@lizard-build/sdk 0.1.60 → 0.1.61

package/dist/index.d.mts

@@ -1982,11 +1982,11 @@ declare class Lizard {
     /**
      * The account this credential belongs to — the SDK's `lizard whoami`.
      *
-     * A **scoped** key gets identity only: `id`, `username`, `avatarUrl`, `scoped: true`
-     * and the key's own `scopes`. The account's email, balance, plan and billing status
-     * are withheld — they belong to the account, not to the key holder, and a scoped key
-     * is meant to be handed to an end user or injected into a sandbox. An unscoped key
-     * or a session sees the full account.
+     * A **scoped** key never learns whose account it is: it gets only `scoped: true` and
+     * its `scopes`, each project or workspace with its name. No id, username, avatar,
+     * email, balance or plan -- a scoped key is meant to be handed to someone who is not
+     * the account's member, or injected into a sandbox. An unscoped key or a session
+     * sees the full account.
      *
      * Reading back `scopes` is the cheapest way to answer "what can this key reach".
      */
@@ -1995,21 +1995,27 @@ declare class Lizard {
     get platform(): PlatformClient;
 }
 /**
- * The account behind a credential — see {@link Lizard.whoami}.
+ * The account behind a credential -- see {@link Lizard.whoami}.
  *
- * Everything past `avatarUrl` is present only for an unscoped key or a session; a
- * scoped key gets `scoped: true` and `scopes` in their place.
+ * A scoped key gets only `scoped: true` and `scopes`; every other field is present only
+ * for an unscoped key or a session.
  */
 interface Account {
-    id: string;
-    username: string;
+    /** Absent for a scoped key. */
+    id?: string;
+    /** Absent for a scoped key. */
+    username?: string;
     avatarUrl?: string | null;
-    /** True when the calling key is scoped, meaning the account fields below are absent. */
+    /** True when the calling key is scoped, meaning the account fields are absent. */
     scoped?: boolean;
-    /** What the calling key may reach. Present when `scoped` is true. */
+    /** What the calling key may reach, by name. Present when `scoped` is true. */
     scopes?: Array<{
         type: 'workspace' | 'project';
         id: string;
+        name?: string | null;
+        /** For a project scope: the workspace it belongs to. */
+        workspaceId?: string | null;
+        workspaceName?: string | null;
     }>;
     email?: string | null;
     plan?: string;

package/dist/index.d.ts

@@ -1982,11 +1982,11 @@ declare class Lizard {
     /**
      * The account this credential belongs to — the SDK's `lizard whoami`.
      *
-     * A **scoped** key gets identity only: `id`, `username`, `avatarUrl`, `scoped: true`
-     * and the key's own `scopes`. The account's email, balance, plan and billing status
-     * are withheld — they belong to the account, not to the key holder, and a scoped key
-     * is meant to be handed to an end user or injected into a sandbox. An unscoped key
-     * or a session sees the full account.
+     * A **scoped** key never learns whose account it is: it gets only `scoped: true` and
+     * its `scopes`, each project or workspace with its name. No id, username, avatar,
+     * email, balance or plan -- a scoped key is meant to be handed to someone who is not
+     * the account's member, or injected into a sandbox. An unscoped key or a session
+     * sees the full account.
      *
      * Reading back `scopes` is the cheapest way to answer "what can this key reach".
      */
@@ -1995,21 +1995,27 @@ declare class Lizard {
     get platform(): PlatformClient;
 }
 /**
- * The account behind a credential — see {@link Lizard.whoami}.
+ * The account behind a credential -- see {@link Lizard.whoami}.
  *
- * Everything past `avatarUrl` is present only for an unscoped key or a session; a
- * scoped key gets `scoped: true` and `scopes` in their place.
+ * A scoped key gets only `scoped: true` and `scopes`; every other field is present only
+ * for an unscoped key or a session.
  */
 interface Account {
-    id: string;
-    username: string;
+    /** Absent for a scoped key. */
+    id?: string;
+    /** Absent for a scoped key. */
+    username?: string;
     avatarUrl?: string | null;
-    /** True when the calling key is scoped, meaning the account fields below are absent. */
+    /** True when the calling key is scoped, meaning the account fields are absent. */
     scoped?: boolean;
-    /** What the calling key may reach. Present when `scoped` is true. */
+    /** What the calling key may reach, by name. Present when `scoped` is true. */
     scopes?: Array<{
         type: 'workspace' | 'project';
         id: string;
+        name?: string | null;
+        /** For a project scope: the workspace it belongs to. */
+        workspaceId?: string | null;
+        workspaceName?: string | null;
     }>;
     email?: string | null;
     plan?: string;

package/dist/index.js

@@ -1990,11 +1990,11 @@ var Lizard = class {
   /**
    * The account this credential belongs to — the SDK's `lizard whoami`.
    *
-   * A **scoped** key gets identity only: `id`, `username`, `avatarUrl`, `scoped: true`
-   * and the key's own `scopes`. The account's email, balance, plan and billing status
-   * are withheld — they belong to the account, not to the key holder, and a scoped key
-   * is meant to be handed to an end user or injected into a sandbox. An unscoped key
-   * or a session sees the full account.
+   * A **scoped** key never learns whose account it is: it gets only `scoped: true` and
+   * its `scopes`, each project or workspace with its name. No id, username, avatar,
+   * email, balance or plan -- a scoped key is meant to be handed to someone who is not
+   * the account's member, or injected into a sandbox. An unscoped key or a session
+   * sees the full account.
    *
    * Reading back `scopes` is the cheapest way to answer "what can this key reach".
    */

package/dist/index.mjs

@@ -1937,11 +1937,11 @@ var Lizard = class {
   /**
    * The account this credential belongs to — the SDK's `lizard whoami`.
    *
-   * A **scoped** key gets identity only: `id`, `username`, `avatarUrl`, `scoped: true`
-   * and the key's own `scopes`. The account's email, balance, plan and billing status
-   * are withheld — they belong to the account, not to the key holder, and a scoped key
-   * is meant to be handed to an end user or injected into a sandbox. An unscoped key
-   * or a session sees the full account.
+   * A **scoped** key never learns whose account it is: it gets only `scoped: true` and
+   * its `scopes`, each project or workspace with its name. No id, username, avatar,
+   * email, balance or plan -- a scoped key is meant to be handed to someone who is not
+   * the account's member, or injected into a sandbox. An unscoped key or a session
+   * sees the full account.
    *
    * Reading back `scopes` is the cheapest way to answer "what can this key reach".
    */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lizard-build/sdk",
-  "version": "0.1.60",
+  "version": "0.1.61",
   "description": "TypeScript SDK for Lizard: Firecracker microVM sandboxes, code execution and cloud apps.",
   "main": "./dist/index.js",
   "module": "./dist/index.mjs",