@meshagent/meshagent 0.44.12 → 0.45.0

package/dist/node/meshagent-client.d.ts

@@ -1,9 +1,27 @@
 import { ApiScope } from "./participant-token.js";
-export type ProjectRole = "member" | "admin" | "developer";
-export interface RoomShare {
+export type ProjectRole = "member" | "admin" | "developer" | "room_creator" | "room_inventory" | "room_manager" | "session_inventory" | "agent_creator" | "agent_inventory" | "agent_manager" | "repository_creator" | "repository_inventory" | "repository_manager" | "feed_creator" | "feed_inventory" | "feed_manager" | "oauth_client_creator" | "oauth_client_inventory" | "oauth_client_manager" | "api_key_creator" | "api_key_inventory" | "api_key_manager" | "service_creator" | "service_inventory" | "service_manager" | "service_account_creator" | "service_account_inventory" | "service_account_manager" | "participant_token_creator" | "mailbox_creator" | "mailbox_inventory" | "mailbox_manager" | "route_creator" | "route_inventory" | "route_manager" | "scheduled_task_creator" | "scheduled_task_inventory" | "scheduled_task_manager" | "feed_subscription_creator" | "feed_subscription_inventory" | "feed_subscription_manager" | "llm_logger_creator" | "llm_logger_inventory" | "llm_logger_manager" | "llm_proxy_user" | "usage_reporter" | "billing_manager" | "group_manager";
+export type ResourceRole = "viewer" | "operator" | "developer" | "admin";
+export type FeedRole = "reader" | "subscriber" | "publisher" | "manager";
+export type SecretRole = "use_proxy";
+export type AccessRole = ProjectRole | ResourceRole | FeedRole | SecretRole | "list";
+export type AccessSubjectType = "user" | "group" | "agent" | "service_account" | "userset";
+export type AccessResourceType = "project" | "room" | "agent" | "group" | "repository" | "feed" | "secret";
+export interface AccessSubject {
+    type: AccessSubjectType;
     id: string;
-    projectId: string;
-    settings: Record<string, unknown>;
+    name?: string | null;
+    firstName?: string | null;
+    lastName?: string | null;
+    email?: string | null;
+    objectType?: "project" | null;
+    relation?: "member" | "developer" | "agent" | null;
+}
+export interface AccessResource {
+    type: AccessResourceType;
+    id: string;
+    name?: string | null;
+    metadata?: Record<string, unknown> | null;
+    annotations?: Record<string, string> | null;
 }
 export interface RoomConnectionInfo {
     jwt: string;
@@ -40,55 +58,176 @@ export interface RoomInfo {
     metadata: Record<string, unknown>;
     annotations: Record<string, string>;
 }
+export interface GroupInfo {
+    id: string;
+    name: string;
+    metadata: Record<string, unknown>;
+    annotations: Record<string, string>;
+}
 export interface ProjectRoomGrant {
+    resource: AccessResource;
+    subject: AccessSubject;
+    directRoles: AccessRole[];
     room: RoomInfo;
     userId: string;
-    permissions: ApiScope;
 }
-export interface ProjectRoomGrantCount {
-    room: RoomInfo;
-    count: number;
+export interface AccessTestResult {
+    allowed: boolean;
+    resource?: AccessResource;
+    subject?: AccessSubject;
+    relation?: string;
 }
-export interface ProjectUserGrantCount {
-    userId: string;
-    count: number;
+export interface EffectiveAccess {
+    resource: AccessResource;
+    subject: AccessSubject;
+    effectiveRoles: string[];
+    capabilities: Record<string, boolean>;
+}
+export interface AccessBindingsPage {
+    accessGrants: ProjectRoomGrant[];
+}
+export interface ResourcePolicyPage {
+    resource: AccessResource;
+    accessGrants: ProjectRoomGrant[];
+    continuationToken?: string | null;
+}
+export interface ProjectMember {
+    id: string;
+    email: string;
     firstName?: string | null;
     lastName?: string | null;
-    email: string;
+    directRoles: ProjectRole[];
 }
 export interface ProjectMembersPage {
-    users: Record<string, unknown>[];
-    total: number;
+    users: ProjectMember[];
+    continuationToken?: string | null;
 }
-export interface ProjectUserGrantCountsPage {
-    users: ProjectUserGrantCount[];
-    total: number;
+export interface GroupsPage {
+    groups: GroupInfo[];
+    continuationToken?: string | null;
 }
-export interface EnvironmentVariable {
+export interface ServiceAccountInfo {
+    id: string;
+    project_id?: string;
+    key?: string;
     name: string;
-    value: string;
+    display_name?: string | null;
+    description?: string | null;
+    metadata?: Record<string, unknown>;
+    annotations?: Record<string, string>;
+    created_at?: string | null;
+    updated_at?: string | null;
 }
-export interface RoomStorageMountSpec {
-    path: string;
-    subpath?: string | null;
-    read_only?: boolean;
+export interface ServiceAccountsPage {
+    service_accounts: ServiceAccountInfo[];
+    continuation_token?: string | null;
 }
-export interface ProjectStorageMountSpec {
-    path: string;
-    subpath?: string | null;
-    read_only?: boolean;
+export interface ApiKeyInfo {
+    id: string;
+    name: string;
+    description?: string | null;
+    project_id?: string | null;
+    service_account_id?: string | null;
+    created_at?: string | null;
+    last_used_at?: string | null;
+    value?: string | null;
 }
-export interface ImageStorageMountSpec {
-    path: string;
-    subpath?: string | null;
-    read_only?: boolean;
-    image: string;
+export interface ApiKeysPage {
+    keys: ApiKeyInfo[];
+}
+export interface ApiKeysRevocationResult {
+    revoked: string[];
+}
+export interface Secret {
+    id: string;
+    project_id: string;
+    owner_user_id?: string | null;
+    owner_service_account_id?: string | null;
+    created_by_user_id?: string | null;
+    created_by_service_account_id?: string | null;
+    type: string;
+    name: string;
+    http_only: boolean;
+    metadata: Record<string, unknown>;
+    annotations: Record<string, unknown>;
+    current_version_id?: string | null;
+    value_base64?: string | null;
+    created_at: string;
+    updated_at: string;
+}
+export interface SecretVersion {
+    id: string;
+    secret_id: string;
+    version: number;
+    encryption_key_id: string;
+    value_sha256?: string | null;
+    created_by_user_id?: string | null;
+    created_by_service_account_id?: string | null;
+    created_at: string;
+}
+export interface SecretsPage {
+    secrets: Secret[];
+    continuation_token?: string | null;
+}
+export interface SecretVersionsPage {
+    versions: SecretVersion[];
+}
+export interface SecretProxyAccessGrant {
+    subject: AccessSubject;
+    roles: SecretRole[];
+}
+export interface SecretProxyAccessGrantsPage {
+    access_grants: SecretProxyAccessGrant[];
+    continuation_token?: string | null;
+}
+export interface SecretInput {
+    projectId?: string;
+    name?: string;
+    type?: string;
+    httpOnly?: boolean;
+    metadata?: Record<string, unknown>;
+    annotations?: Record<string, unknown>;
+}
+export interface SecretSearchInput {
+    filter?: string;
+    name?: string;
+    type?: string;
+    httpOnly?: boolean;
+    metadata?: Record<string, unknown>;
+    annotations?: Record<string, unknown>;
+    pageSize?: number;
+    continuationToken?: string;
+}
+export interface SecretVersionInput {
+    value: Uint8Array | ArrayBuffer;
+    setCurrent?: boolean;
+}
+export interface GroupMember {
+    subject: AccessSubject;
+    directRoles: Array<"member" | "manager">;
+}
+export interface GroupMembersPage {
+    members: GroupMember[];
+    continuationToken?: string | null;
+}
+export interface SecretValue {
+    id: string;
 }
-export interface FileStorageMountSpec {
+export interface TokenValue {
+    identity: string;
+    api?: ApiScope | null;
+    role?: "user" | "agent" | "tool" | null;
+}
+export interface EnvironmentVariable {
+    name: string;
+    value?: string | null;
+    token?: TokenValue | null;
+    secret?: SecretValue | null;
+}
+export interface RoomStorageMountSpec {
     path: string;
     subpath?: string | null;
     read_only?: boolean;
-    text: string;
 }
 export interface EmptyDirMountSpec {
     path: string;
@@ -97,13 +236,16 @@ export interface EmptyDirMountSpec {
 export interface ConfigMountSpec {
     path?: string | null;
 }
+export interface FileMountSpec {
+    path: string;
+    read_only?: boolean;
+    text?: string | null;
+}
 export interface ContainerMountSpec {
     room?: RoomStorageMountSpec[];
-    project?: ProjectStorageMountSpec[];
-    images?: ImageStorageMountSpec[];
-    files?: FileStorageMountSpec[];
     empty_dirs?: EmptyDirMountSpec[];
     configs?: ConfigMountSpec[];
+    files?: FileMountSpec[];
 }
 export interface ServiceApiKeySpec {
     role: "admin";
@@ -168,6 +310,11 @@ export interface AgentSpec {
     email?: EmailSpec | null;
     heartbeat?: HeartbeatSpec | null;
 }
+export interface ManagedAgent {
+    id: string;
+    name: string;
+    configuration: Record<string, unknown>;
+}
 export interface ServiceMetadata {
     name: string;
     description?: string | null;
@@ -175,15 +322,19 @@ export interface ServiceMetadata {
     icon?: string | null;
     annotations?: Record<string, string> | null;
 }
+export interface ServiceRunAs {
+    email: string;
+    scopes?: string[] | null;
+}
 export interface ContainerSpec {
     private?: boolean | null;
     template?: "agent" | "none" | null;
     command?: string | null;
     working_dir?: string | null;
     image: string;
+    run_as?: ServiceRunAs | null;
+    pull_secret?: SecretValue | null;
     environment?: EnvironmentVariable[] | null;
-    secrets?: string[];
-    pull_secret?: string | null;
     storage?: ContainerMountSpec;
     on_demand?: boolean | null;
     writable_root_fs?: boolean | null;
@@ -215,6 +366,7 @@ export interface MCPEndpointSpec {
     require_approval?: "always" | "never" | null;
     oauth?: OAuthClientConfig | null;
     openai_connector_id?: string | null;
+    use_proxy_secret?: string | null;
 }
 export interface EndpointSpec {
     path: string;
@@ -241,61 +393,10 @@ export interface ServiceSpec {
     container?: ContainerSpec | null;
     external?: ExternalServiceSpec | null;
 }
-export interface TemplateEnvironmentVariable {
-    name: string;
-    value?: string | null;
-    token?: Record<string, unknown> | null;
-}
-export interface ServiceTemplateContainerMountSpec {
-    room?: RoomStorageMountSpec[] | null;
-    project?: ProjectStorageMountSpec[] | null;
-    images?: ImageStorageMountSpec[] | null;
-    files?: FileStorageMountSpec[] | null;
-    empty_dirs?: EmptyDirMountSpec[] | null;
-    configs?: ConfigMountSpec[] | null;
-}
-export interface ContainerTemplateSpec {
-    private?: boolean | null;
-    command?: string | null;
-    working_dir?: string | null;
-    image?: string | null;
-    environment?: TemplateEnvironmentVariable[] | null;
-    storage?: ServiceTemplateContainerMountSpec | null;
-    on_demand?: boolean | null;
-    writable_root_fs?: boolean | null;
-}
-export interface ExternalServiceTemplateSpec {
-    url: string;
-}
-export interface ServiceTemplateVariable {
-    name: string;
-    label?: string | null;
-    description?: string | null;
-    default?: string | null;
-    required?: boolean | null;
-}
-export declare function normalizeServiceSpec(service: ServiceSpec | Record<string, unknown>): ServiceSpec;
 export declare class ServiceTemplateSpec {
-    readonly version: string;
-    readonly kind: string;
-    readonly variables?: ServiceTemplateVariable[] | null;
-    readonly metadata: ServiceMetadata;
-    readonly ports: PortSpec[];
-    readonly container?: ContainerTemplateSpec | null;
-    readonly external?: ExternalServiceTemplateSpec | null;
-    readonly agents: Record<string, unknown>[];
-    constructor({ version, kind, variables, metadata, ports, container, external, agents, }: {
-        version?: string;
-        kind?: string;
-        variables?: ServiceTemplateVariable[] | null;
-        metadata: ServiceMetadata;
-        ports?: PortSpec[];
-        container?: ContainerTemplateSpec | null;
-        external?: ExternalServiceTemplateSpec | null;
-        agents?: Record<string, unknown>[];
-    });
+    private readonly template;
+    private constructor();
     static fromJson(json: Record<string, unknown>): ServiceTemplateSpec;
-    toJson(): Record<string, unknown>;
     toServiceSpec({ values }?: {
         values?: Record<string, string>;
     }): ServiceSpec;
@@ -332,6 +433,7 @@ export interface Route {
 export interface RoutesPage {
     routes: Route[];
     total: number;
+    continuationToken?: string | null;
 }
 export interface Mailbox {
     address: string;
@@ -342,6 +444,7 @@ export interface Mailbox {
 export interface MailboxesPage {
     mailboxes: Mailbox[];
     total: number;
+    continuationToken?: string | null;
 }
 export type FeedVisibility = "public" | "project" | "private";
 export interface Feed {
@@ -358,6 +461,7 @@ export interface Feed {
 export interface FeedsPage {
     feeds: Feed[];
     total: number;
+    continuationToken?: string | null;
 }
 export interface FeedSubscription {
     id: string;
@@ -413,64 +517,17 @@ export interface OAuthClient {
     scope: string;
     projectId: string;
     metadata: Record<string, string>;
+    official: boolean;
 }
 export interface OAuthClientsPage {
     clients: OAuthClient[];
     total: number;
 }
-export interface BaseSecret {
-    id?: string;
-    name: string;
-    type: "docker" | "keys";
-}
-export interface PullSecret extends BaseSecret {
-    type: "docker";
-    server: string;
-    username: string;
-    password: string;
-    email?: string;
-}
-export interface KeysSecret extends BaseSecret {
-    type: "keys";
-    data: Record<string, string>;
-}
-export type SecretLike = PullSecret | KeysSecret;
-export interface ManagedSecretInfo {
-    id: string;
-    type: string;
-    name: string;
-    delegatedTo?: string | null;
-}
-export interface ManagedSecret extends ManagedSecretInfo {
-    dataBase64: string;
-    data: Uint8Array;
-}
 export interface ConnectorRef {
     openaiConnectorId?: string | null;
     serverUrl?: string | null;
     clientSecretId?: string | null;
 }
-export interface ExternalOAuthClientRegistration {
-    id: string;
-    delegatedTo: string;
-    connector?: ConnectorRef | null;
-    oauth?: OAuthClientConfig | null;
-    clientId: string;
-    clientSecret?: string | null;
-}
-export interface ManagedAgent {
-    id: string;
-    name: string;
-    configuration: Record<string, unknown>;
-}
-export declare class ManagedAgentGrant {
-    readonly admin: boolean;
-    constructor({ admin }?: {
-        admin?: boolean;
-    });
-    static fromJson(json: Record<string, unknown>): ManagedAgentGrant;
-    toJson(): Record<string, unknown>;
-}
 type JsonRequest = Record<string, unknown> | Array<unknown> | string | number | boolean | null;
 export declare class Meshagent {
     private readonly baseUrl;
@@ -481,28 +538,26 @@ export declare class Meshagent {
     });
     private buildUrl;
     private request;
-    private parseRoomShare;
+    private secretPayload;
+    private secretSearchPayload;
+    private secretVersionPayload;
     private parseRoomSession;
-    private parseManagedAgent;
     private parseRoom;
+    private parseGroup;
     private parseRoute;
     private parseFeed;
     private parseFeedSubscription;
     private parseLLMLogger;
     private parseProjectRepository;
+    private parseAccessResource;
+    private parseAccessSubject;
+    private serializeAccessSubject;
+    private serializeAccessResource;
+    private parseProjectMember;
+    private parseGroupMember;
     private parseProjectRoomGrant;
-    private parseProjectRoomGrantCount;
-    private parseProjectUserGrantCount;
     private parseBalance;
     private parseTransaction;
-    private parseSecret;
-    private parseManagedSecretInfo;
-    private parseManagedSecret;
-    private parseSecretPayload;
-    private toSecretPayload;
-    private parseConnectorRef;
-    private serializeConnectorRef;
-    private parseExternalOAuthClientRegistration;
     private parseOAuthClient;
     private parseRoomConnectionInfo;
     private encodePathComponent;
@@ -515,48 +570,87 @@ export declare class Meshagent {
         projectId: string;
         path: string;
     }): Promise<Uint8Array>;
-    getProjectRole(projectId: string): Promise<ProjectRole>;
-    createShare(projectId: string, settings?: Record<string, unknown>): Promise<{
-        id: string;
-    }>;
-    deleteShare(projectId: string, shareId: string): Promise<void>;
-    updateShare(projectId: string, shareId: string, settings?: Record<string, unknown>): Promise<void>;
-    listShares(projectId: string): Promise<RoomShare[]>;
     createProject(name: string, settings?: Record<string, unknown>): Promise<Record<string, unknown>>;
     addUserToProject(projectId: string, userId: string, options?: {
-        isAdmin?: boolean;
-        isDeveloper?: boolean;
-        canCreateRooms?: boolean;
-        inviteRedirectUrl?: string;
-    }): Promise<Record<string, unknown>>;
-    addUserToProjectByEmail(projectId: string, email: string, options?: {
-        isAdmin?: boolean;
-        isDeveloper?: boolean;
-        canCreateRooms?: boolean;
+        roles?: ProjectRole[];
+        email?: string;
         inviteRedirectUrl?: string;
     }): Promise<Record<string, unknown>>;
     removeUserFromProject(projectId: string, userId: string): Promise<Record<string, unknown>>;
     updateProjectSettings(projectId: string, settings: Record<string, unknown>): Promise<Record<string, unknown>>;
+    updateUserInProject(projectId: string, userId: string, roles: ProjectRole[]): Promise<Record<string, unknown>>;
     getUsersInProjectPage(projectId: string, options?: {
-        count?: number;
-        offset?: number;
+        pageSize?: number;
+        continuationToken?: string;
         filter?: string;
+        email?: string;
     }): Promise<ProjectMembersPage>;
-    getUsersInProject(projectId: string): Promise<Record<string, unknown>>;
+    getUsersInProject(projectId: string): Promise<ProjectMember[]>;
     getUserProfile(userId: string): Promise<Record<string, unknown>>;
     updateUserProfile(userId: string, firstName: string, lastName: string): Promise<Record<string, unknown>>;
     listProjects(): Promise<Record<string, unknown>>;
     getProject(projectId: string): Promise<Record<string, unknown>>;
     getProjectByKey(projectKey: string): Promise<Record<string, unknown>>;
-    createAgent(params: {
-        projectId: string;
-        configuration: Record<string, unknown>;
-        ifNotExists?: boolean;
-        permissions?: Record<string, ManagedAgentGrant> | null;
-    }): Promise<ManagedAgent>;
-    createApiKey(projectId: string, name: string, description: string): Promise<Record<string, unknown>>;
-    deleteApiKey(projectId: string, id: string): Promise<void>;
-    listApiKeys(projectId: string): Promise<Record<string, unknown>>;
+    listServiceAccounts(projectId: string, options?: {
+        pageSize?: number;
+        continuationToken?: string;
+        filter?: string;
+        view?: string;
+    }): Promise<ServiceAccountsPage>;
+    createServiceAccount(projectId: string, name: string, options?: {
+        displayName?: string;
+        description?: string;
+        metadata?: Record<string, unknown>;
+        annotations?: Record<string, string>;
+    }): Promise<ServiceAccountInfo>;
+    mintParticipantToken(projectId: string, options: {
+        name: string;
+        roomName?: string;
+        role?: string;
+        api?: Record<string, unknown>;
+        grants?: Record<string, unknown>[];
+    }): Promise<string>;
+    createApiKey(projectId: string, serviceAccountId: string, name: string, description: string): Promise<ApiKeyInfo>;
+    deleteApiKey(projectId: string, serviceAccountId: string, id: string): Promise<void>;
+    revokeApiKeysByMsid(projectId: string, serviceAccountId: string, msid: string): Promise<ApiKeysRevocationResult>;
+    listApiKeys(projectId: string, serviceAccountId: string): Promise<ApiKeysPage>;
+    createUserSecret(input: Required<Pick<SecretInput, "projectId" | "name">> & Omit<SecretInput, "projectId" | "name">): Promise<Secret>;
+    listUserSecrets(options?: {
+        pageSize?: number;
+        continuationToken?: string;
+        filter?: string;
+    }): Promise<SecretsPage>;
+    searchUserSecrets(input?: SecretSearchInput): Promise<SecretsPage>;
+    getUserSecret(secretId: string, options?: {
+        includeValue?: boolean;
+    }): Promise<Secret>;
+    updateUserSecret(secretId: string, input: SecretInput): Promise<Secret>;
+    deleteUserSecret(secretId: string): Promise<void>;
+    listUserSecretVersions(secretId: string): Promise<SecretVersion[]>;
+    createUserSecretVersion(secretId: string, input: SecretVersionInput): Promise<SecretVersion>;
+    listUserSecretProxyAccess(secretId: string, options?: {
+        pageSize?: number;
+        continuationToken?: string;
+    }): Promise<SecretProxyAccessGrantsPage>;
+    grantUserSecretProxyAccess(secretId: string, serviceAccountId: string): Promise<void>;
+    revokeUserSecretProxyAccess(secretId: string, serviceAccountId: string): Promise<void>;
+    createServiceAccountSecret(projectId: string, serviceAccountId: string, input: Required<Pick<SecretInput, "name">> & Omit<SecretInput, "projectId" | "name">): Promise<Secret>;
+    listServiceAccountSecrets(projectId: string, serviceAccountId: string, options?: {
+        pageSize?: number;
+        continuationToken?: string;
+        filter?: string;
+    }): Promise<SecretsPage>;
+    searchServiceAccountSecrets(projectId: string, serviceAccountId: string, input?: SecretSearchInput): Promise<SecretsPage>;
+    getServiceAccountSecret(projectId: string, serviceAccountId: string, secretId: string, options?: {
+        includeValue?: boolean;
+    }): Promise<Secret>;
+    updateServiceAccountSecret(projectId: string, serviceAccountId: string, secretId: string, input: SecretInput): Promise<Secret>;
+    deleteServiceAccountSecret(projectId: string, serviceAccountId: string, secretId: string): Promise<void>;
+    listServiceAccountSecretVersions(projectId: string, serviceAccountId: string, secretId: string): Promise<SecretVersion[]>;
+    createServiceAccountSecretVersion(projectId: string, serviceAccountId: string, secretId: string, input: SecretVersionInput): Promise<SecretVersion>;
+    listServiceAccountPullSecrets(projectId: string, serviceAccountId: string): Promise<Secret[]>;
+    addServiceAccountPullSecret(projectId: string, serviceAccountId: string, secretId: string): Promise<void>;
+    removeServiceAccountPullSecret(projectId: string, serviceAccountId: string, secretId: string): Promise<void>;
     getPricing(): Promise<Record<string, unknown>>;
     getStatus(projectId: string): Promise<boolean>;
     getBalance(projectId: string): Promise<Balance>;
@@ -594,28 +688,22 @@ export declare class Meshagent {
     getSession(projectId: string, sessionId: string): Promise<Record<string, unknown>>;
     listActiveSessions(projectId: string): Promise<RoomSession[]>;
     listRecentSessions(projectId: string): Promise<RoomSession[]>;
+    listRecentRoomSessions(projectId: string, roomName: string, options?: {
+        limit?: number;
+    }): Promise<RoomSession[]>;
+    listRecentSingleAgentSessions(projectId: string, agentName: string, options?: {
+        limit?: number;
+    }): Promise<RoomSession[]>;
+    createAgent(params: {
+        projectId: string;
+        configuration: Record<string, unknown>;
+        ifNotExists?: boolean;
+        permissions?: unknown[] | null;
+    }): Promise<ManagedAgent>;
     listSessionEvents(projectId: string, sessionId: string): Promise<Record<string, unknown>[]>;
     terminateSession(projectId: string, sessionId: string): Promise<void>;
     listSessionSpans(projectId: string, sessionId: string): Promise<Record<string, unknown>[]>;
     listSessionMetrics(projectId: string, sessionId: string): Promise<Record<string, unknown>[]>;
-    createWebhook(projectId: string, params: {
-        name: string;
-        url: string;
-        events: string[];
-        description?: string;
-        action?: string;
-        payload?: Record<string, unknown> | null;
-    }): Promise<Record<string, unknown>>;
-    updateWebhook(projectId: string, webhookId: string, params: {
-        name: string;
-        url: string;
-        events: string[];
-        description?: string;
-        action?: string | null;
-        payload?: Record<string, unknown> | null;
-    }): Promise<Record<string, unknown>>;
-    listWebhooks(projectId: string): Promise<Record<string, unknown>>;
-    deleteWebhook(projectId: string, webhookId: string): Promise<void>;
     createMailbox(params: {
         projectId: string;
         address: string;
@@ -632,13 +720,12 @@ export declare class Meshagent {
     }): Promise<void>;
     private parseMailbox;
     listMailboxesPage(projectId: string, options?: {
-        count?: number;
-        offset?: number;
+        pageSize?: number;
+        continuationToken?: string;
         filter?: string;
     }): Promise<MailboxesPage>;
     listMailboxes(projectId: string, options?: {
-        count?: number;
-        offset?: number;
+        pageSize?: number;
         filter?: string;
     }): Promise<Mailbox[]>;
     deleteMailbox(projectId: string, address: string): Promise<void>;
@@ -662,14 +749,15 @@ export declare class Meshagent {
     }): Promise<void>;
     getFeed(projectId: string, feedId: string): Promise<Feed>;
     listFeedsPage(projectId: string, options?: {
-        count?: number;
-        offset?: number;
+        pageSize?: number;
+        continuationToken?: string;
         filter?: string;
+        view?: "my" | "all";
     }): Promise<FeedsPage>;
     listFeeds(projectId: string, options?: {
-        count?: number;
-        offset?: number;
+        pageSize?: number;
         filter?: string;
+        view?: "my" | "all";
     }): Promise<Feed[]>;
     listRoomFeedsPage(projectId: string, roomName: string, options?: {
         count?: number;
@@ -742,7 +830,18 @@ export declare class Meshagent {
         annotations?: Record<string, string>;
     }): Promise<ProjectRepository>;
     getRepository(projectId: string, repositoryId: string): Promise<ProjectRepository>;
-    listRepositories(projectId: string): Promise<ProjectRepository[]>;
+    listRepositoriesPage(projectId: string, options?: {
+        pageSize?: number;
+        view?: "my" | "all";
+        continuationToken?: string;
+    }): Promise<{
+        repositories: ProjectRepository[];
+        total: number;
+        continuationToken?: string | null;
+    }>;
+    listRepositories(projectId: string, options?: {
+        view?: "my" | "all";
+    }): Promise<ProjectRepository[]>;
     deleteRepository(projectId: string, repositoryId: string): Promise<void>;
     createService(projectId: string, service: ServiceSpec): Promise<string>;
     createRoomService(projectId: string, roomName: string, service: ServiceSpec): Promise<string>;
@@ -754,128 +853,12 @@ export declare class Meshagent {
     getService(projectId: string, serviceId: string): Promise<ServiceSpec>;
     listServices(projectId: string): Promise<ServiceSpec[]>;
     deleteService(projectId: string, serviceId: string): Promise<void>;
-    createProjectSecret(params: {
-        projectId: string;
-        name: string;
-        type: string;
-        data: Uint8Array | ArrayBuffer | Buffer;
-    }): Promise<string>;
-    updateProjectSecret(params: {
-        projectId: string;
-        secretId: string;
-        name: string;
-        type: string;
-        data: Uint8Array | ArrayBuffer | Buffer;
-    }): Promise<void>;
-    getProjectSecret(projectId: string, secretId: string): Promise<ManagedSecret>;
-    listProjectSecrets(projectId: string): Promise<ManagedSecretInfo[]>;
-    deleteProjectSecret(projectId: string, secretId: string): Promise<void>;
-    createRoomSecret(params: {
-        projectId: string;
-        roomName: string;
-        data: Uint8Array | ArrayBuffer | Buffer;
-        secretId?: string;
-        name?: string;
-        type?: string;
-        delegatedTo?: string;
-        forIdentity?: string;
-    }): Promise<string>;
-    updateRoomSecret(params: {
-        projectId: string;
-        roomName: string;
-        secretId: string;
-        data: Uint8Array | ArrayBuffer | Buffer;
-        name?: string;
-        type?: string;
-        delegatedTo?: string;
-        forIdentity?: string;
-    }): Promise<void>;
-    getRoomSecret(params: {
-        projectId: string;
-        roomName: string;
-        secretId: string;
-        delegatedTo?: string;
-        forIdentity?: string;
-    }): Promise<ManagedSecret>;
-    listRoomSecrets(params: {
-        projectId: string;
-        roomName: string;
-        forIdentity?: string;
-    }): Promise<ManagedSecretInfo[]>;
-    deleteRoomSecret(params: {
-        projectId: string;
-        roomName: string;
-        secretId: string;
-        delegatedTo?: string;
-        forIdentity?: string;
-    }): Promise<void>;
-    createSecret(projectId: string, secret: SecretLike): Promise<void>;
-    updateSecret(projectId: string, secret: SecretLike): Promise<void>;
-    deleteSecret(projectId: string, secretId: string): Promise<void>;
-    listSecrets(projectId: string): Promise<SecretLike[]>;
-    createProjectExternalOAuthRegistration(params: {
-        projectId: string;
-        oauth: OAuthClientConfig;
-        clientId: string;
-        clientSecret?: string | null;
-        delegatedTo?: string | null;
-        connector?: ConnectorRef | null;
-    }): Promise<string>;
-    updateProjectExternalOAuthRegistration(params: {
-        projectId: string;
-        registrationId: string;
-        oauth: OAuthClientConfig;
-        clientId: string;
-        clientSecret?: string | null;
-        delegatedTo?: string | null;
-        connector?: ConnectorRef | null;
-    }): Promise<void>;
-    listProjectExternalOAuthRegistrations(params: {
-        projectId: string;
-        delegatedTo?: string | null;
-    }): Promise<ExternalOAuthClientRegistration[]>;
-    deleteProjectExternalOAuthRegistration(params: {
-        projectId: string;
-        registrationId: string;
-        delegatedTo?: string | null;
-    }): Promise<void>;
-    createRoomExternalOAuthRegistration(params: {
-        projectId: string;
-        roomName: string;
-        oauth: OAuthClientConfig;
-        clientId: string;
-        clientSecret?: string | null;
-        delegatedTo?: string | null;
-        connector?: ConnectorRef | null;
-    }): Promise<string>;
-    updateRoomExternalOAuthRegistration(params: {
-        projectId: string;
-        roomName: string;
-        registrationId: string;
-        oauth: OAuthClientConfig;
-        clientId: string;
-        clientSecret?: string | null;
-        delegatedTo?: string | null;
-        connector?: ConnectorRef | null;
-    }): Promise<void>;
-    listRoomExternalOAuthRegistrations(params: {
-        projectId: string;
-        roomName: string;
-        delegatedTo?: string | null;
-    }): Promise<ExternalOAuthClientRegistration[]>;
-    deleteRoomExternalOAuthRegistration(params: {
-        projectId: string;
-        roomName: string;
-        registrationId: string;
-        delegatedTo?: string | null;
-    }): Promise<void>;
     createRoom(params: {
         projectId: string;
         name: string;
         ifNotExists?: boolean;
         metadata?: Record<string, unknown>;
         annotations?: Record<string, string>;
-        permissions?: Record<string, ApiScope>;
     }): Promise<RoomInfo>;
     getRoom(projectId: string, name: string): Promise<RoomInfo>;
     updateRoom(projectId: string, roomId: string, name: string, options?: {
@@ -883,33 +866,54 @@ export declare class Meshagent {
         annotations?: Record<string, string>;
     }): Promise<void>;
     deleteRoom(projectId: string, roomId: string): Promise<void>;
-    connectRoom(projectId: string, room: string): Promise<RoomConnectionInfo>;
-    createRoomGrant(params: {
+    createGroup(params: {
         projectId: string;
-        roomId: string;
-        userId: string;
-        permissions: ApiScope;
+        name: string;
+        metadata?: Record<string, unknown>;
+        annotations?: Record<string, string>;
+    }): Promise<GroupInfo>;
+    getGroup(projectId: string, groupId: string): Promise<GroupInfo>;
+    updateGroup(projectId: string, groupId: string, name: string, options?: {
+        metadata?: Record<string, unknown>;
+        annotations?: Record<string, string>;
     }): Promise<void>;
-    createRoomGrantByEmail(params: {
+    deleteGroup(projectId: string, groupId: string): Promise<void>;
+    listGroupsPage(projectId: string, options?: {
+        pageSize?: number;
+        continuationToken?: string;
+        filter?: string;
+    }): Promise<GroupsPage>;
+    listGroups(projectId: string, options?: {
+        pageSize?: number;
+        continuationToken?: string;
+        filter?: string;
+    }): Promise<GroupInfo[]>;
+    setGroupMember(params: {
         projectId: string;
-        roomId: string;
-        email: string;
-        permissions: ApiScope;
-        inviteRedirectUrl?: string;
+        groupId: string;
+        subject: AccessSubject;
+        role?: "member" | "manager";
     }): Promise<void>;
-    updateRoomGrant(params: {
+    listGroupMembersPage(projectId: string, groupId: string, options?: {
+        pageSize?: number;
+        continuationToken?: string;
+    }): Promise<GroupMembersPage>;
+    listGroupMembers(projectId: string, groupId: string, options?: {
+        pageSize?: number;
+        continuationToken?: string;
+    }): Promise<GroupMember[]>;
+    deleteGroupMember(params: {
         projectId: string;
-        roomId: string;
-        userId: string;
-        permissions: ApiScope;
-        grantId?: string;
+        groupId: string;
+        subjectType: "user" | "agent" | "service_account" | "group";
+        subjectId: string;
     }): Promise<void>;
-    deleteRoomGrant(projectId: string, roomId: string, userId: string): Promise<void>;
-    getRoomGrant(projectId: string, roomId: string, userId: string): Promise<ProjectRoomGrant>;
+    connectRoom(projectId: string, room: string): Promise<RoomConnectionInfo>;
     listRooms(projectId: string, options?: {
-        limit?: number;
-        offset?: number;
-        orderBy?: string;
+        pageSize?: number;
+        continuationToken?: string;
+        filter?: string;
+        view?: "my" | "all";
     }): Promise<RoomInfo[]>;
     createRoute(params: {
         projectId: string;
@@ -925,13 +929,12 @@ export declare class Meshagent {
         domain: string;
     }): Promise<Route>;
     listRoutesPage(projectId: string, options?: {
-        count?: number;
-        offset?: number;
+        pageSize?: number;
+        continuationToken?: string;
         filter?: string;
     }): Promise<RoutesPage>;
     listRoutes(projectId: string, options?: {
-        count?: number;
-        offset?: number;
+        pageSize?: number;
         filter?: string;
     }): Promise<Route[]>;
     listRoomRoutesPage(params: {
@@ -966,39 +969,54 @@ export declare class Meshagent {
         projectId: string;
         domain: string;
     }): Promise<void>;
-    listRoomGrants(projectId: string, options?: {
-        limit?: number;
-        offset?: number;
-        orderBy?: string;
+    testAccess(projectId: string, params: {
+        subject: AccessSubject;
+        resource: AccessResource;
+        relation: string;
+    }): Promise<AccessTestResult>;
+    getEffectiveAccess(projectId: string, params: {
+        subject: AccessSubject;
+        resource: AccessResource;
+        relations?: string[];
+    }): Promise<EffectiveAccess>;
+    listAccessBindings(projectId: string, params: {
+        subject: AccessSubject;
     }): Promise<ProjectRoomGrant[]>;
-    listRoomGrantsByUser(projectId: string, userId: string, options?: {
-        limit?: number;
-        offset?: number;
+    listAccessBindingsPage(projectId: string, params: {
+        subject: AccessSubject;
+    }): Promise<AccessBindingsPage>;
+    getResourcePolicyPage(projectId: string, params: {
+        resourceType: string;
+        resourceId: string;
+        pageSize?: number;
+        continuationToken?: string;
+    }): Promise<ResourcePolicyPage>;
+    getResourcePolicy(projectId: string, params: {
+        resourceType: string;
+        resourceId: string;
+        pageSize?: number;
+        continuationToken?: string;
     }): Promise<ProjectRoomGrant[]>;
-    listRoomGrantsByRoom(projectId: string, roomId: string, options?: {
-        limit?: number;
-        offset?: number;
-    }): Promise<ProjectRoomGrant[]>;
-    listUniqueRoomsWithGrants(projectId: string, options?: {
-        limit?: number;
-        offset?: number;
-    }): Promise<ProjectRoomGrantCount[]>;
-    listUniqueUsersWithGrantsPage(projectId: string, options?: {
-        limit?: number;
-        offset?: number;
-        filter?: string;
-    }): Promise<ProjectUserGrantCountsPage>;
-    listUniqueUsersWithGrants(projectId: string, options?: {
-        limit?: number;
-        offset?: number;
-        filter?: string;
-    }): Promise<ProjectUserGrantCount[]>;
+    grantResourcePolicy(projectId: string, params: {
+        resourceType: string;
+        resourceId: string;
+        subject: AccessSubject;
+        roles: string[];
+        inviteRedirectUrl?: string;
+    }): Promise<void>;
+    revokeResourcePolicy(projectId: string, params: {
+        resourceType: string;
+        resourceId: string;
+        subject: AccessSubject;
+    }): Promise<void>;
+    private validateResourcePolicyType;
     createOAuthClient(projectId: string, params: {
         grantTypes: string[];
         responseTypes: string[];
         redirectUris: string[];
         scope: string;
         metadata?: Record<string, any>;
+        official?: boolean;
     }): Promise<OAuthClient>;
     updateOAuthClient(projectId: string, clientId: string, params: {
         grantTypes?: string[];