@cadenya/cadenya 0.120.0 → 0.122.0

package/resources/account.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"account.d.mts","sourceRoot":"","sources":["../src/resources/account.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,6BAAyB;AAC/C,OAAO,KAAK,MAAM,qBAAiB;AACnC,OAAO,KAAK,aAAa,yBAAqB;AAC9C,OAAO,KAAK,UAAU,gCAA4B;AAClD,OAAO,EAAE,UAAU,EAAE,gCAA4B;AACjD,OAAO,EAAE,gBAAgB,EAAE,+BAA2B;AACtD,OAAO,EAAE,cAAc,EAAE,wCAAoC;AAE7D;;;GAGG;AACH,qBAAa,eAAgB,SAAQ,WAAW;IAC9C;;;OAGG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,cAAc,GAAG,UAAU,CAAC,OAAO,CAAC;IAIvD;;;OAGG;IACH,oBAAoB,CAAC,OAAO,CAAC,EAAE,cAAc,GAAG,UAAU,CAAC,4BAA4B,CAAC;IAIxF;;OAEG;IACH,uBAAuB,CAAC,OAAO,CAAC,EAAE,cAAc,GAAG,UAAU,CAAC,+BAA+B,CAAC;CAG/F;AAED,MAAM,MAAM,wBAAwB,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;AAEjE;;;GAGG;AACH,MAAM,WAAW,OAAO;IACtB;;OAEG;IACH,IAAI,EAAE,WAAW,CAAC;IAElB;;;OAGG;IACH,QAAQ,EAAE,MAAM,CAAC,uBAAuB,CAAC;IAEzC;;OAEG;IACH,IAAI,EAAE,WAAW,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B;;;;;;OAMG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IAExB;;;;OAIG;IACH,YAAY,CAAC,EAAE,UAAU,CAAC,MAAM,CAAC;IAEjC;;;;OAIG;IACH,uBAAuB,CAAC,EAAE,MAAM,CAAC;CAClC;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB,UAAU,CAAC,EAAE,KAAK,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;CAC7C;AAED;;;;GAIG;AACH,MAAM,WAAW,OAAO;IACtB;;;OAGG;IACH,QAAQ,EAAE,MAAM,CAAC,uBAAuB,CAAC;IAEzC;;OAEG;IACH,IAAI,EAAE,WAAW,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B;;OAEG;IACH,IAAI,EAAE,0BAA0B,GAAG,mBAAmB,GAAG,sBAAsB,GAAG,qBAAqB,CAAC;IAExG;;;OAGG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;GAEG;AACH,MAAM,WAAW,4BAA4B;IAC3C,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;GAEG;AACH,MAAM,WAAW,+BAA+B;IAC9C,uBAAuB,CAAC,EAAE,MAAM,CAAC;CAClC;AAED,MAAM,CAAC,OAAO,WAAW,eAAe,CAAC;IACvC,OAAO,EACL,KAAK,OAAO,IAAI,OAAO,EACvB,KAAK,WAAW,IAAI,WAAW,EAC/B,KAAK,WAAW,IAAI,WAAW,EAC/B,KAAK,OAAO,IAAI,OAAO,EACvB,KAAK,WAAW,IAAI,WAAW,EAC/B,KAAK,4BAA4B,IAAI,4BAA4B,EACjE,KAAK,+BAA+B,IAAI,+BAA+B,GACxE,CAAC;CACH"}
+{"version":3,"file":"account.d.mts","sourceRoot":"","sources":["../src/resources/account.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,6BAAyB;AAC/C,OAAO,KAAK,UAAU,uBAAmB;AACzC,OAAO,KAAK,MAAM,qBAAiB;AACnC,OAAO,KAAK,aAAa,yBAAqB;AAC9C,OAAO,EAAE,UAAU,EAAE,gCAA4B;AACjD,OAAO,EAAE,gBAAgB,EAAE,+BAA2B;AACtD,OAAO,EAAE,cAAc,EAAE,wCAAoC;AAE7D;;;GAGG;AACH,qBAAa,eAAgB,SAAQ,WAAW;IAC9C;;;OAGG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,cAAc,GAAG,UAAU,CAAC,OAAO,CAAC;IAIvD;;;OAGG;IACH,oBAAoB,CAAC,OAAO,CAAC,EAAE,cAAc,GAAG,UAAU,CAAC,4BAA4B,CAAC;IAIxF;;OAEG;IACH,uBAAuB,CAAC,OAAO,CAAC,EAAE,cAAc,GAAG,UAAU,CAAC,+BAA+B,CAAC;CAG/F;AAED,MAAM,MAAM,wBAAwB,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;AAEjE;;;GAGG;AACH,MAAM,WAAW,OAAO;IACtB;;OAEG;IACH,IAAI,EAAE,WAAW,CAAC;IAElB;;;OAGG;IACH,QAAQ,EAAE,MAAM,CAAC,uBAAuB,CAAC;IAEzC;;OAEG;IACH,IAAI,EAAE,WAAW,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B;;;;;;OAMG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IAExB;;;;;OAKG;IACH,YAAY,CAAC,EAAE,UAAU,CAAC,MAAM,CAAC;IAEjC;;;;OAIG;IACH,uBAAuB,CAAC,EAAE,MAAM,CAAC;CAClC;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB,UAAU,CAAC,EAAE,KAAK,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;CAC7C;AAED;;;;GAIG;AACH,MAAM,WAAW,OAAO;IACtB;;;OAGG;IACH,QAAQ,EAAE,MAAM,CAAC,uBAAuB,CAAC;IAEzC;;OAEG;IACH,IAAI,EAAE,WAAW,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B;;OAEG;IACH,IAAI,EAAE,0BAA0B,GAAG,mBAAmB,GAAG,sBAAsB,GAAG,qBAAqB,CAAC;IAExG;;;OAGG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;GAEG;AACH,MAAM,WAAW,4BAA4B;IAC3C,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;GAEG;AACH,MAAM,WAAW,+BAA+B;IAC9C,uBAAuB,CAAC,EAAE,MAAM,CAAC;CAClC;AAED,MAAM,CAAC,OAAO,WAAW,eAAe,CAAC;IACvC,OAAO,EACL,KAAK,OAAO,IAAI,OAAO,EACvB,KAAK,WAAW,IAAI,WAAW,EAC/B,KAAK,WAAW,IAAI,WAAW,EAC/B,KAAK,OAAO,IAAI,OAAO,EACvB,KAAK,WAAW,IAAI,WAAW,EAC/B,KAAK,4BAA4B,IAAI,4BAA4B,EACjE,KAAK,+BAA+B,IAAI,+BAA+B,GACxE,CAAC;CACH"}

package/resources/account.d.ts

@@ -1,7 +1,7 @@
 import { APIResource } from "../core/resource.js";
+import * as APIKeysAPI from "./api-keys.js";
 import * as Shared from "./shared.js";
 import * as WorkspacesAPI from "./workspaces.js";
-import * as APIKeysAPI from "./api-keys/api-keys.js";
 import { APIPromise } from "../core/api-promise.js";
 import { CursorPagination } from "../core/pagination.js";
 import { RequestOptions } from "../internal/request-options.js";
@@ -58,9 +58,10 @@ export interface AccountInfo {
      */
     challengeToken?: string;
     /**
-     * An API key for the account. Use workspace-association RPCs to grant the key
-     * access to specific workspaces; a key with zero workspaces is valid but cannot
-     * access workspace-scoped resources.
+     * An API key. Every key belongs to exactly one workspace and is managed via the
+     * workspace-scoped API key routes. The only exception is the system-managed global
+     * account key, which spans all workspaces and is managed via the account
+     * global_api_key routes.
      */
     globalApiKey?: APIKeysAPI.APIKey;
     /**

package/resources/account.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"account.d.ts","sourceRoot":"","sources":["../src/resources/account.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,4BAAyB;AAC/C,OAAO,KAAK,MAAM,oBAAiB;AACnC,OAAO,KAAK,aAAa,wBAAqB;AAC9C,OAAO,KAAK,UAAU,+BAA4B;AAClD,OAAO,EAAE,UAAU,EAAE,+BAA4B;AACjD,OAAO,EAAE,gBAAgB,EAAE,8BAA2B;AACtD,OAAO,EAAE,cAAc,EAAE,uCAAoC;AAE7D;;;GAGG;AACH,qBAAa,eAAgB,SAAQ,WAAW;IAC9C;;;OAGG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,cAAc,GAAG,UAAU,CAAC,OAAO,CAAC;IAIvD;;;OAGG;IACH,oBAAoB,CAAC,OAAO,CAAC,EAAE,cAAc,GAAG,UAAU,CAAC,4BAA4B,CAAC;IAIxF;;OAEG;IACH,uBAAuB,CAAC,OAAO,CAAC,EAAE,cAAc,GAAG,UAAU,CAAC,+BAA+B,CAAC;CAG/F;AAED,MAAM,MAAM,wBAAwB,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;AAEjE;;;GAGG;AACH,MAAM,WAAW,OAAO;IACtB;;OAEG;IACH,IAAI,EAAE,WAAW,CAAC;IAElB;;;OAGG;IACH,QAAQ,EAAE,MAAM,CAAC,uBAAuB,CAAC;IAEzC;;OAEG;IACH,IAAI,EAAE,WAAW,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B;;;;;;OAMG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IAExB;;;;OAIG;IACH,YAAY,CAAC,EAAE,UAAU,CAAC,MAAM,CAAC;IAEjC;;;;OAIG;IACH,uBAAuB,CAAC,EAAE,MAAM,CAAC;CAClC;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB,UAAU,CAAC,EAAE,KAAK,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;CAC7C;AAED;;;;GAIG;AACH,MAAM,WAAW,OAAO;IACtB;;;OAGG;IACH,QAAQ,EAAE,MAAM,CAAC,uBAAuB,CAAC;IAEzC;;OAEG;IACH,IAAI,EAAE,WAAW,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B;;OAEG;IACH,IAAI,EAAE,0BAA0B,GAAG,mBAAmB,GAAG,sBAAsB,GAAG,qBAAqB,CAAC;IAExG;;;OAGG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;GAEG;AACH,MAAM,WAAW,4BAA4B;IAC3C,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;GAEG;AACH,MAAM,WAAW,+BAA+B;IAC9C,uBAAuB,CAAC,EAAE,MAAM,CAAC;CAClC;AAED,MAAM,CAAC,OAAO,WAAW,eAAe,CAAC;IACvC,OAAO,EACL,KAAK,OAAO,IAAI,OAAO,EACvB,KAAK,WAAW,IAAI,WAAW,EAC/B,KAAK,WAAW,IAAI,WAAW,EAC/B,KAAK,OAAO,IAAI,OAAO,EACvB,KAAK,WAAW,IAAI,WAAW,EAC/B,KAAK,4BAA4B,IAAI,4BAA4B,EACjE,KAAK,+BAA+B,IAAI,+BAA+B,GACxE,CAAC;CACH"}
+{"version":3,"file":"account.d.ts","sourceRoot":"","sources":["../src/resources/account.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,4BAAyB;AAC/C,OAAO,KAAK,UAAU,sBAAmB;AACzC,OAAO,KAAK,MAAM,oBAAiB;AACnC,OAAO,KAAK,aAAa,wBAAqB;AAC9C,OAAO,EAAE,UAAU,EAAE,+BAA4B;AACjD,OAAO,EAAE,gBAAgB,EAAE,8BAA2B;AACtD,OAAO,EAAE,cAAc,EAAE,uCAAoC;AAE7D;;;GAGG;AACH,qBAAa,eAAgB,SAAQ,WAAW;IAC9C;;;OAGG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,cAAc,GAAG,UAAU,CAAC,OAAO,CAAC;IAIvD;;;OAGG;IACH,oBAAoB,CAAC,OAAO,CAAC,EAAE,cAAc,GAAG,UAAU,CAAC,4BAA4B,CAAC;IAIxF;;OAEG;IACH,uBAAuB,CAAC,OAAO,CAAC,EAAE,cAAc,GAAG,UAAU,CAAC,+BAA+B,CAAC;CAG/F;AAED,MAAM,MAAM,wBAAwB,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;AAEjE;;;GAGG;AACH,MAAM,WAAW,OAAO;IACtB;;OAEG;IACH,IAAI,EAAE,WAAW,CAAC;IAElB;;;OAGG;IACH,QAAQ,EAAE,MAAM,CAAC,uBAAuB,CAAC;IAEzC;;OAEG;IACH,IAAI,EAAE,WAAW,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B;;;;;;OAMG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IAExB;;;;;OAKG;IACH,YAAY,CAAC,EAAE,UAAU,CAAC,MAAM,CAAC;IAEjC;;;;OAIG;IACH,uBAAuB,CAAC,EAAE,MAAM,CAAC;CAClC;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB,UAAU,CAAC,EAAE,KAAK,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;CAC7C;AAED;;;;GAIG;AACH,MAAM,WAAW,OAAO;IACtB;;;OAGG;IACH,QAAQ,EAAE,MAAM,CAAC,uBAAuB,CAAC;IAEzC;;OAEG;IACH,IAAI,EAAE,WAAW,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B;;OAEG;IACH,IAAI,EAAE,0BAA0B,GAAG,mBAAmB,GAAG,sBAAsB,GAAG,qBAAqB,CAAC;IAExG;;;OAGG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;GAEG;AACH,MAAM,WAAW,4BAA4B;IAC3C,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;GAEG;AACH,MAAM,WAAW,+BAA+B;IAC9C,uBAAuB,CAAC,EAAE,MAAM,CAAC;CAClC;AAED,MAAM,CAAC,OAAO,WAAW,eAAe,CAAC;IACvC,OAAO,EACL,KAAK,OAAO,IAAI,OAAO,EACvB,KAAK,WAAW,IAAI,WAAW,EAC/B,KAAK,WAAW,IAAI,WAAW,EAC/B,KAAK,OAAO,IAAI,OAAO,EACvB,KAAK,WAAW,IAAI,WAAW,EAC/B,KAAK,4BAA4B,IAAI,4BAA4B,EACjE,KAAK,+BAA+B,IAAI,+BAA+B,GACxE,CAAC;CACH"}

package/resources/api-keys.d.mts

@@ -1,2 +1,259 @@
-export * from "./api-keys/index.mjs";
+import { APIResource } from "../core/resource.mjs";
+import * as AccountAPI from "./account.mjs";
+import * as Shared from "./shared.mjs";
+import { APIPromise } from "../core/api-promise.mjs";
+import { CursorPagination, type CursorPaginationParams, PagePromise } from "../core/pagination.mjs";
+import { RequestOptions } from "../internal/request-options.mjs";
+/**
+ * Issue, rotate, disable, and revoke a workspace's API keys. Every key
+ *  belongs to exactly one workspace; the system-managed global account key is
+ *  managed via GlobalAPIKeyService instead.
+ */
+export declare class APIKeys extends APIResource {
+    /**
+     * Creates a new API key in the workspace.
+     */
+    create(workspaceID: string, body: APIKeyCreateParams, options?: RequestOptions): APIPromise<APIKey>;
+    /**
+     * Retrieves an API key by ID.
+     */
+    retrieve(id: string, params: APIKeyRetrieveParams, options?: RequestOptions): APIPromise<APIKey>;
+    /**
+     * Updates an API key.
+     */
+    update(id: string, params: APIKeyUpdateParams, options?: RequestOptions): APIPromise<APIKey>;
+    /**
+     * Lists the workspace's API keys.
+     */
+    list(workspaceID: string, query?: APIKeyListParams | null | undefined, options?: RequestOptions): PagePromise<APIKeysCursorPagination, APIKey>;
+    /**
+     * Deletes an API key.
+     */
+    delete(id: string, params: APIKeyDeleteParams, options?: RequestOptions): APIPromise<void>;
+    /**
+     * Disables an API key. While disabled, presenting the key's token fails
+     * authentication on every endpoint; the key is retained. Idempotent.
+     */
+    disable(id: string, params: APIKeyDisableParams, options?: RequestOptions): APIPromise<APIKey>;
+    /**
+     * Re-enables a disabled API key so its token authenticates again. Idempotent.
+     */
+    enable(id: string, params: APIKeyEnableParams, options?: RequestOptions): APIPromise<APIKey>;
+    /**
+     * Rotates an API key and returns a new token. All previous tokens for this key are
+     * invalidated.
+     */
+    rotate(id: string, params: APIKeyRotateParams, options?: RequestOptions): APIPromise<APIKey>;
+}
+export type APIKeysCursorPagination = CursorPagination<APIKey>;
+/**
+ * An API key. Every key belongs to exactly one workspace and is managed via the
+ * workspace-scoped API key routes. The only exception is the system-managed global
+ * account key, which spans all workspaces and is managed via the account
+ * global_api_key routes.
+ */
+export interface APIKey {
+    /**
+     * AccountResourceMetadata is used to represent a resource that is associated to an
+     * account but not to a workspace.
+     */
+    metadata: Shared.AccountResourceMetadata;
+    /**
+     * Configuration for an API key.
+     */
+    spec: APIKeySpec;
+    /**
+     * The current lifecycle state of the API key. Output only. Keys are created
+     * STATE_ENABLED; use the :disable and :enable actions to transition between
+     * states.
+     */
+    state: 'STATE_UNSPECIFIED' | 'STATE_ENABLED' | 'STATE_DISABLED';
+    info?: APIKeyInfo;
+}
+export interface APIKeyInfo {
+    /**
+     * A profile identifies a user or non-human principal (such as an API key) at the
+     * account level. Profiles are account-scoped and can be granted access to multiple
+     * workspaces.
+     */
+    createdBy?: AccountAPI.Profile;
+}
+/**
+ * Configuration for an API key.
+ */
+export interface APIKeySpec {
+    /**
+     * The bearer token used to authenticate as this API key. Returned only on creation
+     * and rotation; subsequent reads omit this field.
+     */
+    token?: string;
+    /**
+     * Free-form description of what this API key is used for.
+     */
+    description?: string;
+    /**
+     * Scopes granted to this key. Each entry is a colon-separated resource:verb string
+     * (e.g. "objectives:manage").
+     *
+     * Resources: agents, objectives, tools, memory, api_keys, workspaces, secrets,
+     * account. Verbs: read and manage, where manage implies read — a stored scope set
+     * is normalized to drop "x:read" when "x:manage" is present. The secrets and
+     * account resources support only manage. "\*" is an explicit full-access grant.
+     *
+     * Scopes are deny-by-default: a key with an empty list can call only scope-free
+     * endpoints. Full access is always an explicit "\*" grant.
+     */
+    permissions?: Array<string>;
+    /**
+     * True when this key is managed by the system (i.e. the auto-provisioned global
+     * account key). System keys cannot be deleted but can be rotated.
+     */
+    system?: boolean;
+}
+export interface APIKeyCreateParams {
+    /**
+     * CreateAccountResourceMetadata contains the user-provided fields for creating an
+     * account-scoped resource. Read-only fields (id, account_id, profile_id) are
+     * excluded since they are set by the server.
+     */
+    metadata: APIKeyCreateParams.Metadata;
+    /**
+     * Configuration for an API key.
+     */
+    spec: APIKeySpec;
+}
+export declare namespace APIKeyCreateParams {
+    /**
+     * CreateAccountResourceMetadata contains the user-provided fields for creating an
+     * account-scoped resource. Read-only fields (id, account_id, profile_id) are
+     * excluded since they are set by the server.
+     */
+    interface Metadata {
+        /**
+         * Human-readable name for the resource (e.g., "Production API Key", "Staging
+         * Workspace")
+         */
+        name: string;
+        /**
+         * External ID for the resource (e.g., a workflow ID from an external system)
+         */
+        externalId?: string;
+        /**
+         * Key-value pairs for categorization and filtering. Values are 0-63 alphanumeric
+         * characters with "-", "\_", or "." allowed between; keys follow the same shape
+         * and additionally accept an optional DNS-subdomain prefix (e.g. "cadenya.com/")
+         * of at most 253 characters. Examples: {"environment": "production", "team":
+         * "platform", "version": "v2"}
+         */
+        labels?: {
+            [key: string]: string;
+        };
+    }
+}
+export interface APIKeyRetrieveParams {
+    /**
+     * The workspace the API key belongs to (path).
+     */
+    workspaceId: string;
+}
+export interface APIKeyUpdateParams {
+    /**
+     * Path param: The workspace the API key belongs to (path).
+     */
+    workspaceId: string;
+    /**
+     * Body param: UpdateAccountResourceMetadata contains the user-provided fields for
+     * updating an account-scoped resource. Read-only fields (id, account_id,
+     * profile_id) are excluded since they are set by the server.
+     */
+    metadata?: APIKeyUpdateParams.Metadata;
+    /**
+     * Body param: Configuration for an API key.
+     */
+    spec?: APIKeySpec;
+    /**
+     * Body param: Fields to update.
+     */
+    updateMask?: string;
+}
+export declare namespace APIKeyUpdateParams {
+    /**
+     * UpdateAccountResourceMetadata contains the user-provided fields for updating an
+     * account-scoped resource. Read-only fields (id, account_id, profile_id) are
+     * excluded since they are set by the server.
+     */
+    interface Metadata {
+        /**
+         * Human-readable name for the resource (e.g., "Production API Key", "Staging
+         * Workspace")
+         */
+        name: string;
+        /**
+         * External ID for the resource (e.g., a workflow ID from an external system)
+         */
+        externalId?: string;
+        /**
+         * Key-value pairs for categorization and filtering. Values are 0-63 alphanumeric
+         * characters with "-", "\_", or "." allowed between; keys follow the same shape
+         * and additionally accept an optional DNS-subdomain prefix (e.g. "cadenya.com/")
+         * of at most 253 characters. Examples: {"environment": "production", "team":
+         * "platform", "version": "v2"}
+         */
+        labels?: {
+            [key: string]: string;
+        };
+    }
+}
+export interface APIKeyListParams extends CursorPaginationParams {
+    /**
+     * When true, included info fields are populated. Requests with this flag count
+     * more against your rate limit.
+     */
+    includeInfo?: boolean;
+    /**
+     * Filters by metadata labels. Comma-separated key=value pairs, e.g.
+     * "env=prod,team=ai". A resource matches only if every pair matches exactly (AND
+     * semantics).
+     */
+    labels?: string;
+    /**
+     * Filter by ID prefix.
+     */
+    prefix?: string;
+    /**
+     * Free-form search query.
+     */
+    query?: string;
+    /**
+     * Sort order for results (asc or desc by creation time).
+     */
+    sortOrder?: string;
+}
+export interface APIKeyDeleteParams {
+    /**
+     * The workspace the API key belongs to (path).
+     */
+    workspaceId: string;
+}
+export interface APIKeyDisableParams {
+    /**
+     * The workspace the API key belongs to (path).
+     */
+    workspaceId: string;
+}
+export interface APIKeyEnableParams {
+    /**
+     * The workspace the API key belongs to (path).
+     */
+    workspaceId: string;
+}
+export interface APIKeyRotateParams {
+    /**
+     * The workspace the API key belongs to (path).
+     */
+    workspaceId: string;
+}
+export declare namespace APIKeys {
+    export { type APIKey as APIKey, type APIKeyInfo as APIKeyInfo, type APIKeySpec as APIKeySpec, type APIKeysCursorPagination as APIKeysCursorPagination, type APIKeyCreateParams as APIKeyCreateParams, type APIKeyRetrieveParams as APIKeyRetrieveParams, type APIKeyUpdateParams as APIKeyUpdateParams, type APIKeyListParams as APIKeyListParams, type APIKeyDeleteParams as APIKeyDeleteParams, type APIKeyDisableParams as APIKeyDisableParams, type APIKeyEnableParams as APIKeyEnableParams, type APIKeyRotateParams as APIKeyRotateParams, };
+}
 //# sourceMappingURL=api-keys.d.mts.map

package/resources/api-keys.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"api-keys.d.mts","sourceRoot":"","sources":["../src/resources/api-keys.ts"],"names":[],"mappings":"AAEA,qCAAiC"}
+{"version":3,"file":"api-keys.d.mts","sourceRoot":"","sources":["../src/resources/api-keys.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,6BAAyB;AAC/C,OAAO,KAAK,UAAU,sBAAkB;AACxC,OAAO,KAAK,MAAM,qBAAiB;AACnC,OAAO,EAAE,UAAU,EAAE,gCAA4B;AACjD,OAAO,EAAE,gBAAgB,EAAE,KAAK,sBAAsB,EAAE,WAAW,EAAE,+BAA2B;AAEhG,OAAO,EAAE,cAAc,EAAE,wCAAoC;AAG7D;;;;GAIG;AACH,qBAAa,OAAQ,SAAQ,WAAW;IACtC;;OAEG;IACH,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,UAAU,CAAC,MAAM,CAAC;IAInG;;OAEG;IACH,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,oBAAoB,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,UAAU,CAAC,MAAM,CAAC;IAKhG;;OAEG;IACH,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,kBAAkB,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,UAAU,CAAC,MAAM,CAAC;IAK5F;;OAEG;IACH,IAAI,CACF,WAAW,EAAE,MAAM,EACnB,KAAK,GAAE,gBAAgB,GAAG,IAAI,GAAG,SAAc,EAC/C,OAAO,CAAC,EAAE,cAAc,GACvB,WAAW,CAAC,uBAAuB,EAAE,MAAM,CAAC;IAO/C;;OAEG;IACH,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,kBAAkB,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,UAAU,CAAC,IAAI,CAAC;IAQ1F;;;OAGG;IACH,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,mBAAmB,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,UAAU,CAAC,MAAM,CAAC;IAQ9F;;OAEG;IACH,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,kBAAkB,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,UAAU,CAAC,MAAM,CAAC;IAK5F;;;OAGG;IACH,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,kBAAkB,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,UAAU,CAAC,MAAM,CAAC;CAI7F;AAED,MAAM,MAAM,uBAAuB,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;AAE/D;;;;;GAKG;AACH,MAAM,WAAW,MAAM;IACrB;;;OAGG;IACH,QAAQ,EAAE,MAAM,CAAC,uBAAuB,CAAC;IAEzC;;OAEG;IACH,IAAI,EAAE,UAAU,CAAC;IAEjB;;;;OAIG;IACH,KAAK,EAAE,mBAAmB,GAAG,eAAe,GAAG,gBAAgB,CAAC;IAEhE,IAAI,CAAC,EAAE,UAAU,CAAC;CACnB;AAED,MAAM,WAAW,UAAU;IACzB;;;;OAIG;IACH,SAAS,CAAC,EAAE,UAAU,CAAC,OAAO,CAAC;CAChC;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB;;;OAGG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB;;;;;;;;;;;OAWG;IACH,WAAW,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAE5B;;;OAGG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,kBAAkB;IACjC;;;;OAIG;IACH,QAAQ,EAAE,kBAAkB,CAAC,QAAQ,CAAC;IAEtC;;OAEG;IACH,IAAI,EAAE,UAAU,CAAC;CAClB;AAED,yBAAiB,kBAAkB,CAAC;IAClC;;;;OAIG;IACH,UAAiB,QAAQ;QACvB;;;WAGG;QACH,IAAI,EAAE,MAAM,CAAC;QAEb;;WAEG;QACH,UAAU,CAAC,EAAE,MAAM,CAAC;QAEpB;;;;;;WAMG;QACH,MAAM,CAAC,EAAE;YAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;SAAE,CAAC;KACpC;CACF;AAED,MAAM,WAAW,oBAAoB;IACnC;;OAEG;IACH,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,kBAAkB;IACjC;;OAEG;IACH,WAAW,EAAE,MAAM,CAAC;IAEpB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,kBAAkB,CAAC,QAAQ,CAAC;IAEvC;;OAEG;IACH,IAAI,CAAC,EAAE,UAAU,CAAC;IAElB;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,yBAAiB,kBAAkB,CAAC;IAClC;;;;OAIG;IACH,UAAiB,QAAQ;QACvB;;;WAGG;QACH,IAAI,EAAE,MAAM,CAAC;QAEb;;WAEG;QACH,UAAU,CAAC,EAAE,MAAM,CAAC;QAEpB;;;;;;WAMG;QACH,MAAM,CAAC,EAAE;YAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;SAAE,CAAC;KACpC;CACF;AAED,MAAM,WAAW,gBAAiB,SAAQ,sBAAsB;IAC9D;;;OAGG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IAEtB;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,kBAAkB;IACjC;;OAEG;IACH,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,mBAAmB;IAClC;;OAEG;IACH,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,kBAAkB;IACjC;;OAEG;IACH,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,kBAAkB;IACjC;;OAEG;IACH,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,CAAC,OAAO,WAAW,OAAO,CAAC;IAC/B,OAAO,EACL,KAAK,MAAM,IAAI,MAAM,EACrB,KAAK,UAAU,IAAI,UAAU,EAC7B,KAAK,UAAU,IAAI,UAAU,EAC7B,KAAK,uBAAuB,IAAI,uBAAuB,EACvD,KAAK,kBAAkB,IAAI,kBAAkB,EAC7C,KAAK,oBAAoB,IAAI,oBAAoB,EACjD,KAAK,kBAAkB,IAAI,kBAAkB,EAC7C,KAAK,gBAAgB,IAAI,gBAAgB,EACzC,KAAK,kBAAkB,IAAI,kBAAkB,EAC7C,KAAK,mBAAmB,IAAI,mBAAmB,EAC/C,KAAK,kBAAkB,IAAI,kBAAkB,EAC7C,KAAK,kBAAkB,IAAI,kBAAkB,GAC9C,CAAC;CACH"}

package/resources/api-keys.d.ts

@@ -1,2 +1,259 @@
-export * from "./api-keys/index.js";
+import { APIResource } from "../core/resource.js";
+import * as AccountAPI from "./account.js";
+import * as Shared from "./shared.js";
+import { APIPromise } from "../core/api-promise.js";
+import { CursorPagination, type CursorPaginationParams, PagePromise } from "../core/pagination.js";
+import { RequestOptions } from "../internal/request-options.js";
+/**
+ * Issue, rotate, disable, and revoke a workspace's API keys. Every key
+ *  belongs to exactly one workspace; the system-managed global account key is
+ *  managed via GlobalAPIKeyService instead.
+ */
+export declare class APIKeys extends APIResource {
+    /**
+     * Creates a new API key in the workspace.
+     */
+    create(workspaceID: string, body: APIKeyCreateParams, options?: RequestOptions): APIPromise<APIKey>;
+    /**
+     * Retrieves an API key by ID.
+     */
+    retrieve(id: string, params: APIKeyRetrieveParams, options?: RequestOptions): APIPromise<APIKey>;
+    /**
+     * Updates an API key.
+     */
+    update(id: string, params: APIKeyUpdateParams, options?: RequestOptions): APIPromise<APIKey>;
+    /**
+     * Lists the workspace's API keys.
+     */
+    list(workspaceID: string, query?: APIKeyListParams | null | undefined, options?: RequestOptions): PagePromise<APIKeysCursorPagination, APIKey>;
+    /**
+     * Deletes an API key.
+     */
+    delete(id: string, params: APIKeyDeleteParams, options?: RequestOptions): APIPromise<void>;
+    /**
+     * Disables an API key. While disabled, presenting the key's token fails
+     * authentication on every endpoint; the key is retained. Idempotent.
+     */
+    disable(id: string, params: APIKeyDisableParams, options?: RequestOptions): APIPromise<APIKey>;
+    /**
+     * Re-enables a disabled API key so its token authenticates again. Idempotent.
+     */
+    enable(id: string, params: APIKeyEnableParams, options?: RequestOptions): APIPromise<APIKey>;
+    /**
+     * Rotates an API key and returns a new token. All previous tokens for this key are
+     * invalidated.
+     */
+    rotate(id: string, params: APIKeyRotateParams, options?: RequestOptions): APIPromise<APIKey>;
+}
+export type APIKeysCursorPagination = CursorPagination<APIKey>;
+/**
+ * An API key. Every key belongs to exactly one workspace and is managed via the
+ * workspace-scoped API key routes. The only exception is the system-managed global
+ * account key, which spans all workspaces and is managed via the account
+ * global_api_key routes.
+ */
+export interface APIKey {
+    /**
+     * AccountResourceMetadata is used to represent a resource that is associated to an
+     * account but not to a workspace.
+     */
+    metadata: Shared.AccountResourceMetadata;
+    /**
+     * Configuration for an API key.
+     */
+    spec: APIKeySpec;
+    /**
+     * The current lifecycle state of the API key. Output only. Keys are created
+     * STATE_ENABLED; use the :disable and :enable actions to transition between
+     * states.
+     */
+    state: 'STATE_UNSPECIFIED' | 'STATE_ENABLED' | 'STATE_DISABLED';
+    info?: APIKeyInfo;
+}
+export interface APIKeyInfo {
+    /**
+     * A profile identifies a user or non-human principal (such as an API key) at the
+     * account level. Profiles are account-scoped and can be granted access to multiple
+     * workspaces.
+     */
+    createdBy?: AccountAPI.Profile;
+}
+/**
+ * Configuration for an API key.
+ */
+export interface APIKeySpec {
+    /**
+     * The bearer token used to authenticate as this API key. Returned only on creation
+     * and rotation; subsequent reads omit this field.
+     */
+    token?: string;
+    /**
+     * Free-form description of what this API key is used for.
+     */
+    description?: string;
+    /**
+     * Scopes granted to this key. Each entry is a colon-separated resource:verb string
+     * (e.g. "objectives:manage").
+     *
+     * Resources: agents, objectives, tools, memory, api_keys, workspaces, secrets,
+     * account. Verbs: read and manage, where manage implies read — a stored scope set
+     * is normalized to drop "x:read" when "x:manage" is present. The secrets and
+     * account resources support only manage. "\*" is an explicit full-access grant.
+     *
+     * Scopes are deny-by-default: a key with an empty list can call only scope-free
+     * endpoints. Full access is always an explicit "\*" grant.
+     */
+    permissions?: Array<string>;
+    /**
+     * True when this key is managed by the system (i.e. the auto-provisioned global
+     * account key). System keys cannot be deleted but can be rotated.
+     */
+    system?: boolean;
+}
+export interface APIKeyCreateParams {
+    /**
+     * CreateAccountResourceMetadata contains the user-provided fields for creating an
+     * account-scoped resource. Read-only fields (id, account_id, profile_id) are
+     * excluded since they are set by the server.
+     */
+    metadata: APIKeyCreateParams.Metadata;
+    /**
+     * Configuration for an API key.
+     */
+    spec: APIKeySpec;
+}
+export declare namespace APIKeyCreateParams {
+    /**
+     * CreateAccountResourceMetadata contains the user-provided fields for creating an
+     * account-scoped resource. Read-only fields (id, account_id, profile_id) are
+     * excluded since they are set by the server.
+     */
+    interface Metadata {
+        /**
+         * Human-readable name for the resource (e.g., "Production API Key", "Staging
+         * Workspace")
+         */
+        name: string;
+        /**
+         * External ID for the resource (e.g., a workflow ID from an external system)
+         */
+        externalId?: string;
+        /**
+         * Key-value pairs for categorization and filtering. Values are 0-63 alphanumeric
+         * characters with "-", "\_", or "." allowed between; keys follow the same shape
+         * and additionally accept an optional DNS-subdomain prefix (e.g. "cadenya.com/")
+         * of at most 253 characters. Examples: {"environment": "production", "team":
+         * "platform", "version": "v2"}
+         */
+        labels?: {
+            [key: string]: string;
+        };
+    }
+}
+export interface APIKeyRetrieveParams {
+    /**
+     * The workspace the API key belongs to (path).
+     */
+    workspaceId: string;
+}
+export interface APIKeyUpdateParams {
+    /**
+     * Path param: The workspace the API key belongs to (path).
+     */
+    workspaceId: string;
+    /**
+     * Body param: UpdateAccountResourceMetadata contains the user-provided fields for
+     * updating an account-scoped resource. Read-only fields (id, account_id,
+     * profile_id) are excluded since they are set by the server.
+     */
+    metadata?: APIKeyUpdateParams.Metadata;
+    /**
+     * Body param: Configuration for an API key.
+     */
+    spec?: APIKeySpec;
+    /**
+     * Body param: Fields to update.
+     */
+    updateMask?: string;
+}
+export declare namespace APIKeyUpdateParams {
+    /**
+     * UpdateAccountResourceMetadata contains the user-provided fields for updating an
+     * account-scoped resource. Read-only fields (id, account_id, profile_id) are
+     * excluded since they are set by the server.
+     */
+    interface Metadata {
+        /**
+         * Human-readable name for the resource (e.g., "Production API Key", "Staging
+         * Workspace")
+         */
+        name: string;
+        /**
+         * External ID for the resource (e.g., a workflow ID from an external system)
+         */
+        externalId?: string;
+        /**
+         * Key-value pairs for categorization and filtering. Values are 0-63 alphanumeric
+         * characters with "-", "\_", or "." allowed between; keys follow the same shape
+         * and additionally accept an optional DNS-subdomain prefix (e.g. "cadenya.com/")
+         * of at most 253 characters. Examples: {"environment": "production", "team":
+         * "platform", "version": "v2"}
+         */
+        labels?: {
+            [key: string]: string;
+        };
+    }
+}
+export interface APIKeyListParams extends CursorPaginationParams {
+    /**
+     * When true, included info fields are populated. Requests with this flag count
+     * more against your rate limit.
+     */
+    includeInfo?: boolean;
+    /**
+     * Filters by metadata labels. Comma-separated key=value pairs, e.g.
+     * "env=prod,team=ai". A resource matches only if every pair matches exactly (AND
+     * semantics).
+     */
+    labels?: string;
+    /**
+     * Filter by ID prefix.
+     */
+    prefix?: string;
+    /**
+     * Free-form search query.
+     */
+    query?: string;
+    /**
+     * Sort order for results (asc or desc by creation time).
+     */
+    sortOrder?: string;
+}
+export interface APIKeyDeleteParams {
+    /**
+     * The workspace the API key belongs to (path).
+     */
+    workspaceId: string;
+}
+export interface APIKeyDisableParams {
+    /**
+     * The workspace the API key belongs to (path).
+     */
+    workspaceId: string;
+}
+export interface APIKeyEnableParams {
+    /**
+     * The workspace the API key belongs to (path).
+     */
+    workspaceId: string;
+}
+export interface APIKeyRotateParams {
+    /**
+     * The workspace the API key belongs to (path).
+     */
+    workspaceId: string;
+}
+export declare namespace APIKeys {
+    export { type APIKey as APIKey, type APIKeyInfo as APIKeyInfo, type APIKeySpec as APIKeySpec, type APIKeysCursorPagination as APIKeysCursorPagination, type APIKeyCreateParams as APIKeyCreateParams, type APIKeyRetrieveParams as APIKeyRetrieveParams, type APIKeyUpdateParams as APIKeyUpdateParams, type APIKeyListParams as APIKeyListParams, type APIKeyDeleteParams as APIKeyDeleteParams, type APIKeyDisableParams as APIKeyDisableParams, type APIKeyEnableParams as APIKeyEnableParams, type APIKeyRotateParams as APIKeyRotateParams, };
+}
 //# sourceMappingURL=api-keys.d.ts.map

package/resources/api-keys.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"api-keys.d.ts","sourceRoot":"","sources":["../src/resources/api-keys.ts"],"names":[],"mappings":"AAEA,oCAAiC"}
+{"version":3,"file":"api-keys.d.ts","sourceRoot":"","sources":["../src/resources/api-keys.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,4BAAyB;AAC/C,OAAO,KAAK,UAAU,qBAAkB;AACxC,OAAO,KAAK,MAAM,oBAAiB;AACnC,OAAO,EAAE,UAAU,EAAE,+BAA4B;AACjD,OAAO,EAAE,gBAAgB,EAAE,KAAK,sBAAsB,EAAE,WAAW,EAAE,8BAA2B;AAEhG,OAAO,EAAE,cAAc,EAAE,uCAAoC;AAG7D;;;;GAIG;AACH,qBAAa,OAAQ,SAAQ,WAAW;IACtC;;OAEG;IACH,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,UAAU,CAAC,MAAM,CAAC;IAInG;;OAEG;IACH,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,oBAAoB,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,UAAU,CAAC,MAAM,CAAC;IAKhG;;OAEG;IACH,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,kBAAkB,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,UAAU,CAAC,MAAM,CAAC;IAK5F;;OAEG;IACH,IAAI,CACF,WAAW,EAAE,MAAM,EACnB,KAAK,GAAE,gBAAgB,GAAG,IAAI,GAAG,SAAc,EAC/C,OAAO,CAAC,EAAE,cAAc,GACvB,WAAW,CAAC,uBAAuB,EAAE,MAAM,CAAC;IAO/C;;OAEG;IACH,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,kBAAkB,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,UAAU,CAAC,IAAI,CAAC;IAQ1F;;;OAGG;IACH,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,mBAAmB,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,UAAU,CAAC,MAAM,CAAC;IAQ9F;;OAEG;IACH,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,kBAAkB,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,UAAU,CAAC,MAAM,CAAC;IAK5F;;;OAGG;IACH,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,kBAAkB,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,UAAU,CAAC,MAAM,CAAC;CAI7F;AAED,MAAM,MAAM,uBAAuB,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;AAE/D;;;;;GAKG;AACH,MAAM,WAAW,MAAM;IACrB;;;OAGG;IACH,QAAQ,EAAE,MAAM,CAAC,uBAAuB,CAAC;IAEzC;;OAEG;IACH,IAAI,EAAE,UAAU,CAAC;IAEjB;;;;OAIG;IACH,KAAK,EAAE,mBAAmB,GAAG,eAAe,GAAG,gBAAgB,CAAC;IAEhE,IAAI,CAAC,EAAE,UAAU,CAAC;CACnB;AAED,MAAM,WAAW,UAAU;IACzB;;;;OAIG;IACH,SAAS,CAAC,EAAE,UAAU,CAAC,OAAO,CAAC;CAChC;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB;;;OAGG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB;;;;;;;;;;;OAWG;IACH,WAAW,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAE5B;;;OAGG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,kBAAkB;IACjC;;;;OAIG;IACH,QAAQ,EAAE,kBAAkB,CAAC,QAAQ,CAAC;IAEtC;;OAEG;IACH,IAAI,EAAE,UAAU,CAAC;CAClB;AAED,yBAAiB,kBAAkB,CAAC;IAClC;;;;OAIG;IACH,UAAiB,QAAQ;QACvB;;;WAGG;QACH,IAAI,EAAE,MAAM,CAAC;QAEb;;WAEG;QACH,UAAU,CAAC,EAAE,MAAM,CAAC;QAEpB;;;;;;WAMG;QACH,MAAM,CAAC,EAAE;YAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;SAAE,CAAC;KACpC;CACF;AAED,MAAM,WAAW,oBAAoB;IACnC;;OAEG;IACH,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,kBAAkB;IACjC;;OAEG;IACH,WAAW,EAAE,MAAM,CAAC;IAEpB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,kBAAkB,CAAC,QAAQ,CAAC;IAEvC;;OAEG;IACH,IAAI,CAAC,EAAE,UAAU,CAAC;IAElB;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,yBAAiB,kBAAkB,CAAC;IAClC;;;;OAIG;IACH,UAAiB,QAAQ;QACvB;;;WAGG;QACH,IAAI,EAAE,MAAM,CAAC;QAEb;;WAEG;QACH,UAAU,CAAC,EAAE,MAAM,CAAC;QAEpB;;;;;;WAMG;QACH,MAAM,CAAC,EAAE;YAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;SAAE,CAAC;KACpC;CACF;AAED,MAAM,WAAW,gBAAiB,SAAQ,sBAAsB;IAC9D;;;OAGG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IAEtB;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,kBAAkB;IACjC;;OAEG;IACH,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,mBAAmB;IAClC;;OAEG;IACH,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,kBAAkB;IACjC;;OAEG;IACH,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,kBAAkB;IACjC;;OAEG;IACH,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,CAAC,OAAO,WAAW,OAAO,CAAC;IAC/B,OAAO,EACL,KAAK,MAAM,IAAI,MAAM,EACrB,KAAK,UAAU,IAAI,UAAU,EAC7B,KAAK,UAAU,IAAI,UAAU,EAC7B,KAAK,uBAAuB,IAAI,uBAAuB,EACvD,KAAK,kBAAkB,IAAI,kBAAkB,EAC7C,KAAK,oBAAoB,IAAI,oBAAoB,EACjD,KAAK,kBAAkB,IAAI,kBAAkB,EAC7C,KAAK,gBAAgB,IAAI,gBAAgB,EACzC,KAAK,kBAAkB,IAAI,kBAAkB,EAC7C,KAAK,mBAAmB,IAAI,mBAAmB,EAC/C,KAAK,kBAAkB,IAAI,kBAAkB,EAC7C,KAAK,kBAAkB,IAAI,kBAAkB,GAC9C,CAAC;CACH"}

package/resources/api-keys.js

@@ -1,6 +1,82 @@
 "use strict";
 // File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
 Object.defineProperty(exports, "__esModule", { value: true });
-const tslib_1 = require("../internal/tslib.js");
-tslib_1.__exportStar(require("./api-keys/index.js"), exports);
+exports.APIKeys = void 0;
+const resource_1 = require("../core/resource.js");
+const pagination_1 = require("../core/pagination.js");
+const headers_1 = require("../internal/headers.js");
+const path_1 = require("../internal/utils/path.js");
+/**
+ * Issue, rotate, disable, and revoke a workspace's API keys. Every key
+ *  belongs to exactly one workspace; the system-managed global account key is
+ *  managed via GlobalAPIKeyService instead.
+ */
+class APIKeys extends resource_1.APIResource {
+    /**
+     * Creates a new API key in the workspace.
+     */
+    create(workspaceID, body, options) {
+        return this._client.post((0, path_1.path) `/v1/workspaces/${workspaceID}/api_keys`, { body, ...options });
+    }
+    /**
+     * Retrieves an API key by ID.
+     */
+    retrieve(id, params, options) {
+        const { workspaceId } = params;
+        return this._client.get((0, path_1.path) `/v1/workspaces/${workspaceId}/api_keys/${id}`, options);
+    }
+    /**
+     * Updates an API key.
+     */
+    update(id, params, options) {
+        const { workspaceId, ...body } = params;
+        return this._client.patch((0, path_1.path) `/v1/workspaces/${workspaceId}/api_keys/${id}`, { body, ...options });
+    }
+    /**
+     * Lists the workspace's API keys.
+     */
+    list(workspaceID, query = {}, options) {
+        return this._client.getAPIList((0, path_1.path) `/v1/workspaces/${workspaceID}/api_keys`, (pagination_1.CursorPagination), {
+            query,
+            ...options,
+        });
+    }
+    /**
+     * Deletes an API key.
+     */
+    delete(id, params, options) {
+        const { workspaceId } = params;
+        return this._client.delete((0, path_1.path) `/v1/workspaces/${workspaceId}/api_keys/${id}`, {
+            ...options,
+            headers: (0, headers_1.buildHeaders)([{ Accept: '*/*' }, options?.headers]),
+        });
+    }
+    /**
+     * Disables an API key. While disabled, presenting the key's token fails
+     * authentication on every endpoint; the key is retained. Idempotent.
+     */
+    disable(id, params, options) {
+        const { workspaceId, ...body } = params;
+        return this._client.post((0, path_1.path) `/v1/workspaces/${workspaceId}/api_keys/${id}:disable`, {
+            body,
+            ...options,
+        });
+    }
+    /**
+     * Re-enables a disabled API key so its token authenticates again. Idempotent.
+     */
+    enable(id, params, options) {
+        const { workspaceId, ...body } = params;
+        return this._client.post((0, path_1.path) `/v1/workspaces/${workspaceId}/api_keys/${id}:enable`, { body, ...options });
+    }
+    /**
+     * Rotates an API key and returns a new token. All previous tokens for this key are
+     * invalidated.
+     */
+    rotate(id, params, options) {
+        const { workspaceId, ...body } = params;
+        return this._client.post((0, path_1.path) `/v1/workspaces/${workspaceId}/api_keys/${id}:rotate`, { body, ...options });
+    }
+}
+exports.APIKeys = APIKeys;
 //# sourceMappingURL=api-keys.js.map