@miradorlabs/web-grpc 2.71.0 → 2.74.0

package/proto/gateway/web/v1/account_gateway.ts

@@ -414,6 +414,27 @@ export interface CreateProjectRequest {
 export interface CreateProjectResponse {
   status: ResponseStatus | undefined;
   project: Project | undefined;
+  ingestionKey: ServerApiKeySecret | undefined;
+}
+
+export interface ServerApiKeySecret {
+  serverApiKey:
+    | ServerApiKey
+    | undefined;
+  /** Sensitive: returned only to authorized project members. */
+  key: string;
+}
+
+export interface RevealServerApiKeyRequest {
+  organizationId: string;
+  projectId: string;
+  id: string;
+}
+
+/** Reveals an existing key without changing its permissions or status. */
+export interface RevealServerApiKeyResponse {
+  status: ResponseStatus | undefined;
+  serverKey: ServerApiKeySecret | undefined;
 }
 
 export interface ListProjectsRequest {
@@ -560,6 +581,8 @@ export interface CreateServerApiKeyRequest {
   projectId: string;
   name: string;
   description: string;
+  /** Absent preserves legacy full access; present replaces all toggles. */
+  permissions: ServerApiKeyPermissions | undefined;
 }
 
 export interface CreateServerApiKeyResponse {
@@ -606,7 +629,11 @@ export interface UpdateServerApiKeyRequest {
 }
 
 export interface UpdateServerApiKeyRequest_ServerApiKeyUpdates {
-  name?: string | undefined;
+  name?:
+    | string
+    | undefined;
+  /** Absent leaves permissions unchanged; present replaces all toggles. */
+  permissions: ServerApiKeyPermissions | undefined;
 }
 
 export interface UpdateServerApiKeyResponse {
@@ -627,6 +654,12 @@ export interface DeleteServerApiKeyResponse {
   status: ResponseStatus | undefined;
 }
 
+export interface ServerApiKeyPermissions {
+  read: boolean;
+  write: boolean;
+  ingest: boolean;
+}
+
 export interface ServerApiKey {
   /** UUID */
   id: string;
@@ -640,6 +673,7 @@ export interface ServerApiKey {
   updatedAt: Date | undefined;
   createdBy: string;
   lastUsedAt?: Date | undefined;
+  permissions: ServerApiKeyPermissions | undefined;
 }
 
 export interface InviteUserRequest {
@@ -871,6 +905,18 @@ export interface RevokeCliSessionResponse {
   status: ResponseStatus | undefined;
 }
 
+export interface ProductFeatures {
+  betaInviteEnabled: boolean;
+}
+
+export interface GetProductFeaturesRequest {
+}
+
+export interface GetProductFeaturesResponse {
+  status: ResponseStatus | undefined;
+  features: ProductFeatures | undefined;
+}
+
 function createBaseLogonRequest(): LogonRequest {
   return { invitationId: undefined };
 }
@@ -1619,7 +1665,7 @@ export const CreateProjectRequest: MessageFns<CreateProjectRequest> = {
 };
 
 function createBaseCreateProjectResponse(): CreateProjectResponse {
-  return { status: undefined, project: undefined };
+  return { status: undefined, project: undefined, ingestionKey: undefined };
 }
 
 export const CreateProjectResponse: MessageFns<CreateProjectResponse> = {
@@ -1630,6 +1676,9 @@ export const CreateProjectResponse: MessageFns<CreateProjectResponse> = {
     if (message.project !== undefined) {
       Project.encode(message.project, writer.uint32(18).fork()).join();
     }
+    if (message.ingestionKey !== undefined) {
+      ServerApiKeySecret.encode(message.ingestionKey, writer.uint32(26).fork()).join();
+    }
     return writer;
   },
 
@@ -1662,6 +1711,14 @@ export const CreateProjectResponse: MessageFns<CreateProjectResponse> = {
             message.project = Project.decode(reader, reader.uint32());
             continue;
           }
+          case 3: {
+            if (tag !== 26) {
+              break;
+            }
+
+            message.ingestionKey = ServerApiKeySecret.decode(reader, reader.uint32());
+            continue;
+          }
         }
         if ((tag & 7) === 4 || tag === 0) {
           break;
@@ -1678,6 +1735,11 @@ export const CreateProjectResponse: MessageFns<CreateProjectResponse> = {
     return {
       status: isSet(object.status) ? ResponseStatus.fromJSON(object.status) : undefined,
       project: isSet(object.project) ? Project.fromJSON(object.project) : undefined,
+      ingestionKey: isSet(object.ingestionKey)
+        ? ServerApiKeySecret.fromJSON(object.ingestionKey)
+        : isSet(object.ingestion_key)
+        ? ServerApiKeySecret.fromJSON(object.ingestion_key)
+        : undefined,
     };
   },
 
@@ -1689,6 +1751,9 @@ export const CreateProjectResponse: MessageFns<CreateProjectResponse> = {
     if (message.project !== undefined) {
       obj.project = Project.toJSON(message.project);
     }
+    if (message.ingestionKey !== undefined) {
+      obj.ingestionKey = ServerApiKeySecret.toJSON(message.ingestionKey);
+    }
     return obj;
   },
 
@@ -1703,6 +1768,302 @@ export const CreateProjectResponse: MessageFns<CreateProjectResponse> = {
     message.project = (object.project !== undefined && object.project !== null)
       ? Project.fromPartial(object.project)
       : undefined;
+    message.ingestionKey = (object.ingestionKey !== undefined && object.ingestionKey !== null)
+      ? ServerApiKeySecret.fromPartial(object.ingestionKey)
+      : undefined;
+    return message;
+  },
+};
+
+function createBaseServerApiKeySecret(): ServerApiKeySecret {
+  return { serverApiKey: undefined, key: "" };
+}
+
+export const ServerApiKeySecret: MessageFns<ServerApiKeySecret> = {
+  encode(message: ServerApiKeySecret, writer: BinaryWriter = new BinaryWriter()): BinaryWriter {
+    if (message.serverApiKey !== undefined) {
+      ServerApiKey.encode(message.serverApiKey, writer.uint32(10).fork()).join();
+    }
+    if (message.key !== "") {
+      writer.uint32(18).string(message.key);
+    }
+    return writer;
+  },
+
+  decode(input: BinaryReader | Uint8Array, length?: number): ServerApiKeySecret {
+    const reader = input instanceof BinaryReader ? input : new BinaryReader(input);
+    const previousRecursionDepth = (reader as any).__tsProtoDecodeDepth ?? 0;
+    if (previousRecursionDepth >= 100) {
+      throw new globalThis.Error("protobuf decode recursion limit exceeded");
+    }
+    (reader as any).__tsProtoDecodeDepth = previousRecursionDepth + 1;
+    try {
+      const end = length === undefined ? reader.len : reader.pos + length;
+      const message = createBaseServerApiKeySecret();
+      while (reader.pos < end) {
+        const tag = reader.uint32();
+        switch (tag >>> 3) {
+          case 1: {
+            if (tag !== 10) {
+              break;
+            }
+
+            message.serverApiKey = ServerApiKey.decode(reader, reader.uint32());
+            continue;
+          }
+          case 2: {
+            if (tag !== 18) {
+              break;
+            }
+
+            message.key = reader.string();
+            continue;
+          }
+        }
+        if ((tag & 7) === 4 || tag === 0) {
+          break;
+        }
+        reader.skip(tag & 7);
+      }
+      return message;
+    } finally {
+      (reader as any).__tsProtoDecodeDepth = previousRecursionDepth;
+    }
+  },
+
+  fromJSON(object: any): ServerApiKeySecret {
+    return {
+      serverApiKey: isSet(object.serverApiKey)
+        ? ServerApiKey.fromJSON(object.serverApiKey)
+        : isSet(object.server_api_key)
+        ? ServerApiKey.fromJSON(object.server_api_key)
+        : undefined,
+      key: isSet(object.key) ? globalThis.String(object.key) : "",
+    };
+  },
+
+  toJSON(message: ServerApiKeySecret): unknown {
+    const obj: any = {};
+    if (message.serverApiKey !== undefined) {
+      obj.serverApiKey = ServerApiKey.toJSON(message.serverApiKey);
+    }
+    if (message.key !== "") {
+      obj.key = message.key;
+    }
+    return obj;
+  },
+
+  create<I extends Exact<DeepPartial<ServerApiKeySecret>, I>>(base?: I): ServerApiKeySecret {
+    return ServerApiKeySecret.fromPartial(base ?? ({} as any));
+  },
+  fromPartial<I extends Exact<DeepPartial<ServerApiKeySecret>, I>>(object: I): ServerApiKeySecret {
+    const message = createBaseServerApiKeySecret();
+    message.serverApiKey = (object.serverApiKey !== undefined && object.serverApiKey !== null)
+      ? ServerApiKey.fromPartial(object.serverApiKey)
+      : undefined;
+    message.key = object.key ?? "";
+    return message;
+  },
+};
+
+function createBaseRevealServerApiKeyRequest(): RevealServerApiKeyRequest {
+  return { organizationId: "", projectId: "", id: "" };
+}
+
+export const RevealServerApiKeyRequest: MessageFns<RevealServerApiKeyRequest> = {
+  encode(message: RevealServerApiKeyRequest, writer: BinaryWriter = new BinaryWriter()): BinaryWriter {
+    if (message.organizationId !== "") {
+      writer.uint32(10).string(message.organizationId);
+    }
+    if (message.projectId !== "") {
+      writer.uint32(18).string(message.projectId);
+    }
+    if (message.id !== "") {
+      writer.uint32(26).string(message.id);
+    }
+    return writer;
+  },
+
+  decode(input: BinaryReader | Uint8Array, length?: number): RevealServerApiKeyRequest {
+    const reader = input instanceof BinaryReader ? input : new BinaryReader(input);
+    const previousRecursionDepth = (reader as any).__tsProtoDecodeDepth ?? 0;
+    if (previousRecursionDepth >= 100) {
+      throw new globalThis.Error("protobuf decode recursion limit exceeded");
+    }
+    (reader as any).__tsProtoDecodeDepth = previousRecursionDepth + 1;
+    try {
+      const end = length === undefined ? reader.len : reader.pos + length;
+      const message = createBaseRevealServerApiKeyRequest();
+      while (reader.pos < end) {
+        const tag = reader.uint32();
+        switch (tag >>> 3) {
+          case 1: {
+            if (tag !== 10) {
+              break;
+            }
+
+            message.organizationId = reader.string();
+            continue;
+          }
+          case 2: {
+            if (tag !== 18) {
+              break;
+            }
+
+            message.projectId = reader.string();
+            continue;
+          }
+          case 3: {
+            if (tag !== 26) {
+              break;
+            }
+
+            message.id = reader.string();
+            continue;
+          }
+        }
+        if ((tag & 7) === 4 || tag === 0) {
+          break;
+        }
+        reader.skip(tag & 7);
+      }
+      return message;
+    } finally {
+      (reader as any).__tsProtoDecodeDepth = previousRecursionDepth;
+    }
+  },
+
+  fromJSON(object: any): RevealServerApiKeyRequest {
+    return {
+      organizationId: isSet(object.organizationId)
+        ? globalThis.String(object.organizationId)
+        : isSet(object.organization_id)
+        ? globalThis.String(object.organization_id)
+        : "",
+      projectId: isSet(object.projectId)
+        ? globalThis.String(object.projectId)
+        : isSet(object.project_id)
+        ? globalThis.String(object.project_id)
+        : "",
+      id: isSet(object.id) ? globalThis.String(object.id) : "",
+    };
+  },
+
+  toJSON(message: RevealServerApiKeyRequest): unknown {
+    const obj: any = {};
+    if (message.organizationId !== "") {
+      obj.organizationId = message.organizationId;
+    }
+    if (message.projectId !== "") {
+      obj.projectId = message.projectId;
+    }
+    if (message.id !== "") {
+      obj.id = message.id;
+    }
+    return obj;
+  },
+
+  create<I extends Exact<DeepPartial<RevealServerApiKeyRequest>, I>>(base?: I): RevealServerApiKeyRequest {
+    return RevealServerApiKeyRequest.fromPartial(base ?? ({} as any));
+  },
+  fromPartial<I extends Exact<DeepPartial<RevealServerApiKeyRequest>, I>>(object: I): RevealServerApiKeyRequest {
+    const message = createBaseRevealServerApiKeyRequest();
+    message.organizationId = object.organizationId ?? "";
+    message.projectId = object.projectId ?? "";
+    message.id = object.id ?? "";
+    return message;
+  },
+};
+
+function createBaseRevealServerApiKeyResponse(): RevealServerApiKeyResponse {
+  return { status: undefined, serverKey: undefined };
+}
+
+export const RevealServerApiKeyResponse: MessageFns<RevealServerApiKeyResponse> = {
+  encode(message: RevealServerApiKeyResponse, writer: BinaryWriter = new BinaryWriter()): BinaryWriter {
+    if (message.status !== undefined) {
+      ResponseStatus.encode(message.status, writer.uint32(10).fork()).join();
+    }
+    if (message.serverKey !== undefined) {
+      ServerApiKeySecret.encode(message.serverKey, writer.uint32(18).fork()).join();
+    }
+    return writer;
+  },
+
+  decode(input: BinaryReader | Uint8Array, length?: number): RevealServerApiKeyResponse {
+    const reader = input instanceof BinaryReader ? input : new BinaryReader(input);
+    const previousRecursionDepth = (reader as any).__tsProtoDecodeDepth ?? 0;
+    if (previousRecursionDepth >= 100) {
+      throw new globalThis.Error("protobuf decode recursion limit exceeded");
+    }
+    (reader as any).__tsProtoDecodeDepth = previousRecursionDepth + 1;
+    try {
+      const end = length === undefined ? reader.len : reader.pos + length;
+      const message = createBaseRevealServerApiKeyResponse();
+      while (reader.pos < end) {
+        const tag = reader.uint32();
+        switch (tag >>> 3) {
+          case 1: {
+            if (tag !== 10) {
+              break;
+            }
+
+            message.status = ResponseStatus.decode(reader, reader.uint32());
+            continue;
+          }
+          case 2: {
+            if (tag !== 18) {
+              break;
+            }
+
+            message.serverKey = ServerApiKeySecret.decode(reader, reader.uint32());
+            continue;
+          }
+        }
+        if ((tag & 7) === 4 || tag === 0) {
+          break;
+        }
+        reader.skip(tag & 7);
+      }
+      return message;
+    } finally {
+      (reader as any).__tsProtoDecodeDepth = previousRecursionDepth;
+    }
+  },
+
+  fromJSON(object: any): RevealServerApiKeyResponse {
+    return {
+      status: isSet(object.status) ? ResponseStatus.fromJSON(object.status) : undefined,
+      serverKey: isSet(object.serverKey)
+        ? ServerApiKeySecret.fromJSON(object.serverKey)
+        : isSet(object.server_key)
+        ? ServerApiKeySecret.fromJSON(object.server_key)
+        : undefined,
+    };
+  },
+
+  toJSON(message: RevealServerApiKeyResponse): unknown {
+    const obj: any = {};
+    if (message.status !== undefined) {
+      obj.status = ResponseStatus.toJSON(message.status);
+    }
+    if (message.serverKey !== undefined) {
+      obj.serverKey = ServerApiKeySecret.toJSON(message.serverKey);
+    }
+    return obj;
+  },
+
+  create<I extends Exact<DeepPartial<RevealServerApiKeyResponse>, I>>(base?: I): RevealServerApiKeyResponse {
+    return RevealServerApiKeyResponse.fromPartial(base ?? ({} as any));
+  },
+  fromPartial<I extends Exact<DeepPartial<RevealServerApiKeyResponse>, I>>(object: I): RevealServerApiKeyResponse {
+    const message = createBaseRevealServerApiKeyResponse();
+    message.status = (object.status !== undefined && object.status !== null)
+      ? ResponseStatus.fromPartial(object.status)
+      : undefined;
+    message.serverKey = (object.serverKey !== undefined && object.serverKey !== null)
+      ? ServerApiKeySecret.fromPartial(object.serverKey)
+      : undefined;
     return message;
   },
 };
@@ -3822,7 +4183,7 @@ export const WebApiKey: MessageFns<WebApiKey> = {
 };
 
 function createBaseCreateServerApiKeyRequest(): CreateServerApiKeyRequest {
-  return { organizationId: "", projectId: "", name: "", description: "" };
+  return { organizationId: "", projectId: "", name: "", description: "", permissions: undefined };
 }
 
 export const CreateServerApiKeyRequest: MessageFns<CreateServerApiKeyRequest> = {
@@ -3839,6 +4200,9 @@ export const CreateServerApiKeyRequest: MessageFns<CreateServerApiKeyRequest> =
     if (message.description !== "") {
       writer.uint32(34).string(message.description);
     }
+    if (message.permissions !== undefined) {
+      ServerApiKeyPermissions.encode(message.permissions, writer.uint32(42).fork()).join();
+    }
     return writer;
   },
 
@@ -3887,6 +4251,14 @@ export const CreateServerApiKeyRequest: MessageFns<CreateServerApiKeyRequest> =
             message.description = reader.string();
             continue;
           }
+          case 5: {
+            if (tag !== 42) {
+              break;
+            }
+
+            message.permissions = ServerApiKeyPermissions.decode(reader, reader.uint32());
+            continue;
+          }
         }
         if ((tag & 7) === 4 || tag === 0) {
           break;
@@ -3913,6 +4285,7 @@ export const CreateServerApiKeyRequest: MessageFns<CreateServerApiKeyRequest> =
         : "",
       name: isSet(object.name) ? globalThis.String(object.name) : "",
       description: isSet(object.description) ? globalThis.String(object.description) : "",
+      permissions: isSet(object.permissions) ? ServerApiKeyPermissions.fromJSON(object.permissions) : undefined,
     };
   },
 
@@ -3930,6 +4303,9 @@ export const CreateServerApiKeyRequest: MessageFns<CreateServerApiKeyRequest> =
     if (message.description !== "") {
       obj.description = message.description;
     }
+    if (message.permissions !== undefined) {
+      obj.permissions = ServerApiKeyPermissions.toJSON(message.permissions);
+    }
     return obj;
   },
 
@@ -3942,6 +4318,9 @@ export const CreateServerApiKeyRequest: MessageFns<CreateServerApiKeyRequest> =
     message.projectId = object.projectId ?? "";
     message.name = object.name ?? "";
     message.description = object.description ?? "";
+    message.permissions = (object.permissions !== undefined && object.permissions !== null)
+      ? ServerApiKeyPermissions.fromPartial(object.permissions)
+      : undefined;
     return message;
   },
 };
@@ -4593,7 +4972,7 @@ export const UpdateServerApiKeyRequest: MessageFns<UpdateServerApiKeyRequest> =
 };
 
 function createBaseUpdateServerApiKeyRequest_ServerApiKeyUpdates(): UpdateServerApiKeyRequest_ServerApiKeyUpdates {
-  return { name: undefined };
+  return { name: undefined, permissions: undefined };
 }
 
 export const UpdateServerApiKeyRequest_ServerApiKeyUpdates: MessageFns<UpdateServerApiKeyRequest_ServerApiKeyUpdates> =
@@ -4605,6 +4984,9 @@ export const UpdateServerApiKeyRequest_ServerApiKeyUpdates: MessageFns<UpdateSer
       if (message.name !== undefined) {
         writer.uint32(10).string(message.name);
       }
+      if (message.permissions !== undefined) {
+        ServerApiKeyPermissions.encode(message.permissions, writer.uint32(18).fork()).join();
+      }
       return writer;
     },
 
@@ -4629,6 +5011,14 @@ export const UpdateServerApiKeyRequest_ServerApiKeyUpdates: MessageFns<UpdateSer
               message.name = reader.string();
               continue;
             }
+            case 2: {
+              if (tag !== 18) {
+                break;
+              }
+
+              message.permissions = ServerApiKeyPermissions.decode(reader, reader.uint32());
+              continue;
+            }
           }
           if ((tag & 7) === 4 || tag === 0) {
             break;
@@ -4642,7 +5032,10 @@ export const UpdateServerApiKeyRequest_ServerApiKeyUpdates: MessageFns<UpdateSer
     },
 
     fromJSON(object: any): UpdateServerApiKeyRequest_ServerApiKeyUpdates {
-      return { name: isSet(object.name) ? globalThis.String(object.name) : undefined };
+      return {
+        name: isSet(object.name) ? globalThis.String(object.name) : undefined,
+        permissions: isSet(object.permissions) ? ServerApiKeyPermissions.fromJSON(object.permissions) : undefined,
+      };
     },
 
     toJSON(message: UpdateServerApiKeyRequest_ServerApiKeyUpdates): unknown {
@@ -4650,6 +5043,9 @@ export const UpdateServerApiKeyRequest_ServerApiKeyUpdates: MessageFns<UpdateSer
       if (message.name !== undefined) {
         obj.name = message.name;
       }
+      if (message.permissions !== undefined) {
+        obj.permissions = ServerApiKeyPermissions.toJSON(message.permissions);
+      }
       return obj;
     },
 
@@ -4663,6 +5059,9 @@ export const UpdateServerApiKeyRequest_ServerApiKeyUpdates: MessageFns<UpdateSer
     ): UpdateServerApiKeyRequest_ServerApiKeyUpdates {
       const message = createBaseUpdateServerApiKeyRequest_ServerApiKeyUpdates();
       message.name = object.name ?? undefined;
+      message.permissions = (object.permissions !== undefined && object.permissions !== null)
+        ? ServerApiKeyPermissions.fromPartial(object.permissions)
+        : undefined;
       return message;
     },
   };
@@ -4938,6 +5337,107 @@ export const DeleteServerApiKeyResponse: MessageFns<DeleteServerApiKeyResponse>
   },
 };
 
+function createBaseServerApiKeyPermissions(): ServerApiKeyPermissions {
+  return { read: false, write: false, ingest: false };
+}
+
+export const ServerApiKeyPermissions: MessageFns<ServerApiKeyPermissions> = {
+  encode(message: ServerApiKeyPermissions, writer: BinaryWriter = new BinaryWriter()): BinaryWriter {
+    if (message.read !== false) {
+      writer.uint32(8).bool(message.read);
+    }
+    if (message.write !== false) {
+      writer.uint32(16).bool(message.write);
+    }
+    if (message.ingest !== false) {
+      writer.uint32(24).bool(message.ingest);
+    }
+    return writer;
+  },
+
+  decode(input: BinaryReader | Uint8Array, length?: number): ServerApiKeyPermissions {
+    const reader = input instanceof BinaryReader ? input : new BinaryReader(input);
+    const previousRecursionDepth = (reader as any).__tsProtoDecodeDepth ?? 0;
+    if (previousRecursionDepth >= 100) {
+      throw new globalThis.Error("protobuf decode recursion limit exceeded");
+    }
+    (reader as any).__tsProtoDecodeDepth = previousRecursionDepth + 1;
+    try {
+      const end = length === undefined ? reader.len : reader.pos + length;
+      const message = createBaseServerApiKeyPermissions();
+      while (reader.pos < end) {
+        const tag = reader.uint32();
+        switch (tag >>> 3) {
+          case 1: {
+            if (tag !== 8) {
+              break;
+            }
+
+            message.read = reader.bool();
+            continue;
+          }
+          case 2: {
+            if (tag !== 16) {
+              break;
+            }
+
+            message.write = reader.bool();
+            continue;
+          }
+          case 3: {
+            if (tag !== 24) {
+              break;
+            }
+
+            message.ingest = reader.bool();
+            continue;
+          }
+        }
+        if ((tag & 7) === 4 || tag === 0) {
+          break;
+        }
+        reader.skip(tag & 7);
+      }
+      return message;
+    } finally {
+      (reader as any).__tsProtoDecodeDepth = previousRecursionDepth;
+    }
+  },
+
+  fromJSON(object: any): ServerApiKeyPermissions {
+    return {
+      read: isSet(object.read) ? globalThis.Boolean(object.read) : false,
+      write: isSet(object.write) ? globalThis.Boolean(object.write) : false,
+      ingest: isSet(object.ingest) ? globalThis.Boolean(object.ingest) : false,
+    };
+  },
+
+  toJSON(message: ServerApiKeyPermissions): unknown {
+    const obj: any = {};
+    if (message.read !== false) {
+      obj.read = message.read;
+    }
+    if (message.write !== false) {
+      obj.write = message.write;
+    }
+    if (message.ingest !== false) {
+      obj.ingest = message.ingest;
+    }
+    return obj;
+  },
+
+  create<I extends Exact<DeepPartial<ServerApiKeyPermissions>, I>>(base?: I): ServerApiKeyPermissions {
+    return ServerApiKeyPermissions.fromPartial(base ?? ({} as any));
+  },
+  fromPartial<I extends Exact<DeepPartial<ServerApiKeyPermissions>, I>>(object: I): ServerApiKeyPermissions {
+    const message = createBaseServerApiKeyPermissions();
+    message.read = object.read ?? false;
+    message.write = object.write ?? false;
+    message.ingest = object.ingest ?? false;
+    return message;
+  },
+};
+
 function createBaseServerApiKey(): ServerApiKey {
   return {
     id: "",
@@ -4950,6 +5450,7 @@ function createBaseServerApiKey(): ServerApiKey {
     updatedAt: undefined,
     createdBy: "",
     lastUsedAt: undefined,
+    permissions: undefined,
   };
 }
 
@@ -4985,6 +5486,9 @@ export const ServerApiKey: MessageFns<ServerApiKey> = {
     if (message.lastUsedAt !== undefined) {
       Timestamp.encode(toTimestamp(message.lastUsedAt), writer.uint32(82).fork()).join();
     }
+    if (message.permissions !== undefined) {
+      ServerApiKeyPermissions.encode(message.permissions, writer.uint32(90).fork()).join();
+    }
     return writer;
   },
 
@@ -5081,6 +5585,14 @@ export const ServerApiKey: MessageFns<ServerApiKey> = {
             message.lastUsedAt = fromTimestamp(Timestamp.decode(reader, reader.uint32()));
             continue;
           }
+          case 11: {
+            if (tag !== 90) {
+              break;
+            }
+
+            message.permissions = ServerApiKeyPermissions.decode(reader, reader.uint32());
+            continue;
+          }
         }
         if ((tag & 7) === 4 || tag === 0) {
           break;
@@ -5129,6 +5641,7 @@ export const ServerApiKey: MessageFns<ServerApiKey> = {
         : isSet(object.last_used_at)
         ? fromJsonTimestamp(object.last_used_at)
         : undefined,
+      permissions: isSet(object.permissions) ? ServerApiKeyPermissions.fromJSON(object.permissions) : undefined,
     };
   },
 
@@ -5164,6 +5677,9 @@ export const ServerApiKey: MessageFns<ServerApiKey> = {
     if (message.lastUsedAt !== undefined) {
       obj.lastUsedAt = message.lastUsedAt.toISOString();
     }
+    if (message.permissions !== undefined) {
+      obj.permissions = ServerApiKeyPermissions.toJSON(message.permissions);
+    }
     return obj;
   },
 
@@ -5182,6 +5698,9 @@ export const ServerApiKey: MessageFns<ServerApiKey> = {
     message.updatedAt = object.updatedAt ?? undefined;
     message.createdBy = object.createdBy ?? "";
     message.lastUsedAt = object.lastUsedAt ?? undefined;
+    message.permissions = (object.permissions !== undefined && object.permissions !== null)
+      ? ServerApiKeyPermissions.fromPartial(object.permissions)
+      : undefined;
     return message;
   },
 };
@@ -8552,11 +9071,232 @@ export const RevokeCliSessionResponse: MessageFns<RevokeCliSessionResponse> = {
   },
 };
 
+function createBaseProductFeatures(): ProductFeatures {
+  return { betaInviteEnabled: false };
+}
+
+export const ProductFeatures: MessageFns<ProductFeatures> = {
+  encode(message: ProductFeatures, writer: BinaryWriter = new BinaryWriter()): BinaryWriter {
+    if (message.betaInviteEnabled !== false) {
+      writer.uint32(8).bool(message.betaInviteEnabled);
+    }
+    return writer;
+  },
+
+  decode(input: BinaryReader | Uint8Array, length?: number): ProductFeatures {
+    const reader = input instanceof BinaryReader ? input : new BinaryReader(input);
+    const previousRecursionDepth = (reader as any).__tsProtoDecodeDepth ?? 0;
+    if (previousRecursionDepth >= 100) {
+      throw new globalThis.Error("protobuf decode recursion limit exceeded");
+    }
+    (reader as any).__tsProtoDecodeDepth = previousRecursionDepth + 1;
+    try {
+      const end = length === undefined ? reader.len : reader.pos + length;
+      const message = createBaseProductFeatures();
+      while (reader.pos < end) {
+        const tag = reader.uint32();
+        switch (tag >>> 3) {
+          case 1: {
+            if (tag !== 8) {
+              break;
+            }
+
+            message.betaInviteEnabled = reader.bool();
+            continue;
+          }
+        }
+        if ((tag & 7) === 4 || tag === 0) {
+          break;
+        }
+        reader.skip(tag & 7);
+      }
+      return message;
+    } finally {
+      (reader as any).__tsProtoDecodeDepth = previousRecursionDepth;
+    }
+  },
+
+  fromJSON(object: any): ProductFeatures {
+    return {
+      betaInviteEnabled: isSet(object.betaInviteEnabled)
+        ? globalThis.Boolean(object.betaInviteEnabled)
+        : isSet(object.beta_invite_enabled)
+        ? globalThis.Boolean(object.beta_invite_enabled)
+        : false,
+    };
+  },
+
+  toJSON(message: ProductFeatures): unknown {
+    const obj: any = {};
+    if (message.betaInviteEnabled !== false) {
+      obj.betaInviteEnabled = message.betaInviteEnabled;
+    }
+    return obj;
+  },
+
+  create<I extends Exact<DeepPartial<ProductFeatures>, I>>(base?: I): ProductFeatures {
+    return ProductFeatures.fromPartial(base ?? ({} as any));
+  },
+  fromPartial<I extends Exact<DeepPartial<ProductFeatures>, I>>(object: I): ProductFeatures {
+    const message = createBaseProductFeatures();
+    message.betaInviteEnabled = object.betaInviteEnabled ?? false;
+    return message;
+  },
+};
+
+function createBaseGetProductFeaturesRequest(): GetProductFeaturesRequest {
+  return {};
+}
+
+export const GetProductFeaturesRequest: MessageFns<GetProductFeaturesRequest> = {
+  encode(_: GetProductFeaturesRequest, writer: BinaryWriter = new BinaryWriter()): BinaryWriter {
+    return writer;
+  },
+
+  decode(input: BinaryReader | Uint8Array, length?: number): GetProductFeaturesRequest {
+    const reader = input instanceof BinaryReader ? input : new BinaryReader(input);
+    const previousRecursionDepth = (reader as any).__tsProtoDecodeDepth ?? 0;
+    if (previousRecursionDepth >= 100) {
+      throw new globalThis.Error("protobuf decode recursion limit exceeded");
+    }
+    (reader as any).__tsProtoDecodeDepth = previousRecursionDepth + 1;
+    try {
+      const end = length === undefined ? reader.len : reader.pos + length;
+      const message = createBaseGetProductFeaturesRequest();
+      while (reader.pos < end) {
+        const tag = reader.uint32();
+        switch (tag >>> 3) {
+        }
+        if ((tag & 7) === 4 || tag === 0) {
+          break;
+        }
+        reader.skip(tag & 7);
+      }
+      return message;
+    } finally {
+      (reader as any).__tsProtoDecodeDepth = previousRecursionDepth;
+    }
+  },
+
+  fromJSON(_: any): GetProductFeaturesRequest {
+    return {};
+  },
+
+  toJSON(_: GetProductFeaturesRequest): unknown {
+    const obj: any = {};
+    return obj;
+  },
+
+  create<I extends Exact<DeepPartial<GetProductFeaturesRequest>, I>>(base?: I): GetProductFeaturesRequest {
+    return GetProductFeaturesRequest.fromPartial(base ?? ({} as any));
+  },
+  fromPartial<I extends Exact<DeepPartial<GetProductFeaturesRequest>, I>>(_: I): GetProductFeaturesRequest {
+    const message = createBaseGetProductFeaturesRequest();
+    return message;
+  },
+};
+
+function createBaseGetProductFeaturesResponse(): GetProductFeaturesResponse {
+  return { status: undefined, features: undefined };
+}
+
+export const GetProductFeaturesResponse: MessageFns<GetProductFeaturesResponse> = {
+  encode(message: GetProductFeaturesResponse, writer: BinaryWriter = new BinaryWriter()): BinaryWriter {
+    if (message.status !== undefined) {
+      ResponseStatus.encode(message.status, writer.uint32(10).fork()).join();
+    }
+    if (message.features !== undefined) {
+      ProductFeatures.encode(message.features, writer.uint32(18).fork()).join();
+    }
+    return writer;
+  },
+
+  decode(input: BinaryReader | Uint8Array, length?: number): GetProductFeaturesResponse {
+    const reader = input instanceof BinaryReader ? input : new BinaryReader(input);
+    const previousRecursionDepth = (reader as any).__tsProtoDecodeDepth ?? 0;
+    if (previousRecursionDepth >= 100) {
+      throw new globalThis.Error("protobuf decode recursion limit exceeded");
+    }
+    (reader as any).__tsProtoDecodeDepth = previousRecursionDepth + 1;
+    try {
+      const end = length === undefined ? reader.len : reader.pos + length;
+      const message = createBaseGetProductFeaturesResponse();
+      while (reader.pos < end) {
+        const tag = reader.uint32();
+        switch (tag >>> 3) {
+          case 1: {
+            if (tag !== 10) {
+              break;
+            }
+
+            message.status = ResponseStatus.decode(reader, reader.uint32());
+            continue;
+          }
+          case 2: {
+            if (tag !== 18) {
+              break;
+            }
+
+            message.features = ProductFeatures.decode(reader, reader.uint32());
+            continue;
+          }
+        }
+        if ((tag & 7) === 4 || tag === 0) {
+          break;
+        }
+        reader.skip(tag & 7);
+      }
+      return message;
+    } finally {
+      (reader as any).__tsProtoDecodeDepth = previousRecursionDepth;
+    }
+  },
+
+  fromJSON(object: any): GetProductFeaturesResponse {
+    return {
+      status: isSet(object.status) ? ResponseStatus.fromJSON(object.status) : undefined,
+      features: isSet(object.features) ? ProductFeatures.fromJSON(object.features) : undefined,
+    };
+  },
+
+  toJSON(message: GetProductFeaturesResponse): unknown {
+    const obj: any = {};
+    if (message.status !== undefined) {
+      obj.status = ResponseStatus.toJSON(message.status);
+    }
+    if (message.features !== undefined) {
+      obj.features = ProductFeatures.toJSON(message.features);
+    }
+    return obj;
+  },
+
+  create<I extends Exact<DeepPartial<GetProductFeaturesResponse>, I>>(base?: I): GetProductFeaturesResponse {
+    return GetProductFeaturesResponse.fromPartial(base ?? ({} as any));
+  },
+  fromPartial<I extends Exact<DeepPartial<GetProductFeaturesResponse>, I>>(object: I): GetProductFeaturesResponse {
+    const message = createBaseGetProductFeaturesResponse();
+    message.status = (object.status !== undefined && object.status !== null)
+      ? ResponseStatus.fromPartial(object.status)
+      : undefined;
+    message.features = (object.features !== undefined && object.features !== null)
+      ? ProductFeatures.fromPartial(object.features)
+      : undefined;
+    return message;
+  },
+};
+
 export interface AccountGatewayService {
   /** Authentication */
   Logon(request: LogonRequest, metadata?: Metadata): Promise<LogonResponse>;
+  /**
+   * GetProductFeatures returns this gateway's product feature flags (e.g. beta-invite gating). The
+   * product is the gateway's fixed deployment identity, never a request field. Public: the pre-auth
+   * signup page reads it to decide whether to show the invite-code gate.
+   */
+  GetProductFeatures(request: GetProductFeaturesRequest, metadata?: Metadata): Promise<GetProductFeaturesResponse>;
   /** Project operations */
   CreateProject(request: CreateProjectRequest, metadata?: Metadata): Promise<CreateProjectResponse>;
+  RevealServerApiKey(request: RevealServerApiKeyRequest, metadata?: Metadata): Promise<RevealServerApiKeyResponse>;
   ListProjects(request: ListProjectsRequest, metadata?: Metadata): Promise<ListProjectsResponse>;
   UpdateProject(request: UpdateProjectRequest, metadata?: Metadata): Promise<UpdateProjectResponse>;
   DeleteProject(request: DeleteProjectRequest, metadata?: Metadata): Promise<DeleteProjectResponse>;
@@ -8609,7 +9349,9 @@ export class AccountGatewayServiceClientImpl implements AccountGatewayService {
     this.service = opts?.service || AccountGatewayServiceServiceName;
     this.rpc = rpc;
     this.Logon = this.Logon.bind(this);
+    this.GetProductFeatures = this.GetProductFeatures.bind(this);
     this.CreateProject = this.CreateProject.bind(this);
+    this.RevealServerApiKey = this.RevealServerApiKey.bind(this);
     this.ListProjects = this.ListProjects.bind(this);
     this.UpdateProject = this.UpdateProject.bind(this);
     this.DeleteProject = this.DeleteProject.bind(this);
@@ -8645,12 +9387,24 @@ export class AccountGatewayServiceClientImpl implements AccountGatewayService {
     return promise.then((data) => LogonResponse.decode(new BinaryReader(data)));
   }
 
+  GetProductFeatures(request: GetProductFeaturesRequest, metadata?: Metadata): Promise<GetProductFeaturesResponse> {
+    const data = GetProductFeaturesRequest.encode(request).finish();
+    const promise = this.rpc.request(this.service, "GetProductFeatures", data, metadata);
+    return promise.then((data) => GetProductFeaturesResponse.decode(new BinaryReader(data)));
+  }
+
   CreateProject(request: CreateProjectRequest, metadata?: Metadata): Promise<CreateProjectResponse> {
     const data = CreateProjectRequest.encode(request).finish();
     const promise = this.rpc.request(this.service, "CreateProject", data, metadata);
     return promise.then((data) => CreateProjectResponse.decode(new BinaryReader(data)));
   }
 
+  RevealServerApiKey(request: RevealServerApiKeyRequest, metadata?: Metadata): Promise<RevealServerApiKeyResponse> {
+    const data = RevealServerApiKeyRequest.encode(request).finish();
+    const promise = this.rpc.request(this.service, "RevealServerApiKey", data, metadata);
+    return promise.then((data) => RevealServerApiKeyResponse.decode(new BinaryReader(data)));
+  }
+
   ListProjects(request: ListProjectsRequest, metadata?: Metadata): Promise<ListProjectsResponse> {
     const data = ListProjectsRequest.encode(request).finish();
     const promise = this.rpc.request(this.service, "ListProjects", data, metadata);