@workwae/sdk 0.0.0-stage → 0.1.0-alpha.1

package/contract/oauth-apps/models.d.ts

@@ -0,0 +1,92 @@
+import * as z from "zod";
+/** A Pub/Sub topic id as users.watch takes it: projects/<project id>/topics/<topic>. */
+export declare const PUBSUB_TOPIC_PATTERN: RegExp;
+/**
+ * Gmail push for the accounts of a tenant Google app: users.watch publishes to `topic`, which
+ * must be in the Cloud project of the app's OAuth client, and the tenant's push subscription
+ * delivers to the app's gmailPushEndpoint with OIDC tokens issued for `serviceAccount`.
+ */
+export declare const GmailPushSettings: z.ZodObject<{
+    topic: z.ZodString;
+    serviceAccount: z.ZodEmail;
+}, z.core.$strip>;
+export type GmailPushSettings = z.infer<typeof GmailPushSettings>;
+export declare const OAuthApp: z.ZodObject<{
+    id: z.ZodUUID;
+    provider: z.ZodEnum<{
+        google: "google";
+        microsoft: "microsoft";
+    }>;
+    name: z.ZodString;
+    clientId: z.ZodString;
+    cloud: z.ZodNullable<z.ZodEnum<{
+        global: "global";
+        "gcc-high": "gcc-high";
+        dod: "dod";
+        china: "china";
+    }>>;
+    authority: z.ZodNullable<z.ZodString>;
+    gmailPush: z.ZodNullable<z.ZodObject<{
+        topic: z.ZodString;
+        serviceAccount: z.ZodEmail;
+    }, z.core.$strip>>;
+    gmailPushEndpoint: z.ZodNullable<z.ZodURL>;
+    createdAt: z.ZodPreprocess<z.ZodDate, Date>;
+}, z.core.$strip>;
+export type OAuthApp = z.infer<typeof OAuthApp>;
+export declare const OAuthAppList: z.ZodObject<{
+    items: z.ZodArray<z.ZodObject<{
+        id: z.ZodUUID;
+        provider: z.ZodEnum<{
+            google: "google";
+            microsoft: "microsoft";
+        }>;
+        name: z.ZodString;
+        clientId: z.ZodString;
+        cloud: z.ZodNullable<z.ZodEnum<{
+            global: "global";
+            "gcc-high": "gcc-high";
+            dod: "dod";
+            china: "china";
+        }>>;
+        authority: z.ZodNullable<z.ZodString>;
+        gmailPush: z.ZodNullable<z.ZodObject<{
+            topic: z.ZodString;
+            serviceAccount: z.ZodEmail;
+        }, z.core.$strip>>;
+        gmailPushEndpoint: z.ZodNullable<z.ZodURL>;
+        createdAt: z.ZodPreprocess<z.ZodDate, Date>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type OAuthAppList = z.infer<typeof OAuthAppList>;
+export declare const CreateOAuthApp: z.ZodObject<{
+    provider: z.ZodEnum<{
+        google: "google";
+        microsoft: "microsoft";
+    }>;
+    cloud: z.ZodOptional<z.ZodEnum<{
+        global: "global";
+        "gcc-high": "gcc-high";
+        dod: "dod";
+        china: "china";
+    }>>;
+    name: z.ZodString;
+    clientId: z.ZodString;
+    clientSecret: z.ZodString;
+    authority: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type CreateOAuthApp = z.infer<typeof CreateOAuthApp>;
+export declare const UpdateOAuthApp: z.ZodObject<{
+    name: z.ZodOptional<z.ZodString>;
+    clientSecret: z.ZodOptional<z.ZodString>;
+    authority: z.ZodOptional<z.ZodString>;
+    gmailPush: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+        topic: z.ZodString;
+        serviceAccount: z.ZodEmail;
+    }, z.core.$strip>>>;
+}, z.core.$strip>;
+export type UpdateOAuthApp = z.infer<typeof UpdateOAuthApp>;
+export declare const OAuthAppIdInput: z.ZodObject<{
+    appId: z.ZodUUID;
+}, z.core.$strip>;
+export type OAuthAppIdInput = z.infer<typeof OAuthAppIdInput>;

package/contract/oauth-apps/routes.d.ts

@@ -0,0 +1,187 @@
+import * as z from "zod";
+export declare const oauthApps: {
+    list: import("@orpc/contract").ContractProcedureBuilderWithOutput<import("@orpc/contract").Schema<unknown, unknown>, z.ZodObject<{
+        items: z.ZodArray<z.ZodObject<{
+            id: z.ZodUUID;
+            provider: z.ZodEnum<{
+                google: "google";
+                microsoft: "microsoft";
+            }>;
+            name: z.ZodString;
+            clientId: z.ZodString;
+            cloud: z.ZodNullable<z.ZodEnum<{
+                global: "global";
+                "gcc-high": "gcc-high";
+                dod: "dod";
+                china: "china";
+            }>>;
+            authority: z.ZodNullable<z.ZodString>;
+            gmailPush: z.ZodNullable<z.ZodObject<{
+                topic: z.ZodString;
+                serviceAccount: z.ZodEmail;
+            }, z.core.$strip>>;
+            gmailPushEndpoint: z.ZodNullable<z.ZodURL>;
+            createdAt: z.ZodPreprocess<z.ZodDate, Date>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>, import("@orpc/contract").MergedErrorMap<Record<never, never>, import("../errors.js").DeclaredErrors<{
+        readonly invalid_input: "The request does not match the operation's input schema (a malformed body included); data.issues names each problem.";
+        readonly unauthenticated: "No usable credential: none was sent, or it is malformed, unknown, revoked or an expired account token.";
+        readonly api_key_expired: "The API key is past its expiry (or the grace of the rotation that replaced it).";
+        readonly missing_scope: "The API key lacks the scope the operation needs.";
+        readonly role_forbidden: "The member's role does not allow the operation.";
+        readonly account_token_forbidden: "An account token called an operation account tokens cannot call.";
+        readonly rate_limited: "The tenant used up its plan's request rate; Retry-After says when the window ends.";
+        readonly too_many_requests: "The credential has too many requests in flight at once; retry after Retry-After.";
+        readonly overloaded: "The API is shedding load; retry after Retry-After.";
+        readonly payload_too_large: "The request body is larger than the API accepts.";
+        readonly internal_error: "An unexpected failure on our side.";
+        readonly invalid_idempotency_key: "POST only: the Idempotency-Key header is not 1 to 255 printable ASCII characters.";
+        readonly idempotency_key_reused: "POST only: the Idempotency-Key was used in the last 24 hours with another method, path or body.";
+        readonly idempotency_key_in_progress: "POST only: the request first sent with this Idempotency-Key has not been answered yet.";
+    }>>, Record<never, never>>;
+    create: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
+        provider: z.ZodEnum<{
+            google: "google";
+            microsoft: "microsoft";
+        }>;
+        cloud: z.ZodOptional<z.ZodEnum<{
+            global: "global";
+            "gcc-high": "gcc-high";
+            dod: "dod";
+            china: "china";
+        }>>;
+        name: z.ZodString;
+        clientId: z.ZodString;
+        clientSecret: z.ZodString;
+        authority: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>, z.ZodObject<{
+        id: z.ZodUUID;
+        provider: z.ZodEnum<{
+            google: "google";
+            microsoft: "microsoft";
+        }>;
+        name: z.ZodString;
+        clientId: z.ZodString;
+        cloud: z.ZodNullable<z.ZodEnum<{
+            global: "global";
+            "gcc-high": "gcc-high";
+            dod: "dod";
+            china: "china";
+        }>>;
+        authority: z.ZodNullable<z.ZodString>;
+        gmailPush: z.ZodNullable<z.ZodObject<{
+            topic: z.ZodString;
+            serviceAccount: z.ZodEmail;
+        }, z.core.$strip>>;
+        gmailPushEndpoint: z.ZodNullable<z.ZodURL>;
+        createdAt: z.ZodPreprocess<z.ZodDate, Date>;
+    }, z.core.$strip>, import("@orpc/contract").MergedErrorMap<import("@orpc/contract").MergedErrorMap<Record<never, never>, import("../errors.js").DeclaredErrors<{
+        readonly invalid_input: "The request does not match the operation's input schema (a malformed body included); data.issues names each problem.";
+        readonly unauthenticated: "No usable credential: none was sent, or it is malformed, unknown, revoked or an expired account token.";
+        readonly api_key_expired: "The API key is past its expiry (or the grace of the rotation that replaced it).";
+        readonly missing_scope: "The API key lacks the scope the operation needs.";
+        readonly role_forbidden: "The member's role does not allow the operation.";
+        readonly account_token_forbidden: "An account token called an operation account tokens cannot call.";
+        readonly rate_limited: "The tenant used up its plan's request rate; Retry-After says when the window ends.";
+        readonly too_many_requests: "The credential has too many requests in flight at once; retry after Retry-After.";
+        readonly overloaded: "The API is shedding load; retry after Retry-After.";
+        readonly payload_too_large: "The request body is larger than the API accepts.";
+        readonly internal_error: "An unexpected failure on our side.";
+        readonly invalid_idempotency_key: "POST only: the Idempotency-Key header is not 1 to 255 printable ASCII characters.";
+        readonly idempotency_key_reused: "POST only: the Idempotency-Key was used in the last 24 hours with another method, path or body.";
+        readonly idempotency_key_in_progress: "POST only: the request first sent with this Idempotency-Key has not been answered yet.";
+    }>>, import("../errors.js").DeclaredErrors<{
+        readonly cloud_required: "provider is microsoft and no cloud is given.";
+        readonly not_microsoft: "cloud or authority is given for a Google app.";
+    }>>, Record<never, never>>;
+    update: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
+        appId: z.ZodUUID;
+        name: z.ZodOptional<z.ZodString>;
+        clientSecret: z.ZodOptional<z.ZodString>;
+        authority: z.ZodOptional<z.ZodString>;
+        gmailPush: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+            topic: z.ZodString;
+            serviceAccount: z.ZodEmail;
+        }, z.core.$strip>>>;
+    }, z.core.$strip>, z.ZodObject<{
+        id: z.ZodUUID;
+        provider: z.ZodEnum<{
+            google: "google";
+            microsoft: "microsoft";
+        }>;
+        name: z.ZodString;
+        clientId: z.ZodString;
+        cloud: z.ZodNullable<z.ZodEnum<{
+            global: "global";
+            "gcc-high": "gcc-high";
+            dod: "dod";
+            china: "china";
+        }>>;
+        authority: z.ZodNullable<z.ZodString>;
+        gmailPush: z.ZodNullable<z.ZodObject<{
+            topic: z.ZodString;
+            serviceAccount: z.ZodEmail;
+        }, z.core.$strip>>;
+        gmailPushEndpoint: z.ZodNullable<z.ZodURL>;
+        createdAt: z.ZodPreprocess<z.ZodDate, Date>;
+    }, z.core.$strip>, import("@orpc/contract").MergedErrorMap<import("@orpc/contract").MergedErrorMap<Record<never, never>, import("../errors.js").DeclaredErrors<{
+        readonly invalid_input: "The request does not match the operation's input schema (a malformed body included); data.issues names each problem.";
+        readonly unauthenticated: "No usable credential: none was sent, or it is malformed, unknown, revoked or an expired account token.";
+        readonly api_key_expired: "The API key is past its expiry (or the grace of the rotation that replaced it).";
+        readonly missing_scope: "The API key lacks the scope the operation needs.";
+        readonly role_forbidden: "The member's role does not allow the operation.";
+        readonly account_token_forbidden: "An account token called an operation account tokens cannot call.";
+        readonly rate_limited: "The tenant used up its plan's request rate; Retry-After says when the window ends.";
+        readonly too_many_requests: "The credential has too many requests in flight at once; retry after Retry-After.";
+        readonly overloaded: "The API is shedding load; retry after Retry-After.";
+        readonly payload_too_large: "The request body is larger than the API accepts.";
+        readonly internal_error: "An unexpected failure on our side.";
+        readonly invalid_idempotency_key: "POST only: the Idempotency-Key header is not 1 to 255 printable ASCII characters.";
+        readonly idempotency_key_reused: "POST only: the Idempotency-Key was used in the last 24 hours with another method, path or body.";
+        readonly idempotency_key_in_progress: "POST only: the request first sent with this Idempotency-Key has not been answered yet.";
+    }>>, {
+        gmail_push_unsupported: {
+            status: 400;
+            message: string;
+        };
+        push_unavailable: {
+            status: 400;
+            message: string;
+        };
+        not_microsoft: {
+            status: 400;
+            message: string;
+        };
+        oauth_app_not_found: {
+            status: 404;
+            message: string;
+        };
+    }>, Record<never, never>>;
+    delete: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
+        appId: z.ZodUUID;
+    }, z.core.$strip>, z.ZodVoid, import("@orpc/contract").MergedErrorMap<import("@orpc/contract").MergedErrorMap<Record<never, never>, import("../errors.js").DeclaredErrors<{
+        readonly invalid_input: "The request does not match the operation's input schema (a malformed body included); data.issues names each problem.";
+        readonly unauthenticated: "No usable credential: none was sent, or it is malformed, unknown, revoked or an expired account token.";
+        readonly api_key_expired: "The API key is past its expiry (or the grace of the rotation that replaced it).";
+        readonly missing_scope: "The API key lacks the scope the operation needs.";
+        readonly role_forbidden: "The member's role does not allow the operation.";
+        readonly account_token_forbidden: "An account token called an operation account tokens cannot call.";
+        readonly rate_limited: "The tenant used up its plan's request rate; Retry-After says when the window ends.";
+        readonly too_many_requests: "The credential has too many requests in flight at once; retry after Retry-After.";
+        readonly overloaded: "The API is shedding load; retry after Retry-After.";
+        readonly payload_too_large: "The request body is larger than the API accepts.";
+        readonly internal_error: "An unexpected failure on our side.";
+        readonly invalid_idempotency_key: "POST only: the Idempotency-Key header is not 1 to 255 printable ASCII characters.";
+        readonly idempotency_key_reused: "POST only: the Idempotency-Key was used in the last 24 hours with another method, path or body.";
+        readonly idempotency_key_in_progress: "POST only: the request first sent with this Idempotency-Key has not been answered yet.";
+    }>>, {
+        oauth_app_in_use: {
+            status: 409;
+            message: string;
+        };
+        oauth_app_not_found: {
+            status: 404;
+            message: string;
+        };
+    }>, Record<never, never>>;
+};

package/contract/org-connections/models.d.ts

@@ -0,0 +1,383 @@
+import * as z from "zod";
+export declare const OrgConnectionKind: z.ZodEnum<{
+    google_delegation: "google_delegation";
+    microsoft_app: "microsoft_app";
+}>;
+export type OrgConnectionKind = z.infer<typeof OrgConnectionKind>;
+/** pending_consent: no Microsoft directory has consented yet. unverified: registered or changed
+ * and not tested since. active / failing: the outcome of the last test or consent. */
+export declare const OrgConnectionStatus: z.ZodEnum<{
+    active: "active";
+    unverified: "unverified";
+    failing: "failing";
+    pending_consent: "pending_consent";
+}>;
+export type OrgConnectionStatus = z.infer<typeof OrgConnectionStatus>;
+/** platform: the platform's Entra app for the cloud, authorized through admin consent.
+ * client_secret / certificate: the tenant's own app registration. */
+export declare const MicrosoftAppCredential: z.ZodEnum<{
+    platform: "platform";
+    client_secret: "client_secret";
+    certificate: "certificate";
+}>;
+export type MicrosoftAppCredential = z.infer<typeof MicrosoftAppCredential>;
+export declare const GoogleDelegation: z.ZodObject<{
+    domain: z.ZodString;
+    serviceAccountEmail: z.ZodString;
+    directoryAdmin: z.ZodNullable<z.ZodString>;
+    scopes: z.ZodArray<z.ZodString>;
+}, z.core.$strip>;
+export type GoogleDelegation = z.infer<typeof GoogleDelegation>;
+export declare const GraphPermission: z.ZodObject<{
+    name: z.ZodString;
+    isRequired: z.ZodBoolean;
+}, z.core.$strip>;
+export type GraphPermission = z.infer<typeof GraphPermission>;
+export declare const MicrosoftAppAccess: z.ZodObject<{
+    cloud: z.ZodEnum<{
+        global: "global";
+        "gcc-high": "gcc-high";
+        dod: "dod";
+        china: "china";
+    }>;
+    credentialType: z.ZodEnum<{
+        platform: "platform";
+        client_secret: "client_secret";
+        certificate: "certificate";
+    }>;
+    directoryId: z.ZodNullable<z.ZodString>;
+    permissions: z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        isRequired: z.ZodBoolean;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type MicrosoftAppAccess = z.infer<typeof MicrosoftAppAccess>;
+export declare const OrgConnection: z.ZodObject<{
+    id: z.ZodUUID;
+    kind: z.ZodEnum<{
+        google_delegation: "google_delegation";
+        microsoft_app: "microsoft_app";
+    }>;
+    name: z.ZodString;
+    clientId: z.ZodString;
+    status: z.ZodEnum<{
+        active: "active";
+        unverified: "unverified";
+        failing: "failing";
+        pending_consent: "pending_consent";
+    }>;
+    statusDetail: z.ZodNullable<z.ZodString>;
+    checkedAt: z.ZodNullable<z.ZodPreprocess<z.ZodDate, Date>>;
+    google: z.ZodNullable<z.ZodObject<{
+        domain: z.ZodString;
+        serviceAccountEmail: z.ZodString;
+        directoryAdmin: z.ZodNullable<z.ZodString>;
+        scopes: z.ZodArray<z.ZodString>;
+    }, z.core.$strip>>;
+    microsoft: z.ZodNullable<z.ZodObject<{
+        cloud: z.ZodEnum<{
+            global: "global";
+            "gcc-high": "gcc-high";
+            dod: "dod";
+            china: "china";
+        }>;
+        credentialType: z.ZodEnum<{
+            platform: "platform";
+            client_secret: "client_secret";
+            certificate: "certificate";
+        }>;
+        directoryId: z.ZodNullable<z.ZodString>;
+        permissions: z.ZodArray<z.ZodObject<{
+            name: z.ZodString;
+            isRequired: z.ZodBoolean;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
+    accounts: z.ZodNumber;
+    createdAt: z.ZodPreprocess<z.ZodDate, Date>;
+    updatedAt: z.ZodPreprocess<z.ZodDate, Date>;
+}, z.core.$strip>;
+export type OrgConnection = z.infer<typeof OrgConnection>;
+export declare const OrgConnectionList: z.ZodObject<{
+    items: z.ZodArray<z.ZodObject<{
+        id: z.ZodUUID;
+        kind: z.ZodEnum<{
+            google_delegation: "google_delegation";
+            microsoft_app: "microsoft_app";
+        }>;
+        name: z.ZodString;
+        clientId: z.ZodString;
+        status: z.ZodEnum<{
+            active: "active";
+            unverified: "unverified";
+            failing: "failing";
+            pending_consent: "pending_consent";
+        }>;
+        statusDetail: z.ZodNullable<z.ZodString>;
+        checkedAt: z.ZodNullable<z.ZodPreprocess<z.ZodDate, Date>>;
+        google: z.ZodNullable<z.ZodObject<{
+            domain: z.ZodString;
+            serviceAccountEmail: z.ZodString;
+            directoryAdmin: z.ZodNullable<z.ZodString>;
+            scopes: z.ZodArray<z.ZodString>;
+        }, z.core.$strip>>;
+        microsoft: z.ZodNullable<z.ZodObject<{
+            cloud: z.ZodEnum<{
+                global: "global";
+                "gcc-high": "gcc-high";
+                dod: "dod";
+                china: "china";
+            }>;
+            credentialType: z.ZodEnum<{
+                platform: "platform";
+                client_secret: "client_secret";
+                certificate: "certificate";
+            }>;
+            directoryId: z.ZodNullable<z.ZodString>;
+            permissions: z.ZodArray<z.ZodObject<{
+                name: z.ZodString;
+                isRequired: z.ZodBoolean;
+            }, z.core.$strip>>;
+        }, z.core.$strip>>;
+        accounts: z.ZodNumber;
+        createdAt: z.ZodPreprocess<z.ZodDate, Date>;
+        updatedAt: z.ZodPreprocess<z.ZodDate, Date>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type OrgConnectionList = z.infer<typeof OrgConnectionList>;
+export declare const CreateOrgConnection: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    kind: z.ZodLiteral<"google_delegation">;
+    name: z.ZodString;
+    serviceAccountKey: z.ZodString;
+    domain: z.ZodString;
+    calendarEnabled: z.ZodDefault<z.ZodBoolean>;
+    contactsEnabled: z.ZodDefault<z.ZodBoolean>;
+    directoryAdmin: z.ZodOptional<z.ZodEmail>;
+}, z.core.$strip>, z.ZodObject<{
+    kind: z.ZodLiteral<"microsoft_app">;
+    name: z.ZodString;
+    cloud: z.ZodDefault<z.ZodEnum<{
+        global: "global";
+        "gcc-high": "gcc-high";
+        dod: "dod";
+        china: "china";
+    }>>;
+    credential: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        type: z.ZodLiteral<"platform">;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"client_secret">;
+        clientId: z.ZodString;
+        clientSecret: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"certificate">;
+        clientId: z.ZodString;
+        certificate: z.ZodString;
+        privateKey: z.ZodString;
+    }, z.core.$strip>], "type">;
+    directoryId: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>], "kind">;
+export type CreateOrgConnection = z.infer<typeof CreateOrgConnection>;
+export declare const UpdateOrgConnection: z.ZodObject<{
+    name: z.ZodOptional<z.ZodString>;
+    serviceAccountKey: z.ZodOptional<z.ZodString>;
+    calendarEnabled: z.ZodOptional<z.ZodBoolean>;
+    contactsEnabled: z.ZodOptional<z.ZodBoolean>;
+    directoryAdmin: z.ZodOptional<z.ZodNullable<z.ZodEmail>>;
+    clientSecret: z.ZodOptional<z.ZodString>;
+    certificate: z.ZodOptional<z.ZodString>;
+    privateKey: z.ZodOptional<z.ZodString>;
+    directoryId: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type UpdateOrgConnection = z.infer<typeof UpdateOrgConnection>;
+export declare const OrgConnectionCheck: z.ZodObject<{
+    name: z.ZodString;
+    isOk: z.ZodBoolean;
+    isRequired: z.ZodBoolean;
+    detail: z.ZodString;
+}, z.core.$strip>;
+export type OrgConnectionCheck = z.infer<typeof OrgConnectionCheck>;
+export declare const OrgConnectionTestResult: z.ZodObject<{
+    connection: z.ZodObject<{
+        id: z.ZodUUID;
+        kind: z.ZodEnum<{
+            google_delegation: "google_delegation";
+            microsoft_app: "microsoft_app";
+        }>;
+        name: z.ZodString;
+        clientId: z.ZodString;
+        status: z.ZodEnum<{
+            active: "active";
+            unverified: "unverified";
+            failing: "failing";
+            pending_consent: "pending_consent";
+        }>;
+        statusDetail: z.ZodNullable<z.ZodString>;
+        checkedAt: z.ZodNullable<z.ZodPreprocess<z.ZodDate, Date>>;
+        google: z.ZodNullable<z.ZodObject<{
+            domain: z.ZodString;
+            serviceAccountEmail: z.ZodString;
+            directoryAdmin: z.ZodNullable<z.ZodString>;
+            scopes: z.ZodArray<z.ZodString>;
+        }, z.core.$strip>>;
+        microsoft: z.ZodNullable<z.ZodObject<{
+            cloud: z.ZodEnum<{
+                global: "global";
+                "gcc-high": "gcc-high";
+                dod: "dod";
+                china: "china";
+            }>;
+            credentialType: z.ZodEnum<{
+                platform: "platform";
+                client_secret: "client_secret";
+                certificate: "certificate";
+            }>;
+            directoryId: z.ZodNullable<z.ZodString>;
+            permissions: z.ZodArray<z.ZodObject<{
+                name: z.ZodString;
+                isRequired: z.ZodBoolean;
+            }, z.core.$strip>>;
+        }, z.core.$strip>>;
+        accounts: z.ZodNumber;
+        createdAt: z.ZodPreprocess<z.ZodDate, Date>;
+        updatedAt: z.ZodPreprocess<z.ZodDate, Date>;
+    }, z.core.$strip>;
+    checks: z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        isOk: z.ZodBoolean;
+        isRequired: z.ZodBoolean;
+        detail: z.ZodString;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type OrgConnectionTestResult = z.infer<typeof OrgConnectionTestResult>;
+export declare const DirectoryEntry: z.ZodObject<{
+    id: z.ZodString;
+    email: z.ZodString;
+    displayName: z.ZodNullable<z.ZodString>;
+    accountId: z.ZodNullable<z.ZodUUID>;
+}, z.core.$strip>;
+export type DirectoryEntry = z.infer<typeof DirectoryEntry>;
+export declare const DirectoryEntryPage: z.ZodObject<{
+    items: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        email: z.ZodString;
+        displayName: z.ZodNullable<z.ZodString>;
+        accountId: z.ZodNullable<z.ZodUUID>;
+    }, z.core.$strip>>;
+    nextCursor: z.ZodNullable<z.ZodString>;
+}, z.core.$strip>;
+export type DirectoryEntryPage = z.infer<typeof DirectoryEntryPage>;
+export declare const AddMailboxInput: z.ZodObject<{
+    email: z.ZodEmail;
+    displayName: z.ZodOptional<z.ZodString>;
+    externalRef: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type AddMailboxInput = z.infer<typeof AddMailboxInput>;
+export declare const AddMailboxesRequest: z.ZodObject<{
+    mailboxes: z.ZodArray<z.ZodObject<{
+        email: z.ZodEmail;
+        displayName: z.ZodOptional<z.ZodString>;
+        externalRef: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    settings: z.ZodOptional<z.ZodObject<{
+        bodyStorage: z.ZodOptional<z.ZodEnum<{
+            none: "none";
+            cache: "cache";
+            full: "full";
+        }>>;
+        syncWindowDays: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+        calendarEnabled: z.ZodOptional<z.ZodBoolean>;
+        contactsEnabled: z.ZodOptional<z.ZodBoolean>;
+        undoSendSeconds: z.ZodOptional<z.ZodNumber>;
+        trackOpens: z.ZodOptional<z.ZodBoolean>;
+        trackClicks: z.ZodOptional<z.ZodBoolean>;
+        trackingHoneypot: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type AddMailboxesRequest = z.infer<typeof AddMailboxesRequest>;
+/** created: a new account. exists: a live account for the mailbox was already there.
+ * failed: see error. */
+export declare const AddedMailboxStatus: z.ZodEnum<{
+    failed: "failed";
+    created: "created";
+    exists: "exists";
+}>;
+export type AddedMailboxStatus = z.infer<typeof AddedMailboxStatus>;
+/** Why one mailbox was not added: `reason` is the reason the API would refuse it with (REASONS). */
+export declare const AddedMailboxError: z.ZodObject<{
+    reason: z.ZodString;
+    message: z.ZodString;
+}, z.core.$strip>;
+export type AddedMailboxError = z.infer<typeof AddedMailboxError>;
+export declare const AddedMailbox: z.ZodObject<{
+    email: z.ZodString;
+    status: z.ZodEnum<{
+        failed: "failed";
+        created: "created";
+        exists: "exists";
+    }>;
+    accountId: z.ZodNullable<z.ZodUUID>;
+    error: z.ZodNullable<z.ZodObject<{
+        reason: z.ZodString;
+        message: z.ZodString;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type AddedMailbox = z.infer<typeof AddedMailbox>;
+/** One result per requested mailbox, in request order. */
+export declare const AddedMailboxList: z.ZodObject<{
+    items: z.ZodArray<z.ZodObject<{
+        email: z.ZodString;
+        status: z.ZodEnum<{
+            failed: "failed";
+            created: "created";
+            exists: "exists";
+        }>;
+        accountId: z.ZodNullable<z.ZodUUID>;
+        error: z.ZodNullable<z.ZodObject<{
+            reason: z.ZodString;
+            message: z.ZodString;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type AddedMailboxList = z.infer<typeof AddedMailboxList>;
+export declare const OrgConnectionIdInput: z.ZodObject<{
+    connectionId: z.ZodUUID;
+}, z.core.$strip>;
+export type OrgConnectionIdInput = z.infer<typeof OrgConnectionIdInput>;
+export declare const StartConsentRequest: z.ZodObject<{
+    redirectUri: z.ZodURL;
+    state: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type StartConsentRequest = z.infer<typeof StartConsentRequest>;
+export declare const ConsentLink: z.ZodObject<{
+    consentUrl: z.ZodURL;
+}, z.core.$strip>;
+export type ConsentLink = z.infer<typeof ConsentLink>;
+export declare const TestOrgConnectionRequest: z.ZodObject<{
+    user: z.ZodOptional<z.ZodEmail>;
+}, z.core.$strip>;
+export type TestOrgConnectionRequest = z.infer<typeof TestOrgConnectionRequest>;
+export declare const ListDirectoryEntriesQuery: z.ZodObject<{
+    cursor: z.ZodOptional<z.ZodString>;
+    limit: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
+    query: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type ListDirectoryEntriesQuery = z.infer<typeof ListDirectoryEntriesQuery>;
+export declare const OpenSharedMailboxRequest: z.ZodObject<{
+    email: z.ZodEmail;
+    displayName: z.ZodOptional<z.ZodString>;
+    externalRef: z.ZodOptional<z.ZodString>;
+    settings: z.ZodOptional<z.ZodObject<{
+        bodyStorage: z.ZodOptional<z.ZodEnum<{
+            none: "none";
+            cache: "cache";
+            full: "full";
+        }>>;
+        syncWindowDays: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+        calendarEnabled: z.ZodOptional<z.ZodBoolean>;
+        contactsEnabled: z.ZodOptional<z.ZodBoolean>;
+        undoSendSeconds: z.ZodOptional<z.ZodNumber>;
+        trackOpens: z.ZodOptional<z.ZodBoolean>;
+        trackClicks: z.ZodOptional<z.ZodBoolean>;
+        trackingHoneypot: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type OpenSharedMailboxRequest = z.infer<typeof OpenSharedMailboxRequest>;