@noresponse/node 8.4.1 → 9.1.0

package/dist/esm/models/invite-list.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"invite-list.d.ts","sourceRoot":"","sources":["../../../src/models/invite-list.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,aAAa,CAAC;AAEjC,OAAO,EAAE,MAAM,IAAI,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AACtE,OAAO,EAAE,MAAM,EAAwB,MAAM,aAAa,CAAC;AAE3D;;GAEG;AACH,MAAM,MAAM,UAAU,GAAG;IACvB,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;CACtB,CAAC;AAEF,gBAAgB;AAChB,eAAO,MAAM,wBAAwB,EAAE,CAAC,CAAC,WAAW,CAAC,UAAU,EAAE,OAAO,CAGpE,CAAC;AAEL,wBAAgB,kBAAkB,CAChC,UAAU,EAAE,MAAM,GACjB,eAAe,CAAC,UAAU,EAAE,kBAAkB,CAAC,CAMjD"}

package/dist/esm/models/invite-list.js

@@ -0,0 +1,12 @@
+import * as z from "zod/v4-mini";
+import { safeParse } from "../lib/schemas.js";
+import { Invite$inboundSchema } from "./invite.js";
+/** @internal */
+export const InviteList$inboundSchema = z
+    .object({
+    items: z.array(Invite$inboundSchema),
+});
+export function inviteListFromJSON(jsonString) {
+    return safeParse(jsonString, (x) => InviteList$inboundSchema.parse(JSON.parse(x)), `Failed to parse 'InviteList' from JSON`);
+}
+//# sourceMappingURL=invite-list.js.map

package/dist/esm/models/invite-list.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"invite-list.js","sourceRoot":"","sources":["../../../src/models/invite-list.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAG9C,OAAO,EAAU,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAS3D,gBAAgB;AAChB,MAAM,CAAC,MAAM,wBAAwB,GAAuC,CAAC;KAC1E,MAAM,CAAC;IACN,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC;CACrC,CAAC,CAAC;AAEL,MAAM,UAAU,kBAAkB,CAChC,UAAkB,EAC+B;IACjD,OAAO,SAAS,CACd,UAAU,EACV,CAAC,CAAC,EAAE,EAAE,CAAC,wBAAwB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EACpD,wCAAwC,CACzC,CAAC;AAAA,CACH"}

package/dist/esm/models/invite-request.d.ts

@@ -0,0 +1,55 @@
+import * as z from "zod/v4-mini";
+import { ClosedEnum } from "../types/enums.js";
+import { Role } from "./role.js";
+export declare const InviteRequestEnvironment: {
+    readonly Live: "live";
+    readonly Test: "test";
+};
+export type InviteRequestEnvironment = ClosedEnum<typeof InviteRequestEnvironment>;
+export declare const InviteRequestDeniedAction: {
+    readonly EvidenceRead: "evidence.read";
+    readonly ExportsRead: "exports.read";
+    readonly PolicyPublish: "policy.publish";
+};
+export type InviteRequestDeniedAction = ClosedEnum<typeof InviteRequestDeniedAction>;
+/**
+ * POST /v1/workspaces/{workspace_id}/invites body. Creates an invite for role and returns its token once. email is where the console sends the token and is not checked against the user who accepts. With external_user_id set, only that user can accept.
+ */
+export type InviteRequest = {
+    /**
+     * A built-in capability set. Specialist roles are independent; effective access is returned by GET /v1/workspaces/{workspace_id}/capabilities.
+     */
+    role: Role;
+    /**
+     * Where the console sends the invite. Informational: it is not matched against the accepting user.
+     */
+    email?: string | undefined;
+    /**
+     * The user's id at the identity provider the console signs people in with: 1 to 256 printable ASCII characters with no space, compared exactly.
+     */
+    externalUserId?: string | undefined;
+    /**
+     * Allowed data environments. Invites default to both. Omitted on member PATCH preserves the current grants; owners retain both.
+     */
+    environments?: Array<InviteRequestEnvironment> | undefined;
+    /**
+     * Independent removals from a built-in preset: sensitive evidence, exports, or active policy publication. Owners retain full authority. Omitted member updates preserve exclusions.
+     */
+    deniedActions?: Array<InviteRequestDeniedAction> | undefined;
+};
+/** @internal */
+export declare const InviteRequestEnvironment$outboundSchema: z.ZodMiniEnum<typeof InviteRequestEnvironment>;
+/** @internal */
+export declare const InviteRequestDeniedAction$outboundSchema: z.ZodMiniEnum<typeof InviteRequestDeniedAction>;
+/** @internal */
+export type InviteRequest$Outbound = {
+    role: string;
+    email?: string | undefined;
+    external_user_id?: string | undefined;
+    environments?: Array<string> | undefined;
+    denied_actions?: Array<string> | undefined;
+};
+/** @internal */
+export declare const InviteRequest$outboundSchema: z.ZodMiniType<InviteRequest$Outbound, InviteRequest>;
+export declare function inviteRequestToJSON(inviteRequest: InviteRequest): string;
+//# sourceMappingURL=invite-request.d.ts.map

package/dist/esm/models/invite-request.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"invite-request.d.ts","sourceRoot":"","sources":["../../../src/models/invite-request.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,aAAa,CAAC;AAEjC,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,IAAI,EAAuB,MAAM,WAAW,CAAC;AAEtD,eAAO,MAAM,wBAAwB;;;CAG3B,CAAC;AACX,MAAM,MAAM,wBAAwB,GAAG,UAAU,CAC/C,OAAO,wBAAwB,CAChC,CAAC;AAEF,eAAO,MAAM,yBAAyB;;;;CAI5B,CAAC;AACX,MAAM,MAAM,yBAAyB,GAAG,UAAU,CAChD,OAAO,yBAAyB,CACjC,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,aAAa,GAAG;IAC1B;;OAEG;IACH,IAAI,EAAE,IAAI,CAAC;IACX;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B;;OAEG;IACH,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC;;OAEG;IACH,YAAY,CAAC,EAAE,KAAK,CAAC,wBAAwB,CAAC,GAAG,SAAS,CAAC;IAC3D;;OAEG;IACH,aAAa,CAAC,EAAE,KAAK,CAAC,yBAAyB,CAAC,GAAG,SAAS,CAAC;CAC9D,CAAC;AAEF,gBAAgB;AAChB,eAAO,MAAM,uCAAuC,EAAE,CAAC,CAAC,WAAW,CACjE,OAAO,wBAAwB,CACG,CAAC;AAErC,gBAAgB;AAChB,eAAO,MAAM,wCAAwC,EAAE,CAAC,CAAC,WAAW,CAClE,OAAO,yBAAyB,CACG,CAAC;AAEtC,gBAAgB;AAChB,MAAM,MAAM,sBAAsB,GAAG;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,YAAY,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC;IACzC,cAAc,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC;CAC5C,CAAC;AAEF,gBAAgB;AAChB,eAAO,MAAM,4BAA4B,EAAE,CAAC,CAAC,WAAW,CACtD,sBAAsB,EACtB,aAAa,CAiBd,CAAC;AAEF,wBAAgB,mBAAmB,CAAC,aAAa,EAAE,aAAa,GAAG,MAAM,CAExE"}

package/dist/esm/models/invite-request.js

@@ -0,0 +1,33 @@
+import * as z from "zod/v4-mini";
+import { remap as remap$ } from "../lib/primitives.js";
+import { Role$outboundSchema } from "./role.js";
+export const InviteRequestEnvironment = {
+    Live: "live",
+    Test: "test",
+};
+export const InviteRequestDeniedAction = {
+    EvidenceRead: "evidence.read",
+    ExportsRead: "exports.read",
+    PolicyPublish: "policy.publish",
+};
+/** @internal */
+export const InviteRequestEnvironment$outboundSchema = z.enum(InviteRequestEnvironment);
+/** @internal */
+export const InviteRequestDeniedAction$outboundSchema = z.enum(InviteRequestDeniedAction);
+/** @internal */
+export const InviteRequest$outboundSchema = z.pipe(z.object({
+    role: Role$outboundSchema,
+    email: z.optional(z.string()),
+    externalUserId: z.optional(z.string()),
+    environments: z.optional(z.array(InviteRequestEnvironment$outboundSchema)),
+    deniedActions: z.optional(z.array(InviteRequestDeniedAction$outboundSchema)),
+}), z.transform((v) => {
+    return remap$(v, {
+        externalUserId: "external_user_id",
+        deniedActions: "denied_actions",
+    });
+}));
+export function inviteRequestToJSON(inviteRequest) {
+    return JSON.stringify(InviteRequest$outboundSchema.parse(inviteRequest));
+}
+//# sourceMappingURL=invite-request.js.map

package/dist/esm/models/invite-request.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"invite-request.js","sourceRoot":"","sources":["../../../src/models/invite-request.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,KAAK,IAAI,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAEvD,OAAO,EAAQ,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAEtD,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,MAAM;CACJ,CAAC;AAKX,MAAM,CAAC,MAAM,yBAAyB,GAAG;IACvC,YAAY,EAAE,eAAe;IAC7B,WAAW,EAAE,cAAc;IAC3B,aAAa,EAAE,gBAAgB;CACvB,CAAC;AA+BX,gBAAgB;AAChB,MAAM,CAAC,MAAM,uCAAuC,GAEhD,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;AAErC,gBAAgB;AAChB,MAAM,CAAC,MAAM,wCAAwC,GAEjD,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;AAWtC,gBAAgB;AAChB,MAAM,CAAC,MAAM,4BAA4B,GAGrC,CAAC,CAAC,IAAI,CACR,CAAC,CAAC,MAAM,CAAC;IACP,IAAI,EAAE,mBAAmB;IACzB,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC7B,cAAc,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACtC,YAAY,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC1E,aAAa,EAAE,CAAC,CAAC,QAAQ,CACvB,CAAC,CAAC,KAAK,CAAC,wCAAwC,CAAC,CAClD;CACF,CAAC,EACF,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IACjB,OAAO,MAAM,CAAC,CAAC,EAAE;QACf,cAAc,EAAE,kBAAkB;QAClC,aAAa,EAAE,gBAAgB;KAChC,CAAC,CAAC;AAAA,CACJ,CAAC,CACH,CAAC;AAEF,MAAM,UAAU,mBAAmB,CAAC,aAA4B,EAAU;IACxE,OAAO,IAAI,CAAC,SAAS,CAAC,4BAA4B,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC;AAAA,CAC1E"}

package/dist/esm/models/invite-resend-request.d.ts

@@ -0,0 +1,8 @@
+import * as z from "zod/v4-mini";
+export type InviteResendRequest = {};
+/** @internal */
+export type InviteResendRequest$Outbound = {};
+/** @internal */
+export declare const InviteResendRequest$outboundSchema: z.ZodMiniType<InviteResendRequest$Outbound, InviteResendRequest>;
+export declare function inviteResendRequestToJSON(inviteResendRequest: InviteResendRequest): string;
+//# sourceMappingURL=invite-resend-request.d.ts.map

package/dist/esm/models/invite-resend-request.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"invite-resend-request.d.ts","sourceRoot":"","sources":["../../../src/models/invite-resend-request.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,aAAa,CAAC;AAEjC,MAAM,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAErC,gBAAgB;AAChB,MAAM,MAAM,4BAA4B,GAAG,EAAE,CAAC;AAE9C,gBAAgB;AAChB,eAAO,MAAM,kCAAkC,EAAE,CAAC,CAAC,WAAW,CAC5D,4BAA4B,EAC5B,mBAAmB,CACL,CAAC;AAEjB,wBAAgB,yBAAyB,CACvC,mBAAmB,EAAE,mBAAmB,GACvC,MAAM,CAIR"}

package/dist/esm/models/invite-resend-request.js

@@ -0,0 +1,7 @@
+import * as z from "zod/v4-mini";
+/** @internal */
+export const InviteResendRequest$outboundSchema = z.object({});
+export function inviteResendRequestToJSON(inviteResendRequest) {
+    return JSON.stringify(InviteResendRequest$outboundSchema.parse(inviteResendRequest));
+}
+//# sourceMappingURL=invite-resend-request.js.map

package/dist/esm/models/invite-resend-request.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"invite-resend-request.js","sourceRoot":"","sources":["../../../src/models/invite-resend-request.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,aAAa,CAAC;AAOjC,gBAAgB;AAChB,MAAM,CAAC,MAAM,kCAAkC,GAG3C,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAEjB,MAAM,UAAU,yBAAyB,CACvC,mBAAwC,EAChC;IACR,OAAO,IAAI,CAAC,SAAS,CACnB,kCAAkC,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAC9D,CAAC;AAAA,CACH"}

package/dist/esm/models/invite.d.ts

@@ -0,0 +1,71 @@
+import * as z from "zod/v4-mini";
+import { OpenEnum } from "../types/enums.js";
+import { Result as SafeParseResult } from "../types/fp.js";
+import { SDKValidationError } from "./errors/sdk-validation-error.js";
+import { Role } from "./role.js";
+export declare const InviteEnvironment: {
+    readonly Live: "live";
+    readonly Test: "test";
+};
+export type InviteEnvironment = OpenEnum<typeof InviteEnvironment>;
+export declare const InviteDeniedAction: {
+    readonly EvidenceRead: "evidence.read";
+    readonly ExportsRead: "exports.read";
+    readonly PolicyPublish: "policy.publish";
+};
+export type InviteDeniedAction = OpenEnum<typeof InviteDeniedAction>;
+/**
+ * A pending workspace invitation. Creating or reissuing it returns a token once; lists omit it. The token can be accepted once before expiry and is invalidated on revocation or reissue. Token state does not establish email delivery.
+ */
+export type Invite = {
+    /**
+     * Opaque, server-assigned invite id: inv_ and a 26-character ULID.
+     */
+    id: string;
+    /**
+     * The workspace id, which is also its live environment's workspace id; the test environment's is the same id with :test appended. A workspace created through the API is tnt_ and a 26-character ULID.
+     */
+    workspaceId: string;
+    /**
+     * A built-in capability set. Specialist roles are independent; effective access is returned by GET /v1/workspaces/{workspace_id}/capabilities.
+     */
+    role: Role;
+    /**
+     * Where the console sends the invite. Informational: it is not matched against the accepting user.
+     */
+    email?: string | undefined;
+    /**
+     * The user's id at the identity provider the console signs people in with: 1 to 256 printable ASCII characters with no space, compared exactly.
+     */
+    externalUserId?: string | undefined;
+    /**
+     * The stable member id that issued this invite, or the authenticated live API key prefix for members_manage automation. Reissuing preserves the original creator; the audit event names the reissuing actor.
+     */
+    createdBy: string;
+    createdAt: string;
+    expiresAt: string;
+    /**
+     * The invite token: nrinv_, the invite id's ULID, _ and 43 unpadded base64url characters (32 random bytes). The new member's console sends it to POST /v1/invites/accept.
+     */
+    token?: string | undefined;
+    /**
+     * Allowed data environments. Invites default to both. Omitted on member PATCH preserves the current grants; owners retain both.
+     */
+    environments?: Array<InviteEnvironment> | undefined;
+    /**
+     * Independent removals from a built-in preset: sensitive evidence, exports, or active policy publication. Owners retain full authority. Omitted member updates preserve exclusions.
+     */
+    deniedActions?: Array<InviteDeniedAction> | undefined;
+    /**
+     * Last token reissue, not proof of email delivery.
+     */
+    reissuedAt?: string | undefined;
+};
+/** @internal */
+export declare const InviteEnvironment$inboundSchema: z.ZodMiniType<InviteEnvironment, unknown>;
+/** @internal */
+export declare const InviteDeniedAction$inboundSchema: z.ZodMiniType<InviteDeniedAction, unknown>;
+/** @internal */
+export declare const Invite$inboundSchema: z.ZodMiniType<Invite, unknown>;
+export declare function inviteFromJSON(jsonString: string): SafeParseResult<Invite, SDKValidationError>;
+//# sourceMappingURL=invite.d.ts.map

package/dist/esm/models/invite.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"invite.d.ts","sourceRoot":"","sources":["../../../src/models/invite.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,aAAa,CAAC;AAIjC,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,EAAE,MAAM,IAAI,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAE3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AACtE,OAAO,EAAE,IAAI,EAAsB,MAAM,WAAW,CAAC;AAErD,eAAO,MAAM,iBAAiB;;;CAGpB,CAAC;AACX,MAAM,MAAM,iBAAiB,GAAG,QAAQ,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAEnE,eAAO,MAAM,kBAAkB;;;;CAIrB,CAAC;AACX,MAAM,MAAM,kBAAkB,GAAG,QAAQ,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAErE;;GAEG;AACH,MAAM,MAAM,MAAM,GAAG;IACnB;;OAEG;IACH,EAAE,EAAE,MAAM,CAAC;IACX;;OAEG;IACH,WAAW,EAAE,MAAM,CAAC;IACpB;;OAEG;IACH,IAAI,EAAE,IAAI,CAAC;IACX;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B;;OAEG;IACH,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B;;OAEG;IACH,YAAY,CAAC,EAAE,KAAK,CAAC,iBAAiB,CAAC,GAAG,SAAS,CAAC;IACpD;;OAEG;IACH,aAAa,CAAC,EAAE,KAAK,CAAC,kBAAkB,CAAC,GAAG,SAAS,CAAC;IACtD;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACjC,CAAC;AAEF,gBAAgB;AAChB,eAAO,MAAM,+BAA+B,EAAE,CAAC,CAAC,WAAW,CACzD,iBAAiB,EACjB,OAAO,CACqC,CAAC;AAE/C,gBAAgB;AAChB,eAAO,MAAM,gCAAgC,EAAE,CAAC,CAAC,WAAW,CAC1D,kBAAkB,EAClB,OAAO,CACsC,CAAC;AAEhD,gBAAgB;AAChB,eAAO,MAAM,oBAAoB,EAAE,CAAC,CAAC,WAAW,CAAC,MAAM,EAAE,OAAO,CA0B/D,CAAC;AAEF,wBAAgB,cAAc,CAC5B,UAAU,EAAE,MAAM,GACjB,eAAe,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAM7C"}

package/dist/esm/models/invite.js

@@ -0,0 +1,48 @@
+import * as z from "zod/v4-mini";
+import { remap as remap$ } from "../lib/primitives.js";
+import { safeParse } from "../lib/schemas.js";
+import * as openEnums from "../types/enums.js";
+import * as types from "../types/primitives.js";
+import { Role$inboundSchema } from "./role.js";
+export const InviteEnvironment = {
+    Live: "live",
+    Test: "test",
+};
+export const InviteDeniedAction = {
+    EvidenceRead: "evidence.read",
+    ExportsRead: "exports.read",
+    PolicyPublish: "policy.publish",
+};
+/** @internal */
+export const InviteEnvironment$inboundSchema = openEnums.inboundSchema(InviteEnvironment);
+/** @internal */
+export const InviteDeniedAction$inboundSchema = openEnums.inboundSchema(InviteDeniedAction);
+/** @internal */
+export const Invite$inboundSchema = z.pipe(z.object({
+    id: types.string(),
+    workspace_id: types.string(),
+    role: Role$inboundSchema,
+    email: types.optional(types.string()),
+    external_user_id: types.optional(types.string()),
+    created_by: types.string(),
+    created_at: types.string(),
+    expires_at: types.string(),
+    token: types.optional(types.string()),
+    environments: types.optional(z.array(InviteEnvironment$inboundSchema)),
+    denied_actions: types.optional(z.array(InviteDeniedAction$inboundSchema)),
+    reissued_at: types.optional(types.string()),
+}), z.transform((v) => {
+    return remap$(v, {
+        "workspace_id": "workspaceId",
+        "external_user_id": "externalUserId",
+        "created_by": "createdBy",
+        "created_at": "createdAt",
+        "expires_at": "expiresAt",
+        "denied_actions": "deniedActions",
+        "reissued_at": "reissuedAt",
+    });
+}));
+export function inviteFromJSON(jsonString) {
+    return safeParse(jsonString, (x) => Invite$inboundSchema.parse(JSON.parse(x)), `Failed to parse 'Invite' from JSON`);
+}
+//# sourceMappingURL=invite.js.map

package/dist/esm/models/invite.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"invite.js","sourceRoot":"","sources":["../../../src/models/invite.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,KAAK,IAAI,MAAM,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAC9C,OAAO,KAAK,SAAS,MAAM,mBAAmB,CAAC;AAG/C,OAAO,KAAK,KAAK,MAAM,wBAAwB,CAAC;AAEhD,OAAO,EAAQ,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAErD,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,MAAM;CACJ,CAAC;AAGX,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,YAAY,EAAE,eAAe;IAC7B,WAAW,EAAE,cAAc;IAC3B,aAAa,EAAE,gBAAgB;CACvB,CAAC;AAmDX,gBAAgB;AAChB,MAAM,CAAC,MAAM,+BAA+B,GAGxC,SAAS,CAAC,aAAa,CAAC,iBAAiB,CAAC,CAAC;AAE/C,gBAAgB;AAChB,MAAM,CAAC,MAAM,gCAAgC,GAGzC,SAAS,CAAC,aAAa,CAAC,kBAAkB,CAAC,CAAC;AAEhD,gBAAgB;AAChB,MAAM,CAAC,MAAM,oBAAoB,GAAmC,CAAC,CAAC,IAAI,CACxE,CAAC,CAAC,MAAM,CAAC;IACP,EAAE,EAAE,KAAK,CAAC,MAAM,EAAE;IAClB,YAAY,EAAE,KAAK,CAAC,MAAM,EAAE;IAC5B,IAAI,EAAE,kBAAkB;IACxB,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;IACrC,gBAAgB,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;IAChD,UAAU,EAAE,KAAK,CAAC,MAAM,EAAE;IAC1B,UAAU,EAAE,KAAK,CAAC,MAAM,EAAE;IAC1B,UAAU,EAAE,KAAK,CAAC,MAAM,EAAE;IAC1B,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;IACrC,YAAY,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACtE,cAAc,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACzE,WAAW,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;CAC5C,CAAC,EACF,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IACjB,OAAO,MAAM,CAAC,CAAC,EAAE;QACf,cAAc,EAAE,aAAa;QAC7B,kBAAkB,EAAE,gBAAgB;QACpC,YAAY,EAAE,WAAW;QACzB,YAAY,EAAE,WAAW;QACzB,YAAY,EAAE,WAAW;QACzB,gBAAgB,EAAE,eAAe;QACjC,aAAa,EAAE,YAAY;KAC5B,CAAC,CAAC;AAAA,CACJ,CAAC,CACH,CAAC;AAEF,MAAM,UAAU,cAAc,CAC5B,UAAkB,EAC2B;IAC7C,OAAO,SAAS,CACd,UAAU,EACV,CAAC,CAAC,EAAE,EAAE,CAAC,oBAAoB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAChD,oCAAoC,CACrC,CAAC;AAAA,CACH"}

package/dist/esm/models/key-actor.d.ts

@@ -0,0 +1,22 @@
+import * as z from "zod/v4-mini";
+import { Result as SafeParseResult } from "../types/fp.js";
+import { SDKValidationError } from "./errors/sdk-validation-error.js";
+export type KeyActor = {
+    type: "api_key";
+    /**
+     * The public id of the workspace API key that made the change.
+     */
+    keyId: string;
+};
+/** @internal */
+export declare const KeyActor$inboundSchema: z.ZodMiniType<KeyActor, unknown>;
+/** @internal */
+export type KeyActor$Outbound = {
+    type: "api_key";
+    key_id: string;
+};
+/** @internal */
+export declare const KeyActor$outboundSchema: z.ZodMiniType<KeyActor$Outbound, KeyActor>;
+export declare function keyActorToJSON(keyActor: KeyActor): string;
+export declare function keyActorFromJSON(jsonString: string): SafeParseResult<KeyActor, SDKValidationError>;
+//# sourceMappingURL=key-actor.d.ts.map

package/dist/esm/models/key-actor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"key-actor.d.ts","sourceRoot":"","sources":["../../../src/models/key-actor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,aAAa,CAAC;AAGjC,OAAO,EAAE,MAAM,IAAI,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAE3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AAEtE,MAAM,MAAM,QAAQ,GAAG;IACrB,IAAI,EAAE,SAAS,CAAC;IAChB;;OAEG;IACH,KAAK,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,gBAAgB;AAChB,eAAO,MAAM,sBAAsB,EAAE,CAAC,CAAC,WAAW,CAAC,QAAQ,EAAE,OAAO,CAUnE,CAAC;AACF,gBAAgB;AAChB,MAAM,MAAM,iBAAiB,GAAG;IAC9B,IAAI,EAAE,SAAS,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,gBAAgB;AAChB,eAAO,MAAM,uBAAuB,EAAE,CAAC,CAAC,WAAW,CACjD,iBAAiB,EACjB,QAAQ,CAWT,CAAC;AAEF,wBAAgB,cAAc,CAAC,QAAQ,EAAE,QAAQ,GAAG,MAAM,CAEzD;AACD,wBAAgB,gBAAgB,CAC9B,UAAU,EAAE,MAAM,GACjB,eAAe,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAM/C"}

package/dist/esm/models/key-actor.js

@@ -0,0 +1,29 @@
+import * as z from "zod/v4-mini";
+import { remap as remap$ } from "../lib/primitives.js";
+import { safeParse } from "../lib/schemas.js";
+import * as types from "../types/primitives.js";
+/** @internal */
+export const KeyActor$inboundSchema = z.pipe(z.object({
+    type: types.literal("api_key"),
+    key_id: types.string(),
+}), z.transform((v) => {
+    return remap$(v, {
+        "key_id": "keyId",
+    });
+}));
+/** @internal */
+export const KeyActor$outboundSchema = z.pipe(z.object({
+    type: z.literal("api_key"),
+    keyId: z.string(),
+}), z.transform((v) => {
+    return remap$(v, {
+        keyId: "key_id",
+    });
+}));
+export function keyActorToJSON(keyActor) {
+    return JSON.stringify(KeyActor$outboundSchema.parse(keyActor));
+}
+export function keyActorFromJSON(jsonString) {
+    return safeParse(jsonString, (x) => KeyActor$inboundSchema.parse(JSON.parse(x)), `Failed to parse 'KeyActor' from JSON`);
+}
+//# sourceMappingURL=key-actor.js.map

package/dist/esm/models/key-actor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"key-actor.js","sourceRoot":"","sources":["../../../src/models/key-actor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,KAAK,IAAI,MAAM,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAE9C,OAAO,KAAK,KAAK,MAAM,wBAAwB,CAAC;AAWhD,gBAAgB;AAChB,MAAM,CAAC,MAAM,sBAAsB,GAAqC,CAAC,CAAC,IAAI,CAC5E,CAAC,CAAC,MAAM,CAAC;IACP,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC;IAC9B,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE;CACvB,CAAC,EACF,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IACjB,OAAO,MAAM,CAAC,CAAC,EAAE;QACf,QAAQ,EAAE,OAAO;KAClB,CAAC,CAAC;AAAA,CACJ,CAAC,CACH,CAAC;AAOF,gBAAgB;AAChB,MAAM,CAAC,MAAM,uBAAuB,GAGhC,CAAC,CAAC,IAAI,CACR,CAAC,CAAC,MAAM,CAAC;IACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;IAC1B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;CAClB,CAAC,EACF,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IACjB,OAAO,MAAM,CAAC,CAAC,EAAE;QACf,KAAK,EAAE,QAAQ;KAChB,CAAC,CAAC;AAAA,CACJ,CAAC,CACH,CAAC;AAEF,MAAM,UAAU,cAAc,CAAC,QAAkB,EAAU;IACzD,OAAO,IAAI,CAAC,SAAS,CAAC,uBAAuB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;AAAA,CAChE;AACD,MAAM,UAAU,gBAAgB,CAC9B,UAAkB,EAC6B;IAC/C,OAAO,SAAS,CACd,UAAU,EACV,CAAC,CAAC,EAAE,EAAE,CAAC,sBAAsB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAClD,sCAAsC,CACvC,CAAC;AAAA,CACH"}

package/dist/esm/models/key-kind.d.ts

@@ -0,0 +1,12 @@
+import * as z from "zod/v4-mini";
+import { OpenEnum } from "../types/enums.js";
+export declare const KeyKind: {
+    readonly Service: "service";
+    readonly Personal: "personal";
+};
+export type KeyKind = OpenEnum<typeof KeyKind>;
+/** @internal */
+export declare const KeyKind$inboundSchema: z.ZodMiniType<KeyKind, unknown>;
+/** @internal */
+export declare const KeyKind$outboundSchema: z.ZodMiniType<string, KeyKind>;
+//# sourceMappingURL=key-kind.d.ts.map

package/dist/esm/models/key-kind.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"key-kind.d.ts","sourceRoot":"","sources":["../../../src/models/key-kind.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,aAAa,CAAC;AAEjC,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAE7C,eAAO,MAAM,OAAO;;;CAGV,CAAC;AACX,MAAM,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,OAAO,CAAC,CAAC;AAE/C,gBAAgB;AAChB,eAAO,MAAM,qBAAqB,EAAE,CAAC,CAAC,WAAW,CAAC,OAAO,EAAE,OAAO,CACzC,CAAC;AAC1B,gBAAgB;AAChB,eAAO,MAAM,sBAAsB,EAAE,CAAC,CAAC,WAAW,CAAC,MAAM,EAAE,OAAO,CACxC,CAAC"}

package/dist/esm/models/key-kind.js

@@ -0,0 +1,12 @@
+import * as openEnums from "../types/enums.js";
+export const KeyKind = {
+    Service: "service",
+    Personal: "personal",
+};
+/** @internal */
+export const KeyKind$inboundSchema = openEnums
+    .inboundSchema(KeyKind);
+/** @internal */
+export const KeyKind$outboundSchema = openEnums
+    .outboundSchema(KeyKind);
+//# sourceMappingURL=key-kind.js.map

package/dist/esm/models/key-kind.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"key-kind.js","sourceRoot":"","sources":["../../../src/models/key-kind.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,SAAS,MAAM,mBAAmB,CAAC;AAG/C,MAAM,CAAC,MAAM,OAAO,GAAG;IACrB,OAAO,EAAE,SAAS;IAClB,QAAQ,EAAE,UAAU;CACZ,CAAC;AAGX,gBAAgB;AAChB,MAAM,CAAC,MAAM,qBAAqB,GAAoC,SAAS;KAC5E,aAAa,CAAC,OAAO,CAAC,CAAC;AAC1B,gBAAgB;AAChB,MAAM,CAAC,MAAM,sBAAsB,GAAmC,SAAS;KAC5E,cAAc,CAAC,OAAO,CAAC,CAAC"}

package/dist/esm/models/key-request.d.ts

@@ -1,6 +1,7 @@
 import * as z from "zod/v4-mini";
 import { ClosedEnum } from "../types/enums.js";
 import { KeyEnvironment } from "./key-environment.js";
+import { KeyKind } from "./key-kind.js";
 export declare const KeyRequestScope: {
     readonly Assess: "assess";
     readonly History: "history";
@@ -9,10 +10,20 @@ export declare const KeyRequestScope: {
     readonly Detailed: "detailed";
     readonly Integrations: "integrations";
     readonly Management: "management";
+    readonly Audit: "audit";
+    readonly Usage: "usage";
+    readonly Investigate: "investigate";
+    readonly Evidence: "evidence";
+    readonly Exports: "exports";
+    readonly AuditManage: "audit_manage";
+    readonly Settings: "settings";
+    readonly PolicyPublish: "policy_publish";
+    readonly Members: "members";
+    readonly MembersManage: "members_manage";
 };
 export type KeyRequestScope = ClosedEnum<typeof KeyRequestScope>;
 /**
- * POST /v1/workspaces/{workspace_id}/keys body. Creates an API key in one environment of the workspace with the scopes named, and returns its secret once. A live key needs the admin or owner role; a test key needs developer or above. An API key with the management scope creates keys in its own environment with scopes it holds itself. Each scope may appear once.
+ * Creates a key whose scopes are bounded by the issuer capabilities in this environment. Delete is owner-only. A service key outlives its creator; a personal key belongs to the authenticated member and is revoked on membership or authority changes. request_id deduplicates creation: retry returns 200 metadata without the secret; changed parameters answer 409. Team scopes members and members_manage are explicitly workspace-wide, live-only, and delegated by a current full owner. Personal credentials cannot hold management or members_manage. Legacy management includes policy publication; use settings without policy_publish for configuration preparation and retention-only edits.
  */
 export type KeyRequest = {
     /**
@@ -23,6 +34,23 @@ export type KeyRequest = {
      * The key's scopes, each at most once.
      */
     scopes: Array<KeyRequestScope>;
+    /**
+     * Optional display name for this API key, at most 100 printable characters. Preserved on rotation.
+     */
+    name?: string | undefined;
+    /**
+     * Optional operational purpose, at most 200 printable characters without leading or trailing whitespace. Do not put secrets or personal data here. Preserved on rotation and included in the creation request fingerprint; omitted for older credentials.
+     */
+    purpose?: string | undefined;
+    kind?: KeyKind | undefined;
+    /**
+     * Between one minute and 365 days from now.
+     */
+    expiresAt?: string | undefined;
+    /**
+     * Caller-chosen identifier for one creation attempt, scoped to the issuing actor and environment. Use 1 to 256 printable ASCII characters without spaces. A retry with the same parameters returns the original key metadata with status 200 and no secret; changed parameters return 409.
+     */
+    requestId?: string | undefined;
 };
 /** @internal */
 export declare const KeyRequestScope$outboundSchema: z.ZodMiniEnum<typeof KeyRequestScope>;
@@ -30,6 +58,11 @@ export declare const KeyRequestScope$outboundSchema: z.ZodMiniEnum<typeof KeyReq
 export type KeyRequest$Outbound = {
     environment: string;
     scopes: Array<string>;
+    name?: string | undefined;
+    purpose?: string | undefined;
+    kind?: string | undefined;
+    expires_at?: string | undefined;
+    request_id?: string | undefined;
 };
 /** @internal */
 export declare const KeyRequest$outboundSchema: z.ZodMiniType<KeyRequest$Outbound, KeyRequest>;

package/dist/esm/models/key-request.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"key-request.d.ts","sourceRoot":"","sources":["../../../src/models/key-request.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EACL,cAAc,EAEf,MAAM,sBAAsB,CAAC;AAE9B,eAAO,MAAM,eAAe;;;;;;;;CAQlB,CAAC;AACX,MAAM,MAAM,eAAe,GAAG,UAAU,CAAC,OAAO,eAAe,CAAC,CAAC;AAEjE;;GAEG;AACH,MAAM,MAAM,UAAU,GAAG;IACvB;;OAEG;IACH,WAAW,EAAE,cAAc,CAAC;IAC5B;;OAEG;IACH,MAAM,EAAE,KAAK,CAAC,eAAe,CAAC,CAAC;CAChC,CAAC;AAEF,gBAAgB;AAChB,eAAO,MAAM,8BAA8B,EAAE,CAAC,CAAC,WAAW,CACxD,OAAO,eAAe,CACG,CAAC;AAE5B,gBAAgB;AAChB,MAAM,MAAM,mBAAmB,GAAG;IAChC,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;CACvB,CAAC;AAEF,gBAAgB;AAChB,eAAO,MAAM,yBAAyB,EAAE,CAAC,CAAC,WAAW,CACnD,mBAAmB,EACnB,UAAU,CAIV,CAAC;AAEH,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,UAAU,GAAG,MAAM,CAE/D"}
+{"version":3,"file":"key-request.d.ts","sourceRoot":"","sources":["../../../src/models/key-request.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,aAAa,CAAC;AAEjC,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EACL,cAAc,EAEf,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,OAAO,EAA0B,MAAM,eAAe,CAAC;AAEhE,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;CAkBlB,CAAC;AACX,MAAM,MAAM,eAAe,GAAG,UAAU,CAAC,OAAO,eAAe,CAAC,CAAC;AAEjE;;GAEG;AACH,MAAM,MAAM,UAAU,GAAG;IACvB;;OAEG;IACH,WAAW,EAAE,cAAc,CAAC;IAC5B;;OAEG;IACH,MAAM,EAAE,KAAK,CAAC,eAAe,CAAC,CAAC;IAC/B;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,IAAI,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC3B;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAChC,CAAC;AAEF,gBAAgB;AAChB,eAAO,MAAM,8BAA8B,EAAE,CAAC,CAAC,WAAW,CACxD,OAAO,eAAe,CACG,CAAC;AAE5B,gBAAgB;AAChB,MAAM,MAAM,mBAAmB,GAAG;IAChC,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACtB,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACjC,CAAC;AAEF,gBAAgB;AAChB,eAAO,MAAM,yBAAyB,EAAE,CAAC,CAAC,WAAW,CACnD,mBAAmB,EACnB,UAAU,CAiBX,CAAC;AAEF,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,UAAU,GAAG,MAAM,CAE/D"}

package/dist/esm/models/key-request.js

@@ -1,5 +1,7 @@
 import * as z from "zod/v4-mini";
+import { remap as remap$ } from "../lib/primitives.js";
 import { KeyEnvironment$outboundSchema, } from "./key-environment.js";
+import { KeyKind$outboundSchema } from "./key-kind.js";
 export const KeyRequestScope = {
     Assess: "assess",
     History: "history",
@@ -8,14 +10,34 @@ export const KeyRequestScope = {
     Detailed: "detailed",
     Integrations: "integrations",
     Management: "management",
+    Audit: "audit",
+    Usage: "usage",
+    Investigate: "investigate",
+    Evidence: "evidence",
+    Exports: "exports",
+    AuditManage: "audit_manage",
+    Settings: "settings",
+    PolicyPublish: "policy_publish",
+    Members: "members",
+    MembersManage: "members_manage",
 };
 /** @internal */
 export const KeyRequestScope$outboundSchema = z.enum(KeyRequestScope);
 /** @internal */
-export const KeyRequest$outboundSchema = z.object({
+export const KeyRequest$outboundSchema = z.pipe(z.object({
     environment: KeyEnvironment$outboundSchema,
     scopes: z.array(KeyRequestScope$outboundSchema),
-});
+    name: z.optional(z.string()),
+    purpose: z.optional(z.string()),
+    kind: z.optional(KeyKind$outboundSchema),
+    expiresAt: z.optional(z.string()),
+    requestId: z.optional(z.string()),
+}), z.transform((v) => {
+    return remap$(v, {
+        expiresAt: "expires_at",
+        requestId: "request_id",
+    });
+}));
 export function keyRequestToJSON(keyRequest) {
     return JSON.stringify(KeyRequest$outboundSchema.parse(keyRequest));
 }

package/dist/esm/models/key-request.js.map

@@ -1 +1 @@
-{"version":3,"file":"key-request.js","sourceRoot":"","sources":["../../../src/models/key-request.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,aAAa,CAAC;AAEjC,OAAO,EAEL,6BAA6B,GAC9B,MAAM,sBAAsB,CAAC;AAE9B,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,MAAM,EAAE,QAAQ;IAChB,OAAO,EAAE,SAAS;IAClB,MAAM,EAAE,QAAQ;IAChB,QAAQ,EAAE,UAAU;IACpB,QAAQ,EAAE,UAAU;IACpB,YAAY,EAAE,cAAc;IAC5B,UAAU,EAAE,YAAY;CAChB,CAAC;AAiBX,gBAAgB;AAChB,MAAM,CAAC,MAAM,8BAA8B,GAEvC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;AAQ5B,gBAAgB;AAChB,MAAM,CAAC,MAAM,yBAAyB,GAGlC,CAAC,CAAC,MAAM,CAAC;IACX,WAAW,EAAE,6BAA6B;IAC1C,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,8BAA8B,CAAC;CAChD,CAAC,CAAC;AAEH,MAAM,UAAU,gBAAgB,CAAC,UAAsB,EAAU;IAC/D,OAAO,IAAI,CAAC,SAAS,CAAC,yBAAyB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;AAAA,CACpE"}
+{"version":3,"file":"key-request.js","sourceRoot":"","sources":["../../../src/models/key-request.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,KAAK,IAAI,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAEvD,OAAO,EAEL,6BAA6B,GAC9B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAW,sBAAsB,EAAE,MAAM,eAAe,CAAC;AAEhE,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,MAAM,EAAE,QAAQ;IAChB,OAAO,EAAE,SAAS;IAClB,MAAM,EAAE,QAAQ;IAChB,QAAQ,EAAE,UAAU;IACpB,QAAQ,EAAE,UAAU;IACpB,YAAY,EAAE,cAAc;IAC5B,UAAU,EAAE,YAAY;IACxB,KAAK,EAAE,OAAO;IACd,KAAK,EAAE,OAAO;IACd,WAAW,EAAE,aAAa;IAC1B,QAAQ,EAAE,UAAU;IACpB,OAAO,EAAE,SAAS;IAClB,WAAW,EAAE,cAAc;IAC3B,QAAQ,EAAE,UAAU;IACpB,aAAa,EAAE,gBAAgB;IAC/B,OAAO,EAAE,SAAS;IAClB,aAAa,EAAE,gBAAgB;CACvB,CAAC;AAkCX,gBAAgB;AAChB,MAAM,CAAC,MAAM,8BAA8B,GAEvC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;AAa5B,gBAAgB;AAChB,MAAM,CAAC,MAAM,yBAAyB,GAGlC,CAAC,CAAC,IAAI,CACR,CAAC,CAAC,MAAM,CAAC;IACP,WAAW,EAAE,6BAA6B;IAC1C,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,8BAA8B,CAAC;IAC/C,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC5B,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC/B,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,sBAAsB,CAAC;IACxC,SAAS,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACjC,SAAS,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;CAClC,CAAC,EACF,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IACjB,OAAO,MAAM,CAAC,CAAC,EAAE;QACf,SAAS,EAAE,YAAY;QACvB,SAAS,EAAE,YAAY;KACxB,CAAC,CAAC;AAAA,CACJ,CAAC,CACH,CAAC;AAEF,MAAM,UAAU,gBAAgB,CAAC,UAAsB,EAAU;IAC/D,OAAO,IAAI,CAAC,SAAS,CAAC,yBAAyB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;AAAA,CACpE"}

package/dist/esm/models/key.d.ts

@@ -3,6 +3,7 @@ import { OpenEnum } from "../types/enums.js";
 import { Result as SafeParseResult } from "../types/fp.js";
 import { SDKValidationError } from "./errors/sdk-validation-error.js";
 import { KeyEnvironment } from "./key-environment.js";
+import { KeyKind } from "./key-kind.js";
 import { KeyStatus } from "./key-status.js";
 export declare const KeyScope: {
     readonly Assess: "assess";
@@ -12,6 +13,16 @@ export declare const KeyScope: {
     readonly Detailed: "detailed";
     readonly Integrations: "integrations";
     readonly Management: "management";
+    readonly Audit: "audit";
+    readonly Usage: "usage";
+    readonly Investigate: "investigate";
+    readonly Evidence: "evidence";
+    readonly Exports: "exports";
+    readonly AuditManage: "audit_manage";
+    readonly Settings: "settings";
+    readonly PolicyPublish: "policy_publish";
+    readonly Members: "members";
+    readonly MembersManage: "members_manage";
 };
 export type KeyScope = OpenEnum<typeof KeyScope>;
 /**
@@ -48,7 +59,7 @@ export type Key = {
      */
     createdBy?: string | undefined;
     /**
-     * When a rotated key stops authenticating (POST /v1/keys/rotate). Absent for a key with no end.
+     * The earlier of the explicit lifetime and any rotation overlap. Rotation preserves the original lifetime.
      */
     expiresAt?: string | undefined;
     revokedAt?: string | undefined;
@@ -60,6 +71,27 @@ export type Key = {
      * The credential, nrk_<environment>_<key id>_<secret>. Present only in the 201 answer that created the key.
      */
     key?: string | undefined;
+    /**
+     * The optional display name supplied for this API key. Preserved on rotation.
+     */
+    name?: string | undefined;
+    /**
+     * Optional operational purpose, at most 200 printable characters without leading or trailing whitespace. Do not put secrets or personal data here. Preserved on rotation and included in the creation request fingerprint; omitted for older credentials.
+     */
+    purpose?: string | undefined;
+    kind?: KeyKind | undefined;
+    /**
+     * The issuing member's external identity for a personal key. Personal ownership is fixed and the key is revoked when that member loses authority. Service keys belong to the workspace and omit this field.
+     */
+    ownerUserId?: string | undefined;
+    /**
+     * Replacement public key identifier, or legacy when the successor predates recorded lineage. This field excludes the secret.
+     */
+    rotatedTo?: string | undefined;
+    /**
+     * Latest recorded authenticated request observation, updated at most once per minute. Capture is best effort after the response and includes authenticated requests refused by authorization or rate limits. Absence means unknown and does not prove the key was unused. It is independent of diagnostic retention and resets on the replacement key after rotation. This field retains no raw IP or user-agent.
+     */
+    lastUsedAt?: string | undefined;
 };
 /** @internal */
 export declare const KeyScope$inboundSchema: z.ZodMiniType<KeyScope, unknown>;

package/dist/esm/models/key.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"key.d.ts","sourceRoot":"","sources":["../../../src/models/key.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,aAAa,CAAC;AAIjC,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,EAAE,MAAM,IAAI,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAE3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AACtE,OAAO,EACL,cAAc,EAEf,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,SAAS,EAA2B,MAAM,iBAAiB,CAAC;AAErE,eAAO,MAAM,QAAQ;;;;;;;;CAQX,CAAC;AACX,MAAM,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,QAAQ,CAAC,CAAC;AAEjD;;GAEG;AACH,MAAM,MAAM,GAAG,GAAG;IAChB;;OAEG;IACH,EAAE,EAAE,MAAM,CAAC;IACX;;OAEG;IACH,WAAW,EAAE,MAAM,CAAC;IACpB;;OAEG;IACH,WAAW,EAAE,cAAc,CAAC;IAC5B;;OAEG;IACH,MAAM,EAAE,MAAM,CAAC;IACf;;OAEG;IACH,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IACxB;;OAEG;IACH,MAAM,EAAE,SAAS,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B;;OAEG;IACH,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC1B,CAAC;AAEF,gBAAgB;AAChB,eAAO,MAAM,sBAAsB,EAAE,CAAC,CAAC,WAAW,CAAC,QAAQ,EAAE,OAAO,CACjC,CAAC;AAEpC,gBAAgB;AAChB,eAAO,MAAM,iBAAiB,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,EAAE,OAAO,CAyBzD,CAAC;AAEF,wBAAgB,WAAW,CACzB,UAAU,EAAE,MAAM,GACjB,eAAe,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAM1C"}
+{"version":3,"file":"key.d.ts","sourceRoot":"","sources":["../../../src/models/key.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,aAAa,CAAC;AAIjC,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,EAAE,MAAM,IAAI,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAE3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AACtE,OAAO,EACL,cAAc,EAEf,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,OAAO,EAAyB,MAAM,eAAe,CAAC;AAC/D,OAAO,EAAE,SAAS,EAA2B,MAAM,iBAAiB,CAAC;AAErE,eAAO,MAAM,QAAQ;;;;;;;;;;;;;;;;;;CAkBX,CAAC;AACX,MAAM,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,QAAQ,CAAC,CAAC;AAEjD;;GAEG;AACH,MAAM,MAAM,GAAG,GAAG;IAChB;;OAEG;IACH,EAAE,EAAE,MAAM,CAAC;IACX;;OAEG;IACH,WAAW,EAAE,MAAM,CAAC;IACpB;;OAEG;IACH,WAAW,EAAE,cAAc,CAAC;IAC5B;;OAEG;IACH,MAAM,EAAE,MAAM,CAAC;IACf;;OAEG;IACH,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IACxB;;OAEG;IACH,MAAM,EAAE,SAAS,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B;;OAEG;IACH,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzB;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,IAAI,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC3B;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACjC,CAAC;AAEF,gBAAgB;AAChB,eAAO,MAAM,sBAAsB,EAAE,CAAC,CAAC,WAAW,CAAC,QAAQ,EAAE,OAAO,CACjC,CAAC;AAEpC,gBAAgB;AAChB,eAAO,MAAM,iBAAiB,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,EAAE,OAAO,CAkCzD,CAAC;AAEF,wBAAgB,WAAW,CACzB,UAAU,EAAE,MAAM,GACjB,eAAe,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAM1C"}

package/dist/esm/models/key.js

@@ -4,6 +4,7 @@ import { safeParse } from "../lib/schemas.js";
 import * as openEnums from "../types/enums.js";
 import * as types from "../types/primitives.js";
 import { KeyEnvironment$inboundSchema, } from "./key-environment.js";
+import { KeyKind$inboundSchema } from "./key-kind.js";
 import { KeyStatus$inboundSchema } from "./key-status.js";
 export const KeyScope = {
     Assess: "assess",
@@ -13,6 +14,16 @@ export const KeyScope = {
     Detailed: "detailed",
     Integrations: "integrations",
     Management: "management",
+    Audit: "audit",
+    Usage: "usage",
+    Investigate: "investigate",
+    Evidence: "evidence",
+    Exports: "exports",
+    AuditManage: "audit_manage",
+    Settings: "settings",
+    PolicyPublish: "policy_publish",
+    Members: "members",
+    MembersManage: "members_manage",
 };
 /** @internal */
 export const KeyScope$inboundSchema = openEnums.inboundSchema(KeyScope);
@@ -30,6 +41,12 @@ export const Key$inboundSchema = z.pipe(z.object({
     revoked_at: types.optional(types.string()),
     revoked_by: types.optional(types.string()),
     key: types.optional(types.string()),
+    name: types.optional(types.string()),
+    purpose: types.optional(types.string()),
+    kind: types.optional(KeyKind$inboundSchema),
+    owner_user_id: types.optional(types.string()),
+    rotated_to: types.optional(types.string()),
+    last_used_at: types.optional(types.string()),
 }), z.transform((v) => {
     return remap$(v, {
         "workspace_id": "workspaceId",
@@ -38,6 +55,9 @@ export const Key$inboundSchema = z.pipe(z.object({
         "expires_at": "expiresAt",
         "revoked_at": "revokedAt",
         "revoked_by": "revokedBy",
+        "owner_user_id": "ownerUserId",
+        "rotated_to": "rotatedTo",
+        "last_used_at": "lastUsedAt",
     });
 }));
 export function keyFromJSON(jsonString) {