noresponse 8.4.0 → 9.0.0

data/lib/no_response/models/shared/inviterequest_denied_action.rb

@@ -0,0 +1,17 @@
+# typed: true
+# frozen_string_literal: true
+
+module NoResponse
+  module Models
+    module Shared
+
+      class InviteRequestDeniedAction < T::Enum
+        enums do
+          EVIDENCE_READ = new("evidence.read")
+          EXPORTS_READ = new("exports.read")
+          POLICY_PUBLISH = new("policy.publish")
+        end
+      end
+    end
+  end
+end

data/lib/no_response/models/shared/inviterequest_denied_action.rbi

@@ -0,0 +1,9 @@
+# typed: true
+# frozen_string_literal: true
+
+class NoResponse::Models::Shared::InviteRequestDeniedAction
+  extend ::Crystalline::MetadataFields::ClassMethods
+end
+
+class NoResponse::Models::Shared::InviteRequestDeniedAction
+end

data/lib/no_response/models/shared/inviterequest_environment.rb

@@ -0,0 +1,16 @@
+# typed: true
+# frozen_string_literal: true
+
+module NoResponse
+  module Models
+    module Shared
+
+      class InviteRequestEnvironment < T::Enum
+        enums do
+          LIVE = new("live")
+          TEST = new("test")
+        end
+      end
+    end
+  end
+end

data/lib/no_response/models/shared/inviterequest_environment.rbi

@@ -0,0 +1,9 @@
+# typed: true
+# frozen_string_literal: true
+
+class NoResponse::Models::Shared::InviteRequestEnvironment
+  extend ::Crystalline::MetadataFields::ClassMethods
+end
+
+class NoResponse::Models::Shared::InviteRequestEnvironment
+end

data/lib/no_response/models/shared/inviteresendrequest.rb

@@ -0,0 +1,23 @@
+# typed: true
+# frozen_string_literal: true
+
+module NoResponse
+  module Models
+    module Shared
+
+      class InviteResendRequest
+        extend T::Sig
+        include Crystalline::MetadataFields
+
+        def initialize
+        end
+
+        sig { params(other: T.untyped).returns(T::Boolean) }
+        def ==(other)
+          return false unless other.is_a?(self.class)
+          true
+        end
+      end
+    end
+  end
+end

data/lib/no_response/models/shared/inviteresendrequest.rbi

@@ -0,0 +1,9 @@
+# typed: true
+# frozen_string_literal: true
+
+class NoResponse::Models::Shared::InviteResendRequest
+  extend ::Crystalline::MetadataFields::ClassMethods
+end
+
+class NoResponse::Models::Shared::InviteResendRequest
+end

data/lib/no_response/models/shared/key.rb

@@ -65,7 +65,7 @@ module NoResponse
           Crystalline::Nilable.new(::String),
           {'format_json': {'letter_case': ::NoResponse::Utils.field_name("created_by")}}
         )
-        # When a rotated key stops authenticating (POST /v1/keys/rotate). Absent for a key with no end.
+        # The earlier of the explicit lifetime and any rotation overlap. Rotation preserves the original lifetime.
         field(
           :expires_at,
           Crystalline::Nilable.new(::String),
@@ -89,6 +89,47 @@ module NoResponse
           Crystalline::Nilable.new(::String),
           {'format_json': {'letter_case': ::NoResponse::Utils.field_name("key")}}
         )
+        # The optional display name supplied for this API key. Preserved on rotation.
+        field(
+          :name,
+          Crystalline::Nilable.new(::String),
+          {'format_json': {'letter_case': ::NoResponse::Utils.field_name("name")}}
+        )
+        # Optional operational purpose, at most 200 printable characters without leading or trailing whitespace. Do not put secrets or personal data here. Preserved on rotation and included in the creation request fingerprint; omitted for older credentials.
+        field(
+          :purpose,
+          Crystalline::Nilable.new(::String),
+          {'format_json': {'letter_case': ::NoResponse::Utils.field_name("purpose")}}
+        )
+
+        field(
+          :kind,
+          Crystalline::Nilable.new(Models::Shared::KeyKind),
+          {
+            'format_json': {
+              'letter_case': ::NoResponse::Utils.field_name("kind"),
+              'decoder': ::NoResponse::Utils.open_enum_from_string(Models::Shared::KeyKind, true)
+            }
+          }
+        )
+        # The issuing member's external identity for a personal key. Personal ownership is fixed and the key is revoked when that member loses authority. Service keys belong to the workspace and omit this field.
+        field(
+          :owner_user_id,
+          Crystalline::Nilable.new(::String),
+          {'format_json': {'letter_case': ::NoResponse::Utils.field_name("owner_user_id")}}
+        )
+        # Replacement public key identifier, or legacy when the successor predates recorded lineage. This field excludes the secret.
+        field(
+          :rotated_to,
+          Crystalline::Nilable.new(::String),
+          {'format_json': {'letter_case': ::NoResponse::Utils.field_name("rotated_to")}}
+        )
+        # Latest recorded authenticated request observation, updated at most once per minute. Capture is best effort after the response and includes authenticated requests refused by authorization or rate limits. Absence means unknown and does not prove the key was unused. It is independent of diagnostic retention and resets on the replacement key after rotation. This field retains no raw IP or user-agent.
+        field(
+          :last_used_at,
+          Crystalline::Nilable.new(::String),
+          {'format_json': {'letter_case': ::NoResponse::Utils.field_name("last_used_at")}}
+        )
 
         sig {
           params(
@@ -103,7 +144,13 @@ module NoResponse
             expires_at: T.nilable(::String),
             revoked_at: T.nilable(::String),
             revoked_by: T.nilable(::String),
-            key: T.nilable(::String)
+            key: T.nilable(::String),
+            name: T.nilable(::String),
+            purpose: T.nilable(::String),
+            kind: T.nilable(Models::Shared::KeyKind),
+            owner_user_id: T.nilable(::String),
+            rotated_to: T.nilable(::String),
+            last_used_at: T.nilable(::String)
           )
             .void
         }
@@ -119,7 +166,13 @@ module NoResponse
           expires_at: nil,
           revoked_at: nil,
           revoked_by: nil,
-          key: nil
+          key: nil,
+          name: nil,
+          purpose: nil,
+          kind: nil,
+          owner_user_id: nil,
+          rotated_to: nil,
+          last_used_at: nil
         )
           @id = id
           @workspace_id = workspace_id
@@ -133,6 +186,12 @@ module NoResponse
           @revoked_at = revoked_at
           @revoked_by = revoked_by
           @key = key
+          @name = name
+          @purpose = purpose
+          @kind = kind
+          @owner_user_id = owner_user_id
+          @rotated_to = rotated_to
+          @last_used_at = last_used_at
         end
 
         sig { params(other: T.untyped).returns(T::Boolean) }
@@ -150,6 +209,12 @@ module NoResponse
           return false unless @revoked_at == other.revoked_at
           return false unless @revoked_by == other.revoked_by
           return false unless @key == other.key
+          return false unless @name == other.name
+          return false unless @purpose == other.purpose
+          return false unless @kind == other.kind
+          return false unless @owner_user_id == other.owner_user_id
+          return false unless @rotated_to == other.rotated_to
+          return false unless @last_used_at == other.last_used_at
           true
         end
       end

data/lib/no_response/models/shared/key.rbi

@@ -77,4 +77,40 @@ class NoResponse::Models::Shared::Key
 
   def key=(str_)
   end
+
+  def name
+  end
+
+  def name=(str_)
+  end
+
+  def purpose
+  end
+
+  def purpose=(str_)
+  end
+
+  def kind
+  end
+
+  def kind=(str_)
+  end
+
+  def owner_user_id
+  end
+
+  def owner_user_id=(str_)
+  end
+
+  def rotated_to
+  end
+
+  def rotated_to=(str_)
+  end
+
+  def last_used_at
+  end
+
+  def last_used_at=(str_)
+  end
 end

data/lib/no_response/models/shared/key_scope.rb

@@ -15,6 +15,16 @@ module NoResponse
           DETAILED = new("detailed")
           INTEGRATIONS = new("integrations")
           MANAGEMENT = new("management")
+          AUDIT = new("audit")
+          USAGE = new("usage")
+          INVESTIGATE = new("investigate")
+          EVIDENCE = new("evidence")
+          EXPORTS = new("exports")
+          AUDIT_MANAGE = new("audit_manage")
+          SETTINGS = new("settings")
+          POLICY_PUBLISH = new("policy_publish")
+          MEMBERS = new("members")
+          MEMBERS_MANAGE = new("members_manage")
         end
 
         open!

data/lib/no_response/models/shared/keyactor.rb

@@ -0,0 +1,41 @@
+# typed: true
+# frozen_string_literal: true
+
+module NoResponse
+  module Models
+    module Shared
+
+      class KeyActor
+        extend T::Sig
+        include Crystalline::MetadataFields
+
+        # The public id of the workspace API key that made the change.
+        field(
+          :key_id,
+          ::String,
+          {'format_json': {'letter_case': ::NoResponse::Utils.field_name("key_id"), required: true}}
+        )
+
+        field :type, ::String, {'format_json': {'letter_case': ::NoResponse::Utils.field_name("type"), required: true}}
+
+        sig { params(key_id: ::String, type: ::String).void }
+        def initialize(key_id:, type: "api_key")
+          @key_id = key_id
+          unless type == "api_key"
+            raise ArgumentError, "Invalid value for type"
+          end
+
+          @type = "api_key"
+        end
+
+        sig { params(other: T.untyped).returns(T::Boolean) }
+        def ==(other)
+          return false unless other.is_a?(self.class)
+          return false unless @key_id == other.key_id
+          return false unless @type == other.type
+          true
+        end
+      end
+    end
+  end
+end

data/lib/no_response/models/shared/keyactor.rbi

@@ -0,0 +1,20 @@
+# typed: true
+# frozen_string_literal: true
+
+class NoResponse::Models::Shared::KeyActor
+  extend ::Crystalline::MetadataFields::ClassMethods
+end
+
+class NoResponse::Models::Shared::KeyActor
+  def key_id
+  end
+
+  def key_id=(str_)
+  end
+
+  def type
+  end
+
+  def type=(str_)
+  end
+end

data/lib/no_response/models/shared/keykind.rb

@@ -0,0 +1,19 @@
+# typed: true
+# frozen_string_literal: true
+
+module NoResponse
+  module Models
+    module Shared
+
+      class KeyKind
+        include ::Crystalline::Enum
+        enums do
+          SERVICE = new("service")
+          PERSONAL = new("personal")
+        end
+
+        open!
+      end
+    end
+  end
+end

data/lib/no_response/models/shared/keykind.rbi

@@ -0,0 +1,9 @@
+# typed: true
+# frozen_string_literal: true
+
+class NoResponse::Models::Shared::KeyKind
+  extend ::Crystalline::MetadataFields::ClassMethods
+end
+
+class NoResponse::Models::Shared::KeyKind
+end

data/lib/no_response/models/shared/keyrequest.rb

@@ -4,7 +4,7 @@
 module NoResponse
   module Models
     module Shared
-      # POST /v1/workspaces/{workspace_id}/keys body. Creates an API key in one environment of the workspace with the scopes named, and returns its secret once. A live key needs the admin or owner role; a test key needs developer or above. An API key with the management scope creates keys in its own environment with scopes it holds itself. Each scope may appear once.
+      # Creates a key whose scopes are bounded by the issuer capabilities in this environment. Delete is owner-only. A service key outlives its creator; a personal key belongs to the authenticated member and is revoked on membership or authority changes. request_id deduplicates creation: retry returns 200 metadata without the secret; changed parameters answer 409. Team scopes members and members_manage are explicitly workspace-wide, live-only, and delegated by a current full owner. Personal credentials cannot hold management or members_manage. Legacy management includes policy publication; use settings without policy_publish for configuration preparation and retention-only edits.
       class KeyRequest
         extend T::Sig
         include Crystalline::MetadataFields
@@ -27,13 +27,62 @@ module NoResponse
           Crystalline::Array.new(Models::Shared::KeyRequestScope),
           {'format_json': {'letter_case': ::NoResponse::Utils.field_name("scopes"), required: true}}
         )
+        # Optional display name for this API key, at most 100 printable characters. Preserved on rotation.
+        field(
+          :name,
+          Crystalline::Nilable.new(::String),
+          {'format_json': {'letter_case': ::NoResponse::Utils.field_name("name")}}
+        )
+        # Optional operational purpose, at most 200 printable characters without leading or trailing whitespace. Do not put secrets or personal data here. Preserved on rotation and included in the creation request fingerprint; omitted for older credentials.
+        field(
+          :purpose,
+          Crystalline::Nilable.new(::String),
+          {'format_json': {'letter_case': ::NoResponse::Utils.field_name("purpose")}}
+        )
+
+        field(
+          :kind,
+          Crystalline::Nilable.new(Models::Shared::KeyKind),
+          {
+            'format_json': {
+              'letter_case': ::NoResponse::Utils.field_name("kind"),
+              'decoder': ::NoResponse::Utils.open_enum_from_string(Models::Shared::KeyKind, true)
+            }
+          }
+        )
+        # Between one minute and 365 days from now.
+        field(
+          :expires_at,
+          Crystalline::Nilable.new(::String),
+          {'format_json': {'letter_case': ::NoResponse::Utils.field_name("expires_at")}}
+        )
+        # Caller-chosen identifier for one creation attempt, scoped to the issuing actor and environment. Use 1 to 256 printable ASCII characters without spaces. A retry with the same parameters returns the original key metadata with status 200 and no secret; changed parameters return 409.
+        field(
+          :request_id,
+          Crystalline::Nilable.new(::String),
+          {'format_json': {'letter_case': ::NoResponse::Utils.field_name("request_id")}}
+        )
 
         sig {
-          params(environment: Models::Shared::KeyEnvironment, scopes: T::Array[Models::Shared::KeyRequestScope]).void
+          params(
+            environment: Models::Shared::KeyEnvironment,
+            scopes: T::Array[Models::Shared::KeyRequestScope],
+            name: T.nilable(::String),
+            purpose: T.nilable(::String),
+            kind: T.nilable(Models::Shared::KeyKind),
+            expires_at: T.nilable(::String),
+            request_id: T.nilable(::String)
+          )
+            .void
         }
-        def initialize(environment:, scopes:)
+        def initialize(environment:, scopes:, name: nil, purpose: nil, kind: nil, expires_at: nil, request_id: nil)
           @environment = environment
           @scopes = scopes
+          @name = name
+          @purpose = purpose
+          @kind = kind
+          @expires_at = expires_at
+          @request_id = request_id
         end
 
         sig { params(other: T.untyped).returns(T::Boolean) }
@@ -41,6 +90,11 @@ module NoResponse
           return false unless other.is_a?(self.class)
           return false unless @environment == other.environment
           return false unless @scopes == other.scopes
+          return false unless @name == other.name
+          return false unless @purpose == other.purpose
+          return false unless @kind == other.kind
+          return false unless @expires_at == other.expires_at
+          return false unless @request_id == other.request_id
           true
         end
       end

data/lib/no_response/models/shared/keyrequest.rbi

@@ -17,4 +17,34 @@ class NoResponse::Models::Shared::KeyRequest
 
   def scopes=(str_)
   end
+
+  def name
+  end
+
+  def name=(str_)
+  end
+
+  def purpose
+  end
+
+  def purpose=(str_)
+  end
+
+  def kind
+  end
+
+  def kind=(str_)
+  end
+
+  def expires_at
+  end
+
+  def expires_at=(str_)
+  end
+
+  def request_id
+  end
+
+  def request_id=(str_)
+  end
 end

data/lib/no_response/models/shared/keyrequest_scope.rb

@@ -14,6 +14,16 @@ module NoResponse
           DETAILED = new("detailed")
           INTEGRATIONS = new("integrations")
           MANAGEMENT = new("management")
+          AUDIT = new("audit")
+          USAGE = new("usage")
+          INVESTIGATE = new("investigate")
+          EVIDENCE = new("evidence")
+          EXPORTS = new("exports")
+          AUDIT_MANAGE = new("audit_manage")
+          SETTINGS = new("settings")
+          POLICY_PUBLISH = new("policy_publish")
+          MEMBERS = new("members")
+          MEMBERS_MANAGE = new("members_manage")
         end
       end
     end

data/lib/no_response/models/shared/listbulkrequest.rb

@@ -0,0 +1,42 @@
+# typed: true
+# frozen_string_literal: true
+
+module NoResponse
+  module Models
+    module Shared
+      # At most 100 additions and removals combined. One transaction applies all changes or none. Idempotency-Key prevents duplicate changes for 24 hours; a different body under the same key returns 409. Matching reads see the new list immediately, while bounded durable jobs propagate account risk notifications.
+      class ListBulkRequest
+        extend T::Sig
+        include Crystalline::MetadataFields
+
+        field(
+          :add,
+          Crystalline::Nilable.new(Crystalline::Array.new(Models::Shared::ListEntryRequest)),
+          {'format_json': {'letter_case': ::NoResponse::Utils.field_name("add")}}
+        )
+
+        field(
+          :remove,
+          Crystalline::Nilable.new(Crystalline::Array.new(::String)),
+          {'format_json': {'letter_case': ::NoResponse::Utils.field_name("remove")}}
+        )
+
+        sig {
+          params(add: T.nilable(T::Array[Models::Shared::ListEntryRequest]), remove: T.nilable(T::Array[::String])).void
+        }
+        def initialize(add: nil, remove: nil)
+          @add = add
+          @remove = remove
+        end
+
+        sig { params(other: T.untyped).returns(T::Boolean) }
+        def ==(other)
+          return false unless other.is_a?(self.class)
+          return false unless @add == other.add
+          return false unless @remove == other.remove
+          true
+        end
+      end
+    end
+  end
+end

data/lib/no_response/models/shared/listbulkrequest.rbi

@@ -0,0 +1,20 @@
+# typed: true
+# frozen_string_literal: true
+
+class NoResponse::Models::Shared::ListBulkRequest
+  extend ::Crystalline::MetadataFields::ClassMethods
+end
+
+class NoResponse::Models::Shared::ListBulkRequest
+  def add
+  end
+
+  def add=(str_)
+  end
+
+  def remove
+  end
+
+  def remove=(str_)
+  end
+end

data/lib/no_response/models/shared/listchange.rb

@@ -0,0 +1,98 @@
+# typed: true
+# frozen_string_literal: true
+
+module NoResponse
+  module Models
+    module Shared
+      # A committed bulk list change and bounded notification progress, available while propagation is pending and for 24 hours after all propagation completes. References count an account once per changed list entry and are not unique accounts. No endpoint delivery or customer enforcement is implied by completed.
+      class ListChange
+        extend T::Sig
+        include Crystalline::MetadataFields
+
+        field :id, ::String, {'format_json': {'letter_case': ::NoResponse::Utils.field_name("id"), required: true}}
+
+        field(
+          :created_at,
+          ::String,
+          {'format_json': {'letter_case': ::NoResponse::Utils.field_name("created_at"), required: true}}
+        )
+
+        field(
+          :state,
+          Models::Shared::ListChangeState,
+          {
+            'format_json': {
+              'letter_case': ::NoResponse::Utils.field_name("state"),
+              required: true,
+              'decoder': ::NoResponse::Utils.open_enum_from_string(Models::Shared::ListChangeState, false)
+            }
+          }
+        )
+
+        field(
+          :added,
+          Crystalline::Array.new(Models::Shared::ListEntry),
+          {'format_json': {'letter_case': ::NoResponse::Utils.field_name("added"), required: true}}
+        )
+
+        field(
+          :removed,
+          Crystalline::Array.new(::String),
+          {'format_json': {'letter_case': ::NoResponse::Utils.field_name("removed"), required: true}}
+        )
+
+        field(
+          :pending_propagations,
+          ::Integer,
+          {'format_json': {'letter_case': ::NoResponse::Utils.field_name("pending_propagations"), required: true}}
+        )
+
+        field(
+          :processed_account_references,
+          ::Integer,
+          {
+            'format_json': {
+              'letter_case': ::NoResponse::Utils.field_name("processed_account_references"),
+              required: true
+            }
+          }
+        )
+
+        sig {
+          params(
+            id: ::String,
+            created_at: ::String,
+            state: Models::Shared::ListChangeState,
+            added: T::Array[Models::Shared::ListEntry],
+            removed: T::Array[::String],
+            pending_propagations: ::Integer,
+            processed_account_references: ::Integer
+          )
+            .void
+        }
+        def initialize(id:, created_at:, state:, added:, removed:, pending_propagations:, processed_account_references:)
+          @id = id
+          @created_at = created_at
+          @state = state
+          @added = added
+          @removed = removed
+          @pending_propagations = pending_propagations
+          @processed_account_references = processed_account_references
+        end
+
+        sig { params(other: T.untyped).returns(T::Boolean) }
+        def ==(other)
+          return false unless other.is_a?(self.class)
+          return false unless @id == other.id
+          return false unless @created_at == other.created_at
+          return false unless @state == other.state
+          return false unless @added == other.added
+          return false unless @removed == other.removed
+          return false unless @pending_propagations == other.pending_propagations
+          return false unless @processed_account_references == other.processed_account_references
+          true
+        end
+      end
+    end
+  end
+end