@leaflow/sdk 0.0.0-dev.462.g9520bb3 → 0.0.0-dev.466.gd442bdd

package/dist/account/v1/generated/functions.d.ts

@@ -16,6 +16,10 @@
  *
  * A scoped token cannot be renewed. Repeat step 2 for a new one, and sign in again at auth.leaflow.net once the access token itself has expired.
  *
+ * ## SSH keys
+ *
+ * The SSH keys of an account belong to its holder rather than to any project, and a key is active on one account at most. Keys shared by a project, such as one used by CI, belong to the project instead and are managed through the IAM API.
+ *
  * ## Project slugs
  *
  * Every project carries a `slug`, the label naming it in its address. Until a custom slug is chosen the slug is the project's `id`, and the address under the `id` keeps working after a custom slug is chosen. `GET /account/v1/projects/by-slug/{slug}` finds the project named by either label.
@@ -23,7 +27,7 @@
  * Looking up slugs and claiming custom slugs are rate limited per account. A request over the limit fails with 429, and `meta.retry_after_seconds` on the error states how many seconds to wait before retrying.
  * OpenAPI spec version: 1.0.0
  */
-import type { AcceptConsentsRequestBody, AcceptInvitationByTokenRequestBody, AcceptedInvitationResponseBody, AccountDeletionResource, AccountResource, AgreementListResponseBody, ConsentListResponseBody, CreateProjectRequestBody, Error, IdentityVerificationResource, InvitationPreviewResource, LengthAwarePageInvitationResource, LengthAwarePageProjectAccessResource, ListMyInvitationsParams, ListProjectsParams, LocaleOptionsResource, PreviewInvitationByTokenParams, ProjectAccessList, ProjectAccessResource, ProjectSlugAvailabilityResource, RegisterRequestBody, RequestAccountDeletionParams, ScopedTokenResponseBody, SearchProjectsRequestBody, SettingsResource, SubmitIdentityVerificationRequestBody, UpdateAccountRequestBody } from "./models.js";
+import type { AcceptConsentsRequestBody, AcceptInvitationByTokenRequestBody, AcceptedInvitationResponseBody, AccountDeletionResource, AccountResource, AgreementListResponseBody, ConsentListResponseBody, CreateProjectRequestBody, CreateSSHKeyRequestBody, Error, IdentityVerificationResource, InvitationPreviewResource, LengthAwarePageInvitationResource, LengthAwarePageProjectAccessResource, LengthAwarePageSSHKeyResource, ListMyInvitationsParams, ListProjectsParams, ListSshKeysParams, LocaleOptionsResource, PreviewInvitationByTokenParams, ProjectAccessList, ProjectAccessResource, ProjectSlugAvailabilityResource, RegisterRequestBody, RenameSSHKeyRequestBody, RequestAccountDeletionParams, SSHKeyResource, ScopedTokenResponseBody, SearchProjectsRequestBody, SettingsResource, SubmitIdentityVerificationRequestBody, UpdateAccountRequestBody } from "./models.js";
 export type HTTPStatusCode1xx = 100 | 101 | 102 | 103;
 export type HTTPStatusCode2xx = 200 | 201 | 202 | 203 | 204 | 205 | 206 | 207;
 export type HTTPStatusCode3xx = 300 | 301 | 302 | 303 | 304 | 305 | 307 | 308;
@@ -328,6 +332,112 @@ export declare const getSubmitIdentityVerificationUrl: () => string;
  * @summary Submit identity verification
  */
 export declare const submitIdentityVerification: (submitIdentityVerificationRequestBody: SubmitIdentityVerificationRequestBody, options?: RequestInit, fetchFn?: typeof globalThis.fetch) => Promise<submitIdentityVerificationResponse>;
+export type listSshKeysResponse200 = {
+    data: LengthAwarePageSSHKeyResource;
+    status: 200;
+};
+export type listSshKeysResponseDefault = {
+    data: Error;
+    status: Exclude<HTTPStatusCodes, 200>;
+};
+export type listSshKeysResponseSuccess = listSshKeysResponse200 & {
+    headers: Headers;
+};
+export type listSshKeysResponseError = listSshKeysResponseDefault & {
+    headers: Headers;
+};
+export type listSshKeysResponse = listSshKeysResponseSuccess | listSshKeysResponseError;
+export declare const getListSshKeysUrl: (params?: ListSshKeysParams) => string;
+/**
+ * Most recent first.
+ * @summary List the SSH keys of the current account
+ */
+export declare const listSshKeys: (params?: ListSshKeysParams, options?: RequestInit, fetchFn?: typeof globalThis.fetch) => Promise<listSshKeysResponse>;
+export type createSshKeyResponse201 = {
+    data: SSHKeyResource;
+    status: 201;
+};
+export type createSshKeyResponseDefault = {
+    data: Error;
+    status: Exclude<HTTPStatusCodes, 201>;
+};
+export type createSshKeyResponseSuccess = createSshKeyResponse201 & {
+    headers: Headers;
+};
+export type createSshKeyResponseError = createSshKeyResponseDefault & {
+    headers: Headers;
+};
+export type createSshKeyResponse = createSshKeyResponseSuccess | createSshKeyResponseError;
+export declare const getCreateSshKeyUrl: () => string;
+/**
+ * Fails with 409 `SSH_KEY_ALREADY_EXISTS` while the same key is active on any account, this one included, and with 412 `SSH_KEY_QUOTA_EXCEEDED` while the account already holds 50 active keys.
+ * @summary Add an SSH key to the current account
+ */
+export declare const createSshKey: (createSSHKeyRequestBody: CreateSSHKeyRequestBody, options?: RequestInit, fetchFn?: typeof globalThis.fetch) => Promise<createSshKeyResponse>;
+export type getSshKeyResponse200 = {
+    data: SSHKeyResource;
+    status: 200;
+};
+export type getSshKeyResponseDefault = {
+    data: Error;
+    status: Exclude<HTTPStatusCodes, 200>;
+};
+export type getSshKeyResponseSuccess = getSshKeyResponse200 & {
+    headers: Headers;
+};
+export type getSshKeyResponseError = getSshKeyResponseDefault & {
+    headers: Headers;
+};
+export type getSshKeyResponse = getSshKeyResponseSuccess | getSshKeyResponseError;
+export declare const getGetSshKeyUrl: (keyId: string) => string;
+/**
+ * @summary Get an SSH key of the current account
+ */
+export declare const getSshKey: (keyId: string, options?: RequestInit, fetchFn?: typeof globalThis.fetch) => Promise<getSshKeyResponse>;
+export type renameSshKeyResponse200 = {
+    data: SSHKeyResource;
+    status: 200;
+};
+export type renameSshKeyResponseDefault = {
+    data: Error;
+    status: Exclude<HTTPStatusCodes, 200>;
+};
+export type renameSshKeyResponseSuccess = renameSshKeyResponse200 & {
+    headers: Headers;
+};
+export type renameSshKeyResponseError = renameSshKeyResponseDefault & {
+    headers: Headers;
+};
+export type renameSshKeyResponse = renameSshKeyResponseSuccess | renameSshKeyResponseError;
+export declare const getRenameSshKeyUrl: (keyId: string) => string;
+/**
+ * Only the name can change. The key, its type and its fingerprint are three statements about one thing, and changing one of them would leave the row describing a key that does not exist.
+ * @summary Rename an SSH key of the current account
+ */
+export declare const renameSshKey: (keyId: string, renameSSHKeyRequestBody: RenameSSHKeyRequestBody, options?: RequestInit, fetchFn?: typeof globalThis.fetch) => Promise<renameSshKeyResponse>;
+export type revokeSshKeyResponse200 = {
+    data: SSHKeyResource;
+    status: 200;
+};
+export type revokeSshKeyResponseDefault = {
+    data: Error;
+    status: Exclude<HTTPStatusCodes, 200>;
+};
+export type revokeSshKeyResponseSuccess = revokeSshKeyResponse200 & {
+    headers: Headers;
+};
+export type revokeSshKeyResponseError = revokeSshKeyResponseDefault & {
+    headers: Headers;
+};
+export type revokeSshKeyResponse = revokeSshKeyResponseSuccess | revokeSshKeyResponseError;
+export declare const getRevokeSshKeyUrl: (keyId: string) => string;
+/**
+ * The row remains and its status becomes `REVOKED`, so it stays answerable afterwards which key was trusted at the time.
+ *
+ * The same key can then be added again, to this account or another.
+ * @summary Revoke an SSH key of the current account
+ */
+export declare const revokeSshKey: (keyId: string, options?: RequestInit, fetchFn?: typeof globalThis.fetch) => Promise<revokeSshKeyResponse>;
 export type listMyInvitationsResponse200 = {
     data: LengthAwarePageInvitationResource;
     status: 200;

package/dist/account/v1/generated/functions.js

@@ -308,6 +308,130 @@ export const submitIdentityVerification = async (submitIdentityVerificationReque
     const data = body ? JSON.parse(body) : {};
     return { data, status: res.status, headers: res.headers };
 };
+export const getListSshKeysUrl = (params) => {
+    const normalizedParams = new URLSearchParams();
+    Object.entries(params || {}).forEach(([key, value]) => {
+        if (value !== undefined) {
+            normalizedParams.append(key, value === null ? "null" : String(value));
+        }
+    });
+    const stringifiedParams = normalizedParams.toString();
+    return stringifiedParams.length > 0
+        ? `https://account.leaflow.cloud/account/v1/me/ssh-keys?${stringifiedParams}`
+        : `https://account.leaflow.cloud/account/v1/me/ssh-keys`;
+};
+/**
+ * Most recent first.
+ * @summary List the SSH keys of the current account
+ */
+export const listSshKeys = async (params, options, fetchFn) => {
+    const res = await (fetchFn ?? fetch)(getListSshKeysUrl(params), {
+        ...options,
+        method: "GET",
+    });
+    const body = [204, 205, 304].includes(res.status) ? null : await res.text();
+    const data = body ? JSON.parse(body) : {};
+    return { data, status: res.status, headers: res.headers };
+};
+export const getCreateSshKeyUrl = () => {
+    return `https://account.leaflow.cloud/account/v1/me/ssh-keys`;
+};
+/**
+ * Fails with 409 `SSH_KEY_ALREADY_EXISTS` while the same key is active on any account, this one included, and with 412 `SSH_KEY_QUOTA_EXCEEDED` while the account already holds 50 active keys.
+ * @summary Add an SSH key to the current account
+ */
+export const createSshKey = async (createSSHKeyRequestBody, options, fetchFn) => {
+    const getHeaders = (h) => {
+        if (!h)
+            return {};
+        if (h instanceof Headers)
+            return Object.fromEntries(h.entries());
+        if (Symbol.iterator in h) {
+            return Object.fromEntries(Array.from(h, (entry) => Array.from(entry)));
+        }
+        const headers = {};
+        for (const [name, value] of Object.entries(h)) {
+            if (value !== undefined)
+                headers[name] = value;
+        }
+        return headers;
+    };
+    const res = await (fetchFn ?? fetch)(getCreateSshKeyUrl(), {
+        ...options,
+        method: "POST",
+        headers: { "Content-Type": "application/json", ...getHeaders(options?.headers) },
+        body: JSON.stringify(createSSHKeyRequestBody),
+    });
+    const body = [204, 205, 304].includes(res.status) ? null : await res.text();
+    const data = body ? JSON.parse(body) : {};
+    return { data, status: res.status, headers: res.headers };
+};
+export const getGetSshKeyUrl = (keyId) => {
+    return `https://account.leaflow.cloud/account/v1/me/ssh-keys/${encodeURIComponent(String(keyId))}`;
+};
+/**
+ * @summary Get an SSH key of the current account
+ */
+export const getSshKey = async (keyId, options, fetchFn) => {
+    const res = await (fetchFn ?? fetch)(getGetSshKeyUrl(keyId), {
+        ...options,
+        method: "GET",
+    });
+    const body = [204, 205, 304].includes(res.status) ? null : await res.text();
+    const data = body ? JSON.parse(body) : {};
+    return { data, status: res.status, headers: res.headers };
+};
+export const getRenameSshKeyUrl = (keyId) => {
+    return `https://account.leaflow.cloud/account/v1/me/ssh-keys/${encodeURIComponent(String(keyId))}`;
+};
+/**
+ * Only the name can change. The key, its type and its fingerprint are three statements about one thing, and changing one of them would leave the row describing a key that does not exist.
+ * @summary Rename an SSH key of the current account
+ */
+export const renameSshKey = async (keyId, renameSSHKeyRequestBody, options, fetchFn) => {
+    const getHeaders = (h) => {
+        if (!h)
+            return {};
+        if (h instanceof Headers)
+            return Object.fromEntries(h.entries());
+        if (Symbol.iterator in h) {
+            return Object.fromEntries(Array.from(h, (entry) => Array.from(entry)));
+        }
+        const headers = {};
+        for (const [name, value] of Object.entries(h)) {
+            if (value !== undefined)
+                headers[name] = value;
+        }
+        return headers;
+    };
+    const res = await (fetchFn ?? fetch)(getRenameSshKeyUrl(keyId), {
+        ...options,
+        method: "PATCH",
+        headers: { "Content-Type": "application/json", ...getHeaders(options?.headers) },
+        body: JSON.stringify(renameSSHKeyRequestBody),
+    });
+    const body = [204, 205, 304].includes(res.status) ? null : await res.text();
+    const data = body ? JSON.parse(body) : {};
+    return { data, status: res.status, headers: res.headers };
+};
+export const getRevokeSshKeyUrl = (keyId) => {
+    return `https://account.leaflow.cloud/account/v1/me/ssh-keys/${encodeURIComponent(String(keyId))}`;
+};
+/**
+ * The row remains and its status becomes `REVOKED`, so it stays answerable afterwards which key was trusted at the time.
+ *
+ * The same key can then be added again, to this account or another.
+ * @summary Revoke an SSH key of the current account
+ */
+export const revokeSshKey = async (keyId, options, fetchFn) => {
+    const res = await (fetchFn ?? fetch)(getRevokeSshKeyUrl(keyId), {
+        ...options,
+        method: "DELETE",
+    });
+    const body = [204, 205, 304].includes(res.status) ? null : await res.text();
+    const data = body ? JSON.parse(body) : {};
+    return { data, status: res.status, headers: res.headers };
+};
 export const getListMyInvitationsUrl = (params) => {
     const normalizedParams = new URLSearchParams();
     Object.entries(params || {}).forEach(([key, value]) => {

package/dist/account/v1/generated/models.d.ts

@@ -16,6 +16,10 @@
  *
  * A scoped token cannot be renewed. Repeat step 2 for a new one, and sign in again at auth.leaflow.net once the access token itself has expired.
  *
+ * ## SSH keys
+ *
+ * The SSH keys of an account belong to its holder rather than to any project, and a key is active on one account at most. Keys shared by a project, such as one used by CI, belong to the project instead and are managed through the IAM API.
+ *
  * ## Project slugs
  *
  * Every project carries a `slug`, the label naming it in its address. Until a custom slug is chosen the slug is the project's `id`, and the address under the `id` keeps working after a custom slug is chosen. `GET /account/v1/projects/by-slug/{slug}` finds the project named by either label.
@@ -365,6 +369,53 @@ export interface SubmitIdentityVerificationRequestBody {
      */
     real_name: string;
 }
+export type SSHKeyResourceStatus = (typeof SSHKeyResourceStatus)[keyof typeof SSHKeyResourceStatus];
+export declare const SSHKeyResourceStatus: {
+    readonly ACTIVE: "ACTIVE";
+    readonly REVOKED: "REVOKED";
+};
+export interface SSHKeyResource {
+    created_at: string;
+    /** The SHA-256 fingerprint, as `ssh-keygen -l` prints it */
+    fingerprint: string;
+    id: string;
+    /** The algorithm, such as `ssh-ed25519` */
+    key_type: string;
+    name: string;
+    /** The key in OpenSSH format, without the comment it was added with */
+    public_key: string;
+    status: SSHKeyResourceStatus;
+}
+export interface LengthAwarePageSSHKeyResource {
+    /** The items in this page */
+    items: SSHKeyResource[];
+    /** Maximum number of items in this page, echoing the request */
+    limit: number;
+    /** Number of items skipped, echoing the request */
+    offset: number;
+    /** Total number of matches, not only this page */
+    total: number;
+}
+export interface CreateSSHKeyRequestBody {
+    /**
+     * @minLength 1
+     * @maxLength 128
+     */
+    name: string;
+    /**
+     * The public key in OpenSSH format. The type and the fingerprint are derived from it and cannot be changed. A certificate is refused, being a signature rather than a key
+     * @minLength 1
+     * @maxLength 16384
+     */
+    public_key: string;
+}
+export interface RenameSSHKeyRequestBody {
+    /**
+     * @minLength 1
+     * @maxLength 128
+     */
+    name: string;
+}
 /**
  * What an invitation states before it is accepted. It carries neither the invitation id nor the full recipient address; the invitations listed against the current account are returned by `list-my-invitations`
  */
@@ -574,6 +625,29 @@ export type RequestAccountDeletionParams = {
      */
     acknowledge_forfeiture: true;
 };
+export type ListSshKeysParams = {
+    /**
+     * Items returned in this page. Defaults to 50; at most 200.
+     * @minimum 1
+     * @maximum 200
+     */
+    limit?: number;
+    /**
+     * Items to skip. Defaults to 0; at most 10000.
+     * @minimum 0
+     * @maximum 10000
+     */
+    offset?: number;
+    /**
+     * Both kinds are returned while this is absent
+     */
+    status?: ListSshKeysStatus;
+};
+export type ListSshKeysStatus = (typeof ListSshKeysStatus)[keyof typeof ListSshKeysStatus];
+export declare const ListSshKeysStatus: {
+    readonly ACTIVE: "ACTIVE";
+    readonly REVOKED: "REVOKED";
+};
 export type ListMyInvitationsParams = {
     /**
      * Items returned in this page. Defaults to 50; at most 200.

package/dist/account/v1/generated/models.js

@@ -60,6 +60,10 @@ export const IdentityVerificationResourceStatus = {
     ENTERPRISE: "ENTERPRISE",
     REJECTED: "REJECTED",
 };
+export const SSHKeyResourceStatus = {
+    ACTIVE: "ACTIVE",
+    REVOKED: "REVOKED",
+};
 export const RuleResourceEffect = {
     allow: "allow",
     deny: "deny",
@@ -69,3 +73,7 @@ export const ProjectSlugAvailabilityResourceStatus = {
     reserved: "reserved",
     taken: "taken",
 };
+export const ListSshKeysStatus = {
+    ACTIVE: "ACTIVE",
+    REVOKED: "REVOKED",
+};

package/dist/account/v1/generated/schemas.zod.d.ts

@@ -16,6 +16,10 @@
  *
  * A scoped token cannot be renewed. Repeat step 2 for a new one, and sign in again at auth.leaflow.net once the access token itself has expired.
  *
+ * ## SSH keys
+ *
+ * The SSH keys of an account belong to its holder rather than to any project, and a key is active on one account at most. Keys shared by a project, such as one used by CI, belong to the project instead and are managed through the IAM API.
+ *
  * ## Project slugs
  *
  * Every project carries a `slug`, the label naming it in its address. Until a custom slug is chosen the slug is the project's `id`, and the address under the `id` keeps working after a custom slug is chosen. `GET /account/v1/projects/by-slug/{slug}` finds the project named by either label.
@@ -96,6 +100,56 @@ export declare const SubmitIdentityVerificationBody: zod.ZodObject<{
     id_number: zod.ZodString;
     real_name: zod.ZodString;
 }, zod.z.core.$strict>;
+/**
+ * Most recent first.
+ * @summary List the SSH keys of the current account
+ */
+export declare const listSshKeysQueryLimitDefault = 50;
+export declare const listSshKeysQueryLimitMax = 200;
+export declare const listSshKeysQueryOffsetDefault = 0;
+export declare const listSshKeysQueryOffsetMin = 0;
+export declare const listSshKeysQueryOffsetMax = 10000;
+export declare const ListSshKeysQueryParams: zod.ZodObject<{
+    limit: zod.ZodDefault<zod.ZodInt>;
+    offset: zod.ZodDefault<zod.ZodInt>;
+    status: zod.ZodOptional<zod.ZodEnum<{
+        ACTIVE: "ACTIVE";
+        REVOKED: "REVOKED";
+    }>>;
+}, zod.z.core.$strict>;
+/**
+ * Fails with 409 `SSH_KEY_ALREADY_EXISTS` while the same key is active on any account, this one included, and with 412 `SSH_KEY_QUOTA_EXCEEDED` while the account already holds 50 active keys.
+ * @summary Add an SSH key to the current account
+ */
+export declare const CreateSshKeyBody: zod.ZodObject<{
+    name: zod.ZodString;
+    public_key: zod.ZodString;
+}, zod.z.core.$strict>;
+/**
+ * @summary Get an SSH key of the current account
+ */
+export declare const GetSshKeyParams: zod.ZodObject<{
+    keyId: zod.ZodUUID;
+}, zod.z.core.$strict>;
+/**
+ * Only the name can change. The key, its type and its fingerprint are three statements about one thing, and changing one of them would leave the row describing a key that does not exist.
+ * @summary Rename an SSH key of the current account
+ */
+export declare const RenameSshKeyParams: zod.ZodObject<{
+    keyId: zod.ZodUUID;
+}, zod.z.core.$strict>;
+export declare const RenameSshKeyBody: zod.ZodObject<{
+    name: zod.ZodString;
+}, zod.z.core.$strict>;
+/**
+ * The row remains and its status becomes `REVOKED`, so it stays answerable afterwards which key was trusted at the time.
+ *
+ * The same key can then be added again, to this account or another.
+ * @summary Revoke an SSH key of the current account
+ */
+export declare const RevokeSshKeyParams: zod.ZodObject<{
+    keyId: zod.ZodUUID;
+}, zod.z.core.$strict>;
 /**
  * Matched against the email address of the current account.
  * @summary List invitations addressed to the caller

package/dist/account/v1/generated/schemas.zod.js

@@ -16,6 +16,10 @@
  *
  * A scoped token cannot be renewed. Repeat step 2 for a new one, and sign in again at auth.leaflow.net once the access token itself has expired.
  *
+ * ## SSH keys
+ *
+ * The SSH keys of an account belong to its holder rather than to any project, and a key is active on one account at most. Keys shared by a project, such as one used by CI, belong to the project instead and are managed through the IAM API.
+ *
  * ## Project slugs
  *
  * Every project carries a `slug`, the label naming it in its address. Until a custom slug is chosen the slug is the project's `id`, and the address under the `id` keeps working after a custom slug is chosen. `GET /account/v1/projects/by-slug/{slug}` finds the project named by either label.
@@ -27,7 +31,9 @@ import * as zod from "zod";
 import { AcceptConsentsRequestBody } from "./validators/acceptConsentsRequestBody.zod.js";
 import { AcceptInvitationByTokenRequestBody } from "./validators/acceptInvitationByTokenRequestBody.zod.js";
 import { CreateProjectRequestBody } from "./validators/createProjectRequestBody.zod.js";
+import { CreateSSHKeyRequestBody } from "./validators/createSSHKeyRequestBody.zod.js";
 import { RegisterRequestBody } from "./validators/registerRequestBody.zod.js";
+import { RenameSSHKeyRequestBody } from "./validators/renameSSHKeyRequestBody.zod.js";
 import { SubmitIdentityVerificationRequestBody } from "./validators/submitIdentityVerificationRequestBody.zod.js";
 import { UpdateAccountRequestBody } from "./validators/updateAccountRequestBody.zod.js";
 /**
@@ -70,6 +76,61 @@ export const RequestAccountDeletionQueryParams = zod.strictObject({
  * @summary Submit identity verification
  */
 export const SubmitIdentityVerificationBody = SubmitIdentityVerificationRequestBody;
+/**
+ * Most recent first.
+ * @summary List the SSH keys of the current account
+ */
+export const listSshKeysQueryLimitDefault = 50;
+export const listSshKeysQueryLimitMax = 200;
+export const listSshKeysQueryOffsetDefault = 0;
+export const listSshKeysQueryOffsetMin = 0;
+export const listSshKeysQueryOffsetMax = 10000;
+export const ListSshKeysQueryParams = zod.strictObject({
+    limit: zod
+        .int()
+        .min(1)
+        .max(listSshKeysQueryLimitMax)
+        .default(listSshKeysQueryLimitDefault)
+        .describe("Items returned in this page. Defaults to 50; at most 200."),
+    offset: zod
+        .int()
+        .min(listSshKeysQueryOffsetMin)
+        .max(listSshKeysQueryOffsetMax)
+        .default(listSshKeysQueryOffsetDefault)
+        .describe("Items to skip. Defaults to 0; at most 10000."),
+    status: zod
+        .enum(["ACTIVE", "REVOKED"])
+        .optional()
+        .describe("Both kinds are returned while this is absent"),
+});
+/**
+ * Fails with 409 `SSH_KEY_ALREADY_EXISTS` while the same key is active on any account, this one included, and with 412 `SSH_KEY_QUOTA_EXCEEDED` while the account already holds 50 active keys.
+ * @summary Add an SSH key to the current account
+ */
+export const CreateSshKeyBody = CreateSSHKeyRequestBody;
+/**
+ * @summary Get an SSH key of the current account
+ */
+export const GetSshKeyParams = zod.strictObject({
+    keyId: zod.uuid(),
+});
+/**
+ * Only the name can change. The key, its type and its fingerprint are three statements about one thing, and changing one of them would leave the row describing a key that does not exist.
+ * @summary Rename an SSH key of the current account
+ */
+export const RenameSshKeyParams = zod.strictObject({
+    keyId: zod.uuid(),
+});
+export const RenameSshKeyBody = RenameSSHKeyRequestBody;
+/**
+ * The row remains and its status becomes `REVOKED`, so it stays answerable afterwards which key was trusted at the time.
+ *
+ * The same key can then be added again, to this account or another.
+ * @summary Revoke an SSH key of the current account
+ */
+export const RevokeSshKeyParams = zod.strictObject({
+    keyId: zod.uuid(),
+});
 /**
  * Matched against the email address of the current account.
  * @summary List invitations addressed to the caller

package/dist/account/v1/generated/validators/acceptConsentsRequestBody.zod.d.ts

@@ -16,6 +16,10 @@
  *
  * A scoped token cannot be renewed. Repeat step 2 for a new one, and sign in again at auth.leaflow.net once the access token itself has expired.
  *
+ * ## SSH keys
+ *
+ * The SSH keys of an account belong to its holder rather than to any project, and a key is active on one account at most. Keys shared by a project, such as one used by CI, belong to the project instead and are managed through the IAM API.
+ *
  * ## Project slugs
  *
  * Every project carries a `slug`, the label naming it in its address. Until a custom slug is chosen the slug is the project's `id`, and the address under the `id` keeps working after a custom slug is chosen. `GET /account/v1/projects/by-slug/{slug}` finds the project named by either label.

package/dist/account/v1/generated/validators/acceptConsentsRequestBody.zod.js

@@ -16,6 +16,10 @@
  *
  * A scoped token cannot be renewed. Repeat step 2 for a new one, and sign in again at auth.leaflow.net once the access token itself has expired.
  *
+ * ## SSH keys
+ *
+ * The SSH keys of an account belong to its holder rather than to any project, and a key is active on one account at most. Keys shared by a project, such as one used by CI, belong to the project instead and are managed through the IAM API.
+ *
  * ## Project slugs
  *
  * Every project carries a `slug`, the label naming it in its address. Until a custom slug is chosen the slug is the project's `id`, and the address under the `id` keeps working after a custom slug is chosen. `GET /account/v1/projects/by-slug/{slug}` finds the project named by either label.

package/dist/account/v1/generated/validators/acceptInvitationByTokenRequestBody.zod.d.ts

@@ -16,6 +16,10 @@
  *
  * A scoped token cannot be renewed. Repeat step 2 for a new one, and sign in again at auth.leaflow.net once the access token itself has expired.
  *
+ * ## SSH keys
+ *
+ * The SSH keys of an account belong to its holder rather than to any project, and a key is active on one account at most. Keys shared by a project, such as one used by CI, belong to the project instead and are managed through the IAM API.
+ *
  * ## Project slugs
  *
  * Every project carries a `slug`, the label naming it in its address. Until a custom slug is chosen the slug is the project's `id`, and the address under the `id` keeps working after a custom slug is chosen. `GET /account/v1/projects/by-slug/{slug}` finds the project named by either label.

package/dist/account/v1/generated/validators/acceptInvitationByTokenRequestBody.zod.js

@@ -16,6 +16,10 @@
  *
  * A scoped token cannot be renewed. Repeat step 2 for a new one, and sign in again at auth.leaflow.net once the access token itself has expired.
  *
+ * ## SSH keys
+ *
+ * The SSH keys of an account belong to its holder rather than to any project, and a key is active on one account at most. Keys shared by a project, such as one used by CI, belong to the project instead and are managed through the IAM API.
+ *
  * ## Project slugs
  *
  * Every project carries a `slug`, the label naming it in its address. Until a custom slug is chosen the slug is the project's `id`, and the address under the `id` keeps working after a custom slug is chosen. `GET /account/v1/projects/by-slug/{slug}` finds the project named by either label.

package/dist/account/v1/generated/validators/acceptedInvitationResponseBody.zod.d.ts

@@ -16,6 +16,10 @@
  *
  * A scoped token cannot be renewed. Repeat step 2 for a new one, and sign in again at auth.leaflow.net once the access token itself has expired.
  *
+ * ## SSH keys
+ *
+ * The SSH keys of an account belong to its holder rather than to any project, and a key is active on one account at most. Keys shared by a project, such as one used by CI, belong to the project instead and are managed through the IAM API.
+ *
  * ## Project slugs
  *
  * Every project carries a `slug`, the label naming it in its address. Until a custom slug is chosen the slug is the project's `id`, and the address under the `id` keeps working after a custom slug is chosen. `GET /account/v1/projects/by-slug/{slug}` finds the project named by either label.

package/dist/account/v1/generated/validators/acceptedInvitationResponseBody.zod.js

@@ -16,6 +16,10 @@
  *
  * A scoped token cannot be renewed. Repeat step 2 for a new one, and sign in again at auth.leaflow.net once the access token itself has expired.
  *
+ * ## SSH keys
+ *
+ * The SSH keys of an account belong to its holder rather than to any project, and a key is active on one account at most. Keys shared by a project, such as one used by CI, belong to the project instead and are managed through the IAM API.
+ *
  * ## Project slugs
  *
  * Every project carries a `slug`, the label naming it in its address. Until a custom slug is chosen the slug is the project's `id`, and the address under the `id` keeps working after a custom slug is chosen. `GET /account/v1/projects/by-slug/{slug}` finds the project named by either label.

package/dist/account/v1/generated/validators/accountDeletionObjectionResource.zod.d.ts

@@ -16,6 +16,10 @@
  *
  * A scoped token cannot be renewed. Repeat step 2 for a new one, and sign in again at auth.leaflow.net once the access token itself has expired.
  *
+ * ## SSH keys
+ *
+ * The SSH keys of an account belong to its holder rather than to any project, and a key is active on one account at most. Keys shared by a project, such as one used by CI, belong to the project instead and are managed through the IAM API.
+ *
  * ## Project slugs
  *
  * Every project carries a `slug`, the label naming it in its address. Until a custom slug is chosen the slug is the project's `id`, and the address under the `id` keeps working after a custom slug is chosen. `GET /account/v1/projects/by-slug/{slug}` finds the project named by either label.

package/dist/account/v1/generated/validators/accountDeletionObjectionResource.zod.js

@@ -16,6 +16,10 @@
  *
  * A scoped token cannot be renewed. Repeat step 2 for a new one, and sign in again at auth.leaflow.net once the access token itself has expired.
  *
+ * ## SSH keys
+ *
+ * The SSH keys of an account belong to its holder rather than to any project, and a key is active on one account at most. Keys shared by a project, such as one used by CI, belong to the project instead and are managed through the IAM API.
+ *
  * ## Project slugs
  *
  * Every project carries a `slug`, the label naming it in its address. Until a custom slug is chosen the slug is the project's `id`, and the address under the `id` keeps working after a custom slug is chosen. `GET /account/v1/projects/by-slug/{slug}` finds the project named by either label.

package/dist/account/v1/generated/validators/accountDeletionResource.zod.d.ts

@@ -16,6 +16,10 @@
  *
  * A scoped token cannot be renewed. Repeat step 2 for a new one, and sign in again at auth.leaflow.net once the access token itself has expired.
  *
+ * ## SSH keys
+ *
+ * The SSH keys of an account belong to its holder rather than to any project, and a key is active on one account at most. Keys shared by a project, such as one used by CI, belong to the project instead and are managed through the IAM API.
+ *
  * ## Project slugs
  *
  * Every project carries a `slug`, the label naming it in its address. Until a custom slug is chosen the slug is the project's `id`, and the address under the `id` keeps working after a custom slug is chosen. `GET /account/v1/projects/by-slug/{slug}` finds the project named by either label.

package/dist/account/v1/generated/validators/accountDeletionResource.zod.js

@@ -16,6 +16,10 @@
  *
  * A scoped token cannot be renewed. Repeat step 2 for a new one, and sign in again at auth.leaflow.net once the access token itself has expired.
  *
+ * ## SSH keys
+ *
+ * The SSH keys of an account belong to its holder rather than to any project, and a key is active on one account at most. Keys shared by a project, such as one used by CI, belong to the project instead and are managed through the IAM API.
+ *
  * ## Project slugs
  *
  * Every project carries a `slug`, the label naming it in its address. Until a custom slug is chosen the slug is the project's `id`, and the address under the `id` keeps working after a custom slug is chosen. `GET /account/v1/projects/by-slug/{slug}` finds the project named by either label.

package/dist/account/v1/generated/validators/accountDeletionState.zod.d.ts

@@ -16,6 +16,10 @@
  *
  * A scoped token cannot be renewed. Repeat step 2 for a new one, and sign in again at auth.leaflow.net once the access token itself has expired.
  *
+ * ## SSH keys
+ *
+ * The SSH keys of an account belong to its holder rather than to any project, and a key is active on one account at most. Keys shared by a project, such as one used by CI, belong to the project instead and are managed through the IAM API.
+ *
  * ## Project slugs
  *
  * Every project carries a `slug`, the label naming it in its address. Until a custom slug is chosen the slug is the project's `id`, and the address under the `id` keeps working after a custom slug is chosen. `GET /account/v1/projects/by-slug/{slug}` finds the project named by either label.