@usestatemachines/cli 0.0.0-stage → 0.1.0

package/dist/config/schema.d.ts

@@ -0,0 +1,616 @@
+import { z } from 'zod';
+export declare const secretRefSchema: z.ZodObject<{
+    store: z.ZodEnum<{
+        file: "file";
+        keychain: "keychain";
+    }>;
+    origin: z.core.$ZodBranded<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, "ApiOrigin", "out">;
+    entry: z.ZodString;
+}, z.core.$strict>;
+export type SecretRef = z.infer<typeof secretRefSchema>;
+export declare const ownerSchema: z.ZodObject<{
+    hostname: z.ZodString;
+    pid: z.ZodNumber;
+    nonce: z.ZodString;
+}, z.core.$strict>;
+export declare const sessionSchema: z.ZodObject<{
+    origin: z.core.$ZodBranded<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, "ApiOrigin", "out">;
+    organization: z.ZodObject<{
+        id: z.core.$ZodBranded<z.ZodString, "OrganizationId", "out">;
+        name: z.ZodString;
+    }, z.core.$strict>;
+    email: z.ZodString;
+    tokenId: z.core.$ZodBranded<z.ZodString, "TokenId", "out">;
+    token: z.ZodObject<{
+        store: z.ZodEnum<{
+            file: "file";
+            keychain: "keychain";
+        }>;
+        origin: z.core.$ZodBranded<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, "ApiOrigin", "out">;
+        entry: z.ZodString;
+    }, z.core.$strict>;
+    idleExpiresAt: z.ZodISODateTime;
+    expiresAt: z.ZodISODateTime;
+    runKeys: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        workspaceId: z.core.$ZodBranded<z.ZodString, "WorkspaceId", "out">;
+        expiresAt: z.ZodISODateTime;
+        secret: z.ZodObject<{
+            store: z.ZodEnum<{
+                file: "file";
+                keychain: "keychain";
+            }>;
+            origin: z.core.$ZodBranded<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, "ApiOrigin", "out">;
+            entry: z.ZodString;
+        }, z.core.$strict>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type SavedSession = z.infer<typeof sessionSchema>;
+declare const keyIssuerSchema: z.ZodObject<{
+    profile: z.core.$ZodBranded<z.ZodString, "ProfileName", "out">;
+    generation: z.ZodNumber;
+    origin: z.core.$ZodBranded<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, "ApiOrigin", "out">;
+    tokenId: z.core.$ZodBranded<z.ZodString, "TokenId", "out">;
+    token: z.ZodObject<{
+        store: z.ZodEnum<{
+            file: "file";
+            keychain: "keychain";
+        }>;
+        origin: z.core.$ZodBranded<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, "ApiOrigin", "out">;
+        entry: z.ZodString;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+export type KeyIssuer = z.infer<typeof keyIssuerSchema>;
+declare const keyOperationSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    id: z.ZodString;
+    owner: z.ZodNullable<z.ZodObject<{
+        hostname: z.ZodString;
+        pid: z.ZodNumber;
+        nonce: z.ZodString;
+    }, z.core.$strict>>;
+    issuer: z.ZodObject<{
+        profile: z.core.$ZodBranded<z.ZodString, "ProfileName", "out">;
+        generation: z.ZodNumber;
+        origin: z.core.$ZodBranded<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, "ApiOrigin", "out">;
+        tokenId: z.core.$ZodBranded<z.ZodString, "TokenId", "out">;
+        token: z.ZodObject<{
+            store: z.ZodEnum<{
+                file: "file";
+                keychain: "keychain";
+            }>;
+            origin: z.core.$ZodBranded<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, "ApiOrigin", "out">;
+            entry: z.ZodString;
+        }, z.core.$strict>;
+    }, z.core.$strict>;
+    workspaceId: z.core.$ZodBranded<z.ZodString, "WorkspaceId", "out">;
+    target: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"run">;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"environment">;
+        file: z.ZodObject<{
+            repositoryRoot: z.ZodString;
+            path: z.ZodString;
+            expectedManagedDigest: z.ZodString;
+        }, z.core.$strict>;
+    }, z.core.$strict>], "kind">;
+    request: z.ZodPipe<z.ZodUnknown, z.ZodTransform<{
+        workspaceId: string;
+        name: string;
+        permissions: ("environments:connect" | "environments:read" | "environments:write" | "snapshots:read" | "snapshots:write")[];
+        kind?: "cli_run" | "env_pull" | undefined;
+    }, unknown>>;
+    idempotencyKey: z.ZodString;
+    secret: z.ZodObject<{
+        store: z.ZodEnum<{
+            file: "file";
+            keychain: "keychain";
+        }>;
+        origin: z.core.$ZodBranded<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, "ApiOrigin", "out">;
+        entry: z.ZodString;
+    }, z.core.$strict>;
+    phase: z.ZodLiteral<"creating">;
+}, z.core.$strict>, z.ZodObject<{
+    id: z.ZodString;
+    owner: z.ZodNullable<z.ZodObject<{
+        hostname: z.ZodString;
+        pid: z.ZodNumber;
+        nonce: z.ZodString;
+    }, z.core.$strict>>;
+    issuer: z.ZodObject<{
+        profile: z.core.$ZodBranded<z.ZodString, "ProfileName", "out">;
+        generation: z.ZodNumber;
+        origin: z.core.$ZodBranded<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, "ApiOrigin", "out">;
+        tokenId: z.core.$ZodBranded<z.ZodString, "TokenId", "out">;
+        token: z.ZodObject<{
+            store: z.ZodEnum<{
+                file: "file";
+                keychain: "keychain";
+            }>;
+            origin: z.core.$ZodBranded<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, "ApiOrigin", "out">;
+            entry: z.ZodString;
+        }, z.core.$strict>;
+    }, z.core.$strict>;
+    workspaceId: z.core.$ZodBranded<z.ZodString, "WorkspaceId", "out">;
+    target: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"run">;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"environment">;
+        file: z.ZodObject<{
+            repositoryRoot: z.ZodString;
+            path: z.ZodString;
+            expectedManagedDigest: z.ZodString;
+        }, z.core.$strict>;
+    }, z.core.$strict>], "kind">;
+    request: z.ZodPipe<z.ZodUnknown, z.ZodTransform<{
+        workspaceId: string;
+        name: string;
+        permissions: ("environments:connect" | "environments:read" | "environments:write" | "snapshots:read" | "snapshots:write")[];
+        kind?: "cli_run" | "env_pull" | undefined;
+    }, unknown>>;
+    idempotencyKey: z.ZodString;
+    secret: z.ZodObject<{
+        store: z.ZodEnum<{
+            file: "file";
+            keychain: "keychain";
+        }>;
+        origin: z.core.$ZodBranded<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, "ApiOrigin", "out">;
+        entry: z.ZodString;
+    }, z.core.$strict>;
+    phase: z.ZodLiteral<"staged">;
+    keyId: z.ZodString;
+    expiresAt: z.ZodISODateTime;
+}, z.core.$strict>], "phase">;
+export type KeyOperation = z.infer<typeof keyOperationSchema>;
+declare const keyRevocationSchema: z.ZodObject<{
+    id: z.ZodString;
+    keyId: z.ZodString;
+    origin: z.core.$ZodBranded<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, "ApiOrigin", "out">;
+    tokenId: z.core.$ZodBranded<z.ZodString, "TokenId", "out">;
+    token: z.ZodObject<{
+        store: z.ZodEnum<{
+            file: "file";
+            keychain: "keychain";
+        }>;
+        origin: z.core.$ZodBranded<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, "ApiOrigin", "out">;
+        entry: z.ZodString;
+    }, z.core.$strict>;
+    secret: z.ZodNullable<z.ZodObject<{
+        store: z.ZodEnum<{
+            file: "file";
+            keychain: "keychain";
+        }>;
+        origin: z.core.$ZodBranded<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, "ApiOrigin", "out">;
+        entry: z.ZodString;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type KeyRevocation = z.infer<typeof keyRevocationSchema>;
+export declare const pendingPayloadSchema: z.ZodObject<{
+    version: z.ZodLiteral<1>;
+    loginId: z.core.$ZodBranded<z.ZodString, "LoginId", "out">;
+    origin: z.core.$ZodBranded<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, "ApiOrigin", "out">;
+    expiresAt: z.ZodISODateTime;
+    interval: z.ZodNumber;
+    deviceCode: z.ZodString;
+    privateKey: z.ZodString;
+}, z.core.$strict>;
+export declare const attemptSchema: z.ZodObject<{
+    id: z.ZodString;
+    profile: z.core.$ZodBranded<z.ZodString, "ProfileName", "out">;
+    generation: z.ZodNumber;
+    origin: z.core.$ZodBranded<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, "ApiOrigin", "out">;
+    owner: z.ZodNullable<z.ZodObject<{
+        hostname: z.ZodString;
+        pid: z.ZodNumber;
+        nonce: z.ZodString;
+    }, z.core.$strict>>;
+    login: z.ZodNullable<z.ZodObject<{
+        loginId: z.core.$ZodBranded<z.ZodString, "LoginId", "out">;
+        userCode: z.ZodString;
+        verificationUrl: z.ZodURL;
+        expiresAt: z.ZodISODateTime;
+        interval: z.ZodNumber;
+    }, z.core.$strict>>;
+    secret: z.ZodNullable<z.ZodObject<{
+        store: z.ZodEnum<{
+            file: "file";
+            keychain: "keychain";
+        }>;
+        origin: z.core.$ZodBranded<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, "ApiOrigin", "out">;
+        entry: z.ZodString;
+    }, z.core.$strict>>;
+    createdAt: z.ZodISODateTime;
+}, z.core.$strict>;
+export type LoginAttempt = z.infer<typeof attemptSchema>;
+export declare const profileSchema: z.ZodObject<{
+    name: z.core.$ZodBranded<z.ZodString, "ProfileName", "out">;
+    generation: z.ZodNumber;
+    session: z.ZodNullable<z.ZodObject<{
+        origin: z.core.$ZodBranded<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, "ApiOrigin", "out">;
+        organization: z.ZodObject<{
+            id: z.core.$ZodBranded<z.ZodString, "OrganizationId", "out">;
+            name: z.ZodString;
+        }, z.core.$strict>;
+        email: z.ZodString;
+        tokenId: z.core.$ZodBranded<z.ZodString, "TokenId", "out">;
+        token: z.ZodObject<{
+            store: z.ZodEnum<{
+                file: "file";
+                keychain: "keychain";
+            }>;
+            origin: z.core.$ZodBranded<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, "ApiOrigin", "out">;
+            entry: z.ZodString;
+        }, z.core.$strict>;
+        idleExpiresAt: z.ZodISODateTime;
+        expiresAt: z.ZodISODateTime;
+        runKeys: z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            workspaceId: z.core.$ZodBranded<z.ZodString, "WorkspaceId", "out">;
+            expiresAt: z.ZodISODateTime;
+            secret: z.ZodObject<{
+                store: z.ZodEnum<{
+                    file: "file";
+                    keychain: "keychain";
+                }>;
+                origin: z.core.$ZodBranded<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, "ApiOrigin", "out">;
+                entry: z.ZodString;
+            }, z.core.$strict>;
+        }, z.core.$strict>>;
+    }, z.core.$strict>>;
+    defaultWorkspace: z.ZodNullable<z.core.$ZodBranded<z.ZodString, "WorkspaceId", "out">>;
+}, z.core.$strict>;
+declare const revokeJobSchema: z.ZodObject<{
+    id: z.ZodString;
+    origin: z.core.$ZodBranded<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, "ApiOrigin", "out">;
+    tokenId: z.core.$ZodBranded<z.ZodString, "TokenId", "out">;
+    token: z.ZodObject<{
+        store: z.ZodEnum<{
+            file: "file";
+            keychain: "keychain";
+        }>;
+        origin: z.core.$ZodBranded<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, "ApiOrigin", "out">;
+        entry: z.ZodString;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+export type RevokeJob = z.infer<typeof revokeJobSchema>;
+declare const installSchema: z.ZodObject<{
+    kind: z.ZodLiteral<"install">;
+    id: z.ZodString;
+    attemptId: z.ZodString;
+    profile: z.core.$ZodBranded<z.ZodString, "ProfileName", "out">;
+    generation: z.ZodNumber;
+    loginId: z.core.$ZodBranded<z.ZodString, "LoginId", "out">;
+    candidate: z.ZodObject<{
+        origin: z.core.$ZodBranded<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, "ApiOrigin", "out">;
+        organization: z.ZodObject<{
+            id: z.core.$ZodBranded<z.ZodString, "OrganizationId", "out">;
+            name: z.ZodString;
+        }, z.core.$strict>;
+        email: z.ZodString;
+        tokenId: z.core.$ZodBranded<z.ZodString, "TokenId", "out">;
+        token: z.ZodObject<{
+            store: z.ZodEnum<{
+                file: "file";
+                keychain: "keychain";
+            }>;
+            origin: z.core.$ZodBranded<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, "ApiOrigin", "out">;
+            entry: z.ZodString;
+        }, z.core.$strict>;
+        idleExpiresAt: z.ZodISODateTime;
+        expiresAt: z.ZodISODateTime;
+        runKeys: z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            workspaceId: z.core.$ZodBranded<z.ZodString, "WorkspaceId", "out">;
+            expiresAt: z.ZodISODateTime;
+            secret: z.ZodObject<{
+                store: z.ZodEnum<{
+                    file: "file";
+                    keychain: "keychain";
+                }>;
+                origin: z.core.$ZodBranded<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, "ApiOrigin", "out">;
+                entry: z.ZodString;
+            }, z.core.$strict>;
+        }, z.core.$strict>>;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+export type InstallIntent = z.infer<typeof installSchema>;
+export declare const configSchema: z.ZodObject<{
+    version: z.ZodLiteral<1>;
+    defaultProfile: z.ZodNullable<z.core.$ZodBranded<z.ZodString, "ProfileName", "out">>;
+    profiles: z.ZodArray<z.ZodObject<{
+        name: z.core.$ZodBranded<z.ZodString, "ProfileName", "out">;
+        generation: z.ZodNumber;
+        session: z.ZodNullable<z.ZodObject<{
+            origin: z.core.$ZodBranded<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, "ApiOrigin", "out">;
+            organization: z.ZodObject<{
+                id: z.core.$ZodBranded<z.ZodString, "OrganizationId", "out">;
+                name: z.ZodString;
+            }, z.core.$strict>;
+            email: z.ZodString;
+            tokenId: z.core.$ZodBranded<z.ZodString, "TokenId", "out">;
+            token: z.ZodObject<{
+                store: z.ZodEnum<{
+                    file: "file";
+                    keychain: "keychain";
+                }>;
+                origin: z.core.$ZodBranded<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, "ApiOrigin", "out">;
+                entry: z.ZodString;
+            }, z.core.$strict>;
+            idleExpiresAt: z.ZodISODateTime;
+            expiresAt: z.ZodISODateTime;
+            runKeys: z.ZodArray<z.ZodObject<{
+                id: z.ZodString;
+                workspaceId: z.core.$ZodBranded<z.ZodString, "WorkspaceId", "out">;
+                expiresAt: z.ZodISODateTime;
+                secret: z.ZodObject<{
+                    store: z.ZodEnum<{
+                        file: "file";
+                        keychain: "keychain";
+                    }>;
+                    origin: z.core.$ZodBranded<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, "ApiOrigin", "out">;
+                    entry: z.ZodString;
+                }, z.core.$strict>;
+            }, z.core.$strict>>;
+        }, z.core.$strict>>;
+        defaultWorkspace: z.ZodNullable<z.core.$ZodBranded<z.ZodString, "WorkspaceId", "out">>;
+    }, z.core.$strict>>;
+    attempts: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        profile: z.core.$ZodBranded<z.ZodString, "ProfileName", "out">;
+        generation: z.ZodNumber;
+        origin: z.core.$ZodBranded<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, "ApiOrigin", "out">;
+        owner: z.ZodNullable<z.ZodObject<{
+            hostname: z.ZodString;
+            pid: z.ZodNumber;
+            nonce: z.ZodString;
+        }, z.core.$strict>>;
+        login: z.ZodNullable<z.ZodObject<{
+            loginId: z.core.$ZodBranded<z.ZodString, "LoginId", "out">;
+            userCode: z.ZodString;
+            verificationUrl: z.ZodURL;
+            expiresAt: z.ZodISODateTime;
+            interval: z.ZodNumber;
+        }, z.core.$strict>>;
+        secret: z.ZodNullable<z.ZodObject<{
+            store: z.ZodEnum<{
+                file: "file";
+                keychain: "keychain";
+            }>;
+            origin: z.core.$ZodBranded<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, "ApiOrigin", "out">;
+            entry: z.ZodString;
+        }, z.core.$strict>>;
+        createdAt: z.ZodISODateTime;
+    }, z.core.$strict>>;
+    intents: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"install">;
+        id: z.ZodString;
+        attemptId: z.ZodString;
+        profile: z.core.$ZodBranded<z.ZodString, "ProfileName", "out">;
+        generation: z.ZodNumber;
+        loginId: z.core.$ZodBranded<z.ZodString, "LoginId", "out">;
+        candidate: z.ZodObject<{
+            origin: z.core.$ZodBranded<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, "ApiOrigin", "out">;
+            organization: z.ZodObject<{
+                id: z.core.$ZodBranded<z.ZodString, "OrganizationId", "out">;
+                name: z.ZodString;
+            }, z.core.$strict>;
+            email: z.ZodString;
+            tokenId: z.core.$ZodBranded<z.ZodString, "TokenId", "out">;
+            token: z.ZodObject<{
+                store: z.ZodEnum<{
+                    file: "file";
+                    keychain: "keychain";
+                }>;
+                origin: z.core.$ZodBranded<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, "ApiOrigin", "out">;
+                entry: z.ZodString;
+            }, z.core.$strict>;
+            idleExpiresAt: z.ZodISODateTime;
+            expiresAt: z.ZodISODateTime;
+            runKeys: z.ZodArray<z.ZodObject<{
+                id: z.ZodString;
+                workspaceId: z.core.$ZodBranded<z.ZodString, "WorkspaceId", "out">;
+                expiresAt: z.ZodISODateTime;
+                secret: z.ZodObject<{
+                    store: z.ZodEnum<{
+                        file: "file";
+                        keychain: "keychain";
+                    }>;
+                    origin: z.core.$ZodBranded<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, "ApiOrigin", "out">;
+                    entry: z.ZodString;
+                }, z.core.$strict>;
+            }, z.core.$strict>>;
+        }, z.core.$strict>;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"pending">;
+        id: z.ZodString;
+        attemptId: z.ZodString;
+        token: z.ZodObject<{
+            store: z.ZodEnum<{
+                file: "file";
+                keychain: "keychain";
+            }>;
+            origin: z.core.$ZodBranded<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, "ApiOrigin", "out">;
+            entry: z.ZodString;
+        }, z.core.$strict>;
+    }, z.core.$strict>], "kind">>;
+    acknowledgements: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        loginId: z.core.$ZodBranded<z.ZodString, "LoginId", "out">;
+        origin: z.core.$ZodBranded<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, "ApiOrigin", "out">;
+        tokenId: z.core.$ZodBranded<z.ZodString, "TokenId", "out">;
+        token: z.ZodObject<{
+            store: z.ZodEnum<{
+                file: "file";
+                keychain: "keychain";
+            }>;
+            origin: z.core.$ZodBranded<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, "ApiOrigin", "out">;
+            entry: z.ZodString;
+        }, z.core.$strict>;
+    }, z.core.$strict>>;
+    revocations: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        origin: z.core.$ZodBranded<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, "ApiOrigin", "out">;
+        tokenId: z.core.$ZodBranded<z.ZodString, "TokenId", "out">;
+        token: z.ZodObject<{
+            store: z.ZodEnum<{
+                file: "file";
+                keychain: "keychain";
+            }>;
+            origin: z.core.$ZodBranded<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, "ApiOrigin", "out">;
+            entry: z.ZodString;
+        }, z.core.$strict>;
+    }, z.core.$strict>>;
+    keyOperations: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        id: z.ZodString;
+        owner: z.ZodNullable<z.ZodObject<{
+            hostname: z.ZodString;
+            pid: z.ZodNumber;
+            nonce: z.ZodString;
+        }, z.core.$strict>>;
+        issuer: z.ZodObject<{
+            profile: z.core.$ZodBranded<z.ZodString, "ProfileName", "out">;
+            generation: z.ZodNumber;
+            origin: z.core.$ZodBranded<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, "ApiOrigin", "out">;
+            tokenId: z.core.$ZodBranded<z.ZodString, "TokenId", "out">;
+            token: z.ZodObject<{
+                store: z.ZodEnum<{
+                    file: "file";
+                    keychain: "keychain";
+                }>;
+                origin: z.core.$ZodBranded<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, "ApiOrigin", "out">;
+                entry: z.ZodString;
+            }, z.core.$strict>;
+        }, z.core.$strict>;
+        workspaceId: z.core.$ZodBranded<z.ZodString, "WorkspaceId", "out">;
+        target: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"run">;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"environment">;
+            file: z.ZodObject<{
+                repositoryRoot: z.ZodString;
+                path: z.ZodString;
+                expectedManagedDigest: z.ZodString;
+            }, z.core.$strict>;
+        }, z.core.$strict>], "kind">;
+        request: z.ZodPipe<z.ZodUnknown, z.ZodTransform<{
+            workspaceId: string;
+            name: string;
+            permissions: ("environments:connect" | "environments:read" | "environments:write" | "snapshots:read" | "snapshots:write")[];
+            kind?: "cli_run" | "env_pull" | undefined;
+        }, unknown>>;
+        idempotencyKey: z.ZodString;
+        secret: z.ZodObject<{
+            store: z.ZodEnum<{
+                file: "file";
+                keychain: "keychain";
+            }>;
+            origin: z.core.$ZodBranded<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, "ApiOrigin", "out">;
+            entry: z.ZodString;
+        }, z.core.$strict>;
+        phase: z.ZodLiteral<"creating">;
+    }, z.core.$strict>, z.ZodObject<{
+        id: z.ZodString;
+        owner: z.ZodNullable<z.ZodObject<{
+            hostname: z.ZodString;
+            pid: z.ZodNumber;
+            nonce: z.ZodString;
+        }, z.core.$strict>>;
+        issuer: z.ZodObject<{
+            profile: z.core.$ZodBranded<z.ZodString, "ProfileName", "out">;
+            generation: z.ZodNumber;
+            origin: z.core.$ZodBranded<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, "ApiOrigin", "out">;
+            tokenId: z.core.$ZodBranded<z.ZodString, "TokenId", "out">;
+            token: z.ZodObject<{
+                store: z.ZodEnum<{
+                    file: "file";
+                    keychain: "keychain";
+                }>;
+                origin: z.core.$ZodBranded<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, "ApiOrigin", "out">;
+                entry: z.ZodString;
+            }, z.core.$strict>;
+        }, z.core.$strict>;
+        workspaceId: z.core.$ZodBranded<z.ZodString, "WorkspaceId", "out">;
+        target: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"run">;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"environment">;
+            file: z.ZodObject<{
+                repositoryRoot: z.ZodString;
+                path: z.ZodString;
+                expectedManagedDigest: z.ZodString;
+            }, z.core.$strict>;
+        }, z.core.$strict>], "kind">;
+        request: z.ZodPipe<z.ZodUnknown, z.ZodTransform<{
+            workspaceId: string;
+            name: string;
+            permissions: ("environments:connect" | "environments:read" | "environments:write" | "snapshots:read" | "snapshots:write")[];
+            kind?: "cli_run" | "env_pull" | undefined;
+        }, unknown>>;
+        idempotencyKey: z.ZodString;
+        secret: z.ZodObject<{
+            store: z.ZodEnum<{
+                file: "file";
+                keychain: "keychain";
+            }>;
+            origin: z.core.$ZodBranded<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, "ApiOrigin", "out">;
+            entry: z.ZodString;
+        }, z.core.$strict>;
+        phase: z.ZodLiteral<"staged">;
+        keyId: z.ZodString;
+        expiresAt: z.ZodISODateTime;
+    }, z.core.$strict>], "phase">>;
+    keyRevocations: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        keyId: z.ZodString;
+        origin: z.core.$ZodBranded<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, "ApiOrigin", "out">;
+        tokenId: z.core.$ZodBranded<z.ZodString, "TokenId", "out">;
+        token: z.ZodObject<{
+            store: z.ZodEnum<{
+                file: "file";
+                keychain: "keychain";
+            }>;
+            origin: z.core.$ZodBranded<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, "ApiOrigin", "out">;
+            entry: z.ZodString;
+        }, z.core.$strict>;
+        secret: z.ZodNullable<z.ZodObject<{
+            store: z.ZodEnum<{
+                file: "file";
+                keychain: "keychain";
+            }>;
+            origin: z.core.$ZodBranded<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, "ApiOrigin", "out">;
+            entry: z.ZodString;
+        }, z.core.$strict>>;
+    }, z.core.$strict>>;
+    environments: z.ZodArray<z.ZodObject<{
+        repositoryRoot: z.ZodString;
+        path: z.ZodString;
+        workspaceId: z.core.$ZodBranded<z.ZodString, "WorkspaceId", "out">;
+        keyId: z.ZodString;
+        expiresAt: z.ZodISODateTime;
+        issuer: z.ZodObject<{
+            profile: z.core.$ZodBranded<z.ZodString, "ProfileName", "out">;
+            generation: z.ZodNumber;
+            origin: z.core.$ZodBranded<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, "ApiOrigin", "out">;
+            tokenId: z.core.$ZodBranded<z.ZodString, "TokenId", "out">;
+            token: z.ZodObject<{
+                store: z.ZodEnum<{
+                    file: "file";
+                    keychain: "keychain";
+                }>;
+                origin: z.core.$ZodBranded<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, "ApiOrigin", "out">;
+                entry: z.ZodString;
+            }, z.core.$strict>;
+        }, z.core.$strict>;
+    }, z.core.$strict>>;
+    cleanup: z.ZodArray<z.ZodObject<{
+        store: z.ZodEnum<{
+            file: "file";
+            keychain: "keychain";
+        }>;
+        origin: z.core.$ZodBranded<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, "ApiOrigin", "out">;
+        entry: z.ZodString;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type ConfigDocument = z.infer<typeof configSchema>;
+export declare function emptyConfig(): ConfigDocument;
+export declare function parseVersioned<Value>(text: string, schema: z.ZodType<Value>): Value;
+export {};