@vertesia/common 1.5.0-dev.20260725.083715Z → 1.5.0-dev.20260806.125520Z

package/lib/api-schemas/sts.d.ts

@@ -0,0 +1,166 @@
+import { z } from 'zod';
+export declare const TokenTypeSchema: z.ZodEnum<{
+    agent: "agent";
+    apikey: "apikey";
+    environment: "environment";
+    project: "project";
+    service_account: "service_account";
+    user: "user";
+}>;
+export declare const SigningAlgorithmSchema: z.ZodEnum<{
+    ES256: "ES256";
+    RS256: "RS256";
+}>;
+export declare const ApiKeyTokenRequestSchema: z.ZodObject<{
+    audience: z.ZodOptional<z.ZodString>;
+    algorithm: z.ZodOptional<z.ZodEnum<{
+        ES256: "ES256";
+        RS256: "RS256";
+    }>>;
+    type: z.ZodLiteral<"apikey">;
+    key: z.ZodString;
+}, z.core.$strict>;
+export declare const UserTokenRequestSchema: z.ZodObject<{
+    audience: z.ZodOptional<z.ZodString>;
+    algorithm: z.ZodOptional<z.ZodEnum<{
+        ES256: "ES256";
+        RS256: "RS256";
+    }>>;
+    type: z.ZodLiteral<"user">;
+    user_id: z.ZodOptional<z.ZodString>;
+    account_id: z.ZodOptional<z.ZodString>;
+    project_id: z.ZodOptional<z.ZodString>;
+    expires_at: z.ZodOptional<z.ZodNumber>;
+    on_behalf_of: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export declare const ProjectTokenRequestSchema: z.ZodObject<{
+    audience: z.ZodOptional<z.ZodString>;
+    algorithm: z.ZodOptional<z.ZodEnum<{
+        ES256: "ES256";
+        RS256: "RS256";
+    }>>;
+    type: z.ZodLiteral<"project">;
+    project_id: z.ZodString;
+    account_id: z.ZodString;
+}, z.core.$strict>;
+export declare const EnvironmentTokenRequestSchema: z.ZodObject<{
+    audience: z.ZodOptional<z.ZodString>;
+    algorithm: z.ZodOptional<z.ZodEnum<{
+        ES256: "ES256";
+        RS256: "RS256";
+    }>>;
+    type: z.ZodLiteral<"environment">;
+    environment_id: z.ZodString;
+    environment_name: z.ZodString;
+    project_id: z.ZodString;
+    account_id: z.ZodString;
+}, z.core.$strict>;
+export declare const AgentTokenRequestSchema: z.ZodObject<{
+    audience: z.ZodOptional<z.ZodString>;
+    algorithm: z.ZodOptional<z.ZodEnum<{
+        ES256: "ES256";
+        RS256: "RS256";
+    }>>;
+    type: z.ZodLiteral<"agent">;
+    account_id: z.ZodString;
+    project_id: z.ZodString;
+    name: z.ZodOptional<z.ZodString>;
+    on_behalf_of: z.ZodString;
+}, z.core.$strict>;
+export declare const ServiceAccountTokenRequestSchema: z.ZodObject<{
+    audience: z.ZodOptional<z.ZodString>;
+    algorithm: z.ZodOptional<z.ZodEnum<{
+        ES256: "ES256";
+        RS256: "RS256";
+    }>>;
+    type: z.ZodLiteral<"service_account">;
+    account_id: z.ZodString;
+    project_id: z.ZodString;
+    roles: z.ZodOptional<z.ZodArray<z.ZodEnum<typeof import("../project-values.js").SystemRoles>>>;
+    name: z.ZodOptional<z.ZodString>;
+    email: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export declare const IssueTokenRequestSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    audience: z.ZodOptional<z.ZodString>;
+    algorithm: z.ZodOptional<z.ZodEnum<{
+        ES256: "ES256";
+        RS256: "RS256";
+    }>>;
+    type: z.ZodLiteral<"apikey">;
+    key: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    audience: z.ZodOptional<z.ZodString>;
+    algorithm: z.ZodOptional<z.ZodEnum<{
+        ES256: "ES256";
+        RS256: "RS256";
+    }>>;
+    type: z.ZodLiteral<"user">;
+    user_id: z.ZodOptional<z.ZodString>;
+    account_id: z.ZodOptional<z.ZodString>;
+    project_id: z.ZodOptional<z.ZodString>;
+    expires_at: z.ZodOptional<z.ZodNumber>;
+    on_behalf_of: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>, z.ZodObject<{
+    audience: z.ZodOptional<z.ZodString>;
+    algorithm: z.ZodOptional<z.ZodEnum<{
+        ES256: "ES256";
+        RS256: "RS256";
+    }>>;
+    type: z.ZodLiteral<"project">;
+    project_id: z.ZodString;
+    account_id: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    audience: z.ZodOptional<z.ZodString>;
+    algorithm: z.ZodOptional<z.ZodEnum<{
+        ES256: "ES256";
+        RS256: "RS256";
+    }>>;
+    type: z.ZodLiteral<"environment">;
+    environment_id: z.ZodString;
+    environment_name: z.ZodString;
+    project_id: z.ZodString;
+    account_id: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    audience: z.ZodOptional<z.ZodString>;
+    algorithm: z.ZodOptional<z.ZodEnum<{
+        ES256: "ES256";
+        RS256: "RS256";
+    }>>;
+    type: z.ZodLiteral<"agent">;
+    account_id: z.ZodString;
+    project_id: z.ZodString;
+    name: z.ZodOptional<z.ZodString>;
+    on_behalf_of: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    audience: z.ZodOptional<z.ZodString>;
+    algorithm: z.ZodOptional<z.ZodEnum<{
+        ES256: "ES256";
+        RS256: "RS256";
+    }>>;
+    type: z.ZodLiteral<"service_account">;
+    account_id: z.ZodString;
+    project_id: z.ZodString;
+    roles: z.ZodOptional<z.ZodArray<z.ZodEnum<typeof import("../project-values.js").SystemRoles>>>;
+    name: z.ZodOptional<z.ZodString>;
+    email: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>], "type">;
+export declare const IssueTokenResponseSchema: z.ZodObject<{
+    token: z.ZodString;
+    token_type: z.ZodLiteral<"Bearer">;
+    expires_in: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strict>;
+export declare const IssueTokenForbiddenResponseSchema: z.ZodObject<{
+    error: z.ZodString;
+    message: z.ZodString;
+    errorCode: z.ZodEnum<{
+        no_accessible_account: "no_accessible_account";
+        requested_scope_unavailable: "requested_scope_unavailable";
+        restricted_environment: "restricted_environment";
+        token_issuance_forbidden: "token_issuance_forbidden";
+    }>;
+}, z.core.$strict>;
+export declare const IssueTokenUnavailableResponseSchema: z.ZodObject<{
+    error: z.ZodString;
+    message: z.ZodString;
+}, z.core.$strict>;
+//# sourceMappingURL=sts.d.ts.map

package/lib/api-schemas/sts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sts.d.ts","sourceRoot":"","sources":["../../src/api-schemas/sts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAMxB,eAAO,MAAM,eAAe;;;;;;;EAAmF,CAAC;AAEhH,eAAO,MAAM,sBAAsB;;;EAA8D,CAAC;AAOlG,eAAO,MAAM,wBAAwB;;;;;;;;kBAM6B,CAAC;AAEnE,eAAO,MAAM,sBAAsB;;;;;;;;;;;;kBAUE,CAAC;AAEtC,eAAO,MAAM,yBAAyB;;;;;;;;;kBAOkD,CAAC;AAEzF,eAAO,MAAM,6BAA6B;;;;;;;;;;;kBAYpC,CAAC;AAEP,eAAO,MAAM,uBAAuB;;;;;;;;;;;kBAiB9B,CAAC;AAEP,eAAO,MAAM,gCAAgC;;;;;;;;;;;;kBAUkD,CAAC;AAEhG,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;4BASE,CAAC;AAEvC,eAAO,MAAM,wBAAwB;;;;kBAME,CAAC;AAExC,eAAO,MAAM,iCAAiC;;;;;;;;;kBAUxC,CAAC;AAEP,eAAO,MAAM,mCAAmC;;;kBAEE,CAAC"}

package/lib/api-schemas/sts.js

@@ -0,0 +1,107 @@
+import { z } from 'zod';
+import { ISSUE_TOKEN_FORBIDDEN_ERROR_CODES } from '../sts-errors.js';
+import { SystemRolesSchema } from './apikey.js';
+const ALGORITHM_DESCRIPTION = 'Signing algorithm - defaults to ES256. Use RS256 for Azure AD compatibility.';
+export const TokenTypeSchema = z.enum(['apikey', 'user', 'project', 'environment', 'agent', 'service_account']);
+export const SigningAlgorithmSchema = z.enum(['ES256', 'RS256']).meta({ id: 'SigningAlgorithm' });
+const baseTokenRequestShape = {
+    audience: z.string().optional(),
+    algorithm: SigningAlgorithmSchema.meta({ description: ALGORITHM_DESCRIPTION }).optional(),
+};
+export const ApiKeyTokenRequestSchema = z
+    .strictObject({
+    type: z.literal('apikey'),
+    ...baseTokenRequestShape,
+    key: z.string(),
+})
+    .meta({ id: 'ApiKeyTokenRequest', required: ['key', 'type'] });
+export const UserTokenRequestSchema = z
+    .strictObject({
+    type: z.literal('user'),
+    ...baseTokenRequestShape,
+    user_id: z.string().optional(),
+    account_id: z.string().optional(),
+    project_id: z.string().optional(),
+    expires_at: z.number().optional(),
+    on_behalf_of: z.string().optional(),
+})
+    .meta({ id: 'UserTokenRequest' });
+export const ProjectTokenRequestSchema = z
+    .strictObject({
+    type: z.literal('project'),
+    ...baseTokenRequestShape,
+    project_id: z.string(),
+    account_id: z.string(),
+})
+    .meta({ id: 'ProjectTokenRequest', required: ['account_id', 'project_id', 'type'] });
+export const EnvironmentTokenRequestSchema = z
+    .strictObject({
+    type: z.literal('environment'),
+    ...baseTokenRequestShape,
+    environment_id: z.string(),
+    environment_name: z.string(),
+    project_id: z.string(),
+    account_id: z.string(),
+})
+    .meta({
+    id: 'EnvironmentTokenRequest',
+    required: ['account_id', 'environment_id', 'environment_name', 'project_id', 'type'],
+});
+export const AgentTokenRequestSchema = z
+    .strictObject({
+    type: z.literal('agent'),
+    ...baseTokenRequestShape,
+    account_id: z.string(),
+    project_id: z.string(),
+    name: z.string().optional(),
+    on_behalf_of: z.string().meta({
+        description: 'User information.\n\nThe value of this field can be either:   - a signed Vertesia token used to verify the user context   - a user ID prefixed with `user:` to indicate the user on behalf of whom the agent is     acting.',
+    }),
+})
+    .meta({
+    id: 'AgentTokenRequest',
+    required: ['account_id', 'on_behalf_of', 'project_id', 'type'],
+    description: 'Agent token for a service account to act as agent on behalf of a user.\n\nTwo trust paths are supported:\n\n- `user_access_token`: a live signed Vertesia token. STS verifies the user context from that token.\n- `workload_id_token`: a workload acts on behalf of a user. It implies that a full verification   will be performed based on the workload identity.',
+});
+export const ServiceAccountTokenRequestSchema = z
+    .strictObject({
+    type: z.literal('service_account'),
+    ...baseTokenRequestShape,
+    account_id: z.string(),
+    project_id: z.string(),
+    roles: z.array(SystemRolesSchema).optional(),
+    name: z.string().optional(),
+    email: z.string().optional(),
+})
+    .meta({ id: 'ServiceAccountTokenRequest', required: ['account_id', 'project_id', 'type'] });
+export const IssueTokenRequestSchema = z
+    .discriminatedUnion('type', [
+    ApiKeyTokenRequestSchema,
+    UserTokenRequestSchema,
+    ProjectTokenRequestSchema,
+    EnvironmentTokenRequestSchema,
+    AgentTokenRequestSchema,
+    ServiceAccountTokenRequestSchema,
+])
+    .meta({ id: 'IssueTokenRequest' });
+export const IssueTokenResponseSchema = z
+    .strictObject({
+    token: z.string(),
+    token_type: z.literal('Bearer'),
+    expires_in: z.number().optional(),
+})
+    .meta({ id: 'IssueTokenResponse' });
+export const IssueTokenForbiddenResponseSchema = z
+    .strictObject({
+    error: z.string(),
+    message: z.string(),
+    errorCode: z.enum(ISSUE_TOKEN_FORBIDDEN_ERROR_CODES),
+})
+    .meta({
+    id: 'IssueTokenForbiddenResponse',
+    description: 'A safe, machine-readable denial response. Requested resources are intentionally not identified or confirmed.',
+});
+export const IssueTokenUnavailableResponseSchema = z
+    .strictObject({ error: z.string(), message: z.string() })
+    .meta({ id: 'IssueTokenUnavailableResponse' });
+//# sourceMappingURL=sts.js.map

package/lib/api-schemas/sts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sts.js","sourceRoot":"","sources":["../../src/api-schemas/sts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,iCAAiC,EAAE,MAAM,kBAAkB,CAAC;AACrE,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAEhD,MAAM,qBAAqB,GAAG,8EAA8E,CAAC;AAE7G,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,aAAa,EAAE,OAAO,EAAE,iBAAiB,CAAC,CAAC,CAAC;AAEhH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,kBAAkB,EAAE,CAAC,CAAC;AAElG,MAAM,qBAAqB,GAAG;IAC1B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,SAAS,EAAE,sBAAsB,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,qBAAqB,EAAE,CAAC,CAAC,QAAQ,EAAE;CAC5F,CAAC;AAEF,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC;KACpC,YAAY,CAAC;IACV,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;IACzB,GAAG,qBAAqB;IACxB,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;CAClB,CAAC;KACD,IAAI,CAAC,EAAE,EAAE,EAAE,oBAAoB,EAAE,QAAQ,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;AAEnE,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC;KAClC,YAAY,CAAC;IACV,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IACvB,GAAG,qBAAqB;IACxB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACtC,CAAC;KACD,IAAI,CAAC,EAAE,EAAE,EAAE,kBAAkB,EAAE,CAAC,CAAC;AAEtC,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC;KACrC,YAAY,CAAC;IACV,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;IAC1B,GAAG,qBAAqB;IACxB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;CACzB,CAAC;KACD,IAAI,CAAC,EAAE,EAAE,EAAE,qBAAqB,EAAE,QAAQ,EAAE,CAAC,YAAY,EAAE,YAAY,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;AAEzF,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC;KACzC,YAAY,CAAC;IACV,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;IAC9B,GAAG,qBAAqB;IACxB,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;IAC1B,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE;IAC5B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;CACzB,CAAC;KACD,IAAI,CAAC;IACF,EAAE,EAAE,yBAAyB;IAC7B,QAAQ,EAAE,CAAC,YAAY,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,CAAC;CACvF,CAAC,CAAC;AAEP,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC;KACnC,YAAY,CAAC;IACV,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IACxB,GAAG,qBAAqB;IACxB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC;QAC1B,WAAW,EACP,6NAA6N;KACpO,CAAC;CACL,CAAC;KACD,IAAI,CAAC;IACF,EAAE,EAAE,mBAAmB;IACvB,QAAQ,EAAE,CAAC,YAAY,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,CAAC;IAC9D,WAAW,EACP,sWAAsW;CAC7W,CAAC,CAAC;AAEP,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC;KAC5C,YAAY,CAAC;IACV,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC;IAClC,GAAG,qBAAqB;IACxB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,QAAQ,EAAE;IAC5C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC/B,CAAC;KACD,IAAI,CAAC,EAAE,EAAE,EAAE,4BAA4B,EAAE,QAAQ,EAAE,CAAC,YAAY,EAAE,YAAY,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;AAEhG,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC;KACnC,kBAAkB,CAAC,MAAM,EAAE;IACxB,wBAAwB;IACxB,sBAAsB;IACtB,yBAAyB;IACzB,6BAA6B;IAC7B,uBAAuB;IACvB,gCAAgC;CACnC,CAAC;KACD,IAAI,CAAC,EAAE,EAAE,EAAE,mBAAmB,EAAE,CAAC,CAAC;AAEvC,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC;KACpC,YAAY,CAAC;IACV,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,UAAU,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;IAC/B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACpC,CAAC;KACD,IAAI,CAAC,EAAE,EAAE,EAAE,oBAAoB,EAAE,CAAC,CAAC;AAExC,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAC;KAC7C,YAAY,CAAC;IACV,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,iCAAiC,CAAC;CACvD,CAAC;KACD,IAAI,CAAC;IACF,EAAE,EAAE,6BAA6B;IACjC,WAAW,EACP,8GAA8G;CACrH,CAAC,CAAC;AAEP,MAAM,CAAC,MAAM,mCAAmC,GAAG,CAAC;KAC/C,YAAY,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;KACxD,IAAI,CAAC,EAAE,EAAE,EAAE,+BAA+B,EAAE,CAAC,CAAC"}

package/lib/api-schemas/task.d.ts

@@ -0,0 +1,215 @@
+import { z } from 'zod';
+export declare const CompleteTaskPayloadSchema: z.ZodObject<{
+    result: z.ZodObject<{}, z.core.$loose>;
+}, z.core.$strict>;
+export declare const TaskFieldTypeSchema: z.ZodEnum<{
+    boolean: "boolean";
+    number: "number";
+    select: "select";
+    string: "string";
+    text: "text";
+}>;
+export declare const DurableTaskStatusSchema: z.ZodEnum<{
+    cancelled: "cancelled";
+    completed: "completed";
+    in_progress: "in_progress";
+    pending: "pending";
+}>;
+export declare const TaskSourceSchema: z.ZodObject<{
+    type: z.ZodEnum<{
+        agent: "agent";
+        process: "process";
+    }>;
+    run_id: z.ZodString;
+    node: z.ZodOptional<z.ZodString>;
+    ask_id: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export declare const TaskFieldSchema: z.ZodObject<{
+    name: z.ZodString;
+    type: z.ZodEnum<{
+        boolean: "boolean";
+        number: "number";
+        select: "select";
+        string: "string";
+        text: "text";
+    }>;
+    required: z.ZodOptional<z.ZodBoolean>;
+    label: z.ZodOptional<z.ZodString>;
+    options: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    default: z.ZodOptional<z.ZodUnknown>;
+}, z.core.$strict>;
+export declare const CreateTaskPayloadSchema: z.ZodObject<{
+    title: z.ZodString;
+    description: z.ZodOptional<z.ZodString>;
+    assignee: z.ZodOptional<z.ZodString>;
+    fields: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        type: z.ZodEnum<{
+            boolean: "boolean";
+            number: "number";
+            select: "select";
+            string: "string";
+            text: "text";
+        }>;
+        required: z.ZodOptional<z.ZodBoolean>;
+        label: z.ZodOptional<z.ZodString>;
+        options: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        default: z.ZodOptional<z.ZodUnknown>;
+    }, z.core.$strict>>>;
+    source: z.ZodObject<{
+        type: z.ZodEnum<{
+            agent: "agent";
+            process: "process";
+        }>;
+        run_id: z.ZodString;
+        node: z.ZodOptional<z.ZodString>;
+        ask_id: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>;
+    due_at: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export declare const TaskSchema: z.ZodObject<{
+    id: z.ZodString;
+    account: z.ZodString;
+    project: z.ZodString;
+    title: z.ZodString;
+    description: z.ZodOptional<z.ZodString>;
+    status: z.ZodEnum<{
+        cancelled: "cancelled";
+        completed: "completed";
+        in_progress: "in_progress";
+        pending: "pending";
+    }>;
+    assignee: z.ZodOptional<z.ZodString>;
+    fields: z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        type: z.ZodEnum<{
+            boolean: "boolean";
+            number: "number";
+            select: "select";
+            string: "string";
+            text: "text";
+        }>;
+        required: z.ZodOptional<z.ZodBoolean>;
+        label: z.ZodOptional<z.ZodString>;
+        options: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        default: z.ZodOptional<z.ZodUnknown>;
+    }, z.core.$strict>>;
+    result: z.ZodOptional<z.ZodObject<{}, z.core.$loose>>;
+    source: z.ZodObject<{
+        type: z.ZodEnum<{
+            agent: "agent";
+            process: "process";
+        }>;
+        run_id: z.ZodString;
+        node: z.ZodOptional<z.ZodString>;
+        ask_id: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>;
+    due_at: z.ZodOptional<z.ZodString>;
+    created_at: z.ZodString;
+    completed_at: z.ZodOptional<z.ZodString>;
+    updated_at: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export declare const UpdateTaskPayloadSchema: z.ZodObject<{
+    title: z.ZodOptional<z.ZodString>;
+    description: z.ZodOptional<z.ZodString>;
+    status: z.ZodOptional<z.ZodEnum<{
+        cancelled: "cancelled";
+        completed: "completed";
+        in_progress: "in_progress";
+        pending: "pending";
+    }>>;
+    assignee: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    fields: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        type: z.ZodEnum<{
+            boolean: "boolean";
+            number: "number";
+            select: "select";
+            string: "string";
+            text: "text";
+        }>;
+        required: z.ZodOptional<z.ZodBoolean>;
+        label: z.ZodOptional<z.ZodString>;
+        options: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        default: z.ZodOptional<z.ZodUnknown>;
+    }, z.core.$strict>>>;
+    due_at: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodNull]>>;
+}, z.core.$strict>;
+export declare const TaskArraySchema: z.ZodArray<z.ZodObject<{
+    id: z.ZodString;
+    account: z.ZodString;
+    project: z.ZodString;
+    title: z.ZodString;
+    description: z.ZodOptional<z.ZodString>;
+    status: z.ZodEnum<{
+        cancelled: "cancelled";
+        completed: "completed";
+        in_progress: "in_progress";
+        pending: "pending";
+    }>;
+    assignee: z.ZodOptional<z.ZodString>;
+    fields: z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        type: z.ZodEnum<{
+            boolean: "boolean";
+            number: "number";
+            select: "select";
+            string: "string";
+            text: "text";
+        }>;
+        required: z.ZodOptional<z.ZodBoolean>;
+        label: z.ZodOptional<z.ZodString>;
+        options: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        default: z.ZodOptional<z.ZodUnknown>;
+    }, z.core.$strict>>;
+    result: z.ZodOptional<z.ZodObject<{}, z.core.$loose>>;
+    source: z.ZodObject<{
+        type: z.ZodEnum<{
+            agent: "agent";
+            process: "process";
+        }>;
+        run_id: z.ZodString;
+        node: z.ZodOptional<z.ZodString>;
+        ask_id: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>;
+    due_at: z.ZodOptional<z.ZodString>;
+    created_at: z.ZodString;
+    completed_at: z.ZodOptional<z.ZodString>;
+    updated_at: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>>;
+/**
+ * The `GET /tasks` query contract.
+ *
+ * `source_type` reuses `TaskSourceSchema.shape.type` rather than restating `'process' | 'agent'`.
+ * The scanner-opacity problem that forced spelling it out in TypeScript was specific to
+ * `TaskSource['type']`: an indexed access into a canonical alias reads as nothing to a scanner that
+ * works from source text, and the parameter silently vanished from the published operation. Zod is a
+ * value, so reaching into its shape is an ordinary property read and the enum arrives intact.
+ *
+ * `status` is published as a single `type: array` parameter with `explode: true` — the scanner
+ * collapses `X | X[]` that way, because repeated keys are the only serialization OpenAPI has for it.
+ * The runtime additionally accepts the comma-joined spelling the SDK emits; see `commaSafeEnum` in
+ * `./parameters.js` for why that is safe for an enum specifically.
+ */
+export declare const ListTasksQuerySchema: z.ZodObject<{
+    status: z.ZodOptional<z.ZodUnion<readonly [z.ZodEnum<{
+        cancelled: "cancelled";
+        completed: "completed";
+        in_progress: "in_progress";
+        pending: "pending";
+    }>, z.ZodArray<z.ZodEnum<{
+        cancelled: "cancelled";
+        completed: "completed";
+        in_progress: "in_progress";
+        pending: "pending";
+    }>>]>>;
+    assignee: z.ZodOptional<z.ZodString>;
+    run_id: z.ZodOptional<z.ZodString>;
+    source_type: z.ZodOptional<z.ZodEnum<{
+        agent: "agent";
+        process: "process";
+    }>>;
+    limit: z.ZodOptional<z.ZodNumber>;
+    offset: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strict>;
+//# sourceMappingURL=task.d.ts.map

package/lib/api-schemas/task.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"task.d.ts","sourceRoot":"","sources":["../../src/api-schemas/task.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,yBAAyB;;kBAIE,CAAC;AAEzC,eAAO,MAAM,mBAAmB;;;;;;EAEE,CAAC;AAEnC,eAAO,MAAM,uBAAuB;;;;;EAGlC,CAAC;AAEH,eAAO,MAAM,gBAAgB;;;;;;;;kBAOE,CAAC;AAEhC,eAAO,MAAM,eAAe;;;;;;;;;;;;;kBASE,CAAC;AAE/B,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBASE,CAAC;AAEvC,eAAO,MAAM,UAAU;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAiBE,CAAC;AAE1B,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;kBASE,CAAC;AAEvC,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;mBAAgD,CAAC;AAE7E;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;kBASE,CAAC"}

package/lib/api-schemas/task.js

@@ -0,0 +1,95 @@
+import { z } from 'zod';
+export const CompleteTaskPayloadSchema = z
+    .strictObject({
+    result: z.looseObject({}),
+})
+    .meta({ id: 'CompleteTaskPayload' });
+export const TaskFieldTypeSchema = z
+    .enum(['string', 'number', 'boolean', 'select', 'text'])
+    .meta({ id: 'TaskFieldType' });
+export const DurableTaskStatusSchema = z.enum(['pending', 'in_progress', 'completed', 'cancelled']).meta({
+    id: 'DurableTaskStatus',
+    description: 'Durable human task types used by process human_task nodes and agent asks.',
+});
+export const TaskSourceSchema = z
+    .strictObject({
+    type: z.enum(['process', 'agent']),
+    run_id: z.string(),
+    node: z.string().optional(),
+    ask_id: z.string().optional(),
+})
+    .meta({ id: 'TaskSource' });
+export const TaskFieldSchema = z
+    .strictObject({
+    name: z.string(),
+    type: TaskFieldTypeSchema,
+    required: z.boolean().optional(),
+    label: z.string().optional(),
+    options: z.array(z.string()).optional(),
+    default: z.unknown().optional(),
+})
+    .meta({ id: 'TaskField' });
+export const CreateTaskPayloadSchema = z
+    .strictObject({
+    title: z.string(),
+    description: z.string().optional(),
+    assignee: z.string().optional(),
+    fields: z.array(TaskFieldSchema).optional(),
+    source: TaskSourceSchema,
+    due_at: z.string().meta({ format: 'date-time' }).optional(),
+})
+    .meta({ id: 'CreateTaskPayload' });
+export const TaskSchema = z
+    .strictObject({
+    id: z.string(),
+    account: z.string(),
+    project: z.string(),
+    title: z.string(),
+    description: z.string().optional(),
+    status: DurableTaskStatusSchema,
+    assignee: z.string().optional(),
+    fields: z.array(TaskFieldSchema),
+    result: z.looseObject({}).optional(),
+    source: TaskSourceSchema,
+    due_at: z.string().meta({ format: 'date-time' }).optional(),
+    created_at: z.string().meta({ format: 'date-time' }),
+    completed_at: z.string().meta({ format: 'date-time' }).optional(),
+    updated_at: z.string().meta({ format: 'date-time' }).optional(),
+})
+    .meta({ id: 'Task' });
+export const UpdateTaskPayloadSchema = z
+    .strictObject({
+    title: z.string().optional(),
+    description: z.string().optional(),
+    status: DurableTaskStatusSchema.optional(),
+    assignee: z.string().nullable().optional(),
+    fields: z.array(TaskFieldSchema).optional(),
+    due_at: z.union([z.string().meta({ format: 'date-time' }), z.null()]).optional(),
+})
+    .meta({ id: 'UpdateTaskPayload' });
+export const TaskArraySchema = z.array(TaskSchema).meta({ id: 'TaskArray' });
+/**
+ * The `GET /tasks` query contract.
+ *
+ * `source_type` reuses `TaskSourceSchema.shape.type` rather than restating `'process' | 'agent'`.
+ * The scanner-opacity problem that forced spelling it out in TypeScript was specific to
+ * `TaskSource['type']`: an indexed access into a canonical alias reads as nothing to a scanner that
+ * works from source text, and the parameter silently vanished from the published operation. Zod is a
+ * value, so reaching into its shape is an ordinary property read and the enum arrives intact.
+ *
+ * `status` is published as a single `type: array` parameter with `explode: true` — the scanner
+ * collapses `X | X[]` that way, because repeated keys are the only serialization OpenAPI has for it.
+ * The runtime additionally accepts the comma-joined spelling the SDK emits; see `commaSafeEnum` in
+ * `./parameters.js` for why that is safe for an enum specifically.
+ */
+export const ListTasksQuerySchema = z
+    .strictObject({
+    status: z.union([DurableTaskStatusSchema, z.array(DurableTaskStatusSchema)]).optional(),
+    assignee: z.string().optional(),
+    run_id: z.string().optional(),
+    source_type: TaskSourceSchema.shape.type.optional(),
+    limit: z.number().optional(),
+    offset: z.number().optional(),
+})
+    .meta({ id: 'ListTasksQuery' });
+//# sourceMappingURL=task.js.map

package/lib/api-schemas/task.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"task.js","sourceRoot":"","sources":["../../src/api-schemas/task.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC;KACrC,YAAY,CAAC;IACV,MAAM,EAAE,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC;CAC5B,CAAC;KACD,IAAI,CAAC,EAAE,EAAE,EAAE,qBAAqB,EAAE,CAAC,CAAC;AAEzC,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC;KAC/B,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;KACvD,IAAI,CAAC,EAAE,EAAE,EAAE,eAAe,EAAE,CAAC,CAAC;AAEnC,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,aAAa,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC;IACrG,EAAE,EAAE,mBAAmB;IACvB,WAAW,EAAE,2EAA2E;CAC3F,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC;KAC5B,YAAY,CAAC;IACV,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAClC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAChC,CAAC;KACD,IAAI,CAAC,EAAE,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC;AAEhC,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC;KAC3B,YAAY,CAAC;IACV,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,IAAI,EAAE,mBAAmB;IACzB,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAChC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACvC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CAClC,CAAC;KACD,IAAI,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;AAE/B,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC;KACnC,YAAY,CAAC;IACV,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,QAAQ,EAAE;IAC3C,MAAM,EAAE,gBAAgB;IACxB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC,QAAQ,EAAE;CAC9D,CAAC;KACD,IAAI,CAAC,EAAE,EAAE,EAAE,mBAAmB,EAAE,CAAC,CAAC;AAEvC,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC;KACtB,YAAY,CAAC;IACV,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,MAAM,EAAE,uBAAuB;IAC/B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC;IAChC,MAAM,EAAE,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IACpC,MAAM,EAAE,gBAAgB;IACxB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC3D,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IACpD,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC,QAAQ,EAAE;IACjE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC,QAAQ,EAAE;CAClE,CAAC;KACD,IAAI,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;AAE1B,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC;KACnC,YAAY,CAAC;IACV,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,MAAM,EAAE,uBAAuB,CAAC,QAAQ,EAAE;IAC1C,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC1C,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,QAAQ,EAAE;IAC3C,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE;CACnF,CAAC;KACD,IAAI,CAAC,EAAE,EAAE,EAAE,mBAAmB,EAAE,CAAC,CAAC;AAEvC,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;AAE7E;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC;KAChC,YAAY,CAAC;IACV,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,uBAAuB,EAAE,CAAC,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACvF,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,WAAW,EAAE,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE;IACnD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAChC,CAAC;KACD,IAAI,CAAC,EAAE,EAAE,EAAE,gBAAgB,EAAE,CAAC,CAAC"}