@rivetkit/engine-api-full 2.3.19 → 2.3.21

package/dist/browser/cjs/index.js

@@ -580,9 +580,12 @@ module.exports = __toCommonJS(src_exports);
 // src/api/index.ts
 var api_exports = {};
 __export(api_exports, {
+  AuthOperationKind: () => AuthOperationKind,
+  AuthTokenResource: () => AuthTokenResource,
   CrashPolicy: () => CrashPolicy,
   HealthStatus: () => HealthStatus,
   RunnerConfigVariant: () => RunnerConfigVariant,
+  authTokens: () => authTokens_exports,
   datacenters: () => datacenters_exports,
   envoys: () => envoys_exports,
   health: () => health_exports,
@@ -591,6 +594,26 @@ __export(api_exports, {
   runners: () => runners_exports
 });
 
+// src/api/types/AuthOperationKind.ts
+var AuthOperationKind = {
+  Read: "read",
+  Update: "update",
+  List: "list",
+  Create: "create",
+  Delete: "delete"
+};
+
+// src/api/types/AuthTokenResource.ts
+var AuthTokenResource = {
+  Namespace: "namespace",
+  Actor: "actor",
+  Runner: "runner",
+  RunnerConfig: "runner_config",
+  Datacenter: "datacenter",
+  ActorGateway: "actor_gateway",
+  ActorKv: "actor_kv"
+};
+
 // src/api/types/CrashPolicy.ts
 var CrashPolicy = {
   Restart: "restart",
@@ -610,6 +633,9 @@ var RunnerConfigVariant = {
   Normal: "normal"
 };
 
+// src/api/resources/authTokens/index.ts
+var authTokens_exports = {};
+
 // src/api/resources/datacenters/index.ts
 var datacenters_exports = {};
 
@@ -2357,6 +2383,14 @@ __export(serialization_exports, {
   ActorsRescheduleResponse: () => ActorsRescheduleResponse,
   ActorsSleepRequestBody: () => ActorsSleepRequestBody,
   ActorsSleepResponse: () => ActorsSleepResponse,
+  AuthOperationKind: () => AuthOperationKind2,
+  AuthTokenCreateRequest: () => AuthTokenCreateRequest,
+  AuthTokenCreateResponse: () => AuthTokenCreateResponse,
+  AuthTokenGrant: () => AuthTokenGrant,
+  AuthTokenInspectResponse: () => AuthTokenInspectResponse,
+  AuthTokenResource: () => AuthTokenResource2,
+  AuthTokenTargetScope: () => AuthTokenTargetScope,
+  AuthTokenTargetScopeId: () => AuthTokenTargetScopeId,
   CrashPolicy: () => CrashPolicy2,
   Datacenter: () => Datacenter,
   DatacenterHealth: () => DatacenterHealth,
@@ -2400,6 +2434,7 @@ __export(serialization_exports, {
   RunnerConfigsUpsertResponse: () => RunnerConfigsUpsertResponse,
   RunnersListNamesResponse: () => RunnersListNamesResponse,
   RunnersListResponse: () => RunnersListResponse,
+  authTokens: () => authTokens_exports2,
   namespaces: () => namespaces_exports2
 });
 
@@ -2482,6 +2517,51 @@ var ActorsSleepRequestBody = schemas_exports.record(schemas_exports.string(), sc
 // src/serialization/types/ActorsSleepResponse.ts
 var ActorsSleepResponse = schemas_exports.record(schemas_exports.string(), schemas_exports.unknown());
 
+// src/serialization/types/AuthOperationKind.ts
+var AuthOperationKind2 = schemas_exports.enum_(["read", "update", "list", "create", "delete"]);
+
+// src/serialization/types/AuthTokenCreateResponse.ts
+var AuthTokenCreateResponse = schemas_exports.object({
+  expiresTs: schemas_exports.property("expires_ts", schemas_exports.number()),
+  issuedTs: schemas_exports.property("issued_ts", schemas_exports.number()),
+  token: schemas_exports.string()
+});
+
+// src/serialization/types/AuthTokenResource.ts
+var AuthTokenResource2 = schemas_exports.enum_([
+  "namespace",
+  "actor",
+  "runner",
+  "runner_config",
+  "datacenter",
+  "actor_gateway",
+  "actor_kv"
+]);
+
+// src/serialization/types/AuthTokenTargetScopeId.ts
+var AuthTokenTargetScopeId = schemas_exports.object({
+  id: RivetId
+});
+
+// src/serialization/types/AuthTokenTargetScope.ts
+var AuthTokenTargetScope = schemas_exports.undiscriminatedUnion([schemas_exports.stringLiteral("any"), AuthTokenTargetScopeId]);
+
+// src/serialization/types/AuthTokenGrant.ts
+var AuthTokenGrant = schemas_exports.object({
+  operations: schemas_exports.list(AuthOperationKind2),
+  resource: AuthTokenResource2,
+  target: AuthTokenTargetScope
+});
+
+// src/serialization/types/AuthTokenInspectResponse.ts
+var AuthTokenInspectResponse = schemas_exports.object({
+  expiresTs: schemas_exports.property("expires_ts", schemas_exports.number()),
+  grants: schemas_exports.list(AuthTokenGrant),
+  issuedTs: schemas_exports.property("issued_ts", schemas_exports.number()),
+  namespaceId: schemas_exports.property("namespace_id", RivetId),
+  subject: schemas_exports.string().optional()
+});
+
 // src/serialization/types/Datacenter.ts
 var Datacenter = schemas_exports.object({
   label: schemas_exports.number(),
@@ -2798,6 +2878,20 @@ var RunnerConfigsUpsertRequestBody = schemas_exports.object({
   datacenters: schemas_exports.record(schemas_exports.string(), RunnerConfig)
 });
 
+// src/serialization/resources/authTokens/index.ts
+var authTokens_exports2 = {};
+__export(authTokens_exports2, {
+  AuthTokenCreateRequest: () => AuthTokenCreateRequest
+});
+
+// src/serialization/resources/authTokens/client/requests/AuthTokenCreateRequest.ts
+var AuthTokenCreateRequest = schemas_exports.object({
+  duration: schemas_exports.number().optional(),
+  grants: schemas_exports.list(AuthTokenGrant),
+  namespace: schemas_exports.string(),
+  subject: schemas_exports.string().optional()
+});
+
 // src/serialization/resources/namespaces/index.ts
 var namespaces_exports2 = {};
 __export(namespaces_exports2, {
@@ -2811,7 +2905,7 @@ var NamespacesCreateRequest = schemas_exports.object({
 });
 
 // src/Client.ts
-var import_url_join7 = __toESM(require("url-join"));
+var import_url_join8 = __toESM(require("url-join"));
 
 // src/errors/RivetError.ts
 var RivetError = class _RivetError extends Error {
@@ -2854,8 +2948,138 @@ var RivetTimeoutError = class _RivetTimeoutError extends Error {
   }
 };
 
-// src/api/resources/datacenters/client/Client.ts
+// src/api/resources/authTokens/client/Client.ts
 var import_url_join = __toESM(require("url-join"));
+var AuthTokens = class {
+  constructor(_options) {
+    this._options = _options;
+  }
+  /**
+   * @param {Rivet.AuthTokenCreateRequest} request
+   * @param {AuthTokens.RequestOptions} requestOptions - Request-specific configuration.
+   *
+   * @example
+   *     await client.authTokens.create({
+   *         grants: [{
+   *                 operations: ["read"],
+   *                 resource: "namespace",
+   *                 target: "any"
+   *             }],
+   *         namespace: "namespace"
+   *     })
+   */
+  async create(request, requestOptions) {
+    const _response = await (this._options.fetcher ?? fetcher)({
+      url: (0, import_url_join.default)(
+        await Supplier.get(this._options.baseUrl) ?? await Supplier.get(this._options.environment),
+        "auth/tokens"
+      ),
+      method: "POST",
+      headers: {
+        Authorization: await this._getAuthorizationHeader(),
+        "X-Fern-Language": "JavaScript",
+        "X-Fern-Runtime": RUNTIME.type,
+        "X-Fern-Runtime-Version": RUNTIME.version,
+        ...requestOptions?.headers
+      },
+      contentType: "application/json",
+      requestType: "json",
+      body: AuthTokenCreateRequest.jsonOrThrow(request, { unrecognizedObjectKeys: "strip" }),
+      timeoutMs: requestOptions?.timeoutInSeconds != null ? requestOptions.timeoutInSeconds * 1e3 : 18e4,
+      maxRetries: requestOptions?.maxRetries,
+      abortSignal: requestOptions?.abortSignal
+    });
+    if (_response.ok) {
+      return AuthTokenCreateResponse.parseOrThrow(_response.body, {
+        unrecognizedObjectKeys: "passthrough",
+        allowUnrecognizedUnionMembers: true,
+        allowUnrecognizedEnumValues: true,
+        skipValidation: true,
+        breadcrumbsPrefix: ["response"]
+      });
+    }
+    if (_response.error.reason === "status-code") {
+      throw new RivetError({
+        statusCode: _response.error.statusCode,
+        body: _response.error.body
+      });
+    }
+    switch (_response.error.reason) {
+      case "non-json":
+        throw new RivetError({
+          statusCode: _response.error.statusCode,
+          body: _response.error.rawBody
+        });
+      case "timeout":
+        throw new RivetTimeoutError("Timeout exceeded when calling POST /auth/tokens.");
+      case "unknown":
+        throw new RivetError({
+          message: _response.error.errorMessage
+        });
+    }
+  }
+  /**
+   * @param {AuthTokens.RequestOptions} requestOptions - Request-specific configuration.
+   *
+   * @example
+   *     await client.authTokens.inspect()
+   */
+  async inspect(requestOptions) {
+    const _response = await (this._options.fetcher ?? fetcher)({
+      url: (0, import_url_join.default)(
+        await Supplier.get(this._options.baseUrl) ?? await Supplier.get(this._options.environment),
+        "auth/tokens/inspect"
+      ),
+      method: "GET",
+      headers: {
+        Authorization: await this._getAuthorizationHeader(),
+        "X-Fern-Language": "JavaScript",
+        "X-Fern-Runtime": RUNTIME.type,
+        "X-Fern-Runtime-Version": RUNTIME.version,
+        ...requestOptions?.headers
+      },
+      contentType: "application/json",
+      requestType: "json",
+      timeoutMs: requestOptions?.timeoutInSeconds != null ? requestOptions.timeoutInSeconds * 1e3 : 18e4,
+      maxRetries: requestOptions?.maxRetries,
+      abortSignal: requestOptions?.abortSignal
+    });
+    if (_response.ok) {
+      return AuthTokenInspectResponse.parseOrThrow(_response.body, {
+        unrecognizedObjectKeys: "passthrough",
+        allowUnrecognizedUnionMembers: true,
+        allowUnrecognizedEnumValues: true,
+        skipValidation: true,
+        breadcrumbsPrefix: ["response"]
+      });
+    }
+    if (_response.error.reason === "status-code") {
+      throw new RivetError({
+        statusCode: _response.error.statusCode,
+        body: _response.error.body
+      });
+    }
+    switch (_response.error.reason) {
+      case "non-json":
+        throw new RivetError({
+          statusCode: _response.error.statusCode,
+          body: _response.error.rawBody
+        });
+      case "timeout":
+        throw new RivetTimeoutError("Timeout exceeded when calling GET /auth/tokens/inspect.");
+      case "unknown":
+        throw new RivetError({
+          message: _response.error.errorMessage
+        });
+    }
+  }
+  async _getAuthorizationHeader() {
+    return `Bearer ${await Supplier.get(this._options.token)}`;
+  }
+};
+
+// src/api/resources/datacenters/client/Client.ts
+var import_url_join2 = __toESM(require("url-join"));
 var Datacenters = class {
   constructor(_options) {
     this._options = _options;
@@ -2868,7 +3092,7 @@ var Datacenters = class {
    */
   async list(requestOptions) {
     const _response = await (this._options.fetcher ?? fetcher)({
-      url: (0, import_url_join.default)(
+      url: (0, import_url_join2.default)(
         await Supplier.get(this._options.baseUrl) ?? await Supplier.get(this._options.environment),
         "datacenters"
       ),
@@ -2921,7 +3145,7 @@ var Datacenters = class {
 };
 
 // src/api/resources/envoys/client/Client.ts
-var import_url_join2 = __toESM(require("url-join"));
+var import_url_join3 = __toESM(require("url-join"));
 var Envoys = class {
   constructor(_options) {
     this._options = _options;
@@ -2956,7 +3180,7 @@ var Envoys = class {
       _queryParams["cursor"] = cursor;
     }
     const _response = await (this._options.fetcher ?? fetcher)({
-      url: (0, import_url_join2.default)(
+      url: (0, import_url_join3.default)(
         await Supplier.get(this._options.baseUrl) ?? await Supplier.get(this._options.environment),
         "envoys"
       ),
@@ -3010,7 +3234,7 @@ var Envoys = class {
 };
 
 // src/api/resources/health/client/Client.ts
-var import_url_join3 = __toESM(require("url-join"));
+var import_url_join4 = __toESM(require("url-join"));
 var Health = class {
   constructor(_options) {
     this._options = _options;
@@ -3023,7 +3247,7 @@ var Health = class {
    */
   async fanout(requestOptions) {
     const _response = await (this._options.fetcher ?? fetcher)({
-      url: (0, import_url_join3.default)(
+      url: (0, import_url_join4.default)(
         await Supplier.get(this._options.baseUrl) ?? await Supplier.get(this._options.environment),
         "health/fanout"
       ),
@@ -3076,7 +3300,7 @@ var Health = class {
 };
 
 // src/api/resources/metadata/client/Client.ts
-var import_url_join4 = __toESM(require("url-join"));
+var import_url_join5 = __toESM(require("url-join"));
 var Metadata = class {
   constructor(_options) {
     this._options = _options;
@@ -3089,7 +3313,7 @@ var Metadata = class {
    */
   async get(requestOptions) {
     const _response = await (this._options.fetcher ?? fetcher)({
-      url: (0, import_url_join4.default)(
+      url: (0, import_url_join5.default)(
         await Supplier.get(this._options.baseUrl) ?? await Supplier.get(this._options.environment),
         "metadata"
       ),
@@ -3142,7 +3366,7 @@ var Metadata = class {
 };
 
 // src/api/resources/namespaces/client/Client.ts
-var import_url_join5 = __toESM(require("url-join"));
+var import_url_join6 = __toESM(require("url-join"));
 var Namespaces = class {
   constructor(_options) {
     this._options = _options;
@@ -3179,7 +3403,7 @@ var Namespaces = class {
       }
     }
     const _response = await (this._options.fetcher ?? fetcher)({
-      url: (0, import_url_join5.default)(
+      url: (0, import_url_join6.default)(
         await Supplier.get(this._options.baseUrl) ?? await Supplier.get(this._options.environment),
         "namespaces"
       ),
@@ -3239,7 +3463,7 @@ var Namespaces = class {
    */
   async create(request, requestOptions) {
     const _response = await (this._options.fetcher ?? fetcher)({
-      url: (0, import_url_join5.default)(
+      url: (0, import_url_join6.default)(
         await Supplier.get(this._options.baseUrl) ?? await Supplier.get(this._options.environment),
         "namespaces"
       ),
@@ -3293,7 +3517,7 @@ var Namespaces = class {
 };
 
 // src/api/resources/runners/client/Client.ts
-var import_url_join6 = __toESM(require("url-join"));
+var import_url_join7 = __toESM(require("url-join"));
 var Runners = class {
   constructor(_options) {
     this._options = _options;
@@ -3336,7 +3560,7 @@ var Runners = class {
       _queryParams["cursor"] = cursor;
     }
     const _response = await (this._options.fetcher ?? fetcher)({
-      url: (0, import_url_join6.default)(
+      url: (0, import_url_join7.default)(
         await Supplier.get(this._options.baseUrl) ?? await Supplier.get(this._options.environment),
         "runners"
       ),
@@ -3409,7 +3633,7 @@ var Runners = class {
       _queryParams["cursor"] = cursor;
     }
     const _response = await (this._options.fetcher ?? fetcher)({
-      url: (0, import_url_join6.default)(
+      url: (0, import_url_join7.default)(
         await Supplier.get(this._options.baseUrl) ?? await Supplier.get(this._options.environment),
         "runners/names"
       ),
@@ -3467,12 +3691,16 @@ var RivetClient = class {
   constructor(_options) {
     this._options = _options;
   }
+  _authTokens;
   _datacenters;
   _envoys;
   _health;
   _metadata;
   _namespaces;
   _runners;
+  get authTokens() {
+    return this._authTokens ??= new AuthTokens(this._options);
+  }
   get datacenters() {
     return this._datacenters ??= new Datacenters(this._options);
   }
@@ -3555,7 +3783,7 @@ var RivetClient = class {
       _queryParams["cursor"] = cursor;
     }
     const _response = await (this._options.fetcher ?? fetcher)({
-      url: (0, import_url_join7.default)(
+      url: (0, import_url_join8.default)(
         await Supplier.get(this._options.baseUrl) ?? await Supplier.get(this._options.environment),
         "actors"
       ),
@@ -3637,7 +3865,7 @@ var RivetClient = class {
     const _queryParams = {};
     _queryParams["namespace"] = namespace;
     const _response = await (this._options.fetcher ?? fetcher)({
-      url: (0, import_url_join7.default)(
+      url: (0, import_url_join8.default)(
         await Supplier.get(this._options.baseUrl) ?? await Supplier.get(this._options.environment),
         "actors"
       ),
@@ -3730,7 +3958,7 @@ var RivetClient = class {
     const _queryParams = {};
     _queryParams["namespace"] = namespace;
     const _response = await (this._options.fetcher ?? fetcher)({
-      url: (0, import_url_join7.default)(
+      url: (0, import_url_join8.default)(
         await Supplier.get(this._options.baseUrl) ?? await Supplier.get(this._options.environment),
         "actors"
       ),
@@ -3804,7 +4032,7 @@ var RivetClient = class {
       _queryParams["cursor"] = cursor;
     }
     const _response = await (this._options.fetcher ?? fetcher)({
-      url: (0, import_url_join7.default)(
+      url: (0, import_url_join8.default)(
         await Supplier.get(this._options.baseUrl) ?? await Supplier.get(this._options.environment),
         "actors/names"
       ),
@@ -3872,7 +4100,7 @@ var RivetClient = class {
     const _queryParams = {};
     _queryParams["namespace"] = namespace;
     const _response = await (this._options.fetcher ?? fetcher)({
-      url: (0, import_url_join7.default)(
+      url: (0, import_url_join8.default)(
         await Supplier.get(this._options.baseUrl) ?? await Supplier.get(this._options.environment),
         `actors/${encodeURIComponent(RivetId.jsonOrThrow(actorId))}`
       ),
@@ -3936,7 +4164,7 @@ var RivetClient = class {
     const _queryParams = {};
     _queryParams["namespace"] = namespace;
     const _response = await (this._options.fetcher ?? fetcher)({
-      url: (0, import_url_join7.default)(
+      url: (0, import_url_join8.default)(
         await Supplier.get(this._options.baseUrl) ?? await Supplier.get(this._options.environment),
         `actors/${encodeURIComponent(RivetId.jsonOrThrow(actorId))}/kv/keys/${encodeURIComponent(key)}`
       ),
@@ -4004,7 +4232,7 @@ var RivetClient = class {
     const _queryParams = {};
     _queryParams["namespace"] = namespace;
     const _response = await (this._options.fetcher ?? fetcher)({
-      url: (0, import_url_join7.default)(
+      url: (0, import_url_join8.default)(
         await Supplier.get(this._options.baseUrl) ?? await Supplier.get(this._options.environment),
         `actors/${encodeURIComponent(RivetId.jsonOrThrow(actorId))}/reschedule`
       ),
@@ -4071,7 +4299,7 @@ var RivetClient = class {
     const _queryParams = {};
     _queryParams["namespace"] = namespace;
     const _response = await (this._options.fetcher ?? fetcher)({
-      url: (0, import_url_join7.default)(
+      url: (0, import_url_join8.default)(
         await Supplier.get(this._options.baseUrl) ?? await Supplier.get(this._options.environment),
         `actors/${encodeURIComponent(RivetId.jsonOrThrow(actorId))}/sleep`
       ),
@@ -4155,7 +4383,7 @@ var RivetClient = class {
       }
     }
     const _response = await (this._options.fetcher ?? fetcher)({
-      url: (0, import_url_join7.default)(
+      url: (0, import_url_join8.default)(
         await Supplier.get(this._options.baseUrl) ?? await Supplier.get(this._options.environment),
         "runner-configs"
       ),
@@ -4218,7 +4446,7 @@ var RivetClient = class {
     const _queryParams = {};
     _queryParams["namespace"] = namespace;
     const _response = await (this._options.fetcher ?? fetcher)({
-      url: (0, import_url_join7.default)(
+      url: (0, import_url_join8.default)(
         await Supplier.get(this._options.baseUrl) ?? await Supplier.get(this._options.environment),
         "runner-configs/serverless-health-check"
       ),
@@ -4289,7 +4517,7 @@ var RivetClient = class {
     const _queryParams = {};
     _queryParams["namespace"] = namespace;
     const _response = await (this._options.fetcher ?? fetcher)({
-      url: (0, import_url_join7.default)(
+      url: (0, import_url_join8.default)(
         await Supplier.get(this._options.baseUrl) ?? await Supplier.get(this._options.environment),
         `runner-configs/${encodeURIComponent(runnerName)}`
       ),
@@ -4353,7 +4581,7 @@ var RivetClient = class {
     const _queryParams = {};
     _queryParams["namespace"] = namespace;
     const _response = await (this._options.fetcher ?? fetcher)({
-      url: (0, import_url_join7.default)(
+      url: (0, import_url_join8.default)(
         await Supplier.get(this._options.baseUrl) ?? await Supplier.get(this._options.environment),
         `runner-configs/${encodeURIComponent(runnerName)}`
       ),
@@ -4421,7 +4649,7 @@ var RivetClient = class {
     const _queryParams = {};
     _queryParams["namespace"] = namespace;
     const _response = await (this._options.fetcher ?? fetcher)({
-      url: (0, import_url_join7.default)(
+      url: (0, import_url_join8.default)(
         await Supplier.get(this._options.baseUrl) ?? await Supplier.get(this._options.environment),
         `runner-configs/${encodeURIComponent(runnerName)}/refresh-metadata`
       ),

package/dist/browser/cjs/serialization.js

@@ -44,6 +44,14 @@ __export(serialization_exports, {
   ActorsRescheduleResponse: () => ActorsRescheduleResponse,
   ActorsSleepRequestBody: () => ActorsSleepRequestBody,
   ActorsSleepResponse: () => ActorsSleepResponse,
+  AuthOperationKind: () => AuthOperationKind,
+  AuthTokenCreateRequest: () => AuthTokenCreateRequest,
+  AuthTokenCreateResponse: () => AuthTokenCreateResponse,
+  AuthTokenGrant: () => AuthTokenGrant,
+  AuthTokenInspectResponse: () => AuthTokenInspectResponse,
+  AuthTokenResource: () => AuthTokenResource,
+  AuthTokenTargetScope: () => AuthTokenTargetScope,
+  AuthTokenTargetScopeId: () => AuthTokenTargetScopeId,
   CrashPolicy: () => CrashPolicy,
   Datacenter: () => Datacenter,
   DatacenterHealth: () => DatacenterHealth,
@@ -87,6 +95,7 @@ __export(serialization_exports, {
   RunnerConfigsUpsertResponse: () => RunnerConfigsUpsertResponse,
   RunnersListNamesResponse: () => RunnersListNamesResponse,
   RunnersListResponse: () => RunnersListResponse,
+  authTokens: () => authTokens_exports,
   namespaces: () => namespaces_exports
 });
 module.exports = __toCommonJS(serialization_exports);
@@ -1632,6 +1641,51 @@ var ActorsSleepRequestBody = schemas_exports.record(schemas_exports.string(), sc
 // src/serialization/types/ActorsSleepResponse.ts
 var ActorsSleepResponse = schemas_exports.record(schemas_exports.string(), schemas_exports.unknown());
 
+// src/serialization/types/AuthOperationKind.ts
+var AuthOperationKind = schemas_exports.enum_(["read", "update", "list", "create", "delete"]);
+
+// src/serialization/types/AuthTokenCreateResponse.ts
+var AuthTokenCreateResponse = schemas_exports.object({
+  expiresTs: schemas_exports.property("expires_ts", schemas_exports.number()),
+  issuedTs: schemas_exports.property("issued_ts", schemas_exports.number()),
+  token: schemas_exports.string()
+});
+
+// src/serialization/types/AuthTokenResource.ts
+var AuthTokenResource = schemas_exports.enum_([
+  "namespace",
+  "actor",
+  "runner",
+  "runner_config",
+  "datacenter",
+  "actor_gateway",
+  "actor_kv"
+]);
+
+// src/serialization/types/AuthTokenTargetScopeId.ts
+var AuthTokenTargetScopeId = schemas_exports.object({
+  id: RivetId
+});
+
+// src/serialization/types/AuthTokenTargetScope.ts
+var AuthTokenTargetScope = schemas_exports.undiscriminatedUnion([schemas_exports.stringLiteral("any"), AuthTokenTargetScopeId]);
+
+// src/serialization/types/AuthTokenGrant.ts
+var AuthTokenGrant = schemas_exports.object({
+  operations: schemas_exports.list(AuthOperationKind),
+  resource: AuthTokenResource,
+  target: AuthTokenTargetScope
+});
+
+// src/serialization/types/AuthTokenInspectResponse.ts
+var AuthTokenInspectResponse = schemas_exports.object({
+  expiresTs: schemas_exports.property("expires_ts", schemas_exports.number()),
+  grants: schemas_exports.list(AuthTokenGrant),
+  issuedTs: schemas_exports.property("issued_ts", schemas_exports.number()),
+  namespaceId: schemas_exports.property("namespace_id", RivetId),
+  subject: schemas_exports.string().optional()
+});
+
 // src/serialization/types/Datacenter.ts
 var Datacenter = schemas_exports.object({
   label: schemas_exports.number(),
@@ -1948,6 +2002,20 @@ var RunnerConfigsUpsertRequestBody = schemas_exports.object({
   datacenters: schemas_exports.record(schemas_exports.string(), RunnerConfig)
 });
 
+// src/serialization/resources/authTokens/index.ts
+var authTokens_exports = {};
+__export(authTokens_exports, {
+  AuthTokenCreateRequest: () => AuthTokenCreateRequest
+});
+
+// src/serialization/resources/authTokens/client/requests/AuthTokenCreateRequest.ts
+var AuthTokenCreateRequest = schemas_exports.object({
+  duration: schemas_exports.number().optional(),
+  grants: schemas_exports.list(AuthTokenGrant),
+  namespace: schemas_exports.string(),
+  subject: schemas_exports.string().optional()
+});
+
 // src/serialization/resources/namespaces/index.ts
 var namespaces_exports = {};
 __export(namespaces_exports, {