@tai42/api-client 20.0.0 → 22.0.0

package/dist/schemas/principals.js

@@ -1,34 +1,22 @@
-/** Principal (identity) reference, row, listing and delete-result schemas. */
-import { z } from 'zod';
+import * as openapi from '../generated/openapi-schemas';
 /**
  * A compact reference to a principal — the owner of a key, or the human behind a
  * session — carried inline on payloads that name one.
  */
-export const principalRef = z.object({
-    user_id: z.string(),
-    kind: z.enum(['human', 'service']),
-    display_name: z.string(),
-});
+export const principalRef = openapi.principalRef;
 /**
- * A principal row (`/api/auth/principals`). `kind` is `human` (logs in
- * interactively) or `service` (holds keys only, never logs in). `created_by` is
- * the principal that created this one, or `null` for the owner the setup door
- * mints. `disabled` turns off every credential the principal owns. `created_at`
- * is an ISO-8601 instant.
+ * A principal's kind: `human` (logs in interactively) or `service` (holds keys only,
+ * never logs in).
  */
-export const principal = z.object({
-    user_id: z.string(),
-    kind: z.enum(['human', 'service']),
-    display_name: z.string(),
-    created_by: z.string().nullable(),
-    disabled: z.boolean(),
-    created_at: z.string(),
-});
+export const principalKind = openapi.principal.shape.kind;
+/**
+ * A principal row (`/api/auth/principals`). `created_by` is the principal that created
+ * this one, or `null` for the owner the setup door mints. `disabled` turns off every
+ * credential the principal owns. `created_at` is an ISO-8601 instant.
+ */
+export const principal = openapi.principal;
 /** The principals listing (`GET /api/auth/principals`). */
-export const principalList = z.array(principal);
+export const principalList = openapi.principalListing;
 /** The delete result (`DELETE /api/auth/principals/{user_id}`). */
-export const principalDeleted = z.object({
-    user_id: z.string(),
-    deleted: z.boolean(),
-});
+export const principalDeleted = openapi.principalDeleted;
 //# sourceMappingURL=principals.js.map

package/dist/schemas/principals.js.map

@@ -1 +1 @@
-{"version":3,"file":"principals.js","sourceRoot":"","sources":["../../src/schemas/principals.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;GAGG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAClC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;CACzB,CAAC,CAAC;AAGH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAClC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;IACxB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;IACrB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;CACvB,CAAC,CAAC;AAGH,2DAA2D;AAC3D,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;AAGhD,mEAAmE;AACnE,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;CACrB,CAAC,CAAC"}
+{"version":3,"file":"principals.js","sourceRoot":"","sources":["../../src/schemas/principals.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,OAAO,MAAM,8BAA8B,CAAC;AAExD;;;GAGG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;AAGjD;;;GAGG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC;AAG1D;;;;GAIG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;AAG3C,2DAA2D;AAC3D,MAAM,CAAC,MAAM,aAAa,GAAG,OAAO,CAAC,gBAAgB,CAAC;AAGtD,mEAAmE;AACnE,MAAM,CAAC,MAAM,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC"}

package/dist/schemas/profiles.d.ts

@@ -1,5 +1,5 @@
 /** Settings-profile record, version, diff and apply response schemas. */
-import { z } from 'zod';
+import type { z } from 'zod';
 /**
  * `GET /api/config/profiles` — one row per stored profile. The list is
  * names+descriptions ONLY (action=read); no `env`, no `secret_keys`, no bodies.
@@ -7,13 +7,13 @@ import { z } from 'zod';
  * is the `/versions` surface — so the list renders no last-modified column.)
  */
 export declare const settingsProfileSummary: z.ZodObject<{
-    name: z.ZodString;
     description: z.ZodString;
+    name: z.ZodString;
 }, z.core.$strip>;
 export type SettingsProfileSummary = z.infer<typeof settingsProfileSummary>;
 export declare const settingsProfileList: z.ZodArray<z.ZodObject<{
-    name: z.ZodString;
     description: z.ZodString;
+    name: z.ZodString;
 }, z.core.$strip>>;
 /**
  * `GET /api/config/profiles/{name}` and each version body — the stored profile
@@ -21,24 +21,27 @@ export declare const settingsProfileList: z.ZodArray<z.ZodObject<{
  * per-profile secret-marks band folded into the secret-mask union for masking.
  */
 export declare const settingsProfileBody: z.ZodObject<{
-    description: z.ZodString;
-    env: z.ZodRecord<z.ZodString, z.ZodString>;
-    secret_keys: z.ZodArray<z.ZodString>;
+    description: z.ZodDefault<z.ZodString>;
+    env: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+    secret_keys: z.ZodDefault<z.ZodArray<z.ZodString>>;
 }, z.core.$strip>;
 export type SettingsProfileBody = z.infer<typeof settingsProfileBody>;
 /** `PUT /api/config/profiles/{name}` — a minimal save ack; `version` is the new store version. */
 export declare const settingsProfileSaved: z.ZodObject<{
-    ok: z.ZodLiteral<true>;
-    version: z.ZodOptional<z.ZodNumber>;
+    ok: z.ZodBoolean;
+    version: z.ZodNumber;
 }, z.core.$strip>;
 export type SettingsProfileSaved = z.infer<typeof settingsProfileSaved>;
 /** `DELETE /api/config/profiles/{name}` — a minimal removal ack. */
 export declare const settingsProfileDeleted: z.ZodObject<{
-    ok: z.ZodLiteral<true>;
+    ok: z.ZodBoolean;
 }, z.core.$strip>;
-/** `POST /api/config/profiles/{name}/rollback` — the restore ack; `version` is the resulting active version. */
+/**
+ * `POST /api/config/profiles/{name}/rollback` — the restore ack; `version` is the resulting
+ * active version.
+ */
 export declare const settingsProfileRollback: z.ZodObject<{
-    ok: z.ZodLiteral<true>;
+    ok: z.ZodBoolean;
     version: z.ZodNumber;
 }, z.core.$strip>;
 export type SettingsProfileRollback = z.infer<typeof settingsProfileRollback>;
@@ -50,14 +53,14 @@ export type SettingsProfileRollback = z.infer<typeof settingsProfileRollback>;
  */
 export declare const settingsProfileDiff: z.ZodObject<{
     added: z.ZodArray<z.ZodString>;
-    removed: z.ZodArray<z.ZodString>;
     changed: z.ZodArray<z.ZodObject<{
         key: z.ZodString;
-        old: z.ZodString;
         new: z.ZodString;
+        old: z.ZodString;
     }, z.core.$strip>>;
     recycle_keys: z.ZodArray<z.ZodString>;
     refused_keys: z.ZodArray<z.ZodString>;
+    removed: z.ZodArray<z.ZodString>;
 }, z.core.$strip>;
 export type SettingsProfileDiff = z.infer<typeof settingsProfileDiff>;
 /**
@@ -69,75 +72,84 @@ export type SettingsProfileDiff = z.infer<typeof settingsProfileDiff>;
  * the `self-deferred` status literal when the diff has serve-affecting recycle keys;
  * `fresh` is the per-kind list of NEW ready lives observed since the pre-apply snapshot
  * (each `{name, kind, generation}`), evidence of fresh capacity and never claimed as any
- * target's successor; `refused` is `[]` on success by construction (populated
- * `{key, reason}` only on a refusal), the populated refusal surfaces being the diff
- * preview and the refusal error report. `fanout` is the mode-wrapped fleet broadcast,
- * parsed EXPLICITLY so a failed propagation reaches the shared fleet-report handler. A
- * drift throws `ApiSchemaError`.
+ * target's successor; `refused` is `[]` on success by construction (the refused key
+ * names only on a refusal), the populated refusal surfaces being the diff preview and
+ * the refusal error report; `recycle_stopped` names the target a stopped recycle roll
+ * halted at, or is `null` when the roll ran to its end; `awaiting_respawn` names the
+ * workers (name + keys) still awaiting a respawn after the apply (empty when the roll
+ * converged). `fanout` is the mode-wrapped fleet broadcast, parsed EXPLICITLY so a failed
+ * propagation reaches the shared fleet-report handler. A drift throws `ApiSchemaError`.
  */
 export declare const profileApplyResponse: z.ZodObject<{
+    awaiting_respawn: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        keys: z.ZodArray<z.ZodString>;
+        name: z.ZodString;
+    }, z.core.$strip>>>;
+    fresh: z.ZodArray<z.ZodObject<{
+        generation: z.ZodNumber;
+        kind: z.ZodString;
+        name: z.ZodString;
+    }, z.core.$strip>>;
     hot: z.ZodArray<z.ZodString>;
     recycle: z.ZodArray<z.ZodObject<{
-        name: z.ZodString;
+        detail: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        generation_before: z.ZodNumber;
         kind: z.ZodString;
+        name: z.ZodString;
         status: z.ZodString;
-        generation_before: z.ZodNumber;
     }, z.core.$strip>>;
-    fresh: z.ZodArray<z.ZodObject<{
-        name: z.ZodString;
+    recycle_stopped: z.ZodDefault<z.ZodNullable<z.ZodObject<{
+        detail: z.ZodString;
         kind: z.ZodString;
-        generation: z.ZodNumber;
-    }, z.core.$strip>>;
-    refused: z.ZodArray<z.ZodObject<{
-        key: z.ZodString;
-        reason: z.ZodString;
-    }, z.core.$strip>>;
+        name: z.ZodNullable<z.ZodString>;
+    }, z.core.$strip>>>;
+    refused: z.ZodArray<z.ZodString>;
     fanout: z.ZodDiscriminatedUnion<[z.ZodObject<{
         mode: z.ZodLiteral<"local-only">;
         note: z.ZodString;
     }, z.core.$strip>, z.ZodObject<{
+        error: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        local_only: z.ZodDefault<z.ZodBoolean>;
         op: z.ZodString;
-        reachable: z.ZodBoolean;
-        local_only: z.ZodBoolean;
-        results: z.ZodArray<z.ZodObject<{
+        reachable: z.ZodDefault<z.ZodBoolean>;
+        results: z.ZodDefault<z.ZodArray<z.ZodObject<{
+            detail: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+            error: z.ZodDefault<z.ZodNullable<z.ZodString>>;
             name: z.ZodString;
             outcome: z.ZodEnum<{
-                failed: "failed";
                 applied: "applied";
-                resyncing: "resyncing";
-                recycling: "recycling";
-                stale: "stale";
+                failed: "failed";
                 missing: "missing";
                 departed: "departed";
                 timed_out: "timed_out";
+                resyncing: "resyncing";
+                recycling: "recycling";
+                stale: "stale";
             }>;
-            payload: z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>;
-            error: z.ZodNullable<z.ZodString>;
-            detail: z.ZodNullable<z.ZodString>;
-        }, z.core.$strip>>;
-        error: z.ZodNullable<z.ZodString>;
+            payload: z.ZodDefault<z.ZodNullable<z.ZodUnknown>>;
+        }, z.core.$strip>>>;
         mode: z.ZodLiteral<"fleet">;
     }, z.core.$strip>, z.ZodObject<{
+        error: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        local_only: z.ZodDefault<z.ZodBoolean>;
         op: z.ZodString;
-        reachable: z.ZodBoolean;
-        local_only: z.ZodBoolean;
-        results: z.ZodArray<z.ZodObject<{
+        reachable: z.ZodDefault<z.ZodBoolean>;
+        results: z.ZodDefault<z.ZodArray<z.ZodObject<{
+            detail: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+            error: z.ZodDefault<z.ZodNullable<z.ZodString>>;
             name: z.ZodString;
             outcome: z.ZodEnum<{
-                failed: "failed";
                 applied: "applied";
-                resyncing: "resyncing";
-                recycling: "recycling";
-                stale: "stale";
+                failed: "failed";
                 missing: "missing";
                 departed: "departed";
                 timed_out: "timed_out";
+                resyncing: "resyncing";
+                recycling: "recycling";
+                stale: "stale";
             }>;
-            payload: z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>;
-            error: z.ZodNullable<z.ZodString>;
-            detail: z.ZodNullable<z.ZodString>;
-        }, z.core.$strip>>;
-        error: z.ZodNullable<z.ZodString>;
+            payload: z.ZodDefault<z.ZodNullable<z.ZodUnknown>>;
+        }, z.core.$strip>>>;
         mode: z.ZodLiteral<"unreachable">;
     }, z.core.$strip>], "mode">;
 }, z.core.$strip>;
@@ -148,17 +160,17 @@ export type ProfileApplyResponse = z.infer<typeof profileApplyResponse>;
  * active pointer.
  */
 export declare const settingsProfileVersionMeta: z.ZodObject<{
-    version: z.ZodNumber;
-    tags: z.ZodArray<z.ZodString>;
     created_at: z.ZodString;
     is_current: z.ZodBoolean;
+    tags: z.ZodArray<z.ZodString>;
+    version: z.ZodNumber;
 }, z.core.$strip>;
 export type SettingsProfileVersionMeta = z.infer<typeof settingsProfileVersionMeta>;
 export declare const settingsProfileVersionList: z.ZodArray<z.ZodObject<{
-    version: z.ZodNumber;
-    tags: z.ZodArray<z.ZodString>;
     created_at: z.ZodString;
     is_current: z.ZodBoolean;
+    tags: z.ZodArray<z.ZodString>;
+    version: z.ZodNumber;
 }, z.core.$strip>>;
 /**
  * `GET /api/config/profiles/{name}/versions/{version}` — one immutable version WITH
@@ -166,15 +178,15 @@ export declare const settingsProfileVersionList: z.ZodArray<z.ZodObject<{
  * versioned-store row shape.
  */
 export declare const settingsProfileVersion: z.ZodObject<{
-    version: z.ZodNumber;
-    tags: z.ZodArray<z.ZodString>;
-    created_at: z.ZodString;
-    is_current: z.ZodBoolean;
     body: z.ZodObject<{
-        description: z.ZodString;
-        env: z.ZodRecord<z.ZodString, z.ZodString>;
-        secret_keys: z.ZodArray<z.ZodString>;
+        description: z.ZodDefault<z.ZodString>;
+        env: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+        secret_keys: z.ZodDefault<z.ZodArray<z.ZodString>>;
     }, z.core.$strip>;
+    created_at: z.ZodString;
+    is_current: z.ZodBoolean;
+    tags: z.ZodArray<z.ZodString>;
+    version: z.ZodNumber;
 }, z.core.$strip>;
 export type SettingsProfileVersion = z.infer<typeof settingsProfileVersion>;
 //# sourceMappingURL=profiles.d.ts.map

package/dist/schemas/profiles.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"profiles.d.ts","sourceRoot":"","sources":["../../src/schemas/profiles.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAQxB;;;;;GAKG;AACH,eAAO,MAAM,sBAAsB;;;iBAGjC,CAAC;AACH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAC5E,eAAO,MAAM,mBAAmB;;;kBAAkC,CAAC;AAEnE;;;;GAIG;AACH,eAAO,MAAM,mBAAmB;;;;iBAI9B,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEtE,kGAAkG;AAClG,eAAO,MAAM,oBAAoB;;;iBAG/B,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAExE,oEAAoE;AACpE,eAAO,MAAM,sBAAsB;;iBAAoC,CAAC;AAExE,gHAAgH;AAChH,eAAO,MAAM,uBAAuB;;;iBAGlC,CAAC;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAE9E;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB;;;;;;;;;;iBAM9B,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEtE;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAa/B,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAExE;;;;GAIG;AACH,eAAO,MAAM,0BAA0B;;;;;iBAKrC,CAAC;AACH,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AACpF,eAAO,MAAM,0BAA0B;;;;;kBAAsC,CAAC;AAE9E;;;;GAIG;AACH,eAAO,MAAM,sBAAsB;;;;;;;;;;iBAEjC,CAAC;AACH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC"}
+{"version":3,"file":"profiles.d.ts","sourceRoot":"","sources":["../../src/schemas/profiles.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAS7B;;;;;GAKG;AACH,eAAO,MAAM,sBAAsB;;;iBAAyB,CAAC;AAC7D,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAC5E,eAAO,MAAM,mBAAmB;;;kBAA8B,CAAC;AAE/D;;;;GAIG;AACH,eAAO,MAAM,mBAAmB;;;;iBAA8B,CAAC;AAC/D,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEtE,kGAAkG;AAClG,eAAO,MAAM,oBAAoB;;;iBAA6B,CAAC;AAC/D,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAExE,oEAAoE;AACpE,eAAO,MAAM,sBAAsB;;iBAAmB,CAAC;AAEvD;;;GAGG;AACH,eAAO,MAAM,uBAAuB;;;iBAA6B,CAAC;AAClE,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAE9E;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB;;;;;;;;;;iBAAsB,CAAC;AACvD,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEtE;;;;;;;;;;;;;;;;GAgBG;AAEH,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAE/B,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAExE;;;;GAIG;AACH,eAAO,MAAM,0BAA0B;;;;;iBAAgC,CAAC;AACxE,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AACpF,eAAO,MAAM,0BAA0B;;;;;kBAAqC,CAAC;AAE7E;;;;GAIG;AACH,eAAO,MAAM,sBAAsB;;;;;;;;;;iBAA6B,CAAC;AACjE,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC"}

package/dist/schemas/profiles.js

@@ -1,5 +1,4 @@
-/** Settings-profile record, version, diff and apply response schemas. */
-import { z } from 'zod';
+import * as openapi from '../generated/openapi-schemas';
 import { fleetReportFanout } from './fleet';
 // The admin-only `/api/config/profiles/*` surface. Secrets ride the wire in the
 // clear (secret/fenced routes); masking is CLIENT-SIDE per the secret-mask union. A drift
@@ -10,46 +9,30 @@ import { fleetReportFanout } from './fleet';
  * (No `last_modified`: the list carries identity, not history — version metadata
  * is the `/versions` surface — so the list renders no last-modified column.)
  */
-export const settingsProfileSummary = z.object({
-    name: z.string(),
-    description: z.string(),
-});
-export const settingsProfileList = z.array(settingsProfileSummary);
+export const settingsProfileSummary = openapi.profileSummary;
+export const settingsProfileList = openapi.profileListResponse;
 /**
  * `GET /api/config/profiles/{name}` and each version body — the stored profile
  * document (action=secret). `env` carries REAL values; `secret_keys` is the
  * per-profile secret-marks band folded into the secret-mask union for masking.
  */
-export const settingsProfileBody = z.object({
-    description: z.string(),
-    env: z.record(z.string(), z.string()),
-    secret_keys: z.array(z.string()),
-});
+export const settingsProfileBody = openapi.settingsProfileBody;
 /** `PUT /api/config/profiles/{name}` — a minimal save ack; `version` is the new store version. */
-export const settingsProfileSaved = z.object({
-    ok: z.literal(true),
-    version: z.number().optional(),
-});
+export const settingsProfileSaved = openapi.profileWriteResult;
 /** `DELETE /api/config/profiles/{name}` — a minimal removal ack. */
-export const settingsProfileDeleted = z.object({ ok: z.literal(true) });
-/** `POST /api/config/profiles/{name}/rollback` — the restore ack; `version` is the resulting active version. */
-export const settingsProfileRollback = z.object({
-    ok: z.literal(true),
-    version: z.number(),
-});
+export const settingsProfileDeleted = openapi.okResult;
+/**
+ * `POST /api/config/profiles/{name}/rollback` — the restore ack; `version` is the resulting
+ * active version.
+ */
+export const settingsProfileRollback = openapi.profileWriteResult;
 /**
  * `POST /api/config/profiles/{name}/diff` — the SAVED profile vs the stored env
  * (action=secret). `changed` carries real `old`/`new` values (UI masks via
  * JsonDiff); `recycle_keys`/`refused_keys` are the diff's recycle-class and
  * boundary-refused key names, called out in the UI before apply.
  */
-export const settingsProfileDiff = z.object({
-    added: z.array(z.string()),
-    removed: z.array(z.string()),
-    changed: z.array(z.object({ key: z.string(), old: z.string(), new: z.string() })),
-    recycle_keys: z.array(z.string()),
-    refused_keys: z.array(z.string()),
-});
+export const settingsProfileDiff = openapi.profileDiff;
 /**
  * `POST /api/config/profiles/{name}/apply` — the dedicated `profile_apply_response`
  * (action=fenced, destructive). NAMES-ONLY (no env value in any
@@ -59,22 +42,16 @@ export const settingsProfileDiff = z.object({
  * the `self-deferred` status literal when the diff has serve-affecting recycle keys;
  * `fresh` is the per-kind list of NEW ready lives observed since the pre-apply snapshot
  * (each `{name, kind, generation}`), evidence of fresh capacity and never claimed as any
- * target's successor; `refused` is `[]` on success by construction (populated
- * `{key, reason}` only on a refusal), the populated refusal surfaces being the diff
- * preview and the refusal error report. `fanout` is the mode-wrapped fleet broadcast,
- * parsed EXPLICITLY so a failed propagation reaches the shared fleet-report handler. A
- * drift throws `ApiSchemaError`.
+ * target's successor; `refused` is `[]` on success by construction (the refused key
+ * names only on a refusal), the populated refusal surfaces being the diff preview and
+ * the refusal error report; `recycle_stopped` names the target a stopped recycle roll
+ * halted at, or is `null` when the roll ran to its end; `awaiting_respawn` names the
+ * workers (name + keys) still awaiting a respawn after the apply (empty when the roll
+ * converged). `fanout` is the mode-wrapped fleet broadcast, parsed EXPLICITLY so a failed
+ * propagation reaches the shared fleet-report handler. A drift throws `ApiSchemaError`.
  */
-export const profileApplyResponse = z.object({
-    hot: z.array(z.string()),
-    recycle: z.array(z.object({
-        name: z.string(),
-        kind: z.string(),
-        status: z.string(),
-        generation_before: z.number(),
-    })),
-    fresh: z.array(z.object({ name: z.string(), kind: z.string(), generation: z.number() })),
-    refused: z.array(z.object({ key: z.string(), reason: z.string() })),
+// The fan-out is hand-typed: the spec publishes it as one object with optional fields.
+export const profileApplyResponse = openapi.profileApplyResponse.extend({
     fanout: fleetReportFanout,
 });
 /**
@@ -82,19 +59,12 @@ export const profileApplyResponse = z.object({
  * no bodies), the generic versioned-store row minus `body`. `is_current` flags the
  * active pointer.
  */
-export const settingsProfileVersionMeta = z.object({
-    version: z.number(),
-    tags: z.array(z.string()),
-    created_at: z.string(),
-    is_current: z.boolean(),
-});
-export const settingsProfileVersionList = z.array(settingsProfileVersionMeta);
+export const settingsProfileVersionMeta = openapi.profileVersionSummary;
+export const settingsProfileVersionList = openapi.profileVersionListResponse;
 /**
  * `GET /api/config/profiles/{name}/versions/{version}` — one immutable version WITH
  * its `body` (action=secret; body rendered masked per the secret-mask union). The generic
  * versioned-store row shape.
  */
-export const settingsProfileVersion = settingsProfileVersionMeta.extend({
-    body: settingsProfileBody,
-});
+export const settingsProfileVersion = openapi.profileVersionView;
 //# sourceMappingURL=profiles.js.map

package/dist/schemas/profiles.js.map

@@ -1 +1 @@
-{"version":3,"file":"profiles.js","sourceRoot":"","sources":["../../src/schemas/profiles.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AAE5C,gFAAgF;AAChF,0FAA0F;AAC1F,2CAA2C;AAE3C;;;;;GAKG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;CACxB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;AAEnE;;;;GAIG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;IACrC,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;CACjC,CAAC,CAAC;AAGH,kGAAkG;AAClG,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;IACnB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC/B,CAAC,CAAC;AAGH,oEAAoE;AACpE,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAExE,gHAAgH;AAChH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;IACnB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;CACpB,CAAC,CAAC;AAGH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC1B,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC5B,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACjF,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACjC,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;CAClC,CAAC,CAAC;AAGH;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACxB,OAAO,EAAE,CAAC,CAAC,KAAK,CACd,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;QAClB,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE;KAC9B,CAAC,CACH;IACD,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACxF,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACnE,MAAM,EAAE,iBAAiB;CAC1B,CAAC,CAAC;AAGH;;;;GAIG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACzB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE;CACxB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;AAE9E;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,0BAA0B,CAAC,MAAM,CAAC;IACtE,IAAI,EAAE,mBAAmB;CAC1B,CAAC,CAAC"}
+{"version":3,"file":"profiles.js","sourceRoot":"","sources":["../../src/schemas/profiles.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,OAAO,MAAM,8BAA8B,CAAC;AACxD,OAAO,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AAE5C,gFAAgF;AAChF,0FAA0F;AAC1F,2CAA2C;AAE3C;;;;;GAKG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,OAAO,CAAC,cAAc,CAAC;AAE7D,MAAM,CAAC,MAAM,mBAAmB,GAAG,OAAO,CAAC,mBAAmB,CAAC;AAE/D;;;;GAIG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,OAAO,CAAC,mBAAmB,CAAC;AAG/D,kGAAkG;AAClG,MAAM,CAAC,MAAM,oBAAoB,GAAG,OAAO,CAAC,kBAAkB,CAAC;AAG/D,oEAAoE;AACpE,MAAM,CAAC,MAAM,sBAAsB,GAAG,OAAO,CAAC,QAAQ,CAAC;AAEvD;;;GAGG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,OAAO,CAAC,kBAAkB,CAAC;AAGlE;;;;;GAKG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,OAAO,CAAC,WAAW,CAAC;AAGvD;;;;;;;;;;;;;;;;GAgBG;AACH,uFAAuF;AACvF,MAAM,CAAC,MAAM,oBAAoB,GAAG,OAAO,CAAC,oBAAoB,CAAC,MAAM,CAAC;IACtE,MAAM,EAAE,iBAAiB;CAC1B,CAAC,CAAC;AAGH;;;;GAIG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,OAAO,CAAC,qBAAqB,CAAC;AAExE,MAAM,CAAC,MAAM,0BAA0B,GAAG,OAAO,CAAC,0BAA0B,CAAC;AAE7E;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,OAAO,CAAC,kBAAkB,CAAC"}

package/dist/schemas/roles.d.ts

@@ -16,12 +16,12 @@ export declare const roleGrants: z.ZodRecord<z.ZodString, z.ZodEnum<{
 export type RoleGrants = z.infer<typeof roleGrants>;
 export declare const roleList: z.ZodArray<z.ZodObject<{
     allow_all: z.ZodDefault<z.ZodBoolean>;
-    base_tier: z.ZodDefault<z.ZodUnion<readonly [z.ZodString, z.ZodNull]>>;
-    condition: z.ZodDefault<z.ZodUnion<readonly [z.ZodObject<{
+    base_tier: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+    condition: z.ZodDefault<z.ZodNullable<z.ZodObject<{
         content: z.ZodOptional<z.ZodString>;
         id: z.ZodOptional<z.ZodString>;
         kwargs: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
-    }, z.core.$strict>, z.ZodNull]>>;
+    }, z.core.$strict>>>;
     description: z.ZodString;
     grants: z.ZodRecord<z.ZodString, z.ZodEnum<{
         none: "none";
@@ -33,8 +33,8 @@ export declare const roleList: z.ZodArray<z.ZodObject<{
 }, z.core.$strip>>;
 /** `DELETE /api/auth/roles/{name}` — the deleted role's name. */
 export declare const roleDeleted: z.ZodObject<{
-    name: z.ZodString;
     deleted: z.ZodBoolean;
+    name: z.ZodString;
 }, z.core.$strip>;
 /**
  * One immutable role-version row (`GET /api/auth/roles/{name}/versions` →
@@ -42,15 +42,18 @@ export declare const roleDeleted: z.ZodObject<{
  * active pointer. Mirrors the generic versioned-store row shape.
  */
 export declare const roleVersion: z.ZodObject<{
+    created_at: z.ZodString;
+    is_current: z.ZodDefault<z.ZodBoolean>;
+    tags: z.ZodDefault<z.ZodArray<z.ZodString>>;
     version: z.ZodNumber;
     body: z.ZodObject<{
         allow_all: z.ZodDefault<z.ZodBoolean>;
-        base_tier: z.ZodDefault<z.ZodUnion<readonly [z.ZodString, z.ZodNull]>>;
-        condition: z.ZodDefault<z.ZodUnion<readonly [z.ZodObject<{
+        base_tier: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        condition: z.ZodDefault<z.ZodNullable<z.ZodObject<{
             content: z.ZodOptional<z.ZodString>;
             id: z.ZodOptional<z.ZodString>;
             kwargs: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
-        }, z.core.$strict>, z.ZodNull]>>;
+        }, z.core.$strict>>>;
         description: z.ZodString;
         grants: z.ZodRecord<z.ZodString, z.ZodEnum<{
             none: "none";
@@ -60,9 +63,6 @@ export declare const roleVersion: z.ZodObject<{
         name: z.ZodString;
         scopes: z.ZodDefault<z.ZodArray<z.ZodString>>;
     }, z.core.$strip>;
-    tags: z.ZodArray<z.ZodString>;
-    created_at: z.ZodString;
-    is_current: z.ZodBoolean;
 }, z.core.$strip>;
 export type RoleVersion = z.infer<typeof roleVersion>;
 /**
@@ -71,6 +71,9 @@ export type RoleVersion = z.infer<typeof roleVersion>;
  * role bodies (both `null` for a create's `before` / a delete's `after`).
  */
 export declare const roleAuditEvent: z.ZodObject<{
+    created_at: z.ZodString;
+    is_current: z.ZodDefault<z.ZodBoolean>;
+    tags: z.ZodDefault<z.ZodArray<z.ZodString>>;
     version: z.ZodNumber;
     body: z.ZodObject<{
         action: z.ZodString;
@@ -78,23 +81,23 @@ export declare const roleAuditEvent: z.ZodObject<{
         before: z.ZodNullable<z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>;
         after: z.ZodNullable<z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>;
     }, z.core.$strip>;
-    tags: z.ZodArray<z.ZodString>;
-    created_at: z.ZodString;
-    is_current: z.ZodBoolean;
 }, z.core.$strip>;
 export type RoleAuditEvent = z.infer<typeof roleAuditEvent>;
 /** `GET /api/auth/roles/{name}/versions` — the append-only history + audit trail. */
 export declare const roleVersions: z.ZodObject<{
     versions: z.ZodArray<z.ZodObject<{
+        created_at: z.ZodString;
+        is_current: z.ZodDefault<z.ZodBoolean>;
+        tags: z.ZodDefault<z.ZodArray<z.ZodString>>;
         version: z.ZodNumber;
         body: z.ZodObject<{
             allow_all: z.ZodDefault<z.ZodBoolean>;
-            base_tier: z.ZodDefault<z.ZodUnion<readonly [z.ZodString, z.ZodNull]>>;
-            condition: z.ZodDefault<z.ZodUnion<readonly [z.ZodObject<{
+            base_tier: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+            condition: z.ZodDefault<z.ZodNullable<z.ZodObject<{
                 content: z.ZodOptional<z.ZodString>;
                 id: z.ZodOptional<z.ZodString>;
                 kwargs: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
-            }, z.core.$strict>, z.ZodNull]>>;
+            }, z.core.$strict>>>;
             description: z.ZodString;
             grants: z.ZodRecord<z.ZodString, z.ZodEnum<{
                 none: "none";
@@ -104,11 +107,11 @@ export declare const roleVersions: z.ZodObject<{
             name: z.ZodString;
             scopes: z.ZodDefault<z.ZodArray<z.ZodString>>;
         }, z.core.$strip>;
-        tags: z.ZodArray<z.ZodString>;
-        created_at: z.ZodString;
-        is_current: z.ZodBoolean;
     }, z.core.$strip>>;
     audit: z.ZodArray<z.ZodObject<{
+        created_at: z.ZodString;
+        is_current: z.ZodDefault<z.ZodBoolean>;
+        tags: z.ZodDefault<z.ZodArray<z.ZodString>>;
         version: z.ZodNumber;
         body: z.ZodObject<{
             action: z.ZodString;
@@ -116,9 +119,6 @@ export declare const roleVersions: z.ZodObject<{
             before: z.ZodNullable<z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>;
             after: z.ZodNullable<z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>;
         }, z.core.$strip>;
-        tags: z.ZodArray<z.ZodString>;
-        created_at: z.ZodString;
-        is_current: z.ZodBoolean;
     }, z.core.$strip>>;
 }, z.core.$strip>;
 export type RoleVersions = z.infer<typeof roleVersions>;

package/dist/schemas/roles.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"roles.d.ts","sourceRoot":"","sources":["../../src/schemas/roles.ts"],"names":[],"mappings":"AAAA,sDAAsD;AACtD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAKxB,6EAA6E;AAC7E,eAAO,MAAM,UAAU;;;;EAAoC,CAAC;AAC5D,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,UAAU,CAAC,CAAC;AAEpD,qFAAqF;AACrF,eAAO,MAAM,UAAU;;;;GAAmC,CAAC;AAC3D,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,UAAU,CAAC,CAAC;AAEpD,eAAO,MAAM,QAAQ;;;;;;;;;;;;;;;;kBAAoB,CAAC;AAE1C,iEAAiE;AACjE,eAAO,MAAM,WAAW;;;iBAAuD,CAAC;AAEhF;;;;GAIG;AACH,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;iBAMtB,CAAC;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC;AAEtD;;;;GAIG;AACH,eAAO,MAAM,cAAc;;;;;;;;;;;iBAWzB,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAE5D,qFAAqF;AACrF,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAGvB,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC"}
+{"version":3,"file":"roles.d.ts","sourceRoot":"","sources":["../../src/schemas/roles.ts"],"names":[],"mappings":"AAAA,sDAAsD;AACtD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAMxB,6EAA6E;AAC7E,eAAO,MAAM,UAAU;;;;EAAkC,CAAC;AAC1D,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,UAAU,CAAC,CAAC;AAEpD,qFAAqF;AACrF,eAAO,MAAM,UAAU;;;;GAAwB,CAAC;AAChD,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,UAAU,CAAC,CAAC;AAEpD,eAAO,MAAM,QAAQ;;;;;;;;;;;;;;;;kBAA6B,CAAC;AAEnD,iEAAiE;AACjE,eAAO,MAAM,WAAW;;;iBAAsB,CAAC;AAK/C;;;;GAIG;AACH,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;iBAAqD,CAAC;AAC9E,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC;AAEtD;;;;GAIG;AACH,eAAO,MAAM,cAAc;;;;;;;;;;;iBAOzB,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAE5D,qFAAqF;AACrF,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAGvB,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC"}

package/dist/schemas/roles.js

@@ -1,45 +1,38 @@
 /** Role grant, version and audit response schemas. */
 import { z } from 'zod';
+import * as openapi from '../generated/openapi-schemas';
 import { roleBody } from './served';
 import { jsonValue } from './shared';
 /** A role's per-tag ACCESS LEVEL: `none` (no access), `read`, or `write`. */
-export const grantLevel = z.enum(['none', 'read', 'write']);
+export const grantLevel = roleBody.shape.grants.valueType;
 /** A role's editable grant map: feature-group TAG name → the role's access level. */
-export const roleGrants = z.record(z.string(), grantLevel);
-export const roleList = z.array(roleBody);
+export const roleGrants = roleBody.shape.grants;
+export const roleList = openapi.roleDefinitionList;
 /** `DELETE /api/auth/roles/{name}` — the deleted role's name. */
-export const roleDeleted = z.object({ name: z.string(), deleted: z.boolean() });
+export const roleDeleted = openapi.roleDeleted;
+// The version and audit bodies are hand-typed: the spec publishes a version body as an open
+// object.
 /**
  * One immutable role-version row (`GET /api/auth/roles/{name}/versions` →
  * `versions`). `body` is the role body at that version; `is_current` flags the
  * active pointer. Mirrors the generic versioned-store row shape.
  */
-export const roleVersion = z.object({
-    version: z.number(),
-    body: roleBody,
-    tags: z.array(z.string()),
-    created_at: z.string(),
-    is_current: z.boolean(),
-});
+export const roleVersion = openapi.documentVersion.extend({ body: roleBody });
 /**
  * One who/action/before→after audit row (`GET /api/auth/roles/{name}/versions` →
  * `audit`). Its `body` carries the mutation kind, the actor, and the before/after
  * role bodies (both `null` for a create's `before` / a delete's `after`).
  */
-export const roleAuditEvent = z.object({
-    version: z.number(),
+export const roleAuditEvent = openapi.documentVersion.extend({
     body: z.object({
         action: z.string(),
         actor: z.string().nullable(),
         before: jsonValue.nullable(),
         after: jsonValue.nullable(),
     }),
-    tags: z.array(z.string()),
-    created_at: z.string(),
-    is_current: z.boolean(),
 });
 /** `GET /api/auth/roles/{name}/versions` — the append-only history + audit trail. */
-export const roleVersions = z.object({
+export const roleVersions = openapi.roleVersionsView.extend({
     versions: z.array(roleVersion),
     audit: z.array(roleAuditEvent),
 });

package/dist/schemas/roles.js.map

@@ -1 +1 @@
-{"version":3,"file":"roles.js","sourceRoot":"","sources":["../../src/schemas/roles.ts"],"names":[],"mappings":"AAAA,sDAAsD;AACtD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AACpC,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAErC,6EAA6E;AAC7E,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;AAG5D,qFAAqF;AACrF,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,UAAU,CAAC,CAAC;AAG3D,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;AAE1C,iEAAiE;AACjE,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;AAEhF;;;;GAIG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,IAAI,EAAE,QAAQ;IACd,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACzB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE;CACxB,CAAC,CAAC;AAGH;;;;GAIG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;QACb,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;QAClB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC5B,MAAM,EAAE,SAAS,CAAC,QAAQ,EAAE;QAC5B,KAAK,EAAE,SAAS,CAAC,QAAQ,EAAE;KAC5B,CAAC;IACF,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACzB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE;CACxB,CAAC,CAAC;AAGH,qFAAqF;AACrF,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC;IAC9B,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC;CAC/B,CAAC,CAAC"}
+{"version":3,"file":"roles.js","sourceRoot":"","sources":["../../src/schemas/roles.ts"],"names":[],"mappings":"AAAA,sDAAsD;AACtD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,KAAK,OAAO,MAAM,8BAA8B,CAAC;AACxD,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AACpC,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAErC,6EAA6E;AAC7E,MAAM,CAAC,MAAM,UAAU,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC;AAG1D,qFAAqF;AACrF,MAAM,CAAC,MAAM,UAAU,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;AAGhD,MAAM,CAAC,MAAM,QAAQ,GAAG,OAAO,CAAC,kBAAkB,CAAC;AAEnD,iEAAiE;AACjE,MAAM,CAAC,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;AAE/C,4FAA4F;AAC5F,UAAU;AAEV;;;;GAIG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,OAAO,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;AAG9E;;;;GAIG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,OAAO,CAAC,eAAe,CAAC,MAAM,CAAC;IAC3D,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;QACb,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;QAClB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC5B,MAAM,EAAE,SAAS,CAAC,QAAQ,EAAE;QAC5B,KAAK,EAAE,SAAS,CAAC,QAAQ,EAAE;KAC5B,CAAC;CACH,CAAC,CAAC;AAGH,qFAAqF;AACrF,MAAM,CAAC,MAAM,YAAY,GAAG,OAAO,CAAC,gBAAgB,CAAC,MAAM,CAAC;IAC1D,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC;IAC9B,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC;CAC/B,CAAC,CAAC"}