@origincloud/kms 0.27.0 → 0.28.0

package/dist/v1beta1/grant.d.ts

@@ -0,0 +1,149 @@
+import { type CallOptions, type Client, type Empty, type Service } from "@origincloud/core";
+/**
+ * Calls GrantService.
+ *
+ * A key's grants.
+ *
+ * Making, renewing and deleting a grant needs `kms.grant.create`,
+ * `kms.grant.update` and `kms.grant.delete` on the key's project, which the
+ * platform's own services hold where you let them use your keys; none of
+ * them lets the holder use the key itself. Reading and listing need
+ * `kms.grant.get` and `kms.grant.list`.
+ */
+export declare class GrantClient {
+    /**
+     * The endpoint the client sends its calls to, which also serves the
+     * operations its methods answer with.
+     */
+    readonly service: Service;
+    /** A client of GrantService that sends its calls through `client`. */
+    constructor(client: Client);
+    /**
+     * Returns a grant that hasn't expired; an expired one is `NOT_FOUND`. A
+     * grant made moments ago may be refused with `SERVICE_UNAVAILABLE`,
+     * retryable, until its zone's change arrives. Needs `kms.grant.get` on
+     * the project.
+     */
+    getGrant(request: GetGrantRequest, options?: CallOptions): Promise<Grant>;
+    /**
+     * Lists a key's grants that haven't expired, in every zone, ordered by
+     * name. A grant made moments ago may be missing from the list until its
+     * zone's change arrives. Needs `kms.grant.list` on the project.
+     */
+    listGrants(request: ListGrantsRequest, options?: CallOptions): Promise<ListGrantsResponse>;
+    /**
+     * Iterates over everything listGrants lists from the request's page on,
+     * fetching the next page as the loop reaches it. A page that fails ends
+     * the iteration with its error.
+     */
+    allGrants(request: ListGrantsRequest, options?: CallOptions): AsyncGenerator<Grant, void, undefined>;
+    /**
+     * Makes a grant on an `ENCRYPT_DECRYPT` key for one host, refused with
+     * `BAD_REQUEST` for a key of another purpose, a host that isn't one of
+     * the region's, an empty encryption context, or a `ttl` outside 1 to 60
+     * minutes, and with `CONFLICT` for a key that isn't enabled. Needs
+     * `kms.grant.create` on the project.
+     */
+    createGrant(request: CreateGrantRequest, options?: CallOptions): Promise<Grant>;
+    /**
+     * Extends a grant that hasn't expired to `ttl` from now. An expired
+     * grant isn't renewed: `CONFLICT`, and a new one is made instead. Needs
+     * `kms.grant.update` on the project.
+     */
+    renewGrant(request: RenewGrantRequest, options?: CallOptions): Promise<Grant>;
+    /**
+     * Ends a grant before it expires: from then on it opens nothing. Needs
+     * `kms.grant.delete` on the project.
+     */
+    deleteGrant(request: DeleteGrantRequest, options?: CallOptions): Promise<Empty>;
+}
+/**
+ * A grant: one host may use one key for one operation, with exactly one
+ * encryption context, until `expireTime`.
+ */
+export interface Grant {
+    /** The grant's resource name. */
+    name?: string;
+    /** What the host may do with the key. */
+    operation?: Grant_Operation;
+    /**
+     * The platform host the grant is for, by the SPIFFE ID its certificate
+     * names, which ends in `/zones/{zone}/hosts/{host}`.
+     */
+    grantee?: string;
+    /** The encryption context a use must carry, exactly; never empty. */
+    encryptionContext?: Record<string, string>;
+    /** How long the grant lives from now: 1 to 60 minutes. */
+    ttl?: string;
+    /** The zone that keeps the grant: its host's. */
+    zone?: string;
+    /** Who made the grant. */
+    delegate?: string;
+    /** When the grant was made. */
+    createTime?: string;
+    /** When the grant was last renewed, or made. */
+    renewTime?: string;
+    /** When the grant stops opening anything unless renewed before. */
+    expireTime?: string;
+}
+/** What a grant lets its host do. */
+export declare const Grant_Operation: {
+    /** Not set. */
+    readonly OPERATION_UNSPECIFIED: "OPERATION_UNSPECIFIED";
+    /**
+     * Decrypt ciphertexts made under the key with the grant's encryption
+     * context.
+     */
+    readonly DECRYPT: "DECRYPT";
+};
+/** What a grant lets its host do. */
+export type Grant_Operation = (typeof Grant_Operation)[keyof typeof Grant_Operation];
+/** The request for GetGrant. */
+export interface GetGrantRequest {
+    /** The grant to return. */
+    name?: string;
+}
+/** The request for ListGrants. */
+export interface ListGrantsRequest {
+    /** The key whose grants to list. */
+    parent?: string;
+    /**
+     * The most grants to return; the server clamps it, and 0 means its
+     * default.
+     */
+    pageSize?: number;
+    /** A previous response's `nextPageToken`, for the page after it. */
+    pageToken?: string;
+}
+/** The response for ListGrants. */
+export interface ListGrantsResponse {
+    /** The grants on this page. */
+    grants?: Grant[];
+    /** The token for the next page; empty on the last one. */
+    nextPageToken?: string;
+}
+/** The request for CreateGrant. */
+export interface CreateGrantRequest {
+    /** The key to grant. */
+    parent?: string;
+    /** The grant to make: its operation, host, encryption context and `ttl`. */
+    grant?: Grant;
+    /**
+     * A UUID; a repeat with the same id within a day returns the grant the
+     * first request made, instead of making a second.
+     */
+    requestId?: string;
+}
+/** The request for RenewGrant. */
+export interface RenewGrantRequest {
+    /** The grant to renew. */
+    name?: string;
+    /** How long the grant lives from now: 1 to 60 minutes. */
+    ttl?: string;
+}
+/** The request for DeleteGrant. */
+export interface DeleteGrantRequest {
+    /** The grant to end. */
+    name?: string;
+}
+//# sourceMappingURL=grant.d.ts.map

package/dist/v1beta1/grant.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"grant.d.ts","sourceRoot":"","sources":["../../src/v1beta1/grant.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,KAAK,WAAW,EAChB,KAAK,MAAM,EACX,KAAK,KAAK,EACV,KAAK,OAAO,EAIb,MAAM,mBAAmB,CAAC;AAE3B;;;;;;;;;;GAUG;AACH,qBAAa,WAAW;IACtB;;;OAGG;IACH,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAE1B,sEAAsE;gBAC1D,MAAM,EAAE,MAAM;IAI1B;;;;;OAKG;IACG,QAAQ,CAAC,OAAO,EAAE,eAAe,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC;IAa/E;;;;OAIG;IACG,UAAU,CAAC,OAAO,EAAE,iBAAiB,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAahG;;;;OAIG;IACI,SAAS,CAAC,OAAO,EAAE,iBAAiB,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,cAAc,CAAC,KAAK,EAAE,IAAI,EAAE,SAAS,CAAC;IAS3G;;;;;;OAMG;IACG,WAAW,CAAC,OAAO,EAAE,kBAAkB,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC;IAerF;;;;OAIG;IACG,UAAU,CAAC,OAAO,EAAE,iBAAiB,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC;IAYnF;;;OAGG;IACG,WAAW,CAAC,OAAO,EAAE,kBAAkB,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC;CAWtF;AAED;;;GAGG;AACH,MAAM,WAAW,KAAK;IACpB,iCAAiC;IACjC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,yCAAyC;IACzC,SAAS,CAAC,EAAE,eAAe,CAAC;IAC5B;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,qEAAqE;IACrE,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC3C,0DAA0D;IAC1D,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,iDAAiD;IACjD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,0BAA0B;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,+BAA+B;IAC/B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,gDAAgD;IAChD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,mEAAmE;IACnE,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,qCAAqC;AACrC,eAAO,MAAM,eAAe;IAC1B,eAAe;;IAEf;;;OAGG;;CAEK,CAAC;AAEX,qCAAqC;AACrC,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,eAAe,CAAC,CAAC,MAAM,OAAO,eAAe,CAAC,CAAC;AAErF,gCAAgC;AAChC,MAAM,WAAW,eAAe;IAC9B,2BAA2B;IAC3B,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,kCAAkC;AAClC,MAAM,WAAW,iBAAiB;IAChC,oCAAoC;IACpC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;OAGG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,oEAAoE;IACpE,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,mCAAmC;AACnC,MAAM,WAAW,kBAAkB;IACjC,+BAA+B;IAC/B,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC;IACjB,0DAA0D;IAC1D,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,mCAAmC;AACnC,MAAM,WAAW,kBAAkB;IACjC,wBAAwB;IACxB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,4EAA4E;IAC5E,KAAK,CAAC,EAAE,KAAK,CAAC;IACd;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,kCAAkC;AAClC,MAAM,WAAW,iBAAiB;IAChC,0BAA0B;IAC1B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,0DAA0D;IAC1D,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,mCAAmC;AACnC,MAAM,WAAW,kBAAkB;IACjC,wBAAwB;IACxB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf"}

package/dist/v1beta1/grant.js

@@ -0,0 +1,123 @@
+// Code generated by the SDK's generator (generator/). DO NOT EDIT.
+// source: origincloud/kms/v1beta1/grant.proto
+import { newRequestId, pathValue, query, } from "@origincloud/core";
+/**
+ * Calls GrantService.
+ *
+ * A key's grants.
+ *
+ * Making, renewing and deleting a grant needs `kms.grant.create`,
+ * `kms.grant.update` and `kms.grant.delete` on the key's project, which the
+ * platform's own services hold where you let them use your keys; none of
+ * them lets the holder use the key itself. Reading and listing need
+ * `kms.grant.get` and `kms.grant.list`.
+ */
+export class GrantClient {
+    /**
+     * The endpoint the client sends its calls to, which also serves the
+     * operations its methods answer with.
+     */
+    service;
+    /** A client of GrantService that sends its calls through `client`. */
+    constructor(client) {
+        this.service = client.service("kms", true);
+    }
+    /**
+     * Returns a grant that hasn't expired; an expired one is `NOT_FOUND`. A
+     * grant made moments ago may be refused with `SERVICE_UNAVAILABLE`,
+     * retryable, until its zone's change arrives. Needs `kms.grant.get` on
+     * the project.
+     */
+    async getGrant(request, options) {
+        const p0 = pathValue("name", request.name, "projects/*/regions/*/keys/*/grants/*");
+        return this.service.call({
+            method: "GET",
+            path: `/v1beta1/${p0}`,
+            query: query(request, ["name"]),
+            idempotent: true,
+        }, options);
+    }
+    /**
+     * Lists a key's grants that haven't expired, in every zone, ordered by
+     * name. A grant made moments ago may be missing from the list until its
+     * zone's change arrives. Needs `kms.grant.list` on the project.
+     */
+    async listGrants(request, options) {
+        const p0 = pathValue("parent", request.parent, "projects/*/regions/*/keys/*");
+        return this.service.call({
+            method: "GET",
+            path: `/v1beta1/${p0}/grants`,
+            query: query(request, ["parent"]),
+            idempotent: true,
+        }, options);
+    }
+    /**
+     * Iterates over everything listGrants lists from the request's page on,
+     * fetching the next page as the loop reaches it. A page that fails ends
+     * the iteration with its error.
+     */
+    async *allGrants(request, options) {
+        for (let page = request;;) {
+            const response = await this.listGrants(page, options);
+            yield* response.grants ?? [];
+            if (!response.nextPageToken)
+                return;
+            page = { ...page, pageToken: response.nextPageToken };
+        }
+    }
+    /**
+     * Makes a grant on an `ENCRYPT_DECRYPT` key for one host, refused with
+     * `BAD_REQUEST` for a key of another purpose, a host that isn't one of
+     * the region's, an empty encryption context, or a `ttl` outside 1 to 60
+     * minutes, and with `CONFLICT` for a key that isn't enabled. Needs
+     * `kms.grant.create` on the project.
+     */
+    async createGrant(request, options) {
+        if (!request.requestId)
+            request = { ...request, requestId: newRequestId() };
+        const p0 = pathValue("parent", request.parent, "projects/*/regions/*/keys/*");
+        return this.service.call({
+            method: "POST",
+            path: `/v1beta1/${p0}/grants`,
+            body: request.grant,
+            query: query(request, ["parent", "grant"]),
+            idempotent: true,
+        }, options);
+    }
+    /**
+     * Extends a grant that hasn't expired to `ttl` from now. An expired
+     * grant isn't renewed: `CONFLICT`, and a new one is made instead. Needs
+     * `kms.grant.update` on the project.
+     */
+    async renewGrant(request, options) {
+        const p0 = pathValue("name", request.name, "projects/*/regions/*/keys/*/grants/*");
+        return this.service.call({
+            method: "POST",
+            path: `/v1beta1/${p0}:renew`,
+            body: request,
+        }, options);
+    }
+    /**
+     * Ends a grant before it expires: from then on it opens nothing. Needs
+     * `kms.grant.delete` on the project.
+     */
+    async deleteGrant(request, options) {
+        const p0 = pathValue("name", request.name, "projects/*/regions/*/keys/*/grants/*");
+        return this.service.call({
+            method: "DELETE",
+            path: `/v1beta1/${p0}`,
+            query: query(request, ["name"]),
+        }, options);
+    }
+}
+/** What a grant lets its host do. */
+export const Grant_Operation = {
+    /** Not set. */
+    OPERATION_UNSPECIFIED: "OPERATION_UNSPECIFIED",
+    /**
+     * Decrypt ciphertexts made under the key with the grant's encryption
+     * context.
+     */
+    DECRYPT: "DECRYPT",
+};
+//# sourceMappingURL=grant.js.map

package/dist/v1beta1/grant.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"grant.js","sourceRoot":"","sources":["../../src/v1beta1/grant.ts"],"names":[],"mappings":"AAAA,mEAAmE;AACnE,8CAA8C;AAE9C,OAAO,EAKL,YAAY,EACZ,SAAS,EACT,KAAK,GACN,MAAM,mBAAmB,CAAC;AAE3B;;;;;;;;;;GAUG;AACH,MAAM,OAAO,WAAW;IACtB;;;OAGG;IACM,OAAO,CAAU;IAE1B,sEAAsE;IACtE,YAAY,MAAc;QACxB,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAC7C,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,QAAQ,CAAC,OAAwB,EAAE,OAAqB;QAC5D,MAAM,EAAE,GAAG,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,EAAE,sCAAsC,CAAC,CAAC;QACnF,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CACtB;YACE,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,YAAY,EAAE,EAAE;YACtB,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC;YAC/B,UAAU,EAAE,IAAI;SACjB,EACD,OAAO,CACR,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,UAAU,CAAC,OAA0B,EAAE,OAAqB;QAChE,MAAM,EAAE,GAAG,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,EAAE,6BAA6B,CAAC,CAAC;QAC9E,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CACtB;YACE,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,YAAY,EAAE,SAAS;YAC7B,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,CAAC;YACjC,UAAU,EAAE,IAAI;SACjB,EACD,OAAO,CACR,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,CAAC,SAAS,CAAC,OAA0B,EAAE,OAAqB;QAChE,KAAK,IAAI,IAAI,GAAG,OAAO,IAAM,CAAC;YAC5B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YACtD,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,IAAI,EAAE,CAAC;YAC7B,IAAI,CAAC,QAAQ,CAAC,aAAa;gBAAE,OAAO;YACpC,IAAI,GAAG,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,QAAQ,CAAC,aAAa,EAAE,CAAC;QACxD,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,WAAW,CAAC,OAA2B,EAAE,OAAqB;QAClE,IAAI,CAAC,OAAO,CAAC,SAAS;YAAE,OAAO,GAAG,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,EAAE,CAAC;QAC5E,MAAM,EAAE,GAAG,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,EAAE,6BAA6B,CAAC,CAAC;QAC9E,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CACtB;YACE,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,YAAY,EAAE,SAAS;YAC7B,IAAI,EAAE,OAAO,CAAC,KAAK;YACnB,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAC1C,UAAU,EAAE,IAAI;SACjB,EACD,OAAO,CACR,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,UAAU,CAAC,OAA0B,EAAE,OAAqB;QAChE,MAAM,EAAE,GAAG,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,EAAE,sCAAsC,CAAC,CAAC;QACnF,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CACtB;YACE,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,YAAY,EAAE,QAAQ;YAC5B,IAAI,EAAE,OAAO;SACd,EACD,OAAO,CACR,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,WAAW,CAAC,OAA2B,EAAE,OAAqB;QAClE,MAAM,EAAE,GAAG,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,EAAE,sCAAsC,CAAC,CAAC;QACnF,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CACtB;YACE,MAAM,EAAE,QAAQ;YAChB,IAAI,EAAE,YAAY,EAAE,EAAE;YACtB,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC;SAChC,EACD,OAAO,CACR,CAAC;IACJ,CAAC;CACF;AAgCD,qCAAqC;AACrC,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,eAAe;IACf,qBAAqB,EAAE,uBAAuB;IAC9C;;;OAGG;IACH,OAAO,EAAE,SAAS;CACV,CAAC"}

package/dist/v1beta1/index.d.ts

@@ -0,0 +1,3 @@
+export * from "./grant.js";
+export * from "./key.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/v1beta1/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/v1beta1/index.ts"],"names":[],"mappings":"AAEA,cAAc,YAAY,CAAC;AAC3B,cAAc,UAAU,CAAC"}

package/dist/v1beta1/index.js

@@ -0,0 +1,4 @@
+// Code generated by the SDK's generator (generator/). DO NOT EDIT.
+export * from "./grant.js";
+export * from "./key.js";
+//# sourceMappingURL=index.js.map

package/dist/v1beta1/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/v1beta1/index.ts"],"names":[],"mappings":"AAAA,mEAAmE;AAEnE,cAAc,YAAY,CAAC;AAC3B,cAAc,UAAU,CAAC"}

package/dist/v1beta1/key.d.ts

@@ -0,0 +1,398 @@
+import { type CallOptions, type Client, type Service } from "@origincloud/core";
+/**
+ * Calls KeyService.
+ *
+ * Keys and the operations made with them.
+ *
+ * An `ENCRYPT_DECRYPT` key encrypts with AES-256-GCM-SIV. Its ciphertext
+ * names the key version that made it but not the key: Decrypt names the
+ * key, and a ciphertext decrypts only under the key and the encryption
+ * context it was made with. A signing key signs with ECDSA over P-256 and
+ * SHA-256 (ASN.1 DER signatures) or with Ed25519; its public keys are read
+ * with GetPublicKey.
+ */
+export declare class KeyClient {
+    /**
+     * The endpoint the client sends its calls to, which also serves the
+     * operations its methods answer with.
+     */
+    readonly service: Service;
+    /** A client of KeyService that sends its calls through `client`. */
+    constructor(client: Client);
+    /** Returns a key, deleted or not. Needs `kms.key.get` on the project. */
+    getKey(request: GetKeyRequest, options?: CallOptions): Promise<Key>;
+    /**
+     * Lists a project's keys in a region, ordered by name. Deleted ones are
+     * listed only when `showDeleted` is set, so a page may hold fewer keys
+     * than `pageSize` and still be followed by another. Needs `kms.key.list`
+     * on the project.
+     */
+    listKeys(request: ListKeysRequest, options?: CallOptions): Promise<ListKeysResponse>;
+    /**
+     * Iterates over everything listKeys lists from the request's page on,
+     * fetching the next page as the loop reaches it. A page that fails ends
+     * the iteration with its error.
+     */
+    allKeys(request: ListKeysRequest, options?: CallOptions): AsyncGenerator<Key, void, undefined>;
+    /**
+     * Creates a key, `ENABLED`, with its first version as the primary. The
+     * platform assigns its id, which its `name` returns; an id is never used
+     * again. Needs `kms.key.create` on the project.
+     */
+    createKey(request: CreateKeyRequest, options?: CallOptions): Promise<Key>;
+    /**
+     * Enables or disables a key, or changes its tags: `state` and `tags` are
+     * the fields it changes. A disabled key refuses every operation but
+     * GetPublicKey with `CONFLICT` until it is enabled again. Setting the
+     * state or the tags the key has already succeeds and changes nothing. A
+     * deleted key can't be changed: undelete it first. A key the platform
+     * manages (`platformManaged`) is refused with `FORBIDDEN`, even when the
+     * request would change nothing. Needs
+     * `kms.key.update` on the project.
+     */
+    updateKey(request: UpdateKeyRequest, options?: CallOptions): Promise<Key>;
+    /**
+     * Deletes a key: it becomes `DELETED` at once, refuses every operation
+     * but GetPublicKey, and its material is destroyed at `purgeTime`, after
+     * `destroyDelay`. Until then UndeleteKey restores it, disabled. After it,
+     * nothing it encrypted can ever be decrypted again. Deleting a deleted key
+     * succeeds and changes nothing. A key the platform manages is refused with
+     * `FORBIDDEN`, deleted or not. Needs `kms.key.delete` on the project.
+     */
+    deleteKey(request: DeleteKeyRequest, options?: CallOptions): Promise<Key>;
+    /**
+     * Restores a deleted key whose material isn't destroyed yet: it becomes
+     * `DISABLED`, to be enabled with UpdateKey. Refused with `CONFLICT` for a
+     * key that isn't deleted, or whose `purgeTime` has passed, and with
+     * `FORBIDDEN` for a key the platform manages. Needs `kms.key.delete` on
+     * the project.
+     */
+    undeleteKey(request: UndeleteKeyRequest, options?: CallOptions): Promise<Key>;
+    /**
+     * Adds a new version to a key and makes it the primary: new ciphertexts
+     * and signatures use it, and every earlier version still decrypts and
+     * its public key stays readable. Refused with `CONFLICT` for a key that
+     * isn't enabled, and with `FORBIDDEN` for a key the platform manages.
+     * Needs `kms.key.rotate` on the project.
+     */
+    rotateKey(request: RotateKeyRequest, options?: CallOptions): Promise<Key>;
+    /**
+     * Encrypts up to 64 KiB with an `ENCRYPT_DECRYPT` key's primary version,
+     * bound to the encryption context. For more data, encrypt it yourself
+     * with a data key from GenerateDataKey. Refused with `CONFLICT` for a key
+     * that isn't enabled, and with `BAD_REQUEST` for a signing key. Needs
+     * `kms.key.encrypt` on the project.
+     */
+    encrypt(request: EncryptRequest, options?: CallOptions): Promise<EncryptResponse>;
+    /**
+     * Decrypts a ciphertext Encrypt or GenerateDataKey made with this key,
+     * given the same encryption context. Refused with `BAD_REQUEST` for a
+     * ciphertext that doesn't decrypt under this key and context, and with
+     * `CONFLICT` for a key that isn't enabled. Needs `kms.key.decrypt` on the
+     * project.
+     */
+    decrypt(request: DecryptRequest, options?: CallOptions): Promise<DecryptResponse>;
+    /**
+     * Returns a new random 256-bit data key, in plaintext and encrypted under
+     * an `ENCRYPT_DECRYPT` key's primary version with the encryption context.
+     * Encrypt your data with the plaintext, keep only the ciphertext beside
+     * it, and recover the data key with Decrypt when you need it. Needs
+     * `kms.key.generate_data_key` on the project.
+     */
+    generateDataKey(request: GenerateDataKeyRequest, options?: CallOptions): Promise<GenerateDataKeyResponse>;
+    /**
+     * Signs up to 64 KiB with a signing key's primary version, or the
+     * version `keyVersion` names. ECDSA hashes
+     * the data with SHA-256 itself: send the data, not a digest. Refused with
+     * `CONFLICT` for a key that isn't enabled, and with `BAD_REQUEST` for an
+     * `ENCRYPT_DECRYPT` key. Needs `kms.key.sign` on the project.
+     */
+    sign(request: SignRequest, options?: CallOptions): Promise<SignResponse>;
+    /**
+     * Returns a signing key version's public key, to verify its signatures
+     * with. Answered for a disabled or deleted key too, until its material is
+     * destroyed. Refused with `BAD_REQUEST` for an `ENCRYPT_DECRYPT` key.
+     * Needs `kms.key.get_public_key` on the project.
+     */
+    getPublicKey(request: GetPublicKeyRequest, options?: CallOptions): Promise<PublicKey>;
+}
+/**
+ * A key: its versions' material is kept by the platform and never leaves
+ * it.
+ */
+export interface Key {
+    /** The key's resource name. */
+    name?: string;
+    /** What the key is for. */
+    purpose?: Key_Purpose;
+    /**
+     * Whether the key can be used. A new key is `ENABLED`; UpdateKey sets it
+     * to `ENABLED` or `DISABLED`, and DeleteKey makes it `DELETED`.
+     */
+    state?: Key_State;
+    /** The version new ciphertexts and signatures use. */
+    primaryVersion?: string;
+    /** Every version, oldest first. RotateKey adds one. */
+    versions?: Key_Version[];
+    /** When the key was created. */
+    createTime?: string;
+    /** When the key last changed. */
+    updateTime?: string;
+    /**
+     * When a deleted key's material is destroyed, or was; unset unless the
+     * key is `DELETED`.
+     */
+    purgeTime?: string;
+    /**
+     * Labels of your own, at most 50. The `origin:name` tag is the name the
+     * console shows.
+     */
+    tags?: Record<string, string>;
+    /**
+     * Whether the platform manages the key: it made the key in your project
+     * for its own use of the project's data, such as the key, tagged
+     * `origin:name=volumes`, that protects your volumes' data keys. You see it,
+     * its grants and its audit log entries like any key of yours, but
+     * UpdateKey, DeleteKey, UndeleteKey and RotateKey refuse it with
+     * `FORBIDDEN`, whatever roles you hold.
+     */
+    platformManaged?: boolean;
+}
+/** What a key is for, and the algorithm it uses. */
+export declare const Key_Purpose: {
+    /** Not set. */
+    readonly PURPOSE_UNSPECIFIED: "PURPOSE_UNSPECIFIED";
+    /** Encrypt, Decrypt and GenerateDataKey, with AES-256-GCM-SIV. */
+    readonly ENCRYPT_DECRYPT: "ENCRYPT_DECRYPT";
+    /** Sign with ECDSA over P-256 and SHA-256; signatures are ASN.1 DER. */
+    readonly SIGN_ECDSA_P256_SHA256: "SIGN_ECDSA_P256_SHA256";
+    /** Sign with Ed25519; signatures are 64 bytes. */
+    readonly SIGN_ED25519: "SIGN_ED25519";
+};
+/** What a key is for, and the algorithm it uses. */
+export type Key_Purpose = (typeof Key_Purpose)[keyof typeof Key_Purpose];
+/** Whether a key can be used. */
+export declare const Key_State: {
+    /** Not set. */
+    readonly STATE_UNSPECIFIED: "STATE_UNSPECIFIED";
+    /** Serves every operation of its purpose. */
+    readonly ENABLED: "ENABLED";
+    /** Refuses every operation but GetPublicKey until enabled again. */
+    readonly DISABLED: "DISABLED";
+    /**
+     * Deleted: refuses every operation but GetPublicKey. Until
+     * `purgeTime` UndeleteKey restores it; after it, its material is
+     * destroyed.
+     */
+    readonly DELETED: "DELETED";
+};
+/** Whether a key can be used. */
+export type Key_State = (typeof Key_State)[keyof typeof Key_State];
+/** A version of the key: one generation of its material. */
+export interface Key_Version {
+    /**
+     * The version's resource name,
+     * `projects/{project}/regions/{region}/keys/{key}/versions/{version}`,
+     * numbered from 1.
+     */
+    keyVersion?: string;
+    /** When the version was created. */
+    createTime?: string;
+}
+/** A signing key version's public key. */
+export interface PublicKey {
+    /**
+     * The public key's resource name: its version's, followed by
+     * `/publicKey`.
+     */
+    name?: string;
+    /** The algorithm the key version signs with. */
+    algorithm?: Key_Purpose;
+    /**
+     * The public key as a PEM-encoded SubjectPublicKeyInfo, which OpenSSL and
+     * most libraries read.
+     */
+    pem?: string;
+}
+/** The request for GetKey. */
+export interface GetKeyRequest {
+    /** The key to return. */
+    name?: string;
+}
+/** The request for ListKeys. */
+export interface ListKeysRequest {
+    /**
+     * The project and region whose keys to list,
+     * `projects/{project}/regions/{region}`.
+     */
+    parent?: string;
+    /**
+     * The most keys to return; the server clamps it, and 0 means its
+     * default.
+     */
+    pageSize?: number;
+    /** A previous response's `nextPageToken`, for the page after it. */
+    pageToken?: string;
+    /** Whether deleted keys are listed too. */
+    showDeleted?: boolean;
+}
+/** The response for ListKeys. */
+export interface ListKeysResponse {
+    /** The keys on this page. */
+    keys?: Key[];
+    /** The token for the next page; empty on the last one. */
+    nextPageToken?: string;
+}
+/** The request for CreateKey. */
+export interface CreateKeyRequest {
+    /**
+     * The project and region to create the key in,
+     * `projects/{project}/regions/{region}`.
+     */
+    parent?: string;
+    /** The key to create: its `purpose`, and optionally its tags. */
+    key?: Key;
+    /**
+     * A UUID; a repeat with the same id within a day returns the key the
+     * first request created, as it was then, instead of creating a second
+     * one.
+     */
+    requestId?: string;
+}
+/** The request for UpdateKey. */
+export interface UpdateKeyRequest {
+    /**
+     * The key, by its name, with the state to set (`ENABLED` or `DISABLED`)
+     * or the tags to replace its tags with.
+     */
+    key?: Key;
+    /** The fields to change: `state`, `tags`, or both. `*` is both. */
+    updateMask?: string;
+    /**
+     * A UUID; a repeat with the same id within a day returns the key as the
+     * first request left it, instead of changing it again.
+     */
+    requestId?: string;
+}
+/** The request for DeleteKey. */
+export interface DeleteKeyRequest {
+    /** The key to delete. */
+    name?: string;
+    /**
+     * How long until the key's material is destroyed: whole days, from 1 to
+     * 90; 30 days when unset.
+     */
+    destroyDelay?: string;
+    /**
+     * A UUID; a repeat with the same id within a day returns the key as the
+     * first request left it.
+     */
+    requestId?: string;
+}
+/** The request for UndeleteKey. */
+export interface UndeleteKeyRequest {
+    /** The deleted key to restore. */
+    name?: string;
+    /**
+     * A UUID; a repeat with the same id within a day returns the key as the
+     * first request left it, instead of answering `CONFLICT`.
+     */
+    requestId?: string;
+}
+/** The request for RotateKey. */
+export interface RotateKeyRequest {
+    /** The key to rotate. */
+    name?: string;
+    /**
+     * A UUID; a repeat with the same id within a day returns the key as the
+     * first request left it, instead of adding another version.
+     */
+    requestId?: string;
+}
+/** The request for Encrypt. */
+export interface EncryptRequest {
+    /** The `ENCRYPT_DECRYPT` key to encrypt with. */
+    name?: string;
+    /** The data to encrypt, at most 64 KiB. */
+    plaintext?: string;
+    /**
+     * Pairs bound into the ciphertext, which Decrypt must be given again,
+     * exactly. They aren't secret: the audit log records them. At most 16
+     * pairs, each key and value 1 to 256 bytes.
+     */
+    encryptionContext?: Record<string, string>;
+}
+/** The response for Encrypt. */
+export interface EncryptResponse {
+    /** The ciphertext, to store and pass to Decrypt. */
+    ciphertext?: string;
+    /** The key version that encrypted it. */
+    keyVersion?: string;
+}
+/** The request for Decrypt. */
+export interface DecryptRequest {
+    /** The key the ciphertext was made with. */
+    name?: string;
+    /** What Encrypt or GenerateDataKey returned as `ciphertext`. */
+    ciphertext?: string;
+    /** The encryption context the ciphertext was made with. */
+    encryptionContext?: Record<string, string>;
+}
+/** The response for Decrypt. */
+export interface DecryptResponse {
+    /** The decrypted data. */
+    plaintext?: string;
+    /** The key version that decrypted it. */
+    keyVersion?: string;
+}
+/** The request for GenerateDataKey. */
+export interface GenerateDataKeyRequest {
+    /** The `ENCRYPT_DECRYPT` key to encrypt the data key with. */
+    name?: string;
+    /** Pairs bound into the data key's ciphertext, as Encrypt's. */
+    encryptionContext?: Record<string, string>;
+}
+/** The response for GenerateDataKey. */
+export interface GenerateDataKeyResponse {
+    /** The 32-byte data key. Use it, then discard it: never store it. */
+    plaintext?: string;
+    /**
+     * The data key encrypted under the key, to store beside your data and
+     * pass to Decrypt.
+     */
+    ciphertext?: string;
+    /** The key version that encrypted it. */
+    keyVersion?: string;
+}
+/** The request for Sign. */
+export interface SignRequest {
+    /** The signing key to sign with. */
+    name?: string;
+    /** The data to sign, at most 64 KiB. */
+    data?: string;
+    /**
+     * The version of `name` to sign with, `{name}/versions/{version}`.
+     * Without it, the key's primary version signs. Name it when the
+     * signature's verifiers must know the version before the signature
+     * exists, for example a token whose header names its key: the primary
+     * can change between reading it and signing. Refused with `BAD_REQUEST`
+     * for a version of another key or a destroyed version.
+     */
+    keyVersion?: string;
+}
+/** The response for Sign. */
+export interface SignResponse {
+    /** The signature: ASN.1 DER for ECDSA, 64 bytes for Ed25519. */
+    signature?: string;
+    /** The key version that signed, whose public key verifies it. */
+    keyVersion?: string;
+}
+/** The request for GetPublicKey. */
+export interface GetPublicKeyRequest {
+    /**
+     * The public key to return: a key version's name followed by
+     * `/publicKey`.
+     */
+    name?: string;
+}
+//# sourceMappingURL=key.d.ts.map

package/dist/v1beta1/key.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"key.d.ts","sourceRoot":"","sources":["../../src/v1beta1/key.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,KAAK,WAAW,EAChB,KAAK,MAAM,EACX,KAAK,OAAO,EAIb,MAAM,mBAAmB,CAAC;AAE3B;;;;;;;;;;;GAWG;AACH,qBAAa,SAAS;IACpB;;;OAGG;IACH,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAE1B,oEAAoE;gBACxD,MAAM,EAAE,MAAM;IAI1B,yEAAyE;IACnE,MAAM,CAAC,OAAO,EAAE,aAAa,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC;IAazE;;;;;OAKG;IACG,QAAQ,CAAC,OAAO,EAAE,eAAe,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAa1F;;;;OAIG;IACI,OAAO,CAAC,OAAO,EAAE,eAAe,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,cAAc,CAAC,GAAG,EAAE,IAAI,EAAE,SAAS,CAAC;IASrG;;;;OAIG;IACG,SAAS,CAAC,OAAO,EAAE,gBAAgB,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC;IAe/E;;;;;;;;;OASG;IACG,SAAS,CAAC,OAAO,EAAE,gBAAgB,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC;IAe/E;;;;;;;OAOG;IACG,SAAS,CAAC,OAAO,EAAE,gBAAgB,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC;IAc/E;;;;;;OAMG;IACG,WAAW,CAAC,OAAO,EAAE,kBAAkB,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC;IAcnF;;;;;;OAMG;IACG,SAAS,CAAC,OAAO,EAAE,gBAAgB,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC;IAc/E;;;;;;OAMG;IACG,OAAO,CAAC,OAAO,EAAE,cAAc,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,eAAe,CAAC;IAYvF;;;;;;OAMG;IACG,OAAO,CAAC,OAAO,EAAE,cAAc,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,eAAe,CAAC;IAYvF;;;;;;OAMG;IACG,eAAe,CAAC,OAAO,EAAE,sBAAsB,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,uBAAuB,CAAC;IAY/G;;;;;;OAMG;IACG,IAAI,CAAC,OAAO,EAAE,WAAW,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC;IAY9E;;;;;OAKG;IACG,YAAY,CAAC,OAAO,EAAE,mBAAmB,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,SAAS,CAAC;CAY5F;AAED;;;GAGG;AACH,MAAM,WAAW,GAAG;IAClB,+BAA+B;IAC/B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,2BAA2B;IAC3B,OAAO,CAAC,EAAE,WAAW,CAAC;IACtB;;;OAGG;IACH,KAAK,CAAC,EAAE,SAAS,CAAC;IAClB,sDAAsD;IACtD,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,uDAAuD;IACvD,QAAQ,CAAC,EAAE,WAAW,EAAE,CAAC;IACzB,gCAAgC;IAChC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,iCAAiC;IACjC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;OAGG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9B;;;;;;;OAOG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,oDAAoD;AACpD,eAAO,MAAM,WAAW;IACtB,eAAe;;IAEf,kEAAkE;;IAElE,wEAAwE;;IAExE,kDAAkD;;CAE1C,CAAC;AAEX,oDAAoD;AACpD,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,OAAO,WAAW,CAAC,CAAC;AAEzE,iCAAiC;AACjC,eAAO,MAAM,SAAS;IACpB,eAAe;;IAEf,6CAA6C;;IAE7C,oEAAoE;;IAEpE;;;;OAIG;;CAEK,CAAC;AAEX,iCAAiC;AACjC,MAAM,MAAM,SAAS,GAAG,CAAC,OAAO,SAAS,CAAC,CAAC,MAAM,OAAO,SAAS,CAAC,CAAC;AAEnE,4DAA4D;AAC5D,MAAM,WAAW,WAAW;IAC1B;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,oCAAoC;IACpC,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,0CAA0C;AAC1C,MAAM,WAAW,SAAS;IACxB;;;OAGG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,gDAAgD;IAChD,SAAS,CAAC,EAAE,WAAW,CAAC;IACxB;;;OAGG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,8BAA8B;AAC9B,MAAM,WAAW,aAAa;IAC5B,yBAAyB;IACzB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,gCAAgC;AAChC,MAAM,WAAW,eAAe;IAC9B;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;OAGG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,oEAAoE;IACpE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,2CAA2C;IAC3C,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED,iCAAiC;AACjC,MAAM,WAAW,gBAAgB;IAC/B,6BAA6B;IAC7B,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;IACb,0DAA0D;IAC1D,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,iCAAiC;AACjC,MAAM,WAAW,gBAAgB;IAC/B;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iEAAiE;IACjE,GAAG,CAAC,EAAE,GAAG,CAAC;IACV;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,iCAAiC;AACjC,MAAM,WAAW,gBAAgB;IAC/B;;;OAGG;IACH,GAAG,CAAC,EAAE,GAAG,CAAC;IACV,mEAAmE;IACnE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,iCAAiC;AACjC,MAAM,WAAW,gBAAgB;IAC/B,yBAAyB;IACzB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,mCAAmC;AACnC,MAAM,WAAW,kBAAkB;IACjC,kCAAkC;IAClC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,iCAAiC;AACjC,MAAM,WAAW,gBAAgB;IAC/B,yBAAyB;IACzB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,+BAA+B;AAC/B,MAAM,WAAW,cAAc;IAC7B,iDAAiD;IACjD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,2CAA2C;IAC3C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC5C;AAED,gCAAgC;AAChC,MAAM,WAAW,eAAe;IAC9B,oDAAoD;IACpD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,yCAAyC;IACzC,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,+BAA+B;AAC/B,MAAM,WAAW,cAAc;IAC7B,4CAA4C;IAC5C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,gEAAgE;IAChE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,2DAA2D;IAC3D,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC5C;AAED,gCAAgC;AAChC,MAAM,WAAW,eAAe;IAC9B,0BAA0B;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,yCAAyC;IACzC,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,uCAAuC;AACvC,MAAM,WAAW,sBAAsB;IACrC,8DAA8D;IAC9D,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,gEAAgE;IAChE,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC5C;AAED,wCAAwC;AACxC,MAAM,WAAW,uBAAuB;IACtC,qEAAqE;IACrE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,yCAAyC;IACzC,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,4BAA4B;AAC5B,MAAM,WAAW,WAAW;IAC1B,oCAAoC;IACpC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,wCAAwC;IACxC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;;;;OAOG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,6BAA6B;AAC7B,MAAM,WAAW,YAAY;IAC3B,gEAAgE;IAChE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,iEAAiE;IACjE,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,oCAAoC;AACpC,MAAM,WAAW,mBAAmB;IAClC;;;OAGG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;CACf"}

package/dist/v1beta1/key.js

@@ -0,0 +1,261 @@
+// Code generated by the SDK's generator (generator/). DO NOT EDIT.
+// source: origincloud/kms/v1beta1/key.proto
+import { newRequestId, pathValue, query, } from "@origincloud/core";
+/**
+ * Calls KeyService.
+ *
+ * Keys and the operations made with them.
+ *
+ * An `ENCRYPT_DECRYPT` key encrypts with AES-256-GCM-SIV. Its ciphertext
+ * names the key version that made it but not the key: Decrypt names the
+ * key, and a ciphertext decrypts only under the key and the encryption
+ * context it was made with. A signing key signs with ECDSA over P-256 and
+ * SHA-256 (ASN.1 DER signatures) or with Ed25519; its public keys are read
+ * with GetPublicKey.
+ */
+export class KeyClient {
+    /**
+     * The endpoint the client sends its calls to, which also serves the
+     * operations its methods answer with.
+     */
+    service;
+    /** A client of KeyService that sends its calls through `client`. */
+    constructor(client) {
+        this.service = client.service("kms", true);
+    }
+    /** Returns a key, deleted or not. Needs `kms.key.get` on the project. */
+    async getKey(request, options) {
+        const p0 = pathValue("name", request.name, "projects/*/regions/*/keys/*");
+        return this.service.call({
+            method: "GET",
+            path: `/v1beta1/${p0}`,
+            query: query(request, ["name"]),
+            idempotent: true,
+        }, options);
+    }
+    /**
+     * Lists a project's keys in a region, ordered by name. Deleted ones are
+     * listed only when `showDeleted` is set, so a page may hold fewer keys
+     * than `pageSize` and still be followed by another. Needs `kms.key.list`
+     * on the project.
+     */
+    async listKeys(request, options) {
+        const p0 = pathValue("parent", request.parent, "projects/*/regions/*");
+        return this.service.call({
+            method: "GET",
+            path: `/v1beta1/${p0}/keys`,
+            query: query(request, ["parent"]),
+            idempotent: true,
+        }, options);
+    }
+    /**
+     * Iterates over everything listKeys lists from the request's page on,
+     * fetching the next page as the loop reaches it. A page that fails ends
+     * the iteration with its error.
+     */
+    async *allKeys(request, options) {
+        for (let page = request;;) {
+            const response = await this.listKeys(page, options);
+            yield* response.keys ?? [];
+            if (!response.nextPageToken)
+                return;
+            page = { ...page, pageToken: response.nextPageToken };
+        }
+    }
+    /**
+     * Creates a key, `ENABLED`, with its first version as the primary. The
+     * platform assigns its id, which its `name` returns; an id is never used
+     * again. Needs `kms.key.create` on the project.
+     */
+    async createKey(request, options) {
+        if (!request.requestId)
+            request = { ...request, requestId: newRequestId() };
+        const p0 = pathValue("parent", request.parent, "projects/*/regions/*");
+        return this.service.call({
+            method: "POST",
+            path: `/v1beta1/${p0}/keys`,
+            body: request.key,
+            query: query(request, ["parent", "key"]),
+            idempotent: true,
+        }, options);
+    }
+    /**
+     * Enables or disables a key, or changes its tags: `state` and `tags` are
+     * the fields it changes. A disabled key refuses every operation but
+     * GetPublicKey with `CONFLICT` until it is enabled again. Setting the
+     * state or the tags the key has already succeeds and changes nothing. A
+     * deleted key can't be changed: undelete it first. A key the platform
+     * manages (`platformManaged`) is refused with `FORBIDDEN`, even when the
+     * request would change nothing. Needs
+     * `kms.key.update` on the project.
+     */
+    async updateKey(request, options) {
+        if (!request.requestId)
+            request = { ...request, requestId: newRequestId() };
+        const p0 = pathValue("key.name", request.key?.name, "projects/*/regions/*/keys/*");
+        return this.service.call({
+            method: "PATCH",
+            path: `/v1beta1/${p0}`,
+            body: request.key,
+            query: query(request, ["key.name", "key"]),
+            idempotent: true,
+        }, options);
+    }
+    /**
+     * Deletes a key: it becomes `DELETED` at once, refuses every operation
+     * but GetPublicKey, and its material is destroyed at `purgeTime`, after
+     * `destroyDelay`. Until then UndeleteKey restores it, disabled. After it,
+     * nothing it encrypted can ever be decrypted again. Deleting a deleted key
+     * succeeds and changes nothing. A key the platform manages is refused with
+     * `FORBIDDEN`, deleted or not. Needs `kms.key.delete` on the project.
+     */
+    async deleteKey(request, options) {
+        if (!request.requestId)
+            request = { ...request, requestId: newRequestId() };
+        const p0 = pathValue("name", request.name, "projects/*/regions/*/keys/*");
+        return this.service.call({
+            method: "DELETE",
+            path: `/v1beta1/${p0}`,
+            query: query(request, ["name"]),
+            idempotent: true,
+        }, options);
+    }
+    /**
+     * Restores a deleted key whose material isn't destroyed yet: it becomes
+     * `DISABLED`, to be enabled with UpdateKey. Refused with `CONFLICT` for a
+     * key that isn't deleted, or whose `purgeTime` has passed, and with
+     * `FORBIDDEN` for a key the platform manages. Needs `kms.key.delete` on
+     * the project.
+     */
+    async undeleteKey(request, options) {
+        if (!request.requestId)
+            request = { ...request, requestId: newRequestId() };
+        const p0 = pathValue("name", request.name, "projects/*/regions/*/keys/*");
+        return this.service.call({
+            method: "POST",
+            path: `/v1beta1/${p0}:undelete`,
+            body: request,
+            idempotent: true,
+        }, options);
+    }
+    /**
+     * Adds a new version to a key and makes it the primary: new ciphertexts
+     * and signatures use it, and every earlier version still decrypts and
+     * its public key stays readable. Refused with `CONFLICT` for a key that
+     * isn't enabled, and with `FORBIDDEN` for a key the platform manages.
+     * Needs `kms.key.rotate` on the project.
+     */
+    async rotateKey(request, options) {
+        if (!request.requestId)
+            request = { ...request, requestId: newRequestId() };
+        const p0 = pathValue("name", request.name, "projects/*/regions/*/keys/*");
+        return this.service.call({
+            method: "POST",
+            path: `/v1beta1/${p0}:rotate`,
+            body: request,
+            idempotent: true,
+        }, options);
+    }
+    /**
+     * Encrypts up to 64 KiB with an `ENCRYPT_DECRYPT` key's primary version,
+     * bound to the encryption context. For more data, encrypt it yourself
+     * with a data key from GenerateDataKey. Refused with `CONFLICT` for a key
+     * that isn't enabled, and with `BAD_REQUEST` for a signing key. Needs
+     * `kms.key.encrypt` on the project.
+     */
+    async encrypt(request, options) {
+        const p0 = pathValue("name", request.name, "projects/*/regions/*/keys/*");
+        return this.service.call({
+            method: "POST",
+            path: `/v1beta1/${p0}:encrypt`,
+            body: request,
+        }, options);
+    }
+    /**
+     * Decrypts a ciphertext Encrypt or GenerateDataKey made with this key,
+     * given the same encryption context. Refused with `BAD_REQUEST` for a
+     * ciphertext that doesn't decrypt under this key and context, and with
+     * `CONFLICT` for a key that isn't enabled. Needs `kms.key.decrypt` on the
+     * project.
+     */
+    async decrypt(request, options) {
+        const p0 = pathValue("name", request.name, "projects/*/regions/*/keys/*");
+        return this.service.call({
+            method: "POST",
+            path: `/v1beta1/${p0}:decrypt`,
+            body: request,
+        }, options);
+    }
+    /**
+     * Returns a new random 256-bit data key, in plaintext and encrypted under
+     * an `ENCRYPT_DECRYPT` key's primary version with the encryption context.
+     * Encrypt your data with the plaintext, keep only the ciphertext beside
+     * it, and recover the data key with Decrypt when you need it. Needs
+     * `kms.key.generate_data_key` on the project.
+     */
+    async generateDataKey(request, options) {
+        const p0 = pathValue("name", request.name, "projects/*/regions/*/keys/*");
+        return this.service.call({
+            method: "POST",
+            path: `/v1beta1/${p0}:generateDataKey`,
+            body: request,
+        }, options);
+    }
+    /**
+     * Signs up to 64 KiB with a signing key's primary version, or the
+     * version `keyVersion` names. ECDSA hashes
+     * the data with SHA-256 itself: send the data, not a digest. Refused with
+     * `CONFLICT` for a key that isn't enabled, and with `BAD_REQUEST` for an
+     * `ENCRYPT_DECRYPT` key. Needs `kms.key.sign` on the project.
+     */
+    async sign(request, options) {
+        const p0 = pathValue("name", request.name, "projects/*/regions/*/keys/*");
+        return this.service.call({
+            method: "POST",
+            path: `/v1beta1/${p0}:sign`,
+            body: request,
+        }, options);
+    }
+    /**
+     * Returns a signing key version's public key, to verify its signatures
+     * with. Answered for a disabled or deleted key too, until its material is
+     * destroyed. Refused with `BAD_REQUEST` for an `ENCRYPT_DECRYPT` key.
+     * Needs `kms.key.get_public_key` on the project.
+     */
+    async getPublicKey(request, options) {
+        const p0 = pathValue("name", request.name, "projects/*/regions/*/keys/*/versions/*/publicKey");
+        return this.service.call({
+            method: "GET",
+            path: `/v1beta1/${p0}`,
+            query: query(request, ["name"]),
+            idempotent: true,
+        }, options);
+    }
+}
+/** What a key is for, and the algorithm it uses. */
+export const Key_Purpose = {
+    /** Not set. */
+    PURPOSE_UNSPECIFIED: "PURPOSE_UNSPECIFIED",
+    /** Encrypt, Decrypt and GenerateDataKey, with AES-256-GCM-SIV. */
+    ENCRYPT_DECRYPT: "ENCRYPT_DECRYPT",
+    /** Sign with ECDSA over P-256 and SHA-256; signatures are ASN.1 DER. */
+    SIGN_ECDSA_P256_SHA256: "SIGN_ECDSA_P256_SHA256",
+    /** Sign with Ed25519; signatures are 64 bytes. */
+    SIGN_ED25519: "SIGN_ED25519",
+};
+/** Whether a key can be used. */
+export const Key_State = {
+    /** Not set. */
+    STATE_UNSPECIFIED: "STATE_UNSPECIFIED",
+    /** Serves every operation of its purpose. */
+    ENABLED: "ENABLED",
+    /** Refuses every operation but GetPublicKey until enabled again. */
+    DISABLED: "DISABLED",
+    /**
+     * Deleted: refuses every operation but GetPublicKey. Until
+     * `purgeTime` UndeleteKey restores it; after it, its material is
+     * destroyed.
+     */
+    DELETED: "DELETED",
+};
+//# sourceMappingURL=key.js.map

package/dist/v1beta1/key.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"key.js","sourceRoot":"","sources":["../../src/v1beta1/key.ts"],"names":[],"mappings":"AAAA,mEAAmE;AACnE,4CAA4C;AAE5C,OAAO,EAIL,YAAY,EACZ,SAAS,EACT,KAAK,GACN,MAAM,mBAAmB,CAAC;AAE3B;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,SAAS;IACpB;;;OAGG;IACM,OAAO,CAAU;IAE1B,oEAAoE;IACpE,YAAY,MAAc;QACxB,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAC7C,CAAC;IAED,yEAAyE;IACzE,KAAK,CAAC,MAAM,CAAC,OAAsB,EAAE,OAAqB;QACxD,MAAM,EAAE,GAAG,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,EAAE,6BAA6B,CAAC,CAAC;QAC1E,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CACtB;YACE,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,YAAY,EAAE,EAAE;YACtB,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC;YAC/B,UAAU,EAAE,IAAI;SACjB,EACD,OAAO,CACR,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,QAAQ,CAAC,OAAwB,EAAE,OAAqB;QAC5D,MAAM,EAAE,GAAG,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC;QACvE,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CACtB;YACE,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,YAAY,EAAE,OAAO;YAC3B,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,CAAC;YACjC,UAAU,EAAE,IAAI;SACjB,EACD,OAAO,CACR,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,CAAC,OAAO,CAAC,OAAwB,EAAE,OAAqB;QAC5D,KAAK,IAAI,IAAI,GAAG,OAAO,IAAM,CAAC;YAC5B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YACpD,KAAK,CAAC,CAAC,QAAQ,CAAC,IAAI,IAAI,EAAE,CAAC;YAC3B,IAAI,CAAC,QAAQ,CAAC,aAAa;gBAAE,OAAO;YACpC,IAAI,GAAG,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,QAAQ,CAAC,aAAa,EAAE,CAAC;QACxD,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,SAAS,CAAC,OAAyB,EAAE,OAAqB;QAC9D,IAAI,CAAC,OAAO,CAAC,SAAS;YAAE,OAAO,GAAG,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,EAAE,CAAC;QAC5E,MAAM,EAAE,GAAG,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC;QACvE,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CACtB;YACE,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,YAAY,EAAE,OAAO;YAC3B,IAAI,EAAE,OAAO,CAAC,GAAG;YACjB,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YACxC,UAAU,EAAE,IAAI;SACjB,EACD,OAAO,CACR,CAAC;IACJ,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,SAAS,CAAC,OAAyB,EAAE,OAAqB;QAC9D,IAAI,CAAC,OAAO,CAAC,SAAS;YAAE,OAAO,GAAG,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,EAAE,CAAC;QAC5E,MAAM,EAAE,GAAG,SAAS,CAAC,UAAU,EAAE,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,6BAA6B,CAAC,CAAC;QACnF,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CACtB;YACE,MAAM,EAAE,OAAO;YACf,IAAI,EAAE,YAAY,EAAE,EAAE;YACtB,IAAI,EAAE,OAAO,CAAC,GAAG;YACjB,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;YAC1C,UAAU,EAAE,IAAI;SACjB,EACD,OAAO,CACR,CAAC;IACJ,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,SAAS,CAAC,OAAyB,EAAE,OAAqB;QAC9D,IAAI,CAAC,OAAO,CAAC,SAAS;YAAE,OAAO,GAAG,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,EAAE,CAAC;QAC5E,MAAM,EAAE,GAAG,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,EAAE,6BAA6B,CAAC,CAAC;QAC1E,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CACtB;YACE,MAAM,EAAE,QAAQ;YAChB,IAAI,EAAE,YAAY,EAAE,EAAE;YACtB,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC;YAC/B,UAAU,EAAE,IAAI;SACjB,EACD,OAAO,CACR,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,WAAW,CAAC,OAA2B,EAAE,OAAqB;QAClE,IAAI,CAAC,OAAO,CAAC,SAAS;YAAE,OAAO,GAAG,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,EAAE,CAAC;QAC5E,MAAM,EAAE,GAAG,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,EAAE,6BAA6B,CAAC,CAAC;QAC1E,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CACtB;YACE,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,YAAY,EAAE,WAAW;YAC/B,IAAI,EAAE,OAAO;YACb,UAAU,EAAE,IAAI;SACjB,EACD,OAAO,CACR,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,SAAS,CAAC,OAAyB,EAAE,OAAqB;QAC9D,IAAI,CAAC,OAAO,CAAC,SAAS;YAAE,OAAO,GAAG,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,EAAE,CAAC;QAC5E,MAAM,EAAE,GAAG,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,EAAE,6BAA6B,CAAC,CAAC;QAC1E,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CACtB;YACE,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,YAAY,EAAE,SAAS;YAC7B,IAAI,EAAE,OAAO;YACb,UAAU,EAAE,IAAI;SACjB,EACD,OAAO,CACR,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,OAAO,CAAC,OAAuB,EAAE,OAAqB;QAC1D,MAAM,EAAE,GAAG,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,EAAE,6BAA6B,CAAC,CAAC;QAC1E,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CACtB;YACE,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,YAAY,EAAE,UAAU;YAC9B,IAAI,EAAE,OAAO;SACd,EACD,OAAO,CACR,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,OAAO,CAAC,OAAuB,EAAE,OAAqB;QAC1D,MAAM,EAAE,GAAG,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,EAAE,6BAA6B,CAAC,CAAC;QAC1E,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CACtB;YACE,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,YAAY,EAAE,UAAU;YAC9B,IAAI,EAAE,OAAO;SACd,EACD,OAAO,CACR,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,eAAe,CAAC,OAA+B,EAAE,OAAqB;QAC1E,MAAM,EAAE,GAAG,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,EAAE,6BAA6B,CAAC,CAAC;QAC1E,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CACtB;YACE,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,YAAY,EAAE,kBAAkB;YACtC,IAAI,EAAE,OAAO;SACd,EACD,OAAO,CACR,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,IAAI,CAAC,OAAoB,EAAE,OAAqB;QACpD,MAAM,EAAE,GAAG,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,EAAE,6BAA6B,CAAC,CAAC;QAC1E,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CACtB;YACE,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,YAAY,EAAE,OAAO;YAC3B,IAAI,EAAE,OAAO;SACd,EACD,OAAO,CACR,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,YAAY,CAAC,OAA4B,EAAE,OAAqB;QACpE,MAAM,EAAE,GAAG,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,EAAE,kDAAkD,CAAC,CAAC;QAC/F,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CACtB;YACE,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,YAAY,EAAE,EAAE;YACtB,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC;YAC/B,UAAU,EAAE,IAAI;SACjB,EACD,OAAO,CACR,CAAC;IACJ,CAAC;CACF;AA6CD,oDAAoD;AACpD,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,eAAe;IACf,mBAAmB,EAAE,qBAAqB;IAC1C,kEAAkE;IAClE,eAAe,EAAE,iBAAiB;IAClC,wEAAwE;IACxE,sBAAsB,EAAE,wBAAwB;IAChD,kDAAkD;IAClD,YAAY,EAAE,cAAc;CACpB,CAAC;AAKX,iCAAiC;AACjC,MAAM,CAAC,MAAM,SAAS,GAAG;IACvB,eAAe;IACf,iBAAiB,EAAE,mBAAmB;IACtC,6CAA6C;IAC7C,OAAO,EAAE,SAAS;IAClB,oEAAoE;IACpE,QAAQ,EAAE,UAAU;IACpB;;;;OAIG;IACH,OAAO,EAAE,SAAS;CACV,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@origincloud/kms",
-  "version": "0.27.0",
+  "version": "0.28.0",
   "description": "Origin Cloud's KMS service: grants: permission for one platform host to use one key for one operation and one encryption context, for at most an hour at a time.",
   "license": "Apache-2.0",
   "homepage": "https://github.com/origincloudhq/sdk-typescript#readme",
@@ -34,9 +34,9 @@
     "!dist/**/*.tsbuildinfo"
   ],
   "peerDependencies": {
-    "@origincloud/core": "^0.27.0"
+    "@origincloud/core": "^0.28.0"
   },
   "devDependencies": {
-    "@origincloud/core": "^0.27.0"
+    "@origincloud/core": "^0.28.0"
   }
 }