tungo-sdk 0.2.0

data/lib/tungo/webhooks.rb

@@ -0,0 +1,155 @@
+# frozen_string_literal: true
+
+module Tungo
+  # Verification of outgoing webhooks (Standard Webhooks / Svix) and signing of incoming hooks.
+  module Webhooks
+    # Allowed clock difference between the sender and the receiver, in seconds.
+    DEFAULT_TOLERANCE = 300
+    SECRET_PREFIX = "whsec_"
+    HOOK_SIGNATURE_PREFIX = "sha256="
+
+    module_function
+
+    # Verifies a webhook and returns its typed event.
+    #
+    # The signed text is +id.timestamp.body+, the key is the base64-decoded part of the secret
+    # after +whsec_+. Both +webhook-*+ and +svix-*+ headers are accepted, in any case and from
+    # any container (a Hash, a Rack env, Rack/Rails headers, a Net::HTTP message).
+    #
+    # @param payload [String] the raw request body, exactly as received
+    # @param headers [#each] the request headers
+    # @param secret [String] the endpoint's signing secret (+whsec_...+)
+    # @param tolerance [Numeric] allowed clock difference in seconds, in both directions
+    # @param now [Time, Integer, nil] the clock to compare with; the system clock by default
+    # @return [Tungo::Model] one of the {Tungo::Models::WebhookEvent} variants
+    # @raise [Tungo::WebhookVerificationError] for every reason the webhook cannot be trusted
+    def verify_webhook(payload, headers, secret, tolerance: DEFAULT_TOLERANCE, now: nil)
+      fail!(:invalid_tolerance, "tolerance must be a positive number of seconds") unless positive_number?(tolerance)
+      fail!(:invalid_payload, "payload must be the raw request body as a String") unless payload.is_a?(String)
+
+      key = signing_key(secret)
+      id, timestamp, signatures = signature_headers(headers)
+      check_timestamp(timestamp, now.nil? ? Time.now.to_i : now.to_i, tolerance)
+      expected = OpenSSL::HMAC.digest("SHA256", key, "#{id}.#{timestamp}.".b + payload.b)
+      fail!(:signature_mismatch, "no signature matches the payload") unless signature_matches?(signatures, expected)
+
+      parse_event(payload)
+    end
+
+    # Signs the body of an incoming hook.
+    #
+    # @param body [String] the exact bytes that will be sent
+    # @param secret [String] the hook's secret
+    # @return [String] the value of the +X-Signature+ header: "sha256=<hex>"
+    # @raise [Tungo::ValidationError] when the secret is empty
+    def sign_hook_payload(body, secret)
+      "#{HOOK_SIGNATURE_PREFIX}#{hook_signature(body, secret)}"
+    end
+
+    # @param body [String] the exact bytes that will be sent
+    # @param secret [String] the hook's secret
+    # @return [String] HMAC-SHA256 of the body as lower-case hex
+    # @raise [Tungo::ValidationError] when the secret is empty
+    def hook_signature(body, secret)
+      raise ValidationError, "the hook secret must be a non-empty String" unless secret.is_a?(String) && !secret.empty?
+      raise ValidationError, "the hook body must be a String" unless body.is_a?(String)
+
+      OpenSSL::HMAC.hexdigest("SHA256", secret, body.b)
+    end
+
+    # Checks the signature of an incoming hook in constant time. The signature may be upper- or
+    # lower-case hex, with or without the +sha256=+ prefix.
+    #
+    # @return [Boolean] false for an empty secret, an empty or malformed signature, or a mismatch
+    def verify_hook_signature(body, signature, secret)
+      return false unless body.is_a?(String) && signature.is_a?(String) && secret.is_a?(String) && !secret.empty?
+
+      given = signature.b.strip
+      prefix = HOOK_SIGNATURE_PREFIX
+      given = given[prefix.size..] if given[0, prefix.size].to_s.casecmp?(prefix)
+      Internal::Util.secure_compare(hook_signature(body, secret), given.downcase)
+    end
+
+    # @api private
+    def fail!(reason, message)
+      raise WebhookVerificationError.new("Webhook verification failed: #{message}", reason: reason)
+    end
+
+    # @api private
+    def positive_number?(value)
+      value.is_a?(Numeric) && value.positive? && value.to_f.finite?
+    end
+
+    # @api private
+    def signing_key(secret)
+      fail!(:invalid_secret, "the signing secret is missing") unless secret.is_a?(String) && !secret.empty?
+
+      key = Base64.strict_decode64(secret.delete_prefix(SECRET_PREFIX))
+      fail!(:invalid_secret, "the signing secret is empty") if key.empty?
+      key
+    rescue ArgumentError
+      fail!(:invalid_secret, "the signing secret is not valid base64")
+    end
+
+    # @api private
+    def signature_headers(headers)
+      found = normalize(headers)
+      values = %w[id timestamp signature].map { |name| found["svix-#{name}"] || found["webhook-#{name}"] }
+      fail!(:missing_header, "the id, timestamp and signature headers are required") if values.any?(&:nil?)
+      values
+    end
+
+    # Accepts "Svix-Id", :svix_id and the Rack form "HTTP_SVIX_ID" alike.
+    # @api private
+    def normalize(headers)
+      fail!(:missing_header, "headers must be a collection of name/value pairs") unless headers.respond_to?(:each)
+
+      found = {}
+      headers.each do |name, value|
+        key = name.to_s.downcase.tr("_", "-").delete_prefix("http-")
+        value = value.first if value.is_a?(Array)
+        found[key] = value.to_s if key.start_with?("svix-", "webhook-") && !value.nil?
+      end
+      found
+    end
+
+    # @api private
+    def check_timestamp(timestamp, now, tolerance)
+      unless timestamp.b.match?(/\A[0-9]+\z/)
+        fail!(:malformed_timestamp,
+              "the timestamp header is not a number of seconds")
+      end
+
+      sent = timestamp.to_i
+      fail!(:timestamp_too_old, "the message is older than the tolerance") if now - sent > tolerance
+      fail!(:timestamp_too_new, "the message is newer than the tolerance") if sent - now > tolerance
+    end
+
+    # @api private
+    def signature_matches?(signatures, expected)
+      matched = false
+      signatures.b.split.each do |entry|
+        version, value = entry.split(",", 2)
+        next unless version == "v1" && value
+
+        candidate = begin
+          Base64.strict_decode64(value)
+        rescue ArgumentError
+          next
+        end
+        matched = true if Internal::Util.secure_compare(expected, candidate)
+      end
+      matched
+    end
+
+    # @api private
+    def parse_event(payload)
+      data = Internal::Util.parse_json(payload)
+      fail!(:invalid_payload, "the payload is not a JSON object") unless data.is_a?(Hash)
+
+      Models::WebhookEvent.coerce(data)
+    rescue JSON::ParserError, EncodingError
+      fail!(:invalid_payload, "the payload is not valid JSON")
+    end
+  end
+end

data/lib/tungo-sdk.rb

@@ -0,0 +1,4 @@
+# frozen_string_literal: true
+
+# Lets Bundler auto-require the gem by its name ("tungo-sdk"); the library itself is "tungo".
+require_relative "tungo"

data/lib/tungo.rb

@@ -0,0 +1,34 @@
+# frozen_string_literal: true
+
+require "base64"
+require "bigdecimal"
+require "date"
+require "json"
+require "net/http"
+require "openssl"
+require "pathname"
+require "securerandom"
+require "time"
+require "uri"
+
+require_relative "tungo/version"
+require_relative "tungo/errors"
+require_relative "tungo/internal/util"
+require_relative "tungo/internal/model"
+require_relative "tungo/internal/sse"
+require_relative "tungo/api_response"
+require_relative "tungo/request_options"
+require_relative "tungo/transport"
+require_relative "tungo/page"
+require_relative "tungo/stream"
+require_relative "tungo/money"
+require_relative "tungo/webhooks"
+require_relative "tungo/contract"
+require_relative "tungo/models"
+require_relative "tungo/resources"
+require_relative "tungo/helpers"
+require_relative "tungo/client"
+
+# The official Ruby library for the Tungo Platform API. Start with {Tungo::Client}.
+module Tungo
+end

data/sig/manifest.yaml

@@ -0,0 +1,8 @@
+# Standard libraries the signatures depend on.
+dependencies:
+  - name: bigdecimal
+  - name: date
+  - name: json
+  - name: net-http
+  - name: pathname
+  - name: uri

data/sig/tungo/contract.rbs

@@ -0,0 +1,8 @@
+# Code generated by tungo-sdkgen from the Tungo Platform API contract. DO NOT EDIT.
+
+module Tungo
+  VERSION: String
+  DEFAULT_BASE_URL: String
+  CONTRACT_VERSION: String
+  WEBHOOK_EVENT_TYPES: Array[String]
+end

data/sig/tungo/models/api_key.rbs

@@ -0,0 +1,32 @@
+# Code generated by tungo-sdkgen from the Tungo Platform API contract. DO NOT EDIT.
+
+module Tungo
+  module Models
+    class ApiKey < Tungo::Model
+      def all_companies: () -> bool
+      def allowed_ips: () -> Array[String]?
+      def company_ids: () -> Array[String]
+      def created_at: () -> String
+      def created_by: () -> String
+      def disabled_at: () -> String?
+      def expires_at: () -> String
+      def id: () -> String
+      def last_used_at: () -> String?
+      def last_used_ip: () -> String?
+      def monthly_cap_tiyn: () -> Integer?
+      def name: () -> String
+      def permissions: () -> Array[Tungo::Models::ApiKeyPermissionItem::t]
+      def prefix: () -> String
+      def previous_secret_valid_until: () -> String?
+      def revoked_at: () -> String?
+      def status: () -> Tungo::Models::ApiKeyStatus::t
+      def workspace_id: () -> String
+      def write_kinds: () -> Array[String]?
+      def write_max_amount_per_day_tiyn: () -> Integer?
+      def write_max_amount_per_document_tiyn: () -> Integer?
+      def initialize: (?all_companies: bool, ?allowed_ips: Array[String]?, ?company_ids: Array[String], ?created_at: (String | Time), ?created_by: String, ?disabled_at: (String | Time)?, ?expires_at: (String | Time), ?id: String, ?last_used_at: (String | Time)?, ?last_used_ip: String?, ?monthly_cap_tiyn: Integer?, ?name: String, ?permissions: Array[Tungo::Models::ApiKeyPermissionItem::input], ?prefix: String, ?previous_secret_valid_until: (String | Time)?, ?revoked_at: (String | Time)?, ?status: Tungo::Models::ApiKeyStatus::input, ?workspace_id: String, ?write_kinds: Array[String]?, ?write_max_amount_per_day_tiyn: Integer?, ?write_max_amount_per_document_tiyn: Integer?, **untyped) -> void
+      def self.from_wire: (Hash[String, untyped] | Hash[Symbol, untyped] data, ?api_response: Tungo::APIResponse?) -> Tungo::Models::ApiKey
+      def with: (**untyped) -> Tungo::Models::ApiKey
+    end
+  end
+end

data/sig/tungo/models/api_key_create.rbs

@@ -0,0 +1,21 @@
+# Code generated by tungo-sdkgen from the Tungo Platform API contract. DO NOT EDIT.
+
+module Tungo
+  module Models
+    class ApiKeyCreate < Tungo::Model
+      def all_companies: () -> bool?
+      def allowed_ips: () -> Array[String]?
+      def company_ids: () -> Array[String]?
+      def expires_at: () -> String?
+      def monthly_cap_tiyn: () -> Integer?
+      def name: () -> String
+      def permissions: () -> Array[String]
+      def write_kinds: () -> Array[Tungo::Models::ApiKeyCreateWriteKindItem::t]?
+      def write_max_amount_per_day_tiyn: () -> Integer?
+      def write_max_amount_per_document_tiyn: () -> Integer?
+      def initialize: (?all_companies: bool, ?allowed_ips: Array[String]?, ?company_ids: Array[String], ?expires_at: (String | Time)?, ?monthly_cap_tiyn: Integer?, ?name: String, ?permissions: Array[String], ?write_kinds: Array[Tungo::Models::ApiKeyCreateWriteKindItem::input]?, ?write_max_amount_per_day_tiyn: Integer?, ?write_max_amount_per_document_tiyn: Integer?, **untyped) -> void
+      def self.from_wire: (Hash[String, untyped] | Hash[Symbol, untyped] data, ?api_response: Tungo::APIResponse?) -> Tungo::Models::ApiKeyCreate
+      def with: (**untyped) -> Tungo::Models::ApiKeyCreate
+    end
+  end
+end

data/sig/tungo/models/api_key_create_write_kind_item.rbs

@@ -0,0 +1,22 @@
+# Code generated by tungo-sdkgen from the Tungo Platform API contract. DO NOT EDIT.
+
+module Tungo
+  module Models
+    module ApiKeyCreateWriteKindItem
+      extend Tungo::Internal::Enum
+      type t = String
+      type input = String
+      SALE: String
+      PURCHASE: String
+      BANK_RECEIPT: String
+      BANK_PAYMENT: String
+      COUNTERPARTY: String
+      CONTRACT: String
+      INVENTORY_WRITEOFF: String
+      CASH_ORDER_IN: String
+      CASH_ORDER_OUT: String
+      ADVANCE_REPORT: String
+      REVERT: String
+    end
+  end
+end

data/sig/tungo/models/api_key_created.rbs

@@ -0,0 +1,35 @@
+# Code generated by tungo-sdkgen from the Tungo Platform API contract. DO NOT EDIT.
+
+module Tungo
+  module Models
+    class ApiKeyCreated < Tungo::Model
+      def all_companies: () -> bool
+      def allowed_ips: () -> Array[String]?
+      def company_ids: () -> Array[String]
+      def created_at: () -> String
+      def created_by: () -> String
+      def disabled_at: () -> String?
+      def expires_at: () -> String
+      def id: () -> String
+      def key: () -> String?
+      def key_note: () -> String?
+      def last_used_at: () -> String?
+      def last_used_ip: () -> String?
+      def monthly_cap_tiyn: () -> Integer?
+      def name: () -> String
+      def permissions: () -> Array[Tungo::Models::ApiKeyCreatedPermissionItem::t]
+      def prefix: () -> String
+      def previous_secret_valid_until: () -> String?
+      def revoked_at: () -> String?
+      def status: () -> Tungo::Models::ApiKeyCreatedStatus::t
+      def warnings: () -> Array[Tungo::Models::ApiKeyWarning]
+      def workspace_id: () -> String
+      def write_kinds: () -> Array[String]?
+      def write_max_amount_per_day_tiyn: () -> Integer?
+      def write_max_amount_per_document_tiyn: () -> Integer?
+      def initialize: (?all_companies: bool, ?allowed_ips: Array[String]?, ?company_ids: Array[String], ?created_at: (String | Time), ?created_by: String, ?disabled_at: (String | Time)?, ?expires_at: (String | Time), ?id: String, ?key: String?, ?key_note: String, ?last_used_at: (String | Time)?, ?last_used_ip: String?, ?monthly_cap_tiyn: Integer?, ?name: String, ?permissions: Array[Tungo::Models::ApiKeyCreatedPermissionItem::input], ?prefix: String, ?previous_secret_valid_until: (String | Time)?, ?revoked_at: (String | Time)?, ?status: Tungo::Models::ApiKeyCreatedStatus::input, ?warnings: Array[Tungo::input[Tungo::Models::ApiKeyWarning]], ?workspace_id: String, ?write_kinds: Array[String]?, ?write_max_amount_per_day_tiyn: Integer?, ?write_max_amount_per_document_tiyn: Integer?, **untyped) -> void
+      def self.from_wire: (Hash[String, untyped] | Hash[Symbol, untyped] data, ?api_response: Tungo::APIResponse?) -> Tungo::Models::ApiKeyCreated
+      def with: (**untyped) -> Tungo::Models::ApiKeyCreated
+    end
+  end
+end

data/sig/tungo/models/api_key_created_permission_item.rbs

@@ -0,0 +1,18 @@
+# Code generated by tungo-sdkgen from the Tungo Platform API contract. DO NOT EDIT.
+
+module Tungo
+  module Models
+    module ApiKeyCreatedPermissionItem
+      extend Tungo::Internal::Enum
+      type t = String
+      type input = String
+      COMPANY_READ: String
+      CHAT_USE: String
+      PROPOSALS_CREATE: String
+      PROPOSALS_APPROVE: String
+      AUTOMATIONS_MANAGE: String
+      AUTOMATIONS_READ: String
+      WEBHOOKS_MANAGE: String
+    end
+  end
+end

data/sig/tungo/models/api_key_created_status.rbs

@@ -0,0 +1,15 @@
+# Code generated by tungo-sdkgen from the Tungo Platform API contract. DO NOT EDIT.
+
+module Tungo
+  module Models
+    module ApiKeyCreatedStatus
+      extend Tungo::Internal::Enum
+      type t = String
+      type input = String
+      ACTIVE: String
+      DISABLED: String
+      EXPIRED: String
+      REVOKED: String
+    end
+  end
+end

data/sig/tungo/models/api_key_details.rbs

@@ -0,0 +1,33 @@
+# Code generated by tungo-sdkgen from the Tungo Platform API contract. DO NOT EDIT.
+
+module Tungo
+  module Models
+    class ApiKeyDetails < Tungo::Model
+      def all_companies: () -> bool
+      def allowed_ips: () -> Array[String]?
+      def blocked_reason: () -> Tungo::Models::ApiKeyDetailsBlockedReason::t?
+      def company_ids: () -> Array[String]
+      def created_at: () -> String
+      def created_by: () -> String
+      def disabled_at: () -> String?
+      def expires_at: () -> String
+      def id: () -> String
+      def last_used_at: () -> String?
+      def last_used_ip: () -> String?
+      def monthly_cap_tiyn: () -> Integer?
+      def name: () -> String
+      def permissions: () -> Array[Tungo::Models::ApiKeyDetailsPermissionItem::t]
+      def prefix: () -> String
+      def previous_secret_valid_until: () -> String?
+      def revoked_at: () -> String?
+      def status: () -> Tungo::Models::ApiKeyDetailsStatus::t
+      def workspace_id: () -> String
+      def write_kinds: () -> Array[String]?
+      def write_max_amount_per_day_tiyn: () -> Integer?
+      def write_max_amount_per_document_tiyn: () -> Integer?
+      def initialize: (?all_companies: bool, ?allowed_ips: Array[String]?, ?blocked_reason: Tungo::Models::ApiKeyDetailsBlockedReason::input?, ?company_ids: Array[String], ?created_at: (String | Time), ?created_by: String, ?disabled_at: (String | Time)?, ?expires_at: (String | Time), ?id: String, ?last_used_at: (String | Time)?, ?last_used_ip: String?, ?monthly_cap_tiyn: Integer?, ?name: String, ?permissions: Array[Tungo::Models::ApiKeyDetailsPermissionItem::input], ?prefix: String, ?previous_secret_valid_until: (String | Time)?, ?revoked_at: (String | Time)?, ?status: Tungo::Models::ApiKeyDetailsStatus::input, ?workspace_id: String, ?write_kinds: Array[String]?, ?write_max_amount_per_day_tiyn: Integer?, ?write_max_amount_per_document_tiyn: Integer?, **untyped) -> void
+      def self.from_wire: (Hash[String, untyped] | Hash[Symbol, untyped] data, ?api_response: Tungo::APIResponse?) -> Tungo::Models::ApiKeyDetails
+      def with: (**untyped) -> Tungo::Models::ApiKeyDetails
+    end
+  end
+end

data/sig/tungo/models/api_key_details_blocked_reason.rbs

@@ -0,0 +1,21 @@
+# Code generated by tungo-sdkgen from the Tungo Platform API contract. DO NOT EDIT.
+
+module Tungo
+  module Models
+    module ApiKeyDetailsBlockedReason
+      extend Tungo::Internal::Enum
+      type t = String
+      type input = String
+      KEY_REVOKED: String
+      KEY_EXPIRED: String
+      KEY_DISABLED: String
+      KEY_CREATOR_LOST_ACCESS: String
+      API_KEYS_DISABLED_BY_POLICY: String
+      WORKSPACE_BLOCKED: String
+      KEY_CAP_REACHED: String
+      PLATFORM_BALANCE_EXHAUSTED: String
+      PLATFORM_CAP_REACHED: String
+      PLATFORM_DISABLED: String
+    end
+  end
+end

data/sig/tungo/models/api_key_details_permission_item.rbs

@@ -0,0 +1,18 @@
+# Code generated by tungo-sdkgen from the Tungo Platform API contract. DO NOT EDIT.
+
+module Tungo
+  module Models
+    module ApiKeyDetailsPermissionItem
+      extend Tungo::Internal::Enum
+      type t = String
+      type input = String
+      COMPANY_READ: String
+      CHAT_USE: String
+      PROPOSALS_CREATE: String
+      PROPOSALS_APPROVE: String
+      AUTOMATIONS_MANAGE: String
+      AUTOMATIONS_READ: String
+      WEBHOOKS_MANAGE: String
+    end
+  end
+end

data/sig/tungo/models/api_key_details_status.rbs

@@ -0,0 +1,15 @@
+# Code generated by tungo-sdkgen from the Tungo Platform API contract. DO NOT EDIT.
+
+module Tungo
+  module Models
+    module ApiKeyDetailsStatus
+      extend Tungo::Internal::Enum
+      type t = String
+      type input = String
+      ACTIVE: String
+      DISABLED: String
+      EXPIRED: String
+      REVOKED: String
+    end
+  end
+end

data/sig/tungo/models/api_key_month.rbs

@@ -0,0 +1,14 @@
+# Code generated by tungo-sdkgen from the Tungo Platform API contract. DO NOT EDIT.
+
+module Tungo
+  module Models
+    class ApiKeyMonth < Tungo::Model
+      def cap_tiyn: () -> Integer?
+      def month: () -> String
+      def spent_tiyn: () -> Integer
+      def initialize: (?cap_tiyn: Integer?, ?month: String, ?spent_tiyn: Integer, **untyped) -> void
+      def self.from_wire: (Hash[String, untyped] | Hash[Symbol, untyped] data, ?api_response: Tungo::APIResponse?) -> Tungo::Models::ApiKeyMonth
+      def with: (**untyped) -> Tungo::Models::ApiKeyMonth
+    end
+  end
+end

data/sig/tungo/models/api_key_patch.rbs

@@ -0,0 +1,21 @@
+# Code generated by tungo-sdkgen from the Tungo Platform API contract. DO NOT EDIT.
+
+module Tungo
+  module Models
+    class ApiKeyPatch < Tungo::Model
+      def all_companies: () -> bool?
+      def allowed_ips: () -> Array[String]?
+      def company_ids: () -> Array[String]?
+      def expires_at: () -> String?
+      def monthly_cap_tiyn: () -> Integer?
+      def name: () -> String?
+      def permissions: () -> Array[String]?
+      def write_kinds: () -> Array[Tungo::Models::ApiKeyPatchWriteKindItem::t]?
+      def write_max_amount_per_day_tiyn: () -> Integer?
+      def write_max_amount_per_document_tiyn: () -> Integer?
+      def initialize: (?all_companies: bool, ?allowed_ips: Array[String]?, ?company_ids: Array[String], ?expires_at: (String | Time)?, ?monthly_cap_tiyn: Integer?, ?name: String, ?permissions: Array[String], ?write_kinds: Array[Tungo::Models::ApiKeyPatchWriteKindItem::input]?, ?write_max_amount_per_day_tiyn: Integer?, ?write_max_amount_per_document_tiyn: Integer?, **untyped) -> void
+      def self.from_wire: (Hash[String, untyped] | Hash[Symbol, untyped] data, ?api_response: Tungo::APIResponse?) -> Tungo::Models::ApiKeyPatch
+      def with: (**untyped) -> Tungo::Models::ApiKeyPatch
+    end
+  end
+end

data/sig/tungo/models/api_key_patch_write_kind_item.rbs

@@ -0,0 +1,22 @@
+# Code generated by tungo-sdkgen from the Tungo Platform API contract. DO NOT EDIT.
+
+module Tungo
+  module Models
+    module ApiKeyPatchWriteKindItem
+      extend Tungo::Internal::Enum
+      type t = String
+      type input = String
+      SALE: String
+      PURCHASE: String
+      BANK_RECEIPT: String
+      BANK_PAYMENT: String
+      COUNTERPARTY: String
+      CONTRACT: String
+      INVENTORY_WRITEOFF: String
+      CASH_ORDER_IN: String
+      CASH_ORDER_OUT: String
+      ADVANCE_REPORT: String
+      REVERT: String
+    end
+  end
+end

data/sig/tungo/models/api_key_permission_item.rbs

@@ -0,0 +1,18 @@
+# Code generated by tungo-sdkgen from the Tungo Platform API contract. DO NOT EDIT.
+
+module Tungo
+  module Models
+    module ApiKeyPermissionItem
+      extend Tungo::Internal::Enum
+      type t = String
+      type input = String
+      COMPANY_READ: String
+      CHAT_USE: String
+      PROPOSALS_CREATE: String
+      PROPOSALS_APPROVE: String
+      AUTOMATIONS_MANAGE: String
+      AUTOMATIONS_READ: String
+      WEBHOOKS_MANAGE: String
+    end
+  end
+end

data/sig/tungo/models/api_key_person.rbs

@@ -0,0 +1,14 @@
+# Code generated by tungo-sdkgen from the Tungo Platform API contract. DO NOT EDIT.
+
+module Tungo
+  module Models
+    class ApiKeyPerson < Tungo::Model
+      def email: () -> String
+      def name: () -> String
+      def user_id: () -> String
+      def initialize: (?email: String, ?name: String, ?user_id: String, **untyped) -> void
+      def self.from_wire: (Hash[String, untyped] | Hash[Symbol, untyped] data, ?api_response: Tungo::APIResponse?) -> Tungo::Models::ApiKeyPerson
+      def with: (**untyped) -> Tungo::Models::ApiKeyPerson
+    end
+  end
+end

data/sig/tungo/models/api_key_roll.rbs

@@ -0,0 +1,12 @@
+# Code generated by tungo-sdkgen from the Tungo Platform API contract. DO NOT EDIT.
+
+module Tungo
+  module Models
+    class ApiKeyRoll < Tungo::Model
+      def expires_at: () -> String?
+      def initialize: (?expires_at: (String | Time)?, **untyped) -> void
+      def self.from_wire: (Hash[String, untyped] | Hash[Symbol, untyped] data, ?api_response: Tungo::APIResponse?) -> Tungo::Models::ApiKeyRoll
+      def with: (**untyped) -> Tungo::Models::ApiKeyRoll
+    end
+  end
+end

data/sig/tungo/models/api_key_rolled.rbs

@@ -0,0 +1,34 @@
+# Code generated by tungo-sdkgen from the Tungo Platform API contract. DO NOT EDIT.
+
+module Tungo
+  module Models
+    class ApiKeyRolled < Tungo::Model
+      def all_companies: () -> bool
+      def allowed_ips: () -> Array[String]?
+      def company_ids: () -> Array[String]
+      def created_at: () -> String
+      def created_by: () -> String
+      def disabled_at: () -> String?
+      def expires_at: () -> String
+      def id: () -> String
+      def key: () -> String
+      def last_used_at: () -> String?
+      def last_used_ip: () -> String?
+      def monthly_cap_tiyn: () -> Integer?
+      def name: () -> String
+      def permissions: () -> Array[Tungo::Models::ApiKeyRolledPermissionItem::t]
+      def prefix: () -> String
+      def previous_secret_valid_until: () -> String?
+      def previous_valid_until: () -> String?
+      def revoked_at: () -> String?
+      def status: () -> Tungo::Models::ApiKeyRolledStatus::t
+      def workspace_id: () -> String
+      def write_kinds: () -> Array[String]?
+      def write_max_amount_per_day_tiyn: () -> Integer?
+      def write_max_amount_per_document_tiyn: () -> Integer?
+      def initialize: (?all_companies: bool, ?allowed_ips: Array[String]?, ?company_ids: Array[String], ?created_at: (String | Time), ?created_by: String, ?disabled_at: (String | Time)?, ?expires_at: (String | Time), ?id: String, ?key: String, ?last_used_at: (String | Time)?, ?last_used_ip: String?, ?monthly_cap_tiyn: Integer?, ?name: String, ?permissions: Array[Tungo::Models::ApiKeyRolledPermissionItem::input], ?prefix: String, ?previous_secret_valid_until: (String | Time)?, ?previous_valid_until: (String | Time)?, ?revoked_at: (String | Time)?, ?status: Tungo::Models::ApiKeyRolledStatus::input, ?workspace_id: String, ?write_kinds: Array[String]?, ?write_max_amount_per_day_tiyn: Integer?, ?write_max_amount_per_document_tiyn: Integer?, **untyped) -> void
+      def self.from_wire: (Hash[String, untyped] | Hash[Symbol, untyped] data, ?api_response: Tungo::APIResponse?) -> Tungo::Models::ApiKeyRolled
+      def with: (**untyped) -> Tungo::Models::ApiKeyRolled
+    end
+  end
+end

data/sig/tungo/models/api_key_rolled_permission_item.rbs

@@ -0,0 +1,18 @@
+# Code generated by tungo-sdkgen from the Tungo Platform API contract. DO NOT EDIT.
+
+module Tungo
+  module Models
+    module ApiKeyRolledPermissionItem
+      extend Tungo::Internal::Enum
+      type t = String
+      type input = String
+      COMPANY_READ: String
+      CHAT_USE: String
+      PROPOSALS_CREATE: String
+      PROPOSALS_APPROVE: String
+      AUTOMATIONS_MANAGE: String
+      AUTOMATIONS_READ: String
+      WEBHOOKS_MANAGE: String
+    end
+  end
+end

data/sig/tungo/models/api_key_rolled_status.rbs

@@ -0,0 +1,15 @@
+# Code generated by tungo-sdkgen from the Tungo Platform API contract. DO NOT EDIT.
+
+module Tungo
+  module Models
+    module ApiKeyRolledStatus
+      extend Tungo::Internal::Enum
+      type t = String
+      type input = String
+      ACTIVE: String
+      DISABLED: String
+      EXPIRED: String
+      REVOKED: String
+    end
+  end
+end