strongdm 18.1.0 → 18.3.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 0f5d39d2f7581cfa4ddb27da4af5515db3988d2891f4b31b925a4ff5f5899f1f
-  data.tar.gz: 1e107208b9bff97b9d3807dc8540261e336c572691b494ca62aeda41ef69e725
+  metadata.gz: 4d57984e67206a7d8ea47c2f136434ec12f6d147651542166b997cbc38387b06
+  data.tar.gz: 541a9f4b9c547f24f2659073318188389da098358241a9afbbae6c49dd740a54
 SHA512:
-  metadata.gz: 71f1395f91a2800bfcb6f3c1f6bb956c4b3fdbf88616d93e718c63695900c8b9ac1717bc074f8c83258b6bbe2a536e66df58bb7d1e1f1811c8e2d7f3614edad6
-  data.tar.gz: b911e7ca20393f53c5924c1a306144feef20a3e700f8b396f0f67319eab9592c2ce9b8451a9b8233055a4814eb0f314ed1e04d10517d0f77bd01a469c1f8bbf4
+  metadata.gz: a3572ed484d8d0ac61a11762b65de742c27049db5b691a834128fdd2b372b917afe5c7af02c96b92904034f59fea71323422c4660953d8e08a126f2961922148
+  data.tar.gz: 0ac1c4c48015d005b2dfd3d946b36ca88b122671bbc7075e033b5363a4fb1328f942d915e08107e8af74f9533d80337e17ad00c6a8fc9b886da2a563d6afbe25

data/.git/ORIG_HEAD

@@ -1 +1 @@
-a9461772e0fec378935e8a68e03da0ab162f747b
+5878fda8566d2784daf5d1ebccabe2665272e846

data/.git/logs/HEAD

@@ -1,3 +1,3 @@
-0000000000000000000000000000000000000000 a9461772e0fec378935e8a68e03da0ab162f747b root <root@1c247bce55b1.(none)> 1788979776 +0000	clone: from github.com:strongdm/strongdm-sdk-ruby.git
-a9461772e0fec378935e8a68e03da0ab162f747b a9461772e0fec378935e8a68e03da0ab162f747b root <root@1c247bce55b1.(none)> 1788979776 +0000	checkout: moving from master to master
-a9461772e0fec378935e8a68e03da0ab162f747b 16822777e56defbbd7db369a97fae005424ce340 root <root@1c247bce55b1.(none)> 1788979776 +0000	merge origin/development: Fast-forward
+0000000000000000000000000000000000000000 5878fda8566d2784daf5d1ebccabe2665272e846 root <root@86915b19f597.(none)> 1791780415 +0000	clone: from github.com:strongdm/strongdm-sdk-ruby.git
+5878fda8566d2784daf5d1ebccabe2665272e846 5878fda8566d2784daf5d1ebccabe2665272e846 root <root@86915b19f597.(none)> 1791780415 +0000	checkout: moving from master to master
+5878fda8566d2784daf5d1ebccabe2665272e846 655074ce1cea21d379c7ce989a6b50a43798799c root <root@86915b19f597.(none)> 1791780415 +0000	merge origin/development: Fast-forward

data/.git/logs/refs/heads/master

@@ -1,2 +1,2 @@
-0000000000000000000000000000000000000000 a9461772e0fec378935e8a68e03da0ab162f747b root <root@1c247bce55b1.(none)> 1788979776 +0000	clone: from github.com:strongdm/strongdm-sdk-ruby.git
-a9461772e0fec378935e8a68e03da0ab162f747b 16822777e56defbbd7db369a97fae005424ce340 root <root@1c247bce55b1.(none)> 1788979776 +0000	merge origin/development: Fast-forward
+0000000000000000000000000000000000000000 5878fda8566d2784daf5d1ebccabe2665272e846 root <root@86915b19f597.(none)> 1791780415 +0000	clone: from github.com:strongdm/strongdm-sdk-ruby.git
+5878fda8566d2784daf5d1ebccabe2665272e846 655074ce1cea21d379c7ce989a6b50a43798799c root <root@86915b19f597.(none)> 1791780415 +0000	merge origin/development: Fast-forward

data/.git/logs/refs/remotes/origin/HEAD

@@ -1 +1 @@
-0000000000000000000000000000000000000000 a9461772e0fec378935e8a68e03da0ab162f747b root <root@1c247bce55b1.(none)> 1788979776 +0000	clone: from github.com:strongdm/strongdm-sdk-ruby.git
+0000000000000000000000000000000000000000 5878fda8566d2784daf5d1ebccabe2665272e846 root <root@86915b19f597.(none)> 1791780415 +0000	clone: from github.com:strongdm/strongdm-sdk-ruby.git

data/.git/packed-refs

@@ -1,6 +1,6 @@
 # pack-refs with: peeled fully-peeled sorted 
-16822777e56defbbd7db369a97fae005424ce340 refs/remotes/origin/development
-a9461772e0fec378935e8a68e03da0ab162f747b refs/remotes/origin/master
+655074ce1cea21d379c7ce989a6b50a43798799c refs/remotes/origin/development
+5878fda8566d2784daf5d1ebccabe2665272e846 refs/remotes/origin/master
 2e4fe8087177ddea9b3991ca499f758384839c89 refs/tags/untagged-84fd83a4484c785cce63
 04f604866214fab4d5663b5171a3e596331577bd refs/tags/v0.9.4
 6f9a7b75b345c65fb554884907b7060680c807b7 refs/tags/v0.9.5
@@ -168,6 +168,8 @@ dc10f48d22db35fa4756342f7d1c30bc0c3365a6 refs/tags/v17.2.0
 0b28aabb4e9c03e35e6936a056df2fe373a117e6 refs/tags/v17.8.0
 d9fa7d185e352151179839d42fc595110154b6e5 refs/tags/v17.9.0
 a9461772e0fec378935e8a68e03da0ab162f747b refs/tags/v18.0.0
+16822777e56defbbd7db369a97fae005424ce340 refs/tags/v18.1.0
+5878fda8566d2784daf5d1ebccabe2665272e846 refs/tags/v18.2.0
 e0b1ec0134c7015ccb8c14464cc713c20034159e refs/tags/v2.0.0
 62a146d9d56852b2ad14ec5d2796cad158d66e1c refs/tags/v2.1.0
 9de04e628082f4ad0eb9511311479a089d302008 refs/tags/v2.2.0

data/.git/refs/heads/master

@@ -1 +1 @@
-16822777e56defbbd7db369a97fae005424ce340
+655074ce1cea21d379c7ce989a6b50a43798799c

data/lib/constants.rb

@@ -573,6 +573,13 @@ module SDM
     EU = "app.eu.strongdm.com:443"
   end
 
+  # InitiatorType defines who established a connection to a resource, as classified by the local StrongDM client.
+  module InitiatorType
+    AI_AGENT = "ai_agent"
+    HUMAN = "human"
+    UNKNOWN = "unknown"
+  end
+
   # ApproverReference defines the type for approver references.
   module ApproverReference
     NONE = ""

data/lib/grpc/access_requests_pb.rb

@@ -73,6 +73,7 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       optional :kubernetes, :message, 1, "v1.KubernetesPrivileges"
       optional :entraGroups, :message, 2, "v1.EntraGroupPrivileges"
       optional :oktaGroups, :message, 3, "v1.OktaGroupPrivileges"
+      optional :googleGroups, :message, 4, "v1.GoogleGroupPrivileges"
     end
     add_message "v1.KubernetesPrivileges" do
       repeated :groups, :string, 1
@@ -83,6 +84,9 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
     add_message "v1.OktaGroupPrivileges" do
       repeated :groups, :string, 1
     end
+    add_message "v1.GoogleGroupPrivileges" do
+      repeated :groups, :string, 1
+    end
     add_message "v1.AccessRequestConfig" do
       optional :resource_id, :string, 1
       optional :reason, :string, 2
@@ -109,6 +113,7 @@ module V1
   KubernetesPrivileges = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.KubernetesPrivileges").msgclass
   EntraGroupPrivileges = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.EntraGroupPrivileges").msgclass
   OktaGroupPrivileges = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.OktaGroupPrivileges").msgclass
+  GoogleGroupPrivileges = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.GoogleGroupPrivileges").msgclass
   AccessRequestConfig = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AccessRequestConfig").msgclass
   RequestAccessRequestConfig = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.RequestAccessRequestConfig").msgclass
 end

data/lib/grpc/options_pb.rb

@@ -68,6 +68,7 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       optional :condition, :string, 1941323
       repeated :conditions, :string, 1941325
       optional :expect_file, :bool, 1941324
+      optional :nullable, :bool, 1941326
     end
     add_message "v1.EnumOptions" do
       repeated :targets, :string, 1941330

data/lib/grpc/organization_history_pb.rb

@@ -71,6 +71,7 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       optional :discard_replays, :bool, 30
       optional :public_key_pem, :string, 31
       optional :log_config, :message, 32, "v1.LogConfig"
+      optional :peer_policies_enabled, :bool, 33
     end
     add_message "v1.LogConfig" do
       optional :local_storage, :string, 1

data/lib/grpc/plumbing.rb

@@ -10605,6 +10605,46 @@ module SDM
       end
       items
     end
+    def self.convert_initiator_to_porcelain(plumbing)
+      if plumbing == nil
+        return nil
+      end
+      porcelain = Initiator.new()
+      porcelain.ai_agent = (plumbing.ai_agent)
+      porcelain.trusted = (plumbing.trusted)
+      porcelain.type = (plumbing.type)
+      porcelain.version = (plumbing.version)
+      porcelain
+    end
+
+    def self.convert_initiator_to_plumbing(porcelain)
+      if porcelain == nil
+        return nil
+      end
+      plumbing = V1::Initiator.new()
+      plumbing.ai_agent = (porcelain.ai_agent)
+      plumbing.trusted = (porcelain.trusted)
+      plumbing.type = (porcelain.type)
+      plumbing.version = (porcelain.version)
+      plumbing
+    end
+    def self.convert_repeated_initiator_to_plumbing(porcelains)
+      items = Array.new
+      porcelains.each do |porcelain|
+        plumbing = convert_initiator_to_plumbing(porcelain)
+        items.append(plumbing)
+      end
+      items
+    end
+
+    def self.convert_repeated_initiator_to_porcelain(plumbings)
+      items = Array.new
+      plumbings.each do |plumbing|
+        porcelain = convert_initiator_to_porcelain(plumbing)
+        items.append(porcelain)
+      end
+      items
+    end
     def self.convert_key_value_engine_to_porcelain(plumbing)
       if plumbing == nil
         return nil
@@ -15455,6 +15495,7 @@ module SDM
       porcelain.encrypted = (plumbing.encrypted)
       porcelain.id = (plumbing.id)
       porcelain.identity_alias_username = (plumbing.identity_alias_username)
+      porcelain.initiator = convert_initiator_to_porcelain(plumbing.initiator)
       porcelain.metadata_json = (plumbing.metadata_json)
       porcelain.query_body = (plumbing.query_body)
       porcelain.query_category = (plumbing.query_category)
@@ -15492,6 +15533,7 @@ module SDM
       plumbing.encrypted = (porcelain.encrypted)
       plumbing.id = (porcelain.id)
       plumbing.identity_alias_username = (porcelain.identity_alias_username)
+      plumbing.initiator = convert_initiator_to_plumbing(porcelain.initiator)
       plumbing.metadata_json = (porcelain.metadata_json)
       plumbing.query_body = (porcelain.query_body)
       plumbing.query_category = (porcelain.query_category)

data/lib/grpc/queries_pb.rb

@@ -66,6 +66,13 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       optional :client_ip, :string, 29
       optional :identity_alias_username, :string, 30
       optional :metadata_json, :string, 31
+      optional :initiator, :message, 32, "v1.Initiator"
+    end
+    add_message "v1.Initiator" do
+      optional :type, :string, 1
+      optional :ai_agent, :string, 2
+      optional :version, :string, 3
+      optional :trusted, :bool, 4
     end
     add_message "v1.QueryCapture" do
       optional :width, :int32, 1
@@ -92,5 +99,6 @@ module V1
   QueryListRequest = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.QueryListRequest").msgclass
   QueryListResponse = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.QueryListResponse").msgclass
   Query = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.Query").msgclass
+  Initiator = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.Initiator").msgclass
   QueryCapture = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.QueryCapture").msgclass
 end

data/lib/grpc/roles_pb.rb

@@ -74,6 +74,11 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       optional :tags, :message, 4, "v1.Tags"
       optional :access_rules, :string, 5
       optional :managed_by, :string, 6
+      optional :scope, :message, 7, "v1.RoleScope"
+    end
+    add_message "v1.RoleScope" do
+      optional :type, :string, 1
+      repeated :agents, :string, 2
     end
   end
 end
@@ -90,4 +95,5 @@ module V1
   RoleListRequest = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.RoleListRequest").msgclass
   RoleListResponse = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.RoleListResponse").msgclass
   Role = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.Role").msgclass
+  RoleScope = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.RoleScope").msgclass
 end

data/lib/models/porcelain.rb

@@ -8009,14 +8009,15 @@ module SDM
     end
   end
 
-  # GoogleGroups is currently unstable, and its API may change, or it may be removed, without a major version bump.
   class GoogleGroups
     # The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation.
     attr_accessor :bind_interface
     # If true, configures discovery of the Google Workspace account to be run
     # from a node.
     attr_accessor :discovery_enabled
-    # The primary domain of the Google Workspace account that owns the groups.
+    # The Google Workspace domain that owns the groups. Only groups whose email
+    # address is at this exact domain are discovered; add one resource per
+    # secondary domain.
     attr_accessor :domain
     # A filter applied to the routing logic to pin datasource to nodes.
     attr_accessor :egress_filter
@@ -9754,6 +9755,42 @@ module SDM
     end
   end
 
+  # An Initiator describes who established the connection to the resource, as classified by
+  # the local StrongDM client.
+  class Initiator
+    # A stable identifier of the AI Agent that established the connection, e.g. "claude-code".
+    # Empty unless type is "ai_agent".
+    attr_accessor :ai_agent
+    # Indicates whether the initiator detection is trusted, meaning it cannot be spoofed by the end user.
+    attr_accessor :trusted
+    # The kind of initiator, one of the InitiatorType constants: "ai_agent" when a supported AI
+    # Agent was detected, "human" when no supported AI Agent was detected, or "unknown" when the
+    # client could not determine the initiator.
+    attr_accessor :type
+    # The version of the AI Agent, when it could be determined.
+    attr_accessor :version
+
+    def initialize(
+      ai_agent: nil,
+      trusted: nil,
+      type: nil,
+      version: nil
+    )
+      @ai_agent = ai_agent == nil ? "" : ai_agent
+      @trusted = trusted == nil ? false : trusted
+      @type = type == nil ? "" : type
+      @version = version == nil ? "" : version
+    end
+
+    def to_json(options = {})
+      hash = {}
+      self.instance_variables.each do |var|
+        hash[var.id2name.delete_prefix("@")] = self.instance_variable_get var
+      end
+      hash.to_json
+    end
+  end
+
   class KeyValueEngine
     # Unique identifier of the Secret Engine.
     attr_accessor :id
@@ -14499,6 +14536,9 @@ module SDM
     attr_accessor :id
     # The username of the IdentityAlias used to access the Resource.
     attr_accessor :identity_alias_username
+    # Who established the connection to the resource, as classified by the local StrongDM client.
+    # Absent when the initiator was not recorded or the organization does not have AI Agent controls.
+    attr_accessor :initiator
     # Driver specific metadata associated with this query.
     attr_accessor :metadata_json
     # The captured content of the Query.
@@ -14551,6 +14591,7 @@ module SDM
       encrypted: nil,
       id: nil,
       identity_alias_username: nil,
+      initiator: nil,
       metadata_json: nil,
       query_body: nil,
       query_category: nil,
@@ -14581,6 +14622,7 @@ module SDM
       @encrypted = encrypted == nil ? false : encrypted
       @id = id == nil ? "" : id
       @identity_alias_username = identity_alias_username == nil ? "" : identity_alias_username
+      @initiator = initiator == nil ? nil : initiator
       @metadata_json = metadata_json == nil ? "" : metadata_json
       @query_body = query_body == nil ? "" : query_body
       @query_category = query_category == nil ? "" : query_category

data/lib/strongdm.rb

@@ -31,7 +31,7 @@ module SDM #:nodoc:
     DEFAULT_RETRY_FACTOR = 1.6
     DEFAULT_RETRY_JITTER = 0.2
     API_VERSION = "2025-04-14"
-    USER_AGENT = "strongdm-sdk-ruby/18.1.0"
+    USER_AGENT = "strongdm-sdk-ruby/18.3.0"
     private_constant :DEFAULT_BASE_RETRY_DELAY, :DEFAULT_MAX_RETRY_DELAY, :DEFAULT_RETRY_FACTOR, :DEFAULT_RETRY_JITTER, :API_VERSION, :USER_AGENT
 
     # Creates a new strongDM API client.

data/lib/version

@@ -13,5 +13,5 @@
 # limitations under the License.
 #
 module SDM
-  VERSION = "18.1.0"
+  VERSION = "18.3.0"
 end

data/lib/version.rb

@@ -13,5 +13,5 @@
 # limitations under the License.
 #
 module SDM
-  VERSION = "18.1.0"
+  VERSION = "18.3.0"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: strongdm
 version: !ruby/object:Gem::Version
-  version: 18.1.0
+  version: 18.3.0
 platform: ruby
 authors:
 - strongDM Team
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2026-09-09 00:00:00.000000000 Z
+date: 2026-10-12 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: grpc
@@ -81,8 +81,8 @@ files:
 - "./.git/logs/HEAD"
 - "./.git/logs/refs/heads/master"
 - "./.git/logs/refs/remotes/origin/HEAD"
-- "./.git/objects/pack/pack-f7f25f9461ae3c78adc6d865d6c64077dd353fa2.idx"
-- "./.git/objects/pack/pack-f7f25f9461ae3c78adc6d865d6c64077dd353fa2.pack"
+- "./.git/objects/pack/pack-d3ae2c449844d355a0436f761156e63f33b4e056.idx"
+- "./.git/objects/pack/pack-d3ae2c449844d355a0436f761156e63f33b4e056.pack"
 - "./.git/packed-refs"
 - "./.git/refs/heads/master"
 - "./.git/refs/remotes/origin/HEAD"