@tokensrc/codex 1.14.17 → 1.14.18

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (53) hide show
  1. package/README.md +4 -74
  2. package/dist/client.d.ts +1 -16
  3. package/dist/client.js +1 -114
  4. package/dist/client.js.map +1 -1
  5. package/dist/commands.d.ts +0 -1
  6. package/dist/commands.js +6 -266
  7. package/dist/commands.js.map +1 -1
  8. package/dist/credentials.d.ts +3 -75
  9. package/dist/credentials.js +2 -338
  10. package/dist/credentials.js.map +1 -1
  11. package/dist/index.d.ts +0 -8
  12. package/dist/index.js +0 -8
  13. package/dist/index.js.map +1 -1
  14. package/dist/managed-credential-v3-envelope.d.ts +0 -15
  15. package/dist/managed-credential-v3-envelope.js +0 -26
  16. package/dist/managed-credential-v3-envelope.js.map +1 -1
  17. package/dist/managed-credential-v3-flow.d.ts +0 -17
  18. package/dist/managed-credential-v3-flow.js +3 -90
  19. package/dist/managed-credential-v3-flow.js.map +1 -1
  20. package/dist/managed-credential-v3.d.ts +0 -8
  21. package/dist/managed-credential-v3.js +0 -23
  22. package/dist/managed-credential-v3.js.map +1 -1
  23. package/dist/profile.d.ts +0 -6
  24. package/dist/profile.js +0 -22
  25. package/dist/profile.js.map +1 -1
  26. package/dist/protocol.d.ts +0 -622
  27. package/dist/protocol.js +0 -277
  28. package/dist/protocol.js.map +1 -1
  29. package/package.json +2 -2
  30. package/dist/credential-supervisor.d.ts +0 -17
  31. package/dist/credential-supervisor.js +0 -84
  32. package/dist/credential-supervisor.js.map +0 -1
  33. package/dist/enrollment-envelope.d.ts +0 -18
  34. package/dist/enrollment-envelope.js +0 -112
  35. package/dist/enrollment-envelope.js.map +0 -1
  36. package/dist/enrollment-flow.d.ts +0 -27
  37. package/dist/enrollment-flow.js +0 -224
  38. package/dist/enrollment-flow.js.map +0 -1
  39. package/dist/migration-login-batch.d.ts +0 -66
  40. package/dist/migration-login-batch.js +0 -202
  41. package/dist/migration-login-batch.js.map +0 -1
  42. package/dist/retirement-flow.d.ts +0 -38
  43. package/dist/retirement-flow.js +0 -78
  44. package/dist/retirement-flow.js.map +0 -1
  45. package/dist/short-lived-delivery-flow.d.ts +0 -41
  46. package/dist/short-lived-delivery-flow.js +0 -141
  47. package/dist/short-lived-delivery-flow.js.map +0 -1
  48. package/dist/short-lived-delivery-journal.d.ts +0 -34
  49. package/dist/short-lived-delivery-journal.js +0 -137
  50. package/dist/short-lived-delivery-journal.js.map +0 -1
  51. package/dist/short-lived-delivery.d.ts +0 -26
  52. package/dist/short-lived-delivery.js +0 -139
  53. package/dist/short-lived-delivery.js.map +0 -1
@@ -6,11 +6,6 @@ export declare const CODEX_ACCOUNTS_IMPORT_PATH = "/v1/admin/codex/accounts/impo
6
6
  export declare const CODEX_ADMIN_ACCOUNTS_PATH = "/v1/admin/codex/accounts";
7
7
  export declare const CODEX_ADMIN_ASSIGNMENTS_PATH = "/v1/admin/codex/assignments";
8
8
  export declare const CODEX_ENROLLMENT_SCHEMA_VERSION: 2;
9
- export declare const CODEX_ADMIN_ENROLLMENT_INTENTS_PATH = "/v2/admin/codex/enrollment-intents";
10
- export declare const CODEX_CREDENTIAL_ASSIGNMENTS_PATH = "/v2/codex/credential-assignments";
11
- export declare const CODEX_SHORT_LIVED_DELIVERIES_PATH = "/v2/codex/short-lived-credential-deliveries";
12
- export declare const CODEX_ASSIGNMENT_RETIREMENTS_PATH = "/v2/codex/assignment-retirements";
13
- export declare const CODEX_ADMIN_MIGRATION_PLANS_PATH = "/v2/admin/codex/migration-plans";
14
9
  export declare const CODEX_MANAGED_CREDENTIALS_V3_SCHEMA_VERSION: 3;
15
10
  export declare const CODEX_MANAGED_CREDENTIALS_V3_PATH = "/v3/codex";
16
11
  export declare const CODEX_V3_ENROLLMENT_CONFIGURATION_PATH = "/v4/codex/enrollment-configuration";
@@ -24,8 +19,6 @@ export declare const CODEX_TOKEN_POOL_V4_ENROLLMENT_CONFIGURATION_PATH = "/v4/ad
24
19
  export declare const CODEX_TOKEN_POOL_V4_DIRECTORY_RESOLVE_PATH = "/v4/admin/codex/directory-users/resolve";
25
20
  export declare const CODEX_TOKEN_POOL_V4_UPLOADS_PATH = "/v4/admin/codex/token-pool/uploads";
26
21
  export declare const CODEX_TOKEN_POOL_V4_RUNTIME_PATH = "/v4/codex";
27
- export declare const CODEX_TOKEN_POOL_V4_CREDENTIAL_ASSIGNMENTS_PATH = "/v4/codex/credential-assignments";
28
- export declare const CODEX_TOKEN_POOL_V4_FULL_CREDENTIAL_DELIVERIES_PATH = "/v4/codex/full-credential-deliveries";
29
22
  export declare const CODEX_TOKEN_POOL_V4_CREDENTIAL_LINEAGES_PATH = "/v4/codex/credential-lineages";
30
23
  export declare const CODEX_MULTI_DEVICE_V5_SCHEMA_VERSION: 5;
31
24
  export declare const CODEX_MULTI_DEVICE_V5_RUNTIME_PATH = "/v5/codex";
@@ -40,11 +33,6 @@ export declare const CODEX_V6_DEVICE_BINDINGS_PATH = "/v6/codex/device-bindings"
40
33
  export declare const CODEX_REQUEST_BOUND_DEVICE_V6_ADMIN_PATH = "/v6/admin/codex";
41
34
  export declare const CODEX_V6_ADMIN_ACCOUNT_REQUESTS_PATH = "/v6/admin/codex/account-requests";
42
35
  export declare const CODEX_V6_ADMIN_DEVICE_BINDINGS_PATH = "/v6/admin/codex/device-bindings";
43
- export declare const CODEX_MIGRATION_CAPACITY: {
44
- readonly verifiedMinimum: 2;
45
- readonly verifiedLimit: null;
46
- readonly sequentialRequired: true;
47
- };
48
36
  export interface CodexQuotaWindowLike {
49
37
  usedPercent?: number | null;
50
38
  windowMinutes?: number | null;
@@ -919,164 +907,10 @@ export declare const CodexAdminAssignmentDeleteResponseSchema: z.ZodObject<{
919
907
  schemaVersion: z.ZodLiteral<1>;
920
908
  assignmentId: z.ZodString;
921
909
  }, z.core.$strict>;
922
- export declare const CodexEnrollmentIntentReasonSchema: z.ZodEnum<{
923
- NEW: "NEW";
924
- REPLACE_ADMIN: "REPLACE_ADMIN";
925
- REPLACE_DIVERGED: "REPLACE_DIVERGED";
926
- REPLACE_LOST: "REPLACE_LOST";
927
- REPLACE_REJECTED: "REPLACE_REJECTED";
928
- }>;
929
- export declare const CodexEnrollmentIntentStatusSchema: z.ZodEnum<{
930
- ACCOUNT_MISMATCH: "ACCOUNT_MISMATCH";
931
- AWAITING_CLI: "AWAITING_CLI";
932
- CANCELLED: "CANCELLED";
933
- CLAIMED: "CLAIMED";
934
- EXPIRED: "EXPIRED";
935
- IDENTITY_UNVERIFIABLE: "IDENTITY_UNVERIFIABLE";
936
- LOGIN_IN_PROGRESS: "LOGIN_IN_PROGRESS";
937
- OUTCOME_AMBIGUOUS: "OUTCOME_AMBIGUOUS";
938
- READY: "READY";
939
- TEMPORARILY_UNAVAILABLE: "TEMPORARILY_UNAVAILABLE";
940
- UPLOADING: "UPLOADING";
941
- VALIDATING: "VALIDATING";
942
- }>;
943
- export declare const CodexEnrollmentIntentSchema: z.ZodObject<{
944
- id: z.ZodString;
945
- type: z.ZodEnum<{
946
- ACCOUNT_DISCOVERY: "ACCOUNT_DISCOVERY";
947
- ASSIGNMENT_ENROLLMENT: "ASSIGNMENT_ENROLLMENT";
948
- }>;
949
- status: z.ZodEnum<{
950
- ACCOUNT_MISMATCH: "ACCOUNT_MISMATCH";
951
- AWAITING_CLI: "AWAITING_CLI";
952
- CANCELLED: "CANCELLED";
953
- CLAIMED: "CLAIMED";
954
- EXPIRED: "EXPIRED";
955
- IDENTITY_UNVERIFIABLE: "IDENTITY_UNVERIFIABLE";
956
- LOGIN_IN_PROGRESS: "LOGIN_IN_PROGRESS";
957
- OUTCOME_AMBIGUOUS: "OUTCOME_AMBIGUOUS";
958
- READY: "READY";
959
- TEMPORARILY_UNAVAILABLE: "TEMPORARILY_UNAVAILABLE";
960
- UPLOADING: "UPLOADING";
961
- VALIDATING: "VALIDATING";
962
- }>;
963
- revision: z.ZodNumber;
964
- reason: z.ZodEnum<{
965
- NEW: "NEW";
966
- REPLACE_ADMIN: "REPLACE_ADMIN";
967
- REPLACE_DIVERGED: "REPLACE_DIVERGED";
968
- REPLACE_LOST: "REPLACE_LOST";
969
- REPLACE_REJECTED: "REPLACE_REJECTED";
970
- }>;
971
- assignmentId: z.ZodNullable<z.ZodString>;
972
- managedAccountId: z.ZodNullable<z.ZodString>;
973
- userSubject: z.ZodNullable<z.ZodString>;
974
- createdAt: z.ZodString;
975
- expiresAt: z.ZodString;
976
- claimedAt: z.ZodNullable<z.ZodString>;
977
- lastHeartbeatAt: z.ZodNullable<z.ZodString>;
978
- cancelledAt: z.ZodNullable<z.ZodString>;
979
- updatedAt: z.ZodString;
980
- safeErrorCode: z.ZodNullable<z.ZodString>;
981
- resultManagedAccountId: z.ZodNullable<z.ZodString>;
982
- resultLineageId: z.ZodNullable<z.ZodString>;
983
- currentGenerationVersion: z.ZodNullable<z.ZodNumber>;
984
- allowedActions: z.ZodArray<z.ZodString>;
985
- }, z.core.$strict>;
986
- export declare const CodexEnrollmentCandidateIngressSchema: z.ZodObject<{
987
- envelopeVersion: z.ZodLiteral<1>;
988
- algorithm: z.ZodLiteral<"X25519-HKDF-SHA256-AES-256-GCM">;
989
- keyId: z.ZodString;
990
- publicKey: z.ZodString;
991
- maxRequestBytes: z.ZodNumber;
992
- maxCiphertextBytes: z.ZodNumber;
993
- }, z.core.$strict>;
994
- export declare const CodexEnrollmentCapabilitiesSchema: z.ZodObject<{
995
- enrollmentIntents: z.ZodBoolean;
996
- candidateUpload: z.ZodBoolean;
997
- delivery: z.ZodBoolean;
998
- rotationSync: z.ZodBoolean;
999
- candidateIngress: z.ZodOptional<z.ZodObject<{
1000
- envelopeVersion: z.ZodLiteral<1>;
1001
- algorithm: z.ZodLiteral<"X25519-HKDF-SHA256-AES-256-GCM">;
1002
- keyId: z.ZodString;
1003
- publicKey: z.ZodString;
1004
- maxRequestBytes: z.ZodNumber;
1005
- maxCiphertextBytes: z.ZodNumber;
1006
- }, z.core.$strict>>;
1007
- }, z.core.$strict>;
1008
- export declare const CodexEnrollmentIntentResponseSchema: z.ZodObject<{
1009
- schemaVersion: z.ZodLiteral<2>;
1010
- intent: z.ZodObject<{
1011
- id: z.ZodString;
1012
- type: z.ZodEnum<{
1013
- ACCOUNT_DISCOVERY: "ACCOUNT_DISCOVERY";
1014
- ASSIGNMENT_ENROLLMENT: "ASSIGNMENT_ENROLLMENT";
1015
- }>;
1016
- status: z.ZodEnum<{
1017
- ACCOUNT_MISMATCH: "ACCOUNT_MISMATCH";
1018
- AWAITING_CLI: "AWAITING_CLI";
1019
- CANCELLED: "CANCELLED";
1020
- CLAIMED: "CLAIMED";
1021
- EXPIRED: "EXPIRED";
1022
- IDENTITY_UNVERIFIABLE: "IDENTITY_UNVERIFIABLE";
1023
- LOGIN_IN_PROGRESS: "LOGIN_IN_PROGRESS";
1024
- OUTCOME_AMBIGUOUS: "OUTCOME_AMBIGUOUS";
1025
- READY: "READY";
1026
- TEMPORARILY_UNAVAILABLE: "TEMPORARILY_UNAVAILABLE";
1027
- UPLOADING: "UPLOADING";
1028
- VALIDATING: "VALIDATING";
1029
- }>;
1030
- revision: z.ZodNumber;
1031
- reason: z.ZodEnum<{
1032
- NEW: "NEW";
1033
- REPLACE_ADMIN: "REPLACE_ADMIN";
1034
- REPLACE_DIVERGED: "REPLACE_DIVERGED";
1035
- REPLACE_LOST: "REPLACE_LOST";
1036
- REPLACE_REJECTED: "REPLACE_REJECTED";
1037
- }>;
1038
- assignmentId: z.ZodNullable<z.ZodString>;
1039
- managedAccountId: z.ZodNullable<z.ZodString>;
1040
- userSubject: z.ZodNullable<z.ZodString>;
1041
- createdAt: z.ZodString;
1042
- expiresAt: z.ZodString;
1043
- claimedAt: z.ZodNullable<z.ZodString>;
1044
- lastHeartbeatAt: z.ZodNullable<z.ZodString>;
1045
- cancelledAt: z.ZodNullable<z.ZodString>;
1046
- updatedAt: z.ZodString;
1047
- safeErrorCode: z.ZodNullable<z.ZodString>;
1048
- resultManagedAccountId: z.ZodNullable<z.ZodString>;
1049
- resultLineageId: z.ZodNullable<z.ZodString>;
1050
- currentGenerationVersion: z.ZodNullable<z.ZodNumber>;
1051
- allowedActions: z.ZodArray<z.ZodString>;
1052
- }, z.core.$strict>;
1053
- capabilities: z.ZodObject<{
1054
- enrollmentIntents: z.ZodBoolean;
1055
- candidateUpload: z.ZodBoolean;
1056
- delivery: z.ZodBoolean;
1057
- rotationSync: z.ZodBoolean;
1058
- candidateIngress: z.ZodOptional<z.ZodObject<{
1059
- envelopeVersion: z.ZodLiteral<1>;
1060
- algorithm: z.ZodLiteral<"X25519-HKDF-SHA256-AES-256-GCM">;
1061
- keyId: z.ZodString;
1062
- publicKey: z.ZodString;
1063
- maxRequestBytes: z.ZodNumber;
1064
- maxCiphertextBytes: z.ZodNumber;
1065
- }, z.core.$strict>>;
1066
- }, z.core.$strict>;
1067
- }, z.core.$strict>;
1068
910
  export declare const CodexEnrollmentMutationInputSchema: z.ZodObject<{
1069
911
  idempotencyKey: z.ZodString;
1070
912
  revision: z.ZodNumber;
1071
913
  }, z.core.$strict>;
1072
- export declare const CodexEnrollmentHeartbeatInputSchema: z.ZodObject<{
1073
- idempotencyKey: z.ZodString;
1074
- revision: z.ZodNumber;
1075
- phase: z.ZodEnum<{
1076
- LOGIN_IN_PROGRESS: "LOGIN_IN_PROGRESS";
1077
- UPLOADING: "UPLOADING";
1078
- }>;
1079
- }, z.core.$strict>;
1080
914
  export declare const CodexEnrollmentCandidateEnvelopeSchema: z.ZodObject<{
1081
915
  version: z.ZodLiteral<1>;
1082
916
  algorithm: z.ZodLiteral<"X25519-HKDF-SHA256-AES-256-GCM">;
@@ -1087,246 +921,6 @@ export declare const CodexEnrollmentCandidateEnvelopeSchema: z.ZodObject<{
1087
921
  ciphertext: z.ZodString;
1088
922
  authenticationTag: z.ZodString;
1089
923
  }, z.core.$strict>;
1090
- export declare const CodexEnrollmentCandidateInputSchema: z.ZodObject<{
1091
- schemaVersion: z.ZodLiteral<2>;
1092
- revision: z.ZodNumber;
1093
- envelope: z.ZodObject<{
1094
- version: z.ZodLiteral<1>;
1095
- algorithm: z.ZodLiteral<"X25519-HKDF-SHA256-AES-256-GCM">;
1096
- keyId: z.ZodString;
1097
- ephemeralPublicKey: z.ZodString;
1098
- salt: z.ZodString;
1099
- nonce: z.ZodString;
1100
- ciphertext: z.ZodString;
1101
- authenticationTag: z.ZodString;
1102
- }, z.core.$strict>;
1103
- }, z.core.$strict>;
1104
- export declare const CodexEnrollmentCandidateResultSchema: z.ZodObject<{
1105
- outcome: z.ZodEnum<{
1106
- ACCOUNT_MISMATCH: "ACCOUNT_MISMATCH";
1107
- IDENTITY_UNVERIFIABLE: "IDENTITY_UNVERIFIABLE";
1108
- OUTCOME_AMBIGUOUS: "OUTCOME_AMBIGUOUS";
1109
- READY: "READY";
1110
- TEMPORARILY_UNAVAILABLE: "TEMPORARILY_UNAVAILABLE";
1111
- }>;
1112
- managedAccountId: z.ZodNullable<z.ZodString>;
1113
- lineageId: z.ZodNullable<z.ZodString>;
1114
- generationVersion: z.ZodNullable<z.ZodNumber>;
1115
- replayed: z.ZodBoolean;
1116
- }, z.core.$strict>;
1117
- export declare const CodexEnrollmentCandidateResponseSchema: z.ZodObject<{
1118
- schemaVersion: z.ZodLiteral<2>;
1119
- intent: z.ZodObject<{
1120
- id: z.ZodString;
1121
- type: z.ZodEnum<{
1122
- ACCOUNT_DISCOVERY: "ACCOUNT_DISCOVERY";
1123
- ASSIGNMENT_ENROLLMENT: "ASSIGNMENT_ENROLLMENT";
1124
- }>;
1125
- status: z.ZodEnum<{
1126
- ACCOUNT_MISMATCH: "ACCOUNT_MISMATCH";
1127
- AWAITING_CLI: "AWAITING_CLI";
1128
- CANCELLED: "CANCELLED";
1129
- CLAIMED: "CLAIMED";
1130
- EXPIRED: "EXPIRED";
1131
- IDENTITY_UNVERIFIABLE: "IDENTITY_UNVERIFIABLE";
1132
- LOGIN_IN_PROGRESS: "LOGIN_IN_PROGRESS";
1133
- OUTCOME_AMBIGUOUS: "OUTCOME_AMBIGUOUS";
1134
- READY: "READY";
1135
- TEMPORARILY_UNAVAILABLE: "TEMPORARILY_UNAVAILABLE";
1136
- UPLOADING: "UPLOADING";
1137
- VALIDATING: "VALIDATING";
1138
- }>;
1139
- revision: z.ZodNumber;
1140
- reason: z.ZodEnum<{
1141
- NEW: "NEW";
1142
- REPLACE_ADMIN: "REPLACE_ADMIN";
1143
- REPLACE_DIVERGED: "REPLACE_DIVERGED";
1144
- REPLACE_LOST: "REPLACE_LOST";
1145
- REPLACE_REJECTED: "REPLACE_REJECTED";
1146
- }>;
1147
- assignmentId: z.ZodNullable<z.ZodString>;
1148
- managedAccountId: z.ZodNullable<z.ZodString>;
1149
- userSubject: z.ZodNullable<z.ZodString>;
1150
- createdAt: z.ZodString;
1151
- expiresAt: z.ZodString;
1152
- claimedAt: z.ZodNullable<z.ZodString>;
1153
- lastHeartbeatAt: z.ZodNullable<z.ZodString>;
1154
- cancelledAt: z.ZodNullable<z.ZodString>;
1155
- updatedAt: z.ZodString;
1156
- safeErrorCode: z.ZodNullable<z.ZodString>;
1157
- resultManagedAccountId: z.ZodNullable<z.ZodString>;
1158
- resultLineageId: z.ZodNullable<z.ZodString>;
1159
- currentGenerationVersion: z.ZodNullable<z.ZodNumber>;
1160
- allowedActions: z.ZodArray<z.ZodString>;
1161
- }, z.core.$strict>;
1162
- capabilities: z.ZodObject<{
1163
- enrollmentIntents: z.ZodBoolean;
1164
- candidateUpload: z.ZodBoolean;
1165
- delivery: z.ZodBoolean;
1166
- rotationSync: z.ZodBoolean;
1167
- candidateIngress: z.ZodOptional<z.ZodObject<{
1168
- envelopeVersion: z.ZodLiteral<1>;
1169
- algorithm: z.ZodLiteral<"X25519-HKDF-SHA256-AES-256-GCM">;
1170
- keyId: z.ZodString;
1171
- publicKey: z.ZodString;
1172
- maxRequestBytes: z.ZodNumber;
1173
- maxCiphertextBytes: z.ZodNumber;
1174
- }, z.core.$strict>>;
1175
- }, z.core.$strict>;
1176
- result: z.ZodObject<{
1177
- outcome: z.ZodEnum<{
1178
- ACCOUNT_MISMATCH: "ACCOUNT_MISMATCH";
1179
- IDENTITY_UNVERIFIABLE: "IDENTITY_UNVERIFIABLE";
1180
- OUTCOME_AMBIGUOUS: "OUTCOME_AMBIGUOUS";
1181
- READY: "READY";
1182
- TEMPORARILY_UNAVAILABLE: "TEMPORARILY_UNAVAILABLE";
1183
- }>;
1184
- managedAccountId: z.ZodNullable<z.ZodString>;
1185
- lineageId: z.ZodNullable<z.ZodString>;
1186
- generationVersion: z.ZodNullable<z.ZodNumber>;
1187
- replayed: z.ZodBoolean;
1188
- }, z.core.$strict>;
1189
- }, z.core.$strict>;
1190
- export declare const CodexMigrationPlanStatusSchema: z.ZodEnum<{
1191
- ACTIVE: "ACTIVE";
1192
- CANCELLED: "CANCELLED";
1193
- COMPLETED: "COMPLETED";
1194
- PAUSED: "PAUSED";
1195
- }>;
1196
- export declare const CodexMigrationTargetSchema: z.ZodObject<{
1197
- id: z.ZodString;
1198
- assignmentId: z.ZodString;
1199
- userSubject: z.ZodString;
1200
- distributionMode: z.ZodEnum<{
1201
- LEGACY: "LEGACY";
1202
- MIGRATING: "MIGRATING";
1203
- USER_BOUND: "USER_BOUND";
1204
- }>;
1205
- projectedStatus: z.ZodEnum<{
1206
- ACTIVE: "ACTIVE";
1207
- AWAITING_CLI: "AWAITING_CLI";
1208
- COMPROMISED: "COMPROMISED";
1209
- DELIVERY_UNKNOWN: "DELIVERY_UNKNOWN";
1210
- DIVERGED: "DIVERGED";
1211
- ENROLLING: "ENROLLING";
1212
- LEGACY_V1: "LEGACY_V1";
1213
- LOST: "LOST";
1214
- NEEDS_REAUTH: "NEEDS_REAUTH";
1215
- READY: "READY";
1216
- RETIRED: "RETIRED";
1217
- RETIREMENT_PENDING: "RETIREMENT_PENDING";
1218
- SYNC_LAGGING: "SYNC_LAGGING";
1219
- UNENROLLED: "UNENROLLED";
1220
- VALIDATING: "VALIDATING";
1221
- }>;
1222
- enrollmentAttachment: z.ZodEnum<{
1223
- CREATED: "CREATED";
1224
- NONE: "NONE";
1225
- REUSED: "REUSED";
1226
- }>;
1227
- enrollmentIntent: z.ZodNullable<z.ZodObject<{
1228
- id: z.ZodString;
1229
- status: z.ZodEnum<{
1230
- ACCOUNT_MISMATCH: "ACCOUNT_MISMATCH";
1231
- AWAITING_CLI: "AWAITING_CLI";
1232
- CANCELLED: "CANCELLED";
1233
- CLAIMED: "CLAIMED";
1234
- EXPIRED: "EXPIRED";
1235
- IDENTITY_UNVERIFIABLE: "IDENTITY_UNVERIFIABLE";
1236
- LOGIN_IN_PROGRESS: "LOGIN_IN_PROGRESS";
1237
- OUTCOME_AMBIGUOUS: "OUTCOME_AMBIGUOUS";
1238
- READY: "READY";
1239
- TEMPORARILY_UNAVAILABLE: "TEMPORARILY_UNAVAILABLE";
1240
- UPLOADING: "UPLOADING";
1241
- VALIDATING: "VALIDATING";
1242
- }>;
1243
- revision: z.ZodNumber;
1244
- expiresAt: z.ZodString;
1245
- updatedAt: z.ZodString;
1246
- safeErrorCode: z.ZodNullable<z.ZodString>;
1247
- }, z.core.$strict>>;
1248
- allowedAction: z.ZodEnum<{
1249
- LOGIN: "LOGIN";
1250
- NONE: "NONE";
1251
- VIEW_ENROLLMENT: "VIEW_ENROLLMENT";
1252
- }>;
1253
- }, z.core.$strict>;
1254
- export declare const CodexMigrationLoginQueueResponseSchema: z.ZodObject<{
1255
- schemaVersion: z.ZodLiteral<2>;
1256
- plan: z.ZodObject<{
1257
- id: z.ZodString;
1258
- status: z.ZodEnum<{
1259
- ACTIVE: "ACTIVE";
1260
- CANCELLED: "CANCELLED";
1261
- COMPLETED: "COMPLETED";
1262
- PAUSED: "PAUSED";
1263
- }>;
1264
- revision: z.ZodNumber;
1265
- accountId: z.ZodString;
1266
- sequentialRequired: z.ZodLiteral<true>;
1267
- }, z.core.$strict>;
1268
- items: z.ZodArray<z.ZodObject<{
1269
- id: z.ZodString;
1270
- assignmentId: z.ZodString;
1271
- userSubject: z.ZodString;
1272
- distributionMode: z.ZodEnum<{
1273
- LEGACY: "LEGACY";
1274
- MIGRATING: "MIGRATING";
1275
- USER_BOUND: "USER_BOUND";
1276
- }>;
1277
- projectedStatus: z.ZodEnum<{
1278
- ACTIVE: "ACTIVE";
1279
- AWAITING_CLI: "AWAITING_CLI";
1280
- COMPROMISED: "COMPROMISED";
1281
- DELIVERY_UNKNOWN: "DELIVERY_UNKNOWN";
1282
- DIVERGED: "DIVERGED";
1283
- ENROLLING: "ENROLLING";
1284
- LEGACY_V1: "LEGACY_V1";
1285
- LOST: "LOST";
1286
- NEEDS_REAUTH: "NEEDS_REAUTH";
1287
- READY: "READY";
1288
- RETIRED: "RETIRED";
1289
- RETIREMENT_PENDING: "RETIREMENT_PENDING";
1290
- SYNC_LAGGING: "SYNC_LAGGING";
1291
- UNENROLLED: "UNENROLLED";
1292
- VALIDATING: "VALIDATING";
1293
- }>;
1294
- enrollmentAttachment: z.ZodEnum<{
1295
- CREATED: "CREATED";
1296
- NONE: "NONE";
1297
- REUSED: "REUSED";
1298
- }>;
1299
- enrollmentIntent: z.ZodNullable<z.ZodObject<{
1300
- id: z.ZodString;
1301
- status: z.ZodEnum<{
1302
- ACCOUNT_MISMATCH: "ACCOUNT_MISMATCH";
1303
- AWAITING_CLI: "AWAITING_CLI";
1304
- CANCELLED: "CANCELLED";
1305
- CLAIMED: "CLAIMED";
1306
- EXPIRED: "EXPIRED";
1307
- IDENTITY_UNVERIFIABLE: "IDENTITY_UNVERIFIABLE";
1308
- LOGIN_IN_PROGRESS: "LOGIN_IN_PROGRESS";
1309
- OUTCOME_AMBIGUOUS: "OUTCOME_AMBIGUOUS";
1310
- READY: "READY";
1311
- TEMPORARILY_UNAVAILABLE: "TEMPORARILY_UNAVAILABLE";
1312
- UPLOADING: "UPLOADING";
1313
- VALIDATING: "VALIDATING";
1314
- }>;
1315
- revision: z.ZodNumber;
1316
- expiresAt: z.ZodString;
1317
- updatedAt: z.ZodString;
1318
- safeErrorCode: z.ZodNullable<z.ZodString>;
1319
- }, z.core.$strict>>;
1320
- allowedAction: z.ZodEnum<{
1321
- LOGIN: "LOGIN";
1322
- NONE: "NONE";
1323
- VIEW_ENROLLMENT: "VIEW_ENROLLMENT";
1324
- }>;
1325
- }, z.core.$strict>>;
1326
- total: z.ZodNumber;
1327
- page: z.ZodNumber;
1328
- pageSize: z.ZodNumber;
1329
- }, z.core.$strict>;
1330
924
  export declare const CodexUserCredentialAssignmentSchema: z.ZodObject<{
1331
925
  assignmentId: z.ZodString;
1332
926
  managedAccountId: z.ZodString;
@@ -1384,14 +978,6 @@ export declare const CodexShortLivedDeliveryClientKeySchema: z.ZodObject<{
1384
978
  algorithm: z.ZodLiteral<"X25519-HKDF-SHA256-AES-256-GCM">;
1385
979
  publicKey: z.ZodString;
1386
980
  }, z.core.$strict>;
1387
- export declare const CodexShortLivedDeliveryRequestSchema: z.ZodObject<{
1388
- schemaVersion: z.ZodLiteral<2>;
1389
- clientKey: z.ZodObject<{
1390
- version: z.ZodLiteral<1>;
1391
- algorithm: z.ZodLiteral<"X25519-HKDF-SHA256-AES-256-GCM">;
1392
- publicKey: z.ZodString;
1393
- }, z.core.$strict>;
1394
- }, z.core.$strict>;
1395
981
  export declare const CodexShortLivedDeliveryEnvelopeSchema: z.ZodObject<{
1396
982
  version: z.ZodLiteral<1>;
1397
983
  algorithm: z.ZodLiteral<"X25519-HKDF-SHA256-AES-256-GCM">;
@@ -1401,178 +987,6 @@ export declare const CodexShortLivedDeliveryEnvelopeSchema: z.ZodObject<{
1401
987
  ciphertext: z.ZodString;
1402
988
  authenticationTag: z.ZodString;
1403
989
  }, z.core.$strict>;
1404
- export declare const CodexShortLivedDeliveryResponseSchema: z.ZodObject<{
1405
- schemaVersion: z.ZodLiteral<2>;
1406
- delivery: z.ZodObject<{
1407
- id: z.ZodString;
1408
- credentialKind: z.ZodLiteral<"SHORT_LIVED">;
1409
- assignmentId: z.ZodString;
1410
- managedAccountId: z.ZodString;
1411
- lineageId: z.ZodString;
1412
- generationVersion: z.ZodNumber;
1413
- status: z.ZodEnum<{
1414
- ACKED: "ACKED";
1415
- AWAITING_ACK: "AWAITING_ACK";
1416
- EXPIRED: "EXPIRED";
1417
- }>;
1418
- issuedAt: z.ZodString;
1419
- credentialExpiresAt: z.ZodString;
1420
- ackExpiresAt: z.ZodString;
1421
- ackedAt: z.ZodNullable<z.ZodString>;
1422
- providerAccountId: z.ZodString;
1423
- subject: z.ZodString;
1424
- envelope: z.ZodObject<{
1425
- version: z.ZodLiteral<1>;
1426
- algorithm: z.ZodLiteral<"X25519-HKDF-SHA256-AES-256-GCM">;
1427
- ephemeralPublicKey: z.ZodString;
1428
- salt: z.ZodString;
1429
- nonce: z.ZodString;
1430
- ciphertext: z.ZodString;
1431
- authenticationTag: z.ZodString;
1432
- }, z.core.$strict>;
1433
- }, z.core.$strict>;
1434
- replayed: z.ZodBoolean;
1435
- }, z.core.$strict>;
1436
- export declare const CodexShortLivedDeliveryAckInputSchema: z.ZodObject<{
1437
- schemaVersion: z.ZodLiteral<2>;
1438
- lineageId: z.ZodString;
1439
- generationVersion: z.ZodNumber;
1440
- }, z.core.$strict>;
1441
- export declare const CodexShortLivedDeliveryAckResponseSchema: z.ZodObject<{
1442
- schemaVersion: z.ZodLiteral<2>;
1443
- delivery: z.ZodObject<{
1444
- id: z.ZodString;
1445
- credentialKind: z.ZodLiteral<"SHORT_LIVED">;
1446
- assignmentId: z.ZodString;
1447
- managedAccountId: z.ZodString;
1448
- lineageId: z.ZodString;
1449
- generationVersion: z.ZodNumber;
1450
- issuedAt: z.ZodString;
1451
- credentialExpiresAt: z.ZodString;
1452
- ackExpiresAt: z.ZodString;
1453
- status: z.ZodLiteral<"ACKED">;
1454
- ackedAt: z.ZodString;
1455
- }, z.core.$strict>;
1456
- replayed: z.ZodBoolean;
1457
- }, z.core.$strict>;
1458
- export declare const CodexShortLivedCredentialBundleSchema: z.ZodObject<{
1459
- schemaVersion: z.ZodLiteral<2>;
1460
- deliveryId: z.ZodString;
1461
- managedAccountId: z.ZodString;
1462
- providerAccountId: z.ZodString;
1463
- lineageId: z.ZodString;
1464
- generationVersion: z.ZodNumber;
1465
- accessToken: z.ZodString;
1466
- idToken: z.ZodString;
1467
- expiresAt: z.ZodString;
1468
- }, z.core.$strict>;
1469
- export declare const CodexAssignmentRetirementSchema: z.ZodObject<{
1470
- id: z.ZodString;
1471
- assignmentId: z.ZodString;
1472
- revision: z.ZodNumber;
1473
- reason: z.ZodEnum<{
1474
- COMPROMISED: "COMPROMISED";
1475
- REPLACED: "REPLACED";
1476
- UNASSIGN: "UNASSIGN";
1477
- }>;
1478
- status: z.ZodEnum<{
1479
- COMPROMISED: "COMPROMISED";
1480
- FINALIZED: "FINALIZED";
1481
- READY_TO_FINALIZE: "READY_TO_FINALIZE";
1482
- RETIREMENT_PENDING: "RETIREMENT_PENDING";
1483
- }>;
1484
- requestedAt: z.ZodString;
1485
- serverRefreshStoppedAt: z.ZodString;
1486
- shortLivedCredentialsExpireAt: z.ZodString;
1487
- localDeleteStatus: z.ZodEnum<{
1488
- ACKNOWLEDGED: "ACKNOWLEDGED";
1489
- EXPIRED: "EXPIRED";
1490
- NOT_REQUIRED: "NOT_REQUIRED";
1491
- PENDING: "PENDING";
1492
- }>;
1493
- localDeleteAcknowledgedAt: z.ZodNullable<z.ZodString>;
1494
- serverSecretsShreddedAt: z.ZodNullable<z.ZodString>;
1495
- upstreamRevocationStatus: z.ZodLiteral<"UNKNOWN">;
1496
- safeToFinalizeAt: z.ZodString;
1497
- }, z.core.$strict>;
1498
- export declare const CodexAssignmentRetirementLocalDeleteAckInputSchema: z.ZodObject<{
1499
- schemaVersion: z.ZodLiteral<2>;
1500
- expectedRevision: z.ZodNumber;
1501
- targets: z.ZodArray<z.ZodObject<{
1502
- lineageId: z.ZodString;
1503
- generationVersion: z.ZodNumber;
1504
- }, z.core.$strict>>;
1505
- }, z.core.$strict>;
1506
- export declare const CodexAssignmentRetirementPreflightResponseSchema: z.ZodObject<{
1507
- schemaVersion: z.ZodLiteral<2>;
1508
- retirement: z.ZodObject<{
1509
- id: z.ZodString;
1510
- assignmentId: z.ZodString;
1511
- revision: z.ZodNumber;
1512
- reason: z.ZodEnum<{
1513
- COMPROMISED: "COMPROMISED";
1514
- REPLACED: "REPLACED";
1515
- UNASSIGN: "UNASSIGN";
1516
- }>;
1517
- status: z.ZodEnum<{
1518
- COMPROMISED: "COMPROMISED";
1519
- FINALIZED: "FINALIZED";
1520
- READY_TO_FINALIZE: "READY_TO_FINALIZE";
1521
- RETIREMENT_PENDING: "RETIREMENT_PENDING";
1522
- }>;
1523
- requestedAt: z.ZodString;
1524
- serverRefreshStoppedAt: z.ZodString;
1525
- shortLivedCredentialsExpireAt: z.ZodString;
1526
- localDeleteStatus: z.ZodEnum<{
1527
- ACKNOWLEDGED: "ACKNOWLEDGED";
1528
- EXPIRED: "EXPIRED";
1529
- NOT_REQUIRED: "NOT_REQUIRED";
1530
- PENDING: "PENDING";
1531
- }>;
1532
- localDeleteAcknowledgedAt: z.ZodNullable<z.ZodString>;
1533
- serverSecretsShreddedAt: z.ZodNullable<z.ZodString>;
1534
- upstreamRevocationStatus: z.ZodLiteral<"UNKNOWN">;
1535
- safeToFinalizeAt: z.ZodString;
1536
- }, z.core.$strict>;
1537
- allowedLocalDeleteTargets: z.ZodArray<z.ZodObject<{
1538
- lineageId: z.ZodString;
1539
- generationVersion: z.ZodNumber;
1540
- }, z.core.$strict>>;
1541
- allowedActions: z.ZodArray<z.ZodLiteral<"ACKNOWLEDGE_LOCAL_DELETE">>;
1542
- }, z.core.$strict>;
1543
- export declare const CodexAssignmentRetirementLocalDeleteAckResponseSchema: z.ZodObject<{
1544
- schemaVersion: z.ZodLiteral<2>;
1545
- retirement: z.ZodObject<{
1546
- id: z.ZodString;
1547
- assignmentId: z.ZodString;
1548
- revision: z.ZodNumber;
1549
- reason: z.ZodEnum<{
1550
- COMPROMISED: "COMPROMISED";
1551
- REPLACED: "REPLACED";
1552
- UNASSIGN: "UNASSIGN";
1553
- }>;
1554
- status: z.ZodEnum<{
1555
- COMPROMISED: "COMPROMISED";
1556
- FINALIZED: "FINALIZED";
1557
- READY_TO_FINALIZE: "READY_TO_FINALIZE";
1558
- RETIREMENT_PENDING: "RETIREMENT_PENDING";
1559
- }>;
1560
- requestedAt: z.ZodString;
1561
- serverRefreshStoppedAt: z.ZodString;
1562
- shortLivedCredentialsExpireAt: z.ZodString;
1563
- localDeleteStatus: z.ZodEnum<{
1564
- ACKNOWLEDGED: "ACKNOWLEDGED";
1565
- EXPIRED: "EXPIRED";
1566
- NOT_REQUIRED: "NOT_REQUIRED";
1567
- PENDING: "PENDING";
1568
- }>;
1569
- localDeleteAcknowledgedAt: z.ZodNullable<z.ZodString>;
1570
- serverSecretsShreddedAt: z.ZodNullable<z.ZodString>;
1571
- upstreamRevocationStatus: z.ZodLiteral<"UNKNOWN">;
1572
- safeToFinalizeAt: z.ZodString;
1573
- }, z.core.$strict>;
1574
- replayed: z.ZodBoolean;
1575
- }, z.core.$strict>;
1576
990
  export declare const CodexV3CredentialIngressSchema: z.ZodObject<{
1577
991
  envelopeVersion: z.ZodLiteral<1>;
1578
992
  algorithm: z.ZodLiteral<"X25519-HKDF-SHA256-AES-256-GCM">;
@@ -3379,43 +2793,17 @@ export type CodexLoginCredentialsResponse = z.infer<typeof CodexLoginCredentials
3379
2793
  export type CodexUploadBatch = z.infer<typeof CodexUploadBatchSchema>;
3380
2794
  export type CodexImportCredentialResult = z.infer<typeof CodexImportCredentialResultSchema>;
3381
2795
  export type CodexImportResult = z.infer<typeof CodexImportResultSchema>;
3382
- export type CodexCredentialVersion = z.infer<typeof CodexCredentialVersionSchema>;
3383
2796
  export type CodexAdminAccount = z.infer<typeof CodexAdminAccountSchema>;
3384
2797
  export type CodexAdminAccountListResponse = z.infer<typeof CodexAdminAccountListResponseSchema>;
3385
2798
  export type CodexCredentialVersionListResponse = z.infer<typeof CodexCredentialVersionListResponseSchema>;
3386
2799
  export type CodexManualRefreshResponse = z.infer<typeof CodexManualRefreshResponseSchema>;
3387
2800
  export type CodexAdminAccountRenewalInput = z.infer<typeof CodexAdminAccountRenewalInputSchema>;
3388
2801
  export type CodexAdminAccountRenewalResponse = z.infer<typeof CodexAdminAccountRenewalResponseSchema>;
3389
- export type CodexAdminAssignment = z.infer<typeof CodexAdminAssignmentSchema>;
3390
2802
  export type CodexAdminAssignmentListResponse = z.infer<typeof CodexAdminAssignmentListResponseSchema>;
3391
2803
  export type CodexAdminAssignmentMutationResponse = z.infer<typeof CodexAdminAssignmentMutationResponseSchema>;
3392
2804
  export type CodexAdminAssignmentDeleteResponse = z.infer<typeof CodexAdminAssignmentDeleteResponseSchema>;
3393
- export type CodexEnrollmentIntentReason = z.infer<typeof CodexEnrollmentIntentReasonSchema>;
3394
- export type CodexEnrollmentIntentStatus = z.infer<typeof CodexEnrollmentIntentStatusSchema>;
3395
- export type CodexEnrollmentIntent = z.infer<typeof CodexEnrollmentIntentSchema>;
3396
- export type CodexEnrollmentCandidateIngress = z.infer<typeof CodexEnrollmentCandidateIngressSchema>;
3397
- export type CodexEnrollmentCapabilities = z.infer<typeof CodexEnrollmentCapabilitiesSchema>;
3398
- export type CodexEnrollmentIntentResponse = z.infer<typeof CodexEnrollmentIntentResponseSchema>;
3399
- export type CodexEnrollmentMutationInput = z.infer<typeof CodexEnrollmentMutationInputSchema>;
3400
- export type CodexEnrollmentHeartbeatInput = z.infer<typeof CodexEnrollmentHeartbeatInputSchema>;
3401
- export type CodexEnrollmentCandidateEnvelope = z.infer<typeof CodexEnrollmentCandidateEnvelopeSchema>;
3402
- export type CodexEnrollmentCandidateInput = z.infer<typeof CodexEnrollmentCandidateInputSchema>;
3403
- export type CodexEnrollmentCandidateResponse = z.infer<typeof CodexEnrollmentCandidateResponseSchema>;
3404
- export type CodexMigrationPlanStatus = z.infer<typeof CodexMigrationPlanStatusSchema>;
3405
- export type CodexMigrationTarget = z.infer<typeof CodexMigrationTargetSchema>;
3406
- export type CodexMigrationLoginQueueResponse = z.infer<typeof CodexMigrationLoginQueueResponseSchema>;
3407
- export type CodexUserCredentialAssignment = z.infer<typeof CodexUserCredentialAssignmentSchema>;
3408
2805
  export type CodexUserCredentialAssignmentListResponse = z.infer<typeof CodexUserCredentialAssignmentListResponseSchema>;
3409
2806
  export type CodexShortLivedDeliveryClientKey = z.infer<typeof CodexShortLivedDeliveryClientKeySchema>;
3410
- export type CodexShortLivedDeliveryRequest = z.infer<typeof CodexShortLivedDeliveryRequestSchema>;
3411
- export type CodexShortLivedDeliveryResponse = z.infer<typeof CodexShortLivedDeliveryResponseSchema>;
3412
- export type CodexShortLivedDeliveryAckInput = z.infer<typeof CodexShortLivedDeliveryAckInputSchema>;
3413
- export type CodexShortLivedDeliveryAckResponse = z.infer<typeof CodexShortLivedDeliveryAckResponseSchema>;
3414
- export type CodexShortLivedCredentialBundle = z.infer<typeof CodexShortLivedCredentialBundleSchema>;
3415
- export type CodexAssignmentRetirement = z.infer<typeof CodexAssignmentRetirementSchema>;
3416
- export type CodexAssignmentRetirementLocalDeleteAckInput = z.infer<typeof CodexAssignmentRetirementLocalDeleteAckInputSchema>;
3417
- export type CodexAssignmentRetirementPreflightResponse = z.infer<typeof CodexAssignmentRetirementPreflightResponseSchema>;
3418
- export type CodexAssignmentRetirementLocalDeleteAckResponse = z.infer<typeof CodexAssignmentRetirementLocalDeleteAckResponseSchema>;
3419
2807
  export type CodexV3CredentialIngress = z.infer<typeof CodexV3CredentialIngressSchema>;
3420
2808
  export type CodexV3CredentialEnvelope = z.infer<typeof CodexV3CredentialEnvelopeSchema>;
3421
2809
  export type CodexV3EnrollmentConfiguration = z.infer<typeof CodexV3EnrollmentConfigurationSchema>;
@@ -3478,16 +2866,6 @@ export declare function codexAdminCredentialVersionsPath(accountId: string): str
3478
2866
  export declare function codexAdminRefreshPath(accountId: string): string;
3479
2867
  export declare function codexAdminRenewPath(accountId: string): string;
3480
2868
  export declare function codexAdminAssignmentPath(assignmentId: string): string;
3481
- export declare function codexAdminEnrollmentIntentPath(intentId: string): string;
3482
- export declare function codexAdminEnrollmentIntentActionPath(intentId: string, action: "claim" | "heartbeat" | "cancel" | "candidate"): string;
3483
- export declare function codexAdminMigrationLoginQueuePath(planId: string, query: {
3484
- page: number;
3485
- pageSize: number;
3486
- }): string;
3487
- export declare function codexAssignmentShortLivedDeliveriesPath(assignmentId: string): string;
3488
- export declare function codexShortLivedDeliveryAckPath(deliveryId: string): string;
3489
- export declare function codexAssignmentRetirementLocalDeleteAckPath(retirementId: string): string;
3490
- export declare function codexAssignmentRetirementPath(retirementId: string): string;
3491
2869
  export declare function codexV3EnrollmentResolvePath(clientRequestId: string): string;
3492
2870
  export declare function codexV3AssignmentFullCredentialDeliveriesPath(assignmentId: string): string;
3493
2871
  export declare function codexV3AssignmentFullCredentialDeliveryResolvePath(assignmentId: string, clientRequestId: string): string;