cadenya 0.46.0 → 0.48.0

data/rbi/cadenya/models/api_key_enable_params.rbi

@@ -0,0 +1,43 @@
+# typed: strong
+
+module Cadenya
+  module Models
+    class APIKeyEnableParams < Cadenya::Internal::Type::BaseModel
+      extend Cadenya::Internal::Type::RequestParameters::Converter
+      include Cadenya::Internal::Type::RequestParameters
+
+      OrHash =
+        T.type_alias do
+          T.any(Cadenya::APIKeyEnableParams, Cadenya::Internal::AnyHash)
+        end
+
+      sig { returns(String) }
+      attr_accessor :workspace_id
+
+      sig { returns(String) }
+      attr_accessor :id
+
+      sig do
+        params(
+          workspace_id: String,
+          id: String,
+          request_options: Cadenya::RequestOptions::OrHash
+        ).returns(T.attached_class)
+      end
+      def self.new(workspace_id:, id:, request_options: {})
+      end
+
+      sig do
+        override.returns(
+          {
+            workspace_id: String,
+            id: String,
+            request_options: Cadenya::RequestOptions
+          }
+        )
+      end
+      def to_hash
+      end
+    end
+  end
+end

data/rbi/cadenya/models/api_key_info.rbi

@@ -15,54 +15,18 @@ module Cadenya
       sig { params(created_by: Cadenya::Profile::OrHash).void }
       attr_writer :created_by
 
-      # Up to a small number of workspaces this key has access to, intended for display
-      # ("Workspace 1, Workspace 2, and 4 more"). Use ListAPIKeyWorkspaces for the full
-      # paginated list.
-      sig { returns(T.nilable(T::Array[Cadenya::BareMetadata])) }
-      attr_reader :workspaces_preview
-
-      sig do
-        params(workspaces_preview: T::Array[Cadenya::BareMetadata::OrHash]).void
-      end
-      attr_writer :workspaces_preview
-
-      # Total number of workspaces this key has access to.
-      sig { returns(T.nilable(Integer)) }
-      attr_reader :workspaces_total
-
-      sig { params(workspaces_total: Integer).void }
-      attr_writer :workspaces_total
-
       sig do
-        params(
-          created_by: Cadenya::Profile::OrHash,
-          workspaces_preview: T::Array[Cadenya::BareMetadata::OrHash],
-          workspaces_total: Integer
-        ).returns(T.attached_class)
+        params(created_by: Cadenya::Profile::OrHash).returns(T.attached_class)
       end
       def self.new(
         # A profile identifies a user or non-human principal (such as an API key) at the
         # account level. Profiles are account-scoped and can be granted access to multiple
         # workspaces.
-        created_by: nil,
-        # Up to a small number of workspaces this key has access to, intended for display
-        # ("Workspace 1, Workspace 2, and 4 more"). Use ListAPIKeyWorkspaces for the full
-        # paginated list.
-        workspaces_preview: nil,
-        # Total number of workspaces this key has access to.
-        workspaces_total: nil
+        created_by: nil
       )
       end
 
-      sig do
-        override.returns(
-          {
-            created_by: Cadenya::Profile,
-            workspaces_preview: T::Array[Cadenya::BareMetadata],
-            workspaces_total: Integer
-          }
-        )
-      end
+      sig { override.returns({ created_by: Cadenya::Profile }) }
       def to_hash
       end
     end

data/rbi/cadenya/models/api_key_list_params.rbi

@@ -11,6 +11,9 @@ module Cadenya
           T.any(Cadenya::APIKeyListParams, Cadenya::Internal::AnyHash)
         end
 
+      sig { returns(String) }
+      attr_accessor :workspace_id
+
       # Pagination cursor from previous response.
       sig { returns(T.nilable(String)) }
       attr_reader :cursor
@@ -65,6 +68,7 @@ module Cadenya
 
       sig do
         params(
+          workspace_id: String,
           cursor: String,
           include_info: T::Boolean,
           labels: String,
@@ -76,6 +80,7 @@ module Cadenya
         ).returns(T.attached_class)
       end
       def self.new(
+        workspace_id:,
         # Pagination cursor from previous response.
         cursor: nil,
         # When true, included info fields are populated. Requests with this flag count
@@ -100,6 +105,7 @@ module Cadenya
       sig do
         override.returns(
           {
+            workspace_id: String,
             cursor: String,
             include_info: T::Boolean,
             labels: String,

data/rbi/cadenya/models/api_key_retrieve_params.rbi

@@ -11,21 +11,29 @@ module Cadenya
           T.any(Cadenya::APIKeyRetrieveParams, Cadenya::Internal::AnyHash)
         end
 
+      sig { returns(String) }
+      attr_accessor :workspace_id
+
       sig { returns(String) }
       attr_accessor :id
 
       sig do
         params(
+          workspace_id: String,
           id: String,
           request_options: Cadenya::RequestOptions::OrHash
         ).returns(T.attached_class)
       end
-      def self.new(id:, request_options: {})
+      def self.new(workspace_id:, id:, request_options: {})
       end
 
       sig do
         override.returns(
-          { id: String, request_options: Cadenya::RequestOptions }
+          {
+            workspace_id: String,
+            id: String,
+            request_options: Cadenya::RequestOptions
+          }
         )
       end
       def to_hash

data/rbi/cadenya/models/api_key_rotate_params.rbi

@@ -11,21 +11,29 @@ module Cadenya
           T.any(Cadenya::APIKeyRotateParams, Cadenya::Internal::AnyHash)
         end
 
+      sig { returns(String) }
+      attr_accessor :workspace_id
+
       sig { returns(String) }
       attr_accessor :id
 
       sig do
         params(
+          workspace_id: String,
           id: String,
           request_options: Cadenya::RequestOptions::OrHash
         ).returns(T.attached_class)
       end
-      def self.new(id:, request_options: {})
+      def self.new(workspace_id:, id:, request_options: {})
       end
 
       sig do
         override.returns(
-          { id: String, request_options: Cadenya::RequestOptions }
+          {
+            workspace_id: String,
+            id: String,
+            request_options: Cadenya::RequestOptions
+          }
         )
       end
       def to_hash

data/rbi/cadenya/models/api_key_spec.rbi

@@ -37,7 +37,7 @@ module Cadenya
       sig { params(token: String).void }
       attr_writer :token
 
-      # True when this key is managed by the system (e.g. the auto-provisioned global
+      # True when this key is managed by the system (i.e. the auto-provisioned global
       # account key). System keys cannot be deleted but can be rotated.
       sig { returns(T.nilable(T::Boolean)) }
       attr_reader :system_
@@ -71,7 +71,7 @@ module Cadenya
         # Scopes are deny-by-default: a key with an empty list can call only scope-free
         # endpoints. Full access is always an explicit "\*" grant.
         permissions: nil,
-        # True when this key is managed by the system (e.g. the auto-provisioned global
+        # True when this key is managed by the system (i.e. the auto-provisioned global
         # account key). System keys cannot be deleted but can be rotated.
         system_: nil
       )

data/rbi/cadenya/models/api_key_update_params.rbi

@@ -11,6 +11,9 @@ module Cadenya
           T.any(Cadenya::APIKeyUpdateParams, Cadenya::Internal::AnyHash)
         end
 
+      sig { returns(String) }
+      attr_accessor :workspace_id
+
       sig { returns(String) }
       attr_accessor :id
 
@@ -41,6 +44,7 @@ module Cadenya
 
       sig do
         params(
+          workspace_id: String,
           id: String,
           metadata: Cadenya::APIKeyUpdateParams::Metadata::OrHash,
           spec: Cadenya::APIKeySpec::OrHash,
@@ -49,6 +53,7 @@ module Cadenya
         ).returns(T.attached_class)
       end
       def self.new(
+        workspace_id:,
         id:,
         # UpdateAccountResourceMetadata contains the user-provided fields for updating an
         # account-scoped resource. Read-only fields (id, account_id, profile_id) are
@@ -65,6 +70,7 @@ module Cadenya
       sig do
         override.returns(
           {
+            workspace_id: String,
             id: String,
             metadata: Cadenya::APIKeyUpdateParams::Metadata,
             spec: Cadenya::APIKeySpec,

data/rbi/cadenya/models/global_api_key_disable_params.rbi

@@ -0,0 +1,27 @@
+# typed: strong
+
+module Cadenya
+  module Models
+    class GlobalAPIKeyDisableParams < Cadenya::Internal::Type::BaseModel
+      extend Cadenya::Internal::Type::RequestParameters::Converter
+      include Cadenya::Internal::Type::RequestParameters
+
+      OrHash =
+        T.type_alias do
+          T.any(Cadenya::GlobalAPIKeyDisableParams, Cadenya::Internal::AnyHash)
+        end
+
+      sig do
+        params(request_options: Cadenya::RequestOptions::OrHash).returns(
+          T.attached_class
+        )
+      end
+      def self.new(request_options: {})
+      end
+
+      sig { override.returns({ request_options: Cadenya::RequestOptions }) }
+      def to_hash
+      end
+    end
+  end
+end

data/rbi/cadenya/models/global_api_key_enable_params.rbi

@@ -0,0 +1,27 @@
+# typed: strong
+
+module Cadenya
+  module Models
+    class GlobalAPIKeyEnableParams < Cadenya::Internal::Type::BaseModel
+      extend Cadenya::Internal::Type::RequestParameters::Converter
+      include Cadenya::Internal::Type::RequestParameters
+
+      OrHash =
+        T.type_alias do
+          T.any(Cadenya::GlobalAPIKeyEnableParams, Cadenya::Internal::AnyHash)
+        end
+
+      sig do
+        params(request_options: Cadenya::RequestOptions::OrHash).returns(
+          T.attached_class
+        )
+      end
+      def self.new(request_options: {})
+      end
+
+      sig { override.returns({ request_options: Cadenya::RequestOptions }) }
+      def to_hash
+      end
+    end
+  end
+end

data/rbi/cadenya/models/global_api_key_retrieve_params.rbi

@@ -0,0 +1,27 @@
+# typed: strong
+
+module Cadenya
+  module Models
+    class GlobalAPIKeyRetrieveParams < Cadenya::Internal::Type::BaseModel
+      extend Cadenya::Internal::Type::RequestParameters::Converter
+      include Cadenya::Internal::Type::RequestParameters
+
+      OrHash =
+        T.type_alias do
+          T.any(Cadenya::GlobalAPIKeyRetrieveParams, Cadenya::Internal::AnyHash)
+        end
+
+      sig do
+        params(request_options: Cadenya::RequestOptions::OrHash).returns(
+          T.attached_class
+        )
+      end
+      def self.new(request_options: {})
+      end
+
+      sig { override.returns({ request_options: Cadenya::RequestOptions }) }
+      def to_hash
+      end
+    end
+  end
+end

data/rbi/cadenya/models/global_api_key_rotate_params.rbi

@@ -0,0 +1,27 @@
+# typed: strong
+
+module Cadenya
+  module Models
+    class GlobalAPIKeyRotateParams < Cadenya::Internal::Type::BaseModel
+      extend Cadenya::Internal::Type::RequestParameters::Converter
+      include Cadenya::Internal::Type::RequestParameters
+
+      OrHash =
+        T.type_alias do
+          T.any(Cadenya::GlobalAPIKeyRotateParams, Cadenya::Internal::AnyHash)
+        end
+
+      sig do
+        params(request_options: Cadenya::RequestOptions::OrHash).returns(
+          T.attached_class
+        )
+      end
+      def self.new(request_options: {})
+      end
+
+      sig { override.returns({ request_options: Cadenya::RequestOptions }) }
+      def to_hash
+      end
+    end
+  end
+end

data/rbi/cadenya/models.rbi

@@ -63,6 +63,10 @@ module Cadenya
 
   APIKeyDeleteParams = Cadenya::Models::APIKeyDeleteParams
 
+  APIKeyDisableParams = Cadenya::Models::APIKeyDisableParams
+
+  APIKeyEnableParams = Cadenya::Models::APIKeyEnableParams
+
   APIKeyInfo = Cadenya::Models::APIKeyInfo
 
   APIKeyListParams = Cadenya::Models::APIKeyListParams
@@ -71,8 +75,6 @@ module Cadenya
 
   APIKeyRotateParams = Cadenya::Models::APIKeyRotateParams
 
-  APIKeys = Cadenya::Models::APIKeys
-
   APIKeySpec = Cadenya::Models::APIKeySpec
 
   APIKeyUpdateParams = Cadenya::Models::APIKeyUpdateParams
@@ -97,6 +99,14 @@ module Cadenya
 
   CreateResourceMetadata = Cadenya::Models::CreateResourceMetadata
 
+  GlobalAPIKeyDisableParams = Cadenya::Models::GlobalAPIKeyDisableParams
+
+  GlobalAPIKeyEnableParams = Cadenya::Models::GlobalAPIKeyEnableParams
+
+  GlobalAPIKeyRetrieveParams = Cadenya::Models::GlobalAPIKeyRetrieveParams
+
+  GlobalAPIKeyRotateParams = Cadenya::Models::GlobalAPIKeyRotateParams
+
   MemoryLayer = Cadenya::Models::MemoryLayer
 
   MemoryLayerCreateParams = Cadenya::Models::MemoryLayerCreateParams

data/rbi/cadenya/resources/api_keys.rbi

@@ -2,34 +2,28 @@
 
 module Cadenya
   module Resources
-    # Issue, rotate, and revoke API keys for the account, and grant or revoke each
-    # key's access to individual workspaces.
+    # Issue, rotate, disable, and revoke a workspace's API keys. Every key belongs to
+    # exactly one workspace; the system-managed global account key is managed via
+    # GlobalAPIKeyService instead.
     class APIKeys
-      # Issue, rotate, and revoke API keys for the account, and grant or revoke each
-      # key's access to individual workspaces.
-      sig { returns(Cadenya::Resources::APIKeys::Access) }
-      attr_reader :access
-
-      # Creates a new API key on the account. Optionally grants the key access to one or
-      # more workspaces via initial_workspace_ids.
+      # Creates a new API key in the workspace.
       sig do
         params(
+          workspace_id: String,
           metadata: Cadenya::APIKeyCreateParams::Metadata::OrHash,
           spec: Cadenya::APIKeySpec::OrHash,
-          initial_workspace_ids: T::Array[String],
           request_options: Cadenya::RequestOptions::OrHash
         ).returns(Cadenya::APIKey)
       end
       def create(
+        # The workspace this API key belongs to (path).
+        workspace_id,
         # CreateAccountResourceMetadata contains the user-provided fields for creating an
         # account-scoped resource. Read-only fields (id, account_id, profile_id) are
         # excluded since they are set by the server.
         metadata:,
         # Configuration for an API key.
         spec:,
-        # Workspaces this API key will have access to on creation. Optional — a key can be
-        # created with no workspace access and granted later via AddAPIKeyWorkspace.
-        initial_workspace_ids: nil,
         request_options: {}
       )
       end
@@ -38,12 +32,15 @@ module Cadenya
       sig do
         params(
           id: String,
+          workspace_id: String,
           request_options: Cadenya::RequestOptions::OrHash
         ).returns(Cadenya::APIKey)
       end
       def retrieve(
         # The API key to retrieve.
         id,
+        # The workspace the API key belongs to (path).
+        workspace_id:,
         request_options: {}
       )
       end
@@ -52,6 +49,7 @@ module Cadenya
       sig do
         params(
           id: String,
+          workspace_id: String,
           metadata: Cadenya::APIKeyUpdateParams::Metadata::OrHash,
           spec: Cadenya::APIKeySpec::OrHash,
           update_mask: String,
@@ -59,23 +57,26 @@ module Cadenya
         ).returns(Cadenya::APIKey)
       end
       def update(
-        # The API key to update.
+        # Path param: The API key to update.
         id,
-        # UpdateAccountResourceMetadata contains the user-provided fields for updating an
-        # account-scoped resource. Read-only fields (id, account_id, profile_id) are
-        # excluded since they are set by the server.
+        # Path param: The workspace the API key belongs to (path).
+        workspace_id:,
+        # Body param: UpdateAccountResourceMetadata contains the user-provided fields for
+        # updating an account-scoped resource. Read-only fields (id, account_id,
+        # profile_id) are excluded since they are set by the server.
         metadata: nil,
-        # Configuration for an API key.
+        # Body param: Configuration for an API key.
         spec: nil,
-        # Fields to update.
+        # Body param: Fields to update.
         update_mask: nil,
         request_options: {}
       )
       end
 
-      # Lists all API keys on the account.
+      # Lists the workspace's API keys.
       sig do
         params(
+          workspace_id: String,
           cursor: String,
           include_info: T::Boolean,
           labels: String,
@@ -87,6 +88,8 @@ module Cadenya
         ).returns(Cadenya::Internal::CursorPagination[Cadenya::APIKey])
       end
       def list(
+        # The workspace whose API keys will be listed (path).
+        workspace_id,
         # Pagination cursor from previous response.
         cursor: nil,
         # When true, included info fields are populated. Requests with this flag count
@@ -112,12 +115,50 @@ module Cadenya
       sig do
         params(
           id: String,
+          workspace_id: String,
           request_options: Cadenya::RequestOptions::OrHash
         ).void
       end
       def delete(
         # The API key to delete.
         id,
+        # The workspace the API key belongs to (path).
+        workspace_id:,
+        request_options: {}
+      )
+      end
+
+      # Disables an API key. While disabled, presenting the key's token fails
+      # authentication on every endpoint; the key is retained. Idempotent.
+      sig do
+        params(
+          id: String,
+          workspace_id: String,
+          request_options: Cadenya::RequestOptions::OrHash
+        ).returns(Cadenya::APIKey)
+      end
+      def disable(
+        # The API key to disable.
+        id,
+        # The workspace the API key belongs to (path).
+        workspace_id:,
+        request_options: {}
+      )
+      end
+
+      # Re-enables a disabled API key so its token authenticates again. Idempotent.
+      sig do
+        params(
+          id: String,
+          workspace_id: String,
+          request_options: Cadenya::RequestOptions::OrHash
+        ).returns(Cadenya::APIKey)
+      end
+      def enable(
+        # The API key to enable.
+        id,
+        # The workspace the API key belongs to (path).
+        workspace_id:,
         request_options: {}
       )
       end
@@ -127,6 +168,7 @@ module Cadenya
       sig do
         params(
           id: String,
+          workspace_id: String,
           request_options: Cadenya::RequestOptions::OrHash
         ).returns(Cadenya::APIKey)
       end
@@ -134,6 +176,8 @@ module Cadenya
         # The API key to rotate. A new token is issued and any existing token is
         # invalidated.
         id,
+        # The workspace the API key belongs to (path).
+        workspace_id:,
         request_options: {}
       )
       end

data/rbi/cadenya/resources/global_api_key.rbi

@@ -0,0 +1,55 @@
+# typed: strong
+
+module Cadenya
+  module Resources
+    # Manage the account's system-provisioned global API key. The global key is the
+    # only key that spans every workspace; it is created by the system and cannot be
+    # deleted, so the surface is retrieve, rotate, and the disable/enable kill switch.
+    class GlobalAPIKey
+      # Retrieves the account's global API key. The token is included only when the
+      # caller's scopes dominate the key's.
+      sig do
+        params(request_options: Cadenya::RequestOptions::OrHash).returns(
+          Cadenya::APIKey
+        )
+      end
+      def retrieve(request_options: {})
+      end
+
+      # Disables the global API key. While disabled, presenting its token fails
+      # authentication on every endpoint; the key is retained. Idempotent.
+      sig do
+        params(request_options: Cadenya::RequestOptions::OrHash).returns(
+          Cadenya::APIKey
+        )
+      end
+      def disable(request_options: {})
+      end
+
+      # Re-enables the disabled global API key so its token authenticates again.
+      # Idempotent.
+      sig do
+        params(request_options: Cadenya::RequestOptions::OrHash).returns(
+          Cadenya::APIKey
+        )
+      end
+      def enable(request_options: {})
+      end
+
+      # Rotates the global API key and returns a new token. All previous tokens are
+      # invalidated.
+      sig do
+        params(request_options: Cadenya::RequestOptions::OrHash).returns(
+          Cadenya::APIKey
+        )
+      end
+      def rotate(request_options: {})
+      end
+
+      # @api private
+      sig { params(client: Cadenya::Client).returns(T.attached_class) }
+      def self.new(client:)
+      end
+    end
+  end
+end

data/sig/cadenya/client.rbs

@@ -34,6 +34,8 @@ module Cadenya
 
     attr_reader api_keys: Cadenya::Resources::APIKeys
 
+    attr_reader global_api_key: Cadenya::Resources::GlobalAPIKey
+
     attr_reader workspace_secrets: Cadenya::Resources::WorkspaceSecrets
 
     attr_reader workspaces: Cadenya::Resources::Workspaces

data/sig/cadenya/models/api_key.rbs

@@ -4,6 +4,7 @@ module Cadenya
       {
         metadata: Cadenya::AccountResourceMetadata,
         spec: Cadenya::APIKeySpec,
+        state: Cadenya::Models::APIKey::state,
         info: Cadenya::APIKeyInfo
       }
 
@@ -16,17 +17,33 @@ module Cadenya
 
       def info=: (Cadenya::APIKeyInfo) -> Cadenya::APIKeyInfo
 
+      attr_accessor state: Cadenya::Models::APIKey::state
+
       def initialize: (
         metadata: Cadenya::AccountResourceMetadata,
         spec: Cadenya::APIKeySpec,
+        state: Cadenya::Models::APIKey::state,
         ?info: Cadenya::APIKeyInfo
       ) -> void
 
       def to_hash: -> {
         metadata: Cadenya::AccountResourceMetadata,
         spec: Cadenya::APIKeySpec,
+        state: Cadenya::Models::APIKey::state,
         info: Cadenya::APIKeyInfo
       }
+
+      type state = :STATE_UNSPECIFIED | :STATE_ENABLED | :STATE_DISABLED
+
+      module State
+        extend Cadenya::Internal::Type::Enum
+
+        STATE_UNSPECIFIED: :STATE_UNSPECIFIED
+        STATE_ENABLED: :STATE_ENABLED
+        STATE_DISABLED: :STATE_DISABLED
+
+        def self?.values: -> ::Array[Cadenya::Models::APIKey::state]
+      end
     end
   end
 end