@usehercules/convex 0.0.0

package/dist/shared/projection-protocol.d.ts

@@ -0,0 +1,1624 @@
+import { z } from "zod";
+export declare const accessProjectionEffectSchema: z.ZodEnum<{
+    allow: "allow";
+    deny: "deny";
+}>;
+export type AccessProjectionEffect = z.infer<typeof accessProjectionEffectSchema>;
+export declare const accessProjectionApplicabilitySchema: z.ZodEnum<{
+    self: "self";
+    self_and_descendants: "self_and_descendants";
+}>;
+export type AccessProjectionApplicability = z.infer<typeof accessProjectionApplicabilitySchema>;
+export declare const accessProjectionWildcardModeSchema: z.ZodEnum<{
+    none: "none";
+    immutable: "immutable";
+    default: "default";
+}>;
+export type AccessProjectionWildcardMode = z.infer<typeof accessProjectionWildcardModeSchema>;
+export declare const accessProjectionPermissionClassificationSchema: z.ZodEnum<{
+    delegable: "delegable";
+    owner_only: "owner_only";
+}>;
+export type AccessProjectionPermissionClassification = z.infer<typeof accessProjectionPermissionClassificationSchema>;
+export declare const accessProjectionScopeKindSchema: z.ZodEnum<{
+    default: "default";
+    org: "org";
+    suite: "suite";
+}>;
+export type AccessProjectionScopeKind = z.infer<typeof accessProjectionScopeKindSchema>;
+export declare const accessProjectionScopeStatusSchema: z.ZodEnum<{
+    active: "active";
+    disabled: "disabled";
+}>;
+export type AccessProjectionScopeStatus = z.infer<typeof accessProjectionScopeStatusSchema>;
+export declare const accessProjectionAccountEntryModeSchema: z.ZodEnum<{
+    open: "open";
+    allowlisted_only: "allowlisted_only";
+    invite_only: "invite_only";
+    approval_required: "approval_required";
+}>;
+export type AccessProjectionAccountEntryMode = z.infer<typeof accessProjectionAccountEntryModeSchema>;
+export declare const accessProjectionPrincipalStatusSchema: z.ZodEnum<{
+    active: "active";
+    blocked: "blocked";
+    suspended: "suspended";
+    pending_approval: "pending_approval";
+    removed: "removed";
+}>;
+export type AccessProjectionPrincipalStatus = z.infer<typeof accessProjectionPrincipalStatusSchema>;
+export declare const projectionUserSchema: z.ZodObject<{
+    herculesAuthUserId: z.ZodString;
+    name: z.ZodString;
+    email: z.ZodString;
+    emailVerified: z.ZodBoolean;
+    image: z.ZodOptional<z.ZodString>;
+    phone: z.ZodOptional<z.ZodString>;
+    phoneVerified: z.ZodBoolean;
+    updatedAt: z.ZodNumber;
+}, z.core.$strict>;
+export type ProjectionUser = z.infer<typeof projectionUserSchema>;
+export declare const projectionCatalogRoleSchema: z.ZodObject<{
+    roleId: z.ZodString;
+    key: z.ZodString;
+    source: z.ZodEnum<{
+        system: "system";
+        iam: "iam";
+    }>;
+    name: z.ZodString;
+    baseWildcard: z.ZodEnum<{
+        none: "none";
+        immutable: "immutable";
+        default: "default";
+    }>;
+    updatedAt: z.ZodNumber;
+}, z.core.$strict>;
+export type ProjectionCatalogRole = z.infer<typeof projectionCatalogRoleSchema>;
+export declare const projectionCatalogPermissionSchema: z.ZodObject<{
+    permissionId: z.ZodString;
+    key: z.ZodString;
+    resourceType: z.ZodString;
+    action: z.ZodString;
+    classification: z.ZodEnum<{
+        delegable: "delegable";
+        owner_only: "owner_only";
+    }>;
+    tenantAssignable: z.ZodBoolean;
+    updatedAt: z.ZodNumber;
+}, z.core.$strict>;
+export type ProjectionCatalogPermission = z.infer<typeof projectionCatalogPermissionSchema>;
+export declare const projectionCatalogRolePermissionSchema: z.ZodObject<{
+    roleId: z.ZodString;
+    permissionId: z.ZodString;
+    effect: z.ZodEnum<{
+        allow: "allow";
+        deny: "deny";
+    }>;
+    updatedAt: z.ZodNumber;
+}, z.core.$strict>;
+export type ProjectionCatalogRolePermission = z.infer<typeof projectionCatalogRolePermissionSchema>;
+export declare const projectionCatalogSchema: z.ZodObject<{
+    roles: z.ZodArray<z.ZodObject<{
+        roleId: z.ZodString;
+        key: z.ZodString;
+        source: z.ZodEnum<{
+            system: "system";
+            iam: "iam";
+        }>;
+        name: z.ZodString;
+        baseWildcard: z.ZodEnum<{
+            none: "none";
+            immutable: "immutable";
+            default: "default";
+        }>;
+        updatedAt: z.ZodNumber;
+    }, z.core.$strict>>;
+    permissions: z.ZodArray<z.ZodObject<{
+        permissionId: z.ZodString;
+        key: z.ZodString;
+        resourceType: z.ZodString;
+        action: z.ZodString;
+        classification: z.ZodEnum<{
+            delegable: "delegable";
+            owner_only: "owner_only";
+        }>;
+        tenantAssignable: z.ZodBoolean;
+        updatedAt: z.ZodNumber;
+    }, z.core.$strict>>;
+    rolePermissions: z.ZodArray<z.ZodObject<{
+        roleId: z.ZodString;
+        permissionId: z.ZodString;
+        effect: z.ZodEnum<{
+            allow: "allow";
+            deny: "deny";
+        }>;
+        updatedAt: z.ZodNumber;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type ProjectionCatalog = z.infer<typeof projectionCatalogSchema>;
+export declare const projectionScopeMetadataSchema: z.ZodObject<{
+    accessScopeId: z.ZodString;
+    name: z.ZodString;
+    kind: z.ZodEnum<{
+        default: "default";
+        org: "org";
+        suite: "suite";
+    }>;
+    status: z.ZodEnum<{
+        active: "active";
+        disabled: "disabled";
+    }>;
+    accountEntryMode: z.ZodEnum<{
+        open: "open";
+        allowlisted_only: "allowlisted_only";
+        invite_only: "invite_only";
+        approval_required: "approval_required";
+    }>;
+    defaultRoleId: z.ZodString;
+    updatedAt: z.ZodNumber;
+}, z.core.$strict>;
+export type ProjectionScopeMetadata = z.infer<typeof projectionScopeMetadataSchema>;
+export declare const projectionPrincipalSchema: z.ZodObject<{
+    principalId: z.ZodString;
+    type: z.ZodEnum<{
+        user: "user";
+        group: "group";
+    }>;
+    herculesAuthUserId: z.ZodOptional<z.ZodString>;
+    name: z.ZodOptional<z.ZodString>;
+    status: z.ZodEnum<{
+        active: "active";
+        blocked: "blocked";
+        suspended: "suspended";
+        pending_approval: "pending_approval";
+        removed: "removed";
+    }>;
+    joinedAt: z.ZodNumber;
+    updatedAt: z.ZodNumber;
+}, z.core.$strict>;
+export type ProjectionPrincipal = z.infer<typeof projectionPrincipalSchema>;
+export declare const projectionPrincipalMembershipSchema: z.ZodObject<{
+    groupPrincipalId: z.ZodString;
+    memberPrincipalId: z.ZodString;
+    updatedAt: z.ZodNumber;
+}, z.core.$strict>;
+export type ProjectionPrincipalMembership = z.infer<typeof projectionPrincipalMembershipSchema>;
+export declare const projectionScopeTenantRoleSchema: z.ZodObject<{
+    roleId: z.ZodString;
+    accessScopeId: z.ZodString;
+    key: z.ZodString;
+    source: z.ZodLiteral<"tenant">;
+    name: z.ZodString;
+    baseWildcard: z.ZodLiteral<"none">;
+    updatedAt: z.ZodNumber;
+}, z.core.$strict>;
+export type ProjectionScopeTenantRole = z.infer<typeof projectionScopeTenantRoleSchema>;
+export declare const projectionScopeRolePermissionOverrideSchema: z.ZodObject<{
+    accessScopeId: z.ZodString;
+    roleId: z.ZodString;
+    permissionId: z.ZodString;
+    effect: z.ZodEnum<{
+        allow: "allow";
+        deny: "deny";
+    }>;
+    updatedAt: z.ZodNumber;
+}, z.core.$strict>;
+export type ProjectionScopeRolePermissionOverride = z.infer<typeof projectionScopeRolePermissionOverrideSchema>;
+export declare const projectionScopeRoleBindingSchema: z.ZodObject<{
+    bindingId: z.ZodString;
+    subjectPrincipalId: z.ZodString;
+    roleId: z.ZodString;
+    accessScopeId: z.ZodString;
+    resourceType: z.ZodOptional<z.ZodString>;
+    resourceId: z.ZodOptional<z.ZodString>;
+    appliesTo: z.ZodDefault<z.ZodEnum<{
+        self: "self";
+        self_and_descendants: "self_and_descendants";
+    }>>;
+    expiresAt: z.ZodOptional<z.ZodNumber>;
+    updatedAt: z.ZodNumber;
+}, z.core.$strict>;
+export type ProjectionScopeRoleBinding = z.infer<typeof projectionScopeRoleBindingSchema>;
+export declare const projectionScopePermissionBindingSchema: z.ZodObject<{
+    bindingId: z.ZodString;
+    subjectPrincipalId: z.ZodOptional<z.ZodString>;
+    subjectRoleId: z.ZodOptional<z.ZodString>;
+    permissionId: z.ZodString;
+    effect: z.ZodEnum<{
+        allow: "allow";
+        deny: "deny";
+    }>;
+    accessScopeId: z.ZodString;
+    resourceType: z.ZodOptional<z.ZodString>;
+    resourceId: z.ZodOptional<z.ZodString>;
+    appliesTo: z.ZodDefault<z.ZodEnum<{
+        self: "self";
+        self_and_descendants: "self_and_descendants";
+    }>>;
+    expiresAt: z.ZodOptional<z.ZodNumber>;
+    updatedAt: z.ZodNumber;
+}, z.core.$strict>;
+export type ProjectionScopePermissionBinding = z.infer<typeof projectionScopePermissionBindingSchema>;
+export declare const projectionScopeSchema: z.ZodObject<{
+    scope: z.ZodObject<{
+        accessScopeId: z.ZodString;
+        name: z.ZodString;
+        kind: z.ZodEnum<{
+            default: "default";
+            org: "org";
+            suite: "suite";
+        }>;
+        status: z.ZodEnum<{
+            active: "active";
+            disabled: "disabled";
+        }>;
+        accountEntryMode: z.ZodEnum<{
+            open: "open";
+            allowlisted_only: "allowlisted_only";
+            invite_only: "invite_only";
+            approval_required: "approval_required";
+        }>;
+        defaultRoleId: z.ZodString;
+        updatedAt: z.ZodNumber;
+    }, z.core.$strict>;
+    principals: z.ZodArray<z.ZodObject<{
+        principalId: z.ZodString;
+        type: z.ZodEnum<{
+            user: "user";
+            group: "group";
+        }>;
+        herculesAuthUserId: z.ZodOptional<z.ZodString>;
+        name: z.ZodOptional<z.ZodString>;
+        status: z.ZodEnum<{
+            active: "active";
+            blocked: "blocked";
+            suspended: "suspended";
+            pending_approval: "pending_approval";
+            removed: "removed";
+        }>;
+        joinedAt: z.ZodNumber;
+        updatedAt: z.ZodNumber;
+    }, z.core.$strict>>;
+    principalMemberships: z.ZodArray<z.ZodObject<{
+        groupPrincipalId: z.ZodString;
+        memberPrincipalId: z.ZodString;
+        updatedAt: z.ZodNumber;
+    }, z.core.$strict>>;
+    roles: z.ZodArray<z.ZodObject<{
+        roleId: z.ZodString;
+        accessScopeId: z.ZodString;
+        key: z.ZodString;
+        source: z.ZodLiteral<"tenant">;
+        name: z.ZodString;
+        baseWildcard: z.ZodLiteral<"none">;
+        updatedAt: z.ZodNumber;
+    }, z.core.$strict>>;
+    rolePermissionOverrides: z.ZodArray<z.ZodObject<{
+        accessScopeId: z.ZodString;
+        roleId: z.ZodString;
+        permissionId: z.ZodString;
+        effect: z.ZodEnum<{
+            allow: "allow";
+            deny: "deny";
+        }>;
+        updatedAt: z.ZodNumber;
+    }, z.core.$strict>>;
+    roleBindings: z.ZodArray<z.ZodObject<{
+        bindingId: z.ZodString;
+        subjectPrincipalId: z.ZodString;
+        roleId: z.ZodString;
+        accessScopeId: z.ZodString;
+        resourceType: z.ZodOptional<z.ZodString>;
+        resourceId: z.ZodOptional<z.ZodString>;
+        appliesTo: z.ZodDefault<z.ZodEnum<{
+            self: "self";
+            self_and_descendants: "self_and_descendants";
+        }>>;
+        expiresAt: z.ZodOptional<z.ZodNumber>;
+        updatedAt: z.ZodNumber;
+    }, z.core.$strict>>;
+    permissionBindings: z.ZodArray<z.ZodObject<{
+        bindingId: z.ZodString;
+        subjectPrincipalId: z.ZodOptional<z.ZodString>;
+        subjectRoleId: z.ZodOptional<z.ZodString>;
+        permissionId: z.ZodString;
+        effect: z.ZodEnum<{
+            allow: "allow";
+            deny: "deny";
+        }>;
+        accessScopeId: z.ZodString;
+        resourceType: z.ZodOptional<z.ZodString>;
+        resourceId: z.ZodOptional<z.ZodString>;
+        appliesTo: z.ZodDefault<z.ZodEnum<{
+            self: "self";
+            self_and_descendants: "self_and_descendants";
+        }>>;
+        expiresAt: z.ZodOptional<z.ZodNumber>;
+        updatedAt: z.ZodNumber;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type ProjectionScope = z.infer<typeof projectionScopeSchema>;
+export declare const accessProjectionSnapshotSchema: z.ZodObject<{
+    type: z.ZodLiteral<"access.projection.snapshot">;
+    schemaVersion: z.ZodLiteral<3>;
+    eventId: z.ZodString;
+    mode: z.ZodEnum<{
+        initialize: "initialize";
+        reset: "reset";
+    }>;
+    sourceVersion: z.ZodNumber;
+    expectedIssuer: z.ZodString;
+    catalog: z.ZodObject<{
+        roles: z.ZodArray<z.ZodObject<{
+            roleId: z.ZodString;
+            key: z.ZodString;
+            source: z.ZodEnum<{
+                system: "system";
+                iam: "iam";
+            }>;
+            name: z.ZodString;
+            baseWildcard: z.ZodEnum<{
+                none: "none";
+                immutable: "immutable";
+                default: "default";
+            }>;
+            updatedAt: z.ZodNumber;
+        }, z.core.$strict>>;
+        permissions: z.ZodArray<z.ZodObject<{
+            permissionId: z.ZodString;
+            key: z.ZodString;
+            resourceType: z.ZodString;
+            action: z.ZodString;
+            classification: z.ZodEnum<{
+                delegable: "delegable";
+                owner_only: "owner_only";
+            }>;
+            tenantAssignable: z.ZodBoolean;
+            updatedAt: z.ZodNumber;
+        }, z.core.$strict>>;
+        rolePermissions: z.ZodArray<z.ZodObject<{
+            roleId: z.ZodString;
+            permissionId: z.ZodString;
+            effect: z.ZodEnum<{
+                allow: "allow";
+                deny: "deny";
+            }>;
+            updatedAt: z.ZodNumber;
+        }, z.core.$strict>>;
+    }, z.core.$strict>;
+    users: z.ZodArray<z.ZodObject<{
+        herculesAuthUserId: z.ZodString;
+        name: z.ZodString;
+        email: z.ZodString;
+        emailVerified: z.ZodBoolean;
+        image: z.ZodOptional<z.ZodString>;
+        phone: z.ZodOptional<z.ZodString>;
+        phoneVerified: z.ZodBoolean;
+        updatedAt: z.ZodNumber;
+    }, z.core.$strict>>;
+    scopes: z.ZodArray<z.ZodObject<{
+        scope: z.ZodObject<{
+            accessScopeId: z.ZodString;
+            name: z.ZodString;
+            kind: z.ZodEnum<{
+                default: "default";
+                org: "org";
+                suite: "suite";
+            }>;
+            status: z.ZodEnum<{
+                active: "active";
+                disabled: "disabled";
+            }>;
+            accountEntryMode: z.ZodEnum<{
+                open: "open";
+                allowlisted_only: "allowlisted_only";
+                invite_only: "invite_only";
+                approval_required: "approval_required";
+            }>;
+            defaultRoleId: z.ZodString;
+            updatedAt: z.ZodNumber;
+        }, z.core.$strict>;
+        principals: z.ZodArray<z.ZodObject<{
+            principalId: z.ZodString;
+            type: z.ZodEnum<{
+                user: "user";
+                group: "group";
+            }>;
+            herculesAuthUserId: z.ZodOptional<z.ZodString>;
+            name: z.ZodOptional<z.ZodString>;
+            status: z.ZodEnum<{
+                active: "active";
+                blocked: "blocked";
+                suspended: "suspended";
+                pending_approval: "pending_approval";
+                removed: "removed";
+            }>;
+            joinedAt: z.ZodNumber;
+            updatedAt: z.ZodNumber;
+        }, z.core.$strict>>;
+        principalMemberships: z.ZodArray<z.ZodObject<{
+            groupPrincipalId: z.ZodString;
+            memberPrincipalId: z.ZodString;
+            updatedAt: z.ZodNumber;
+        }, z.core.$strict>>;
+        roles: z.ZodArray<z.ZodObject<{
+            roleId: z.ZodString;
+            accessScopeId: z.ZodString;
+            key: z.ZodString;
+            source: z.ZodLiteral<"tenant">;
+            name: z.ZodString;
+            baseWildcard: z.ZodLiteral<"none">;
+            updatedAt: z.ZodNumber;
+        }, z.core.$strict>>;
+        rolePermissionOverrides: z.ZodArray<z.ZodObject<{
+            accessScopeId: z.ZodString;
+            roleId: z.ZodString;
+            permissionId: z.ZodString;
+            effect: z.ZodEnum<{
+                allow: "allow";
+                deny: "deny";
+            }>;
+            updatedAt: z.ZodNumber;
+        }, z.core.$strict>>;
+        roleBindings: z.ZodArray<z.ZodObject<{
+            bindingId: z.ZodString;
+            subjectPrincipalId: z.ZodString;
+            roleId: z.ZodString;
+            accessScopeId: z.ZodString;
+            resourceType: z.ZodOptional<z.ZodString>;
+            resourceId: z.ZodOptional<z.ZodString>;
+            appliesTo: z.ZodDefault<z.ZodEnum<{
+                self: "self";
+                self_and_descendants: "self_and_descendants";
+            }>>;
+            expiresAt: z.ZodOptional<z.ZodNumber>;
+            updatedAt: z.ZodNumber;
+        }, z.core.$strict>>;
+        permissionBindings: z.ZodArray<z.ZodObject<{
+            bindingId: z.ZodString;
+            subjectPrincipalId: z.ZodOptional<z.ZodString>;
+            subjectRoleId: z.ZodOptional<z.ZodString>;
+            permissionId: z.ZodString;
+            effect: z.ZodEnum<{
+                allow: "allow";
+                deny: "deny";
+            }>;
+            accessScopeId: z.ZodString;
+            resourceType: z.ZodOptional<z.ZodString>;
+            resourceId: z.ZodOptional<z.ZodString>;
+            appliesTo: z.ZodDefault<z.ZodEnum<{
+                self: "self";
+                self_and_descendants: "self_and_descendants";
+            }>>;
+            expiresAt: z.ZodOptional<z.ZodNumber>;
+            updatedAt: z.ZodNumber;
+        }, z.core.$strict>>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type AccessProjectionSnapshot = z.infer<typeof accessProjectionSnapshotSchema>;
+export declare const projectionChangeOperationSchema: z.ZodEnum<{
+    upsert: "upsert";
+    delete: "delete";
+}>;
+export type ProjectionChangeOperation = z.infer<typeof projectionChangeOperationSchema>;
+export declare const projectionUserChangeSchema: z.ZodObject<{
+    entityType: z.ZodLiteral<"user">;
+    herculesAuthUserId: z.ZodString;
+    operation: z.ZodEnum<{
+        upsert: "upsert";
+        delete: "delete";
+    }>;
+}, z.core.$strict>;
+export type ProjectionUserChange = z.infer<typeof projectionUserChangeSchema>;
+export declare const projectionRoleChangeSchema: z.ZodObject<{
+    entityType: z.ZodLiteral<"role">;
+    roleId: z.ZodString;
+    operation: z.ZodEnum<{
+        upsert: "upsert";
+        delete: "delete";
+    }>;
+}, z.core.$strict>;
+export type ProjectionRoleChange = z.infer<typeof projectionRoleChangeSchema>;
+export declare const projectionPermissionChangeSchema: z.ZodObject<{
+    entityType: z.ZodLiteral<"permission">;
+    permissionId: z.ZodString;
+    operation: z.ZodEnum<{
+        upsert: "upsert";
+        delete: "delete";
+    }>;
+}, z.core.$strict>;
+export type ProjectionPermissionChange = z.infer<typeof projectionPermissionChangeSchema>;
+export declare const projectionRolePermissionChangeSchema: z.ZodObject<{
+    entityType: z.ZodLiteral<"role_permission">;
+    roleId: z.ZodString;
+    permissionId: z.ZodString;
+    operation: z.ZodEnum<{
+        upsert: "upsert";
+        delete: "delete";
+    }>;
+}, z.core.$strict>;
+export type ProjectionRolePermissionChange = z.infer<typeof projectionRolePermissionChangeSchema>;
+export declare const projectionScopeMetaChangeSchema: z.ZodObject<{
+    entityType: z.ZodLiteral<"scope">;
+    accessScopeId: z.ZodString;
+    operation: z.ZodEnum<{
+        upsert: "upsert";
+        delete: "delete";
+    }>;
+}, z.core.$strict>;
+export type ProjectionScopeMetaChange = z.infer<typeof projectionScopeMetaChangeSchema>;
+export declare const projectionPrincipalChangeSchema: z.ZodObject<{
+    entityType: z.ZodLiteral<"principal">;
+    principalId: z.ZodString;
+    operation: z.ZodEnum<{
+        upsert: "upsert";
+        delete: "delete";
+    }>;
+}, z.core.$strict>;
+export type ProjectionPrincipalChange = z.infer<typeof projectionPrincipalChangeSchema>;
+export declare const projectionPrincipalMembershipChangeSchema: z.ZodObject<{
+    entityType: z.ZodLiteral<"principal_membership">;
+    groupPrincipalId: z.ZodString;
+    memberPrincipalId: z.ZodString;
+    operation: z.ZodEnum<{
+        upsert: "upsert";
+        delete: "delete";
+    }>;
+}, z.core.$strict>;
+export type ProjectionPrincipalMembershipChange = z.infer<typeof projectionPrincipalMembershipChangeSchema>;
+export declare const projectionRolePermissionOverrideChangeSchema: z.ZodObject<{
+    entityType: z.ZodLiteral<"role_permission_override">;
+    accessScopeId: z.ZodString;
+    roleId: z.ZodString;
+    permissionId: z.ZodString;
+    operation: z.ZodEnum<{
+        upsert: "upsert";
+        delete: "delete";
+    }>;
+}, z.core.$strict>;
+export type ProjectionRolePermissionOverrideChange = z.infer<typeof projectionRolePermissionOverrideChangeSchema>;
+export declare const projectionRoleBindingChangeSchema: z.ZodObject<{
+    entityType: z.ZodLiteral<"role_binding">;
+    bindingId: z.ZodString;
+    operation: z.ZodEnum<{
+        upsert: "upsert";
+        delete: "delete";
+    }>;
+}, z.core.$strict>;
+export type ProjectionRoleBindingChange = z.infer<typeof projectionRoleBindingChangeSchema>;
+export declare const projectionPermissionBindingChangeSchema: z.ZodObject<{
+    entityType: z.ZodLiteral<"permission_binding">;
+    bindingId: z.ZodString;
+    operation: z.ZodEnum<{
+        upsert: "upsert";
+        delete: "delete";
+    }>;
+}, z.core.$strict>;
+export type ProjectionPermissionBindingChange = z.infer<typeof projectionPermissionBindingChangeSchema>;
+export declare const projectionCatalogChangeSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    entityType: z.ZodLiteral<"role">;
+    roleId: z.ZodString;
+    operation: z.ZodEnum<{
+        upsert: "upsert";
+        delete: "delete";
+    }>;
+}, z.core.$strict>, z.ZodObject<{
+    entityType: z.ZodLiteral<"permission">;
+    permissionId: z.ZodString;
+    operation: z.ZodEnum<{
+        upsert: "upsert";
+        delete: "delete";
+    }>;
+}, z.core.$strict>, z.ZodObject<{
+    entityType: z.ZodLiteral<"role_permission">;
+    roleId: z.ZodString;
+    permissionId: z.ZodString;
+    operation: z.ZodEnum<{
+        upsert: "upsert";
+        delete: "delete";
+    }>;
+}, z.core.$strict>], "entityType">;
+export type ProjectionCatalogChange = z.infer<typeof projectionCatalogChangeSchema>;
+export declare const projectionScopeChangeSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    entityType: z.ZodLiteral<"scope">;
+    accessScopeId: z.ZodString;
+    operation: z.ZodEnum<{
+        upsert: "upsert";
+        delete: "delete";
+    }>;
+}, z.core.$strict>, z.ZodObject<{
+    entityType: z.ZodLiteral<"principal">;
+    principalId: z.ZodString;
+    operation: z.ZodEnum<{
+        upsert: "upsert";
+        delete: "delete";
+    }>;
+}, z.core.$strict>, z.ZodObject<{
+    entityType: z.ZodLiteral<"principal_membership">;
+    groupPrincipalId: z.ZodString;
+    memberPrincipalId: z.ZodString;
+    operation: z.ZodEnum<{
+        upsert: "upsert";
+        delete: "delete";
+    }>;
+}, z.core.$strict>, z.ZodObject<{
+    entityType: z.ZodLiteral<"role">;
+    roleId: z.ZodString;
+    operation: z.ZodEnum<{
+        upsert: "upsert";
+        delete: "delete";
+    }>;
+}, z.core.$strict>, z.ZodObject<{
+    entityType: z.ZodLiteral<"role_permission_override">;
+    accessScopeId: z.ZodString;
+    roleId: z.ZodString;
+    permissionId: z.ZodString;
+    operation: z.ZodEnum<{
+        upsert: "upsert";
+        delete: "delete";
+    }>;
+}, z.core.$strict>, z.ZodObject<{
+    entityType: z.ZodLiteral<"role_binding">;
+    bindingId: z.ZodString;
+    operation: z.ZodEnum<{
+        upsert: "upsert";
+        delete: "delete";
+    }>;
+}, z.core.$strict>, z.ZodObject<{
+    entityType: z.ZodLiteral<"permission_binding">;
+    bindingId: z.ZodString;
+    operation: z.ZodEnum<{
+        upsert: "upsert";
+        delete: "delete";
+    }>;
+}, z.core.$strict>], "entityType">;
+export type ProjectionScopeChange = z.infer<typeof projectionScopeChangeSchema>;
+export declare const projectionChangeSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    entityType: z.ZodLiteral<"user">;
+    herculesAuthUserId: z.ZodString;
+    operation: z.ZodEnum<{
+        upsert: "upsert";
+        delete: "delete";
+    }>;
+}, z.core.$strict>, z.ZodObject<{
+    entityType: z.ZodLiteral<"role">;
+    roleId: z.ZodString;
+    operation: z.ZodEnum<{
+        upsert: "upsert";
+        delete: "delete";
+    }>;
+}, z.core.$strict>, z.ZodObject<{
+    entityType: z.ZodLiteral<"permission">;
+    permissionId: z.ZodString;
+    operation: z.ZodEnum<{
+        upsert: "upsert";
+        delete: "delete";
+    }>;
+}, z.core.$strict>, z.ZodObject<{
+    entityType: z.ZodLiteral<"role_permission">;
+    roleId: z.ZodString;
+    permissionId: z.ZodString;
+    operation: z.ZodEnum<{
+        upsert: "upsert";
+        delete: "delete";
+    }>;
+}, z.core.$strict>, z.ZodObject<{
+    entityType: z.ZodLiteral<"scope">;
+    accessScopeId: z.ZodString;
+    operation: z.ZodEnum<{
+        upsert: "upsert";
+        delete: "delete";
+    }>;
+}, z.core.$strict>, z.ZodObject<{
+    entityType: z.ZodLiteral<"principal">;
+    principalId: z.ZodString;
+    operation: z.ZodEnum<{
+        upsert: "upsert";
+        delete: "delete";
+    }>;
+}, z.core.$strict>, z.ZodObject<{
+    entityType: z.ZodLiteral<"principal_membership">;
+    groupPrincipalId: z.ZodString;
+    memberPrincipalId: z.ZodString;
+    operation: z.ZodEnum<{
+        upsert: "upsert";
+        delete: "delete";
+    }>;
+}, z.core.$strict>, z.ZodObject<{
+    entityType: z.ZodLiteral<"role_permission_override">;
+    accessScopeId: z.ZodString;
+    roleId: z.ZodString;
+    permissionId: z.ZodString;
+    operation: z.ZodEnum<{
+        upsert: "upsert";
+        delete: "delete";
+    }>;
+}, z.core.$strict>, z.ZodObject<{
+    entityType: z.ZodLiteral<"role_binding">;
+    bindingId: z.ZodString;
+    operation: z.ZodEnum<{
+        upsert: "upsert";
+        delete: "delete";
+    }>;
+}, z.core.$strict>, z.ZodObject<{
+    entityType: z.ZodLiteral<"permission_binding">;
+    bindingId: z.ZodString;
+    operation: z.ZodEnum<{
+        upsert: "upsert";
+        delete: "delete";
+    }>;
+}, z.core.$strict>], "entityType">;
+export type ProjectionChange = z.infer<typeof projectionChangeSchema>;
+export type ProjectionEntityType = ProjectionChange["entityType"];
+export declare const projectionCatalogDeltaSchema: z.ZodObject<{
+    changes: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        entityType: z.ZodLiteral<"role">;
+        roleId: z.ZodString;
+        operation: z.ZodEnum<{
+            upsert: "upsert";
+            delete: "delete";
+        }>;
+    }, z.core.$strict>, z.ZodObject<{
+        entityType: z.ZodLiteral<"permission">;
+        permissionId: z.ZodString;
+        operation: z.ZodEnum<{
+            upsert: "upsert";
+            delete: "delete";
+        }>;
+    }, z.core.$strict>, z.ZodObject<{
+        entityType: z.ZodLiteral<"role_permission">;
+        roleId: z.ZodString;
+        permissionId: z.ZodString;
+        operation: z.ZodEnum<{
+            upsert: "upsert";
+            delete: "delete";
+        }>;
+    }, z.core.$strict>], "entityType">>;
+    roles: z.ZodArray<z.ZodObject<{
+        roleId: z.ZodString;
+        key: z.ZodString;
+        source: z.ZodEnum<{
+            system: "system";
+            iam: "iam";
+        }>;
+        name: z.ZodString;
+        baseWildcard: z.ZodEnum<{
+            none: "none";
+            immutable: "immutable";
+            default: "default";
+        }>;
+        updatedAt: z.ZodNumber;
+    }, z.core.$strict>>;
+    permissions: z.ZodArray<z.ZodObject<{
+        permissionId: z.ZodString;
+        key: z.ZodString;
+        resourceType: z.ZodString;
+        action: z.ZodString;
+        classification: z.ZodEnum<{
+            delegable: "delegable";
+            owner_only: "owner_only";
+        }>;
+        tenantAssignable: z.ZodBoolean;
+        updatedAt: z.ZodNumber;
+    }, z.core.$strict>>;
+    rolePermissions: z.ZodArray<z.ZodObject<{
+        roleId: z.ZodString;
+        permissionId: z.ZodString;
+        effect: z.ZodEnum<{
+            allow: "allow";
+            deny: "deny";
+        }>;
+        updatedAt: z.ZodNumber;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type ProjectionCatalogDelta = z.infer<typeof projectionCatalogDeltaSchema>;
+export declare const projectionUserDeltaSchema: z.ZodObject<{
+    changes: z.ZodArray<z.ZodObject<{
+        entityType: z.ZodLiteral<"user">;
+        herculesAuthUserId: z.ZodString;
+        operation: z.ZodEnum<{
+            upsert: "upsert";
+            delete: "delete";
+        }>;
+    }, z.core.$strict>>;
+    users: z.ZodArray<z.ZodObject<{
+        herculesAuthUserId: z.ZodString;
+        name: z.ZodString;
+        email: z.ZodString;
+        emailVerified: z.ZodBoolean;
+        image: z.ZodOptional<z.ZodString>;
+        phone: z.ZodOptional<z.ZodString>;
+        phoneVerified: z.ZodBoolean;
+        updatedAt: z.ZodNumber;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type ProjectionUserDelta = z.infer<typeof projectionUserDeltaSchema>;
+export declare const projectionScopeDeltaSchema: z.ZodObject<{
+    accessScopeId: z.ZodString;
+    scope: z.ZodOptional<z.ZodObject<{
+        accessScopeId: z.ZodString;
+        name: z.ZodString;
+        kind: z.ZodEnum<{
+            default: "default";
+            org: "org";
+            suite: "suite";
+        }>;
+        status: z.ZodEnum<{
+            active: "active";
+            disabled: "disabled";
+        }>;
+        accountEntryMode: z.ZodEnum<{
+            open: "open";
+            allowlisted_only: "allowlisted_only";
+            invite_only: "invite_only";
+            approval_required: "approval_required";
+        }>;
+        defaultRoleId: z.ZodString;
+        updatedAt: z.ZodNumber;
+    }, z.core.$strict>>;
+    changes: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        entityType: z.ZodLiteral<"scope">;
+        accessScopeId: z.ZodString;
+        operation: z.ZodEnum<{
+            upsert: "upsert";
+            delete: "delete";
+        }>;
+    }, z.core.$strict>, z.ZodObject<{
+        entityType: z.ZodLiteral<"principal">;
+        principalId: z.ZodString;
+        operation: z.ZodEnum<{
+            upsert: "upsert";
+            delete: "delete";
+        }>;
+    }, z.core.$strict>, z.ZodObject<{
+        entityType: z.ZodLiteral<"principal_membership">;
+        groupPrincipalId: z.ZodString;
+        memberPrincipalId: z.ZodString;
+        operation: z.ZodEnum<{
+            upsert: "upsert";
+            delete: "delete";
+        }>;
+    }, z.core.$strict>, z.ZodObject<{
+        entityType: z.ZodLiteral<"role">;
+        roleId: z.ZodString;
+        operation: z.ZodEnum<{
+            upsert: "upsert";
+            delete: "delete";
+        }>;
+    }, z.core.$strict>, z.ZodObject<{
+        entityType: z.ZodLiteral<"role_permission_override">;
+        accessScopeId: z.ZodString;
+        roleId: z.ZodString;
+        permissionId: z.ZodString;
+        operation: z.ZodEnum<{
+            upsert: "upsert";
+            delete: "delete";
+        }>;
+    }, z.core.$strict>, z.ZodObject<{
+        entityType: z.ZodLiteral<"role_binding">;
+        bindingId: z.ZodString;
+        operation: z.ZodEnum<{
+            upsert: "upsert";
+            delete: "delete";
+        }>;
+    }, z.core.$strict>, z.ZodObject<{
+        entityType: z.ZodLiteral<"permission_binding">;
+        bindingId: z.ZodString;
+        operation: z.ZodEnum<{
+            upsert: "upsert";
+            delete: "delete";
+        }>;
+    }, z.core.$strict>], "entityType">>;
+    principals: z.ZodArray<z.ZodObject<{
+        principalId: z.ZodString;
+        type: z.ZodEnum<{
+            user: "user";
+            group: "group";
+        }>;
+        herculesAuthUserId: z.ZodOptional<z.ZodString>;
+        name: z.ZodOptional<z.ZodString>;
+        status: z.ZodEnum<{
+            active: "active";
+            blocked: "blocked";
+            suspended: "suspended";
+            pending_approval: "pending_approval";
+            removed: "removed";
+        }>;
+        joinedAt: z.ZodNumber;
+        updatedAt: z.ZodNumber;
+    }, z.core.$strict>>;
+    principalMemberships: z.ZodArray<z.ZodObject<{
+        groupPrincipalId: z.ZodString;
+        memberPrincipalId: z.ZodString;
+        updatedAt: z.ZodNumber;
+    }, z.core.$strict>>;
+    roles: z.ZodArray<z.ZodObject<{
+        roleId: z.ZodString;
+        accessScopeId: z.ZodString;
+        key: z.ZodString;
+        source: z.ZodLiteral<"tenant">;
+        name: z.ZodString;
+        baseWildcard: z.ZodLiteral<"none">;
+        updatedAt: z.ZodNumber;
+    }, z.core.$strict>>;
+    rolePermissionOverrides: z.ZodArray<z.ZodObject<{
+        accessScopeId: z.ZodString;
+        roleId: z.ZodString;
+        permissionId: z.ZodString;
+        effect: z.ZodEnum<{
+            allow: "allow";
+            deny: "deny";
+        }>;
+        updatedAt: z.ZodNumber;
+    }, z.core.$strict>>;
+    roleBindings: z.ZodArray<z.ZodObject<{
+        bindingId: z.ZodString;
+        subjectPrincipalId: z.ZodString;
+        roleId: z.ZodString;
+        accessScopeId: z.ZodString;
+        resourceType: z.ZodOptional<z.ZodString>;
+        resourceId: z.ZodOptional<z.ZodString>;
+        appliesTo: z.ZodDefault<z.ZodEnum<{
+            self: "self";
+            self_and_descendants: "self_and_descendants";
+        }>>;
+        expiresAt: z.ZodOptional<z.ZodNumber>;
+        updatedAt: z.ZodNumber;
+    }, z.core.$strict>>;
+    permissionBindings: z.ZodArray<z.ZodObject<{
+        bindingId: z.ZodString;
+        subjectPrincipalId: z.ZodOptional<z.ZodString>;
+        subjectRoleId: z.ZodOptional<z.ZodString>;
+        permissionId: z.ZodString;
+        effect: z.ZodEnum<{
+            allow: "allow";
+            deny: "deny";
+        }>;
+        accessScopeId: z.ZodString;
+        resourceType: z.ZodOptional<z.ZodString>;
+        resourceId: z.ZodOptional<z.ZodString>;
+        appliesTo: z.ZodDefault<z.ZodEnum<{
+            self: "self";
+            self_and_descendants: "self_and_descendants";
+        }>>;
+        expiresAt: z.ZodOptional<z.ZodNumber>;
+        updatedAt: z.ZodNumber;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type ProjectionScopeDelta = z.infer<typeof projectionScopeDeltaSchema>;
+export declare const accessProjectionEventSchema: z.ZodObject<{
+    type: z.ZodLiteral<"access.projection.event">;
+    schemaVersion: z.ZodLiteral<3>;
+    eventId: z.ZodString;
+    sourceVersion: z.ZodNumber;
+    catalog: z.ZodOptional<z.ZodObject<{
+        changes: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            entityType: z.ZodLiteral<"role">;
+            roleId: z.ZodString;
+            operation: z.ZodEnum<{
+                upsert: "upsert";
+                delete: "delete";
+            }>;
+        }, z.core.$strict>, z.ZodObject<{
+            entityType: z.ZodLiteral<"permission">;
+            permissionId: z.ZodString;
+            operation: z.ZodEnum<{
+                upsert: "upsert";
+                delete: "delete";
+            }>;
+        }, z.core.$strict>, z.ZodObject<{
+            entityType: z.ZodLiteral<"role_permission">;
+            roleId: z.ZodString;
+            permissionId: z.ZodString;
+            operation: z.ZodEnum<{
+                upsert: "upsert";
+                delete: "delete";
+            }>;
+        }, z.core.$strict>], "entityType">>;
+        roles: z.ZodArray<z.ZodObject<{
+            roleId: z.ZodString;
+            key: z.ZodString;
+            source: z.ZodEnum<{
+                system: "system";
+                iam: "iam";
+            }>;
+            name: z.ZodString;
+            baseWildcard: z.ZodEnum<{
+                none: "none";
+                immutable: "immutable";
+                default: "default";
+            }>;
+            updatedAt: z.ZodNumber;
+        }, z.core.$strict>>;
+        permissions: z.ZodArray<z.ZodObject<{
+            permissionId: z.ZodString;
+            key: z.ZodString;
+            resourceType: z.ZodString;
+            action: z.ZodString;
+            classification: z.ZodEnum<{
+                delegable: "delegable";
+                owner_only: "owner_only";
+            }>;
+            tenantAssignable: z.ZodBoolean;
+            updatedAt: z.ZodNumber;
+        }, z.core.$strict>>;
+        rolePermissions: z.ZodArray<z.ZodObject<{
+            roleId: z.ZodString;
+            permissionId: z.ZodString;
+            effect: z.ZodEnum<{
+                allow: "allow";
+                deny: "deny";
+            }>;
+            updatedAt: z.ZodNumber;
+        }, z.core.$strict>>;
+    }, z.core.$strict>>;
+    users: z.ZodOptional<z.ZodObject<{
+        changes: z.ZodArray<z.ZodObject<{
+            entityType: z.ZodLiteral<"user">;
+            herculesAuthUserId: z.ZodString;
+            operation: z.ZodEnum<{
+                upsert: "upsert";
+                delete: "delete";
+            }>;
+        }, z.core.$strict>>;
+        users: z.ZodArray<z.ZodObject<{
+            herculesAuthUserId: z.ZodString;
+            name: z.ZodString;
+            email: z.ZodString;
+            emailVerified: z.ZodBoolean;
+            image: z.ZodOptional<z.ZodString>;
+            phone: z.ZodOptional<z.ZodString>;
+            phoneVerified: z.ZodBoolean;
+            updatedAt: z.ZodNumber;
+        }, z.core.$strict>>;
+    }, z.core.$strict>>;
+    scopes: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        accessScopeId: z.ZodString;
+        scope: z.ZodOptional<z.ZodObject<{
+            accessScopeId: z.ZodString;
+            name: z.ZodString;
+            kind: z.ZodEnum<{
+                default: "default";
+                org: "org";
+                suite: "suite";
+            }>;
+            status: z.ZodEnum<{
+                active: "active";
+                disabled: "disabled";
+            }>;
+            accountEntryMode: z.ZodEnum<{
+                open: "open";
+                allowlisted_only: "allowlisted_only";
+                invite_only: "invite_only";
+                approval_required: "approval_required";
+            }>;
+            defaultRoleId: z.ZodString;
+            updatedAt: z.ZodNumber;
+        }, z.core.$strict>>;
+        changes: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            entityType: z.ZodLiteral<"scope">;
+            accessScopeId: z.ZodString;
+            operation: z.ZodEnum<{
+                upsert: "upsert";
+                delete: "delete";
+            }>;
+        }, z.core.$strict>, z.ZodObject<{
+            entityType: z.ZodLiteral<"principal">;
+            principalId: z.ZodString;
+            operation: z.ZodEnum<{
+                upsert: "upsert";
+                delete: "delete";
+            }>;
+        }, z.core.$strict>, z.ZodObject<{
+            entityType: z.ZodLiteral<"principal_membership">;
+            groupPrincipalId: z.ZodString;
+            memberPrincipalId: z.ZodString;
+            operation: z.ZodEnum<{
+                upsert: "upsert";
+                delete: "delete";
+            }>;
+        }, z.core.$strict>, z.ZodObject<{
+            entityType: z.ZodLiteral<"role">;
+            roleId: z.ZodString;
+            operation: z.ZodEnum<{
+                upsert: "upsert";
+                delete: "delete";
+            }>;
+        }, z.core.$strict>, z.ZodObject<{
+            entityType: z.ZodLiteral<"role_permission_override">;
+            accessScopeId: z.ZodString;
+            roleId: z.ZodString;
+            permissionId: z.ZodString;
+            operation: z.ZodEnum<{
+                upsert: "upsert";
+                delete: "delete";
+            }>;
+        }, z.core.$strict>, z.ZodObject<{
+            entityType: z.ZodLiteral<"role_binding">;
+            bindingId: z.ZodString;
+            operation: z.ZodEnum<{
+                upsert: "upsert";
+                delete: "delete";
+            }>;
+        }, z.core.$strict>, z.ZodObject<{
+            entityType: z.ZodLiteral<"permission_binding">;
+            bindingId: z.ZodString;
+            operation: z.ZodEnum<{
+                upsert: "upsert";
+                delete: "delete";
+            }>;
+        }, z.core.$strict>], "entityType">>;
+        principals: z.ZodArray<z.ZodObject<{
+            principalId: z.ZodString;
+            type: z.ZodEnum<{
+                user: "user";
+                group: "group";
+            }>;
+            herculesAuthUserId: z.ZodOptional<z.ZodString>;
+            name: z.ZodOptional<z.ZodString>;
+            status: z.ZodEnum<{
+                active: "active";
+                blocked: "blocked";
+                suspended: "suspended";
+                pending_approval: "pending_approval";
+                removed: "removed";
+            }>;
+            joinedAt: z.ZodNumber;
+            updatedAt: z.ZodNumber;
+        }, z.core.$strict>>;
+        principalMemberships: z.ZodArray<z.ZodObject<{
+            groupPrincipalId: z.ZodString;
+            memberPrincipalId: z.ZodString;
+            updatedAt: z.ZodNumber;
+        }, z.core.$strict>>;
+        roles: z.ZodArray<z.ZodObject<{
+            roleId: z.ZodString;
+            accessScopeId: z.ZodString;
+            key: z.ZodString;
+            source: z.ZodLiteral<"tenant">;
+            name: z.ZodString;
+            baseWildcard: z.ZodLiteral<"none">;
+            updatedAt: z.ZodNumber;
+        }, z.core.$strict>>;
+        rolePermissionOverrides: z.ZodArray<z.ZodObject<{
+            accessScopeId: z.ZodString;
+            roleId: z.ZodString;
+            permissionId: z.ZodString;
+            effect: z.ZodEnum<{
+                allow: "allow";
+                deny: "deny";
+            }>;
+            updatedAt: z.ZodNumber;
+        }, z.core.$strict>>;
+        roleBindings: z.ZodArray<z.ZodObject<{
+            bindingId: z.ZodString;
+            subjectPrincipalId: z.ZodString;
+            roleId: z.ZodString;
+            accessScopeId: z.ZodString;
+            resourceType: z.ZodOptional<z.ZodString>;
+            resourceId: z.ZodOptional<z.ZodString>;
+            appliesTo: z.ZodDefault<z.ZodEnum<{
+                self: "self";
+                self_and_descendants: "self_and_descendants";
+            }>>;
+            expiresAt: z.ZodOptional<z.ZodNumber>;
+            updatedAt: z.ZodNumber;
+        }, z.core.$strict>>;
+        permissionBindings: z.ZodArray<z.ZodObject<{
+            bindingId: z.ZodString;
+            subjectPrincipalId: z.ZodOptional<z.ZodString>;
+            subjectRoleId: z.ZodOptional<z.ZodString>;
+            permissionId: z.ZodString;
+            effect: z.ZodEnum<{
+                allow: "allow";
+                deny: "deny";
+            }>;
+            accessScopeId: z.ZodString;
+            resourceType: z.ZodOptional<z.ZodString>;
+            resourceId: z.ZodOptional<z.ZodString>;
+            appliesTo: z.ZodDefault<z.ZodEnum<{
+                self: "self";
+                self_and_descendants: "self_and_descendants";
+            }>>;
+            expiresAt: z.ZodOptional<z.ZodNumber>;
+            updatedAt: z.ZodNumber;
+        }, z.core.$strict>>;
+    }, z.core.$strict>>>;
+}, z.core.$strict>;
+export type AccessProjectionEvent = z.infer<typeof accessProjectionEventSchema>;
+export declare const accessProjectionSyncPayloadSchema: z.ZodUnion<readonly [z.ZodObject<{
+    type: z.ZodLiteral<"access.projection.snapshot">;
+    schemaVersion: z.ZodLiteral<3>;
+    eventId: z.ZodString;
+    mode: z.ZodEnum<{
+        initialize: "initialize";
+        reset: "reset";
+    }>;
+    sourceVersion: z.ZodNumber;
+    expectedIssuer: z.ZodString;
+    catalog: z.ZodObject<{
+        roles: z.ZodArray<z.ZodObject<{
+            roleId: z.ZodString;
+            key: z.ZodString;
+            source: z.ZodEnum<{
+                system: "system";
+                iam: "iam";
+            }>;
+            name: z.ZodString;
+            baseWildcard: z.ZodEnum<{
+                none: "none";
+                immutable: "immutable";
+                default: "default";
+            }>;
+            updatedAt: z.ZodNumber;
+        }, z.core.$strict>>;
+        permissions: z.ZodArray<z.ZodObject<{
+            permissionId: z.ZodString;
+            key: z.ZodString;
+            resourceType: z.ZodString;
+            action: z.ZodString;
+            classification: z.ZodEnum<{
+                delegable: "delegable";
+                owner_only: "owner_only";
+            }>;
+            tenantAssignable: z.ZodBoolean;
+            updatedAt: z.ZodNumber;
+        }, z.core.$strict>>;
+        rolePermissions: z.ZodArray<z.ZodObject<{
+            roleId: z.ZodString;
+            permissionId: z.ZodString;
+            effect: z.ZodEnum<{
+                allow: "allow";
+                deny: "deny";
+            }>;
+            updatedAt: z.ZodNumber;
+        }, z.core.$strict>>;
+    }, z.core.$strict>;
+    users: z.ZodArray<z.ZodObject<{
+        herculesAuthUserId: z.ZodString;
+        name: z.ZodString;
+        email: z.ZodString;
+        emailVerified: z.ZodBoolean;
+        image: z.ZodOptional<z.ZodString>;
+        phone: z.ZodOptional<z.ZodString>;
+        phoneVerified: z.ZodBoolean;
+        updatedAt: z.ZodNumber;
+    }, z.core.$strict>>;
+    scopes: z.ZodArray<z.ZodObject<{
+        scope: z.ZodObject<{
+            accessScopeId: z.ZodString;
+            name: z.ZodString;
+            kind: z.ZodEnum<{
+                default: "default";
+                org: "org";
+                suite: "suite";
+            }>;
+            status: z.ZodEnum<{
+                active: "active";
+                disabled: "disabled";
+            }>;
+            accountEntryMode: z.ZodEnum<{
+                open: "open";
+                allowlisted_only: "allowlisted_only";
+                invite_only: "invite_only";
+                approval_required: "approval_required";
+            }>;
+            defaultRoleId: z.ZodString;
+            updatedAt: z.ZodNumber;
+        }, z.core.$strict>;
+        principals: z.ZodArray<z.ZodObject<{
+            principalId: z.ZodString;
+            type: z.ZodEnum<{
+                user: "user";
+                group: "group";
+            }>;
+            herculesAuthUserId: z.ZodOptional<z.ZodString>;
+            name: z.ZodOptional<z.ZodString>;
+            status: z.ZodEnum<{
+                active: "active";
+                blocked: "blocked";
+                suspended: "suspended";
+                pending_approval: "pending_approval";
+                removed: "removed";
+            }>;
+            joinedAt: z.ZodNumber;
+            updatedAt: z.ZodNumber;
+        }, z.core.$strict>>;
+        principalMemberships: z.ZodArray<z.ZodObject<{
+            groupPrincipalId: z.ZodString;
+            memberPrincipalId: z.ZodString;
+            updatedAt: z.ZodNumber;
+        }, z.core.$strict>>;
+        roles: z.ZodArray<z.ZodObject<{
+            roleId: z.ZodString;
+            accessScopeId: z.ZodString;
+            key: z.ZodString;
+            source: z.ZodLiteral<"tenant">;
+            name: z.ZodString;
+            baseWildcard: z.ZodLiteral<"none">;
+            updatedAt: z.ZodNumber;
+        }, z.core.$strict>>;
+        rolePermissionOverrides: z.ZodArray<z.ZodObject<{
+            accessScopeId: z.ZodString;
+            roleId: z.ZodString;
+            permissionId: z.ZodString;
+            effect: z.ZodEnum<{
+                allow: "allow";
+                deny: "deny";
+            }>;
+            updatedAt: z.ZodNumber;
+        }, z.core.$strict>>;
+        roleBindings: z.ZodArray<z.ZodObject<{
+            bindingId: z.ZodString;
+            subjectPrincipalId: z.ZodString;
+            roleId: z.ZodString;
+            accessScopeId: z.ZodString;
+            resourceType: z.ZodOptional<z.ZodString>;
+            resourceId: z.ZodOptional<z.ZodString>;
+            appliesTo: z.ZodDefault<z.ZodEnum<{
+                self: "self";
+                self_and_descendants: "self_and_descendants";
+            }>>;
+            expiresAt: z.ZodOptional<z.ZodNumber>;
+            updatedAt: z.ZodNumber;
+        }, z.core.$strict>>;
+        permissionBindings: z.ZodArray<z.ZodObject<{
+            bindingId: z.ZodString;
+            subjectPrincipalId: z.ZodOptional<z.ZodString>;
+            subjectRoleId: z.ZodOptional<z.ZodString>;
+            permissionId: z.ZodString;
+            effect: z.ZodEnum<{
+                allow: "allow";
+                deny: "deny";
+            }>;
+            accessScopeId: z.ZodString;
+            resourceType: z.ZodOptional<z.ZodString>;
+            resourceId: z.ZodOptional<z.ZodString>;
+            appliesTo: z.ZodDefault<z.ZodEnum<{
+                self: "self";
+                self_and_descendants: "self_and_descendants";
+            }>>;
+            expiresAt: z.ZodOptional<z.ZodNumber>;
+            updatedAt: z.ZodNumber;
+        }, z.core.$strict>>;
+    }, z.core.$strict>>;
+}, z.core.$strict>, z.ZodObject<{
+    type: z.ZodLiteral<"access.projection.event">;
+    schemaVersion: z.ZodLiteral<3>;
+    eventId: z.ZodString;
+    sourceVersion: z.ZodNumber;
+    catalog: z.ZodOptional<z.ZodObject<{
+        changes: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            entityType: z.ZodLiteral<"role">;
+            roleId: z.ZodString;
+            operation: z.ZodEnum<{
+                upsert: "upsert";
+                delete: "delete";
+            }>;
+        }, z.core.$strict>, z.ZodObject<{
+            entityType: z.ZodLiteral<"permission">;
+            permissionId: z.ZodString;
+            operation: z.ZodEnum<{
+                upsert: "upsert";
+                delete: "delete";
+            }>;
+        }, z.core.$strict>, z.ZodObject<{
+            entityType: z.ZodLiteral<"role_permission">;
+            roleId: z.ZodString;
+            permissionId: z.ZodString;
+            operation: z.ZodEnum<{
+                upsert: "upsert";
+                delete: "delete";
+            }>;
+        }, z.core.$strict>], "entityType">>;
+        roles: z.ZodArray<z.ZodObject<{
+            roleId: z.ZodString;
+            key: z.ZodString;
+            source: z.ZodEnum<{
+                system: "system";
+                iam: "iam";
+            }>;
+            name: z.ZodString;
+            baseWildcard: z.ZodEnum<{
+                none: "none";
+                immutable: "immutable";
+                default: "default";
+            }>;
+            updatedAt: z.ZodNumber;
+        }, z.core.$strict>>;
+        permissions: z.ZodArray<z.ZodObject<{
+            permissionId: z.ZodString;
+            key: z.ZodString;
+            resourceType: z.ZodString;
+            action: z.ZodString;
+            classification: z.ZodEnum<{
+                delegable: "delegable";
+                owner_only: "owner_only";
+            }>;
+            tenantAssignable: z.ZodBoolean;
+            updatedAt: z.ZodNumber;
+        }, z.core.$strict>>;
+        rolePermissions: z.ZodArray<z.ZodObject<{
+            roleId: z.ZodString;
+            permissionId: z.ZodString;
+            effect: z.ZodEnum<{
+                allow: "allow";
+                deny: "deny";
+            }>;
+            updatedAt: z.ZodNumber;
+        }, z.core.$strict>>;
+    }, z.core.$strict>>;
+    users: z.ZodOptional<z.ZodObject<{
+        changes: z.ZodArray<z.ZodObject<{
+            entityType: z.ZodLiteral<"user">;
+            herculesAuthUserId: z.ZodString;
+            operation: z.ZodEnum<{
+                upsert: "upsert";
+                delete: "delete";
+            }>;
+        }, z.core.$strict>>;
+        users: z.ZodArray<z.ZodObject<{
+            herculesAuthUserId: z.ZodString;
+            name: z.ZodString;
+            email: z.ZodString;
+            emailVerified: z.ZodBoolean;
+            image: z.ZodOptional<z.ZodString>;
+            phone: z.ZodOptional<z.ZodString>;
+            phoneVerified: z.ZodBoolean;
+            updatedAt: z.ZodNumber;
+        }, z.core.$strict>>;
+    }, z.core.$strict>>;
+    scopes: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        accessScopeId: z.ZodString;
+        scope: z.ZodOptional<z.ZodObject<{
+            accessScopeId: z.ZodString;
+            name: z.ZodString;
+            kind: z.ZodEnum<{
+                default: "default";
+                org: "org";
+                suite: "suite";
+            }>;
+            status: z.ZodEnum<{
+                active: "active";
+                disabled: "disabled";
+            }>;
+            accountEntryMode: z.ZodEnum<{
+                open: "open";
+                allowlisted_only: "allowlisted_only";
+                invite_only: "invite_only";
+                approval_required: "approval_required";
+            }>;
+            defaultRoleId: z.ZodString;
+            updatedAt: z.ZodNumber;
+        }, z.core.$strict>>;
+        changes: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            entityType: z.ZodLiteral<"scope">;
+            accessScopeId: z.ZodString;
+            operation: z.ZodEnum<{
+                upsert: "upsert";
+                delete: "delete";
+            }>;
+        }, z.core.$strict>, z.ZodObject<{
+            entityType: z.ZodLiteral<"principal">;
+            principalId: z.ZodString;
+            operation: z.ZodEnum<{
+                upsert: "upsert";
+                delete: "delete";
+            }>;
+        }, z.core.$strict>, z.ZodObject<{
+            entityType: z.ZodLiteral<"principal_membership">;
+            groupPrincipalId: z.ZodString;
+            memberPrincipalId: z.ZodString;
+            operation: z.ZodEnum<{
+                upsert: "upsert";
+                delete: "delete";
+            }>;
+        }, z.core.$strict>, z.ZodObject<{
+            entityType: z.ZodLiteral<"role">;
+            roleId: z.ZodString;
+            operation: z.ZodEnum<{
+                upsert: "upsert";
+                delete: "delete";
+            }>;
+        }, z.core.$strict>, z.ZodObject<{
+            entityType: z.ZodLiteral<"role_permission_override">;
+            accessScopeId: z.ZodString;
+            roleId: z.ZodString;
+            permissionId: z.ZodString;
+            operation: z.ZodEnum<{
+                upsert: "upsert";
+                delete: "delete";
+            }>;
+        }, z.core.$strict>, z.ZodObject<{
+            entityType: z.ZodLiteral<"role_binding">;
+            bindingId: z.ZodString;
+            operation: z.ZodEnum<{
+                upsert: "upsert";
+                delete: "delete";
+            }>;
+        }, z.core.$strict>, z.ZodObject<{
+            entityType: z.ZodLiteral<"permission_binding">;
+            bindingId: z.ZodString;
+            operation: z.ZodEnum<{
+                upsert: "upsert";
+                delete: "delete";
+            }>;
+        }, z.core.$strict>], "entityType">>;
+        principals: z.ZodArray<z.ZodObject<{
+            principalId: z.ZodString;
+            type: z.ZodEnum<{
+                user: "user";
+                group: "group";
+            }>;
+            herculesAuthUserId: z.ZodOptional<z.ZodString>;
+            name: z.ZodOptional<z.ZodString>;
+            status: z.ZodEnum<{
+                active: "active";
+                blocked: "blocked";
+                suspended: "suspended";
+                pending_approval: "pending_approval";
+                removed: "removed";
+            }>;
+            joinedAt: z.ZodNumber;
+            updatedAt: z.ZodNumber;
+        }, z.core.$strict>>;
+        principalMemberships: z.ZodArray<z.ZodObject<{
+            groupPrincipalId: z.ZodString;
+            memberPrincipalId: z.ZodString;
+            updatedAt: z.ZodNumber;
+        }, z.core.$strict>>;
+        roles: z.ZodArray<z.ZodObject<{
+            roleId: z.ZodString;
+            accessScopeId: z.ZodString;
+            key: z.ZodString;
+            source: z.ZodLiteral<"tenant">;
+            name: z.ZodString;
+            baseWildcard: z.ZodLiteral<"none">;
+            updatedAt: z.ZodNumber;
+        }, z.core.$strict>>;
+        rolePermissionOverrides: z.ZodArray<z.ZodObject<{
+            accessScopeId: z.ZodString;
+            roleId: z.ZodString;
+            permissionId: z.ZodString;
+            effect: z.ZodEnum<{
+                allow: "allow";
+                deny: "deny";
+            }>;
+            updatedAt: z.ZodNumber;
+        }, z.core.$strict>>;
+        roleBindings: z.ZodArray<z.ZodObject<{
+            bindingId: z.ZodString;
+            subjectPrincipalId: z.ZodString;
+            roleId: z.ZodString;
+            accessScopeId: z.ZodString;
+            resourceType: z.ZodOptional<z.ZodString>;
+            resourceId: z.ZodOptional<z.ZodString>;
+            appliesTo: z.ZodDefault<z.ZodEnum<{
+                self: "self";
+                self_and_descendants: "self_and_descendants";
+            }>>;
+            expiresAt: z.ZodOptional<z.ZodNumber>;
+            updatedAt: z.ZodNumber;
+        }, z.core.$strict>>;
+        permissionBindings: z.ZodArray<z.ZodObject<{
+            bindingId: z.ZodString;
+            subjectPrincipalId: z.ZodOptional<z.ZodString>;
+            subjectRoleId: z.ZodOptional<z.ZodString>;
+            permissionId: z.ZodString;
+            effect: z.ZodEnum<{
+                allow: "allow";
+                deny: "deny";
+            }>;
+            accessScopeId: z.ZodString;
+            resourceType: z.ZodOptional<z.ZodString>;
+            resourceId: z.ZodOptional<z.ZodString>;
+            appliesTo: z.ZodDefault<z.ZodEnum<{
+                self: "self";
+                self_and_descendants: "self_and_descendants";
+            }>>;
+            expiresAt: z.ZodOptional<z.ZodNumber>;
+            updatedAt: z.ZodNumber;
+        }, z.core.$strict>>;
+    }, z.core.$strict>>>;
+}, z.core.$strict>]>;
+export type AccessProjectionSyncPayload = z.infer<typeof accessProjectionSyncPayloadSchema>;
+//# sourceMappingURL=projection-protocol.d.ts.map