@meowpanel/api 0.3.0 → 0.5.0

package/script/src/resources/servers/sftp.d.ts

@@ -1,7 +1,7 @@
 import type { HttpClient } from '../../http.js';
 import { ReactiveResource } from '../../reactive.js';
 import type { IncludeOptions, ListOptions, NanoID, Paginated, ResourceWith, SftpPermission } from '../../types.js';
-import { Member } from '../members.js';
+import { User } from '../users.js';
 import type { SftpUserData } from './types.js';
 /**
  * Connection details for the SFTP server on a node.
@@ -19,8 +19,8 @@ export interface SftpConnection {
  *
  * Retrieved via {@link ServerSftpManager.list} or {@link ServerSftpManager.create}.
  *
- * > **Note:** The `password` field is automatically included in the creation response.
- * > On subsequent fetches it requires `include=password` to be populated.
+ * The plaintext password is returned only when the user is created or its password
+ * is reset. It is never retrievable afterward.
  */
 export declare class SftpUser extends ReactiveResource {
     /** The SFTP user's unique NanoID. */
@@ -29,11 +29,7 @@ export declare class SftpUser extends ReactiveResource {
     name: string;
     /** The SFTP login username (typically prefixed with the server ID). */
     username: string;
-    /**
-     * The plaintext password.
-     *
-     * Automatically included on creation. Requires `include=password` on subsequent fetches.
-     */
+    /** The plaintext password. Present only in the creation response. */
     password: string | undefined;
     /**
      * A map of path glob patterns to the set of permissions granted for that path.
@@ -44,8 +40,8 @@ export declare class SftpUser extends ReactiveResource {
     paths: Record<string, SftpPermission[]>;
     /** NanoID of the member who owns this SFTP user. */
     ownerId: NanoID;
-    /** The owner member. */
-    owner: Member | null | undefined;
+    /** The owner. */
+    owner: User | null | undefined;
     /** When this SFTP user last logged in, or `null` if never. */
     lastLoginAt: Date | null;
     /** When this SFTP user was created. */
@@ -56,14 +52,11 @@ export declare class SftpUser extends ReactiveResource {
     constructor(data: SftpUserData);
 }
 /** Valid include keys for SFTP user endpoints. */
-export type SftpUserInclude = 'password' | 'owner';
+export type SftpUserInclude = 'owner';
 /** Maps each {@link SftpUserInclude} key to the field(s) it guarantees on the {@link SftpUser} instance. */
 interface SftpUserIncludeMap {
-    password: {
-        password: string;
-    };
     owner: {
-        owner: Member;
+        owner: User;
     };
 }
 /** A {@link SftpUser} with specific include fields guaranteed to be populated. */
@@ -88,8 +81,8 @@ export interface SftpDetails {
  * console.log(`Connect to: ${details.connection.url}`);
  *
  * const user = await server.sftp.create('deploy', {
- *   '/': ['sftp.content.list', 'sftp.content.read'],
- *   '/logs': ['sftp.content.list', 'sftp.content.read', 'sftp.content.delete'],
+ *   '/': ['server.file.list', 'server.file.read'],
+ *   '/logs': ['server.file.list', 'server.file.read', 'server.file.delete'],
  * });
  * console.log(user.password); // Save this!
  * ```
@@ -119,8 +112,8 @@ export declare class ServerSftpManager {
     /**
      * Create a new SFTP user for this server.
      *
-     * The returned {@link SftpUser} includes the `password` field automatically.
-     * On subsequent fetches, request it explicitly with `include=password`.
+     * The returned {@link SftpUser} carries the one-time `password`. It is never
+     * retrievable afterward, so store it now.
      *
      * @param name  Display name for the SFTP user.
      * @param paths A map of path glob patterns to an array of {@link SftpPermission} scopes.

package/script/src/resources/servers/sftp.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sftp.d.ts","sourceRoot":"","sources":["../../../../src/src/resources/servers/sftp.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,KAAK,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAEnH,OAAO,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AACvC,OAAO,KAAK,EAAmB,YAAY,EAAE,MAAM,YAAY,CAAC;AAEhE;;GAEG;AACH,MAAM,WAAW,cAAc;IAC9B,mDAAmD;IACnD,GAAG,EAAE,MAAM,CAAC;IACZ,yCAAyC;IACzC,IAAI,EAAE,MAAM,CAAC;IACb,uCAAuC;IACvC,IAAI,EAAE,MAAM,CAAC;CACb;AAED;;;;;;;GAOG;AACH,qBAAa,QAAS,SAAQ,gBAAgB;IAC7C,qCAAqC;IACrC,SAAgB,EAAE,EAAE,MAAM,CAAC;IAC3B,uCAAuC;IAChC,IAAI,EAAE,MAAM,CAAC;IACpB,uEAAuE;IAChE,QAAQ,EAAE,MAAM,CAAC;IACxB;;;;OAIG;IACI,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC;;;;;OAKG;IACI,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;IAC/C,oDAAoD;IAC7C,OAAO,EAAE,MAAM,CAAC;IACvB,wBAAwB;IACjB,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IACxC,8DAA8D;IACvD,WAAW,EAAE,IAAI,GAAG,IAAI,CAAC;IAChC,uCAAuC;IAChC,SAAS,EAAE,IAAI,CAAC;IACvB,4CAA4C;IACrC,SAAS,EAAE,IAAI,CAAC;IAEvB,gBAAgB;gBACG,IAAI,EAAE,YAAY;CAarC;AAED,kDAAkD;AAClD,MAAM,MAAM,eAAe,GAAG,UAAU,GAAG,OAAO,CAAC;AAEnD,4GAA4G;AAC5G,UAAU,kBAAkB;IAC3B,QAAQ,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IAC/B,KAAK,EAAE;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;CACzB;AAED,kFAAkF;AAClF,MAAM,MAAM,YAAY,CAAC,CAAC,SAAS,SAAS,eAAe,EAAE,GAAG,EAAE,IAAI,YAAY,CAAC,QAAQ,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC;AAEpH;;GAEG;AACH,MAAM,WAAW,WAAW;IAC3B,qDAAqD;IACrD,UAAU,EAAE,cAAc,CAAC;IAC3B,iDAAiD;IACjD,KAAK,EAAE,QAAQ,EAAE,CAAC;CAClB;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,qBAAa,iBAAiB;IAG5B,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,IAAI;IAHtB,gBAAgB;gBAEE,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,UAAU;IAGlC;;OAEG;IACU,OAAO,IAAI,OAAO,CAAC,WAAW,CAAC;IAU5C;;;;OAIG;IACU,IAAI,CAAC,KAAK,CAAC,CAAC,SAAS,SAAS,eAAe,EAAE,GAAG,EAAE,EAChE,IAAI,GAAE,WAAW,GAAG,cAAc,CAAC,eAAe,EAAE,CAAC,CAA0D,GAC7G,OAAO,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;IAatC;;;;;OAKG;IACU,GAAG,CAAC,KAAK,CAAC,CAAC,SAAS,SAAS,eAAe,EAAE,GAAG,EAAE,EAC/D,MAAM,EAAE,MAAM,EACd,IAAI,GAAE,cAAc,CAAC,eAAe,EAAE,CAAC,CAAM,GAC3C,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAW3B;;;;;;;;;OASG;IACU,MAAM,CAClB,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC,GACrC,OAAO,CAAC,QAAQ,CAAC;IAQpB;;;;;;;OAOG;IACU,MAAM,CAClB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE;QACR,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;KACzC,GACC,OAAO,CAAC,QAAQ,CAAC;IAQpB;;;;OAIG;IACU,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIlD;;;;;;;OAOG;IACU,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;CAM3D"}
+{"version":3,"file":"sftp.d.ts","sourceRoot":"","sources":["../../../../src/src/resources/servers/sftp.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,KAAK,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAEnH,OAAO,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AACnC,OAAO,KAAK,EAAmB,YAAY,EAAE,MAAM,YAAY,CAAC;AAEhE;;GAEG;AACH,MAAM,WAAW,cAAc;IAC9B,mDAAmD;IACnD,GAAG,EAAE,MAAM,CAAC;IACZ,yCAAyC;IACzC,IAAI,EAAE,MAAM,CAAC;IACb,uCAAuC;IACvC,IAAI,EAAE,MAAM,CAAC;CACb;AAED;;;;;;;GAOG;AACH,qBAAa,QAAS,SAAQ,gBAAgB;IAC7C,qCAAqC;IACrC,SAAgB,EAAE,EAAE,MAAM,CAAC;IAC3B,uCAAuC;IAChC,IAAI,EAAE,MAAM,CAAC;IACpB,uEAAuE;IAChE,QAAQ,EAAE,MAAM,CAAC;IACxB,qEAAqE;IAC9D,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC;;;;;OAKG;IACI,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;IAC/C,oDAAoD;IAC7C,OAAO,EAAE,MAAM,CAAC;IACvB,iBAAiB;IACV,KAAK,EAAE,IAAI,GAAG,IAAI,GAAG,SAAS,CAAC;IACtC,8DAA8D;IACvD,WAAW,EAAE,IAAI,GAAG,IAAI,CAAC;IAChC,uCAAuC;IAChC,SAAS,EAAE,IAAI,CAAC;IACvB,4CAA4C;IACrC,SAAS,EAAE,IAAI,CAAC;IAEvB,gBAAgB;gBACG,IAAI,EAAE,YAAY;CAarC;AAED,kDAAkD;AAClD,MAAM,MAAM,eAAe,GAAG,OAAO,CAAC;AAEtC,4GAA4G;AAC5G,UAAU,kBAAkB;IAC3B,KAAK,EAAE;QAAE,KAAK,EAAE,IAAI,CAAA;KAAE,CAAC;CACvB;AAED,kFAAkF;AAClF,MAAM,MAAM,YAAY,CAAC,CAAC,SAAS,SAAS,eAAe,EAAE,GAAG,EAAE,IAAI,YAAY,CAAC,QAAQ,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC;AAEpH;;GAEG;AACH,MAAM,WAAW,WAAW;IAC3B,qDAAqD;IACrD,UAAU,EAAE,cAAc,CAAC;IAC3B,iDAAiD;IACjD,KAAK,EAAE,QAAQ,EAAE,CAAC;CAClB;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,qBAAa,iBAAiB;IAG5B,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,IAAI;IAHtB,gBAAgB;gBAEE,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,UAAU;IAGlC;;OAEG;IACU,OAAO,IAAI,OAAO,CAAC,WAAW,CAAC;IAU5C;;;;OAIG;IACU,IAAI,CAAC,KAAK,CAAC,CAAC,SAAS,SAAS,eAAe,EAAE,GAAG,EAAE,EAChE,IAAI,GAAE,WAAW,GAAG,cAAc,CAAC,eAAe,EAAE,CAAC,CAA0D,GAC7G,OAAO,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;IAatC;;;;;OAKG;IACU,GAAG,CAAC,KAAK,CAAC,CAAC,SAAS,SAAS,eAAe,EAAE,GAAG,EAAE,EAC/D,MAAM,EAAE,MAAM,EACd,IAAI,GAAE,cAAc,CAAC,eAAe,EAAE,CAAC,CAAM,GAC3C,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAW3B;;;;;;;;;OASG;IACU,MAAM,CAClB,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC,GACrC,OAAO,CAAC,QAAQ,CAAC;IAQpB;;;;;;;OAOG;IACU,MAAM,CAClB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE;QACR,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;KACzC,GACC,OAAO,CAAC,QAAQ,CAAC;IAQpB;;;;OAIG;IACU,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIlD;;;;;;;OAOG;IACU,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;CAM3D"}

package/script/src/resources/servers/sftp.js

@@ -3,14 +3,14 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.ServerSftpManager = exports.SftpUser = void 0;
 const reactive_js_1 = require("../../reactive.js");
 const types_js_1 = require("../../types.js");
-const members_js_1 = require("../members.js");
+const users_js_1 = require("../users.js");
 /**
  * An SFTP user credential scoped to a specific server with path-level permissions.
  *
  * Retrieved via {@link ServerSftpManager.list} or {@link ServerSftpManager.create}.
  *
- * > **Note:** The `password` field is automatically included in the creation response.
- * > On subsequent fetches it requires `include=password` to be populated.
+ * The plaintext password is returned only when the user is created or its password
+ * is reset. It is never retrievable afterward.
  */
 class SftpUser extends reactive_js_1.ReactiveResource {
     /** The SFTP user's unique NanoID. */
@@ -19,11 +19,7 @@ class SftpUser extends reactive_js_1.ReactiveResource {
     name;
     /** The SFTP login username (typically prefixed with the server ID). */
     username;
-    /**
-     * The plaintext password.
-     *
-     * Automatically included on creation. Requires `include=password` on subsequent fetches.
-     */
+    /** The plaintext password. Present only in the creation response. */
     password;
     /**
      * A map of path glob patterns to the set of permissions granted for that path.
@@ -34,7 +30,7 @@ class SftpUser extends reactive_js_1.ReactiveResource {
     paths;
     /** NanoID of the member who owns this SFTP user. */
     ownerId;
-    /** The owner member. */
+    /** The owner. */
     owner;
     /** When this SFTP user last logged in, or `null` if never. */
     lastLoginAt;
@@ -51,7 +47,7 @@ class SftpUser extends reactive_js_1.ReactiveResource {
         this.password = data.password;
         this.paths = data.paths;
         this.ownerId = (0, types_js_1.toNanoID)(data.owner_id);
-        this.owner = data.owner ? new members_js_1.Member(data.owner) : data.owner;
+        this.owner = data.owner ? new users_js_1.User(data.owner) : data.owner;
         this.lastLoginAt = data.last_login_at ? new Date(data.last_login_at) : null;
         this.createdAt = new Date(data.created_at);
         this.updatedAt = new Date(data.updated_at);
@@ -69,8 +65,8 @@ exports.SftpUser = SftpUser;
  * console.log(`Connect to: ${details.connection.url}`);
  *
  * const user = await server.sftp.create('deploy', {
- *   '/': ['sftp.content.list', 'sftp.content.read'],
- *   '/logs': ['sftp.content.list', 'sftp.content.read', 'sftp.content.delete'],
+ *   '/': ['server.file.list', 'server.file.read'],
+ *   '/logs': ['server.file.list', 'server.file.read', 'server.file.delete'],
  * });
  * console.log(user.password); // Save this!
  * ```
@@ -123,8 +119,8 @@ class ServerSftpManager {
     /**
      * Create a new SFTP user for this server.
      *
-     * The returned {@link SftpUser} includes the `password` field automatically.
-     * On subsequent fetches, request it explicitly with `include=password`.
+     * The returned {@link SftpUser} carries the one-time `password`. It is never
+     * retrievable afterward, so store it now.
      *
      * @param name  Display name for the SFTP user.
      * @param paths A map of path glob patterns to an array of {@link SftpPermission} scopes.

package/script/src/resources/servers/sub-users.d.ts

@@ -0,0 +1,99 @@
+import type { HttpClient } from '../../http.js';
+import type { ISODate, NanoID } from '../../types.js';
+import { User, type UserData } from '../users.js';
+/**
+ * How a sub-user is attached to the resource.
+ *
+ * - `owner`: the resource owner (implicit, read-only, no grants).
+ * - `direct`: granted at this resource's own scope.
+ * - `inherited`: granted at the parent group's scope.
+ */
+export type ServerUserKind = 'owner' | 'direct' | 'inherited';
+/** Raw API shape for a sub-user's scoped grant. @internal */
+interface ServerUserGrantData {
+    name: string;
+    granted_at: ISODate;
+    expires_at: ISODate | null;
+}
+/** Raw API shape for a sub-user entry. @internal */
+export interface ServerUserData {
+    user: UserData;
+    permissions: ServerUserGrantData[];
+    kind: ServerUserKind;
+}
+/** A permission granted to a sub-user at the resource scope. */
+export interface ServerUserGrant {
+    /** The permission name, e.g. `"server.file.read"`. */
+    name: string;
+    /** When the grant was created. */
+    grantedAt: Date;
+    /** When the grant expires, or `null` if it never expires. */
+    expiresAt: Date | null;
+}
+/**
+ * A user granted access to a server (or server group), with their scoped grants.
+ *
+ * Retrieved via {@link ServerUserManager.list} or {@link ServerUserManager.get}.
+ */
+export declare class ServerUser {
+    /** The underlying user. */
+    readonly user: User;
+    /** The permissions granted to this user at the resource scope. */
+    readonly permissions: ServerUserGrant[];
+    /** How this user is attached. See {@link ServerUserKind}. */
+    readonly kind: ServerUserKind;
+    /** @internal */
+    constructor(data: ServerUserData);
+}
+/** Parameters for adding a sub-user, by existing user id or by email (which may invite a new user). */
+export type AddServerUserInput = {
+    userId: NanoID;
+    permissions: string[];
+    expiresAt?: Date | null;
+} | {
+    email: string;
+    permissions: string[];
+    expiresAt?: Date | null;
+};
+/**
+ * Manages the sub-users of a server or server group.
+ *
+ * Access via `server.subUsers`.
+ *
+ * @example
+ * ```ts ignore
+ * await server.subUsers.add({ email: 'teammate@example.com', permissions: ['server.console.read'] });
+ * const subUsers = await server.subUsers.list();
+ * ```
+ */
+export declare class ServerUserManager {
+    private readonly basePath;
+    private readonly http;
+    /** @internal */
+    constructor(basePath: string, http: HttpClient);
+    /** List the resource's sub-users. */
+    list(): Promise<ServerUser[]>;
+    /** Fetch a single sub-user by user ID. */
+    get(userId: NanoID): Promise<ServerUser>;
+    /**
+     * Add a sub-user, or add permissions to an existing one.
+     *
+     * Identify the user by `userId`, or by `email` (an unknown email invites a new user,
+     * which requires `user.manage` and a configured email transport). Existing grants are kept.
+     */
+    add(input: AddServerUserInput): Promise<ServerUser>;
+    /**
+     * Replace a sub-user's permission set. Grants not listed are revoked.
+     *
+     * @param userId  The sub-user's NanoID.
+     * @param payload The exact permission set to grant, and an optional expiry.
+     */
+    update(userId: NanoID, payload: {
+        permissions: string[];
+        expiresAt?: Date | null;
+    }): Promise<ServerUser>;
+    /** Remove a sub-user, revoking all their grants at the resource scope. */
+    remove(userId: NanoID): Promise<void>;
+}
+export {};
+//# sourceMappingURL=sub-users.d.ts.map

package/script/src/resources/servers/sub-users.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sub-users.d.ts","sourceRoot":"","sources":["../../../../src/src/resources/servers/sub-users.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AACtD,OAAO,EAAE,IAAI,EAAE,KAAK,QAAQ,EAAE,MAAM,aAAa,CAAC;AAElD;;;;;;GAMG;AACH,MAAM,MAAM,cAAc,GAAG,OAAO,GAAG,QAAQ,GAAG,WAAW,CAAC;AAE9D,6DAA6D;AAC7D,UAAU,mBAAmB;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,OAAO,CAAC;IACpB,UAAU,EAAE,OAAO,GAAG,IAAI,CAAC;CAC3B;AAED,oDAAoD;AACpD,MAAM,WAAW,cAAc;IAC9B,IAAI,EAAE,QAAQ,CAAC;IACf,WAAW,EAAE,mBAAmB,EAAE,CAAC;IACnC,IAAI,EAAE,cAAc,CAAC;CACrB;AAED,gEAAgE;AAChE,MAAM,WAAW,eAAe;IAC/B,sDAAsD;IACtD,IAAI,EAAE,MAAM,CAAC;IACb,kCAAkC;IAClC,SAAS,EAAE,IAAI,CAAC;IAChB,6DAA6D;IAC7D,SAAS,EAAE,IAAI,GAAG,IAAI,CAAC;CACvB;AAED;;;;GAIG;AACH,qBAAa,UAAU;IACtB,2BAA2B;IAC3B,SAAgB,IAAI,EAAE,IAAI,CAAC;IAC3B,kEAAkE;IAClE,SAAgB,WAAW,EAAE,eAAe,EAAE,CAAC;IAC/C,6DAA6D;IAC7D,SAAgB,IAAI,EAAE,cAAc,CAAC;IAErC,gBAAgB;gBACG,IAAI,EAAE,cAAc;CASvC;AAED,uGAAuG;AACvG,MAAM,MAAM,kBAAkB,GAC3B;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,EAAE,CAAC;IAAC,SAAS,CAAC,EAAE,IAAI,GAAG,IAAI,CAAA;CAAE,GAClE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,EAAE,CAAC;IAAC,SAAS,CAAC,EAAE,IAAI,GAAG,IAAI,CAAA;CAAE,CAAC;AAOrE;;;;;;;;;;GAUG;AACH,qBAAa,iBAAiB;IAG5B,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,IAAI;IAHtB,gBAAgB;gBAEE,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,UAAU;IAGlC,qCAAqC;IACxB,IAAI,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;IAK1C,0CAA0C;IAC7B,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAKrD;;;;;OAKG;IACU,GAAG,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,UAAU,CAAC;IAWhE;;;;;OAKG;IACU,MAAM,CAClB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE;QAAE,WAAW,EAAE,MAAM,EAAE,CAAC;QAAC,SAAS,CAAC,EAAE,IAAI,GAAG,IAAI,CAAA;KAAE,GACzD,OAAO,CAAC,UAAU,CAAC;IAQtB,0EAA0E;IAC7D,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAGlD"}

package/script/src/resources/servers/sub-users.js

@@ -0,0 +1,99 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ServerUserManager = exports.ServerUser = void 0;
+const users_js_1 = require("../users.js");
+/**
+ * A user granted access to a server (or server group), with their scoped grants.
+ *
+ * Retrieved via {@link ServerUserManager.list} or {@link ServerUserManager.get}.
+ */
+class ServerUser {
+    /** The underlying user. */
+    user;
+    /** The permissions granted to this user at the resource scope. */
+    permissions;
+    /** How this user is attached. See {@link ServerUserKind}. */
+    kind;
+    /** @internal */
+    constructor(data) {
+        this.user = new users_js_1.User(data.user);
+        this.permissions = data.permissions.map((g) => ({
+            name: g.name,
+            grantedAt: new Date(g.granted_at),
+            expiresAt: g.expires_at ? new Date(g.expires_at) : null,
+        }));
+        this.kind = data.kind;
+    }
+}
+exports.ServerUser = ServerUser;
+function expiresAtBody(expiresAt) {
+    if (expiresAt === undefined)
+        return undefined;
+    return expiresAt === null ? null : expiresAt.toISOString();
+}
+/**
+ * Manages the sub-users of a server or server group.
+ *
+ * Access via `server.subUsers`.
+ *
+ * @example
+ * ```ts ignore
+ * await server.subUsers.add({ email: 'teammate@example.com', permissions: ['server.console.read'] });
+ * const subUsers = await server.subUsers.list();
+ * ```
+ */
+class ServerUserManager {
+    basePath;
+    http;
+    /** @internal */
+    constructor(basePath, http) {
+        this.basePath = basePath;
+        this.http = http;
+    }
+    /** List the resource's sub-users. */
+    async list() {
+        const data = await this.http.get(`${this.basePath}/users`);
+        return data.map((d) => new ServerUser(d));
+    }
+    /** Fetch a single sub-user by user ID. */
+    async get(userId) {
+        const data = await this.http.get(`${this.basePath}/users/${userId}`);
+        return new ServerUser(data);
+    }
+    /**
+     * Add a sub-user, or add permissions to an existing one.
+     *
+     * Identify the user by `userId`, or by `email` (an unknown email invites a new user,
+     * which requires `user.manage` and a configured email transport). Existing grants are kept.
+     */
+    async add(input) {
+        const body = {
+            permissions: input.permissions,
+            expires_at: expiresAtBody(input.expiresAt),
+        };
+        if ('userId' in input)
+            body['user_id'] = input.userId;
+        else
+            body['email'] = input.email;
+        const data = await this.http.post(`${this.basePath}/users`, body);
+        return new ServerUser(data);
+    }
+    /**
+     * Replace a sub-user's permission set. Grants not listed are revoked.
+     *
+     * @param userId  The sub-user's NanoID.
+     * @param payload The exact permission set to grant, and an optional expiry.
+     */
+    async update(userId, payload) {
+        const data = await this.http.patch(`${this.basePath}/users/${userId}`, {
+            permissions: payload.permissions,
+            expires_at: expiresAtBody(payload.expiresAt),
+        });
+        return new ServerUser(data);
+    }
+    /** Remove a sub-user, revoking all their grants at the resource scope. */
+    async remove(userId) {
+        await this.http.delete(`${this.basePath}/users/${userId}`);
+    }
+}
+exports.ServerUserManager = ServerUserManager;

package/script/src/resources/servers/types.d.ts

@@ -1,6 +1,6 @@
 import type { ISODate, NanoID, PowerState, ServerRestrictedState, SftpPermission } from '../../types.js';
 import type { EggData } from '../eggs.js';
-import type { MemberData } from '../members.js';
+import type { UserData } from '../users.js';
 import type { ServerGroupData } from '../server-groups.js';
 /** A single egg environment variable and its value for a server. @internal */
 export interface StartupVariableData {
@@ -15,15 +15,15 @@ export interface StartupVariableData {
 export interface ServerStatusData {
     state: PowerState;
     utilization?: {
-        memory_bytes: number;
-        memory_limit_bytes: number;
+        ram_bytes: number;
+        ram_limit_bytes: number;
         cpu_absolute: number;
         network: {
             rx_bytes: number;
             tx_bytes: number;
         };
-        uptime_ms: number;
-        disk_bytes: number;
+        uptime: number;
+        storage_bytes: number;
     } | null;
 }
 /** Raw API shape for server build configuration. @internal */
@@ -46,7 +46,7 @@ export interface ServerBuildData {
 export interface ServerAllocationPortData {
     id: string;
     description?: string | null;
-    port_id?: string;
+    meta_id?: string;
     meta?: {
         id: string;
         ip: string;
@@ -73,6 +73,21 @@ export interface ServerProfileData {
     name: string;
     description?: string | null;
     notes?: string | null;
+    /** Requires `server.egg.read`. */
+    egg_id?: string;
+    egg?: EggData;
+    egg_image_id?: string;
+    egg_image?: {
+        id: string;
+        image: string;
+    };
+    egg_image_override?: string | null;
+    skip_install_scripts?: boolean;
+    /** Requires `server.startup.read`. Populated with `?include=startup`. */
+    startup?: {
+        command: string;
+        variables: Record<string, StartupVariableData>;
+    } | null;
     folder?: string | null;
     is_active: boolean;
     created_at: ISODate;
@@ -80,7 +95,7 @@ export interface ServerProfileData {
 }
 /** Raw API shape for an activity log job log entry. @internal */
 export interface ActivityJobLogData {
-    type: string;
+    event: string;
     metadata: Record<string, unknown>;
     created_at: ISODate;
 }
@@ -99,8 +114,14 @@ export interface ActivityLogData {
     event: string;
     server_id?: string | null;
     node_id?: string | null;
+    group_id?: string | null;
+    host_id?: string | null;
     issuer_id?: string | null;
-    issuer?: MemberData | null;
+    issuer?: UserData | null;
+    /** The user an action was performed on, when applicable. */
+    subject_id?: string | null;
+    subject?: UserData | null;
+    /** Requires `application.activities.ip.read`. */
     ip?: string | null;
     metadata: Record<string, unknown>;
     job_id?: string | null;
@@ -116,7 +137,7 @@ export interface SftpUserData {
     password?: string;
     paths: Record<string, SftpPermission[]>;
     owner_id: string;
-    owner?: MemberData | null;
+    owner?: UserData | null;
     last_login_at: ISODate | null;
     created_at: ISODate;
     updated_at: ISODate;
@@ -157,20 +178,8 @@ export interface ServerData {
     restricted_state: ServerRestrictedState;
     group_id: string;
     group?: ServerGroupData;
-    egg_id: string;
-    egg?: EggData;
-    egg_image_id?: string;
-    egg_image?: {
-        id: string;
-        image: string;
-    };
-    egg_image_override?: string | null;
     status?: ServerStatusData | null;
     build?: ServerBuildData | null;
-    startup?: {
-        command: string;
-        variables: Record<string, StartupVariableData>;
-    } | null;
     allocations?: ServerAllocationsData | null;
     profiles?: ServerProfileData[] | null;
     created_at: ISODate;
@@ -189,13 +198,6 @@ export interface UpdateServerPayload {
         ip: string;
         port: number;
     };
-    /** Update startup command and/or environment variables. */
-    startup?: {
-        /** New startup command override, or `null` to reset to the egg default. */
-        command?: string | null;
-        /** Map of env variable keys to new values (or `null` to reset to default). */
-        variables?: Record<string, string | null>;
-    };
 }
 export type { ISODate, NanoID, PowerState, ServerRestrictedState, SftpPermission };
 //# sourceMappingURL=types.d.ts.map

package/script/src/resources/servers/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/src/resources/servers/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,qBAAqB,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AACzG,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAE3D,8EAA8E;AAC9E,MAAM,WAAW,mBAAmB;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,uCAAuC;IACvC,KAAK,EAAE,MAAM,CAAC;CACd;AAED,2EAA2E;AAC3E,MAAM,WAAW,gBAAgB;IAChC,KAAK,EAAE,UAAU,CAAC;IAClB,WAAW,CAAC,EAAE;QACb,YAAY,EAAE,MAAM,CAAC;QACrB,kBAAkB,EAAE,MAAM,CAAC;QAC3B,YAAY,EAAE,MAAM,CAAC;QACrB,OAAO,EAAE;YACR,QAAQ,EAAE,MAAM,CAAC;YACjB,QAAQ,EAAE,MAAM,CAAC;SACjB,CAAC;QACF,SAAS,EAAE,MAAM,CAAC;QAClB,UAAU,EAAE,MAAM,CAAC;KACnB,GAAG,IAAI,CAAC;CACT;AAED,8DAA8D;AAC9D,MAAM,WAAW,eAAe;IAC/B,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,MAAM,CAAC,EAAE;QACR,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC5B,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACvB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACxB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC3B,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC3B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACzB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KACvB,GAAG,IAAI,CAAC;CACT;AAED,mEAAmE;AACnE,MAAM,WAAW,wBAAwB;IACxC,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE;QACN,EAAE,EAAE,MAAM,CAAC;QACX,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,MAAM,CAAC;QACb,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;QAC3B,SAAS,CAAC,EAAE,OAAO,CAAC;QACpB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACtB,UAAU,EAAE,OAAO,CAAC;QACpB,UAAU,EAAE,OAAO,CAAC;KACpB,GAAG,IAAI,CAAC;IACT,UAAU,EAAE,OAAO,CAAC;IACpB,UAAU,EAAE,OAAO,CAAC;IACpB,UAAU,EAAE,OAAO,CAAC;CACpB;AAED,8DAA8D;AAC9D,MAAM,WAAW,qBAAqB;IACrC,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,KAAK,EAAE,wBAAwB,EAAE,CAAC;CAClC;AAED,oDAAoD;AACpD,MAAM,WAAW,iBAAiB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,SAAS,EAAE,OAAO,CAAC;IACnB,UAAU,EAAE,OAAO,CAAC;IACpB,UAAU,EAAE,OAAO,CAAC;CACpB;AAED,iEAAiE;AACjE,MAAM,WAAW,kBAAkB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,UAAU,EAAE,OAAO,CAAC;CACpB;AAED,mDAAmD;AACnD,MAAM,WAAW,eAAe;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,aAAa,GAAG,WAAW,GAAG,QAAQ,CAAC;IAC/C,IAAI,EAAE,kBAAkB,EAAE,CAAC;IAC3B,YAAY,EAAE,OAAO,GAAG,IAAI,CAAC;IAC7B,UAAU,EAAE,OAAO,CAAC;IACpB,UAAU,EAAE,OAAO,CAAC;CACpB;AAED,yDAAyD;AACzD,MAAM,WAAW,eAAe;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,MAAM,CAAC,EAAE,UAAU,GAAG,IAAI,CAAC;IAC3B,EAAE,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,GAAG,CAAC,EAAE,eAAe,GAAG,IAAI,CAAC;IAC7B,UAAU,EAAE,OAAO,CAAC;CACpB;AAED,gDAAgD;AAChD,MAAM,WAAW,YAAY;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,2CAA2C;IAC3C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;IACxC,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,UAAU,GAAG,IAAI,CAAC;IAC1B,aAAa,EAAE,OAAO,GAAG,IAAI,CAAC;IAC9B,UAAU,EAAE,OAAO,CAAC;IACpB,UAAU,EAAE,OAAO,CAAC;CACpB;AAED,qEAAqE;AACrE,MAAM,WAAW,eAAe;IAC/B,UAAU,EAAE;QACX,GAAG,EAAE,MAAM,CAAC;QACZ,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;KACb,CAAC;IACF,KAAK,EAAE,YAAY,EAAE,CAAC;CACtB;AAED,mFAAmF;AACnF,MAAM,WAAW,aAAa;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,OAAO,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,GAAG,WAAW,CAAC;IAC3B,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;CACb;AAED;;;;GAIG;AACH,MAAM,MAAM,oBAAoB,GAAG,aAAa,EAAE,CAAC;AAEnD,4CAA4C;AAC5C,MAAM,WAAW,UAAU;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,gBAAgB,EAAE,qBAAqB,CAAC;IACxC,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,eAAe,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAC1C,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,MAAM,CAAC,EAAE,gBAAgB,GAAG,IAAI,CAAC;IACjC,KAAK,CAAC,EAAE,eAAe,GAAG,IAAI,CAAC;IAC/B,OAAO,CAAC,EAAE;QACT,OAAO,EAAE,MAAM,CAAC;QAChB,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;KAC/C,GAAG,IAAI,CAAC;IACT,WAAW,CAAC,EAAE,qBAAqB,GAAG,IAAI,CAAC;IAC3C,QAAQ,CAAC,EAAE,iBAAiB,EAAE,GAAG,IAAI,CAAC;IACtC,UAAU,EAAE,OAAO,CAAC;IACpB,UAAU,EAAE,OAAO,CAAC;CACpB;AAED,wEAAwE;AACxE,MAAM,WAAW,mBAAmB;IACnC,wBAAwB;IACxB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,2CAA2C;IAC3C,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,8CAA8C;IAC9C,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,4CAA4C;IAC5C,iBAAiB,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACjD,2DAA2D;IAC3D,OAAO,CAAC,EAAE;QACT,2EAA2E;QAC3E,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACxB,8EAA8E;QAC9E,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC,CAAC;KAC1C,CAAC;CACF;AAED,YAAY,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,qBAAqB,EAAE,cAAc,EAAE,CAAC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/src/resources/servers/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,qBAAqB,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AACzG,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAE3D,8EAA8E;AAC9E,MAAM,WAAW,mBAAmB;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,uCAAuC;IACvC,KAAK,EAAE,MAAM,CAAC;CACd;AAED,2EAA2E;AAC3E,MAAM,WAAW,gBAAgB;IAChC,KAAK,EAAE,UAAU,CAAC;IAClB,WAAW,CAAC,EAAE;QACb,SAAS,EAAE,MAAM,CAAC;QAClB,eAAe,EAAE,MAAM,CAAC;QACxB,YAAY,EAAE,MAAM,CAAC;QACrB,OAAO,EAAE;YACR,QAAQ,EAAE,MAAM,CAAC;YACjB,QAAQ,EAAE,MAAM,CAAC;SACjB,CAAC;QACF,MAAM,EAAE,MAAM,CAAC;QACf,aAAa,EAAE,MAAM,CAAC;KACtB,GAAG,IAAI,CAAC;CACT;AAED,8DAA8D;AAC9D,MAAM,WAAW,eAAe;IAC/B,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,MAAM,CAAC,EAAE;QACR,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC5B,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACvB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACxB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC3B,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC3B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACzB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KACvB,GAAG,IAAI,CAAC;CACT;AAED,mEAAmE;AACnE,MAAM,WAAW,wBAAwB;IACxC,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE;QACN,EAAE,EAAE,MAAM,CAAC;QACX,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,MAAM,CAAC;QACb,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;QAC3B,SAAS,CAAC,EAAE,OAAO,CAAC;QACpB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACtB,UAAU,EAAE,OAAO,CAAC;QACpB,UAAU,EAAE,OAAO,CAAC;KACpB,GAAG,IAAI,CAAC;IACT,UAAU,EAAE,OAAO,CAAC;IACpB,UAAU,EAAE,OAAO,CAAC;IACpB,UAAU,EAAE,OAAO,CAAC;CACpB;AAED,8DAA8D;AAC9D,MAAM,WAAW,qBAAqB;IACrC,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,KAAK,EAAE,wBAAwB,EAAE,CAAC;CAClC;AAED,oDAAoD;AACpD,MAAM,WAAW,iBAAiB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,kCAAkC;IAClC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAC1C,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,yEAAyE;IACzE,OAAO,CAAC,EAAE;QACT,OAAO,EAAE,MAAM,CAAC;QAChB,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;KAC/C,GAAG,IAAI,CAAC;IACT,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,SAAS,EAAE,OAAO,CAAC;IACnB,UAAU,EAAE,OAAO,CAAC;IACpB,UAAU,EAAE,OAAO,CAAC;CACpB;AAED,iEAAiE;AACjE,MAAM,WAAW,kBAAkB;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,UAAU,EAAE,OAAO,CAAC;CACpB;AAED,mDAAmD;AACnD,MAAM,WAAW,eAAe;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,aAAa,GAAG,WAAW,GAAG,QAAQ,CAAC;IAC/C,IAAI,EAAE,kBAAkB,EAAE,CAAC;IAC3B,YAAY,EAAE,OAAO,GAAG,IAAI,CAAC;IAC7B,UAAU,EAAE,OAAO,CAAC;IACpB,UAAU,EAAE,OAAO,CAAC;CACpB;AAED,yDAAyD;AACzD,MAAM,WAAW,eAAe;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,MAAM,CAAC,EAAE,QAAQ,GAAG,IAAI,CAAC;IACzB,4DAA4D;IAC5D,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,OAAO,CAAC,EAAE,QAAQ,GAAG,IAAI,CAAC;IAC1B,iDAAiD;IACjD,EAAE,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,GAAG,CAAC,EAAE,eAAe,GAAG,IAAI,CAAC;IAC7B,UAAU,EAAE,OAAO,CAAC;CACpB;AAED,gDAAgD;AAChD,MAAM,WAAW,YAAY;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,2CAA2C;IAC3C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;IACxC,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,QAAQ,GAAG,IAAI,CAAC;IACxB,aAAa,EAAE,OAAO,GAAG,IAAI,CAAC;IAC9B,UAAU,EAAE,OAAO,CAAC;IACpB,UAAU,EAAE,OAAO,CAAC;CACpB;AAED,qEAAqE;AACrE,MAAM,WAAW,eAAe;IAC/B,UAAU,EAAE;QACX,GAAG,EAAE,MAAM,CAAC;QACZ,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;KACb,CAAC;IACF,KAAK,EAAE,YAAY,EAAE,CAAC;CACtB;AAED,mFAAmF;AACnF,MAAM,WAAW,aAAa;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,OAAO,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,GAAG,WAAW,CAAC;IAC3B,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;CACb;AAED;;;;GAIG;AACH,MAAM,MAAM,oBAAoB,GAAG,aAAa,EAAE,CAAC;AAEnD,4CAA4C;AAC5C,MAAM,WAAW,UAAU;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,gBAAgB,EAAE,qBAAqB,CAAC;IACxC,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,eAAe,CAAC;IACxB,MAAM,CAAC,EAAE,gBAAgB,GAAG,IAAI,CAAC;IACjC,KAAK,CAAC,EAAE,eAAe,GAAG,IAAI,CAAC;IAC/B,WAAW,CAAC,EAAE,qBAAqB,GAAG,IAAI,CAAC;IAC3C,QAAQ,CAAC,EAAE,iBAAiB,EAAE,GAAG,IAAI,CAAC;IACtC,UAAU,EAAE,OAAO,CAAC;IACpB,UAAU,EAAE,OAAO,CAAC;CACpB;AAED,wEAAwE;AACxE,MAAM,WAAW,mBAAmB;IACnC,wBAAwB;IACxB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,2CAA2C;IAC3C,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,8CAA8C;IAC9C,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,4CAA4C;IAC5C,iBAAiB,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;CACjD;AAED,YAAY,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,qBAAqB,EAAE,cAAc,EAAE,CAAC"}

package/script/src/resources/systems.d.ts

@@ -0,0 +1,124 @@
+import type { HttpClient } from '../http.js';
+import { ResourceNamespace } from '../namespace.js';
+import { ReactiveResource } from '../reactive.js';
+import { type ISODate, type NanoID, type Paginated } from '../types.js';
+import { ApiKey, type CreateApiKeyPayload } from './api-keys.js';
+/** Raw API shape for a system. @internal */
+export interface SystemData {
+    id: string;
+    name: string;
+    description: string | null;
+    permissions?: string[];
+    created_at: ISODate;
+    updated_at: ISODate;
+}
+/**
+ * A non-user identity (bootstrap or automation) that owns API keys.
+ *
+ * API keys owned by a system inherit the system's permissions.
+ *
+ * Retrieved via {@link SystemsNamespace.get} or {@link SystemsNamespace.list}.
+ */
+export declare class System extends ReactiveResource {
+    /** The system's unique NanoID. */
+    readonly id: NanoID;
+    /** Display name. */
+    name: string;
+    /** Optional description. */
+    description: string | null;
+    /** The system's permission scopes. Requires `?include=permissions`. */
+    permissions: string[] | undefined;
+    /** When this system was created. */
+    createdAt: Date;
+    /** When this system was last updated. */
+    updatedAt: Date;
+    /** @internal */
+    constructor(data: SystemData);
+    /** Apply raw API data to this system instance, updating all mutable fields. */
+    applyData(data: SystemData): void;
+}
+/** Valid include keys for system endpoints. */
+export type SystemInclude = 'permissions';
+/** Fields accepted when creating a system. */
+export interface CreateSystemPayload {
+    name: string;
+    description?: string;
+}
+/** Fields accepted when updating a system. All optional. */
+export interface UpdateSystemPayload {
+    name?: string;
+    description?: string;
+}
+/** The one-time result of creating a system API key. */
+export interface SystemApiKeyResult {
+    name: string;
+    description: string | null;
+    /** The one-time bearer token. Returned only here. */
+    token: string;
+}
+/** Typed events emitted by {@link SystemsNamespace}. */
+export interface SystemEvents {
+    created: System;
+    updated: System;
+    deleted: NanoID;
+}
+/**
+ * Manages the API keys owned by a specific system.
+ *
+ * Access via `api.systems.keys(systemId)`.
+ */
+export declare class SystemKeysManager {
+    private readonly systemId;
+    private readonly http;
+    /** @internal */
+    constructor(systemId: NanoID, http: HttpClient);
+    /** List the system's active API keys. */
+    list(): Promise<ApiKey[]>;
+    /**
+     * Create an API key owned by the system.
+     *
+     * The returned `token` is the only time the bearer token is available. Store it securely.
+     */
+    create(payload: CreateApiKeyPayload): Promise<SystemApiKeyResult>;
+    /** Revoke a system API key. */
+    revoke(keyId: NanoID): Promise<void>;
+}
+/**
+ * Namespace for system (non-user identity) management.
+ *
+ * Access via `api.systems`.
+ *
+ * @example
+ * ```ts ignore
+ * const system = await api.systems.create({ name: 'CI deploy' });
+ * const { token } = await api.systems.keys(system.id).create({ name: 'pipeline', permissions: ['server.read'] });
+ * ```
+ */
+export declare class SystemsNamespace extends ResourceNamespace<System, SystemEvents> {
+    /** @internal */
+    constructor(http: HttpClient);
+    /**
+     * Fetch a paginated list of systems.
+     *
+     * @param opts Pagination, search, and include options.
+     */
+    list(opts?: {
+        page?: number;
+        perPage?: number;
+        search?: string;
+        include?: SystemInclude[];
+    }): Promise<Paginated<System>>;
+    /** Fetch a single system by ID. */
+    get(id: NanoID, opts?: {
+        include?: SystemInclude[];
+    }): Promise<System>;
+    /** Create a new system. */
+    create(payload: CreateSystemPayload): Promise<System>;
+    /** Update a system's name or description. */
+    update(id: NanoID, payload: UpdateSystemPayload): Promise<System>;
+    /** Delete a system. Fails if it still owns active API keys. */
+    delete(id: NanoID): Promise<void>;
+    /** Manage the API keys owned by a system. */
+    keys(systemId: NanoID): SystemKeysManager;
+}
+//# sourceMappingURL=systems.d.ts.map

package/script/src/resources/systems.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"systems.d.ts","sourceRoot":"","sources":["../../../src/src/resources/systems.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EAAE,KAAK,OAAO,EAAgB,KAAK,MAAM,EAAE,KAAK,SAAS,EAAY,MAAM,aAAa,CAAC;AAChG,OAAO,EAAE,MAAM,EAAmB,KAAK,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAElF,4CAA4C;AAC5C,MAAM,WAAW,UAAU;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,UAAU,EAAE,OAAO,CAAC;IACpB,UAAU,EAAE,OAAO,CAAC;CACpB;AAED;;;;;;GAMG;AACH,qBAAa,MAAO,SAAQ,gBAAgB;IAC3C,kCAAkC;IAClC,SAAgB,EAAE,EAAE,MAAM,CAAC;IAC3B,oBAAoB;IACb,IAAI,EAAG,MAAM,CAAC;IACrB,4BAA4B;IACrB,WAAW,EAAG,MAAM,GAAG,IAAI,CAAC;IACnC,uEAAuE;IAChE,WAAW,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;IACzC,oCAAoC;IAC7B,SAAS,EAAG,IAAI,CAAC;IACxB,yCAAyC;IAClC,SAAS,EAAG,IAAI,CAAC;IAExB,gBAAgB;gBACG,IAAI,EAAE,UAAU;IAMnC,+EAA+E;IACxE,SAAS,CAAC,IAAI,EAAE,UAAU,GAAG,IAAI;CAQxC;AAED,+CAA+C;AAC/C,MAAM,MAAM,aAAa,GAAG,aAAa,CAAC;AAE1C,8CAA8C;AAC9C,MAAM,WAAW,mBAAmB;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,4DAA4D;AAC5D,MAAM,WAAW,mBAAmB;IACnC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,wDAAwD;AACxD,MAAM,WAAW,kBAAkB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,qDAAqD;IACrD,KAAK,EAAE,MAAM,CAAC;CACd;AAED,wDAAwD;AACxD,MAAM,WAAW,YAAY;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;CAChB;AAED;;;;GAIG;AACH,qBAAa,iBAAiB;IAG5B,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,IAAI;IAHtB,gBAAgB;gBAEE,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,UAAU;IAGlC,yCAAyC;IAC5B,IAAI,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;IAKtC;;;;OAIG;IACU,MAAM,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAQ9E,+BAA+B;IAClB,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAGjD;AAED;;;;;;;;;;GAUG;AACH,qBAAa,gBAAiB,SAAQ,iBAAiB,CAAC,MAAM,EAAE,YAAY,CAAC;IAC5E,gBAAgB;gBACG,IAAI,EAAE,UAAU;IAInC;;;;OAIG;IACU,IAAI,CAChB,IAAI,GAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,aAAa,EAAE,CAAA;KAAO,GACxF,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAW7B,mCAAmC;IACtB,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,GAAE;QAAE,OAAO,CAAC,EAAE,aAAa,EAAE,CAAA;KAAO,GAAG,OAAO,CAAC,MAAM,CAAC;IAQvF,2BAA2B;IACd,MAAM,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,MAAM,CAAC;IAQlE,6CAA6C;IAChC,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,MAAM,CAAC;IAQ9E,+DAA+D;IAClD,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAM9C,6CAA6C;IACtC,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,iBAAiB;CAGhD"}