@admiral-io/sdk 1.6.4 → 1.6.6

package/dist/proto/admiral/common/v1/token_pb.d.ts

@@ -1,222 +0,0 @@
-import type { GenEnum, GenFile, GenMessage } from "@bufbuild/protobuf/codegenv2";
-import type { ActorRef } from "./actor_pb.js";
-import type { Timestamp } from "@bufbuild/protobuf/wkt";
-import type { Message } from "@bufbuild/protobuf";
-/**
- * Describes the file admiral/common/v1/token.proto.
- */
-export declare const file_admiral_common_v1_token: GenFile;
-/**
- * AccessToken contains metadata for an opaque access token issued by Admiral.
- *
- * Admiral issues two kinds of tokens, distinguished by `token_type`:
- *
- *   - **Personal Access Tokens (PATs)**: bound to a user, created by that
- *     user via UserAPI. Scopes are user-selected at creation time. Intended
- *     for CLI, CI, and human-driven automation.
- *   - **Service Access Tokens (SATs)**: bound to a service account, created by
- *     administrators via AgentAPI. Scopes are auto-assigned from the agent's
- *     kind. Intended for long-lived agents that authenticate as the agent
- *     itself.
- *
- * The raw token secret is returned exactly once, in the `plain_text_token`
- * field of the Create response. This message carries only metadata; the
- * original secret is never retrievable after creation. The non-secret
- * `token_prefix` is safe to log and display.
- *
- * Token CRUD is managed by each parent resource's API:
- *   - PATs: UserAPI  (/v1/user/tokens)
- *   - SATs: AgentAPI (/v1/agents/{id}/tokens)
- *
- * IDP-issued JWTs (OAuth2/OIDC sessions) are not represented here; they are
- * resolved by separate middleware.
- *
- * @generated from message admiral.common.v1.AccessToken
- */
-export type AccessToken = Message<"admiral.common.v1.AccessToken"> & {
-    /**
-     * Unique identifier for the token (UUID).
-     *
-     * @generated from field: string id = 1;
-     */
-    id: string;
-    /**
-     * URL-safe, human-readable identifier for the token (e.g., "ci-deploy-key").
-     * Unique within the parent resource. Lowercase alphanumeric and hyphens only,
-     * must start with a letter and end with an alphanumeric character (1-63 chars).
-     *
-     * @generated from field: string name = 2;
-     */
-    name: string;
-    /**
-     * Non-secret prefix of the token value. The five-character brand
-     * (`admp_` for PATs, `adms_` for SATs) followed by a short sample of
-     * characters from the secret body (e.g., "adms_pL2m"). URL-safe and safe
-     * to log and display. Use for incident response and audit trails without
-     * exposing the secret.
-     *
-     * @generated from field: string token_prefix = 3;
-     */
-    tokenPrefix: string;
-    /**
-     * The category of this token.
-     *
-     * @generated from field: admiral.common.v1.TokenType token_type = 4;
-     */
-    tokenType: TokenType;
-    /**
-     * The scopes granted to this token. For PATs, these are user-selected.
-     * For SATs, these are auto-assigned from the service account's profile and
-     * cannot be chosen by the caller.
-     *
-     * @generated from field: repeated string scopes = 5;
-     */
-    scopes: string[];
-    /**
-     * Current lifecycle status of the token.
-     *
-     * @generated from field: admiral.common.v1.AccessTokenStatus status = 6;
-     */
-    status: AccessTokenStatus;
-    /**
-     * The kind of resource this token is bound to.
-     *
-     * @generated from field: admiral.common.v1.BindingType binding_type = 7;
-     */
-    bindingType: BindingType;
-    /**
-     * The ID of the resource this token is bound to (UUID): the user ID for PATs,
-     * the service account ID for SATs. Tokens minted from this credential carry it
-     * as their `sub`.
-     *
-     * @generated from field: string binding_id = 8;
-     */
-    bindingId: string;
-    /**
-     * When the token expires. If unset, the token does not expire.
-     *
-     * @generated from field: google.protobuf.Timestamp expires_at = 9;
-     */
-    expiresAt?: Timestamp | undefined;
-    /**
-     * When the token was last used to authenticate an API request.
-     *
-     * @generated from field: google.protobuf.Timestamp last_used_at = 10;
-     */
-    lastUsedAt?: Timestamp | undefined;
-    /**
-     * When the token was revoked. Only set when status is REVOKED.
-     *
-     * @generated from field: google.protobuf.Timestamp revoked_at = 11;
-     */
-    revokedAt?: Timestamp | undefined;
-    /**
-     * The user who created this token. For PATs, this is the token owner.
-     * For SATs, this is the administrator who issued the token.
-     *
-     * @generated from field: admiral.common.v1.ActorRef created_by = 12;
-     */
-    createdBy?: ActorRef | undefined;
-    /**
-     * When the token was created.
-     *
-     * @generated from field: google.protobuf.Timestamp created_at = 13;
-     */
-    createdAt?: Timestamp | undefined;
-};
-/**
- * Describes the message admiral.common.v1.AccessToken.
- * Use `create(AccessTokenSchema)` to create a new message.
- */
-export declare const AccessTokenSchema: GenMessage<AccessToken>;
-/**
- * TokenType identifies the category of an access token issued by Admiral's token system.
- * IDP-issued JWTs (OAuth2/OIDC sessions) are NOT represented here. They are
- * resolved by separate middleware.
- *
- * @generated from enum admiral.common.v1.TokenType
- */
-export declare enum TokenType {
-    /**
-     * Default value. Must not be used.
-     *
-     * @generated from enum value: TOKEN_TYPE_UNSPECIFIED = 0;
-     */
-    UNSPECIFIED = 0,
-    /**
-     * Personal Access Token, bound to a user.
-     *
-     * @generated from enum value: TOKEN_TYPE_PAT = 1;
-     */
-    PAT = 1,
-    /**
-     * Service Access Token, bound to a service account.
-     *
-     * @generated from enum value: TOKEN_TYPE_SAT = 2;
-     */
-    SAT = 2
-}
-/**
- * Describes the enum admiral.common.v1.TokenType.
- */
-export declare const TokenTypeSchema: GenEnum<TokenType>;
-/**
- * BindingType identifies the kind of resource an access token is bound to.
- *
- * @generated from enum admiral.common.v1.BindingType
- */
-export declare enum BindingType {
-    /**
-     * Default value. Must not be used.
-     *
-     * @generated from enum value: BINDING_TYPE_UNSPECIFIED = 0;
-     */
-    UNSPECIFIED = 0,
-    /**
-     * Token is bound to a user (PATs).
-     *
-     * @generated from enum value: BINDING_TYPE_USER = 1;
-     */
-    USER = 1,
-    /**
-     * Token is bound to a service account (SATs). An agent has a service account;
-     * which agent, if any, is resolved from the service account record.
-     *
-     * @generated from enum value: BINDING_TYPE_SERVICE_ACCOUNT = 2;
-     */
-    SERVICE_ACCOUNT = 2
-}
-/**
- * Describes the enum admiral.common.v1.BindingType.
- */
-export declare const BindingTypeSchema: GenEnum<BindingType>;
-/**
- * AccessTokenStatus represents the lifecycle state of an access token.
- *
- * @generated from enum admiral.common.v1.AccessTokenStatus
- */
-export declare enum AccessTokenStatus {
-    /**
-     * Default value. Must not be used.
-     *
-     * @generated from enum value: ACCESS_TOKEN_STATUS_UNSPECIFIED = 0;
-     */
-    UNSPECIFIED = 0,
-    /**
-     * The token is valid and can be used for authentication.
-     *
-     * @generated from enum value: ACCESS_TOKEN_STATUS_ACTIVE = 1;
-     */
-    ACTIVE = 1,
-    /**
-     * The token has been permanently revoked and cannot be used.
-     *
-     * @generated from enum value: ACCESS_TOKEN_STATUS_REVOKED = 2;
-     */
-    REVOKED = 2
-}
-/**
- * Describes the enum admiral.common.v1.AccessTokenStatus.
- */
-export declare const AccessTokenStatusSchema: GenEnum<AccessTokenStatus>;
-//# sourceMappingURL=token_pb.d.ts.map

package/dist/proto/admiral/common/v1/token_pb.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"token_pb.d.ts","sourceRoot":"","sources":["../../../../../proto/admiral/common/v1/token_pb.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAC;AAEjF,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAG9C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAExD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAElD;;GAEG;AACH,eAAO,MAAM,4BAA4B,EAAE,OACu3C,CAAC;AAEn6C;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,MAAM,WAAW,GAAG,OAAO,CAAC,+BAA+B,CAAC,GAAG;IACnE;;;;OAIG;IACH,EAAE,EAAE,MAAM,CAAC;IAEX;;;;;;OAMG;IACH,IAAI,EAAE,MAAM,CAAC;IAEb;;;;;;;;OAQG;IACH,WAAW,EAAE,MAAM,CAAC;IAEpB;;;;OAIG;IACH,SAAS,EAAE,SAAS,CAAC;IAErB;;;;;;OAMG;IACH,MAAM,EAAE,MAAM,EAAE,CAAC;IAEjB;;;;OAIG;IACH,MAAM,EAAE,iBAAiB,CAAC;IAE1B;;;;OAIG;IACH,WAAW,EAAE,WAAW,CAAC;IAEzB;;;;;;OAMG;IACH,SAAS,EAAE,MAAM,CAAC;IAElB;;;;OAIG;IACH,SAAS,CAAC,EAAE,SAAS,GAAG,SAAS,CAAC;IAElC;;;;OAIG;IACH,UAAU,CAAC,EAAE,SAAS,GAAG,SAAS,CAAC;IAEnC;;;;OAIG;IACH,SAAS,CAAC,EAAE,SAAS,GAAG,SAAS,CAAC;IAElC;;;;;OAKG;IACH,SAAS,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAC;IAEjC;;;;OAIG;IACH,SAAS,CAAC,EAAE,SAAS,GAAG,SAAS,CAAC;CACnC,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,iBAAiB,EAAE,UAAU,CAAC,WAAW,CACR,CAAC;AAE/C;;;;;;GAMG;AACH,oBAAY,SAAS;IACnB;;;;OAIG;IACH,WAAW,IAAI;IAEf;;;;OAIG;IACH,GAAG,IAAI;IAEP;;;;OAIG;IACH,GAAG,IAAI;CACR;AAED;;GAEG;AACH,eAAO,MAAM,eAAe,EAAE,OAAO,CAAC,SAAS,CACJ,CAAC;AAE5C;;;;GAIG;AACH,oBAAY,WAAW;IACrB;;;;OAIG;IACH,WAAW,IAAI;IAEf;;;;OAIG;IACH,IAAI,IAAI;IAER;;;;;OAKG;IACH,eAAe,IAAI;CACpB;AAED;;GAEG;AACH,eAAO,MAAM,iBAAiB,EAAE,OAAO,CAAC,WAAW,CACR,CAAC;AAE5C;;;;GAIG;AACH,oBAAY,iBAAiB;IAC3B;;;;OAIG;IACH,WAAW,IAAI;IAEf;;;;OAIG;IACH,MAAM,IAAI;IAEV;;;;OAIG;IACH,OAAO,IAAI;CACZ;AAED;;GAEG;AACH,eAAO,MAAM,uBAAuB,EAAE,OAAO,CAAC,iBAAiB,CACpB,CAAC"}

package/dist/proto/admiral/common/v1/token_pb.js

@@ -1,110 +0,0 @@
-// @generated by protoc-gen-es v2.14.0 with parameter "target=ts,import_extension=js"
-// @generated from file admiral/common/v1/token.proto (package admiral.common.v1, syntax proto3)
-/* eslint-disable */
-import { enumDesc, fileDesc, messageDesc } from "@bufbuild/protobuf/codegenv2";
-import { file_admiral_common_v1_actor } from "./actor_pb.js";
-import { file_buf_validate_validate } from "../../../buf/validate/validate_pb.js";
-import { file_google_protobuf_timestamp } from "@bufbuild/protobuf/wkt";
-/**
- * Describes the file admiral/common/v1/token.proto.
- */
-export const file_admiral_common_v1_token = /*@__PURE__*/ fileDesc("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", [file_admiral_common_v1_actor, file_buf_validate_validate, file_google_protobuf_timestamp]);
-/**
- * Describes the message admiral.common.v1.AccessToken.
- * Use `create(AccessTokenSchema)` to create a new message.
- */
-export const AccessTokenSchema = /*@__PURE__*/ messageDesc(file_admiral_common_v1_token, 0);
-/**
- * TokenType identifies the category of an access token issued by Admiral's token system.
- * IDP-issued JWTs (OAuth2/OIDC sessions) are NOT represented here. They are
- * resolved by separate middleware.
- *
- * @generated from enum admiral.common.v1.TokenType
- */
-export var TokenType;
-(function (TokenType) {
-    /**
-     * Default value. Must not be used.
-     *
-     * @generated from enum value: TOKEN_TYPE_UNSPECIFIED = 0;
-     */
-    TokenType[TokenType["UNSPECIFIED"] = 0] = "UNSPECIFIED";
-    /**
-     * Personal Access Token, bound to a user.
-     *
-     * @generated from enum value: TOKEN_TYPE_PAT = 1;
-     */
-    TokenType[TokenType["PAT"] = 1] = "PAT";
-    /**
-     * Service Access Token, bound to a service account.
-     *
-     * @generated from enum value: TOKEN_TYPE_SAT = 2;
-     */
-    TokenType[TokenType["SAT"] = 2] = "SAT";
-})(TokenType || (TokenType = {}));
-/**
- * Describes the enum admiral.common.v1.TokenType.
- */
-export const TokenTypeSchema = /*@__PURE__*/ enumDesc(file_admiral_common_v1_token, 0);
-/**
- * BindingType identifies the kind of resource an access token is bound to.
- *
- * @generated from enum admiral.common.v1.BindingType
- */
-export var BindingType;
-(function (BindingType) {
-    /**
-     * Default value. Must not be used.
-     *
-     * @generated from enum value: BINDING_TYPE_UNSPECIFIED = 0;
-     */
-    BindingType[BindingType["UNSPECIFIED"] = 0] = "UNSPECIFIED";
-    /**
-     * Token is bound to a user (PATs).
-     *
-     * @generated from enum value: BINDING_TYPE_USER = 1;
-     */
-    BindingType[BindingType["USER"] = 1] = "USER";
-    /**
-     * Token is bound to a service account (SATs). An agent has a service account;
-     * which agent, if any, is resolved from the service account record.
-     *
-     * @generated from enum value: BINDING_TYPE_SERVICE_ACCOUNT = 2;
-     */
-    BindingType[BindingType["SERVICE_ACCOUNT"] = 2] = "SERVICE_ACCOUNT";
-})(BindingType || (BindingType = {}));
-/**
- * Describes the enum admiral.common.v1.BindingType.
- */
-export const BindingTypeSchema = /*@__PURE__*/ enumDesc(file_admiral_common_v1_token, 1);
-/**
- * AccessTokenStatus represents the lifecycle state of an access token.
- *
- * @generated from enum admiral.common.v1.AccessTokenStatus
- */
-export var AccessTokenStatus;
-(function (AccessTokenStatus) {
-    /**
-     * Default value. Must not be used.
-     *
-     * @generated from enum value: ACCESS_TOKEN_STATUS_UNSPECIFIED = 0;
-     */
-    AccessTokenStatus[AccessTokenStatus["UNSPECIFIED"] = 0] = "UNSPECIFIED";
-    /**
-     * The token is valid and can be used for authentication.
-     *
-     * @generated from enum value: ACCESS_TOKEN_STATUS_ACTIVE = 1;
-     */
-    AccessTokenStatus[AccessTokenStatus["ACTIVE"] = 1] = "ACTIVE";
-    /**
-     * The token has been permanently revoked and cannot be used.
-     *
-     * @generated from enum value: ACCESS_TOKEN_STATUS_REVOKED = 2;
-     */
-    AccessTokenStatus[AccessTokenStatus["REVOKED"] = 2] = "REVOKED";
-})(AccessTokenStatus || (AccessTokenStatus = {}));
-/**
- * Describes the enum admiral.common.v1.AccessTokenStatus.
- */
-export const AccessTokenStatusSchema = /*@__PURE__*/ enumDesc(file_admiral_common_v1_token, 2);
-//# sourceMappingURL=token_pb.js.map

package/dist/proto/admiral/common/v1/token_pb.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"token_pb.js","sourceRoot":"","sources":["../../../../../proto/admiral/common/v1/token_pb.ts"],"names":[],"mappings":"AAAA,qFAAqF;AACrF,gGAAgG;AAChG,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAE/E,OAAO,EAAE,4BAA4B,EAAE,MAAM,eAAe,CAAC;AAC7D,OAAO,EAAE,0BAA0B,EAAE,MAAM,sCAAsC,CAAC;AAElF,OAAO,EAAE,8BAA8B,EAAE,MAAM,wBAAwB,CAAC;AAGxE;;GAEG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAY,aAAa,CAChE,QAAQ,CAAC,0zCAA0zC,EAAE,CAAC,4BAA4B,EAAE,0BAA0B,EAAE,8BAA8B,CAAC,CAAC,CAAC;AAqIn6C;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAA4B,aAAa,CACrE,WAAW,CAAC,4BAA4B,EAAE,CAAC,CAAC,CAAC;AAE/C;;;;;;GAMG;AACH,MAAM,CAAN,IAAY,SAqBX;AArBD,WAAY,SAAS;IACnB;;;;OAIG;IACH,uDAAe,CAAA;IAEf;;;;OAIG;IACH,uCAAO,CAAA;IAEP;;;;OAIG;IACH,uCAAO,CAAA;AACT,CAAC,EArBW,SAAS,KAAT,SAAS,QAqBpB;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,eAAe,GAAuB,aAAa,CAC9D,QAAQ,CAAC,4BAA4B,EAAE,CAAC,CAAC,CAAC;AAE5C;;;;GAIG;AACH,MAAM,CAAN,IAAY,WAsBX;AAtBD,WAAY,WAAW;IACrB;;;;OAIG;IACH,2DAAe,CAAA;IAEf;;;;OAIG;IACH,6CAAQ,CAAA;IAER;;;;;OAKG;IACH,mEAAmB,CAAA;AACrB,CAAC,EAtBW,WAAW,KAAX,WAAW,QAsBtB;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAyB,aAAa,CAClE,QAAQ,CAAC,4BAA4B,EAAE,CAAC,CAAC,CAAC;AAE5C;;;;GAIG;AACH,MAAM,CAAN,IAAY,iBAqBX;AArBD,WAAY,iBAAiB;IAC3B;;;;OAIG;IACH,uEAAe,CAAA;IAEf;;;;OAIG;IACH,6DAAU,CAAA;IAEV;;;;OAIG;IACH,+DAAW,CAAA;AACb,CAAC,EArBW,iBAAiB,KAAjB,iBAAiB,QAqB5B;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAA+B,aAAa,CAC9E,QAAQ,CAAC,4BAA4B,EAAE,CAAC,CAAC,CAAC"}