import { a as credentialSetProxyConfigSchema } from "./schemas-DXcT2SRm.mjs"; import { z } from "zod"; //#region src/artifacts/credential-requirements.d.ts declare const IntegrationScopeValues: readonly ["organization", "project", "user_provided_credential"]; declare const IntegrationScopeSchema: z.ZodEnum<{ organization: "organization"; project: "project"; user_provided_credential: "user_provided_credential"; }>; type IntegrationScope = z.infer; declare const IntegrationCredentialRefSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{ type: z.ZodLiteral<"id">; id: z.ZodString; }, z.core.$strip>, z.ZodObject<{ type: z.ZodLiteral<"name">; name: z.ZodString; }, z.core.$strip>], "type">; type IntegrationCredentialRef = z.infer; declare function hasProjectOrOrganizationScope(scope: IntegrationScope | undefined): scope is 'organization' | 'project'; /** * Credential field names allowed in ref-token proxying (`wz_ref_*` embedding). * * **Keep in sync** with `CREDENTIAL_REF_TOKEN_KEY_SEGMENT` in * `apps/executor` runtime wiring — no shared runtime module to avoid an * executor ↔ core dependency; update both definitions together. */ declare const credentialRefTokenKeyNameRegex: RegExp; declare const CredentialRefTokenKeyNameSchema: z.ZodString; /** Shared enum for top-level credential-set `onCredentialRevoked` policy. */ declare const OnCredentialRevokedSchema: z.ZodEnum<{ fail: "fail"; "retry-once": "retry-once"; }>; type OnCredentialRevoked = z.infer; /** A credential set after resolution in a built manifest. Contains definition id, scope, alias, and credential keys.*/ declare const ResolvedCredentialSetSchema: z.ZodObject<{ resolvedId: z.ZodString; scope: z.ZodOptional>; alias: z.ZodOptional; credentialRef: z.ZodOptional; id: z.ZodString; }, z.core.$strip>, z.ZodObject<{ type: z.ZodLiteral<"name">; name: z.ZodString; }, z.core.$strip>], "type">>; credentialKeys: z.ZodArray; optionalCredentialKeys: z.ZodOptional>; storedCredentialKeys: z.ZodOptional>; optionalStoredCredentialKeys: z.ZodOptional>; proxy: z.ZodOptional>; hostPatterns: z.ZodOptional>; injection: z.ZodOptional; basicAuth: z.ZodOptional; queryParams: z.ZodOptional; body: z.ZodOptional; }, z.core.$strip>>; }, z.core.$strip>>; needsRawSecret: z.ZodOptional; needsDynamicResolution: z.ZodOptional; dynamicResolutionCacheMs: z.ZodOptional; onCredentialRevoked: z.ZodOptional>; schemaFingerprint: z.ZodOptional; }, z.core.$strip>; type ResolvedCredentialSet = z.infer; declare const DeclaredCredentialRequirementSchema: z.ZodObject<{ credentialSetId: z.ZodString; credentialType: z.ZodEnum<{ oauth: "oauth"; manual: "manual"; }>; credentialKeys: z.ZodArray; optionalCredentialKeys: z.ZodOptional>; storedCredentialKeys: z.ZodOptional>; optionalStoredCredentialKeys: z.ZodOptional>; schemaFingerprint: z.ZodOptional; needsDynamicResolution: z.ZodOptional; dynamicResolutionCacheMs: z.ZodOptional; onCredentialRevoked: z.ZodOptional>; proxy: z.ZodOptional>; hostPatterns: z.ZodOptional>; injection: z.ZodOptional; basicAuth: z.ZodOptional; queryParams: z.ZodOptional; body: z.ZodOptional; }, z.core.$strip>>; }, z.core.$strip>>; needsRawSecret: z.ZodOptional; requiredOAuthScopes: z.ZodOptional>; }, z.core.$strip>; type DeclaredCredentialRequirement = z.infer; declare const CredentialRequirementEntrySchema: z.ZodObject<{ credentialSetId: z.ZodString; scope: z.ZodOptional>; alias: z.ZodOptional; credentialRef: z.ZodOptional; id: z.ZodString; }, z.core.$strip>, z.ZodObject<{ type: z.ZodLiteral<"name">; name: z.ZodString; }, z.core.$strip>], "type">>; credentialKeys: z.ZodArray; optionalCredentialKeys: z.ZodOptional>; storedCredentialKeys: z.ZodOptional>; optionalStoredCredentialKeys: z.ZodOptional>; schemaFingerprint: z.ZodOptional; proxy: z.ZodOptional>; hostPatterns: z.ZodOptional>; injection: z.ZodOptional; basicAuth: z.ZodOptional; queryParams: z.ZodOptional; body: z.ZodOptional; }, z.core.$strip>>; }, z.core.$strip>>; needsRawSecret: z.ZodOptional; needsDynamicResolution: z.ZodOptional; dynamicResolutionCacheMs: z.ZodOptional; onCredentialRevoked: z.ZodOptional>; requiredOAuthScopes: z.ZodOptional>; }, z.core.$strip>; type CredentialRequirementEntry = z.infer; declare const CredentialRequirementsSchema: z.ZodObject<{ required: z.ZodArray; byStep: z.ZodRecord>; alias: z.ZodOptional; credentialRef: z.ZodOptional; id: z.ZodString; }, z.core.$strip>, z.ZodObject<{ type: z.ZodLiteral<"name">; name: z.ZodString; }, z.core.$strip>], "type">>; credentialKeys: z.ZodArray; optionalCredentialKeys: z.ZodOptional>; storedCredentialKeys: z.ZodOptional>; optionalStoredCredentialKeys: z.ZodOptional>; schemaFingerprint: z.ZodOptional; proxy: z.ZodOptional>; hostPatterns: z.ZodOptional>; injection: z.ZodOptional; basicAuth: z.ZodOptional; queryParams: z.ZodOptional; body: z.ZodOptional; }, z.core.$strip>>; }, z.core.$strip>>; needsRawSecret: z.ZodOptional; needsDynamicResolution: z.ZodOptional; dynamicResolutionCacheMs: z.ZodOptional; onCredentialRevoked: z.ZodOptional>; requiredOAuthScopes: z.ZodOptional>; }, z.core.$strip>>>; }, z.core.$strip>; type CredentialRequirements = z.infer; declare const TriggerPollExportNameSchema: z.ZodEnum<{ poll: "poll"; }>; type TriggerPollExportName = z.infer; declare const TriggerCredentialRequirementEntrySchema: z.ZodObject<{ credentialSetId: z.ZodString; scope: z.ZodOptional>; alias: z.ZodOptional; credentialRef: z.ZodOptional; id: z.ZodString; }, z.core.$strip>, z.ZodObject<{ type: z.ZodLiteral<"name">; name: z.ZodString; }, z.core.$strip>], "type">>; credentialKeys: z.ZodArray; optionalCredentialKeys: z.ZodOptional>; storedCredentialKeys: z.ZodOptional>; optionalStoredCredentialKeys: z.ZodOptional>; schemaFingerprint: z.ZodOptional; proxy: z.ZodOptional>; hostPatterns: z.ZodOptional>; injection: z.ZodOptional; basicAuth: z.ZodOptional; queryParams: z.ZodOptional; body: z.ZodOptional; }, z.core.$strip>>; }, z.core.$strip>>; needsRawSecret: z.ZodOptional; needsDynamicResolution: z.ZodOptional; dynamicResolutionCacheMs: z.ZodOptional; onCredentialRevoked: z.ZodOptional>; requiredOAuthScopes: z.ZodOptional>; }, z.core.$strip>; type TriggerCredentialRequirementEntry = z.infer; declare const TriggerCredentialRequirementsSchema: z.ZodObject<{ required: z.ZodArray; byPollExport: z.ZodRecord & z.core.$partial, z.ZodArray>; alias: z.ZodOptional; credentialRef: z.ZodOptional; id: z.ZodString; }, z.core.$strip>, z.ZodObject<{ type: z.ZodLiteral<"name">; name: z.ZodString; }, z.core.$strip>], "type">>; credentialKeys: z.ZodArray; optionalCredentialKeys: z.ZodOptional>; storedCredentialKeys: z.ZodOptional>; optionalStoredCredentialKeys: z.ZodOptional>; schemaFingerprint: z.ZodOptional; proxy: z.ZodOptional>; hostPatterns: z.ZodOptional>; injection: z.ZodOptional; basicAuth: z.ZodOptional; queryParams: z.ZodOptional; body: z.ZodOptional; }, z.core.$strip>>; }, z.core.$strip>>; needsRawSecret: z.ZodOptional; needsDynamicResolution: z.ZodOptional; dynamicResolutionCacheMs: z.ZodOptional; onCredentialRevoked: z.ZodOptional>; requiredOAuthScopes: z.ZodOptional>; }, z.core.$strip>>>; }, z.core.$strip>; type TriggerCredentialRequirements = z.infer; type CredentialRequirementEntryLike = { alias?: string; credentialKeys: string[]; credentialRef?: IntegrationCredentialRef; credentialSetId: string; storedCredentialKeys?: string[]; optionalStoredCredentialKeys?: string[]; schemaFingerprint?: string; scope?: IntegrationScope; proxy?: z.infer; needsRawSecret?: boolean; needsDynamicResolution?: boolean; dynamicResolutionCacheMs?: number; onCredentialRevoked?: OnCredentialRevoked; requiredOAuthScopes?: string[]; optionalCredentialKeys?: string[]; }; declare function deduplicateCredentialRequirementEntries(entries: readonly T[]): T[]; declare function collectCredentialRequirementEntries(credentialRequirements: Pick | undefined): CredentialRequirementEntry[]; declare function getEffectiveCredentialRequirementEntriesForStep(params: { credentialRequirements: Pick | undefined; stepNodeId?: string; }): CredentialRequirementEntry[]; declare const ExecutionIdentityPolicySchema: z.ZodObject<{ subjectMode: z.ZodEnum<{ never: "never"; requiredWhenUserProvidedCredential: "requiredWhenUserProvidedCredential"; }>; }, z.core.$strip>; type ExecutionIdentityPolicy = z.infer; /** A step's entry within a WorkflowManifest. Describes how a step is used in a workflow, not what the step itself is. */ declare const WorkflowStepEntrySchema: z.ZodObject<{ nodeId: z.ZodString; stepName: z.ZodString; label: z.ZodString; callKind: z.ZodEnum<{ agent: "agent"; "workflow-step": "workflow-step"; tool: "tool"; hook: "hook"; "child-workflow": "child-workflow"; "function-call": "function-call"; "method-call": "method-call"; "dynamic-call": "dynamic-call"; "parallel-call": "parallel-call"; "process-exit": "process-exit"; iife: "iife"; expression: "expression"; }>; stepId: z.ZodOptional; source: z.ZodOptional; line: z.ZodNumber; column: z.ZodNumber; position: z.ZodOptional; endLine: z.ZodNumber; endColumn: z.ZodNumber; endPosition: z.ZodOptional; synthetic: z.ZodOptional; }, z.core.$strip>>; astKind: z.ZodOptional; importSource: z.ZodOptional; moduleSpecifier: z.ZodOptional; importName: z.ZodOptional; localName: z.ZodOptional; resolvedPath: z.ZodOptional; }, z.core.$strip>>; outputBinding: z.ZodOptional; scopeOverride: z.ZodOptional>; description: z.ZodOptional; sourceCode: z.ZodOptional; exportName: z.ZodOptional; inputSchema: z.ZodOptional>; outputSchema: z.ZodOptional>; credentialSets: z.ZodOptional>; alias: z.ZodOptional; credentialRef: z.ZodOptional; id: z.ZodString; }, z.core.$strip>, z.ZodObject<{ type: z.ZodLiteral<"name">; name: z.ZodString; }, z.core.$strip>], "type">>; credentialKeys: z.ZodArray; optionalCredentialKeys: z.ZodOptional>; storedCredentialKeys: z.ZodOptional>; optionalStoredCredentialKeys: z.ZodOptional>; proxy: z.ZodOptional>; hostPatterns: z.ZodOptional>; injection: z.ZodOptional; basicAuth: z.ZodOptional; queryParams: z.ZodOptional; body: z.ZodOptional; }, z.core.$strip>>; }, z.core.$strip>>; needsRawSecret: z.ZodOptional; needsDynamicResolution: z.ZodOptional; dynamicResolutionCacheMs: z.ZodOptional; onCredentialRevoked: z.ZodOptional>; schemaFingerprint: z.ZodOptional; }, z.core.$strip>>>; }, z.core.$strip>; type WorkflowStepEntry = z.infer; declare const TriggerTypeSchema: z.ZodEnum<{ cron: "cron"; polling: "polling"; webhook: "webhook"; }>; type TriggerType = z.infer; /** * Persisted on `deployment_triggers.trigger_source`. Mirrors the * `webhookTrigger({ source: { type } })` discriminator so the server * can index-filter app-source rows during provider-webhook fanout. */ declare const TriggerSourceSchema: z.ZodEnum<{ custom: "custom"; app: "app"; }>; type TriggerSource = z.infer; declare const WebhookMethodSchema: z.ZodEnum<{ GET: "GET"; POST: "POST"; PUT: "PUT"; PATCH: "PATCH"; }>; type WebhookMethod = z.infer; declare const TriggerPollBundleUploadSchema: z.ZodObject<{ code: z.ZodString; hash: z.ZodString; size: z.ZodNumber; }, z.core.$strip>; type TriggerPollBundleUpload = z.infer; /** Declarative idempotency-key spec resolved server-side (no VM). */ declare const IdempotencyKeyConfigSchema: z.ZodUnion; strategy: z.ZodLiteral<"hash">; }, z.core.$strip>, z.ZodObject<{ from: z.ZodLiteral<"payload">; path: z.ZodString; }, z.core.$strip>, z.ZodObject<{ from: z.ZodLiteral<"header">; strategy: z.ZodLiteral<"hash">; }, z.core.$strip>, z.ZodObject<{ from: z.ZodLiteral<"header">; name: z.ZodString; }, z.core.$strip>]>; type IdempotencyKeyConfig = z.infer; declare const TriggerPollExportsSchema: z.ZodObject<{ poll: z.ZodOptional; }, z.core.$strip>; type TriggerPollExports = z.infer; declare const TriggerUploadDataSchema: z.ZodObject<{ id: z.ZodString; authoredTriggerId: z.ZodString; type: z.ZodEnum<{ cron: "cron"; polling: "polling"; webhook: "webhook"; }>; triggerSource: z.ZodOptional>; webhookAuthGroupKey: z.ZodOptional; enabled: z.ZodBoolean; schedule: z.ZodOptional; timezone: z.ZodOptional; config: z.ZodOptional>; requiredCredentials: z.ZodOptional; byPollExport: z.ZodRecord & z.core.$partial, z.ZodArray>; alias: z.ZodOptional; credentialRef: z.ZodOptional; id: z.ZodString; }, z.core.$strip>, z.ZodObject<{ type: z.ZodLiteral<"name">; name: z.ZodString; }, z.core.$strip>], "type">>; credentialKeys: z.ZodArray; optionalCredentialKeys: z.ZodOptional>; storedCredentialKeys: z.ZodOptional>; optionalStoredCredentialKeys: z.ZodOptional>; schemaFingerprint: z.ZodOptional; proxy: z.ZodOptional>; hostPatterns: z.ZodOptional>; injection: z.ZodOptional; basicAuth: z.ZodOptional; queryParams: z.ZodOptional; body: z.ZodOptional; }, z.core.$strip>>; }, z.core.$strip>>; needsRawSecret: z.ZodOptional; needsDynamicResolution: z.ZodOptional; dynamicResolutionCacheMs: z.ZodOptional; onCredentialRevoked: z.ZodOptional>; requiredOAuthScopes: z.ZodOptional>; }, z.core.$strip>>>; }, z.core.$strip>>; webhookSecretHash: z.ZodOptional; webhookPublicId: z.ZodOptional; filterSchema: z.ZodOptional>; idempotencyConfig: z.ZodOptional; strategy: z.ZodLiteral<"hash">; }, z.core.$strip>, z.ZodObject<{ from: z.ZodLiteral<"payload">; path: z.ZodString; }, z.core.$strip>, z.ZodObject<{ from: z.ZodLiteral<"header">; strategy: z.ZodLiteral<"hash">; }, z.core.$strip>, z.ZodObject<{ from: z.ZodLiteral<"header">; name: z.ZodString; }, z.core.$strip>]>>; pollStoragePath: z.ZodOptional; pollBundle: z.ZodOptional>; pollExports: z.ZodOptional; }, z.core.$strip>>; }, z.core.$strip>; type TriggerUploadData = z.infer; //#endregion export { TriggerPollExportsSchema as A, WorkflowStepEntrySchema as B, TriggerCredentialRequirements as C, TriggerPollExportName as D, TriggerPollBundleUploadSchema as E, TriggerUploadData as F, hasProjectOrOrganizationScope as G, credentialRefTokenKeyNameRegex as H, TriggerUploadDataSchema as I, WebhookMethod as L, TriggerSourceSchema as M, TriggerType as N, TriggerPollExportNameSchema as O, TriggerTypeSchema as P, WebhookMethodSchema as R, TriggerCredentialRequirementEntrySchema as S, TriggerPollBundleUpload as T, deduplicateCredentialRequirementEntries as U, collectCredentialRequirementEntries as V, getEffectiveCredentialRequirementEntriesForStep as W, OnCredentialRevoked as _, CredentialRequirementsSchema as a, ResolvedCredentialSetSchema as b, ExecutionIdentityPolicy as c, IdempotencyKeyConfigSchema as d, IntegrationCredentialRef as f, IntegrationScopeValues as g, IntegrationScopeSchema as h, CredentialRequirements as i, TriggerSource as j, TriggerPollExports as k, ExecutionIdentityPolicySchema as l, IntegrationScope as m, CredentialRequirementEntry as n, DeclaredCredentialRequirement as o, IntegrationCredentialRefSchema as p, CredentialRequirementEntrySchema as r, DeclaredCredentialRequirementSchema as s, CredentialRefTokenKeyNameSchema as t, IdempotencyKeyConfig as u, OnCredentialRevokedSchema as v, TriggerCredentialRequirementsSchema as w, TriggerCredentialRequirementEntry as x, ResolvedCredentialSet as y, WorkflowStepEntry as z };