@hanzo/rooms 0.1.30 → 0.1.31

package/dist/lib/org.d.ts

@@ -5,8 +5,8 @@
  *   delete the org         DELETE /v1/iam/organizations/admin/<org>
  *   found a team org       POST   /v1/iam/organizations {owner: admin, name, displayName}
  *   business address       GET|PUT /v1/settings/organization (cloud's per-org config)
- *   your keys              GET|POST|DELETE /v1/account/keys (minted by IAM on you, shown once)
- *   the org's keys         GET    /v1/iam/keys?owner=<org>, DELETE /v1/iam/keys/<org>/<name>
+ *   API keys               GET|POST /v1/account/keys, DELETE /v1/account/keys/<id>
+ *                          (yours; every key of the org for an admin; a secret shown once)
  *   payment methods        GET    /v1/billing/methods
  *   invoices               GET    /v1/billing/invoices
  *
@@ -59,30 +59,37 @@ export declare function readAddress(): Promise<Address>;
  */
 export declare function saveAddress(next: Address): Promise<Address>;
 export type KeyType = 'secret' | 'publishable';
-/** One of the reader's own keys in the acting org. A secret key's value is never listed. */
-export interface OwnKey {
+/**
+ * One API key the reader may see: their own, or any key of an org they administer.
+ * Each is its own credential, so creating one never replaces another. A secret
+ * key's value is never listed; `key` carries it once, in the answer to a create.
+ */
+export interface ApiKey {
+    id: string;
+    name: string;
     type: KeyType;
+    /** The head of the credential, enough to tell which string it is. */
     prefix?: string;
-    /** The whole value, for a publishable key only: it is public by construction. */
+    /** The whole value: always for a publishable key, once for a new secret one. */
     key?: string;
-    createdAt?: string;
-}
-export declare function ownKeys(): Promise<OwnKey[]>;
-/** Mints the reader's key of `type`, replacing the one they held, and answers it — once. */
-export declare function mintKey(type: KeyType): Promise<string>;
-export declare const revokeOwnKey: (type: KeyType) => Promise<unknown>;
-/** One of the org's keys, as IAM lists them: the secret half never leaves IAM. */
-export interface OrgKey {
-    owner: string;
-    name: string;
-    displayName?: string;
-    user?: string;
-    scope?: string;
-    state?: string;
-    createdTime?: string;
+    status: 'active' | 'expired' | 'revoked' | 'disabled';
+    /** Who the key speaks for, `<org>/<user>`. */
+    creator?: string;
+    created?: string;
+    expires?: string;
+    revoker?: string;
+    revoked?: string;
+    /** What the key may reach; empty reaches whatever its holder does. */
+    limit?: string[];
 }
-export declare function orgKeys(org: string): Promise<OrgKey[]>;
-export declare const revokeKey: (k: Pick<OrgKey, 'owner' | 'name'>) => Promise<unknown>;
+export declare function keys(): Promise<ApiKey[]>;
+/** Creates a new key beside the ones held, and answers it with its value — once. */
+export declare function createKey(input: {
+    name?: string;
+    type: KeyType;
+}): Promise<ApiKey>;
+/** Revokes exactly one key. It stays listed as revoked; every other key keeps working. */
+export declare const revokeKey: (id: string) => Promise<ApiKey>;
 /** A card on file, as billing lists it. */
 export interface Method {
     id: string;

package/dist/lib/org.js

@@ -5,8 +5,8 @@
  *   delete the org         DELETE /v1/iam/organizations/admin/<org>
  *   found a team org       POST   /v1/iam/organizations {owner: admin, name, displayName}
  *   business address       GET|PUT /v1/settings/organization (cloud's per-org config)
- *   your keys              GET|POST|DELETE /v1/account/keys (minted by IAM on you, shown once)
- *   the org's keys         GET    /v1/iam/keys?owner=<org>, DELETE /v1/iam/keys/<org>/<name>
+ *   API keys               GET|POST /v1/account/keys, DELETE /v1/account/keys/<id>
+ *                          (yours; every key of the org for an admin; a secret shown once)
  *   payment methods        GET    /v1/billing/methods
  *   invoices               GET    /v1/billing/invoices
  *
@@ -112,21 +112,18 @@ export async function saveAddress(next) {
     const stored = await ask(PROFILE, { method: 'PUT', json: { config: { ...held, address: next } } });
     return addressOf(stored.config);
 }
-export async function ownKeys() {
+export async function keys() {
     return list((await ask('/v1/account/keys')).keys);
 }
-/** Mints the reader's key of `type`, replacing the one they held, and answers it — once. */
-export async function mintKey(type) {
-    const made = await ask('/v1/account/keys', { method: 'POST', json: { type } });
+/** Creates a new key beside the ones held, and answers it with its value — once. */
+export async function createKey(input) {
+    const made = await ask('/v1/account/keys', { method: 'POST', json: input });
     if (!made?.key)
         throw new Refusal(502, 'IAM answered without a key.');
-    return made.key;
+    return made;
 }
-export const revokeOwnKey = (type) => ask(`/v1/account/keys?type=${type}`, { method: 'DELETE' });
-export async function orgKeys(org) {
-    return list((await ask(`/v1/iam/keys?owner=${enc(org)}`)).keys);
-}
-export const revokeKey = (k) => ask(`/v1/iam/keys/${enc(k.owner)}/${enc(k.name)}`, { method: 'DELETE' });
+/** Revokes exactly one key. It stays listed as revoked; every other key keeps working. */
+export const revokeKey = (id) => ask(`/v1/account/keys/${enc(id)}`, { method: 'DELETE' });
 export async function methods() {
     const got = await ask('/v1/billing/methods');
     return list(Array.isArray(got) ? got : got?.data);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hanzo/rooms",
-  "version": "0.1.30",
+  "version": "0.1.31",
   "description": "The workspace rooms — Home, Chat, Inbox, Contacts, Meet, Cal, Drive, Board, Work, Bots — and the frame that holds them, once, for every Hanzo surface.",
   "type": "module",
   "main": "./dist/index.js",