@archildata/api-types 0.0.1 → 0.0.2

package/index.d.ts

@@ -485,6 +485,15 @@ export interface components {
              * @description Deprecated. Last 4 characters of the token. Required when principal is provided; ignored when the server generates the token.
              */
             tokenSuffix?: string;
+            /** @description Optional time-to-live for the token as a Go duration string (e.g. "1h", "30m", "24h"). The server computes expiresAt = now + ttl. Maximum 365 days ("8760h"). Expired tokens are rejected at mount time but remain visible in the disk's authorized users list. Mutually exclusive with expiresAt. */
+            ttl?: string;
+            /**
+             * Format: date-time
+             * @description Optional absolute expiration time as an RFC3339 timestamp (e.g. "2026-07-15T00:00:00Z"). Must be in the future. Mutually exclusive with ttl.
+             */
+            expiresAt?: string;
+            /** @description When true, the token can only be used for a single mount authentication. After the first successful mount, subsequent attempts are rejected. Consumed tokens remain visible in the disk's authorized users list. */
+            oneUse?: boolean;
         };
         AwsStsUser: {
             /**
@@ -494,6 +503,15 @@ export interface components {
             type: "awssts";
             /** @description IAM principal ARN */
             principal: string;
+            /** @description Optional time-to-live as a Go duration string (e.g. "1h", "30m"). Maximum 365 days ("8760h"). Mutually exclusive with expiresAt. */
+            ttl?: string;
+            /**
+             * Format: date-time
+             * @description Optional absolute expiration time as an RFC3339 timestamp. Must be in the future. Mutually exclusive with ttl.
+             */
+            expiresAt?: string;
+            /** @description When true, the credential can only be used for a single mount authentication. */
+            oneUse?: boolean;
         };
         DiskUser: components["schemas"]["TokenUser"] | components["schemas"]["AwsStsUser"];
         DiskResponse: {
@@ -630,6 +648,23 @@ export interface components {
             identifier?: string;
             /** Format: date-time */
             createdAt?: string;
+            /**
+             * Format: date-time
+             * @description When the token expires. Absent for tokens without a TTL.
+             */
+            expiresAt?: string;
+            /** @description Whether this token is single-use. */
+            oneUse?: boolean;
+            /**
+             * Format: date-time
+             * @description When the one-use token was consumed (first successful mount auth). Absent if the token has not been consumed or is not one-use.
+             */
+            consumedAt?: string;
+            /**
+             * @description Current lifecycle status of the token.
+             * @enum {string}
+             */
+            status?: "active" | "expired" | "consumed";
         };
         /** @description All API responses use a standard envelope with `success: boolean` and `data` (on success) or `error: string` (on failure). The ApiResponse_* schemas each define the specific `data` shape for their endpoint. */
         ApiResponse_DiskList: {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@archildata/api-types",
-  "version": "0.0.1",
+  "version": "0.0.2",
   "description": "API types for the Archil control plane",
   "type": "module",
   "types": "index.d.ts",