import type {
  IReq_AcknowledgeAppSecretDelivery,
  IReq_ApproveAdministratorRecovery,
  IReq_ApproveBreakGlassAccess,
  IReq_ApproveOidcSigningKeyRotation,
  IReq_CheckGlobalAdmin,
  IReq_CreateGlobalApp,
  IReq_DeleteGlobalApp,
  IReq_GetGlobalAppStats,
  IReq_GetGlobalOrgStats,
  IReq_GetGlobalUsers,
  IReq_RegenerateAppCredentials,
  IReq_RequestAdministratorRecovery,
  IReq_RequestBreakGlassAccess,
  IReq_ReviewBreakGlassAccess,
  IReq_RotateOidcSigningKey,
  IReq_SetGlobalAdmin,
  IReq_SetGlobalCapabilityAssignments,
  IReq_SetOrganizationSuspension,
  IReq_SetUserSuspension,
  IReq_UpdateGlobalApp,
} from './admin.js';
import type { IReq_DeleteSuspendedUser } from './user.js';

export type TGlobalAdminTypedRequest =
  | IReq_AcknowledgeAppSecretDelivery
  | IReq_ApproveAdministratorRecovery
  | IReq_ApproveBreakGlassAccess
  | IReq_ApproveOidcSigningKeyRotation
  | IReq_CheckGlobalAdmin
  | IReq_CreateGlobalApp
  | IReq_DeleteGlobalApp
  | IReq_DeleteSuspendedUser
  | IReq_GetGlobalAppStats
  | IReq_GetGlobalOrgStats
  | IReq_GetGlobalUsers
  | IReq_RegenerateAppCredentials
  | IReq_RequestAdministratorRecovery
  | IReq_RequestBreakGlassAccess
  | IReq_ReviewBreakGlassAccess
  | IReq_RotateOidcSigningKey
  | IReq_SetGlobalAdmin
  | IReq_SetGlobalCapabilityAssignments
  | IReq_SetOrganizationSuspension
  | IReq_SetUserSuspension
  | IReq_UpdateGlobalApp;

export type TGlobalAdminTypedRequestMethod = TGlobalAdminTypedRequest['method'];

/**
 * Canonical transport-boundary classification for platform-wide
 * administration. Consumers use this inventory to keep privileged request
 * methods off public transports.
 */
export const globalAdminTypedRequestMethods = [
  'checkGlobalAdmin',
  'getGlobalAppStats',
  'createGlobalApp',
  'updateGlobalApp',
  'deleteGlobalApp',
  'regenerateAppCredentials',
  'acknowledgeAppSecretDelivery',
  'rotateOidcSigningKey',
  'approveOidcSigningKeyRotation',
  'setOrganizationSuspension',
  'getGlobalUsers',
  'setUserSuspension',
  'setGlobalAdmin',
  'setGlobalCapabilityAssignments',
  'requestBreakGlassAccess',
  'approveBreakGlassAccess',
  'reviewBreakGlassAccess',
  'requestAdministratorRecovery',
  'approveAdministratorRecovery',
  'getGlobalOrgStats',
  'deleteSuspendedUser',
] as const satisfies readonly TGlobalAdminTypedRequestMethod[];