAG/D;;;;;GAKG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;IACrB,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;CAC1E,CAAC,CAAC"}
+{"version":3,"file":"capabilities.js","sourceRoot":"","sources":["../../src/schemas/capabilities.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,OAAO,MAAM,8BAA8B,CAAC;AAExD,sFAAsF;AACtF,MAAM,CAAC,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;AAG7C;;;;;GAKG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;AAGjD;;;;GAIG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;AAG/C;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,OAAO,CAAC,gBAAgB,CAAC;AAGrD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,OAAO,CAAC,eAAe,CAAC;AAGxD;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;AAGjD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC"}

package/dist/schemas/channels.d.ts

@@ -1,5 +1,5 @@
 /** Installed channel-plugin catalog response schema. */
-import { z } from 'zod';
+import type { z } from 'zod';
 export declare const channels: z.ZodObject<{
     channels: z.ZodArray<z.ZodString>;
 }, z.core.$strip>;

package/dist/schemas/channels.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"channels.d.ts","sourceRoot":"","sources":["../../src/schemas/channels.ts"],"names":[],"mappings":"AAAA,wDAAwD;AACxD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAMxB,eAAO,MAAM,QAAQ;;iBAEnB,CAAC;AACH,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,QAAQ,CAAC,CAAC"}
+{"version":3,"file":"channels.d.ts","sourceRoot":"","sources":["../../src/schemas/channels.ts"],"names":[],"mappings":"AAAA,wDAAwD;AACxD,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAQ7B,eAAO,MAAM,QAAQ;;iBAAyB,CAAC;AAC/C,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,QAAQ,CAAC,CAAC"}

package/dist/schemas/channels.js

@@ -1,9 +1,6 @@
-/** Installed channel-plugin catalog response schema. */
-import { z } from 'zod';
+import * as openapi from '../generated/openapi-schemas';
 // The installed channel-plugin catalog: names registered via the manifest's
 // channel modules. A deployment with none bound answers questions only in this
 // inbox (the Studio default).
-export const channels = z.object({
-    channels: z.array(z.string()),
-});
+export const channels = openapi.channelListing;
 //# sourceMappingURL=channels.js.map

package/dist/schemas/channels.js.map

@@ -1 +1 @@
-{"version":3,"file":"channels.js","sourceRoot":"","sources":["../../src/schemas/channels.ts"],"names":[],"mappings":"AAAA,wDAAwD;AACxD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,4EAA4E;AAC5E,+EAA+E;AAC/E,8BAA8B;AAE9B,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/B,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;CAC9B,CAAC,CAAC"}
+{"version":3,"file":"channels.js","sourceRoot":"","sources":["../../src/schemas/channels.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,OAAO,MAAM,8BAA8B,CAAC;AAExD,4EAA4E;AAC5E,+EAA+E;AAC/E,8BAA8B;AAE9B,MAAM,CAAC,MAAM,QAAQ,GAAG,OAAO,CAAC,cAAc,CAAC"}

package/dist/schemas/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/schemas/config.ts"],"names":[],"mappings":"AAAA,2DAA2D;AAC3D,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,SAAS;;;iBAGpB,CAAC;AACH;;;;;;GAMG;AACH,eAAO,MAAM,UAAU;;;iBAGrB,CAAC"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/schemas/config.ts"],"names":[],"mappings":"AAAA,2DAA2D;AAC3D,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,eAAO,MAAM,SAAS;;;iBAAkB,CAAC;AAGzC;;;;;;GAMG;AACH,eAAO,MAAM,UAAU;;;iBAErB,CAAC"}

package/dist/schemas/config.js

@@ -1,9 +1,8 @@
 /** Environment-config and config-mode response schemas. */
 import { z } from 'zod';
-export const envConfig = z.object({
-    env: z.record(z.string(), z.string()),
-    secret_keys: z.array(z.string()),
-});
+import * as openapi from '../generated/openapi-schemas';
+export const envConfig = openapi.envView;
+// `read_only` is hand-written: a UI-side gate the server does not publish.
 /**
  * `GET /api/config/mode` — the active config backend mode: `file`, or an installed
  * provider's mode name such as `kubernetes`. The skeleton emits only `config_mode`;
@@ -11,8 +10,7 @@ export const envConfig = z.object({
  * so a normal response never drifts, while a genuinely read-only deployment can opt in
  * by emitting `read_only: true`.
  */
-export const configMode = z.object({
-    config_mode: z.string(),
+export const configMode = openapi.configModeView.extend({
     read_only: z.boolean().default(false),
 });
 //# sourceMappingURL=config.js.map

package/dist/schemas/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/schemas/config.ts"],"names":[],"mappings":"AAAA,2DAA2D;AAC3D,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;IACrC,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;CACjC,CAAC,CAAC;AACH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;CACtC,CAAC,CAAC"}
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/schemas/config.ts"],"names":[],"mappings":"AAAA,2DAA2D;AAC3D,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,KAAK,OAAO,MAAM,8BAA8B,CAAC;AAExD,MAAM,CAAC,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC;AAEzC,2EAA2E;AAC3E;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,OAAO,CAAC,cAAc,CAAC,MAAM,CAAC;IACtD,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;CACtC,CAAC,CAAC"}