@cadenya/cadenya 0.68.0 → 0.69.0

package/resources/account.d.ts

@@ -1,6 +1,7 @@
 import { APIResource } from "../core/resource.js";
 import * as Shared from "./shared.js";
 import * as WorkspacesAPI from "./workspaces.js";
+import * as APIKeysAPI from "./api-keys/api-keys.js";
 import { APIPromise } from "../core/api-promise.js";
 import { RequestOptions } from "../internal/request-options.js";
 /**
@@ -26,7 +27,7 @@ export interface Account {
     /**
      * Server-populated information about the account.
      */
-    info: Account.Info;
+    info: AccountInfo;
     /**
      * AccountResourceMetadata is used to represent a resource that is associated to an
      * account but not to a workspace.
@@ -37,18 +38,22 @@ export interface Account {
      */
     spec: AccountSpec;
 }
-export declare namespace Account {
+/**
+ * Server-populated information about the account.
+ */
+export interface AccountInfo {
     /**
-     * Server-populated information about the account.
+     * An API key for the account. Use workspace-association RPCs to grant the key
+     * access to specific workspaces; a key with zero workspaces is valid but cannot
+     * access workspace-scoped resources.
      */
-    interface Info {
-        /**
-         * The generated secret that will sign all webhooks that are sent to your
-         * configured Webhook URL. Formatted as "wh_asdf1234" per the
-         * https://www.standardwebhooks.com/ format.
-         */
-        webhookEventsHmacSecret?: string;
-    }
+    globalApiKey?: APIKeysAPI.APIKey;
+    /**
+     * The generated secret that will sign all webhooks that are sent to your
+     * configured Webhook URL. Formatted as "wh_asdf1234" per the
+     * https://www.standardwebhooks.com/ format.
+     */
+    webhookEventsHmacSecret?: string;
 }
 /**
  * Configuration for an account.
@@ -100,6 +105,6 @@ export interface RotateWebhookSigningKeyResponse {
     webhookEventsHmacSecret?: string;
 }
 export declare namespace AccountResource {
-    export { type Account as Account, type AccountSpec as AccountSpec, type Profile as Profile, type ProfileSpec as ProfileSpec, type RotateWebhookSigningKeyResponse as RotateWebhookSigningKeyResponse, };
+    export { type Account as Account, type AccountInfo as AccountInfo, type AccountSpec as AccountSpec, type Profile as Profile, type ProfileSpec as ProfileSpec, type RotateWebhookSigningKeyResponse as RotateWebhookSigningKeyResponse, };
 }
 //# sourceMappingURL=account.d.ts.map

package/resources/account.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"account.d.ts","sourceRoot":"","sources":["../src/resources/account.ts"],"names":[],"mappings":"OAEO,EAAE,WAAW,EAAE;OACf,KAAK,MAAM;OACX,KAAK,aAAa;OAClB,EAAE,UAAU,EAAE;OACd,EAAE,cAAc,EAAE;AAEzB;;;GAGG;AACH,qBAAa,eAAgB,SAAQ,WAAW;IAC9C;;;OAGG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,cAAc,GAAG,UAAU,CAAC,OAAO,CAAC;IAIvD;;OAEG;IACH,uBAAuB,CAAC,OAAO,CAAC,EAAE,cAAc,GAAG,UAAU,CAAC,+BAA+B,CAAC;CAG/F;AAED;;;GAGG;AACH,MAAM,WAAW,OAAO;IACtB;;OAEG;IACH,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC;IAEnB;;;OAGG;IACH,QAAQ,EAAE,MAAM,CAAC,uBAAuB,CAAC;IAEzC;;OAEG;IACH,IAAI,EAAE,WAAW,CAAC;CACnB;AAED,yBAAiB,OAAO,CAAC;IACvB;;OAEG;IACH,UAAiB,IAAI;QACnB;;;;WAIG;QACH,uBAAuB,CAAC,EAAE,MAAM,CAAC;KAClC;CACF;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB,UAAU,CAAC,EAAE,KAAK,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;CAC7C;AAED;;;;GAIG;AACH,MAAM,WAAW,OAAO;IACtB;;;OAGG;IACH,QAAQ,EAAE,MAAM,CAAC,uBAAuB,CAAC;IAEzC;;OAEG;IACH,IAAI,EAAE,WAAW,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B;;OAEG;IACH,IAAI,EAAE,mBAAmB,GAAG,sBAAsB,GAAG,qBAAqB,CAAC;IAE3E;;;OAGG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;GAEG;AACH,MAAM,WAAW,+BAA+B;IAC9C,uBAAuB,CAAC,EAAE,MAAM,CAAC;CAClC;AAED,MAAM,CAAC,OAAO,WAAW,eAAe,CAAC;IACvC,OAAO,EACL,KAAK,OAAO,IAAI,OAAO,EACvB,KAAK,WAAW,IAAI,WAAW,EAC/B,KAAK,OAAO,IAAI,OAAO,EACvB,KAAK,WAAW,IAAI,WAAW,EAC/B,KAAK,+BAA+B,IAAI,+BAA+B,GACxE,CAAC;CACH"}
+{"version":3,"file":"account.d.ts","sourceRoot":"","sources":["../src/resources/account.ts"],"names":[],"mappings":"OAEO,EAAE,WAAW,EAAE;OACf,KAAK,MAAM;OACX,KAAK,aAAa;OAClB,KAAK,UAAU;OACf,EAAE,UAAU,EAAE;OACd,EAAE,cAAc,EAAE;AAEzB;;;GAGG;AACH,qBAAa,eAAgB,SAAQ,WAAW;IAC9C;;;OAGG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,cAAc,GAAG,UAAU,CAAC,OAAO,CAAC;IAIvD;;OAEG;IACH,uBAAuB,CAAC,OAAO,CAAC,EAAE,cAAc,GAAG,UAAU,CAAC,+BAA+B,CAAC;CAG/F;AAED;;;GAGG;AACH,MAAM,WAAW,OAAO;IACtB;;OAEG;IACH,IAAI,EAAE,WAAW,CAAC;IAElB;;;OAGG;IACH,QAAQ,EAAE,MAAM,CAAC,uBAAuB,CAAC;IAEzC;;OAEG;IACH,IAAI,EAAE,WAAW,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B;;;;OAIG;IACH,YAAY,CAAC,EAAE,UAAU,CAAC,MAAM,CAAC;IAEjC;;;;OAIG;IACH,uBAAuB,CAAC,EAAE,MAAM,CAAC;CAClC;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB,UAAU,CAAC,EAAE,KAAK,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;CAC7C;AAED;;;;GAIG;AACH,MAAM,WAAW,OAAO;IACtB;;;OAGG;IACH,QAAQ,EAAE,MAAM,CAAC,uBAAuB,CAAC;IAEzC;;OAEG;IACH,IAAI,EAAE,WAAW,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B;;OAEG;IACH,IAAI,EAAE,mBAAmB,GAAG,sBAAsB,GAAG,qBAAqB,CAAC;IAE3E;;;OAGG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;GAEG;AACH,MAAM,WAAW,+BAA+B;IAC9C,uBAAuB,CAAC,EAAE,MAAM,CAAC;CAClC;AAED,MAAM,CAAC,OAAO,WAAW,eAAe,CAAC;IACvC,OAAO,EACL,KAAK,OAAO,IAAI,OAAO,EACvB,KAAK,WAAW,IAAI,WAAW,EAC/B,KAAK,WAAW,IAAI,WAAW,EAC/B,KAAK,OAAO,IAAI,OAAO,EACvB,KAAK,WAAW,IAAI,WAAW,EAC/B,KAAK,+BAA+B,IAAI,+BAA+B,GACxE,CAAC;CACH"}

package/resources/account.js.map

@@ -1 +1 @@
-{"version":3,"file":"account.js","sourceRoot":"","sources":["../src/resources/account.ts"],"names":[],"mappings":";AAAA,sFAAsF;;;AAEtF,kDAA+C;AAM/C;;;GAGG;AACH,MAAa,eAAgB,SAAQ,sBAAW;IAC9C;;;OAGG;IACH,QAAQ,CAAC,OAAwB;QAC/B,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;IAClD,CAAC;IAED;;OAEG;IACH,uBAAuB,CAAC,OAAwB;QAC9C,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,wCAAwC,EAAE,OAAO,CAAC,CAAC;IAC9E,CAAC;CACF;AAfD,0CAeC"}
+{"version":3,"file":"account.js","sourceRoot":"","sources":["../src/resources/account.ts"],"names":[],"mappings":";AAAA,sFAAsF;;;AAEtF,kDAA+C;AAO/C;;;GAGG;AACH,MAAa,eAAgB,SAAQ,sBAAW;IAC9C;;;OAGG;IACH,QAAQ,CAAC,OAAwB;QAC/B,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;IAClD,CAAC;IAED;;OAEG;IACH,uBAAuB,CAAC,OAAwB;QAC9C,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,wCAAwC,EAAE,OAAO,CAAC,CAAC;IAC9E,CAAC;CACF;AAfD,0CAeC"}

package/resources/account.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"account.mjs","sourceRoot":"","sources":["../src/resources/account.ts"],"names":[],"mappings":"AAAA,sFAAsF;OAE/E,EAAE,WAAW,EAAE;AAMtB;;;GAGG;AACH,MAAM,OAAO,eAAgB,SAAQ,WAAW;IAC9C;;;OAGG;IACH,QAAQ,CAAC,OAAwB;QAC/B,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;IAClD,CAAC;IAED;;OAEG;IACH,uBAAuB,CAAC,OAAwB;QAC9C,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,wCAAwC,EAAE,OAAO,CAAC,CAAC;IAC9E,CAAC;CACF"}
+{"version":3,"file":"account.mjs","sourceRoot":"","sources":["../src/resources/account.ts"],"names":[],"mappings":"AAAA,sFAAsF;OAE/E,EAAE,WAAW,EAAE;AAOtB;;;GAGG;AACH,MAAM,OAAO,eAAgB,SAAQ,WAAW;IAC9C;;;OAGG;IACH,QAAQ,CAAC,OAAwB;QAC/B,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;IAClD,CAAC;IAED;;OAEG;IACH,uBAAuB,CAAC,OAAwB;QAC9C,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,wCAAwC,EAAE,OAAO,CAAC,CAAC;IAC9E,CAAC;CACF"}

package/resources/api-keys/access.d.mts

@@ -0,0 +1,47 @@
+import { APIResource } from "../../core/resource.mjs";
+import * as WorkspacesAPI from "../workspaces.mjs";
+import { WorkspacesCursorPagination } from "../workspaces.mjs";
+import * as APIKeysAPI from "./api-keys.mjs";
+import { APIPromise } from "../../core/api-promise.mjs";
+import { type CursorPaginationParams, PagePromise } from "../../core/pagination.mjs";
+import { RequestOptions } from "../../internal/request-options.mjs";
+/**
+ * Issue, rotate, and revoke API keys for the account, and grant or revoke
+ *  each key's access to individual workspaces.
+ */
+export declare class Access extends APIResource {
+    /**
+     * Lists the workspaces this API key has access to. Cursor-paginated.
+     */
+    list(id: string, query?: AccessListParams | null | undefined, options?: RequestOptions): PagePromise<WorkspacesCursorPagination, WorkspacesAPI.Workspace>;
+    /**
+     * Grants this API key access to the specified workspace. Idempotent — adding an
+     * already-associated workspace is a no-op. Returns the updated API key with
+     * refreshed workspace preview and total.
+     */
+    add(id: string, body: AccessAddParams, options?: RequestOptions): APIPromise<APIKeysAPI.APIKey>;
+    /**
+     * Revokes this API key's access to the specified workspace. Idempotent. A key may
+     * have zero workspaces and remains valid.
+     */
+    remove(workspaceID: string, params: AccessRemoveParams, options?: RequestOptions): APIPromise<void>;
+}
+export interface AccessListParams extends CursorPaginationParams {
+}
+export interface AccessAddParams {
+    /**
+     * The workspace to grant access to.
+     */
+    workspaceId?: string;
+}
+export interface AccessRemoveParams {
+    /**
+     * The API key losing workspace access (path).
+     */
+    id: string;
+}
+export declare namespace Access {
+    export { type AccessListParams as AccessListParams, type AccessAddParams as AccessAddParams, type AccessRemoveParams as AccessRemoveParams, };
+}
+export { type WorkspacesCursorPagination };
+//# sourceMappingURL=access.d.mts.map

package/resources/api-keys/access.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"access.d.mts","sourceRoot":"","sources":["../../src/resources/api-keys/access.ts"],"names":[],"mappings":"OAEO,EAAE,WAAW,EAAE;OACf,KAAK,aAAa;OAClB,EAAE,0BAA0B,EAAE;OAC9B,KAAK,UAAU;OACf,EAAE,UAAU,EAAE;OACd,EAAoB,KAAK,sBAAsB,EAAE,WAAW,EAAE;OAE9D,EAAE,cAAc,EAAE;AAGzB;;;GAGG;AACH,qBAAa,MAAO,SAAQ,WAAW;IACrC;;OAEG;IACH,IAAI,CACF,EAAE,EAAE,MAAM,EACV,KAAK,GAAE,gBAAgB,GAAG,IAAI,GAAG,SAAc,EAC/C,OAAO,CAAC,EAAE,cAAc,GACvB,WAAW,CAAC,0BAA0B,EAAE,aAAa,CAAC,SAAS,CAAC;IAQnE;;;;OAIG;IACH,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC;IAI/F;;;OAGG;IACH,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,kBAAkB,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,UAAU,CAAC,IAAI,CAAC;CAOpG;AAED,MAAM,WAAW,gBAAiB,SAAQ,sBAAsB;CAAG;AAEnE,MAAM,WAAW,eAAe;IAC9B;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,kBAAkB;IACjC;;OAEG;IACH,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,MAAM,CAAC,OAAO,WAAW,MAAM,CAAC;IAC9B,OAAO,EACL,KAAK,gBAAgB,IAAI,gBAAgB,EACzC,KAAK,eAAe,IAAI,eAAe,EACvC,KAAK,kBAAkB,IAAI,kBAAkB,GAC9C,CAAC;CACH;AAED,OAAO,EAAE,KAAK,0BAA0B,EAAE,CAAC"}

package/resources/api-keys/access.d.ts

@@ -0,0 +1,47 @@
+import { APIResource } from "../../core/resource.js";
+import * as WorkspacesAPI from "../workspaces.js";
+import { WorkspacesCursorPagination } from "../workspaces.js";
+import * as APIKeysAPI from "./api-keys.js";
+import { APIPromise } from "../../core/api-promise.js";
+import { type CursorPaginationParams, PagePromise } from "../../core/pagination.js";
+import { RequestOptions } from "../../internal/request-options.js";
+/**
+ * Issue, rotate, and revoke API keys for the account, and grant or revoke
+ *  each key's access to individual workspaces.
+ */
+export declare class Access extends APIResource {
+    /**
+     * Lists the workspaces this API key has access to. Cursor-paginated.
+     */
+    list(id: string, query?: AccessListParams | null | undefined, options?: RequestOptions): PagePromise<WorkspacesCursorPagination, WorkspacesAPI.Workspace>;
+    /**
+     * Grants this API key access to the specified workspace. Idempotent — adding an
+     * already-associated workspace is a no-op. Returns the updated API key with
+     * refreshed workspace preview and total.
+     */
+    add(id: string, body: AccessAddParams, options?: RequestOptions): APIPromise<APIKeysAPI.APIKey>;
+    /**
+     * Revokes this API key's access to the specified workspace. Idempotent. A key may
+     * have zero workspaces and remains valid.
+     */
+    remove(workspaceID: string, params: AccessRemoveParams, options?: RequestOptions): APIPromise<void>;
+}
+export interface AccessListParams extends CursorPaginationParams {
+}
+export interface AccessAddParams {
+    /**
+     * The workspace to grant access to.
+     */
+    workspaceId?: string;
+}
+export interface AccessRemoveParams {
+    /**
+     * The API key losing workspace access (path).
+     */
+    id: string;
+}
+export declare namespace Access {
+    export { type AccessListParams as AccessListParams, type AccessAddParams as AccessAddParams, type AccessRemoveParams as AccessRemoveParams, };
+}
+export { type WorkspacesCursorPagination };
+//# sourceMappingURL=access.d.ts.map

package/resources/api-keys/access.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"access.d.ts","sourceRoot":"","sources":["../../src/resources/api-keys/access.ts"],"names":[],"mappings":"OAEO,EAAE,WAAW,EAAE;OACf,KAAK,aAAa;OAClB,EAAE,0BAA0B,EAAE;OAC9B,KAAK,UAAU;OACf,EAAE,UAAU,EAAE;OACd,EAAoB,KAAK,sBAAsB,EAAE,WAAW,EAAE;OAE9D,EAAE,cAAc,EAAE;AAGzB;;;GAGG;AACH,qBAAa,MAAO,SAAQ,WAAW;IACrC;;OAEG;IACH,IAAI,CACF,EAAE,EAAE,MAAM,EACV,KAAK,GAAE,gBAAgB,GAAG,IAAI,GAAG,SAAc,EAC/C,OAAO,CAAC,EAAE,cAAc,GACvB,WAAW,CAAC,0BAA0B,EAAE,aAAa,CAAC,SAAS,CAAC;IAQnE;;;;OAIG;IACH,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC;IAI/F;;;OAGG;IACH,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,kBAAkB,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,UAAU,CAAC,IAAI,CAAC;CAOpG;AAED,MAAM,WAAW,gBAAiB,SAAQ,sBAAsB;CAAG;AAEnE,MAAM,WAAW,eAAe;IAC9B;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,kBAAkB;IACjC;;OAEG;IACH,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,MAAM,CAAC,OAAO,WAAW,MAAM,CAAC;IAC9B,OAAO,EACL,KAAK,gBAAgB,IAAI,gBAAgB,EACzC,KAAK,eAAe,IAAI,eAAe,EACvC,KAAK,kBAAkB,IAAI,kBAAkB,GAC9C,CAAC;CACH;AAED,OAAO,EAAE,KAAK,0BAA0B,EAAE,CAAC"}

package/resources/api-keys/access.js

@@ -0,0 +1,41 @@
+"use strict";
+// File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Access = void 0;
+const resource_1 = require("../../core/resource.js");
+const pagination_1 = require("../../core/pagination.js");
+const headers_1 = require("../../internal/headers.js");
+const path_1 = require("../../internal/utils/path.js");
+/**
+ * Issue, rotate, and revoke API keys for the account, and grant or revoke
+ *  each key's access to individual workspaces.
+ */
+class Access extends resource_1.APIResource {
+    /**
+     * Lists the workspaces this API key has access to. Cursor-paginated.
+     */
+    list(id, query = {}, options) {
+        return this._client.getAPIList((0, path_1.path) `/v1/account/api_keys/${id}/workspaces`, (pagination_1.CursorPagination), { query, ...options });
+    }
+    /**
+     * Grants this API key access to the specified workspace. Idempotent — adding an
+     * already-associated workspace is a no-op. Returns the updated API key with
+     * refreshed workspace preview and total.
+     */
+    add(id, body, options) {
+        return this._client.post((0, path_1.path) `/v1/account/api_keys/${id}/workspaces`, { body, ...options });
+    }
+    /**
+     * Revokes this API key's access to the specified workspace. Idempotent. A key may
+     * have zero workspaces and remains valid.
+     */
+    remove(workspaceID, params, options) {
+        const { id } = params;
+        return this._client.delete((0, path_1.path) `/v1/account/api_keys/${id}/workspaces/${workspaceID}`, {
+            ...options,
+            headers: (0, headers_1.buildHeaders)([{ Accept: '*/*' }, options?.headers]),
+        });
+    }
+}
+exports.Access = Access;
+//# sourceMappingURL=access.js.map

package/resources/api-keys/access.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"access.js","sourceRoot":"","sources":["../../src/resources/api-keys/access.ts"],"names":[],"mappings":";AAAA,sFAAsF;;;AAEtF,qDAAkD;AAKlD,yDAAmG;AACnG,uDAAsD;AAEtD,uDAAiD;AAEjD;;;GAGG;AACH,MAAa,MAAO,SAAQ,sBAAW;IACrC;;OAEG;IACH,IAAI,CACF,EAAU,EACV,QAA6C,EAAE,EAC/C,OAAwB;QAExB,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAC5B,IAAA,WAAI,EAAA,wBAAwB,EAAE,aAAa,EAC3C,CAAA,6BAAyC,CAAA,EACzC,EAAE,KAAK,EAAE,GAAG,OAAO,EAAE,CACtB,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,GAAG,CAAC,EAAU,EAAE,IAAqB,EAAE,OAAwB;QAC7D,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAA,WAAI,EAAA,wBAAwB,EAAE,aAAa,EAAE,EAAE,IAAI,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;IAC9F,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,WAAmB,EAAE,MAA0B,EAAE,OAAwB;QAC9E,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM,CAAC;QACtB,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAA,WAAI,EAAA,wBAAwB,EAAE,eAAe,WAAW,EAAE,EAAE;YACrF,GAAG,OAAO;YACV,OAAO,EAAE,IAAA,sBAAY,EAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;SAC7D,CAAC,CAAC;IACL,CAAC;CACF;AApCD,wBAoCC"}

package/resources/api-keys/access.mjs

@@ -0,0 +1,37 @@
+// File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
+import { APIResource } from "../../core/resource.mjs";
+import { CursorPagination } from "../../core/pagination.mjs";
+import { buildHeaders } from "../../internal/headers.mjs";
+import { path } from "../../internal/utils/path.mjs";
+/**
+ * Issue, rotate, and revoke API keys for the account, and grant or revoke
+ *  each key's access to individual workspaces.
+ */
+export class Access extends APIResource {
+    /**
+     * Lists the workspaces this API key has access to. Cursor-paginated.
+     */
+    list(id, query = {}, options) {
+        return this._client.getAPIList(path `/v1/account/api_keys/${id}/workspaces`, (CursorPagination), { query, ...options });
+    }
+    /**
+     * Grants this API key access to the specified workspace. Idempotent — adding an
+     * already-associated workspace is a no-op. Returns the updated API key with
+     * refreshed workspace preview and total.
+     */
+    add(id, body, options) {
+        return this._client.post(path `/v1/account/api_keys/${id}/workspaces`, { body, ...options });
+    }
+    /**
+     * Revokes this API key's access to the specified workspace. Idempotent. A key may
+     * have zero workspaces and remains valid.
+     */
+    remove(workspaceID, params, options) {
+        const { id } = params;
+        return this._client.delete(path `/v1/account/api_keys/${id}/workspaces/${workspaceID}`, {
+            ...options,
+            headers: buildHeaders([{ Accept: '*/*' }, options?.headers]),
+        });
+    }
+}
+//# sourceMappingURL=access.mjs.map

package/resources/api-keys/access.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"access.mjs","sourceRoot":"","sources":["../../src/resources/api-keys/access.ts"],"names":[],"mappings":"AAAA,sFAAsF;OAE/E,EAAE,WAAW,EAAE;OAKf,EAAE,gBAAgB,EAA4C;OAC9D,EAAE,YAAY,EAAE;OAEhB,EAAE,IAAI,EAAE;AAEf;;;GAGG;AACH,MAAM,OAAO,MAAO,SAAQ,WAAW;IACrC;;OAEG;IACH,IAAI,CACF,EAAU,EACV,QAA6C,EAAE,EAC/C,OAAwB;QAExB,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAC5B,IAAI,CAAA,wBAAwB,EAAE,aAAa,EAC3C,CAAA,gBAAyC,CAAA,EACzC,EAAE,KAAK,EAAE,GAAG,OAAO,EAAE,CACtB,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,GAAG,CAAC,EAAU,EAAE,IAAqB,EAAE,OAAwB;QAC7D,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAA,wBAAwB,EAAE,aAAa,EAAE,EAAE,IAAI,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;IAC9F,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,WAAmB,EAAE,MAA0B,EAAE,OAAwB;QAC9E,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM,CAAC;QACtB,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAA,wBAAwB,EAAE,eAAe,WAAW,EAAE,EAAE;YACrF,GAAG,OAAO;YACV,OAAO,EAAE,YAAY,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;SAC7D,CAAC,CAAC;IACL,CAAC;CACF"}

package/resources/api-keys/api-keys.d.mts

@@ -0,0 +1,213 @@
+import { APIResource } from "../../core/resource.mjs";
+import * as AccountAPI from "../account.mjs";
+import * as Shared from "../shared.mjs";
+import * as AccessAPI from "./access.mjs";
+import { Access, AccessAddParams, AccessListParams, AccessRemoveParams } from "./access.mjs";
+import { APIPromise } from "../../core/api-promise.mjs";
+import { CursorPagination, type CursorPaginationParams, PagePromise } from "../../core/pagination.mjs";
+import { RequestOptions } from "../../internal/request-options.mjs";
+/**
+ * Issue, rotate, and revoke API keys for the account, and grant or revoke
+ *  each key's access to individual workspaces.
+ */
+export declare class APIKeys extends APIResource {
+    access: AccessAPI.Access;
+    /**
+     * Creates a new API key on the account. Optionally grants the key access to one or
+     * more workspaces via initial_workspace_ids.
+     */
+    create(body: APIKeyCreateParams, options?: RequestOptions): APIPromise<APIKey>;
+    /**
+     * Retrieves an API key by ID.
+     */
+    retrieve(id: string, options?: RequestOptions): APIPromise<APIKey>;
+    /**
+     * Updates an API key.
+     */
+    update(id: string, body: APIKeyUpdateParams, options?: RequestOptions): APIPromise<APIKey>;
+    /**
+     * Lists all API keys on the account.
+     */
+    list(query?: APIKeyListParams | null | undefined, options?: RequestOptions): PagePromise<APIKeysCursorPagination, APIKey>;
+    /**
+     * Deletes an API key.
+     */
+    delete(id: string, options?: RequestOptions): APIPromise<void>;
+    /**
+     * Rotates an API key and returns a new token. All previous tokens for this key are
+     * invalidated.
+     */
+    rotate(id: string, options?: RequestOptions): APIPromise<APIKey>;
+}
+export type APIKeysCursorPagination = CursorPagination<APIKey>;
+/**
+ * An API key for the account. Use workspace-association RPCs to grant the key
+ * access to specific workspaces; a key with zero workspaces is valid but cannot
+ * access workspace-scoped resources.
+ */
+export interface APIKey {
+    /**
+     * AccountResourceMetadata is used to represent a resource that is associated to an
+     * account but not to a workspace.
+     */
+    metadata: Shared.AccountResourceMetadata;
+    /**
+     * Configuration for an API key.
+     */
+    spec: APIKeySpec;
+    info?: APIKeyInfo;
+}
+export interface APIKeyInfo {
+    /**
+     * A profile identifies a user or non-human principal (such as an API key) at the
+     * account level. Profiles are account-scoped and can be granted access to multiple
+     * workspaces.
+     */
+    createdBy?: AccountAPI.Profile;
+    /**
+     * Up to a small number of workspaces this key has access to, intended for display
+     * ("Workspace 1, Workspace 2, and 4 more"). Use ListAPIKeyWorkspaces for the full
+     * paginated list.
+     */
+    workspacesPreview?: Array<Shared.BareMetadata>;
+    /**
+     * Total number of workspaces this key has access to.
+     */
+    workspacesTotal?: number;
+}
+/**
+ * Configuration for an API key.
+ */
+export interface APIKeySpec {
+    /**
+     * The bearer token used to authenticate as this API key. Returned only on creation
+     * and rotation; subsequent reads omit this field.
+     */
+    token?: string;
+    /**
+     * Free-form description of what this API key is used for.
+     */
+    description?: string;
+    /**
+     * Permissions granted to this key. Each entry is a colon-separated verb:resource
+     * string (e.g. "manage:agents"). Currently has no enforced effect; reserved for
+     * future fine-grained authorization.
+     */
+    permissions?: Array<string>;
+    /**
+     * True when this key is managed by the system (e.g. the auto-provisioned global
+     * account key). System keys cannot be deleted but can be rotated.
+     */
+    system?: boolean;
+}
+export interface APIKeyCreateParams {
+    /**
+     * CreateAccountResourceMetadata contains the user-provided fields for creating an
+     * account-scoped resource. Read-only fields (id, account_id, profile_id) are
+     * excluded since they are set by the server.
+     */
+    metadata: APIKeyCreateParams.Metadata;
+    /**
+     * Configuration for an API key.
+     */
+    spec: APIKeySpec;
+    /**
+     * Workspaces this API key will have access to on creation. Optional — a key can be
+     * created with no workspace access and granted later via AddAPIKeyWorkspace.
+     */
+    initialWorkspaceIds?: Array<string>;
+}
+export declare namespace APIKeyCreateParams {
+    /**
+     * CreateAccountResourceMetadata contains the user-provided fields for creating an
+     * account-scoped resource. Read-only fields (id, account_id, profile_id) are
+     * excluded since they are set by the server.
+     */
+    interface Metadata {
+        /**
+         * Human-readable name for the resource (e.g., "Production API Key", "Staging
+         * Workspace")
+         */
+        name: string;
+        /**
+         * External ID for the resource (e.g., a workflow ID from an external system)
+         */
+        externalId?: string;
+        /**
+         * Arbitrary key-value pairs for categorization and filtering Examples:
+         * {"environment": "production", "team": "platform", "version": "v2"}
+         */
+        labels?: {
+            [key: string]: string;
+        };
+    }
+}
+export interface APIKeyUpdateParams {
+    /**
+     * UpdateAccountResourceMetadata contains the user-provided fields for updating an
+     * account-scoped resource. Read-only fields (id, account_id, profile_id) are
+     * excluded since they are set by the server.
+     */
+    metadata?: APIKeyUpdateParams.Metadata;
+    /**
+     * Configuration for an API key.
+     */
+    spec?: APIKeySpec;
+    /**
+     * Fields to update.
+     */
+    updateMask?: string;
+}
+export declare namespace APIKeyUpdateParams {
+    /**
+     * UpdateAccountResourceMetadata contains the user-provided fields for updating an
+     * account-scoped resource. Read-only fields (id, account_id, profile_id) are
+     * excluded since they are set by the server.
+     */
+    interface Metadata {
+        /**
+         * Human-readable name for the resource (e.g., "Production API Key", "Staging
+         * Workspace")
+         */
+        name: string;
+        /**
+         * External ID for the resource (e.g., a workflow ID from an external system)
+         */
+        externalId?: string;
+        /**
+         * Arbitrary key-value pairs for categorization and filtering Examples:
+         * {"environment": "production", "team": "platform", "version": "v2"}
+         */
+        labels?: {
+            [key: string]: string;
+        };
+    }
+}
+export interface APIKeyListParams extends CursorPaginationParams {
+    /**
+     * Filter by bundle_key — return only resources owned by this bundle.
+     */
+    bundleKey?: string;
+    /**
+     * When true, included info fields are populated. Requests with this flag count
+     * more against your rate limit.
+     */
+    includeInfo?: boolean;
+    /**
+     * Filter by ID prefix.
+     */
+    prefix?: string;
+    /**
+     * Free-form search query.
+     */
+    query?: string;
+    /**
+     * Sort order for results (asc or desc by creation time).
+     */
+    sortOrder?: string;
+}
+export declare namespace APIKeys {
+    export { type APIKey as APIKey, type APIKeyInfo as APIKeyInfo, type APIKeySpec as APIKeySpec, type APIKeysCursorPagination as APIKeysCursorPagination, type APIKeyCreateParams as APIKeyCreateParams, type APIKeyUpdateParams as APIKeyUpdateParams, type APIKeyListParams as APIKeyListParams, };
+    export { Access as Access, type AccessListParams as AccessListParams, type AccessAddParams as AccessAddParams, type AccessRemoveParams as AccessRemoveParams, };
+}
+//# sourceMappingURL=api-keys.d.mts.map

package/resources/api-keys/api-keys.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-keys.d.mts","sourceRoot":"","sources":["../../src/resources/api-keys/api-keys.ts"],"names":[],"mappings":"OAEO,EAAE,WAAW,EAAE;OACf,KAAK,UAAU;OACf,KAAK,MAAM;OACX,KAAK,SAAS;OACd,EAAE,MAAM,EAAE,eAAe,EAAE,gBAAgB,EAAE,kBAAkB,EAAE;OACjE,EAAE,UAAU,EAAE;OACd,EAAE,gBAAgB,EAAE,KAAK,sBAAsB,EAAE,WAAW,EAAE;OAE9D,EAAE,cAAc,EAAE;AAGzB;;;GAGG;AACH,qBAAa,OAAQ,SAAQ,WAAW;IACtC,MAAM,EAAE,SAAS,CAAC,MAAM,CAAsC;IAE9D;;;OAGG;IACH,MAAM,CAAC,IAAI,EAAE,kBAAkB,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,UAAU,CAAC,MAAM,CAAC;IAI9E;;OAEG;IACH,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,UAAU,CAAC,MAAM,CAAC;IAIlE;;OAEG;IACH,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,UAAU,CAAC,MAAM,CAAC;IAI1F;;OAEG;IACH,IAAI,CACF,KAAK,GAAE,gBAAgB,GAAG,IAAI,GAAG,SAAc,EAC/C,OAAO,CAAC,EAAE,cAAc,GACvB,WAAW,CAAC,uBAAuB,EAAE,MAAM,CAAC;IAI/C;;OAEG;IACH,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,UAAU,CAAC,IAAI,CAAC;IAO9D;;;OAGG;IACH,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,UAAU,CAAC,MAAM,CAAC;CAGjE;AAED,MAAM,MAAM,uBAAuB,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;AAE/D;;;;GAIG;AACH,MAAM,WAAW,MAAM;IACrB;;;OAGG;IACH,QAAQ,EAAE,MAAM,CAAC,uBAAuB,CAAC;IAEzC;;OAEG;IACH,IAAI,EAAE,UAAU,CAAC;IAEjB,IAAI,CAAC,EAAE,UAAU,CAAC;CACnB;AAED,MAAM,WAAW,UAAU;IACzB;;;;OAIG;IACH,SAAS,CAAC,EAAE,UAAU,CAAC,OAAO,CAAC;IAE/B;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IAE/C;;OAEG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB;;;OAGG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB;;;;OAIG;IACH,WAAW,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAE5B;;;OAGG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,kBAAkB;IACjC;;;;OAIG;IACH,QAAQ,EAAE,kBAAkB,CAAC,QAAQ,CAAC;IAEtC;;OAEG;IACH,IAAI,EAAE,UAAU,CAAC;IAEjB;;;OAGG;IACH,mBAAmB,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;CACrC;AAED,yBAAiB,kBAAkB,CAAC;IAClC;;;;OAIG;IACH,UAAiB,QAAQ;QACvB;;;WAGG;QACH,IAAI,EAAE,MAAM,CAAC;QAEb;;WAEG;QACH,UAAU,CAAC,EAAE,MAAM,CAAC;QAEpB;;;WAGG;QACH,MAAM,CAAC,EAAE;YAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;SAAE,CAAC;KACpC;CACF;AAED,MAAM,WAAW,kBAAkB;IACjC;;;;OAIG;IACH,QAAQ,CAAC,EAAE,kBAAkB,CAAC,QAAQ,CAAC;IAEvC;;OAEG;IACH,IAAI,CAAC,EAAE,UAAU,CAAC;IAElB;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,yBAAiB,kBAAkB,CAAC;IAClC;;;;OAIG;IACH,UAAiB,QAAQ;QACvB;;;WAGG;QACH,IAAI,EAAE,MAAM,CAAC;QAEb;;WAEG;QACH,UAAU,CAAC,EAAE,MAAM,CAAC;QAEpB;;;WAGG;QACH,MAAM,CAAC,EAAE;YAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;SAAE,CAAC;KACpC;CACF;AAED,MAAM,WAAW,gBAAiB,SAAQ,sBAAsB;IAC9D;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB;;;OAGG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IAEtB;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAID,MAAM,CAAC,OAAO,WAAW,OAAO,CAAC;IAC/B,OAAO,EACL,KAAK,MAAM,IAAI,MAAM,EACrB,KAAK,UAAU,IAAI,UAAU,EAC7B,KAAK,UAAU,IAAI,UAAU,EAC7B,KAAK,uBAAuB,IAAI,uBAAuB,EACvD,KAAK,kBAAkB,IAAI,kBAAkB,EAC7C,KAAK,kBAAkB,IAAI,kBAAkB,EAC7C,KAAK,gBAAgB,IAAI,gBAAgB,GAC1C,CAAC;IAEF,OAAO,EACL,MAAM,IAAI,MAAM,EAChB,KAAK,gBAAgB,IAAI,gBAAgB,EACzC,KAAK,eAAe,IAAI,eAAe,EACvC,KAAK,kBAAkB,IAAI,kBAAkB,GAC9C,CAAC;CACH"}