@gigadrive/sdk 0.2.0 → 0.3.0

package/dist/index.d.mts

@@ -488,6 +488,83 @@ declare class AiGatewayResource extends BaseResource {
     getModel(modelId: string): Promise<AiModel>;
 }
 
+/** An application-scoped API key. The secret is never returned after creation. */
+interface ApiKey {
+    /** Unique identifier (UUID). Used as the OAuth client ID. */
+    id: string;
+    /** Human-readable label. */
+    name: string;
+    /** Application this key is scoped to. */
+    applicationId: string | null;
+    /** API capability scopes granted to the key. */
+    scopes: string[];
+    /** ISO 8601 expiry, or `null` if the key never expires. */
+    expiresAt: string | null;
+    /** ISO 8601 creation timestamp. */
+    createdAt: string;
+    /** ISO 8601 last-updated timestamp. */
+    updatedAt: string;
+}
+/** Input for creating an application-scoped API key. */
+interface CreateApiKeyInput {
+    /** Human-readable label for the key. */
+    name: string;
+    /** Application to scope the key to. The key can only act on this application. */
+    applicationId: string;
+    /**
+     * API capability scopes to grant. Each must be a subset of your own access and
+     * cannot include API key management. Defaults to a minimal read-only set.
+     */
+    scopes?: string[];
+    /** Optional ISO 8601 expiry. Defaults to 90 days when omitted. */
+    expiresAt?: string;
+}
+/**
+ * The result of creating an API key. Includes the plaintext {@link secret},
+ * which is returned only once and cannot be retrieved again.
+ */
+interface CreateApiKeyResult extends ApiKey {
+    /** The plaintext client secret. Store it now — it cannot be retrieved again. */
+    secret: string;
+}
+/** Query for {@link ApiKeysResource.list}. */
+interface ListApiKeysQuery {
+    /** Application whose keys should be listed. */
+    applicationId: string;
+}
+/**
+ * Manage application-scoped API keys. Accessed via {@link GigadriveClient.apiKeys}.
+ *
+ * @example
+ * ```ts
+ * const key = await client.apiKeys.create({ name: 'ci', applicationId: 'app-id' });
+ * // Use key.id + key.secret as OAuth client credentials. Store the secret now.
+ * ```
+ */
+declare class ApiKeysResource extends BaseResource {
+    /**
+     * Provision a new application-scoped API key. The plaintext secret is returned
+     * exactly once — store it immediately.
+     *
+     * @param data - The key name, target application, and optional scopes/expiry.
+     * @returns The created key including its one-time plaintext secret.
+     */
+    create(data: CreateApiKeyInput): Promise<CreateApiKeyResult>;
+    /**
+     * List the API keys scoped to an application. Secrets are never returned.
+     *
+     * @param query - The application whose keys should be listed.
+     * @returns A paginated list of API key metadata.
+     */
+    list(query: ListApiKeysQuery): Promise<Paginated<ApiKey>>;
+    /**
+     * Permanently revoke an API key.
+     *
+     * @param apiKeyId - The API key ID (UUID).
+     */
+    delete(apiKeyId: string): Promise<void>;
+}
+
 /** An environment variable attached to an organization, application, or environment. */
 interface EnvVar {
     /** Unique identifier. */
@@ -531,6 +608,39 @@ interface UpdateEnvVarInput {
     /** Change the sensitive flag. */
     sensitive?: boolean;
 }
+/**
+ * A resolved environment variable returned by the pull endpoint. Only
+ * non-sensitive variables are returned, so {@link value} is always the real value.
+ */
+interface ResolvedEnvVar {
+    /** The variable name (e.g. `DATABASE_URL`). */
+    key: string;
+    /** The resolved variable value. */
+    value: string;
+    /** Where the resolved value came from after applying org → app → environment inheritance. */
+    source: 'organization' | 'application' | 'environment';
+}
+/** Query options for {@link ApplicationEnvVarsResource.pull}. */
+interface PullEnvVarsQuery {
+    /**
+     * Resolve environment-specific overrides for this environment slug on top of
+     * the organization and application baseline. Omit for the local development
+     * baseline (organization + application-wide variables only).
+     */
+    environment?: string;
+}
+/** Result of pulling resolved environment variables for local development. */
+interface PullEnvVarsResult {
+    /** Resolved, non-sensitive variables, ready to write to a local `.env` file. */
+    items: ResolvedEnvVar[];
+    /** Number of resolved variables returned. */
+    total: number;
+    /**
+     * Number of sensitive variables that were resolved but intentionally omitted.
+     * Secrets are never returned by the pull endpoint.
+     */
+    omittedSensitive: number;
+}
 
 /**
  * Manage environment variables scoped to an application.
@@ -552,6 +662,23 @@ declare class ApplicationEnvVarsResource extends BaseResource {
      * ```
      */
     list(applicationId: string, query?: ListQuery): Promise<Paginated<EnvVar>>;
+    /**
+     * Pull the environment variables that apply to an application for local
+     * development. Merges organization-wide, application-wide, and (optionally)
+     * environment-specific overrides, returning only non-sensitive values — ready
+     * to write to a local `.env` file.
+     *
+     * @param applicationId - The application ID (UUID).
+     * @param query - Optional environment targeting.
+     * @returns The resolved non-sensitive variables plus the count of omitted secrets.
+     *
+     * @example
+     * ```ts
+     * const { items } = await client.applications.envVars.pull('app-id');
+     * const dotenv = items.map((v) => `${v.key}=${v.value}`).join('\n');
+     * ```
+     */
+    pull(applicationId: string, query?: PullEnvVarsQuery): Promise<PullEnvVarsResult>;
     /**
      * Create a new environment variable for an application.
      *
@@ -2383,6 +2510,8 @@ declare class GigadriveClient {
     readonly deployments: DeploymentsResource;
     /** AI Gateway — OpenAI-compatible chat completions and model listing. */
     readonly aiGateway: AiGatewayResource;
+    /** Application-scoped API key management (create, list, revoke). */
+    readonly apiKeys: ApiKeysResource;
     constructor(config?: GigadriveClientConfig);
 }
 
@@ -2521,4 +2650,4 @@ declare function paginate<T>(fetchPage: (cursor: string | undefined) => Promise<
  */
 declare function parseSSEStream<T = unknown>(response: Response): AsyncGenerator<T>;
 
-export { AiGatewayAudioResource, type AiGatewayBudget, type AiGatewayBudgetInput, AiGatewayBudgetsResource, AiGatewayPoliciesResource, type AiGatewayPolicy, type AiGatewayPolicyInput, type AiGatewayProviderAttempt, type AiGatewayRequestEvent, type AiGatewayRequestsQuery, AiGatewayResource, type AiGatewayUsageBreakdown, type AiGatewayUsageQuery, AiGatewayUsageResource, type AiGatewayUsageSummary, AiGatewayVideosResource, type AiModel, type AiModelCapabilities, type AiModelRoutingProvider, ApiError, type Application, ApplicationEnvVarsResource, type ApplicationHostnameList, ApplicationRequestsResource, ApplicationStorageResource, ApplicationsResource, AuthenticationError, type ChatCompletionChoice, type ChatCompletionChunk, type ChatCompletionContentPart, type ChatCompletionMessage, type ChatCompletionRequest, type ChatCompletionResponse, type ChatCompletionUsage, type CreateDeploymentInput, type CreateEnvVarInput, type CreateStorageBucketInput, type CreateUploadSessionInput, type CreateUploadSessionResponse, type Deployment, type DeploymentLog, type DeploymentLogPage, type DeploymentLogType, type DeploymentStatus, DeploymentsResource, type EnvVar, type GatewayRequestOptions, type GatewayResult, GigadriveClient, type GigadriveClientConfig, GigadriveError, type Hostname, type HostnameAvailability, type ListApplicationsQuery, type ListDeploymentLogsQuery, type ListDeploymentsQuery, type ListQuery, type ListRequestsQuery, type ListStorageObjectsQuery, type NetworkRequest, type NetworkRequestApplicationRef, type NetworkRequestAssetRef, type NetworkRequestBucketRef, type NetworkRequestDeploymentRef, type NetworkRequestDetails, type NetworkRequestFunctionRef, type NetworkRequestMetrics, type NetworkRequestObjectRef, type NetworkRequestSummary, type NetworkResponseDetails, type NodeReadableLike, type Organization, OrganizationAiGatewayResource, OrganizationEnvVarsResource, OrganizationsResource, type Paginated, type PresignedUrlResult, type ProviderRouting, type QueryValue, type ResponsesRequest, type ResponsesResponse, type RunUploadOptions, type SetProductionHostnameResult, type SpeechRequest, type StartUploadResult, type StorageBucket, StorageBucketsResource, type StorageObject, type StorageObjectAccess, type StorageObjectList, StorageObjectsResource, type StorageUploadSession, StorageUploadSessionsResource, type TranscriptionRequest, type TranscriptionResponse, type UpdateEnvVarInput, type UploadBatchItemResult, type UploadBatchOptions, type UploadByteSource, type UploadData, UploadError, type UploadFileInput, type UploadFileResult, type UploadPart, UploadSessionExpiredError, type UploadUrlStorage, type VideoGenerationRequest, type VideoGenerationResponse, type VideoModelList, type WaitForCompletionOptions, paginate, parseSSEStream };
+export { AiGatewayAudioResource, type AiGatewayBudget, type AiGatewayBudgetInput, AiGatewayBudgetsResource, AiGatewayPoliciesResource, type AiGatewayPolicy, type AiGatewayPolicyInput, type AiGatewayProviderAttempt, type AiGatewayRequestEvent, type AiGatewayRequestsQuery, AiGatewayResource, type AiGatewayUsageBreakdown, type AiGatewayUsageQuery, AiGatewayUsageResource, type AiGatewayUsageSummary, AiGatewayVideosResource, type AiModel, type AiModelCapabilities, type AiModelRoutingProvider, ApiError, type ApiKey, ApiKeysResource, type Application, ApplicationEnvVarsResource, type ApplicationHostnameList, ApplicationRequestsResource, ApplicationStorageResource, ApplicationsResource, AuthenticationError, type ChatCompletionChoice, type ChatCompletionChunk, type ChatCompletionContentPart, type ChatCompletionMessage, type ChatCompletionRequest, type ChatCompletionResponse, type ChatCompletionUsage, type CreateApiKeyInput, type CreateApiKeyResult, type CreateDeploymentInput, type CreateEnvVarInput, type CreateStorageBucketInput, type CreateUploadSessionInput, type CreateUploadSessionResponse, type Deployment, type DeploymentLog, type DeploymentLogPage, type DeploymentLogType, type DeploymentStatus, DeploymentsResource, type EnvVar, type GatewayRequestOptions, type GatewayResult, GigadriveClient, type GigadriveClientConfig, GigadriveError, type Hostname, type HostnameAvailability, type ListApiKeysQuery, type ListApplicationsQuery, type ListDeploymentLogsQuery, type ListDeploymentsQuery, type ListQuery, type ListRequestsQuery, type ListStorageObjectsQuery, type NetworkRequest, type NetworkRequestApplicationRef, type NetworkRequestAssetRef, type NetworkRequestBucketRef, type NetworkRequestDeploymentRef, type NetworkRequestDetails, type NetworkRequestFunctionRef, type NetworkRequestMetrics, type NetworkRequestObjectRef, type NetworkRequestSummary, type NetworkResponseDetails, type NodeReadableLike, type Organization, OrganizationAiGatewayResource, OrganizationEnvVarsResource, OrganizationsResource, type Paginated, type PresignedUrlResult, type ProviderRouting, type PullEnvVarsQuery, type PullEnvVarsResult, type QueryValue, type ResolvedEnvVar, type ResponsesRequest, type ResponsesResponse, type RunUploadOptions, type SetProductionHostnameResult, type SpeechRequest, type StartUploadResult, type StorageBucket, StorageBucketsResource, type StorageObject, type StorageObjectAccess, type StorageObjectList, StorageObjectsResource, type StorageUploadSession, StorageUploadSessionsResource, type TranscriptionRequest, type TranscriptionResponse, type UpdateEnvVarInput, type UploadBatchItemResult, type UploadBatchOptions, type UploadByteSource, type UploadData, UploadError, type UploadFileInput, type UploadFileResult, type UploadPart, UploadSessionExpiredError, type UploadUrlStorage, type VideoGenerationRequest, type VideoGenerationResponse, type VideoModelList, type WaitForCompletionOptions, paginate, parseSSEStream };

package/dist/index.d.ts

@@ -488,6 +488,83 @@ declare class AiGatewayResource extends BaseResource {
     getModel(modelId: string): Promise<AiModel>;
 }
 
+/** An application-scoped API key. The secret is never returned after creation. */
+interface ApiKey {
+    /** Unique identifier (UUID). Used as the OAuth client ID. */
+    id: string;
+    /** Human-readable label. */
+    name: string;
+    /** Application this key is scoped to. */
+    applicationId: string | null;
+    /** API capability scopes granted to the key. */
+    scopes: string[];
+    /** ISO 8601 expiry, or `null` if the key never expires. */
+    expiresAt: string | null;
+    /** ISO 8601 creation timestamp. */
+    createdAt: string;
+    /** ISO 8601 last-updated timestamp. */
+    updatedAt: string;
+}
+/** Input for creating an application-scoped API key. */
+interface CreateApiKeyInput {
+    /** Human-readable label for the key. */
+    name: string;
+    /** Application to scope the key to. The key can only act on this application. */
+    applicationId: string;
+    /**
+     * API capability scopes to grant. Each must be a subset of your own access and
+     * cannot include API key management. Defaults to a minimal read-only set.
+     */
+    scopes?: string[];
+    /** Optional ISO 8601 expiry. Defaults to 90 days when omitted. */
+    expiresAt?: string;
+}
+/**
+ * The result of creating an API key. Includes the plaintext {@link secret},
+ * which is returned only once and cannot be retrieved again.
+ */
+interface CreateApiKeyResult extends ApiKey {
+    /** The plaintext client secret. Store it now — it cannot be retrieved again. */
+    secret: string;
+}
+/** Query for {@link ApiKeysResource.list}. */
+interface ListApiKeysQuery {
+    /** Application whose keys should be listed. */
+    applicationId: string;
+}
+/**
+ * Manage application-scoped API keys. Accessed via {@link GigadriveClient.apiKeys}.
+ *
+ * @example
+ * ```ts
+ * const key = await client.apiKeys.create({ name: 'ci', applicationId: 'app-id' });
+ * // Use key.id + key.secret as OAuth client credentials. Store the secret now.
+ * ```
+ */
+declare class ApiKeysResource extends BaseResource {
+    /**
+     * Provision a new application-scoped API key. The plaintext secret is returned
+     * exactly once — store it immediately.
+     *
+     * @param data - The key name, target application, and optional scopes/expiry.
+     * @returns The created key including its one-time plaintext secret.
+     */
+    create(data: CreateApiKeyInput): Promise<CreateApiKeyResult>;
+    /**
+     * List the API keys scoped to an application. Secrets are never returned.
+     *
+     * @param query - The application whose keys should be listed.
+     * @returns A paginated list of API key metadata.
+     */
+    list(query: ListApiKeysQuery): Promise<Paginated<ApiKey>>;
+    /**
+     * Permanently revoke an API key.
+     *
+     * @param apiKeyId - The API key ID (UUID).
+     */
+    delete(apiKeyId: string): Promise<void>;
+}
+
 /** An environment variable attached to an organization, application, or environment. */
 interface EnvVar {
     /** Unique identifier. */
@@ -531,6 +608,39 @@ interface UpdateEnvVarInput {
     /** Change the sensitive flag. */
     sensitive?: boolean;
 }
+/**
+ * A resolved environment variable returned by the pull endpoint. Only
+ * non-sensitive variables are returned, so {@link value} is always the real value.
+ */
+interface ResolvedEnvVar {
+    /** The variable name (e.g. `DATABASE_URL`). */
+    key: string;
+    /** The resolved variable value. */
+    value: string;
+    /** Where the resolved value came from after applying org → app → environment inheritance. */
+    source: 'organization' | 'application' | 'environment';
+}
+/** Query options for {@link ApplicationEnvVarsResource.pull}. */
+interface PullEnvVarsQuery {
+    /**
+     * Resolve environment-specific overrides for this environment slug on top of
+     * the organization and application baseline. Omit for the local development
+     * baseline (organization + application-wide variables only).
+     */
+    environment?: string;
+}
+/** Result of pulling resolved environment variables for local development. */
+interface PullEnvVarsResult {
+    /** Resolved, non-sensitive variables, ready to write to a local `.env` file. */
+    items: ResolvedEnvVar[];
+    /** Number of resolved variables returned. */
+    total: number;
+    /**
+     * Number of sensitive variables that were resolved but intentionally omitted.
+     * Secrets are never returned by the pull endpoint.
+     */
+    omittedSensitive: number;
+}
 
 /**
  * Manage environment variables scoped to an application.
@@ -552,6 +662,23 @@ declare class ApplicationEnvVarsResource extends BaseResource {
      * ```
      */
     list(applicationId: string, query?: ListQuery): Promise<Paginated<EnvVar>>;
+    /**
+     * Pull the environment variables that apply to an application for local
+     * development. Merges organization-wide, application-wide, and (optionally)
+     * environment-specific overrides, returning only non-sensitive values — ready
+     * to write to a local `.env` file.
+     *
+     * @param applicationId - The application ID (UUID).
+     * @param query - Optional environment targeting.
+     * @returns The resolved non-sensitive variables plus the count of omitted secrets.
+     *
+     * @example
+     * ```ts
+     * const { items } = await client.applications.envVars.pull('app-id');
+     * const dotenv = items.map((v) => `${v.key}=${v.value}`).join('\n');
+     * ```
+     */
+    pull(applicationId: string, query?: PullEnvVarsQuery): Promise<PullEnvVarsResult>;
     /**
      * Create a new environment variable for an application.
      *
@@ -2383,6 +2510,8 @@ declare class GigadriveClient {
     readonly deployments: DeploymentsResource;
     /** AI Gateway — OpenAI-compatible chat completions and model listing. */
     readonly aiGateway: AiGatewayResource;
+    /** Application-scoped API key management (create, list, revoke). */
+    readonly apiKeys: ApiKeysResource;
     constructor(config?: GigadriveClientConfig);
 }
 
@@ -2521,4 +2650,4 @@ declare function paginate<T>(fetchPage: (cursor: string | undefined) => Promise<
  */
 declare function parseSSEStream<T = unknown>(response: Response): AsyncGenerator<T>;
 
-export { AiGatewayAudioResource, type AiGatewayBudget, type AiGatewayBudgetInput, AiGatewayBudgetsResource, AiGatewayPoliciesResource, type AiGatewayPolicy, type AiGatewayPolicyInput, type AiGatewayProviderAttempt, type AiGatewayRequestEvent, type AiGatewayRequestsQuery, AiGatewayResource, type AiGatewayUsageBreakdown, type AiGatewayUsageQuery, AiGatewayUsageResource, type AiGatewayUsageSummary, AiGatewayVideosResource, type AiModel, type AiModelCapabilities, type AiModelRoutingProvider, ApiError, type Application, ApplicationEnvVarsResource, type ApplicationHostnameList, ApplicationRequestsResource, ApplicationStorageResource, ApplicationsResource, AuthenticationError, type ChatCompletionChoice, type ChatCompletionChunk, type ChatCompletionContentPart, type ChatCompletionMessage, type ChatCompletionRequest, type ChatCompletionResponse, type ChatCompletionUsage, type CreateDeploymentInput, type CreateEnvVarInput, type CreateStorageBucketInput, type CreateUploadSessionInput, type CreateUploadSessionResponse, type Deployment, type DeploymentLog, type DeploymentLogPage, type DeploymentLogType, type DeploymentStatus, DeploymentsResource, type EnvVar, type GatewayRequestOptions, type GatewayResult, GigadriveClient, type GigadriveClientConfig, GigadriveError, type Hostname, type HostnameAvailability, type ListApplicationsQuery, type ListDeploymentLogsQuery, type ListDeploymentsQuery, type ListQuery, type ListRequestsQuery, type ListStorageObjectsQuery, type NetworkRequest, type NetworkRequestApplicationRef, type NetworkRequestAssetRef, type NetworkRequestBucketRef, type NetworkRequestDeploymentRef, type NetworkRequestDetails, type NetworkRequestFunctionRef, type NetworkRequestMetrics, type NetworkRequestObjectRef, type NetworkRequestSummary, type NetworkResponseDetails, type NodeReadableLike, type Organization, OrganizationAiGatewayResource, OrganizationEnvVarsResource, OrganizationsResource, type Paginated, type PresignedUrlResult, type ProviderRouting, type QueryValue, type ResponsesRequest, type ResponsesResponse, type RunUploadOptions, type SetProductionHostnameResult, type SpeechRequest, type StartUploadResult, type StorageBucket, StorageBucketsResource, type StorageObject, type StorageObjectAccess, type StorageObjectList, StorageObjectsResource, type StorageUploadSession, StorageUploadSessionsResource, type TranscriptionRequest, type TranscriptionResponse, type UpdateEnvVarInput, type UploadBatchItemResult, type UploadBatchOptions, type UploadByteSource, type UploadData, UploadError, type UploadFileInput, type UploadFileResult, type UploadPart, UploadSessionExpiredError, type UploadUrlStorage, type VideoGenerationRequest, type VideoGenerationResponse, type VideoModelList, type WaitForCompletionOptions, paginate, parseSSEStream };
+export { AiGatewayAudioResource, type AiGatewayBudget, type AiGatewayBudgetInput, AiGatewayBudgetsResource, AiGatewayPoliciesResource, type AiGatewayPolicy, type AiGatewayPolicyInput, type AiGatewayProviderAttempt, type AiGatewayRequestEvent, type AiGatewayRequestsQuery, AiGatewayResource, type AiGatewayUsageBreakdown, type AiGatewayUsageQuery, AiGatewayUsageResource, type AiGatewayUsageSummary, AiGatewayVideosResource, type AiModel, type AiModelCapabilities, type AiModelRoutingProvider, ApiError, type ApiKey, ApiKeysResource, type Application, ApplicationEnvVarsResource, type ApplicationHostnameList, ApplicationRequestsResource, ApplicationStorageResource, ApplicationsResource, AuthenticationError, type ChatCompletionChoice, type ChatCompletionChunk, type ChatCompletionContentPart, type ChatCompletionMessage, type ChatCompletionRequest, type ChatCompletionResponse, type ChatCompletionUsage, type CreateApiKeyInput, type CreateApiKeyResult, type CreateDeploymentInput, type CreateEnvVarInput, type CreateStorageBucketInput, type CreateUploadSessionInput, type CreateUploadSessionResponse, type Deployment, type DeploymentLog, type DeploymentLogPage, type DeploymentLogType, type DeploymentStatus, DeploymentsResource, type EnvVar, type GatewayRequestOptions, type GatewayResult, GigadriveClient, type GigadriveClientConfig, GigadriveError, type Hostname, type HostnameAvailability, type ListApiKeysQuery, type ListApplicationsQuery, type ListDeploymentLogsQuery, type ListDeploymentsQuery, type ListQuery, type ListRequestsQuery, type ListStorageObjectsQuery, type NetworkRequest, type NetworkRequestApplicationRef, type NetworkRequestAssetRef, type NetworkRequestBucketRef, type NetworkRequestDeploymentRef, type NetworkRequestDetails, type NetworkRequestFunctionRef, type NetworkRequestMetrics, type NetworkRequestObjectRef, type NetworkRequestSummary, type NetworkResponseDetails, type NodeReadableLike, type Organization, OrganizationAiGatewayResource, OrganizationEnvVarsResource, OrganizationsResource, type Paginated, type PresignedUrlResult, type ProviderRouting, type PullEnvVarsQuery, type PullEnvVarsResult, type QueryValue, type ResolvedEnvVar, type ResponsesRequest, type ResponsesResponse, type RunUploadOptions, type SetProductionHostnameResult, type SpeechRequest, type StartUploadResult, type StorageBucket, StorageBucketsResource, type StorageObject, type StorageObjectAccess, type StorageObjectList, StorageObjectsResource, type StorageUploadSession, StorageUploadSessionsResource, type TranscriptionRequest, type TranscriptionResponse, type UpdateEnvVarInput, type UploadBatchItemResult, type UploadBatchOptions, type UploadByteSource, type UploadData, UploadError, type UploadFileInput, type UploadFileResult, type UploadPart, UploadSessionExpiredError, type UploadUrlStorage, type VideoGenerationRequest, type VideoGenerationResponse, type VideoModelList, type WaitForCompletionOptions, paginate, parseSSEStream };

package/dist/index.js

@@ -37,6 +37,7 @@ __export(src_exports, {
   AiGatewayUsageResource: () => AiGatewayUsageResource,
   AiGatewayVideosResource: () => AiGatewayVideosResource,
   ApiError: () => ApiError,
+  ApiKeysResource: () => ApiKeysResource,
   ApplicationEnvVarsResource: () => ApplicationEnvVarsResource,
   ApplicationRequestsResource: () => ApplicationRequestsResource,
   ApplicationStorageResource: () => ApplicationStorageResource,
@@ -785,6 +786,39 @@ var AiGatewayResource = class extends BaseResource {
   }
 };
 
+// src/resources/api-keys.ts
+var ApiKeysResource = class extends BaseResource {
+  /**
+   * Provision a new application-scoped API key. The plaintext secret is returned
+   * exactly once — store it immediately.
+   *
+   * @param data - The key name, target application, and optional scopes/expiry.
+   * @returns The created key including its one-time plaintext secret.
+   */
+  async create(data) {
+    return this.httpClient.post("/api-keys", data);
+  }
+  /**
+   * List the API keys scoped to an application. Secrets are never returned.
+   *
+   * @param query - The application whose keys should be listed.
+   * @returns A paginated list of API key metadata.
+   */
+  async list(query) {
+    return this.httpClient.get("/api-keys", {
+      query
+    });
+  }
+  /**
+   * Permanently revoke an API key.
+   *
+   * @param apiKeyId - The API key ID (UUID).
+   */
+  async delete(apiKeyId) {
+    return this.httpClient.delete(`/api-keys/${apiKeyId}`);
+  }
+};
+
 // src/resources/application-env-vars.ts
 var ApplicationEnvVarsResource = class extends BaseResource {
   /**
@@ -806,6 +840,27 @@ var ApplicationEnvVarsResource = class extends BaseResource {
       query
     });
   }
+  /**
+   * Pull the environment variables that apply to an application for local
+   * development. Merges organization-wide, application-wide, and (optionally)
+   * environment-specific overrides, returning only non-sensitive values — ready
+   * to write to a local `.env` file.
+   *
+   * @param applicationId - The application ID (UUID).
+   * @param query - Optional environment targeting.
+   * @returns The resolved non-sensitive variables plus the count of omitted secrets.
+   *
+   * @example
+   * ```ts
+   * const { items } = await client.applications.envVars.pull('app-id');
+   * const dotenv = items.map((v) => `${v.key}=${v.value}`).join('\n');
+   * ```
+   */
+  async pull(applicationId, query) {
+    return this.httpClient.get(`/applications/${applicationId}/env-vars/pull`, {
+      query
+    });
+  }
   /**
    * Create a new environment variable for an application.
    *
@@ -2098,6 +2153,8 @@ var GigadriveClient = class {
   deployments;
   /** AI Gateway — OpenAI-compatible chat completions and model listing. */
   aiGateway;
+  /** Application-scoped API key management (create, list, revoke). */
+  apiKeys;
   constructor(config = {}) {
     const baseUrl = config.baseUrl ?? readEnv("GIGADRIVE_API_BASE_URL") ?? DEFAULT_BASE_URL2;
     const fetchFn = config.fetch ?? globalThis.fetch.bind(globalThis);
@@ -2108,6 +2165,7 @@ var GigadriveClient = class {
     this.applications = new ApplicationsResource(httpClient);
     this.deployments = new DeploymentsResource(httpClient);
     this.aiGateway = new AiGatewayResource(httpClient);
+    this.apiKeys = new ApiKeysResource(httpClient);
   }
 };
 
@@ -2131,6 +2189,7 @@ async function* paginate(fetchPage) {
   AiGatewayUsageResource,
   AiGatewayVideosResource,
   ApiError,
+  ApiKeysResource,
   ApplicationEnvVarsResource,
   ApplicationRequestsResource,
   ApplicationStorageResource,