@admiral-io/sdk 1.6.3 → 1.6.5

package/dist/proto/admiral/api/user/v1/user_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"user_pb.js","sourceRoot":"","sources":["../../../../../../proto/admiral/api/user/v1/user_pb.ts"],"names":[],"mappings":"AAAA,qFAAqF;AACrF,mGAAmG;AACnG,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAClF,OAAO,EAAE,kCAAkC,EAAE,MAAM,sCAAsC,CAAC;AAE1F,OAAO,EAAE,4BAA4B,EAAE,MAAM,gCAAgC,CAAC;AAC9E,OAAO,EAAE,0BAA0B,EAAE,MAAM,yCAAyC,CAAC;AACrF,OAAO,EAAE,mCAAmC,EAAE,MAAM,kDAAkD,CAAC;AACvG,OAAO,EAAE,2BAA2B,EAAE,MAAM,0CAA0C,CAAC;AACvF,OAAO,EAAE,8BAA8B,EAAE,MAAM,6CAA6C,CAAC;AAE7F,OAAO,EAAE,8BAA8B,EAAE,MAAM,wBAAwB,CAAC;AAGxE;;GAEG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAY,aAAa,CACjE,QAAQ,CAAC,s/IAAs/I,EAAE,CAAC,kCAAkC,EAAE,4BAA4B,EAAE,0BAA0B,EAAE,mCAAmC,EAAE,2BAA2B,EAAE,8BAA8B,EAAE,8BAA8B,CAAC,CAAC,CAAC;AAwEruJ;;;GAGG;AACH,MAAM,CAAC,MAAM,UAAU,GAAqB,aAAa,CACvD,WAAW,CAAC,6BAA6B,EAAE,CAAC,CAAC,CAAC;AAWhD;;;GAGG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAA6B,aAAa,CACvE,WAAW,CAAC,6BAA6B,EAAE,CAAC,CAAC,CAAC;AAgBhD;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAA8B,aAAa,CACzE,WAAW,CAAC,6BAA6B,EAAE,CAAC,CAAC,CAAC;AAgBhD;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA+B,aAAa,CAC3E,WAAW,CAAC,6BAA6B,EAAE,CAAC,CAAC,CAAC;AAgBhD;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAgC,aAAa,CAC7E,WAAW,CAAC,6BAA6B,EAAE,CAAC,CAAC,CAAC;AAmChD;;;GAGG;AACH,MAAM,CAAC,MAAM,sCAAsC,GAAiD,aAAa,CAC/G,WAAW,CAAC,6BAA6B,EAAE,CAAC,CAAC,CAAC;AAwBhD;;;GAGG;AACH,MAAM,CAAC,MAAM,uCAAuC,GAAkD,aAAa,CACjH,WAAW,CAAC,6BAA6B,EAAE,CAAC,CAAC,CAAC;AAsChD;;;GAGG;AACH,MAAM,CAAC,MAAM,qCAAqC,GAAgD,aAAa,CAC7G,WAAW,CAAC,6BAA6B,EAAE,CAAC,CAAC,CAAC;AAuBhD;;;GAGG;AACH,MAAM,CAAC,MAAM,sCAAsC,GAAiD,aAAa,CAC/G,WAAW,CAAC,6BAA6B,EAAE,CAAC,CAAC,CAAC;AAgBhD;;;GAGG;AACH,MAAM,CAAC,MAAM,mCAAmC,GAA8C,aAAa,CACzG,WAAW,CAAC,6BAA6B,EAAE,CAAC,CAAC,CAAC;AAgBhD;;;GAGG;AACH,MAAM,CAAC,MAAM,oCAAoC,GAA+C,aAAa,CAC3G,WAAW,CAAC,6BAA6B,EAAE,EAAE,CAAC,CAAC;AAmCjD;;;GAGG;AACH,MAAM,CAAC,MAAM,sCAAsC,GAAiD,aAAa,CAC/G,WAAW,CAAC,6BAA6B,EAAE,EAAE,CAAC,CAAC;AAgBjD;;;GAGG;AACH,MAAM,CAAC,MAAM,uCAAuC,GAAkD,aAAa,CACjH,WAAW,CAAC,6BAA6B,EAAE,EAAE,CAAC,CAAC;AAgBjD;;;GAGG;AACH,MAAM,CAAC,MAAM,sCAAsC,GAAiD,aAAa,CAC/G,WAAW,CAAC,6BAA6B,EAAE,EAAE,CAAC,CAAC;AAgBjD;;;GAGG;AACH,MAAM,CAAC,MAAM,uCAAuC,GAAkD,aAAa,CACjH,WAAW,CAAC,6BAA6B,EAAE,EAAE,CAAC,CAAC;AAEjD;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,OAAO,GA6Ff,aAAa,CAChB,WAAW,CAAC,6BAA6B,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"user_pb.js","sourceRoot":"","sources":["../../../../../../proto/admiral/api/user/v1/user_pb.ts"],"names":[],"mappings":"AAAA,qFAAqF;AACrF,mGAAmG;AACnG,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAClF,OAAO,EAAE,kCAAkC,EAAE,MAAM,sCAAsC,CAAC;AAE1F,OAAO,EAAE,6BAA6B,EAAE,MAAM,iCAAiC,CAAC;AAChF,OAAO,EAAE,0BAA0B,EAAE,MAAM,yCAAyC,CAAC;AACrF,OAAO,EAAE,mCAAmC,EAAE,MAAM,kDAAkD,CAAC;AACvG,OAAO,EAAE,2BAA2B,EAAE,MAAM,0CAA0C,CAAC;AACvF,OAAO,EAAE,8BAA8B,EAAE,MAAM,6CAA6C,CAAC;AAE7F,OAAO,EAAE,8BAA8B,EAAE,MAAM,wBAAwB,CAAC;AAGxE;;GAEG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAY,aAAa,CACjE,QAAQ,CAAC,ggIAAggI,EAAE,CAAC,kCAAkC,EAAE,6BAA6B,EAAE,0BAA0B,EAAE,mCAAmC,EAAE,2BAA2B,EAAE,8BAA8B,EAAE,8BAA8B,CAAC,CAAC,CAAC;AAwEhvI;;;GAGG;AACH,MAAM,CAAC,MAAM,UAAU,GAAqB,aAAa,CACvD,WAAW,CAAC,6BAA6B,EAAE,CAAC,CAAC,CAAC;AAWhD;;;GAGG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAA6B,aAAa,CACvE,WAAW,CAAC,6BAA6B,EAAE,CAAC,CAAC,CAAC;AAgBhD;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAA8B,aAAa,CACzE,WAAW,CAAC,6BAA6B,EAAE,CAAC,CAAC,CAAC;AAgBhD;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA+B,aAAa,CAC3E,WAAW,CAAC,6BAA6B,EAAE,CAAC,CAAC,CAAC;AAgBhD;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAgC,aAAa,CAC7E,WAAW,CAAC,6BAA6B,EAAE,CAAC,CAAC,CAAC;AAmChD;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAoC,aAAa,CACrF,WAAW,CAAC,6BAA6B,EAAE,CAAC,CAAC,CAAC;AAwBhD;;;GAGG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAqC,aAAa,CACvF,WAAW,CAAC,6BAA6B,EAAE,CAAC,CAAC,CAAC;AAsChD;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAmC,aAAa,CACnF,WAAW,CAAC,6BAA6B,EAAE,CAAC,CAAC,CAAC;AAuBhD;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAoC,aAAa,CACrF,WAAW,CAAC,6BAA6B,EAAE,CAAC,CAAC,CAAC;AAgBhD;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAiC,aAAa,CAC/E,WAAW,CAAC,6BAA6B,EAAE,CAAC,CAAC,CAAC;AAgBhD;;;GAGG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAkC,aAAa,CACjF,WAAW,CAAC,6BAA6B,EAAE,EAAE,CAAC,CAAC;AAmCjD;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAoC,aAAa,CACrF,WAAW,CAAC,6BAA6B,EAAE,EAAE,CAAC,CAAC;AAgBjD;;;GAGG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAqC,aAAa,CACvF,WAAW,CAAC,6BAA6B,EAAE,EAAE,CAAC,CAAC;AAgBjD;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAoC,aAAa,CACrF,WAAW,CAAC,6BAA6B,EAAE,EAAE,CAAC,CAAC;AAgBjD;;;GAGG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAqC,aAAa,CACvF,WAAW,CAAC,6BAA6B,EAAE,EAAE,CAAC,CAAC;AAEjD;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,OAAO,GA6Ff,aAAa,CAChB,WAAW,CAAC,6BAA6B,EAAE,CAAC,CAAC,CAAC"}

package/dist/proto/admiral/common/v1/apikey_pb.d.ts

@@ -0,0 +1,202 @@
+import type { GenEnum, GenFile, GenMessage } from "@bufbuild/protobuf/codegenv2";
+import type { ActorRef } from "./actor_pb.js";
+import type { Timestamp } from "@bufbuild/protobuf/wkt";
+import type { Message } from "@bufbuild/protobuf";
+/**
+ * Describes the file admiral/common/v1/apikey.proto.
+ */
+export declare const file_admiral_common_v1_apikey: GenFile;
+/**
+ * ApiKey contains metadata for an opaque, long-lived credential issued by
+ * Admiral and presented by a caller to authenticate.
+ *
+ * A key is bound to exactly one subject for its whole life -- see
+ * `binding_type` and `binding_id` -- and to exactly one tenant. Presenting one
+ * is exchanged for a short-lived access token whose `sub` is the binding and
+ * whose scopes are bounded by this key's.
+ *
+ * The raw secret is returned exactly once, in the `plain_text_key` field of the
+ * Create response. This message carries only metadata; the secret is never
+ * retrievable afterwards. The non-secret `key_prefix` is safe to log and
+ * display.
+ *
+ * Key lifecycle is managed by each parent resource's API:
+ *   - user-bound:            UserAPI  (/v1/user/tokens)
+ *   - service-account-bound: AgentAPI (/v1/agents/{id}/tokens)
+ *
+ * @generated from message admiral.common.v1.ApiKey
+ */
+export type ApiKey = Message<"admiral.common.v1.ApiKey"> & {
+    /**
+     * Unique identifier for the key (UUID).
+     *
+     * @generated from field: string id = 1;
+     */
+    id: string;
+    /**
+     * The tenant this key belongs to (UUID), and the `tid` of every access token
+     * minted from it.
+     *
+     * Load-bearing on the resolve path and an echo everywhere else: resolving a
+     * raw key is the one lookup that has no tenant in hand and must return one,
+     * where every lifecycle call already knows the tenant from the caller. The
+     * key belongs to one tenant for its whole life, so the two can never disagree.
+     *
+     * @generated from field: string tenant_id = 2;
+     */
+    tenantId: string;
+    /**
+     * URL-safe, human-readable identifier for the key (e.g., "ci-deploy-key").
+     * Unique within the parent resource. Lowercase alphanumeric and hyphens only,
+     * must start with a letter and end with an alphanumeric character (1-63 chars).
+     *
+     * @generated from field: string name = 3;
+     */
+    name: string;
+    /**
+     * Non-secret prefix of the key. The five-character brand (`admp_` when bound
+     * to a user, `adms_` when bound to a service account) followed by a short
+     * sample of characters from the secret body (e.g., "adms_pL2m"). URL-safe and
+     * safe to log and display. Use for incident response and audit trails without
+     * exposing the secret.
+     *
+     * @generated from field: string key_prefix = 4;
+     */
+    keyPrefix: string;
+    /**
+     * The scopes granted to this key, and the ceiling on any access token minted
+     * from it. A mint request may narrow them and may never widen them.
+     *
+     * @generated from field: repeated string scopes = 5;
+     */
+    scopes: string[];
+    /**
+     * Current lifecycle status of the key.
+     *
+     * @generated from field: admiral.common.v1.ApiKeyStatus status = 6;
+     */
+    status: ApiKeyStatus;
+    /**
+     * The kind of resource this key is bound to.
+     *
+     * @generated from field: admiral.common.v1.BindingType binding_type = 7;
+     */
+    bindingType: BindingType;
+    /**
+     * The ID of the resource this key is bound to (UUID): a user id or a service
+     * account id, per `binding_type`. Access tokens minted from this key carry it
+     * as their `sub`.
+     *
+     * @generated from field: string binding_id = 8;
+     */
+    bindingId: string;
+    /**
+     * When the key expires. If unset, the key does not expire.
+     *
+     * @generated from field: google.protobuf.Timestamp expires_at = 9;
+     */
+    expiresAt?: Timestamp | undefined;
+    /**
+     * When this key was last exchanged for an access token.
+     *
+     * NOT the time of the last API request made with it: minted tokens are cached
+     * and reused for their lifetime, so a key in continuous use is exchanged only
+     * when the token minted from it runs out. Reads as "still in use", at a
+     * granularity of the access-token lifetime, which is the question this field
+     * exists to answer before revoking one.
+     *
+     * @generated from field: google.protobuf.Timestamp last_used_at = 10;
+     */
+    lastUsedAt?: Timestamp | undefined;
+    /**
+     * When the key was revoked. Only set when status is REVOKED.
+     *
+     * @generated from field: google.protobuf.Timestamp revoked_at = 11;
+     */
+    revokedAt?: Timestamp | undefined;
+    /**
+     * The user who created this key. When bound to a user, this is the key's
+     * owner; when bound to a service account, the administrator who issued it.
+     *
+     * @generated from field: admiral.common.v1.ActorRef created_by = 12;
+     */
+    createdBy?: ActorRef | undefined;
+    /**
+     * When the key was created.
+     *
+     * @generated from field: google.protobuf.Timestamp created_at = 13;
+     */
+    createdAt?: Timestamp | undefined;
+};
+/**
+ * Describes the message admiral.common.v1.ApiKey.
+ * Use `create(ApiKeySchema)` to create a new message.
+ */
+export declare const ApiKeySchema: GenMessage<ApiKey>;
+/**
+ * BindingType identifies the kind of resource an API key is bound to.
+ *
+ * This is the ONLY discriminator the contract carries. What a key is bound to
+ * decides the subject it authenticates as, and every other distinction that used
+ * to be modelled separately -- which surface created it, which brand its prefix
+ * carries, whether its scopes were chosen or assigned -- follows from the
+ * binding rather than varying independently of it.
+ *
+ * @generated from enum admiral.common.v1.BindingType
+ */
+export declare enum BindingType {
+    /**
+     * Default value. Must not be used.
+     *
+     * @generated from enum value: BINDING_TYPE_UNSPECIFIED = 0;
+     */
+    UNSPECIFIED = 0,
+    /**
+     * Bound to a user, and created by that user. Scopes are selected at creation.
+     *
+     * @generated from enum value: BINDING_TYPE_USER = 1;
+     */
+    USER = 1,
+    /**
+     * Bound to a service account, and created by an administrator. Scopes are
+     * assigned from a profile rather than chosen. An agent has a service account;
+     * which agent, if any, is resolved from the service account record.
+     *
+     * @generated from enum value: BINDING_TYPE_SERVICE_ACCOUNT = 2;
+     */
+    SERVICE_ACCOUNT = 2
+}
+/**
+ * Describes the enum admiral.common.v1.BindingType.
+ */
+export declare const BindingTypeSchema: GenEnum<BindingType>;
+/**
+ * ApiKeyStatus represents the lifecycle state of an API key.
+ *
+ * @generated from enum admiral.common.v1.ApiKeyStatus
+ */
+export declare enum ApiKeyStatus {
+    /**
+     * Default value. Must not be used.
+     *
+     * @generated from enum value: API_KEY_STATUS_UNSPECIFIED = 0;
+     */
+    UNSPECIFIED = 0,
+    /**
+     * The key is valid and can be used to authenticate.
+     *
+     * @generated from enum value: API_KEY_STATUS_ACTIVE = 1;
+     */
+    ACTIVE = 1,
+    /**
+     * The key has been permanently revoked and cannot be used.
+     *
+     * @generated from enum value: API_KEY_STATUS_REVOKED = 2;
+     */
+    REVOKED = 2
+}
+/**
+ * Describes the enum admiral.common.v1.ApiKeyStatus.
+ */
+export declare const ApiKeyStatusSchema: GenEnum<ApiKeyStatus>;
+//# sourceMappingURL=apikey_pb.d.ts.map

package/dist/proto/admiral/common/v1/apikey_pb.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"apikey_pb.d.ts","sourceRoot":"","sources":["../../../../../proto/admiral/common/v1/apikey_pb.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAC;AAEjF,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAG9C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAExD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAElD;;GAEG;AACH,eAAO,MAAM,6BAA6B,EAAE,OACqsC,CAAC;AAElvC;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,MAAM,MAAM,GAAG,OAAO,CAAC,0BAA0B,CAAC,GAAG;IACzD;;;;OAIG;IACH,EAAE,EAAE,MAAM,CAAC;IAEX;;;;;;;;;;OAUG;IACH,QAAQ,EAAE,MAAM,CAAC;IAEjB;;;;;;OAMG;IACH,IAAI,EAAE,MAAM,CAAC;IAEb;;;;;;;;OAQG;IACH,SAAS,EAAE,MAAM,CAAC;IAElB;;;;;OAKG;IACH,MAAM,EAAE,MAAM,EAAE,CAAC;IAEjB;;;;OAIG;IACH,MAAM,EAAE,YAAY,CAAC;IAErB;;;;OAIG;IACH,WAAW,EAAE,WAAW,CAAC;IAEzB;;;;;;OAMG;IACH,SAAS,EAAE,MAAM,CAAC;IAElB;;;;OAIG;IACH,SAAS,CAAC,EAAE,SAAS,GAAG,SAAS,CAAC;IAElC;;;;;;;;;;OAUG;IACH,UAAU,CAAC,EAAE,SAAS,GAAG,SAAS,CAAC;IAEnC;;;;OAIG;IACH,SAAS,CAAC,EAAE,SAAS,GAAG,SAAS,CAAC;IAElC;;;;;OAKG;IACH,SAAS,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAC;IAEjC;;;;OAIG;IACH,SAAS,CAAC,EAAE,SAAS,GAAG,SAAS,CAAC;CACnC,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,YAAY,EAAE,UAAU,CAAC,MAAM,CACG,CAAC;AAEhD;;;;;;;;;;GAUG;AACH,oBAAY,WAAW;IACrB;;;;OAIG;IACH,WAAW,IAAI;IAEf;;;;OAIG;IACH,IAAI,IAAI;IAER;;;;;;OAMG;IACH,eAAe,IAAI;CACpB;AAED;;GAEG;AACH,eAAO,MAAM,iBAAiB,EAAE,OAAO,CAAC,WAAW,CACP,CAAC;AAE7C;;;;GAIG;AACH,oBAAY,YAAY;IACtB;;;;OAIG;IACH,WAAW,IAAI;IAEf;;;;OAIG;IACH,MAAM,IAAI;IAEV;;;;OAIG;IACH,OAAO,IAAI;CACZ;AAED;;GAEG;AACH,eAAO,MAAM,kBAAkB,EAAE,OAAO,CAAC,YAAY,CACT,CAAC"}

package/dist/proto/admiral/common/v1/apikey_pb.js

@@ -0,0 +1,85 @@
+// @generated by protoc-gen-es v2.14.0 with parameter "target=ts,import_extension=js"
+// @generated from file admiral/common/v1/apikey.proto (package admiral.common.v1, syntax proto3)
+/* eslint-disable */
+import { enumDesc, fileDesc, messageDesc } from "@bufbuild/protobuf/codegenv2";
+import { file_admiral_common_v1_actor } from "./actor_pb.js";
+import { file_buf_validate_validate } from "../../../buf/validate/validate_pb.js";
+import { file_google_protobuf_timestamp } from "@bufbuild/protobuf/wkt";
+/**
+ * Describes the file admiral/common/v1/apikey.proto.
+ */
+export const file_admiral_common_v1_apikey = /*@__PURE__*/ fileDesc("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", [file_admiral_common_v1_actor, file_buf_validate_validate, file_google_protobuf_timestamp]);
+/**
+ * Describes the message admiral.common.v1.ApiKey.
+ * Use `create(ApiKeySchema)` to create a new message.
+ */
+export const ApiKeySchema = /*@__PURE__*/ messageDesc(file_admiral_common_v1_apikey, 0);
+/**
+ * BindingType identifies the kind of resource an API key is bound to.
+ *
+ * This is the ONLY discriminator the contract carries. What a key is bound to
+ * decides the subject it authenticates as, and every other distinction that used
+ * to be modelled separately -- which surface created it, which brand its prefix
+ * carries, whether its scopes were chosen or assigned -- follows from the
+ * binding rather than varying independently of it.
+ *
+ * @generated from enum admiral.common.v1.BindingType
+ */
+export var BindingType;
+(function (BindingType) {
+    /**
+     * Default value. Must not be used.
+     *
+     * @generated from enum value: BINDING_TYPE_UNSPECIFIED = 0;
+     */
+    BindingType[BindingType["UNSPECIFIED"] = 0] = "UNSPECIFIED";
+    /**
+     * Bound to a user, and created by that user. Scopes are selected at creation.
+     *
+     * @generated from enum value: BINDING_TYPE_USER = 1;
+     */
+    BindingType[BindingType["USER"] = 1] = "USER";
+    /**
+     * Bound to a service account, and created by an administrator. Scopes are
+     * assigned from a profile rather than chosen. An agent has a service account;
+     * which agent, if any, is resolved from the service account record.
+     *
+     * @generated from enum value: BINDING_TYPE_SERVICE_ACCOUNT = 2;
+     */
+    BindingType[BindingType["SERVICE_ACCOUNT"] = 2] = "SERVICE_ACCOUNT";
+})(BindingType || (BindingType = {}));
+/**
+ * Describes the enum admiral.common.v1.BindingType.
+ */
+export const BindingTypeSchema = /*@__PURE__*/ enumDesc(file_admiral_common_v1_apikey, 0);
+/**
+ * ApiKeyStatus represents the lifecycle state of an API key.
+ *
+ * @generated from enum admiral.common.v1.ApiKeyStatus
+ */
+export var ApiKeyStatus;
+(function (ApiKeyStatus) {
+    /**
+     * Default value. Must not be used.
+     *
+     * @generated from enum value: API_KEY_STATUS_UNSPECIFIED = 0;
+     */
+    ApiKeyStatus[ApiKeyStatus["UNSPECIFIED"] = 0] = "UNSPECIFIED";
+    /**
+     * The key is valid and can be used to authenticate.
+     *
+     * @generated from enum value: API_KEY_STATUS_ACTIVE = 1;
+     */
+    ApiKeyStatus[ApiKeyStatus["ACTIVE"] = 1] = "ACTIVE";
+    /**
+     * The key has been permanently revoked and cannot be used.
+     *
+     * @generated from enum value: API_KEY_STATUS_REVOKED = 2;
+     */
+    ApiKeyStatus[ApiKeyStatus["REVOKED"] = 2] = "REVOKED";
+})(ApiKeyStatus || (ApiKeyStatus = {}));
+/**
+ * Describes the enum admiral.common.v1.ApiKeyStatus.
+ */
+export const ApiKeyStatusSchema = /*@__PURE__*/ enumDesc(file_admiral_common_v1_apikey, 1);
+//# sourceMappingURL=apikey_pb.js.map

package/dist/proto/admiral/common/v1/apikey_pb.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"apikey_pb.js","sourceRoot":"","sources":["../../../../../proto/admiral/common/v1/apikey_pb.ts"],"names":[],"mappings":"AAAA,qFAAqF;AACrF,iGAAiG;AACjG,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAE/E,OAAO,EAAE,4BAA4B,EAAE,MAAM,eAAe,CAAC;AAC7D,OAAO,EAAE,0BAA0B,EAAE,MAAM,sCAAsC,CAAC;AAElF,OAAO,EAAE,8BAA8B,EAAE,MAAM,wBAAwB,CAAC;AAGxE;;GAEG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAY,aAAa,CACjE,QAAQ,CAAC,yoCAAyoC,EAAE,CAAC,4BAA4B,EAAE,0BAA0B,EAAE,8BAA8B,CAAC,CAAC,CAAC;AAyIlvC;;;GAGG;AACH,MAAM,CAAC,MAAM,YAAY,GAAuB,aAAa,CAC3D,WAAW,CAAC,6BAA6B,EAAE,CAAC,CAAC,CAAC;AAEhD;;;;;;;;;;GAUG;AACH,MAAM,CAAN,IAAY,WAuBX;AAvBD,WAAY,WAAW;IACrB;;;;OAIG;IACH,2DAAe,CAAA;IAEf;;;;OAIG;IACH,6CAAQ,CAAA;IAER;;;;;;OAMG;IACH,mEAAmB,CAAA;AACrB,CAAC,EAvBW,WAAW,KAAX,WAAW,QAuBtB;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAyB,aAAa,CAClE,QAAQ,CAAC,6BAA6B,EAAE,CAAC,CAAC,CAAC;AAE7C;;;;GAIG;AACH,MAAM,CAAN,IAAY,YAqBX;AArBD,WAAY,YAAY;IACtB;;;;OAIG;IACH,6DAAe,CAAA;IAEf;;;;OAIG;IACH,mDAAU,CAAA;IAEV;;;;OAIG;IACH,qDAAW,CAAA;AACb,CAAC,EArBW,YAAY,KAAZ,YAAY,QAqBvB;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAA0B,aAAa,CACpE,QAAQ,CAAC,6BAA6B,EAAE,CAAC,CAAC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@admiral-io/sdk",
-  "version": "1.6.3",
+  "version": "1.6.5",
   "publishConfig": {
     "access": "public"
   },

package/dist/proto/admiral/common/v1/token_pb.d.ts

@@ -1,222 +0,0 @@
-import type { GenEnum, GenFile, GenMessage } from "@bufbuild/protobuf/codegenv2";
-import type { ActorRef } from "./actor_pb.js";
-import type { Timestamp } from "@bufbuild/protobuf/wkt";
-import type { Message } from "@bufbuild/protobuf";
-/**
- * Describes the file admiral/common/v1/token.proto.
- */
-export declare const file_admiral_common_v1_token: GenFile;
-/**
- * AccessToken contains metadata for an opaque access token issued by Admiral.
- *
- * Admiral issues two kinds of tokens, distinguished by `token_type`:
- *
- *   - **Personal Access Tokens (PATs)**: bound to a user, created by that
- *     user via UserAPI. Scopes are user-selected at creation time. Intended
- *     for CLI, CI, and human-driven automation.
- *   - **Service Access Tokens (SATs)**: bound to a service account, created by
- *     administrators via AgentAPI. Scopes are auto-assigned from the agent's
- *     kind. Intended for long-lived agents that authenticate as the agent
- *     itself.
- *
- * The raw token secret is returned exactly once, in the `plain_text_token`
- * field of the Create response. This message carries only metadata; the
- * original secret is never retrievable after creation. The non-secret
- * `token_prefix` is safe to log and display.
- *
- * Token CRUD is managed by each parent resource's API:
- *   - PATs: UserAPI  (/v1/user/tokens)
- *   - SATs: AgentAPI (/v1/agents/{id}/tokens)
- *
- * IDP-issued JWTs (OAuth2/OIDC sessions) are not represented here; they are
- * resolved by separate middleware.
- *
- * @generated from message admiral.common.v1.AccessToken
- */
-export type AccessToken = Message<"admiral.common.v1.AccessToken"> & {
-    /**
-     * Unique identifier for the token (UUID).
-     *
-     * @generated from field: string id = 1;
-     */
-    id: string;
-    /**
-     * URL-safe, human-readable identifier for the token (e.g., "ci-deploy-key").
-     * Unique within the parent resource. Lowercase alphanumeric and hyphens only,
-     * must start with a letter and end with an alphanumeric character (1-63 chars).
-     *
-     * @generated from field: string name = 2;
-     */
-    name: string;
-    /**
-     * Non-secret prefix of the token value. The five-character brand
-     * (`admp_` for PATs, `adms_` for SATs) followed by a short sample of
-     * characters from the secret body (e.g., "adms_pL2m"). URL-safe and safe
-     * to log and display. Use for incident response and audit trails without
-     * exposing the secret.
-     *
-     * @generated from field: string token_prefix = 3;
-     */
-    tokenPrefix: string;
-    /**
-     * The category of this token.
-     *
-     * @generated from field: admiral.common.v1.TokenType token_type = 4;
-     */
-    tokenType: TokenType;
-    /**
-     * The scopes granted to this token. For PATs, these are user-selected.
-     * For SATs, these are auto-assigned from the service account's profile and
-     * cannot be chosen by the caller.
-     *
-     * @generated from field: repeated string scopes = 5;
-     */
-    scopes: string[];
-    /**
-     * Current lifecycle status of the token.
-     *
-     * @generated from field: admiral.common.v1.AccessTokenStatus status = 6;
-     */
-    status: AccessTokenStatus;
-    /**
-     * The kind of resource this token is bound to.
-     *
-     * @generated from field: admiral.common.v1.BindingType binding_type = 7;
-     */
-    bindingType: BindingType;
-    /**
-     * The ID of the resource this token is bound to (UUID): the user ID for PATs,
-     * the service account ID for SATs. Tokens minted from this credential carry it
-     * as their `sub`.
-     *
-     * @generated from field: string binding_id = 8;
-     */
-    bindingId: string;
-    /**
-     * When the token expires. If unset, the token does not expire.
-     *
-     * @generated from field: google.protobuf.Timestamp expires_at = 9;
-     */
-    expiresAt?: Timestamp | undefined;
-    /**
-     * When the token was last used to authenticate an API request.
-     *
-     * @generated from field: google.protobuf.Timestamp last_used_at = 10;
-     */
-    lastUsedAt?: Timestamp | undefined;
-    /**
-     * When the token was revoked. Only set when status is REVOKED.
-     *
-     * @generated from field: google.protobuf.Timestamp revoked_at = 11;
-     */
-    revokedAt?: Timestamp | undefined;
-    /**
-     * The user who created this token. For PATs, this is the token owner.
-     * For SATs, this is the administrator who issued the token.
-     *
-     * @generated from field: admiral.common.v1.ActorRef created_by = 12;
-     */
-    createdBy?: ActorRef | undefined;
-    /**
-     * When the token was created.
-     *
-     * @generated from field: google.protobuf.Timestamp created_at = 13;
-     */
-    createdAt?: Timestamp | undefined;
-};
-/**
- * Describes the message admiral.common.v1.AccessToken.
- * Use `create(AccessTokenSchema)` to create a new message.
- */
-export declare const AccessTokenSchema: GenMessage<AccessToken>;
-/**
- * TokenType identifies the category of an access token issued by Admiral's token system.
- * IDP-issued JWTs (OAuth2/OIDC sessions) are NOT represented here. They are
- * resolved by separate middleware.
- *
- * @generated from enum admiral.common.v1.TokenType
- */
-export declare enum TokenType {
-    /**
-     * Default value. Must not be used.
-     *
-     * @generated from enum value: TOKEN_TYPE_UNSPECIFIED = 0;
-     */
-    UNSPECIFIED = 0,
-    /**
-     * Personal Access Token, bound to a user.
-     *
-     * @generated from enum value: TOKEN_TYPE_PAT = 1;
-     */
-    PAT = 1,
-    /**
-     * Service Access Token, bound to a service account.
-     *
-     * @generated from enum value: TOKEN_TYPE_SAT = 2;
-     */
-    SAT = 2
-}
-/**
- * Describes the enum admiral.common.v1.TokenType.
- */
-export declare const TokenTypeSchema: GenEnum<TokenType>;
-/**
- * BindingType identifies the kind of resource an access token is bound to.
- *
- * @generated from enum admiral.common.v1.BindingType
- */
-export declare enum BindingType {
-    /**
-     * Default value. Must not be used.
-     *
-     * @generated from enum value: BINDING_TYPE_UNSPECIFIED = 0;
-     */
-    UNSPECIFIED = 0,
-    /**
-     * Token is bound to a user (PATs).
-     *
-     * @generated from enum value: BINDING_TYPE_USER = 1;
-     */
-    USER = 1,
-    /**
-     * Token is bound to a service account (SATs). An agent has a service account;
-     * which agent, if any, is resolved from the service account record.
-     *
-     * @generated from enum value: BINDING_TYPE_SERVICE_ACCOUNT = 2;
-     */
-    SERVICE_ACCOUNT = 2
-}
-/**
- * Describes the enum admiral.common.v1.BindingType.
- */
-export declare const BindingTypeSchema: GenEnum<BindingType>;
-/**
- * AccessTokenStatus represents the lifecycle state of an access token.
- *
- * @generated from enum admiral.common.v1.AccessTokenStatus
- */
-export declare enum AccessTokenStatus {
-    /**
-     * Default value. Must not be used.
-     *
-     * @generated from enum value: ACCESS_TOKEN_STATUS_UNSPECIFIED = 0;
-     */
-    UNSPECIFIED = 0,
-    /**
-     * The token is valid and can be used for authentication.
-     *
-     * @generated from enum value: ACCESS_TOKEN_STATUS_ACTIVE = 1;
-     */
-    ACTIVE = 1,
-    /**
-     * The token has been permanently revoked and cannot be used.
-     *
-     * @generated from enum value: ACCESS_TOKEN_STATUS_REVOKED = 2;
-     */
-    REVOKED = 2
-}
-/**
- * Describes the enum admiral.common.v1.AccessTokenStatus.
- */
-export declare const AccessTokenStatusSchema: GenEnum<AccessTokenStatus>;
-//# sourceMappingURL=token_pb.d.ts.map

package/dist/proto/admiral/common/v1/token_pb.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"token_pb.d.ts","sourceRoot":"","sources":["../../../../../proto/admiral/common/v1/token_pb.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAC;AAEjF,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAG9C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAExD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAElD;;GAEG;AACH,eAAO,MAAM,4BAA4B,EAAE,OACu3C,CAAC;AAEn6C;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,MAAM,WAAW,GAAG,OAAO,CAAC,+BAA+B,CAAC,GAAG;IACnE;;;;OAIG;IACH,EAAE,EAAE,MAAM,CAAC;IAEX;;;;;;OAMG;IACH,IAAI,EAAE,MAAM,CAAC;IAEb;;;;;;;;OAQG;IACH,WAAW,EAAE,MAAM,CAAC;IAEpB;;;;OAIG;IACH,SAAS,EAAE,SAAS,CAAC;IAErB;;;;;;OAMG;IACH,MAAM,EAAE,MAAM,EAAE,CAAC;IAEjB;;;;OAIG;IACH,MAAM,EAAE,iBAAiB,CAAC;IAE1B;;;;OAIG;IACH,WAAW,EAAE,WAAW,CAAC;IAEzB;;;;;;OAMG;IACH,SAAS,EAAE,MAAM,CAAC;IAElB;;;;OAIG;IACH,SAAS,CAAC,EAAE,SAAS,GAAG,SAAS,CAAC;IAElC;;;;OAIG;IACH,UAAU,CAAC,EAAE,SAAS,GAAG,SAAS,CAAC;IAEnC;;;;OAIG;IACH,SAAS,CAAC,EAAE,SAAS,GAAG,SAAS,CAAC;IAElC;;;;;OAKG;IACH,SAAS,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAC;IAEjC;;;;OAIG;IACH,SAAS,CAAC,EAAE,SAAS,GAAG,SAAS,CAAC;CACnC,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,iBAAiB,EAAE,UAAU,CAAC,WAAW,CACR,CAAC;AAE/C;;;;;;GAMG;AACH,oBAAY,SAAS;IACnB;;;;OAIG;IACH,WAAW,IAAI;IAEf;;;;OAIG;IACH,GAAG,IAAI;IAEP;;;;OAIG;IACH,GAAG,IAAI;CACR;AAED;;GAEG;AACH,eAAO,MAAM,eAAe,EAAE,OAAO,CAAC,SAAS,CACJ,CAAC;AAE5C;;;;GAIG;AACH,oBAAY,WAAW;IACrB;;;;OAIG;IACH,WAAW,IAAI;IAEf;;;;OAIG;IACH,IAAI,IAAI;IAER;;;;;OAKG;IACH,eAAe,IAAI;CACpB;AAED;;GAEG;AACH,eAAO,MAAM,iBAAiB,EAAE,OAAO,CAAC,WAAW,CACR,CAAC;AAE5C;;;;GAIG;AACH,oBAAY,iBAAiB;IAC3B;;;;OAIG;IACH,WAAW,IAAI;IAEf;;;;OAIG;IACH,MAAM,IAAI;IAEV;;;;OAIG;IACH,OAAO,IAAI;CACZ;AAED;;GAEG;AACH,eAAO,MAAM,uBAAuB,EAAE,OAAO,CAAC,iBAAiB,CACpB,CAAC"}

package/dist/proto/admiral/common/v1/token_pb.js

@@ -1,110 +0,0 @@
-// @generated by protoc-gen-es v2.14.0 with parameter "target=ts,import_extension=js"
-// @generated from file admiral/common/v1/token.proto (package admiral.common.v1, syntax proto3)
-/* eslint-disable */
-import { enumDesc, fileDesc, messageDesc } from "@bufbuild/protobuf/codegenv2";
-import { file_admiral_common_v1_actor } from "./actor_pb.js";
-import { file_buf_validate_validate } from "../../../buf/validate/validate_pb.js";
-import { file_google_protobuf_timestamp } from "@bufbuild/protobuf/wkt";
-/**
- * Describes the file admiral/common/v1/token.proto.
- */
-export const file_admiral_common_v1_token = /*@__PURE__*/ fileDesc("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", [file_admiral_common_v1_actor, file_buf_validate_validate, file_google_protobuf_timestamp]);
-/**
- * Describes the message admiral.common.v1.AccessToken.
- * Use `create(AccessTokenSchema)` to create a new message.
- */
-export const AccessTokenSchema = /*@__PURE__*/ messageDesc(file_admiral_common_v1_token, 0);
-/**
- * TokenType identifies the category of an access token issued by Admiral's token system.
- * IDP-issued JWTs (OAuth2/OIDC sessions) are NOT represented here. They are
- * resolved by separate middleware.
- *
- * @generated from enum admiral.common.v1.TokenType
- */
-export var TokenType;
-(function (TokenType) {
-    /**
-     * Default value. Must not be used.
-     *
-     * @generated from enum value: TOKEN_TYPE_UNSPECIFIED = 0;
-     */
-    TokenType[TokenType["UNSPECIFIED"] = 0] = "UNSPECIFIED";
-    /**
-     * Personal Access Token, bound to a user.
-     *
-     * @generated from enum value: TOKEN_TYPE_PAT = 1;
-     */
-    TokenType[TokenType["PAT"] = 1] = "PAT";
-    /**
-     * Service Access Token, bound to a service account.
-     *
-     * @generated from enum value: TOKEN_TYPE_SAT = 2;
-     */
-    TokenType[TokenType["SAT"] = 2] = "SAT";
-})(TokenType || (TokenType = {}));
-/**
- * Describes the enum admiral.common.v1.TokenType.
- */
-export const TokenTypeSchema = /*@__PURE__*/ enumDesc(file_admiral_common_v1_token, 0);
-/**
- * BindingType identifies the kind of resource an access token is bound to.
- *
- * @generated from enum admiral.common.v1.BindingType
- */
-export var BindingType;
-(function (BindingType) {
-    /**
-     * Default value. Must not be used.
-     *
-     * @generated from enum value: BINDING_TYPE_UNSPECIFIED = 0;
-     */
-    BindingType[BindingType["UNSPECIFIED"] = 0] = "UNSPECIFIED";
-    /**
-     * Token is bound to a user (PATs).
-     *
-     * @generated from enum value: BINDING_TYPE_USER = 1;
-     */
-    BindingType[BindingType["USER"] = 1] = "USER";
-    /**
-     * Token is bound to a service account (SATs). An agent has a service account;
-     * which agent, if any, is resolved from the service account record.
-     *
-     * @generated from enum value: BINDING_TYPE_SERVICE_ACCOUNT = 2;
-     */
-    BindingType[BindingType["SERVICE_ACCOUNT"] = 2] = "SERVICE_ACCOUNT";
-})(BindingType || (BindingType = {}));
-/**
- * Describes the enum admiral.common.v1.BindingType.
- */
-export const BindingTypeSchema = /*@__PURE__*/ enumDesc(file_admiral_common_v1_token, 1);
-/**
- * AccessTokenStatus represents the lifecycle state of an access token.
- *
- * @generated from enum admiral.common.v1.AccessTokenStatus
- */
-export var AccessTokenStatus;
-(function (AccessTokenStatus) {
-    /**
-     * Default value. Must not be used.
-     *
-     * @generated from enum value: ACCESS_TOKEN_STATUS_UNSPECIFIED = 0;
-     */
-    AccessTokenStatus[AccessTokenStatus["UNSPECIFIED"] = 0] = "UNSPECIFIED";
-    /**
-     * The token is valid and can be used for authentication.
-     *
-     * @generated from enum value: ACCESS_TOKEN_STATUS_ACTIVE = 1;
-     */
-    AccessTokenStatus[AccessTokenStatus["ACTIVE"] = 1] = "ACTIVE";
-    /**
-     * The token has been permanently revoked and cannot be used.
-     *
-     * @generated from enum value: ACCESS_TOKEN_STATUS_REVOKED = 2;
-     */
-    AccessTokenStatus[AccessTokenStatus["REVOKED"] = 2] = "REVOKED";
-})(AccessTokenStatus || (AccessTokenStatus = {}));
-/**
- * Describes the enum admiral.common.v1.AccessTokenStatus.
- */
-export const AccessTokenStatusSchema = /*@__PURE__*/ enumDesc(file_admiral_common_v1_token, 2);
-//# sourceMappingURL=token_pb.js.map

package/dist/proto/admiral/common/v1/token_pb.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"token_pb.js","sourceRoot":"","sources":["../../../../../proto/admiral/common/v1/token_pb.ts"],"names":[],"mappings":"AAAA,qFAAqF;AACrF,gGAAgG;AAChG,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAE/E,OAAO,EAAE,4BAA4B,EAAE,MAAM,eAAe,CAAC;AAC7D,OAAO,EAAE,0BAA0B,EAAE,MAAM,sCAAsC,CAAC;AAElF,OAAO,EAAE,8BAA8B,EAAE,MAAM,wBAAwB,CAAC;AAGxE;;GAEG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAY,aAAa,CAChE,QAAQ,CAAC,0zCAA0zC,EAAE,CAAC,4BAA4B,EAAE,0BAA0B,EAAE,8BAA8B,CAAC,CAAC,CAAC;AAqIn6C;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAA4B,aAAa,CACrE,WAAW,CAAC,4BAA4B,EAAE,CAAC,CAAC,CAAC;AAE/C;;;;;;GAMG;AACH,MAAM,CAAN,IAAY,SAqBX;AArBD,WAAY,SAAS;IACnB;;;;OAIG;IACH,uDAAe,CAAA;IAEf;;;;OAIG;IACH,uCAAO,CAAA;IAEP;;;;OAIG;IACH,uCAAO,CAAA;AACT,CAAC,EArBW,SAAS,KAAT,SAAS,QAqBpB;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,eAAe,GAAuB,aAAa,CAC9D,QAAQ,CAAC,4BAA4B,EAAE,CAAC,CAAC,CAAC;AAE5C;;;;GAIG;AACH,MAAM,CAAN,IAAY,WAsBX;AAtBD,WAAY,WAAW;IACrB;;;;OAIG;IACH,2DAAe,CAAA;IAEf;;;;OAIG;IACH,6CAAQ,CAAA;IAER;;;;;OAKG;IACH,mEAAmB,CAAA;AACrB,CAAC,EAtBW,WAAW,KAAX,WAAW,QAsBtB;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAyB,aAAa,CAClE,QAAQ,CAAC,4BAA4B,EAAE,CAAC,CAAC,CAAC;AAE5C;;;;GAIG;AACH,MAAM,CAAN,IAAY,iBAqBX;AArBD,WAAY,iBAAiB;IAC3B;;;;OAIG;IACH,uEAAe,CAAA;IAEf;;;;OAIG;IACH,6DAAU,CAAA;IAEV;;;;OAIG;IACH,+DAAW,CAAA;AACb,CAAC,EArBW,iBAAiB,KAAjB,iBAAiB,QAqB5B;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAA+B,aAAa,CAC9E,QAAQ,CAAC,4BAA4B,EAAE,CAAC,CAAC,CAAC"}