@tokensrc/codex 1.14.16 → 1.14.18

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (66) hide show
  1. package/README.md +73 -71
  2. package/dist/client.d.ts +21 -16
  3. package/dist/client.js +198 -116
  4. package/dist/client.js.map +1 -1
  5. package/dist/command-directory.js +3 -2
  6. package/dist/command-directory.js.map +1 -1
  7. package/dist/commands.d.ts +0 -1
  8. package/dist/commands.js +479 -273
  9. package/dist/commands.js.map +1 -1
  10. package/dist/credentials.d.ts +3 -75
  11. package/dist/credentials.js +2 -338
  12. package/dist/credentials.js.map +1 -1
  13. package/dist/index.d.ts +2 -8
  14. package/dist/index.js +2 -8
  15. package/dist/index.js.map +1 -1
  16. package/dist/managed-credential-v3-envelope.d.ts +38 -14
  17. package/dist/managed-credential-v3-envelope.js +116 -25
  18. package/dist/managed-credential-v3-envelope.js.map +1 -1
  19. package/dist/managed-credential-v3-flow.d.ts +0 -17
  20. package/dist/managed-credential-v3-flow.js +107 -110
  21. package/dist/managed-credential-v3-flow.js.map +1 -1
  22. package/dist/managed-credential-v3.d.ts +0 -8
  23. package/dist/managed-credential-v3.js +0 -23
  24. package/dist/managed-credential-v3.js.map +1 -1
  25. package/dist/profile.d.ts +2 -6
  26. package/dist/profile.js +26 -23
  27. package/dist/profile.js.map +1 -1
  28. package/dist/protocol.d.ts +1284 -799
  29. package/dist/protocol.js +494 -277
  30. package/dist/protocol.js.map +1 -1
  31. package/dist/request-bound-device-v6-flow.d.ts +42 -0
  32. package/dist/request-bound-device-v6-flow.js +403 -0
  33. package/dist/request-bound-device-v6-flow.js.map +1 -0
  34. package/dist/request-bound-device-v6-state.d.ts +397 -0
  35. package/dist/request-bound-device-v6-state.js +221 -0
  36. package/dist/request-bound-device-v6-state.js.map +1 -0
  37. package/dist/selection.d.ts +5 -0
  38. package/dist/selection.js +20 -2
  39. package/dist/selection.js.map +1 -1
  40. package/dist/token-pool-v4-upload-flow.js +5 -1
  41. package/dist/token-pool-v4-upload-flow.js.map +1 -1
  42. package/package.json +2 -2
  43. package/dist/credential-supervisor.d.ts +0 -17
  44. package/dist/credential-supervisor.js +0 -84
  45. package/dist/credential-supervisor.js.map +0 -1
  46. package/dist/enrollment-envelope.d.ts +0 -18
  47. package/dist/enrollment-envelope.js +0 -112
  48. package/dist/enrollment-envelope.js.map +0 -1
  49. package/dist/enrollment-flow.d.ts +0 -27
  50. package/dist/enrollment-flow.js +0 -224
  51. package/dist/enrollment-flow.js.map +0 -1
  52. package/dist/migration-login-batch.d.ts +0 -66
  53. package/dist/migration-login-batch.js +0 -202
  54. package/dist/migration-login-batch.js.map +0 -1
  55. package/dist/retirement-flow.d.ts +0 -38
  56. package/dist/retirement-flow.js +0 -78
  57. package/dist/retirement-flow.js.map +0 -1
  58. package/dist/short-lived-delivery-flow.d.ts +0 -41
  59. package/dist/short-lived-delivery-flow.js +0 -141
  60. package/dist/short-lived-delivery-flow.js.map +0 -1
  61. package/dist/short-lived-delivery-journal.d.ts +0 -34
  62. package/dist/short-lived-delivery-journal.js +0 -137
  63. package/dist/short-lived-delivery-journal.js.map +0 -1
  64. package/dist/short-lived-delivery.d.ts +0 -26
  65. package/dist/short-lived-delivery.js +0 -139
  66. package/dist/short-lived-delivery.js.map +0 -1
@@ -6,11 +6,6 @@ export declare const CODEX_ACCOUNTS_IMPORT_PATH = "/v1/admin/codex/accounts/impo
6
6
  export declare const CODEX_ADMIN_ACCOUNTS_PATH = "/v1/admin/codex/accounts";
7
7
  export declare const CODEX_ADMIN_ASSIGNMENTS_PATH = "/v1/admin/codex/assignments";
8
8
  export declare const CODEX_ENROLLMENT_SCHEMA_VERSION: 2;
9
- export declare const CODEX_ADMIN_ENROLLMENT_INTENTS_PATH = "/v2/admin/codex/enrollment-intents";
10
- export declare const CODEX_CREDENTIAL_ASSIGNMENTS_PATH = "/v2/codex/credential-assignments";
11
- export declare const CODEX_SHORT_LIVED_DELIVERIES_PATH = "/v2/codex/short-lived-credential-deliveries";
12
- export declare const CODEX_ASSIGNMENT_RETIREMENTS_PATH = "/v2/codex/assignment-retirements";
13
- export declare const CODEX_ADMIN_MIGRATION_PLANS_PATH = "/v2/admin/codex/migration-plans";
14
9
  export declare const CODEX_MANAGED_CREDENTIALS_V3_SCHEMA_VERSION: 3;
15
10
  export declare const CODEX_MANAGED_CREDENTIALS_V3_PATH = "/v3/codex";
16
11
  export declare const CODEX_V3_ENROLLMENT_CONFIGURATION_PATH = "/v4/codex/enrollment-configuration";
@@ -24,19 +19,20 @@ export declare const CODEX_TOKEN_POOL_V4_ENROLLMENT_CONFIGURATION_PATH = "/v4/ad
24
19
  export declare const CODEX_TOKEN_POOL_V4_DIRECTORY_RESOLVE_PATH = "/v4/admin/codex/directory-users/resolve";
25
20
  export declare const CODEX_TOKEN_POOL_V4_UPLOADS_PATH = "/v4/admin/codex/token-pool/uploads";
26
21
  export declare const CODEX_TOKEN_POOL_V4_RUNTIME_PATH = "/v4/codex";
27
- export declare const CODEX_TOKEN_POOL_V4_CREDENTIAL_ASSIGNMENTS_PATH = "/v4/codex/credential-assignments";
28
- export declare const CODEX_TOKEN_POOL_V4_FULL_CREDENTIAL_DELIVERIES_PATH = "/v4/codex/full-credential-deliveries";
29
22
  export declare const CODEX_TOKEN_POOL_V4_CREDENTIAL_LINEAGES_PATH = "/v4/codex/credential-lineages";
30
23
  export declare const CODEX_MULTI_DEVICE_V5_SCHEMA_VERSION: 5;
31
24
  export declare const CODEX_MULTI_DEVICE_V5_RUNTIME_PATH = "/v5/codex";
32
25
  export declare const CODEX_MULTI_DEVICE_V5_CREDENTIAL_ASSIGNMENTS_PATH = "/v5/codex/credential-assignments";
33
26
  export declare const CODEX_MULTI_DEVICE_V5_DEVICE_SESSIONS_PATH = "/v5/codex/device-sessions";
34
27
  export declare const CODEX_MULTI_DEVICE_V5_CREDENTIAL_LINEAGES_PATH = "/v5/codex/credential-lineages";
35
- export declare const CODEX_MIGRATION_CAPACITY: {
36
- readonly verifiedMinimum: 2;
37
- readonly verifiedLimit: null;
38
- readonly sequentialRequired: true;
39
- };
28
+ export declare const CODEX_REQUEST_BOUND_DEVICE_V6_SCHEMA_VERSION: 6;
29
+ export declare const CODEX_REQUEST_BOUND_DEVICE_V6_RUNTIME_PATH = "/v6/codex";
30
+ export declare const CODEX_V6_ACCOUNT_REQUESTS_PATH = "/v6/codex/account-requests";
31
+ export declare const CODEX_V6_DEVICE_ACCESS_RECONCILIATIONS_PATH = "/v6/codex/device-access/reconciliations";
32
+ export declare const CODEX_V6_DEVICE_BINDINGS_PATH = "/v6/codex/device-bindings";
33
+ export declare const CODEX_REQUEST_BOUND_DEVICE_V6_ADMIN_PATH = "/v6/admin/codex";
34
+ export declare const CODEX_V6_ADMIN_ACCOUNT_REQUESTS_PATH = "/v6/admin/codex/account-requests";
35
+ export declare const CODEX_V6_ADMIN_DEVICE_BINDINGS_PATH = "/v6/admin/codex/device-bindings";
40
36
  export interface CodexQuotaWindowLike {
41
37
  usedPercent?: number | null;
42
38
  windowMinutes?: number | null;
@@ -911,164 +907,10 @@ export declare const CodexAdminAssignmentDeleteResponseSchema: z.ZodObject<{
911
907
  schemaVersion: z.ZodLiteral<1>;
912
908
  assignmentId: z.ZodString;
913
909
  }, z.core.$strict>;
914
- export declare const CodexEnrollmentIntentReasonSchema: z.ZodEnum<{
915
- NEW: "NEW";
916
- REPLACE_ADMIN: "REPLACE_ADMIN";
917
- REPLACE_DIVERGED: "REPLACE_DIVERGED";
918
- REPLACE_LOST: "REPLACE_LOST";
919
- REPLACE_REJECTED: "REPLACE_REJECTED";
920
- }>;
921
- export declare const CodexEnrollmentIntentStatusSchema: z.ZodEnum<{
922
- ACCOUNT_MISMATCH: "ACCOUNT_MISMATCH";
923
- AWAITING_CLI: "AWAITING_CLI";
924
- CANCELLED: "CANCELLED";
925
- CLAIMED: "CLAIMED";
926
- EXPIRED: "EXPIRED";
927
- IDENTITY_UNVERIFIABLE: "IDENTITY_UNVERIFIABLE";
928
- LOGIN_IN_PROGRESS: "LOGIN_IN_PROGRESS";
929
- OUTCOME_AMBIGUOUS: "OUTCOME_AMBIGUOUS";
930
- READY: "READY";
931
- TEMPORARILY_UNAVAILABLE: "TEMPORARILY_UNAVAILABLE";
932
- UPLOADING: "UPLOADING";
933
- VALIDATING: "VALIDATING";
934
- }>;
935
- export declare const CodexEnrollmentIntentSchema: z.ZodObject<{
936
- id: z.ZodString;
937
- type: z.ZodEnum<{
938
- ACCOUNT_DISCOVERY: "ACCOUNT_DISCOVERY";
939
- ASSIGNMENT_ENROLLMENT: "ASSIGNMENT_ENROLLMENT";
940
- }>;
941
- status: z.ZodEnum<{
942
- ACCOUNT_MISMATCH: "ACCOUNT_MISMATCH";
943
- AWAITING_CLI: "AWAITING_CLI";
944
- CANCELLED: "CANCELLED";
945
- CLAIMED: "CLAIMED";
946
- EXPIRED: "EXPIRED";
947
- IDENTITY_UNVERIFIABLE: "IDENTITY_UNVERIFIABLE";
948
- LOGIN_IN_PROGRESS: "LOGIN_IN_PROGRESS";
949
- OUTCOME_AMBIGUOUS: "OUTCOME_AMBIGUOUS";
950
- READY: "READY";
951
- TEMPORARILY_UNAVAILABLE: "TEMPORARILY_UNAVAILABLE";
952
- UPLOADING: "UPLOADING";
953
- VALIDATING: "VALIDATING";
954
- }>;
955
- revision: z.ZodNumber;
956
- reason: z.ZodEnum<{
957
- NEW: "NEW";
958
- REPLACE_ADMIN: "REPLACE_ADMIN";
959
- REPLACE_DIVERGED: "REPLACE_DIVERGED";
960
- REPLACE_LOST: "REPLACE_LOST";
961
- REPLACE_REJECTED: "REPLACE_REJECTED";
962
- }>;
963
- assignmentId: z.ZodNullable<z.ZodString>;
964
- managedAccountId: z.ZodNullable<z.ZodString>;
965
- userSubject: z.ZodNullable<z.ZodString>;
966
- createdAt: z.ZodString;
967
- expiresAt: z.ZodString;
968
- claimedAt: z.ZodNullable<z.ZodString>;
969
- lastHeartbeatAt: z.ZodNullable<z.ZodString>;
970
- cancelledAt: z.ZodNullable<z.ZodString>;
971
- updatedAt: z.ZodString;
972
- safeErrorCode: z.ZodNullable<z.ZodString>;
973
- resultManagedAccountId: z.ZodNullable<z.ZodString>;
974
- resultLineageId: z.ZodNullable<z.ZodString>;
975
- currentGenerationVersion: z.ZodNullable<z.ZodNumber>;
976
- allowedActions: z.ZodArray<z.ZodString>;
977
- }, z.core.$strict>;
978
- export declare const CodexEnrollmentCandidateIngressSchema: z.ZodObject<{
979
- envelopeVersion: z.ZodLiteral<1>;
980
- algorithm: z.ZodLiteral<"X25519-HKDF-SHA256-AES-256-GCM">;
981
- keyId: z.ZodString;
982
- publicKey: z.ZodString;
983
- maxRequestBytes: z.ZodNumber;
984
- maxCiphertextBytes: z.ZodNumber;
985
- }, z.core.$strict>;
986
- export declare const CodexEnrollmentCapabilitiesSchema: z.ZodObject<{
987
- enrollmentIntents: z.ZodBoolean;
988
- candidateUpload: z.ZodBoolean;
989
- delivery: z.ZodBoolean;
990
- rotationSync: z.ZodBoolean;
991
- candidateIngress: z.ZodOptional<z.ZodObject<{
992
- envelopeVersion: z.ZodLiteral<1>;
993
- algorithm: z.ZodLiteral<"X25519-HKDF-SHA256-AES-256-GCM">;
994
- keyId: z.ZodString;
995
- publicKey: z.ZodString;
996
- maxRequestBytes: z.ZodNumber;
997
- maxCiphertextBytes: z.ZodNumber;
998
- }, z.core.$strict>>;
999
- }, z.core.$strict>;
1000
- export declare const CodexEnrollmentIntentResponseSchema: z.ZodObject<{
1001
- schemaVersion: z.ZodLiteral<2>;
1002
- intent: z.ZodObject<{
1003
- id: z.ZodString;
1004
- type: z.ZodEnum<{
1005
- ACCOUNT_DISCOVERY: "ACCOUNT_DISCOVERY";
1006
- ASSIGNMENT_ENROLLMENT: "ASSIGNMENT_ENROLLMENT";
1007
- }>;
1008
- status: z.ZodEnum<{
1009
- ACCOUNT_MISMATCH: "ACCOUNT_MISMATCH";
1010
- AWAITING_CLI: "AWAITING_CLI";
1011
- CANCELLED: "CANCELLED";
1012
- CLAIMED: "CLAIMED";
1013
- EXPIRED: "EXPIRED";
1014
- IDENTITY_UNVERIFIABLE: "IDENTITY_UNVERIFIABLE";
1015
- LOGIN_IN_PROGRESS: "LOGIN_IN_PROGRESS";
1016
- OUTCOME_AMBIGUOUS: "OUTCOME_AMBIGUOUS";
1017
- READY: "READY";
1018
- TEMPORARILY_UNAVAILABLE: "TEMPORARILY_UNAVAILABLE";
1019
- UPLOADING: "UPLOADING";
1020
- VALIDATING: "VALIDATING";
1021
- }>;
1022
- revision: z.ZodNumber;
1023
- reason: z.ZodEnum<{
1024
- NEW: "NEW";
1025
- REPLACE_ADMIN: "REPLACE_ADMIN";
1026
- REPLACE_DIVERGED: "REPLACE_DIVERGED";
1027
- REPLACE_LOST: "REPLACE_LOST";
1028
- REPLACE_REJECTED: "REPLACE_REJECTED";
1029
- }>;
1030
- assignmentId: z.ZodNullable<z.ZodString>;
1031
- managedAccountId: z.ZodNullable<z.ZodString>;
1032
- userSubject: z.ZodNullable<z.ZodString>;
1033
- createdAt: z.ZodString;
1034
- expiresAt: z.ZodString;
1035
- claimedAt: z.ZodNullable<z.ZodString>;
1036
- lastHeartbeatAt: z.ZodNullable<z.ZodString>;
1037
- cancelledAt: z.ZodNullable<z.ZodString>;
1038
- updatedAt: z.ZodString;
1039
- safeErrorCode: z.ZodNullable<z.ZodString>;
1040
- resultManagedAccountId: z.ZodNullable<z.ZodString>;
1041
- resultLineageId: z.ZodNullable<z.ZodString>;
1042
- currentGenerationVersion: z.ZodNullable<z.ZodNumber>;
1043
- allowedActions: z.ZodArray<z.ZodString>;
1044
- }, z.core.$strict>;
1045
- capabilities: z.ZodObject<{
1046
- enrollmentIntents: z.ZodBoolean;
1047
- candidateUpload: z.ZodBoolean;
1048
- delivery: z.ZodBoolean;
1049
- rotationSync: z.ZodBoolean;
1050
- candidateIngress: z.ZodOptional<z.ZodObject<{
1051
- envelopeVersion: z.ZodLiteral<1>;
1052
- algorithm: z.ZodLiteral<"X25519-HKDF-SHA256-AES-256-GCM">;
1053
- keyId: z.ZodString;
1054
- publicKey: z.ZodString;
1055
- maxRequestBytes: z.ZodNumber;
1056
- maxCiphertextBytes: z.ZodNumber;
1057
- }, z.core.$strict>>;
1058
- }, z.core.$strict>;
1059
- }, z.core.$strict>;
1060
910
  export declare const CodexEnrollmentMutationInputSchema: z.ZodObject<{
1061
911
  idempotencyKey: z.ZodString;
1062
912
  revision: z.ZodNumber;
1063
913
  }, z.core.$strict>;
1064
- export declare const CodexEnrollmentHeartbeatInputSchema: z.ZodObject<{
1065
- idempotencyKey: z.ZodString;
1066
- revision: z.ZodNumber;
1067
- phase: z.ZodEnum<{
1068
- LOGIN_IN_PROGRESS: "LOGIN_IN_PROGRESS";
1069
- UPLOADING: "UPLOADING";
1070
- }>;
1071
- }, z.core.$strict>;
1072
914
  export declare const CodexEnrollmentCandidateEnvelopeSchema: z.ZodObject<{
1073
915
  version: z.ZodLiteral<1>;
1074
916
  algorithm: z.ZodLiteral<"X25519-HKDF-SHA256-AES-256-GCM">;
@@ -1079,246 +921,6 @@ export declare const CodexEnrollmentCandidateEnvelopeSchema: z.ZodObject<{
1079
921
  ciphertext: z.ZodString;
1080
922
  authenticationTag: z.ZodString;
1081
923
  }, z.core.$strict>;
1082
- export declare const CodexEnrollmentCandidateInputSchema: z.ZodObject<{
1083
- schemaVersion: z.ZodLiteral<2>;
1084
- revision: z.ZodNumber;
1085
- envelope: z.ZodObject<{
1086
- version: z.ZodLiteral<1>;
1087
- algorithm: z.ZodLiteral<"X25519-HKDF-SHA256-AES-256-GCM">;
1088
- keyId: z.ZodString;
1089
- ephemeralPublicKey: z.ZodString;
1090
- salt: z.ZodString;
1091
- nonce: z.ZodString;
1092
- ciphertext: z.ZodString;
1093
- authenticationTag: z.ZodString;
1094
- }, z.core.$strict>;
1095
- }, z.core.$strict>;
1096
- export declare const CodexEnrollmentCandidateResultSchema: z.ZodObject<{
1097
- outcome: z.ZodEnum<{
1098
- ACCOUNT_MISMATCH: "ACCOUNT_MISMATCH";
1099
- IDENTITY_UNVERIFIABLE: "IDENTITY_UNVERIFIABLE";
1100
- OUTCOME_AMBIGUOUS: "OUTCOME_AMBIGUOUS";
1101
- READY: "READY";
1102
- TEMPORARILY_UNAVAILABLE: "TEMPORARILY_UNAVAILABLE";
1103
- }>;
1104
- managedAccountId: z.ZodNullable<z.ZodString>;
1105
- lineageId: z.ZodNullable<z.ZodString>;
1106
- generationVersion: z.ZodNullable<z.ZodNumber>;
1107
- replayed: z.ZodBoolean;
1108
- }, z.core.$strict>;
1109
- export declare const CodexEnrollmentCandidateResponseSchema: z.ZodObject<{
1110
- schemaVersion: z.ZodLiteral<2>;
1111
- intent: z.ZodObject<{
1112
- id: z.ZodString;
1113
- type: z.ZodEnum<{
1114
- ACCOUNT_DISCOVERY: "ACCOUNT_DISCOVERY";
1115
- ASSIGNMENT_ENROLLMENT: "ASSIGNMENT_ENROLLMENT";
1116
- }>;
1117
- status: z.ZodEnum<{
1118
- ACCOUNT_MISMATCH: "ACCOUNT_MISMATCH";
1119
- AWAITING_CLI: "AWAITING_CLI";
1120
- CANCELLED: "CANCELLED";
1121
- CLAIMED: "CLAIMED";
1122
- EXPIRED: "EXPIRED";
1123
- IDENTITY_UNVERIFIABLE: "IDENTITY_UNVERIFIABLE";
1124
- LOGIN_IN_PROGRESS: "LOGIN_IN_PROGRESS";
1125
- OUTCOME_AMBIGUOUS: "OUTCOME_AMBIGUOUS";
1126
- READY: "READY";
1127
- TEMPORARILY_UNAVAILABLE: "TEMPORARILY_UNAVAILABLE";
1128
- UPLOADING: "UPLOADING";
1129
- VALIDATING: "VALIDATING";
1130
- }>;
1131
- revision: z.ZodNumber;
1132
- reason: z.ZodEnum<{
1133
- NEW: "NEW";
1134
- REPLACE_ADMIN: "REPLACE_ADMIN";
1135
- REPLACE_DIVERGED: "REPLACE_DIVERGED";
1136
- REPLACE_LOST: "REPLACE_LOST";
1137
- REPLACE_REJECTED: "REPLACE_REJECTED";
1138
- }>;
1139
- assignmentId: z.ZodNullable<z.ZodString>;
1140
- managedAccountId: z.ZodNullable<z.ZodString>;
1141
- userSubject: z.ZodNullable<z.ZodString>;
1142
- createdAt: z.ZodString;
1143
- expiresAt: z.ZodString;
1144
- claimedAt: z.ZodNullable<z.ZodString>;
1145
- lastHeartbeatAt: z.ZodNullable<z.ZodString>;
1146
- cancelledAt: z.ZodNullable<z.ZodString>;
1147
- updatedAt: z.ZodString;
1148
- safeErrorCode: z.ZodNullable<z.ZodString>;
1149
- resultManagedAccountId: z.ZodNullable<z.ZodString>;
1150
- resultLineageId: z.ZodNullable<z.ZodString>;
1151
- currentGenerationVersion: z.ZodNullable<z.ZodNumber>;
1152
- allowedActions: z.ZodArray<z.ZodString>;
1153
- }, z.core.$strict>;
1154
- capabilities: z.ZodObject<{
1155
- enrollmentIntents: z.ZodBoolean;
1156
- candidateUpload: z.ZodBoolean;
1157
- delivery: z.ZodBoolean;
1158
- rotationSync: z.ZodBoolean;
1159
- candidateIngress: z.ZodOptional<z.ZodObject<{
1160
- envelopeVersion: z.ZodLiteral<1>;
1161
- algorithm: z.ZodLiteral<"X25519-HKDF-SHA256-AES-256-GCM">;
1162
- keyId: z.ZodString;
1163
- publicKey: z.ZodString;
1164
- maxRequestBytes: z.ZodNumber;
1165
- maxCiphertextBytes: z.ZodNumber;
1166
- }, z.core.$strict>>;
1167
- }, z.core.$strict>;
1168
- result: z.ZodObject<{
1169
- outcome: z.ZodEnum<{
1170
- ACCOUNT_MISMATCH: "ACCOUNT_MISMATCH";
1171
- IDENTITY_UNVERIFIABLE: "IDENTITY_UNVERIFIABLE";
1172
- OUTCOME_AMBIGUOUS: "OUTCOME_AMBIGUOUS";
1173
- READY: "READY";
1174
- TEMPORARILY_UNAVAILABLE: "TEMPORARILY_UNAVAILABLE";
1175
- }>;
1176
- managedAccountId: z.ZodNullable<z.ZodString>;
1177
- lineageId: z.ZodNullable<z.ZodString>;
1178
- generationVersion: z.ZodNullable<z.ZodNumber>;
1179
- replayed: z.ZodBoolean;
1180
- }, z.core.$strict>;
1181
- }, z.core.$strict>;
1182
- export declare const CodexMigrationPlanStatusSchema: z.ZodEnum<{
1183
- ACTIVE: "ACTIVE";
1184
- CANCELLED: "CANCELLED";
1185
- COMPLETED: "COMPLETED";
1186
- PAUSED: "PAUSED";
1187
- }>;
1188
- export declare const CodexMigrationTargetSchema: z.ZodObject<{
1189
- id: z.ZodString;
1190
- assignmentId: z.ZodString;
1191
- userSubject: z.ZodString;
1192
- distributionMode: z.ZodEnum<{
1193
- LEGACY: "LEGACY";
1194
- MIGRATING: "MIGRATING";
1195
- USER_BOUND: "USER_BOUND";
1196
- }>;
1197
- projectedStatus: z.ZodEnum<{
1198
- ACTIVE: "ACTIVE";
1199
- AWAITING_CLI: "AWAITING_CLI";
1200
- COMPROMISED: "COMPROMISED";
1201
- DELIVERY_UNKNOWN: "DELIVERY_UNKNOWN";
1202
- DIVERGED: "DIVERGED";
1203
- ENROLLING: "ENROLLING";
1204
- LEGACY_V1: "LEGACY_V1";
1205
- LOST: "LOST";
1206
- NEEDS_REAUTH: "NEEDS_REAUTH";
1207
- READY: "READY";
1208
- RETIRED: "RETIRED";
1209
- RETIREMENT_PENDING: "RETIREMENT_PENDING";
1210
- SYNC_LAGGING: "SYNC_LAGGING";
1211
- UNENROLLED: "UNENROLLED";
1212
- VALIDATING: "VALIDATING";
1213
- }>;
1214
- enrollmentAttachment: z.ZodEnum<{
1215
- CREATED: "CREATED";
1216
- NONE: "NONE";
1217
- REUSED: "REUSED";
1218
- }>;
1219
- enrollmentIntent: z.ZodNullable<z.ZodObject<{
1220
- id: z.ZodString;
1221
- status: z.ZodEnum<{
1222
- ACCOUNT_MISMATCH: "ACCOUNT_MISMATCH";
1223
- AWAITING_CLI: "AWAITING_CLI";
1224
- CANCELLED: "CANCELLED";
1225
- CLAIMED: "CLAIMED";
1226
- EXPIRED: "EXPIRED";
1227
- IDENTITY_UNVERIFIABLE: "IDENTITY_UNVERIFIABLE";
1228
- LOGIN_IN_PROGRESS: "LOGIN_IN_PROGRESS";
1229
- OUTCOME_AMBIGUOUS: "OUTCOME_AMBIGUOUS";
1230
- READY: "READY";
1231
- TEMPORARILY_UNAVAILABLE: "TEMPORARILY_UNAVAILABLE";
1232
- UPLOADING: "UPLOADING";
1233
- VALIDATING: "VALIDATING";
1234
- }>;
1235
- revision: z.ZodNumber;
1236
- expiresAt: z.ZodString;
1237
- updatedAt: z.ZodString;
1238
- safeErrorCode: z.ZodNullable<z.ZodString>;
1239
- }, z.core.$strict>>;
1240
- allowedAction: z.ZodEnum<{
1241
- LOGIN: "LOGIN";
1242
- NONE: "NONE";
1243
- VIEW_ENROLLMENT: "VIEW_ENROLLMENT";
1244
- }>;
1245
- }, z.core.$strict>;
1246
- export declare const CodexMigrationLoginQueueResponseSchema: z.ZodObject<{
1247
- schemaVersion: z.ZodLiteral<2>;
1248
- plan: z.ZodObject<{
1249
- id: z.ZodString;
1250
- status: z.ZodEnum<{
1251
- ACTIVE: "ACTIVE";
1252
- CANCELLED: "CANCELLED";
1253
- COMPLETED: "COMPLETED";
1254
- PAUSED: "PAUSED";
1255
- }>;
1256
- revision: z.ZodNumber;
1257
- accountId: z.ZodString;
1258
- sequentialRequired: z.ZodLiteral<true>;
1259
- }, z.core.$strict>;
1260
- items: z.ZodArray<z.ZodObject<{
1261
- id: z.ZodString;
1262
- assignmentId: z.ZodString;
1263
- userSubject: z.ZodString;
1264
- distributionMode: z.ZodEnum<{
1265
- LEGACY: "LEGACY";
1266
- MIGRATING: "MIGRATING";
1267
- USER_BOUND: "USER_BOUND";
1268
- }>;
1269
- projectedStatus: z.ZodEnum<{
1270
- ACTIVE: "ACTIVE";
1271
- AWAITING_CLI: "AWAITING_CLI";
1272
- COMPROMISED: "COMPROMISED";
1273
- DELIVERY_UNKNOWN: "DELIVERY_UNKNOWN";
1274
- DIVERGED: "DIVERGED";
1275
- ENROLLING: "ENROLLING";
1276
- LEGACY_V1: "LEGACY_V1";
1277
- LOST: "LOST";
1278
- NEEDS_REAUTH: "NEEDS_REAUTH";
1279
- READY: "READY";
1280
- RETIRED: "RETIRED";
1281
- RETIREMENT_PENDING: "RETIREMENT_PENDING";
1282
- SYNC_LAGGING: "SYNC_LAGGING";
1283
- UNENROLLED: "UNENROLLED";
1284
- VALIDATING: "VALIDATING";
1285
- }>;
1286
- enrollmentAttachment: z.ZodEnum<{
1287
- CREATED: "CREATED";
1288
- NONE: "NONE";
1289
- REUSED: "REUSED";
1290
- }>;
1291
- enrollmentIntent: z.ZodNullable<z.ZodObject<{
1292
- id: z.ZodString;
1293
- status: z.ZodEnum<{
1294
- ACCOUNT_MISMATCH: "ACCOUNT_MISMATCH";
1295
- AWAITING_CLI: "AWAITING_CLI";
1296
- CANCELLED: "CANCELLED";
1297
- CLAIMED: "CLAIMED";
1298
- EXPIRED: "EXPIRED";
1299
- IDENTITY_UNVERIFIABLE: "IDENTITY_UNVERIFIABLE";
1300
- LOGIN_IN_PROGRESS: "LOGIN_IN_PROGRESS";
1301
- OUTCOME_AMBIGUOUS: "OUTCOME_AMBIGUOUS";
1302
- READY: "READY";
1303
- TEMPORARILY_UNAVAILABLE: "TEMPORARILY_UNAVAILABLE";
1304
- UPLOADING: "UPLOADING";
1305
- VALIDATING: "VALIDATING";
1306
- }>;
1307
- revision: z.ZodNumber;
1308
- expiresAt: z.ZodString;
1309
- updatedAt: z.ZodString;
1310
- safeErrorCode: z.ZodNullable<z.ZodString>;
1311
- }, z.core.$strict>>;
1312
- allowedAction: z.ZodEnum<{
1313
- LOGIN: "LOGIN";
1314
- NONE: "NONE";
1315
- VIEW_ENROLLMENT: "VIEW_ENROLLMENT";
1316
- }>;
1317
- }, z.core.$strict>>;
1318
- total: z.ZodNumber;
1319
- page: z.ZodNumber;
1320
- pageSize: z.ZodNumber;
1321
- }, z.core.$strict>;
1322
924
  export declare const CodexUserCredentialAssignmentSchema: z.ZodObject<{
1323
925
  assignmentId: z.ZodString;
1324
926
  managedAccountId: z.ZodString;
@@ -1376,14 +978,6 @@ export declare const CodexShortLivedDeliveryClientKeySchema: z.ZodObject<{
1376
978
  algorithm: z.ZodLiteral<"X25519-HKDF-SHA256-AES-256-GCM">;
1377
979
  publicKey: z.ZodString;
1378
980
  }, z.core.$strict>;
1379
- export declare const CodexShortLivedDeliveryRequestSchema: z.ZodObject<{
1380
- schemaVersion: z.ZodLiteral<2>;
1381
- clientKey: z.ZodObject<{
1382
- version: z.ZodLiteral<1>;
1383
- algorithm: z.ZodLiteral<"X25519-HKDF-SHA256-AES-256-GCM">;
1384
- publicKey: z.ZodString;
1385
- }, z.core.$strict>;
1386
- }, z.core.$strict>;
1387
981
  export declare const CodexShortLivedDeliveryEnvelopeSchema: z.ZodObject<{
1388
982
  version: z.ZodLiteral<1>;
1389
983
  algorithm: z.ZodLiteral<"X25519-HKDF-SHA256-AES-256-GCM">;
@@ -1393,195 +987,23 @@ export declare const CodexShortLivedDeliveryEnvelopeSchema: z.ZodObject<{
1393
987
  ciphertext: z.ZodString;
1394
988
  authenticationTag: z.ZodString;
1395
989
  }, z.core.$strict>;
1396
- export declare const CodexShortLivedDeliveryResponseSchema: z.ZodObject<{
1397
- schemaVersion: z.ZodLiteral<2>;
1398
- delivery: z.ZodObject<{
1399
- id: z.ZodString;
1400
- credentialKind: z.ZodLiteral<"SHORT_LIVED">;
1401
- assignmentId: z.ZodString;
1402
- managedAccountId: z.ZodString;
1403
- lineageId: z.ZodString;
1404
- generationVersion: z.ZodNumber;
1405
- status: z.ZodEnum<{
1406
- ACKED: "ACKED";
1407
- AWAITING_ACK: "AWAITING_ACK";
1408
- EXPIRED: "EXPIRED";
1409
- }>;
1410
- issuedAt: z.ZodString;
1411
- credentialExpiresAt: z.ZodString;
1412
- ackExpiresAt: z.ZodString;
1413
- ackedAt: z.ZodNullable<z.ZodString>;
1414
- providerAccountId: z.ZodString;
1415
- subject: z.ZodString;
1416
- envelope: z.ZodObject<{
1417
- version: z.ZodLiteral<1>;
1418
- algorithm: z.ZodLiteral<"X25519-HKDF-SHA256-AES-256-GCM">;
1419
- ephemeralPublicKey: z.ZodString;
1420
- salt: z.ZodString;
1421
- nonce: z.ZodString;
1422
- ciphertext: z.ZodString;
1423
- authenticationTag: z.ZodString;
1424
- }, z.core.$strict>;
1425
- }, z.core.$strict>;
1426
- replayed: z.ZodBoolean;
990
+ export declare const CodexV3CredentialIngressSchema: z.ZodObject<{
991
+ envelopeVersion: z.ZodLiteral<1>;
992
+ algorithm: z.ZodLiteral<"X25519-HKDF-SHA256-AES-256-GCM">;
993
+ keyId: z.ZodString;
994
+ publicKey: z.ZodString;
995
+ maxRequestBytes: z.ZodNumber;
996
+ maxCiphertextBytes: z.ZodNumber;
1427
997
  }, z.core.$strict>;
1428
- export declare const CodexShortLivedDeliveryAckInputSchema: z.ZodObject<{
1429
- schemaVersion: z.ZodLiteral<2>;
1430
- lineageId: z.ZodString;
1431
- generationVersion: z.ZodNumber;
1432
- }, z.core.$strict>;
1433
- export declare const CodexShortLivedDeliveryAckResponseSchema: z.ZodObject<{
1434
- schemaVersion: z.ZodLiteral<2>;
1435
- delivery: z.ZodObject<{
1436
- id: z.ZodString;
1437
- credentialKind: z.ZodLiteral<"SHORT_LIVED">;
1438
- assignmentId: z.ZodString;
1439
- managedAccountId: z.ZodString;
1440
- lineageId: z.ZodString;
1441
- generationVersion: z.ZodNumber;
1442
- issuedAt: z.ZodString;
1443
- credentialExpiresAt: z.ZodString;
1444
- ackExpiresAt: z.ZodString;
1445
- status: z.ZodLiteral<"ACKED">;
1446
- ackedAt: z.ZodString;
1447
- }, z.core.$strict>;
1448
- replayed: z.ZodBoolean;
1449
- }, z.core.$strict>;
1450
- export declare const CodexShortLivedCredentialBundleSchema: z.ZodObject<{
1451
- schemaVersion: z.ZodLiteral<2>;
1452
- deliveryId: z.ZodString;
1453
- managedAccountId: z.ZodString;
1454
- providerAccountId: z.ZodString;
1455
- lineageId: z.ZodString;
1456
- generationVersion: z.ZodNumber;
1457
- accessToken: z.ZodString;
1458
- idToken: z.ZodString;
1459
- expiresAt: z.ZodString;
1460
- }, z.core.$strict>;
1461
- export declare const CodexAssignmentRetirementSchema: z.ZodObject<{
1462
- id: z.ZodString;
1463
- assignmentId: z.ZodString;
1464
- revision: z.ZodNumber;
1465
- reason: z.ZodEnum<{
1466
- COMPROMISED: "COMPROMISED";
1467
- REPLACED: "REPLACED";
1468
- UNASSIGN: "UNASSIGN";
1469
- }>;
1470
- status: z.ZodEnum<{
1471
- COMPROMISED: "COMPROMISED";
1472
- FINALIZED: "FINALIZED";
1473
- READY_TO_FINALIZE: "READY_TO_FINALIZE";
1474
- RETIREMENT_PENDING: "RETIREMENT_PENDING";
1475
- }>;
1476
- requestedAt: z.ZodString;
1477
- serverRefreshStoppedAt: z.ZodString;
1478
- shortLivedCredentialsExpireAt: z.ZodString;
1479
- localDeleteStatus: z.ZodEnum<{
1480
- ACKNOWLEDGED: "ACKNOWLEDGED";
1481
- EXPIRED: "EXPIRED";
1482
- NOT_REQUIRED: "NOT_REQUIRED";
1483
- PENDING: "PENDING";
1484
- }>;
1485
- localDeleteAcknowledgedAt: z.ZodNullable<z.ZodString>;
1486
- serverSecretsShreddedAt: z.ZodNullable<z.ZodString>;
1487
- upstreamRevocationStatus: z.ZodLiteral<"UNKNOWN">;
1488
- safeToFinalizeAt: z.ZodString;
1489
- }, z.core.$strict>;
1490
- export declare const CodexAssignmentRetirementLocalDeleteAckInputSchema: z.ZodObject<{
1491
- schemaVersion: z.ZodLiteral<2>;
1492
- expectedRevision: z.ZodNumber;
1493
- targets: z.ZodArray<z.ZodObject<{
1494
- lineageId: z.ZodString;
1495
- generationVersion: z.ZodNumber;
1496
- }, z.core.$strict>>;
1497
- }, z.core.$strict>;
1498
- export declare const CodexAssignmentRetirementPreflightResponseSchema: z.ZodObject<{
1499
- schemaVersion: z.ZodLiteral<2>;
1500
- retirement: z.ZodObject<{
1501
- id: z.ZodString;
1502
- assignmentId: z.ZodString;
1503
- revision: z.ZodNumber;
1504
- reason: z.ZodEnum<{
1505
- COMPROMISED: "COMPROMISED";
1506
- REPLACED: "REPLACED";
1507
- UNASSIGN: "UNASSIGN";
1508
- }>;
1509
- status: z.ZodEnum<{
1510
- COMPROMISED: "COMPROMISED";
1511
- FINALIZED: "FINALIZED";
1512
- READY_TO_FINALIZE: "READY_TO_FINALIZE";
1513
- RETIREMENT_PENDING: "RETIREMENT_PENDING";
1514
- }>;
1515
- requestedAt: z.ZodString;
1516
- serverRefreshStoppedAt: z.ZodString;
1517
- shortLivedCredentialsExpireAt: z.ZodString;
1518
- localDeleteStatus: z.ZodEnum<{
1519
- ACKNOWLEDGED: "ACKNOWLEDGED";
1520
- EXPIRED: "EXPIRED";
1521
- NOT_REQUIRED: "NOT_REQUIRED";
1522
- PENDING: "PENDING";
1523
- }>;
1524
- localDeleteAcknowledgedAt: z.ZodNullable<z.ZodString>;
1525
- serverSecretsShreddedAt: z.ZodNullable<z.ZodString>;
1526
- upstreamRevocationStatus: z.ZodLiteral<"UNKNOWN">;
1527
- safeToFinalizeAt: z.ZodString;
1528
- }, z.core.$strict>;
1529
- allowedLocalDeleteTargets: z.ZodArray<z.ZodObject<{
1530
- lineageId: z.ZodString;
1531
- generationVersion: z.ZodNumber;
1532
- }, z.core.$strict>>;
1533
- allowedActions: z.ZodArray<z.ZodLiteral<"ACKNOWLEDGE_LOCAL_DELETE">>;
1534
- }, z.core.$strict>;
1535
- export declare const CodexAssignmentRetirementLocalDeleteAckResponseSchema: z.ZodObject<{
1536
- schemaVersion: z.ZodLiteral<2>;
1537
- retirement: z.ZodObject<{
1538
- id: z.ZodString;
1539
- assignmentId: z.ZodString;
1540
- revision: z.ZodNumber;
1541
- reason: z.ZodEnum<{
1542
- COMPROMISED: "COMPROMISED";
1543
- REPLACED: "REPLACED";
1544
- UNASSIGN: "UNASSIGN";
1545
- }>;
1546
- status: z.ZodEnum<{
1547
- COMPROMISED: "COMPROMISED";
1548
- FINALIZED: "FINALIZED";
1549
- READY_TO_FINALIZE: "READY_TO_FINALIZE";
1550
- RETIREMENT_PENDING: "RETIREMENT_PENDING";
1551
- }>;
1552
- requestedAt: z.ZodString;
1553
- serverRefreshStoppedAt: z.ZodString;
1554
- shortLivedCredentialsExpireAt: z.ZodString;
1555
- localDeleteStatus: z.ZodEnum<{
1556
- ACKNOWLEDGED: "ACKNOWLEDGED";
1557
- EXPIRED: "EXPIRED";
1558
- NOT_REQUIRED: "NOT_REQUIRED";
1559
- PENDING: "PENDING";
1560
- }>;
1561
- localDeleteAcknowledgedAt: z.ZodNullable<z.ZodString>;
1562
- serverSecretsShreddedAt: z.ZodNullable<z.ZodString>;
1563
- upstreamRevocationStatus: z.ZodLiteral<"UNKNOWN">;
1564
- safeToFinalizeAt: z.ZodString;
1565
- }, z.core.$strict>;
1566
- replayed: z.ZodBoolean;
1567
- }, z.core.$strict>;
1568
- export declare const CodexV3CredentialIngressSchema: z.ZodObject<{
1569
- envelopeVersion: z.ZodLiteral<1>;
1570
- algorithm: z.ZodLiteral<"X25519-HKDF-SHA256-AES-256-GCM">;
1571
- keyId: z.ZodString;
1572
- publicKey: z.ZodString;
1573
- maxRequestBytes: z.ZodNumber;
1574
- maxCiphertextBytes: z.ZodNumber;
1575
- }, z.core.$strict>;
1576
- export declare const CodexV3CredentialEnvelopeSchema: z.ZodObject<{
1577
- version: z.ZodLiteral<1>;
1578
- algorithm: z.ZodLiteral<"X25519-HKDF-SHA256-AES-256-GCM">;
1579
- keyId: z.ZodString;
1580
- ephemeralPublicKey: z.ZodString;
1581
- salt: z.ZodString;
1582
- nonce: z.ZodString;
1583
- ciphertext: z.ZodString;
1584
- authenticationTag: z.ZodString;
998
+ export declare const CodexV3CredentialEnvelopeSchema: z.ZodObject<{
999
+ version: z.ZodLiteral<1>;
1000
+ algorithm: z.ZodLiteral<"X25519-HKDF-SHA256-AES-256-GCM">;
1001
+ keyId: z.ZodString;
1002
+ ephemeralPublicKey: z.ZodString;
1003
+ salt: z.ZodString;
1004
+ nonce: z.ZodString;
1005
+ ciphertext: z.ZodString;
1006
+ authenticationTag: z.ZodString;
1585
1007
  }, z.core.$strict>;
1586
1008
  export declare const CodexV3EnrollmentConfigurationSchema: z.ZodObject<{
1587
1009
  schemaVersion: z.ZodLiteral<4>;
@@ -1845,89 +1267,1190 @@ export declare const CodexV3FullCredentialDeliveryResponseSchema: z.ZodObject<{
1845
1267
  }, z.core.$strict>;
1846
1268
  replayed: z.ZodBoolean;
1847
1269
  }, z.core.$strict>;
1848
- export declare const CodexV3FullCredentialDeliveryAckInputSchema: z.ZodObject<{
1849
- schemaVersion: z.ZodLiteral<4>;
1850
- lineageId: z.ZodString;
1851
- generationVersion: z.ZodNumber;
1852
- installed: z.ZodLiteral<true>;
1270
+ export declare const CodexV3FullCredentialDeliveryAckInputSchema: z.ZodObject<{
1271
+ schemaVersion: z.ZodLiteral<4>;
1272
+ lineageId: z.ZodString;
1273
+ generationVersion: z.ZodNumber;
1274
+ installed: z.ZodLiteral<true>;
1275
+ }, z.core.$strict>;
1276
+ export declare const CodexV3FullCredentialDeliveryAckResponseSchema: z.ZodObject<{
1277
+ schemaVersion: z.ZodLiteral<4>;
1278
+ delivery: z.ZodObject<{
1279
+ id: z.ZodString;
1280
+ credentialKind: z.ZodLiteral<"FULL">;
1281
+ clientRequestId: z.ZodString;
1282
+ assignmentId: z.ZodString;
1283
+ managedAccountId: z.ZodString;
1284
+ providerAccountId: z.ZodString;
1285
+ subject: z.ZodString;
1286
+ lineageId: z.ZodString;
1287
+ generationVersion: z.ZodNumber;
1288
+ issuedAt: z.ZodString;
1289
+ credentialExpiresAt: z.ZodString;
1290
+ ackExpiresAt: z.ZodString;
1291
+ status: z.ZodLiteral<"ACKED">;
1292
+ authorityMode: z.ZodLiteral<"CLIENT_MANAGED">;
1293
+ authorityEpoch: z.ZodNumber;
1294
+ ackedAt: z.ZodString;
1295
+ }, z.core.$strict>;
1296
+ replayed: z.ZodBoolean;
1297
+ }, z.core.$strict>;
1298
+ export declare const CodexV3FullCredentialBundleSchema: z.ZodObject<{
1299
+ schemaVersion: z.ZodLiteral<4>;
1300
+ deliveryId: z.ZodString;
1301
+ managedAccountId: z.ZodString;
1302
+ providerAccountId: z.ZodString;
1303
+ lineageId: z.ZodString;
1304
+ generationVersion: z.ZodNumber;
1305
+ refreshToken: z.ZodString;
1306
+ accessToken: z.ZodString;
1307
+ idToken: z.ZodString;
1308
+ expiresAt: z.ZodString;
1309
+ }, z.core.$strict>;
1310
+ export declare const CodexV3GenerationReportInputSchema: z.ZodObject<{
1311
+ schemaVersion: z.ZodLiteral<4>;
1312
+ clientRequestId: z.ZodString;
1313
+ expectedGenerationVersion: z.ZodNumber;
1314
+ rotationMode: z.ZodEnum<{
1315
+ RETAINED: "RETAINED";
1316
+ ROTATED: "ROTATED";
1317
+ }>;
1318
+ envelope: z.ZodObject<{
1319
+ version: z.ZodLiteral<1>;
1320
+ algorithm: z.ZodLiteral<"X25519-HKDF-SHA256-AES-256-GCM">;
1321
+ keyId: z.ZodString;
1322
+ ephemeralPublicKey: z.ZodString;
1323
+ salt: z.ZodString;
1324
+ nonce: z.ZodString;
1325
+ ciphertext: z.ZodString;
1326
+ authenticationTag: z.ZodString;
1327
+ }, z.core.$strict>;
1328
+ accessTokenHealth: z.ZodEnum<{
1329
+ EXPIRED: "EXPIRED";
1330
+ HEALTHY: "HEALTHY";
1331
+ REJECTED: "REJECTED";
1332
+ UNKNOWN: "UNKNOWN";
1333
+ }>;
1334
+ refreshTokenHealth: z.ZodEnum<{
1335
+ HEALTHY: "HEALTHY";
1336
+ REJECTED: "REJECTED";
1337
+ UNKNOWN: "UNKNOWN";
1338
+ }>;
1339
+ observedAt: z.ZodString;
1340
+ }, z.core.$strict>;
1341
+ export declare const CodexV3GenerationReportResponseSchema: z.ZodObject<{
1342
+ schemaVersion: z.ZodLiteral<4>;
1343
+ report: z.ZodObject<{
1344
+ id: z.ZodString;
1345
+ clientRequestId: z.ZodString;
1346
+ lineageId: z.ZodString;
1347
+ previousGenerationVersion: z.ZodNumber;
1348
+ generationVersion: z.ZodNumber;
1349
+ rotationMode: z.ZodEnum<{
1350
+ RETAINED: "RETAINED";
1351
+ ROTATED: "ROTATED";
1352
+ }>;
1353
+ accessTokenHealth: z.ZodEnum<{
1354
+ EXPIRED: "EXPIRED";
1355
+ HEALTHY: "HEALTHY";
1356
+ REJECTED: "REJECTED";
1357
+ UNKNOWN: "UNKNOWN";
1358
+ }>;
1359
+ refreshTokenHealth: z.ZodEnum<{
1360
+ HEALTHY: "HEALTHY";
1361
+ REJECTED: "REJECTED";
1362
+ UNKNOWN: "UNKNOWN";
1363
+ }>;
1364
+ credentialExpiresAt: z.ZodString;
1365
+ observedAt: z.ZodString;
1366
+ status: z.ZodLiteral<"APPLIED">;
1367
+ authorityMode: z.ZodLiteral<"CLIENT_MANAGED">;
1368
+ authorityEpoch: z.ZodNumber;
1369
+ }, z.core.$strict>;
1370
+ replayed: z.ZodBoolean;
1371
+ }, z.core.$strict>;
1372
+ export declare const CodexV5CreateDeviceSessionInputSchema: z.ZodObject<{
1373
+ schemaVersion: z.ZodLiteral<5>;
1374
+ clientRequestId: z.ZodString;
1375
+ installationId: z.ZodString;
1376
+ clientKey: z.ZodObject<{
1377
+ version: z.ZodLiteral<1>;
1378
+ algorithm: z.ZodLiteral<"X25519-HKDF-SHA256-AES-256-GCM">;
1379
+ publicKey: z.ZodString;
1380
+ }, z.core.$strict>;
1381
+ }, z.core.$strict>;
1382
+ export declare const CodexV5CreateDeviceSessionResponseSchema: z.ZodObject<{
1383
+ schemaVersion: z.ZodLiteral<5>;
1384
+ session: z.ZodObject<{
1385
+ id: z.ZodString;
1386
+ clientRequestId: z.ZodString;
1387
+ installationId: z.ZodString;
1388
+ assignmentId: z.ZodString;
1389
+ managedAccountId: z.ZodString;
1390
+ providerAccountId: z.ZodString;
1391
+ lineageId: z.ZodString;
1392
+ generationVersion: z.ZodNumber;
1393
+ issuedAt: z.ZodString;
1394
+ leaseExpiresAt: z.ZodString;
1395
+ status: z.ZodEnum<{
1396
+ ACTIVE: "ACTIVE";
1397
+ AWAITING_ACK: "AWAITING_ACK";
1398
+ }>;
1399
+ authorityEpoch: z.ZodNumber;
1400
+ envelope: z.ZodObject<{
1401
+ version: z.ZodLiteral<1>;
1402
+ algorithm: z.ZodLiteral<"X25519-HKDF-SHA256-AES-256-GCM">;
1403
+ ephemeralPublicKey: z.ZodString;
1404
+ salt: z.ZodString;
1405
+ nonce: z.ZodString;
1406
+ ciphertext: z.ZodString;
1407
+ authenticationTag: z.ZodString;
1408
+ }, z.core.$strict>;
1409
+ }, z.core.$strict>;
1410
+ replayed: z.ZodBoolean;
1411
+ }, z.core.$strict>;
1412
+ export declare const CodexV5DeviceSessionBundleSchema: z.ZodObject<{
1413
+ schemaVersion: z.ZodLiteral<5>;
1414
+ sessionId: z.ZodString;
1415
+ installationId: z.ZodString;
1416
+ managedAccountId: z.ZodString;
1417
+ providerAccountId: z.ZodString;
1418
+ lineageId: z.ZodString;
1419
+ generationVersion: z.ZodNumber;
1420
+ refreshToken: z.ZodString;
1421
+ accessToken: z.ZodString;
1422
+ idToken: z.ZodString;
1423
+ expiresAt: z.ZodString;
1424
+ }, z.core.$strict>;
1425
+ export declare const CodexV5AcknowledgeDeviceSessionInputSchema: z.ZodObject<{
1426
+ schemaVersion: z.ZodLiteral<5>;
1427
+ installationId: z.ZodString;
1428
+ lineageId: z.ZodString;
1429
+ generationVersion: z.ZodNumber;
1430
+ installed: z.ZodLiteral<true>;
1431
+ }, z.core.$strict>;
1432
+ export declare const CodexV5AcknowledgeDeviceSessionResponseSchema: z.ZodObject<{
1433
+ schemaVersion: z.ZodLiteral<5>;
1434
+ session: z.ZodObject<{
1435
+ id: z.ZodString;
1436
+ clientRequestId: z.ZodString;
1437
+ installationId: z.ZodString;
1438
+ assignmentId: z.ZodString;
1439
+ managedAccountId: z.ZodString;
1440
+ providerAccountId: z.ZodString;
1441
+ lineageId: z.ZodString;
1442
+ generationVersion: z.ZodNumber;
1443
+ issuedAt: z.ZodString;
1444
+ leaseExpiresAt: z.ZodString;
1445
+ status: z.ZodLiteral<"ACTIVE">;
1446
+ authorityEpoch: z.ZodNumber;
1447
+ acknowledgedAt: z.ZodString;
1448
+ }, z.core.$strict>;
1449
+ replayed: z.ZodBoolean;
1450
+ }, z.core.$strict>;
1451
+ export declare const CodexV5HeartbeatDeviceSessionInputSchema: z.ZodObject<{
1452
+ schemaVersion: z.ZodLiteral<5>;
1453
+ installationId: z.ZodString;
1454
+ authorityEpoch: z.ZodNumber;
1455
+ }, z.core.$strict>;
1456
+ export declare const CodexV5HeartbeatDeviceSessionResponseSchema: z.ZodObject<{
1457
+ schemaVersion: z.ZodLiteral<5>;
1458
+ session: z.ZodObject<{
1459
+ id: z.ZodString;
1460
+ installationId: z.ZodString;
1461
+ lineageId: z.ZodString;
1462
+ status: z.ZodEnum<{
1463
+ ACTIVE: "ACTIVE";
1464
+ RECOVERY_REQUIRED: "RECOVERY_REQUIRED";
1465
+ }>;
1466
+ authorityEpoch: z.ZodNumber;
1467
+ generationVersion: z.ZodNumber;
1468
+ leaseExpiresAt: z.ZodString;
1469
+ }, z.core.$strict>;
1470
+ }, z.core.$strict>;
1471
+ export declare const CodexV5ReleaseDeviceSessionInputSchema: z.ZodObject<{
1472
+ schemaVersion: z.ZodLiteral<5>;
1473
+ installationId: z.ZodString;
1474
+ authorityEpoch: z.ZodNumber;
1475
+ expectedGenerationVersion: z.ZodNumber;
1476
+ }, z.core.$strict>;
1477
+ export declare const CodexV5ReleaseDeviceSessionResponseSchema: z.ZodObject<{
1478
+ schemaVersion: z.ZodLiteral<5>;
1479
+ session: z.ZodObject<{
1480
+ id: z.ZodString;
1481
+ installationId: z.ZodString;
1482
+ lineageId: z.ZodString;
1483
+ status: z.ZodLiteral<"RELEASED">;
1484
+ authorityEpoch: z.ZodNumber;
1485
+ generationVersion: z.ZodNumber;
1486
+ releasedAt: z.ZodString;
1487
+ }, z.core.$strict>;
1488
+ replayed: z.ZodBoolean;
1489
+ }, z.core.$strict>;
1490
+ export declare const CodexV5GenerationReportInputSchema: z.ZodObject<{
1491
+ schemaVersion: z.ZodLiteral<5>;
1492
+ clientRequestId: z.ZodString;
1493
+ installationId: z.ZodString;
1494
+ sessionId: z.ZodString;
1495
+ authorityEpoch: z.ZodNumber;
1496
+ expectedGenerationVersion: z.ZodNumber;
1497
+ rotationMode: z.ZodEnum<{
1498
+ RETAINED: "RETAINED";
1499
+ ROTATED: "ROTATED";
1500
+ }>;
1501
+ envelope: z.ZodObject<{
1502
+ version: z.ZodLiteral<1>;
1503
+ algorithm: z.ZodLiteral<"X25519-HKDF-SHA256-AES-256-GCM">;
1504
+ keyId: z.ZodString;
1505
+ ephemeralPublicKey: z.ZodString;
1506
+ salt: z.ZodString;
1507
+ nonce: z.ZodString;
1508
+ ciphertext: z.ZodString;
1509
+ authenticationTag: z.ZodString;
1510
+ }, z.core.$strict>;
1511
+ accessTokenHealth: z.ZodEnum<{
1512
+ EXPIRED: "EXPIRED";
1513
+ HEALTHY: "HEALTHY";
1514
+ REJECTED: "REJECTED";
1515
+ UNKNOWN: "UNKNOWN";
1516
+ }>;
1517
+ refreshTokenHealth: z.ZodEnum<{
1518
+ HEALTHY: "HEALTHY";
1519
+ REJECTED: "REJECTED";
1520
+ UNKNOWN: "UNKNOWN";
1521
+ }>;
1522
+ observedAt: z.ZodString;
1523
+ }, z.core.$strict>;
1524
+ export declare const CodexV5GenerationReportResponseSchema: z.ZodObject<{
1525
+ schemaVersion: z.ZodLiteral<5>;
1526
+ report: z.ZodObject<{
1527
+ id: z.ZodString;
1528
+ clientRequestId: z.ZodString;
1529
+ lineageId: z.ZodString;
1530
+ sessionId: z.ZodString;
1531
+ installationId: z.ZodString;
1532
+ previousGenerationVersion: z.ZodNumber;
1533
+ generationVersion: z.ZodNumber;
1534
+ rotationMode: z.ZodEnum<{
1535
+ RETAINED: "RETAINED";
1536
+ ROTATED: "ROTATED";
1537
+ }>;
1538
+ accessTokenHealth: z.ZodEnum<{
1539
+ EXPIRED: "EXPIRED";
1540
+ HEALTHY: "HEALTHY";
1541
+ REJECTED: "REJECTED";
1542
+ UNKNOWN: "UNKNOWN";
1543
+ }>;
1544
+ refreshTokenHealth: z.ZodEnum<{
1545
+ HEALTHY: "HEALTHY";
1546
+ REJECTED: "REJECTED";
1547
+ UNKNOWN: "UNKNOWN";
1548
+ }>;
1549
+ credentialExpiresAt: z.ZodString;
1550
+ observedAt: z.ZodString;
1551
+ status: z.ZodLiteral<"APPLIED">;
1552
+ authorityMode: z.ZodLiteral<"CLIENT_MANAGED">;
1553
+ authorityEpoch: z.ZodNumber;
1554
+ leaseExpiresAt: z.ZodString;
1555
+ }, z.core.$strict>;
1556
+ replayed: z.ZodBoolean;
1557
+ }, z.core.$strict>;
1558
+ /**
1559
+ * v6 makes one complete upstream token set the property of exactly one
1560
+ * request/device binding. A request may own several bindings for the same
1561
+ * user, but lineages and installation ids may never be shared by bindings.
1562
+ */
1563
+ export declare const CodexV6DeviceDescriptorSchema: z.ZodObject<{
1564
+ installationId: z.ZodString;
1565
+ label: z.ZodString;
1566
+ platform: z.ZodEnum<{
1567
+ darwin: "darwin";
1568
+ linux: "linux";
1569
+ unknown: "unknown";
1570
+ win32: "win32";
1571
+ }>;
1572
+ }, z.core.$strict>;
1573
+ export declare const CodexV6AccountRequestStatusSchema: z.ZodEnum<{
1574
+ APPROVED: "APPROVED";
1575
+ CANCELLED: "CANCELLED";
1576
+ EXPIRED: "EXPIRED";
1577
+ REJECTED: "REJECTED";
1578
+ SUBMITTED: "SUBMITTED";
1579
+ }>;
1580
+ export declare const CodexV6AccountRequestAvailabilitySchema: z.ZodEnum<{
1581
+ AVAILABLE: "AVAILABLE";
1582
+ EXPIRED: "EXPIRED";
1583
+ PARTIALLY_AVAILABLE: "PARTIALLY_AVAILABLE";
1584
+ PENDING_APPROVAL: "PENDING_APPROVAL";
1585
+ UNAVAILABLE: "UNAVAILABLE";
1586
+ WAITING_FOR_BINDING: "WAITING_FOR_BINDING";
1587
+ }>;
1588
+ export declare const CodexV6AccountRequestSchema: z.ZodObject<{
1589
+ id: z.ZodString;
1590
+ userSubject: z.ZodString;
1591
+ username: z.ZodString;
1592
+ userEmail: z.ZodNullable<z.ZodEmail>;
1593
+ status: z.ZodEnum<{
1594
+ APPROVED: "APPROVED";
1595
+ CANCELLED: "CANCELLED";
1596
+ EXPIRED: "EXPIRED";
1597
+ REJECTED: "REJECTED";
1598
+ SUBMITTED: "SUBMITTED";
1599
+ }>;
1600
+ availability: z.ZodEnum<{
1601
+ AVAILABLE: "AVAILABLE";
1602
+ EXPIRED: "EXPIRED";
1603
+ PARTIALLY_AVAILABLE: "PARTIALLY_AVAILABLE";
1604
+ PENDING_APPROVAL: "PENDING_APPROVAL";
1605
+ UNAVAILABLE: "UNAVAILABLE";
1606
+ WAITING_FOR_BINDING: "WAITING_FOR_BINDING";
1607
+ }>;
1608
+ reason: z.ZodString;
1609
+ requestedDeviceCount: z.ZodNumber;
1610
+ approvedDeviceLimit: z.ZodNullable<z.ZodNumber>;
1611
+ activeBindingCount: z.ZodNumber;
1612
+ pendingBindingCount: z.ZodNumber;
1613
+ requestedValidUntil: z.ZodString;
1614
+ validFrom: z.ZodNullable<z.ZodString>;
1615
+ validUntil: z.ZodNullable<z.ZodString>;
1616
+ version: z.ZodNumber;
1617
+ createdAt: z.ZodString;
1618
+ submittedAt: z.ZodString;
1619
+ reviewedAt: z.ZodNullable<z.ZodString>;
1620
+ safeErrorCode: z.ZodNullable<z.ZodString>;
1621
+ allowedActions: z.ZodArray<z.ZodEnum<{
1622
+ CANCEL: "CANCEL";
1623
+ CLAIM_DEVICE: "CLAIM_DEVICE";
1624
+ VIEW_BINDINGS: "VIEW_BINDINGS";
1625
+ }>>;
1626
+ }, z.core.$strict>;
1627
+ export declare const CodexV6CreateAccountRequestInputSchema: z.ZodObject<{
1628
+ schemaVersion: z.ZodLiteral<6>;
1629
+ clientRequestId: z.ZodString;
1630
+ reason: z.ZodString;
1631
+ requestedDeviceCount: z.ZodNumber;
1632
+ requestedValidUntil: z.ZodString;
1633
+ initialDevice: z.ZodObject<{
1634
+ installationId: z.ZodString;
1635
+ label: z.ZodString;
1636
+ platform: z.ZodEnum<{
1637
+ darwin: "darwin";
1638
+ linux: "linux";
1639
+ unknown: "unknown";
1640
+ win32: "win32";
1641
+ }>;
1642
+ }, z.core.$strict>;
1643
+ }, z.core.$strict>;
1644
+ export declare const CodexV6AccountRequestResponseSchema: z.ZodObject<{
1645
+ schemaVersion: z.ZodLiteral<6>;
1646
+ request: z.ZodObject<{
1647
+ id: z.ZodString;
1648
+ userSubject: z.ZodString;
1649
+ username: z.ZodString;
1650
+ userEmail: z.ZodNullable<z.ZodEmail>;
1651
+ status: z.ZodEnum<{
1652
+ APPROVED: "APPROVED";
1653
+ CANCELLED: "CANCELLED";
1654
+ EXPIRED: "EXPIRED";
1655
+ REJECTED: "REJECTED";
1656
+ SUBMITTED: "SUBMITTED";
1657
+ }>;
1658
+ availability: z.ZodEnum<{
1659
+ AVAILABLE: "AVAILABLE";
1660
+ EXPIRED: "EXPIRED";
1661
+ PARTIALLY_AVAILABLE: "PARTIALLY_AVAILABLE";
1662
+ PENDING_APPROVAL: "PENDING_APPROVAL";
1663
+ UNAVAILABLE: "UNAVAILABLE";
1664
+ WAITING_FOR_BINDING: "WAITING_FOR_BINDING";
1665
+ }>;
1666
+ reason: z.ZodString;
1667
+ requestedDeviceCount: z.ZodNumber;
1668
+ approvedDeviceLimit: z.ZodNullable<z.ZodNumber>;
1669
+ activeBindingCount: z.ZodNumber;
1670
+ pendingBindingCount: z.ZodNumber;
1671
+ requestedValidUntil: z.ZodString;
1672
+ validFrom: z.ZodNullable<z.ZodString>;
1673
+ validUntil: z.ZodNullable<z.ZodString>;
1674
+ version: z.ZodNumber;
1675
+ createdAt: z.ZodString;
1676
+ submittedAt: z.ZodString;
1677
+ reviewedAt: z.ZodNullable<z.ZodString>;
1678
+ safeErrorCode: z.ZodNullable<z.ZodString>;
1679
+ allowedActions: z.ZodArray<z.ZodEnum<{
1680
+ CANCEL: "CANCEL";
1681
+ CLAIM_DEVICE: "CLAIM_DEVICE";
1682
+ VIEW_BINDINGS: "VIEW_BINDINGS";
1683
+ }>>;
1684
+ }, z.core.$strict>;
1685
+ replayed: z.ZodBoolean;
1686
+ }, z.core.$strict>;
1687
+ export declare const CodexV6AccountRequestListResponseSchema: z.ZodObject<{
1688
+ schemaVersion: z.ZodLiteral<6>;
1689
+ items: z.ZodArray<z.ZodObject<{
1690
+ id: z.ZodString;
1691
+ userSubject: z.ZodString;
1692
+ username: z.ZodString;
1693
+ userEmail: z.ZodNullable<z.ZodEmail>;
1694
+ status: z.ZodEnum<{
1695
+ APPROVED: "APPROVED";
1696
+ CANCELLED: "CANCELLED";
1697
+ EXPIRED: "EXPIRED";
1698
+ REJECTED: "REJECTED";
1699
+ SUBMITTED: "SUBMITTED";
1700
+ }>;
1701
+ availability: z.ZodEnum<{
1702
+ AVAILABLE: "AVAILABLE";
1703
+ EXPIRED: "EXPIRED";
1704
+ PARTIALLY_AVAILABLE: "PARTIALLY_AVAILABLE";
1705
+ PENDING_APPROVAL: "PENDING_APPROVAL";
1706
+ UNAVAILABLE: "UNAVAILABLE";
1707
+ WAITING_FOR_BINDING: "WAITING_FOR_BINDING";
1708
+ }>;
1709
+ reason: z.ZodString;
1710
+ requestedDeviceCount: z.ZodNumber;
1711
+ approvedDeviceLimit: z.ZodNullable<z.ZodNumber>;
1712
+ activeBindingCount: z.ZodNumber;
1713
+ pendingBindingCount: z.ZodNumber;
1714
+ requestedValidUntil: z.ZodString;
1715
+ validFrom: z.ZodNullable<z.ZodString>;
1716
+ validUntil: z.ZodNullable<z.ZodString>;
1717
+ version: z.ZodNumber;
1718
+ createdAt: z.ZodString;
1719
+ submittedAt: z.ZodString;
1720
+ reviewedAt: z.ZodNullable<z.ZodString>;
1721
+ safeErrorCode: z.ZodNullable<z.ZodString>;
1722
+ allowedActions: z.ZodArray<z.ZodEnum<{
1723
+ CANCEL: "CANCEL";
1724
+ CLAIM_DEVICE: "CLAIM_DEVICE";
1725
+ VIEW_BINDINGS: "VIEW_BINDINGS";
1726
+ }>>;
1727
+ }, z.core.$strict>>;
1728
+ total: z.ZodNumber;
1729
+ }, z.core.$strict>;
1730
+ export declare const CodexV6AdminAccountRequestListQuerySchema: z.ZodObject<{
1731
+ expiresBefore: z.ZodOptional<z.ZodString>;
1732
+ includeTerminal: z.ZodOptional<z.ZodBoolean>;
1733
+ }, z.core.$strict>;
1734
+ export declare const CodexV6AdminReplacementCandidateQuerySchema: z.ZodObject<{
1735
+ replaceBefore: z.ZodString;
1736
+ }, z.core.$strict>;
1737
+ export declare const CodexV6CancelAccountRequestInputSchema: z.ZodObject<{
1738
+ schemaVersion: z.ZodLiteral<6>;
1739
+ expectedRequestVersion: z.ZodNumber;
1740
+ }, z.core.$strict>;
1741
+ export declare const CodexV6AdminReviewAccountRequestInputSchema: z.ZodObject<{
1742
+ schemaVersion: z.ZodLiteral<6>;
1743
+ expectedRequestVersion: z.ZodNumber;
1744
+ decision: z.ZodEnum<{
1745
+ APPROVE: "APPROVE";
1746
+ REJECT: "REJECT";
1747
+ }>;
1748
+ reason: z.ZodString;
1749
+ approvedDeviceLimit: z.ZodNullable<z.ZodNumber>;
1750
+ validFrom: z.ZodNullable<z.ZodString>;
1751
+ validUntil: z.ZodNullable<z.ZodString>;
1752
+ }, z.core.$strict>;
1753
+ export declare const CodexV6DeviceBindingStatusSchema: z.ZodEnum<{
1754
+ ACTIVE: "ACTIVE";
1755
+ NEEDS_REAUTH: "NEEDS_REAUTH";
1756
+ PENDING_TOKEN: "PENDING_TOKEN";
1757
+ READY: "READY";
1758
+ REPLACEMENT_PENDING: "REPLACEMENT_PENDING";
1759
+ RETIRED: "RETIRED";
1760
+ RETIREMENT_PENDING: "RETIREMENT_PENDING";
1761
+ }>;
1762
+ export declare const CodexV6DeviceBindingSchema: z.ZodObject<{
1763
+ id: z.ZodString;
1764
+ requestId: z.ZodString;
1765
+ userSubject: z.ZodString;
1766
+ installationId: z.ZodString;
1767
+ deviceLabel: z.ZodString;
1768
+ platform: z.ZodEnum<{
1769
+ darwin: "darwin";
1770
+ linux: "linux";
1771
+ unknown: "unknown";
1772
+ win32: "win32";
1773
+ }>;
1774
+ source: z.ZodEnum<{
1775
+ ACCOUNT_REPLACEMENT: "ACCOUNT_REPLACEMENT";
1776
+ ADMIN_ADDED: "ADMIN_ADDED";
1777
+ LEGACY_AUTO_MIGRATED: "LEGACY_AUTO_MIGRATED";
1778
+ REQUEST_INITIAL: "REQUEST_INITIAL";
1779
+ }>;
1780
+ status: z.ZodEnum<{
1781
+ ACTIVE: "ACTIVE";
1782
+ NEEDS_REAUTH: "NEEDS_REAUTH";
1783
+ PENDING_TOKEN: "PENDING_TOKEN";
1784
+ READY: "READY";
1785
+ REPLACEMENT_PENDING: "REPLACEMENT_PENDING";
1786
+ RETIRED: "RETIRED";
1787
+ RETIREMENT_PENDING: "RETIREMENT_PENDING";
1788
+ }>;
1789
+ predecessorBindingId: z.ZodNullable<z.ZodString>;
1790
+ managedAccountId: z.ZodNullable<z.ZodString>;
1791
+ providerAccountId: z.ZodNullable<z.ZodString>;
1792
+ poolEntryId: z.ZodNullable<z.ZodString>;
1793
+ credentialLineageId: z.ZodNullable<z.ZodString>;
1794
+ generationVersion: z.ZodNullable<z.ZodNumber>;
1795
+ credentialExpiresAt: z.ZodNullable<z.ZodString>;
1796
+ accountExpiresAt: z.ZodNullable<z.ZodString>;
1797
+ replacementDueAt: z.ZodNullable<z.ZodString>;
1798
+ replacementReason: z.ZodNullable<z.ZodEnum<{
1799
+ ADMIN_REQUESTED: "ADMIN_REQUESTED";
1800
+ CREDENTIAL_UNHEALTHY: "CREDENTIAL_UNHEALTHY";
1801
+ SUBSCRIPTION_EXPIRING: "SUBSCRIPTION_EXPIRING";
1802
+ }>>;
1803
+ accessTokenHealth: z.ZodEnum<{
1804
+ EXPIRED: "EXPIRED";
1805
+ HEALTHY: "HEALTHY";
1806
+ REJECTED: "REJECTED";
1807
+ UNKNOWN: "UNKNOWN";
1808
+ }>;
1809
+ refreshTokenHealth: z.ZodEnum<{
1810
+ HEALTHY: "HEALTHY";
1811
+ REJECTED: "REJECTED";
1812
+ UNKNOWN: "UNKNOWN";
1813
+ }>;
1814
+ legacyAssignmentId: z.ZodNullable<z.ZodString>;
1815
+ createdAt: z.ZodString;
1816
+ activatedAt: z.ZodNullable<z.ZodString>;
1817
+ retiredAt: z.ZodNullable<z.ZodString>;
1818
+ }, z.core.$strict>;
1819
+ export declare const CodexV6DeviceBindingListResponseSchema: z.ZodObject<{
1820
+ schemaVersion: z.ZodLiteral<6>;
1821
+ items: z.ZodArray<z.ZodObject<{
1822
+ id: z.ZodString;
1823
+ requestId: z.ZodString;
1824
+ userSubject: z.ZodString;
1825
+ installationId: z.ZodString;
1826
+ deviceLabel: z.ZodString;
1827
+ platform: z.ZodEnum<{
1828
+ darwin: "darwin";
1829
+ linux: "linux";
1830
+ unknown: "unknown";
1831
+ win32: "win32";
1832
+ }>;
1833
+ source: z.ZodEnum<{
1834
+ ACCOUNT_REPLACEMENT: "ACCOUNT_REPLACEMENT";
1835
+ ADMIN_ADDED: "ADMIN_ADDED";
1836
+ LEGACY_AUTO_MIGRATED: "LEGACY_AUTO_MIGRATED";
1837
+ REQUEST_INITIAL: "REQUEST_INITIAL";
1838
+ }>;
1839
+ status: z.ZodEnum<{
1840
+ ACTIVE: "ACTIVE";
1841
+ NEEDS_REAUTH: "NEEDS_REAUTH";
1842
+ PENDING_TOKEN: "PENDING_TOKEN";
1843
+ READY: "READY";
1844
+ REPLACEMENT_PENDING: "REPLACEMENT_PENDING";
1845
+ RETIRED: "RETIRED";
1846
+ RETIREMENT_PENDING: "RETIREMENT_PENDING";
1847
+ }>;
1848
+ predecessorBindingId: z.ZodNullable<z.ZodString>;
1849
+ managedAccountId: z.ZodNullable<z.ZodString>;
1850
+ providerAccountId: z.ZodNullable<z.ZodString>;
1851
+ poolEntryId: z.ZodNullable<z.ZodString>;
1852
+ credentialLineageId: z.ZodNullable<z.ZodString>;
1853
+ generationVersion: z.ZodNullable<z.ZodNumber>;
1854
+ credentialExpiresAt: z.ZodNullable<z.ZodString>;
1855
+ accountExpiresAt: z.ZodNullable<z.ZodString>;
1856
+ replacementDueAt: z.ZodNullable<z.ZodString>;
1857
+ replacementReason: z.ZodNullable<z.ZodEnum<{
1858
+ ADMIN_REQUESTED: "ADMIN_REQUESTED";
1859
+ CREDENTIAL_UNHEALTHY: "CREDENTIAL_UNHEALTHY";
1860
+ SUBSCRIPTION_EXPIRING: "SUBSCRIPTION_EXPIRING";
1861
+ }>>;
1862
+ accessTokenHealth: z.ZodEnum<{
1863
+ EXPIRED: "EXPIRED";
1864
+ HEALTHY: "HEALTHY";
1865
+ REJECTED: "REJECTED";
1866
+ UNKNOWN: "UNKNOWN";
1867
+ }>;
1868
+ refreshTokenHealth: z.ZodEnum<{
1869
+ HEALTHY: "HEALTHY";
1870
+ REJECTED: "REJECTED";
1871
+ UNKNOWN: "UNKNOWN";
1872
+ }>;
1873
+ legacyAssignmentId: z.ZodNullable<z.ZodString>;
1874
+ createdAt: z.ZodString;
1875
+ activatedAt: z.ZodNullable<z.ZodString>;
1876
+ retiredAt: z.ZodNullable<z.ZodString>;
1877
+ }, z.core.$strict>>;
1878
+ total: z.ZodNumber;
1879
+ }, z.core.$strict>;
1880
+ export declare const CodexV6AdminReplacementCandidateListResponseSchema: z.ZodObject<{
1881
+ schemaVersion: z.ZodLiteral<6>;
1882
+ items: z.ZodArray<z.ZodObject<{
1883
+ request: z.ZodObject<{
1884
+ id: z.ZodString;
1885
+ userSubject: z.ZodString;
1886
+ username: z.ZodString;
1887
+ userEmail: z.ZodNullable<z.ZodEmail>;
1888
+ status: z.ZodEnum<{
1889
+ APPROVED: "APPROVED";
1890
+ CANCELLED: "CANCELLED";
1891
+ EXPIRED: "EXPIRED";
1892
+ REJECTED: "REJECTED";
1893
+ SUBMITTED: "SUBMITTED";
1894
+ }>;
1895
+ availability: z.ZodEnum<{
1896
+ AVAILABLE: "AVAILABLE";
1897
+ EXPIRED: "EXPIRED";
1898
+ PARTIALLY_AVAILABLE: "PARTIALLY_AVAILABLE";
1899
+ PENDING_APPROVAL: "PENDING_APPROVAL";
1900
+ UNAVAILABLE: "UNAVAILABLE";
1901
+ WAITING_FOR_BINDING: "WAITING_FOR_BINDING";
1902
+ }>;
1903
+ reason: z.ZodString;
1904
+ requestedDeviceCount: z.ZodNumber;
1905
+ approvedDeviceLimit: z.ZodNullable<z.ZodNumber>;
1906
+ activeBindingCount: z.ZodNumber;
1907
+ pendingBindingCount: z.ZodNumber;
1908
+ requestedValidUntil: z.ZodString;
1909
+ validFrom: z.ZodNullable<z.ZodString>;
1910
+ validUntil: z.ZodNullable<z.ZodString>;
1911
+ version: z.ZodNumber;
1912
+ createdAt: z.ZodString;
1913
+ submittedAt: z.ZodString;
1914
+ reviewedAt: z.ZodNullable<z.ZodString>;
1915
+ safeErrorCode: z.ZodNullable<z.ZodString>;
1916
+ allowedActions: z.ZodArray<z.ZodEnum<{
1917
+ CANCEL: "CANCEL";
1918
+ CLAIM_DEVICE: "CLAIM_DEVICE";
1919
+ VIEW_BINDINGS: "VIEW_BINDINGS";
1920
+ }>>;
1921
+ }, z.core.$strict>;
1922
+ binding: z.ZodObject<{
1923
+ id: z.ZodString;
1924
+ requestId: z.ZodString;
1925
+ userSubject: z.ZodString;
1926
+ installationId: z.ZodString;
1927
+ deviceLabel: z.ZodString;
1928
+ platform: z.ZodEnum<{
1929
+ darwin: "darwin";
1930
+ linux: "linux";
1931
+ unknown: "unknown";
1932
+ win32: "win32";
1933
+ }>;
1934
+ source: z.ZodEnum<{
1935
+ ACCOUNT_REPLACEMENT: "ACCOUNT_REPLACEMENT";
1936
+ ADMIN_ADDED: "ADMIN_ADDED";
1937
+ LEGACY_AUTO_MIGRATED: "LEGACY_AUTO_MIGRATED";
1938
+ REQUEST_INITIAL: "REQUEST_INITIAL";
1939
+ }>;
1940
+ status: z.ZodEnum<{
1941
+ ACTIVE: "ACTIVE";
1942
+ NEEDS_REAUTH: "NEEDS_REAUTH";
1943
+ PENDING_TOKEN: "PENDING_TOKEN";
1944
+ READY: "READY";
1945
+ REPLACEMENT_PENDING: "REPLACEMENT_PENDING";
1946
+ RETIRED: "RETIRED";
1947
+ RETIREMENT_PENDING: "RETIREMENT_PENDING";
1948
+ }>;
1949
+ predecessorBindingId: z.ZodNullable<z.ZodString>;
1950
+ managedAccountId: z.ZodNullable<z.ZodString>;
1951
+ providerAccountId: z.ZodNullable<z.ZodString>;
1952
+ poolEntryId: z.ZodNullable<z.ZodString>;
1953
+ credentialLineageId: z.ZodNullable<z.ZodString>;
1954
+ generationVersion: z.ZodNullable<z.ZodNumber>;
1955
+ credentialExpiresAt: z.ZodNullable<z.ZodString>;
1956
+ accountExpiresAt: z.ZodNullable<z.ZodString>;
1957
+ replacementDueAt: z.ZodNullable<z.ZodString>;
1958
+ replacementReason: z.ZodNullable<z.ZodEnum<{
1959
+ ADMIN_REQUESTED: "ADMIN_REQUESTED";
1960
+ CREDENTIAL_UNHEALTHY: "CREDENTIAL_UNHEALTHY";
1961
+ SUBSCRIPTION_EXPIRING: "SUBSCRIPTION_EXPIRING";
1962
+ }>>;
1963
+ accessTokenHealth: z.ZodEnum<{
1964
+ EXPIRED: "EXPIRED";
1965
+ HEALTHY: "HEALTHY";
1966
+ REJECTED: "REJECTED";
1967
+ UNKNOWN: "UNKNOWN";
1968
+ }>;
1969
+ refreshTokenHealth: z.ZodEnum<{
1970
+ HEALTHY: "HEALTHY";
1971
+ REJECTED: "REJECTED";
1972
+ UNKNOWN: "UNKNOWN";
1973
+ }>;
1974
+ legacyAssignmentId: z.ZodNullable<z.ZodString>;
1975
+ createdAt: z.ZodString;
1976
+ activatedAt: z.ZodNullable<z.ZodString>;
1977
+ retiredAt: z.ZodNullable<z.ZodString>;
1978
+ }, z.core.$strict>;
1979
+ recommendedReason: z.ZodEnum<{
1980
+ ADMIN_REQUESTED: "ADMIN_REQUESTED";
1981
+ CREDENTIAL_UNHEALTHY: "CREDENTIAL_UNHEALTHY";
1982
+ SUBSCRIPTION_EXPIRING: "SUBSCRIPTION_EXPIRING";
1983
+ }>;
1984
+ replaceBefore: z.ZodString;
1985
+ }, z.core.$strict>>;
1986
+ total: z.ZodNumber;
1987
+ }, z.core.$strict>;
1988
+ export declare const CodexV6ReconcileDeviceAccessInputSchema: z.ZodObject<{
1989
+ schemaVersion: z.ZodLiteral<6>;
1990
+ clientRequestId: z.ZodString;
1991
+ device: z.ZodObject<{
1992
+ installationId: z.ZodString;
1993
+ label: z.ZodString;
1994
+ platform: z.ZodEnum<{
1995
+ darwin: "darwin";
1996
+ linux: "linux";
1997
+ unknown: "unknown";
1998
+ win32: "win32";
1999
+ }>;
2000
+ }, z.core.$strict>;
2001
+ legacy: z.ZodNullable<z.ZodObject<{
2002
+ assignmentId: z.ZodString;
2003
+ managedAccountId: z.ZodString;
2004
+ providerAccountId: z.ZodString;
2005
+ lineageId: z.ZodString;
2006
+ generationVersion: z.ZodNumber;
2007
+ }, z.core.$strict>>;
2008
+ }, z.core.$strict>;
2009
+ export declare const CodexV6ReconcileDeviceAccessResponseSchema: z.ZodObject<{
2010
+ schemaVersion: z.ZodLiteral<6>;
2011
+ accessStatus: z.ZodEnum<{
2012
+ AVAILABLE: "AVAILABLE";
2013
+ DEVICE_BINDING_REQUIRED: "DEVICE_BINDING_REQUIRED";
2014
+ REQUEST_EXPIRED: "REQUEST_EXPIRED";
2015
+ REQUEST_PENDING: "REQUEST_PENDING";
2016
+ REQUEST_REQUIRED: "REQUEST_REQUIRED";
2017
+ TOKEN_PENDING: "TOKEN_PENDING";
2018
+ UNAVAILABLE: "UNAVAILABLE";
2019
+ }>;
2020
+ request: z.ZodNullable<z.ZodObject<{
2021
+ id: z.ZodString;
2022
+ userSubject: z.ZodString;
2023
+ username: z.ZodString;
2024
+ userEmail: z.ZodNullable<z.ZodEmail>;
2025
+ status: z.ZodEnum<{
2026
+ APPROVED: "APPROVED";
2027
+ CANCELLED: "CANCELLED";
2028
+ EXPIRED: "EXPIRED";
2029
+ REJECTED: "REJECTED";
2030
+ SUBMITTED: "SUBMITTED";
2031
+ }>;
2032
+ availability: z.ZodEnum<{
2033
+ AVAILABLE: "AVAILABLE";
2034
+ EXPIRED: "EXPIRED";
2035
+ PARTIALLY_AVAILABLE: "PARTIALLY_AVAILABLE";
2036
+ PENDING_APPROVAL: "PENDING_APPROVAL";
2037
+ UNAVAILABLE: "UNAVAILABLE";
2038
+ WAITING_FOR_BINDING: "WAITING_FOR_BINDING";
2039
+ }>;
2040
+ reason: z.ZodString;
2041
+ requestedDeviceCount: z.ZodNumber;
2042
+ approvedDeviceLimit: z.ZodNullable<z.ZodNumber>;
2043
+ activeBindingCount: z.ZodNumber;
2044
+ pendingBindingCount: z.ZodNumber;
2045
+ requestedValidUntil: z.ZodString;
2046
+ validFrom: z.ZodNullable<z.ZodString>;
2047
+ validUntil: z.ZodNullable<z.ZodString>;
2048
+ version: z.ZodNumber;
2049
+ createdAt: z.ZodString;
2050
+ submittedAt: z.ZodString;
2051
+ reviewedAt: z.ZodNullable<z.ZodString>;
2052
+ safeErrorCode: z.ZodNullable<z.ZodString>;
2053
+ allowedActions: z.ZodArray<z.ZodEnum<{
2054
+ CANCEL: "CANCEL";
2055
+ CLAIM_DEVICE: "CLAIM_DEVICE";
2056
+ VIEW_BINDINGS: "VIEW_BINDINGS";
2057
+ }>>;
2058
+ }, z.core.$strict>>;
2059
+ binding: z.ZodNullable<z.ZodObject<{
2060
+ id: z.ZodString;
2061
+ requestId: z.ZodString;
2062
+ userSubject: z.ZodString;
2063
+ installationId: z.ZodString;
2064
+ deviceLabel: z.ZodString;
2065
+ platform: z.ZodEnum<{
2066
+ darwin: "darwin";
2067
+ linux: "linux";
2068
+ unknown: "unknown";
2069
+ win32: "win32";
2070
+ }>;
2071
+ source: z.ZodEnum<{
2072
+ ACCOUNT_REPLACEMENT: "ACCOUNT_REPLACEMENT";
2073
+ ADMIN_ADDED: "ADMIN_ADDED";
2074
+ LEGACY_AUTO_MIGRATED: "LEGACY_AUTO_MIGRATED";
2075
+ REQUEST_INITIAL: "REQUEST_INITIAL";
2076
+ }>;
2077
+ status: z.ZodEnum<{
2078
+ ACTIVE: "ACTIVE";
2079
+ NEEDS_REAUTH: "NEEDS_REAUTH";
2080
+ PENDING_TOKEN: "PENDING_TOKEN";
2081
+ READY: "READY";
2082
+ REPLACEMENT_PENDING: "REPLACEMENT_PENDING";
2083
+ RETIRED: "RETIRED";
2084
+ RETIREMENT_PENDING: "RETIREMENT_PENDING";
2085
+ }>;
2086
+ predecessorBindingId: z.ZodNullable<z.ZodString>;
2087
+ managedAccountId: z.ZodNullable<z.ZodString>;
2088
+ providerAccountId: z.ZodNullable<z.ZodString>;
2089
+ poolEntryId: z.ZodNullable<z.ZodString>;
2090
+ credentialLineageId: z.ZodNullable<z.ZodString>;
2091
+ generationVersion: z.ZodNullable<z.ZodNumber>;
2092
+ credentialExpiresAt: z.ZodNullable<z.ZodString>;
2093
+ accountExpiresAt: z.ZodNullable<z.ZodString>;
2094
+ replacementDueAt: z.ZodNullable<z.ZodString>;
2095
+ replacementReason: z.ZodNullable<z.ZodEnum<{
2096
+ ADMIN_REQUESTED: "ADMIN_REQUESTED";
2097
+ CREDENTIAL_UNHEALTHY: "CREDENTIAL_UNHEALTHY";
2098
+ SUBSCRIPTION_EXPIRING: "SUBSCRIPTION_EXPIRING";
2099
+ }>>;
2100
+ accessTokenHealth: z.ZodEnum<{
2101
+ EXPIRED: "EXPIRED";
2102
+ HEALTHY: "HEALTHY";
2103
+ REJECTED: "REJECTED";
2104
+ UNKNOWN: "UNKNOWN";
2105
+ }>;
2106
+ refreshTokenHealth: z.ZodEnum<{
2107
+ HEALTHY: "HEALTHY";
2108
+ REJECTED: "REJECTED";
2109
+ UNKNOWN: "UNKNOWN";
2110
+ }>;
2111
+ legacyAssignmentId: z.ZodNullable<z.ZodString>;
2112
+ createdAt: z.ZodString;
2113
+ activatedAt: z.ZodNullable<z.ZodString>;
2114
+ retiredAt: z.ZodNullable<z.ZodString>;
2115
+ }, z.core.$strict>>;
2116
+ replacementBinding: z.ZodNullable<z.ZodObject<{
2117
+ id: z.ZodString;
2118
+ requestId: z.ZodString;
2119
+ userSubject: z.ZodString;
2120
+ installationId: z.ZodString;
2121
+ deviceLabel: z.ZodString;
2122
+ platform: z.ZodEnum<{
2123
+ darwin: "darwin";
2124
+ linux: "linux";
2125
+ unknown: "unknown";
2126
+ win32: "win32";
2127
+ }>;
2128
+ source: z.ZodEnum<{
2129
+ ACCOUNT_REPLACEMENT: "ACCOUNT_REPLACEMENT";
2130
+ ADMIN_ADDED: "ADMIN_ADDED";
2131
+ LEGACY_AUTO_MIGRATED: "LEGACY_AUTO_MIGRATED";
2132
+ REQUEST_INITIAL: "REQUEST_INITIAL";
2133
+ }>;
2134
+ status: z.ZodEnum<{
2135
+ ACTIVE: "ACTIVE";
2136
+ NEEDS_REAUTH: "NEEDS_REAUTH";
2137
+ PENDING_TOKEN: "PENDING_TOKEN";
2138
+ READY: "READY";
2139
+ REPLACEMENT_PENDING: "REPLACEMENT_PENDING";
2140
+ RETIRED: "RETIRED";
2141
+ RETIREMENT_PENDING: "RETIREMENT_PENDING";
2142
+ }>;
2143
+ predecessorBindingId: z.ZodNullable<z.ZodString>;
2144
+ managedAccountId: z.ZodNullable<z.ZodString>;
2145
+ providerAccountId: z.ZodNullable<z.ZodString>;
2146
+ poolEntryId: z.ZodNullable<z.ZodString>;
2147
+ credentialLineageId: z.ZodNullable<z.ZodString>;
2148
+ generationVersion: z.ZodNullable<z.ZodNumber>;
2149
+ credentialExpiresAt: z.ZodNullable<z.ZodString>;
2150
+ accountExpiresAt: z.ZodNullable<z.ZodString>;
2151
+ replacementDueAt: z.ZodNullable<z.ZodString>;
2152
+ replacementReason: z.ZodNullable<z.ZodEnum<{
2153
+ ADMIN_REQUESTED: "ADMIN_REQUESTED";
2154
+ CREDENTIAL_UNHEALTHY: "CREDENTIAL_UNHEALTHY";
2155
+ SUBSCRIPTION_EXPIRING: "SUBSCRIPTION_EXPIRING";
2156
+ }>>;
2157
+ accessTokenHealth: z.ZodEnum<{
2158
+ EXPIRED: "EXPIRED";
2159
+ HEALTHY: "HEALTHY";
2160
+ REJECTED: "REJECTED";
2161
+ UNKNOWN: "UNKNOWN";
2162
+ }>;
2163
+ refreshTokenHealth: z.ZodEnum<{
2164
+ HEALTHY: "HEALTHY";
2165
+ REJECTED: "REJECTED";
2166
+ UNKNOWN: "UNKNOWN";
2167
+ }>;
2168
+ legacyAssignmentId: z.ZodNullable<z.ZodString>;
2169
+ createdAt: z.ZodString;
2170
+ activatedAt: z.ZodNullable<z.ZodString>;
2171
+ retiredAt: z.ZodNullable<z.ZodString>;
2172
+ }, z.core.$strict>>;
2173
+ migration: z.ZodEnum<{
2174
+ ADDITIONAL_DEVICE_DETECTED: "ADDITIONAL_DEVICE_DETECTED";
2175
+ ALREADY_MIGRATED: "ALREADY_MIGRATED";
2176
+ AUTO_MIGRATED: "AUTO_MIGRATED";
2177
+ NONE: "NONE";
2178
+ }>;
2179
+ guidanceCode: z.ZodNullable<z.ZodEnum<{
2180
+ account_request_expired: "account_request_expired";
2181
+ account_request_pending: "account_request_pending";
2182
+ account_request_required: "account_request_required";
2183
+ account_unavailable: "account_unavailable";
2184
+ device_binding_admin_required: "device_binding_admin_required";
2185
+ device_token_pending: "device_token_pending";
2186
+ }>>;
2187
+ replayed: z.ZodBoolean;
2188
+ }, z.core.$strict>;
2189
+ export declare const CodexV6AdminCreateDeviceBindingInputSchema: z.ZodObject<{
2190
+ schemaVersion: z.ZodLiteral<6>;
2191
+ expectedRequestVersion: z.ZodNumber;
2192
+ device: z.ZodObject<{
2193
+ installationId: z.ZodString;
2194
+ label: z.ZodString;
2195
+ platform: z.ZodEnum<{
2196
+ darwin: "darwin";
2197
+ linux: "linux";
2198
+ unknown: "unknown";
2199
+ win32: "win32";
2200
+ }>;
2201
+ }, z.core.$strict>;
2202
+ poolEntryId: z.ZodNullable<z.ZodString>;
2203
+ }, z.core.$strict>;
2204
+ export declare const CodexV6AdminCreateDeviceBindingResponseSchema: z.ZodObject<{
2205
+ schemaVersion: z.ZodLiteral<6>;
2206
+ request: z.ZodObject<{
2207
+ id: z.ZodString;
2208
+ userSubject: z.ZodString;
2209
+ username: z.ZodString;
2210
+ userEmail: z.ZodNullable<z.ZodEmail>;
2211
+ status: z.ZodEnum<{
2212
+ APPROVED: "APPROVED";
2213
+ CANCELLED: "CANCELLED";
2214
+ EXPIRED: "EXPIRED";
2215
+ REJECTED: "REJECTED";
2216
+ SUBMITTED: "SUBMITTED";
2217
+ }>;
2218
+ availability: z.ZodEnum<{
2219
+ AVAILABLE: "AVAILABLE";
2220
+ EXPIRED: "EXPIRED";
2221
+ PARTIALLY_AVAILABLE: "PARTIALLY_AVAILABLE";
2222
+ PENDING_APPROVAL: "PENDING_APPROVAL";
2223
+ UNAVAILABLE: "UNAVAILABLE";
2224
+ WAITING_FOR_BINDING: "WAITING_FOR_BINDING";
2225
+ }>;
2226
+ reason: z.ZodString;
2227
+ requestedDeviceCount: z.ZodNumber;
2228
+ approvedDeviceLimit: z.ZodNullable<z.ZodNumber>;
2229
+ activeBindingCount: z.ZodNumber;
2230
+ pendingBindingCount: z.ZodNumber;
2231
+ requestedValidUntil: z.ZodString;
2232
+ validFrom: z.ZodNullable<z.ZodString>;
2233
+ validUntil: z.ZodNullable<z.ZodString>;
2234
+ version: z.ZodNumber;
2235
+ createdAt: z.ZodString;
2236
+ submittedAt: z.ZodString;
2237
+ reviewedAt: z.ZodNullable<z.ZodString>;
2238
+ safeErrorCode: z.ZodNullable<z.ZodString>;
2239
+ allowedActions: z.ZodArray<z.ZodEnum<{
2240
+ CANCEL: "CANCEL";
2241
+ CLAIM_DEVICE: "CLAIM_DEVICE";
2242
+ VIEW_BINDINGS: "VIEW_BINDINGS";
2243
+ }>>;
2244
+ }, z.core.$strict>;
2245
+ binding: z.ZodObject<{
2246
+ id: z.ZodString;
2247
+ requestId: z.ZodString;
2248
+ userSubject: z.ZodString;
2249
+ installationId: z.ZodString;
2250
+ deviceLabel: z.ZodString;
2251
+ platform: z.ZodEnum<{
2252
+ darwin: "darwin";
2253
+ linux: "linux";
2254
+ unknown: "unknown";
2255
+ win32: "win32";
2256
+ }>;
2257
+ source: z.ZodEnum<{
2258
+ ACCOUNT_REPLACEMENT: "ACCOUNT_REPLACEMENT";
2259
+ ADMIN_ADDED: "ADMIN_ADDED";
2260
+ LEGACY_AUTO_MIGRATED: "LEGACY_AUTO_MIGRATED";
2261
+ REQUEST_INITIAL: "REQUEST_INITIAL";
2262
+ }>;
2263
+ status: z.ZodEnum<{
2264
+ ACTIVE: "ACTIVE";
2265
+ NEEDS_REAUTH: "NEEDS_REAUTH";
2266
+ PENDING_TOKEN: "PENDING_TOKEN";
2267
+ READY: "READY";
2268
+ REPLACEMENT_PENDING: "REPLACEMENT_PENDING";
2269
+ RETIRED: "RETIRED";
2270
+ RETIREMENT_PENDING: "RETIREMENT_PENDING";
2271
+ }>;
2272
+ predecessorBindingId: z.ZodNullable<z.ZodString>;
2273
+ managedAccountId: z.ZodNullable<z.ZodString>;
2274
+ providerAccountId: z.ZodNullable<z.ZodString>;
2275
+ poolEntryId: z.ZodNullable<z.ZodString>;
2276
+ credentialLineageId: z.ZodNullable<z.ZodString>;
2277
+ generationVersion: z.ZodNullable<z.ZodNumber>;
2278
+ credentialExpiresAt: z.ZodNullable<z.ZodString>;
2279
+ accountExpiresAt: z.ZodNullable<z.ZodString>;
2280
+ replacementDueAt: z.ZodNullable<z.ZodString>;
2281
+ replacementReason: z.ZodNullable<z.ZodEnum<{
2282
+ ADMIN_REQUESTED: "ADMIN_REQUESTED";
2283
+ CREDENTIAL_UNHEALTHY: "CREDENTIAL_UNHEALTHY";
2284
+ SUBSCRIPTION_EXPIRING: "SUBSCRIPTION_EXPIRING";
2285
+ }>>;
2286
+ accessTokenHealth: z.ZodEnum<{
2287
+ EXPIRED: "EXPIRED";
2288
+ HEALTHY: "HEALTHY";
2289
+ REJECTED: "REJECTED";
2290
+ UNKNOWN: "UNKNOWN";
2291
+ }>;
2292
+ refreshTokenHealth: z.ZodEnum<{
2293
+ HEALTHY: "HEALTHY";
2294
+ REJECTED: "REJECTED";
2295
+ UNKNOWN: "UNKNOWN";
2296
+ }>;
2297
+ legacyAssignmentId: z.ZodNullable<z.ZodString>;
2298
+ createdAt: z.ZodString;
2299
+ activatedAt: z.ZodNullable<z.ZodString>;
2300
+ retiredAt: z.ZodNullable<z.ZodString>;
2301
+ }, z.core.$strict>;
2302
+ replayed: z.ZodBoolean;
2303
+ }, z.core.$strict>;
2304
+ export declare const CodexV6AdminReplaceDeviceTokenInputSchema: z.ZodObject<{
2305
+ schemaVersion: z.ZodLiteral<6>;
2306
+ expectedRequestVersion: z.ZodNumber;
2307
+ reason: z.ZodEnum<{
2308
+ ADMIN_REQUESTED: "ADMIN_REQUESTED";
2309
+ CREDENTIAL_UNHEALTHY: "CREDENTIAL_UNHEALTHY";
2310
+ SUBSCRIPTION_EXPIRING: "SUBSCRIPTION_EXPIRING";
2311
+ }>;
2312
+ replaceBefore: z.ZodString;
2313
+ poolEntryId: z.ZodNullable<z.ZodString>;
1853
2314
  }, z.core.$strict>;
1854
- export declare const CodexV3FullCredentialDeliveryAckResponseSchema: z.ZodObject<{
1855
- schemaVersion: z.ZodLiteral<4>;
1856
- delivery: z.ZodObject<{
2315
+ export declare const CodexV6AdminReplaceDeviceTokenResponseSchema: z.ZodObject<{
2316
+ schemaVersion: z.ZodLiteral<6>;
2317
+ request: z.ZodObject<{
1857
2318
  id: z.ZodString;
1858
- credentialKind: z.ZodLiteral<"FULL">;
1859
- clientRequestId: z.ZodString;
1860
- assignmentId: z.ZodString;
1861
- managedAccountId: z.ZodString;
1862
- providerAccountId: z.ZodString;
1863
- subject: z.ZodString;
1864
- lineageId: z.ZodString;
1865
- generationVersion: z.ZodNumber;
1866
- issuedAt: z.ZodString;
1867
- credentialExpiresAt: z.ZodString;
1868
- ackExpiresAt: z.ZodString;
1869
- status: z.ZodLiteral<"ACKED">;
1870
- authorityMode: z.ZodLiteral<"CLIENT_MANAGED">;
1871
- authorityEpoch: z.ZodNumber;
1872
- ackedAt: z.ZodString;
2319
+ userSubject: z.ZodString;
2320
+ username: z.ZodString;
2321
+ userEmail: z.ZodNullable<z.ZodEmail>;
2322
+ status: z.ZodEnum<{
2323
+ APPROVED: "APPROVED";
2324
+ CANCELLED: "CANCELLED";
2325
+ EXPIRED: "EXPIRED";
2326
+ REJECTED: "REJECTED";
2327
+ SUBMITTED: "SUBMITTED";
2328
+ }>;
2329
+ availability: z.ZodEnum<{
2330
+ AVAILABLE: "AVAILABLE";
2331
+ EXPIRED: "EXPIRED";
2332
+ PARTIALLY_AVAILABLE: "PARTIALLY_AVAILABLE";
2333
+ PENDING_APPROVAL: "PENDING_APPROVAL";
2334
+ UNAVAILABLE: "UNAVAILABLE";
2335
+ WAITING_FOR_BINDING: "WAITING_FOR_BINDING";
2336
+ }>;
2337
+ reason: z.ZodString;
2338
+ requestedDeviceCount: z.ZodNumber;
2339
+ approvedDeviceLimit: z.ZodNullable<z.ZodNumber>;
2340
+ activeBindingCount: z.ZodNumber;
2341
+ pendingBindingCount: z.ZodNumber;
2342
+ requestedValidUntil: z.ZodString;
2343
+ validFrom: z.ZodNullable<z.ZodString>;
2344
+ validUntil: z.ZodNullable<z.ZodString>;
2345
+ version: z.ZodNumber;
2346
+ createdAt: z.ZodString;
2347
+ submittedAt: z.ZodString;
2348
+ reviewedAt: z.ZodNullable<z.ZodString>;
2349
+ safeErrorCode: z.ZodNullable<z.ZodString>;
2350
+ allowedActions: z.ZodArray<z.ZodEnum<{
2351
+ CANCEL: "CANCEL";
2352
+ CLAIM_DEVICE: "CLAIM_DEVICE";
2353
+ VIEW_BINDINGS: "VIEW_BINDINGS";
2354
+ }>>;
1873
2355
  }, z.core.$strict>;
1874
- replayed: z.ZodBoolean;
1875
- }, z.core.$strict>;
1876
- export declare const CodexV3FullCredentialBundleSchema: z.ZodObject<{
1877
- schemaVersion: z.ZodLiteral<4>;
1878
- deliveryId: z.ZodString;
1879
- managedAccountId: z.ZodString;
1880
- providerAccountId: z.ZodString;
1881
- lineageId: z.ZodString;
1882
- generationVersion: z.ZodNumber;
1883
- refreshToken: z.ZodString;
1884
- accessToken: z.ZodString;
1885
- idToken: z.ZodString;
1886
- expiresAt: z.ZodString;
1887
- }, z.core.$strict>;
1888
- export declare const CodexV3GenerationReportInputSchema: z.ZodObject<{
1889
- schemaVersion: z.ZodLiteral<4>;
1890
- clientRequestId: z.ZodString;
1891
- expectedGenerationVersion: z.ZodNumber;
1892
- rotationMode: z.ZodEnum<{
1893
- RETAINED: "RETAINED";
1894
- ROTATED: "ROTATED";
1895
- }>;
1896
- envelope: z.ZodObject<{
1897
- version: z.ZodLiteral<1>;
1898
- algorithm: z.ZodLiteral<"X25519-HKDF-SHA256-AES-256-GCM">;
1899
- keyId: z.ZodString;
1900
- ephemeralPublicKey: z.ZodString;
1901
- salt: z.ZodString;
1902
- nonce: z.ZodString;
1903
- ciphertext: z.ZodString;
1904
- authenticationTag: z.ZodString;
2356
+ currentBinding: z.ZodObject<{
2357
+ id: z.ZodString;
2358
+ requestId: z.ZodString;
2359
+ userSubject: z.ZodString;
2360
+ installationId: z.ZodString;
2361
+ deviceLabel: z.ZodString;
2362
+ platform: z.ZodEnum<{
2363
+ darwin: "darwin";
2364
+ linux: "linux";
2365
+ unknown: "unknown";
2366
+ win32: "win32";
2367
+ }>;
2368
+ source: z.ZodEnum<{
2369
+ ACCOUNT_REPLACEMENT: "ACCOUNT_REPLACEMENT";
2370
+ ADMIN_ADDED: "ADMIN_ADDED";
2371
+ LEGACY_AUTO_MIGRATED: "LEGACY_AUTO_MIGRATED";
2372
+ REQUEST_INITIAL: "REQUEST_INITIAL";
2373
+ }>;
2374
+ status: z.ZodEnum<{
2375
+ ACTIVE: "ACTIVE";
2376
+ NEEDS_REAUTH: "NEEDS_REAUTH";
2377
+ PENDING_TOKEN: "PENDING_TOKEN";
2378
+ READY: "READY";
2379
+ REPLACEMENT_PENDING: "REPLACEMENT_PENDING";
2380
+ RETIRED: "RETIRED";
2381
+ RETIREMENT_PENDING: "RETIREMENT_PENDING";
2382
+ }>;
2383
+ predecessorBindingId: z.ZodNullable<z.ZodString>;
2384
+ managedAccountId: z.ZodNullable<z.ZodString>;
2385
+ providerAccountId: z.ZodNullable<z.ZodString>;
2386
+ poolEntryId: z.ZodNullable<z.ZodString>;
2387
+ credentialLineageId: z.ZodNullable<z.ZodString>;
2388
+ generationVersion: z.ZodNullable<z.ZodNumber>;
2389
+ credentialExpiresAt: z.ZodNullable<z.ZodString>;
2390
+ accountExpiresAt: z.ZodNullable<z.ZodString>;
2391
+ replacementDueAt: z.ZodNullable<z.ZodString>;
2392
+ replacementReason: z.ZodNullable<z.ZodEnum<{
2393
+ ADMIN_REQUESTED: "ADMIN_REQUESTED";
2394
+ CREDENTIAL_UNHEALTHY: "CREDENTIAL_UNHEALTHY";
2395
+ SUBSCRIPTION_EXPIRING: "SUBSCRIPTION_EXPIRING";
2396
+ }>>;
2397
+ accessTokenHealth: z.ZodEnum<{
2398
+ EXPIRED: "EXPIRED";
2399
+ HEALTHY: "HEALTHY";
2400
+ REJECTED: "REJECTED";
2401
+ UNKNOWN: "UNKNOWN";
2402
+ }>;
2403
+ refreshTokenHealth: z.ZodEnum<{
2404
+ HEALTHY: "HEALTHY";
2405
+ REJECTED: "REJECTED";
2406
+ UNKNOWN: "UNKNOWN";
2407
+ }>;
2408
+ legacyAssignmentId: z.ZodNullable<z.ZodString>;
2409
+ createdAt: z.ZodString;
2410
+ activatedAt: z.ZodNullable<z.ZodString>;
2411
+ retiredAt: z.ZodNullable<z.ZodString>;
1905
2412
  }, z.core.$strict>;
1906
- accessTokenHealth: z.ZodEnum<{
1907
- EXPIRED: "EXPIRED";
1908
- HEALTHY: "HEALTHY";
1909
- REJECTED: "REJECTED";
1910
- UNKNOWN: "UNKNOWN";
1911
- }>;
1912
- refreshTokenHealth: z.ZodEnum<{
1913
- HEALTHY: "HEALTHY";
1914
- REJECTED: "REJECTED";
1915
- UNKNOWN: "UNKNOWN";
1916
- }>;
1917
- observedAt: z.ZodString;
1918
- }, z.core.$strict>;
1919
- export declare const CodexV3GenerationReportResponseSchema: z.ZodObject<{
1920
- schemaVersion: z.ZodLiteral<4>;
1921
- report: z.ZodObject<{
2413
+ replacementBinding: z.ZodObject<{
1922
2414
  id: z.ZodString;
1923
- clientRequestId: z.ZodString;
1924
- lineageId: z.ZodString;
1925
- previousGenerationVersion: z.ZodNumber;
1926
- generationVersion: z.ZodNumber;
1927
- rotationMode: z.ZodEnum<{
1928
- RETAINED: "RETAINED";
1929
- ROTATED: "ROTATED";
2415
+ requestId: z.ZodString;
2416
+ userSubject: z.ZodString;
2417
+ installationId: z.ZodString;
2418
+ deviceLabel: z.ZodString;
2419
+ platform: z.ZodEnum<{
2420
+ darwin: "darwin";
2421
+ linux: "linux";
2422
+ unknown: "unknown";
2423
+ win32: "win32";
2424
+ }>;
2425
+ source: z.ZodEnum<{
2426
+ ACCOUNT_REPLACEMENT: "ACCOUNT_REPLACEMENT";
2427
+ ADMIN_ADDED: "ADMIN_ADDED";
2428
+ LEGACY_AUTO_MIGRATED: "LEGACY_AUTO_MIGRATED";
2429
+ REQUEST_INITIAL: "REQUEST_INITIAL";
2430
+ }>;
2431
+ status: z.ZodEnum<{
2432
+ ACTIVE: "ACTIVE";
2433
+ NEEDS_REAUTH: "NEEDS_REAUTH";
2434
+ PENDING_TOKEN: "PENDING_TOKEN";
2435
+ READY: "READY";
2436
+ REPLACEMENT_PENDING: "REPLACEMENT_PENDING";
2437
+ RETIRED: "RETIRED";
2438
+ RETIREMENT_PENDING: "RETIREMENT_PENDING";
1930
2439
  }>;
2440
+ predecessorBindingId: z.ZodNullable<z.ZodString>;
2441
+ managedAccountId: z.ZodNullable<z.ZodString>;
2442
+ providerAccountId: z.ZodNullable<z.ZodString>;
2443
+ poolEntryId: z.ZodNullable<z.ZodString>;
2444
+ credentialLineageId: z.ZodNullable<z.ZodString>;
2445
+ generationVersion: z.ZodNullable<z.ZodNumber>;
2446
+ credentialExpiresAt: z.ZodNullable<z.ZodString>;
2447
+ accountExpiresAt: z.ZodNullable<z.ZodString>;
2448
+ replacementDueAt: z.ZodNullable<z.ZodString>;
2449
+ replacementReason: z.ZodNullable<z.ZodEnum<{
2450
+ ADMIN_REQUESTED: "ADMIN_REQUESTED";
2451
+ CREDENTIAL_UNHEALTHY: "CREDENTIAL_UNHEALTHY";
2452
+ SUBSCRIPTION_EXPIRING: "SUBSCRIPTION_EXPIRING";
2453
+ }>>;
1931
2454
  accessTokenHealth: z.ZodEnum<{
1932
2455
  EXPIRED: "EXPIRED";
1933
2456
  HEALTHY: "HEALTHY";
@@ -1939,16 +2462,15 @@ export declare const CodexV3GenerationReportResponseSchema: z.ZodObject<{
1939
2462
  REJECTED: "REJECTED";
1940
2463
  UNKNOWN: "UNKNOWN";
1941
2464
  }>;
1942
- credentialExpiresAt: z.ZodString;
1943
- observedAt: z.ZodString;
1944
- status: z.ZodLiteral<"APPLIED">;
1945
- authorityMode: z.ZodLiteral<"CLIENT_MANAGED">;
1946
- authorityEpoch: z.ZodNumber;
2465
+ legacyAssignmentId: z.ZodNullable<z.ZodString>;
2466
+ createdAt: z.ZodString;
2467
+ activatedAt: z.ZodNullable<z.ZodString>;
2468
+ retiredAt: z.ZodNullable<z.ZodString>;
1947
2469
  }, z.core.$strict>;
1948
2470
  replayed: z.ZodBoolean;
1949
2471
  }, z.core.$strict>;
1950
- export declare const CodexV5CreateDeviceSessionInputSchema: z.ZodObject<{
1951
- schemaVersion: z.ZodLiteral<5>;
2472
+ export declare const CodexV6FullCredentialDeliveryInputSchema: z.ZodObject<{
2473
+ schemaVersion: z.ZodLiteral<6>;
1952
2474
  clientRequestId: z.ZodString;
1953
2475
  installationId: z.ZodString;
1954
2476
  clientKey: z.ZodObject<{
@@ -1957,24 +2479,23 @@ export declare const CodexV5CreateDeviceSessionInputSchema: z.ZodObject<{
1957
2479
  publicKey: z.ZodString;
1958
2480
  }, z.core.$strict>;
1959
2481
  }, z.core.$strict>;
1960
- export declare const CodexV5CreateDeviceSessionResponseSchema: z.ZodObject<{
1961
- schemaVersion: z.ZodLiteral<5>;
1962
- session: z.ZodObject<{
2482
+ export declare const CodexV6FullCredentialDeliveryResponseSchema: z.ZodObject<{
2483
+ schemaVersion: z.ZodLiteral<6>;
2484
+ delivery: z.ZodObject<{
1963
2485
  id: z.ZodString;
1964
2486
  clientRequestId: z.ZodString;
2487
+ requestId: z.ZodString;
2488
+ bindingId: z.ZodString;
1965
2489
  installationId: z.ZodString;
1966
- assignmentId: z.ZodString;
1967
2490
  managedAccountId: z.ZodString;
1968
2491
  providerAccountId: z.ZodString;
1969
- lineageId: z.ZodString;
2492
+ credentialLineageId: z.ZodString;
1970
2493
  generationVersion: z.ZodNumber;
1971
2494
  issuedAt: z.ZodString;
1972
- leaseExpiresAt: z.ZodString;
1973
- status: z.ZodEnum<{
1974
- ACTIVE: "ACTIVE";
1975
- AWAITING_ACK: "AWAITING_ACK";
1976
- }>;
1977
- authorityEpoch: z.ZodNumber;
2495
+ credentialExpiresAt: z.ZodString;
2496
+ ackExpiresAt: z.ZodString;
2497
+ ackedAt: z.ZodNullable<z.ZodString>;
2498
+ status: z.ZodLiteral<"AWAITING_ACK">;
1978
2499
  envelope: z.ZodObject<{
1979
2500
  version: z.ZodLiteral<1>;
1980
2501
  algorithm: z.ZodLiteral<"X25519-HKDF-SHA256-AES-256-GCM">;
@@ -1987,90 +2508,53 @@ export declare const CodexV5CreateDeviceSessionResponseSchema: z.ZodObject<{
1987
2508
  }, z.core.$strict>;
1988
2509
  replayed: z.ZodBoolean;
1989
2510
  }, z.core.$strict>;
1990
- export declare const CodexV5DeviceSessionBundleSchema: z.ZodObject<{
1991
- schemaVersion: z.ZodLiteral<5>;
1992
- sessionId: z.ZodString;
2511
+ export declare const CodexV6FullCredentialBundleSchema: z.ZodObject<{
2512
+ schemaVersion: z.ZodLiteral<6>;
2513
+ deliveryId: z.ZodString;
2514
+ requestId: z.ZodString;
2515
+ bindingId: z.ZodString;
1993
2516
  installationId: z.ZodString;
1994
2517
  managedAccountId: z.ZodString;
1995
2518
  providerAccountId: z.ZodString;
1996
- lineageId: z.ZodString;
2519
+ credentialLineageId: z.ZodString;
1997
2520
  generationVersion: z.ZodNumber;
1998
2521
  refreshToken: z.ZodString;
1999
2522
  accessToken: z.ZodString;
2000
2523
  idToken: z.ZodString;
2001
2524
  expiresAt: z.ZodString;
2002
2525
  }, z.core.$strict>;
2003
- export declare const CodexV5AcknowledgeDeviceSessionInputSchema: z.ZodObject<{
2004
- schemaVersion: z.ZodLiteral<5>;
2526
+ export declare const CodexV6AcknowledgeFullCredentialDeliveryInputSchema: z.ZodObject<{
2527
+ schemaVersion: z.ZodLiteral<6>;
2005
2528
  installationId: z.ZodString;
2006
- lineageId: z.ZodString;
2529
+ credentialLineageId: z.ZodString;
2007
2530
  generationVersion: z.ZodNumber;
2008
2531
  installed: z.ZodLiteral<true>;
2009
2532
  }, z.core.$strict>;
2010
- export declare const CodexV5AcknowledgeDeviceSessionResponseSchema: z.ZodObject<{
2011
- schemaVersion: z.ZodLiteral<5>;
2012
- session: z.ZodObject<{
2533
+ export declare const CodexV6AcknowledgeFullCredentialDeliveryResponseSchema: z.ZodObject<{
2534
+ schemaVersion: z.ZodLiteral<6>;
2535
+ delivery: z.ZodObject<{
2013
2536
  id: z.ZodString;
2014
2537
  clientRequestId: z.ZodString;
2538
+ requestId: z.ZodString;
2539
+ bindingId: z.ZodString;
2015
2540
  installationId: z.ZodString;
2016
- assignmentId: z.ZodString;
2017
2541
  managedAccountId: z.ZodString;
2018
2542
  providerAccountId: z.ZodString;
2019
- lineageId: z.ZodString;
2543
+ credentialLineageId: z.ZodString;
2020
2544
  generationVersion: z.ZodNumber;
2021
2545
  issuedAt: z.ZodString;
2022
- leaseExpiresAt: z.ZodString;
2023
- status: z.ZodLiteral<"ACTIVE">;
2024
- authorityEpoch: z.ZodNumber;
2025
- acknowledgedAt: z.ZodString;
2026
- }, z.core.$strict>;
2027
- replayed: z.ZodBoolean;
2028
- }, z.core.$strict>;
2029
- export declare const CodexV5HeartbeatDeviceSessionInputSchema: z.ZodObject<{
2030
- schemaVersion: z.ZodLiteral<5>;
2031
- installationId: z.ZodString;
2032
- authorityEpoch: z.ZodNumber;
2033
- }, z.core.$strict>;
2034
- export declare const CodexV5HeartbeatDeviceSessionResponseSchema: z.ZodObject<{
2035
- schemaVersion: z.ZodLiteral<5>;
2036
- session: z.ZodObject<{
2037
- id: z.ZodString;
2038
- installationId: z.ZodString;
2039
- lineageId: z.ZodString;
2040
- status: z.ZodEnum<{
2041
- ACTIVE: "ACTIVE";
2042
- RECOVERY_REQUIRED: "RECOVERY_REQUIRED";
2043
- }>;
2044
- authorityEpoch: z.ZodNumber;
2045
- generationVersion: z.ZodNumber;
2046
- leaseExpiresAt: z.ZodString;
2047
- }, z.core.$strict>;
2048
- }, z.core.$strict>;
2049
- export declare const CodexV5ReleaseDeviceSessionInputSchema: z.ZodObject<{
2050
- schemaVersion: z.ZodLiteral<5>;
2051
- installationId: z.ZodString;
2052
- authorityEpoch: z.ZodNumber;
2053
- expectedGenerationVersion: z.ZodNumber;
2054
- }, z.core.$strict>;
2055
- export declare const CodexV5ReleaseDeviceSessionResponseSchema: z.ZodObject<{
2056
- schemaVersion: z.ZodLiteral<5>;
2057
- session: z.ZodObject<{
2058
- id: z.ZodString;
2059
- installationId: z.ZodString;
2060
- lineageId: z.ZodString;
2061
- status: z.ZodLiteral<"RELEASED">;
2062
- authorityEpoch: z.ZodNumber;
2063
- generationVersion: z.ZodNumber;
2064
- releasedAt: z.ZodString;
2546
+ credentialExpiresAt: z.ZodString;
2547
+ ackExpiresAt: z.ZodString;
2548
+ status: z.ZodLiteral<"ACKED">;
2549
+ ackedAt: z.ZodString;
2065
2550
  }, z.core.$strict>;
2066
2551
  replayed: z.ZodBoolean;
2067
2552
  }, z.core.$strict>;
2068
- export declare const CodexV5GenerationReportInputSchema: z.ZodObject<{
2069
- schemaVersion: z.ZodLiteral<5>;
2553
+ export declare const CodexV6GenerationReportInputSchema: z.ZodObject<{
2554
+ schemaVersion: z.ZodLiteral<6>;
2070
2555
  clientRequestId: z.ZodString;
2556
+ bindingId: z.ZodString;
2071
2557
  installationId: z.ZodString;
2072
- sessionId: z.ZodString;
2073
- authorityEpoch: z.ZodNumber;
2074
2558
  expectedGenerationVersion: z.ZodNumber;
2075
2559
  rotationMode: z.ZodEnum<{
2076
2560
  RETAINED: "RETAINED";
@@ -2099,14 +2583,15 @@ export declare const CodexV5GenerationReportInputSchema: z.ZodObject<{
2099
2583
  }>;
2100
2584
  observedAt: z.ZodString;
2101
2585
  }, z.core.$strict>;
2102
- export declare const CodexV5GenerationReportResponseSchema: z.ZodObject<{
2103
- schemaVersion: z.ZodLiteral<5>;
2586
+ export declare const CodexV6GenerationReportResponseSchema: z.ZodObject<{
2587
+ schemaVersion: z.ZodLiteral<6>;
2104
2588
  report: z.ZodObject<{
2105
2589
  id: z.ZodString;
2106
2590
  clientRequestId: z.ZodString;
2107
- lineageId: z.ZodString;
2108
- sessionId: z.ZodString;
2591
+ requestId: z.ZodString;
2592
+ bindingId: z.ZodString;
2109
2593
  installationId: z.ZodString;
2594
+ credentialLineageId: z.ZodString;
2110
2595
  previousGenerationVersion: z.ZodNumber;
2111
2596
  generationVersion: z.ZodNumber;
2112
2597
  rotationMode: z.ZodEnum<{
@@ -2127,9 +2612,6 @@ export declare const CodexV5GenerationReportResponseSchema: z.ZodObject<{
2127
2612
  credentialExpiresAt: z.ZodString;
2128
2613
  observedAt: z.ZodString;
2129
2614
  status: z.ZodLiteral<"APPLIED">;
2130
- authorityMode: z.ZodLiteral<"CLIENT_MANAGED">;
2131
- authorityEpoch: z.ZodNumber;
2132
- leaseExpiresAt: z.ZodString;
2133
2615
  }, z.core.$strict>;
2134
2616
  replayed: z.ZodBoolean;
2135
2617
  }, z.core.$strict>;
@@ -2311,43 +2793,17 @@ export type CodexLoginCredentialsResponse = z.infer<typeof CodexLoginCredentials
2311
2793
  export type CodexUploadBatch = z.infer<typeof CodexUploadBatchSchema>;
2312
2794
  export type CodexImportCredentialResult = z.infer<typeof CodexImportCredentialResultSchema>;
2313
2795
  export type CodexImportResult = z.infer<typeof CodexImportResultSchema>;
2314
- export type CodexCredentialVersion = z.infer<typeof CodexCredentialVersionSchema>;
2315
2796
  export type CodexAdminAccount = z.infer<typeof CodexAdminAccountSchema>;
2316
2797
  export type CodexAdminAccountListResponse = z.infer<typeof CodexAdminAccountListResponseSchema>;
2317
2798
  export type CodexCredentialVersionListResponse = z.infer<typeof CodexCredentialVersionListResponseSchema>;
2318
2799
  export type CodexManualRefreshResponse = z.infer<typeof CodexManualRefreshResponseSchema>;
2319
2800
  export type CodexAdminAccountRenewalInput = z.infer<typeof CodexAdminAccountRenewalInputSchema>;
2320
2801
  export type CodexAdminAccountRenewalResponse = z.infer<typeof CodexAdminAccountRenewalResponseSchema>;
2321
- export type CodexAdminAssignment = z.infer<typeof CodexAdminAssignmentSchema>;
2322
2802
  export type CodexAdminAssignmentListResponse = z.infer<typeof CodexAdminAssignmentListResponseSchema>;
2323
2803
  export type CodexAdminAssignmentMutationResponse = z.infer<typeof CodexAdminAssignmentMutationResponseSchema>;
2324
2804
  export type CodexAdminAssignmentDeleteResponse = z.infer<typeof CodexAdminAssignmentDeleteResponseSchema>;
2325
- export type CodexEnrollmentIntentReason = z.infer<typeof CodexEnrollmentIntentReasonSchema>;
2326
- export type CodexEnrollmentIntentStatus = z.infer<typeof CodexEnrollmentIntentStatusSchema>;
2327
- export type CodexEnrollmentIntent = z.infer<typeof CodexEnrollmentIntentSchema>;
2328
- export type CodexEnrollmentCandidateIngress = z.infer<typeof CodexEnrollmentCandidateIngressSchema>;
2329
- export type CodexEnrollmentCapabilities = z.infer<typeof CodexEnrollmentCapabilitiesSchema>;
2330
- export type CodexEnrollmentIntentResponse = z.infer<typeof CodexEnrollmentIntentResponseSchema>;
2331
- export type CodexEnrollmentMutationInput = z.infer<typeof CodexEnrollmentMutationInputSchema>;
2332
- export type CodexEnrollmentHeartbeatInput = z.infer<typeof CodexEnrollmentHeartbeatInputSchema>;
2333
- export type CodexEnrollmentCandidateEnvelope = z.infer<typeof CodexEnrollmentCandidateEnvelopeSchema>;
2334
- export type CodexEnrollmentCandidateInput = z.infer<typeof CodexEnrollmentCandidateInputSchema>;
2335
- export type CodexEnrollmentCandidateResponse = z.infer<typeof CodexEnrollmentCandidateResponseSchema>;
2336
- export type CodexMigrationPlanStatus = z.infer<typeof CodexMigrationPlanStatusSchema>;
2337
- export type CodexMigrationTarget = z.infer<typeof CodexMigrationTargetSchema>;
2338
- export type CodexMigrationLoginQueueResponse = z.infer<typeof CodexMigrationLoginQueueResponseSchema>;
2339
- export type CodexUserCredentialAssignment = z.infer<typeof CodexUserCredentialAssignmentSchema>;
2340
2805
  export type CodexUserCredentialAssignmentListResponse = z.infer<typeof CodexUserCredentialAssignmentListResponseSchema>;
2341
2806
  export type CodexShortLivedDeliveryClientKey = z.infer<typeof CodexShortLivedDeliveryClientKeySchema>;
2342
- export type CodexShortLivedDeliveryRequest = z.infer<typeof CodexShortLivedDeliveryRequestSchema>;
2343
- export type CodexShortLivedDeliveryResponse = z.infer<typeof CodexShortLivedDeliveryResponseSchema>;
2344
- export type CodexShortLivedDeliveryAckInput = z.infer<typeof CodexShortLivedDeliveryAckInputSchema>;
2345
- export type CodexShortLivedDeliveryAckResponse = z.infer<typeof CodexShortLivedDeliveryAckResponseSchema>;
2346
- export type CodexShortLivedCredentialBundle = z.infer<typeof CodexShortLivedCredentialBundleSchema>;
2347
- export type CodexAssignmentRetirement = z.infer<typeof CodexAssignmentRetirementSchema>;
2348
- export type CodexAssignmentRetirementLocalDeleteAckInput = z.infer<typeof CodexAssignmentRetirementLocalDeleteAckInputSchema>;
2349
- export type CodexAssignmentRetirementPreflightResponse = z.infer<typeof CodexAssignmentRetirementPreflightResponseSchema>;
2350
- export type CodexAssignmentRetirementLocalDeleteAckResponse = z.infer<typeof CodexAssignmentRetirementLocalDeleteAckResponseSchema>;
2351
2807
  export type CodexV3CredentialIngress = z.infer<typeof CodexV3CredentialIngressSchema>;
2352
2808
  export type CodexV3CredentialEnvelope = z.infer<typeof CodexV3CredentialEnvelopeSchema>;
2353
2809
  export type CodexV3EnrollmentConfiguration = z.infer<typeof CodexV3EnrollmentConfigurationSchema>;
@@ -2375,6 +2831,31 @@ export type CodexV5ReleaseDeviceSessionInput = z.infer<typeof CodexV5ReleaseDevi
2375
2831
  export type CodexV5ReleaseDeviceSessionResponse = z.infer<typeof CodexV5ReleaseDeviceSessionResponseSchema>;
2376
2832
  export type CodexV5GenerationReportInput = z.infer<typeof CodexV5GenerationReportInputSchema>;
2377
2833
  export type CodexV5GenerationReportResponse = z.infer<typeof CodexV5GenerationReportResponseSchema>;
2834
+ export type CodexV6DeviceDescriptor = z.infer<typeof CodexV6DeviceDescriptorSchema>;
2835
+ export type CodexV6AccountRequest = z.infer<typeof CodexV6AccountRequestSchema>;
2836
+ export type CodexV6CreateAccountRequestInput = z.infer<typeof CodexV6CreateAccountRequestInputSchema>;
2837
+ export type CodexV6AccountRequestResponse = z.infer<typeof CodexV6AccountRequestResponseSchema>;
2838
+ export type CodexV6AccountRequestListResponse = z.infer<typeof CodexV6AccountRequestListResponseSchema>;
2839
+ export type CodexV6AdminAccountRequestListQuery = z.infer<typeof CodexV6AdminAccountRequestListQuerySchema>;
2840
+ export type CodexV6AdminReplacementCandidateQuery = z.infer<typeof CodexV6AdminReplacementCandidateQuerySchema>;
2841
+ export type CodexV6CancelAccountRequestInput = z.infer<typeof CodexV6CancelAccountRequestInputSchema>;
2842
+ export type CodexV6AdminReviewAccountRequestInput = z.infer<typeof CodexV6AdminReviewAccountRequestInputSchema>;
2843
+ export type CodexV6DeviceBinding = z.infer<typeof CodexV6DeviceBindingSchema>;
2844
+ export type CodexV6DeviceBindingListResponse = z.infer<typeof CodexV6DeviceBindingListResponseSchema>;
2845
+ export type CodexV6AdminReplacementCandidateListResponse = z.infer<typeof CodexV6AdminReplacementCandidateListResponseSchema>;
2846
+ export type CodexV6ReconcileDeviceAccessInput = z.infer<typeof CodexV6ReconcileDeviceAccessInputSchema>;
2847
+ export type CodexV6ReconcileDeviceAccessResponse = z.infer<typeof CodexV6ReconcileDeviceAccessResponseSchema>;
2848
+ export type CodexV6AdminCreateDeviceBindingInput = z.infer<typeof CodexV6AdminCreateDeviceBindingInputSchema>;
2849
+ export type CodexV6AdminCreateDeviceBindingResponse = z.infer<typeof CodexV6AdminCreateDeviceBindingResponseSchema>;
2850
+ export type CodexV6AdminReplaceDeviceTokenInput = z.infer<typeof CodexV6AdminReplaceDeviceTokenInputSchema>;
2851
+ export type CodexV6AdminReplaceDeviceTokenResponse = z.infer<typeof CodexV6AdminReplaceDeviceTokenResponseSchema>;
2852
+ export type CodexV6FullCredentialDeliveryInput = z.infer<typeof CodexV6FullCredentialDeliveryInputSchema>;
2853
+ export type CodexV6FullCredentialDeliveryResponse = z.infer<typeof CodexV6FullCredentialDeliveryResponseSchema>;
2854
+ export type CodexV6FullCredentialBundle = z.infer<typeof CodexV6FullCredentialBundleSchema>;
2855
+ export type CodexV6AcknowledgeFullCredentialDeliveryInput = z.infer<typeof CodexV6AcknowledgeFullCredentialDeliveryInputSchema>;
2856
+ export type CodexV6AcknowledgeFullCredentialDeliveryResponse = z.infer<typeof CodexV6AcknowledgeFullCredentialDeliveryResponseSchema>;
2857
+ export type CodexV6GenerationReportInput = z.infer<typeof CodexV6GenerationReportInputSchema>;
2858
+ export type CodexV6GenerationReportResponse = z.infer<typeof CodexV6GenerationReportResponseSchema>;
2378
2859
  export type CodexTokenPoolV4AssignmentTarget = z.infer<typeof CodexTokenPoolV4AssignmentTargetSchema>;
2379
2860
  export type CodexTokenPoolV4EnrollmentConfiguration = z.infer<typeof CodexTokenPoolV4EnrollmentConfigurationSchema>;
2380
2861
  export type CodexTokenPoolV4DirectoryResolveResponse = z.infer<typeof CodexTokenPoolV4DirectoryResolveResponseSchema>;
@@ -2385,16 +2866,6 @@ export declare function codexAdminCredentialVersionsPath(accountId: string): str
2385
2866
  export declare function codexAdminRefreshPath(accountId: string): string;
2386
2867
  export declare function codexAdminRenewPath(accountId: string): string;
2387
2868
  export declare function codexAdminAssignmentPath(assignmentId: string): string;
2388
- export declare function codexAdminEnrollmentIntentPath(intentId: string): string;
2389
- export declare function codexAdminEnrollmentIntentActionPath(intentId: string, action: "claim" | "heartbeat" | "cancel" | "candidate"): string;
2390
- export declare function codexAdminMigrationLoginQueuePath(planId: string, query: {
2391
- page: number;
2392
- pageSize: number;
2393
- }): string;
2394
- export declare function codexAssignmentShortLivedDeliveriesPath(assignmentId: string): string;
2395
- export declare function codexShortLivedDeliveryAckPath(deliveryId: string): string;
2396
- export declare function codexAssignmentRetirementLocalDeleteAckPath(retirementId: string): string;
2397
- export declare function codexAssignmentRetirementPath(retirementId: string): string;
2398
2869
  export declare function codexV3EnrollmentResolvePath(clientRequestId: string): string;
2399
2870
  export declare function codexV3AssignmentFullCredentialDeliveriesPath(assignmentId: string): string;
2400
2871
  export declare function codexV3AssignmentFullCredentialDeliveryResolvePath(assignmentId: string, clientRequestId: string): string;
@@ -2406,5 +2877,19 @@ export declare function codexV5AssignmentDeviceSessionsPath(assignmentId: string
2406
2877
  export declare function codexV5AssignmentDeviceSessionResolvePath(assignmentId: string, clientRequestId: string): string;
2407
2878
  export declare function codexV5DeviceSessionActionPath(sessionId: string, action: "ack" | "heartbeat" | "release"): string;
2408
2879
  export declare function codexV5LineageGenerationReportsPath(lineageId: string): string;
2880
+ export declare function codexV6AccountRequestPath(requestId: string): string;
2881
+ export declare function codexV6AccountRequestActionPath(requestId: string, action: "cancel"): string;
2882
+ export declare function codexV6AccountRequestDeviceBindingsPath(requestId: string): string;
2883
+ export declare function codexV6AdminAccountRequestDeviceBindingsPath(requestId: string): string;
2884
+ export declare function codexV6AdminDeviceBindingReplacementPath(requestId: string, bindingId: string): string;
2885
+ export declare function codexV6AdminAccountRequestPath(requestId: string): string;
2886
+ export declare function codexV6AdminAccountRequestsPath(query?: CodexV6AdminAccountRequestListQuery): string;
2887
+ export declare function codexV6AdminReplacementCandidatesPath(query: CodexV6AdminReplacementCandidateQuery): string;
2888
+ export declare function codexV6AdminAccountRequestReviewPath(requestId: string): string;
2889
+ export declare function codexV6DeviceBindingFullCredentialDeliveriesPath(bindingId: string): string;
2890
+ export declare function codexV6DeviceBindingFullCredentialDeliveryResolvePath(bindingId: string, clientRequestId: string): string;
2891
+ export declare function codexV6FullCredentialDeliveryAckPath(deliveryId: string): string;
2892
+ export declare function codexV6BindingGenerationReportsPath(bindingId: string): string;
2893
+ export declare function codexV6BindingGenerationReportResolvePath(bindingId: string, clientRequestId: string): string;
2409
2894
  export declare function codexTokenPoolV4DirectoryResolvePath(principal: string): string;
2410
2895
  export declare function codexTokenPoolV4UploadResolvePath(clientRequestId: string): string;