@rivetkit/engine-api-full 2.3.20 → 2.3.21

package/dist/node/cjs/index.js

@@ -584,9 +584,12 @@ module.exports = __toCommonJS(src_exports);
 // src/api/index.ts
 var api_exports = {};
 __export(api_exports, {
+  AuthOperationKind: () => AuthOperationKind,
+  AuthTokenResource: () => AuthTokenResource,
   CrashPolicy: () => CrashPolicy,
   HealthStatus: () => HealthStatus,
   RunnerConfigVariant: () => RunnerConfigVariant,
+  authTokens: () => authTokens_exports,
   datacenters: () => datacenters_exports,
   envoys: () => envoys_exports,
   health: () => health_exports,
@@ -595,6 +598,26 @@ __export(api_exports, {
   runners: () => runners_exports
 });
 
+// src/api/types/AuthOperationKind.ts
+var AuthOperationKind = {
+  Read: "read",
+  Update: "update",
+  List: "list",
+  Create: "create",
+  Delete: "delete"
+};
+
+// src/api/types/AuthTokenResource.ts
+var AuthTokenResource = {
+  Namespace: "namespace",
+  Actor: "actor",
+  Runner: "runner",
+  RunnerConfig: "runner_config",
+  Datacenter: "datacenter",
+  ActorGateway: "actor_gateway",
+  ActorKv: "actor_kv"
+};
+
 // src/api/types/CrashPolicy.ts
 var CrashPolicy = {
   Restart: "restart",
@@ -614,6 +637,9 @@ var RunnerConfigVariant = {
   Normal: "normal"
 };
 
+// src/api/resources/authTokens/index.ts
+var authTokens_exports = {};
+
 // src/api/resources/datacenters/index.ts
 var datacenters_exports = {};
 
@@ -2362,6 +2388,14 @@ __export(serialization_exports, {
   ActorsRescheduleResponse: () => ActorsRescheduleResponse,
   ActorsSleepRequestBody: () => ActorsSleepRequestBody,
   ActorsSleepResponse: () => ActorsSleepResponse,
+  AuthOperationKind: () => AuthOperationKind2,
+  AuthTokenCreateRequest: () => AuthTokenCreateRequest,
+  AuthTokenCreateResponse: () => AuthTokenCreateResponse,
+  AuthTokenGrant: () => AuthTokenGrant,
+  AuthTokenInspectResponse: () => AuthTokenInspectResponse,
+  AuthTokenResource: () => AuthTokenResource2,
+  AuthTokenTargetScope: () => AuthTokenTargetScope,
+  AuthTokenTargetScopeId: () => AuthTokenTargetScopeId,
   CrashPolicy: () => CrashPolicy2,
   Datacenter: () => Datacenter,
   DatacenterHealth: () => DatacenterHealth,
@@ -2405,6 +2439,7 @@ __export(serialization_exports, {
   RunnerConfigsUpsertResponse: () => RunnerConfigsUpsertResponse,
   RunnersListNamesResponse: () => RunnersListNamesResponse,
   RunnersListResponse: () => RunnersListResponse,
+  authTokens: () => authTokens_exports2,
   namespaces: () => namespaces_exports2
 });
 
@@ -2487,6 +2522,51 @@ var ActorsSleepRequestBody = schemas_exports.record(schemas_exports.string(), sc
 // src/serialization/types/ActorsSleepResponse.ts
 var ActorsSleepResponse = schemas_exports.record(schemas_exports.string(), schemas_exports.unknown());
 
+// src/serialization/types/AuthOperationKind.ts
+var AuthOperationKind2 = schemas_exports.enum_(["read", "update", "list", "create", "delete"]);
+
+// src/serialization/types/AuthTokenCreateResponse.ts
+var AuthTokenCreateResponse = schemas_exports.object({
+  expiresTs: schemas_exports.property("expires_ts", schemas_exports.number()),
+  issuedTs: schemas_exports.property("issued_ts", schemas_exports.number()),
+  token: schemas_exports.string()
+});
+
+// src/serialization/types/AuthTokenResource.ts
+var AuthTokenResource2 = schemas_exports.enum_([
+  "namespace",
+  "actor",
+  "runner",
+  "runner_config",
+  "datacenter",
+  "actor_gateway",
+  "actor_kv"
+]);
+
+// src/serialization/types/AuthTokenTargetScopeId.ts
+var AuthTokenTargetScopeId = schemas_exports.object({
+  id: RivetId
+});
+
+// src/serialization/types/AuthTokenTargetScope.ts
+var AuthTokenTargetScope = schemas_exports.undiscriminatedUnion([schemas_exports.stringLiteral("any"), AuthTokenTargetScopeId]);
+
+// src/serialization/types/AuthTokenGrant.ts
+var AuthTokenGrant = schemas_exports.object({
+  operations: schemas_exports.list(AuthOperationKind2),
+  resource: AuthTokenResource2,
+  target: AuthTokenTargetScope
+});
+
+// src/serialization/types/AuthTokenInspectResponse.ts
+var AuthTokenInspectResponse = schemas_exports.object({
+  expiresTs: schemas_exports.property("expires_ts", schemas_exports.number()),
+  grants: schemas_exports.list(AuthTokenGrant),
+  issuedTs: schemas_exports.property("issued_ts", schemas_exports.number()),
+  namespaceId: schemas_exports.property("namespace_id", RivetId),
+  subject: schemas_exports.string().optional()
+});
+
 // src/serialization/types/Datacenter.ts
 var Datacenter = schemas_exports.object({
   label: schemas_exports.number(),
@@ -2803,6 +2883,20 @@ var RunnerConfigsUpsertRequestBody = schemas_exports.object({
   datacenters: schemas_exports.record(schemas_exports.string(), RunnerConfig)
 });
 
+// src/serialization/resources/authTokens/index.ts
+var authTokens_exports2 = {};
+__export(authTokens_exports2, {
+  AuthTokenCreateRequest: () => AuthTokenCreateRequest
+});
+
+// src/serialization/resources/authTokens/client/requests/AuthTokenCreateRequest.ts
+var AuthTokenCreateRequest = schemas_exports.object({
+  duration: schemas_exports.number().optional(),
+  grants: schemas_exports.list(AuthTokenGrant),
+  namespace: schemas_exports.string(),
+  subject: schemas_exports.string().optional()
+});
+
 // src/serialization/resources/namespaces/index.ts
 var namespaces_exports2 = {};
 __export(namespaces_exports2, {
@@ -2816,7 +2910,7 @@ var NamespacesCreateRequest = schemas_exports.object({
 });
 
 // src/Client.ts
-var import_url_join7 = __toESM(require("url-join"));
+var import_url_join8 = __toESM(require("url-join"));
 
 // src/errors/RivetError.ts
 var RivetError = class _RivetError extends Error {
@@ -2859,8 +2953,138 @@ var RivetTimeoutError = class _RivetTimeoutError extends Error {
   }
 };
 
-// src/api/resources/datacenters/client/Client.ts
+// src/api/resources/authTokens/client/Client.ts
 var import_url_join = __toESM(require("url-join"));
+var AuthTokens = class {
+  constructor(_options) {
+    this._options = _options;
+  }
+  /**
+   * @param {Rivet.AuthTokenCreateRequest} request
+   * @param {AuthTokens.RequestOptions} requestOptions - Request-specific configuration.
+   *
+   * @example
+   *     await client.authTokens.create({
+   *         grants: [{
+   *                 operations: ["read"],
+   *                 resource: "namespace",
+   *                 target: "any"
+   *             }],
+   *         namespace: "namespace"
+   *     })
+   */
+  async create(request, requestOptions) {
+    const _response = await (this._options.fetcher ?? fetcher)({
+      url: (0, import_url_join.default)(
+        await Supplier.get(this._options.baseUrl) ?? await Supplier.get(this._options.environment),
+        "auth/tokens"
+      ),
+      method: "POST",
+      headers: {
+        Authorization: await this._getAuthorizationHeader(),
+        "X-Fern-Language": "JavaScript",
+        "X-Fern-Runtime": RUNTIME.type,
+        "X-Fern-Runtime-Version": RUNTIME.version,
+        ...requestOptions == null ? void 0 : requestOptions.headers
+      },
+      contentType: "application/json",
+      requestType: "json",
+      body: AuthTokenCreateRequest.jsonOrThrow(request, { unrecognizedObjectKeys: "strip" }),
+      timeoutMs: (requestOptions == null ? void 0 : requestOptions.timeoutInSeconds) != null ? requestOptions.timeoutInSeconds * 1e3 : 18e4,
+      maxRetries: requestOptions == null ? void 0 : requestOptions.maxRetries,
+      abortSignal: requestOptions == null ? void 0 : requestOptions.abortSignal
+    });
+    if (_response.ok) {
+      return AuthTokenCreateResponse.parseOrThrow(_response.body, {
+        unrecognizedObjectKeys: "passthrough",
+        allowUnrecognizedUnionMembers: true,
+        allowUnrecognizedEnumValues: true,
+        skipValidation: true,
+        breadcrumbsPrefix: ["response"]
+      });
+    }
+    if (_response.error.reason === "status-code") {
+      throw new RivetError({
+        statusCode: _response.error.statusCode,
+        body: _response.error.body
+      });
+    }
+    switch (_response.error.reason) {
+      case "non-json":
+        throw new RivetError({
+          statusCode: _response.error.statusCode,
+          body: _response.error.rawBody
+        });
+      case "timeout":
+        throw new RivetTimeoutError("Timeout exceeded when calling POST /auth/tokens.");
+      case "unknown":
+        throw new RivetError({
+          message: _response.error.errorMessage
+        });
+    }
+  }
+  /**
+   * @param {AuthTokens.RequestOptions} requestOptions - Request-specific configuration.
+   *
+   * @example
+   *     await client.authTokens.inspect()
+   */
+  async inspect(requestOptions) {
+    const _response = await (this._options.fetcher ?? fetcher)({
+      url: (0, import_url_join.default)(
+        await Supplier.get(this._options.baseUrl) ?? await Supplier.get(this._options.environment),
+        "auth/tokens/inspect"
+      ),
+      method: "GET",
+      headers: {
+        Authorization: await this._getAuthorizationHeader(),
+        "X-Fern-Language": "JavaScript",
+        "X-Fern-Runtime": RUNTIME.type,
+        "X-Fern-Runtime-Version": RUNTIME.version,
+        ...requestOptions == null ? void 0 : requestOptions.headers
+      },
+      contentType: "application/json",
+      requestType: "json",
+      timeoutMs: (requestOptions == null ? void 0 : requestOptions.timeoutInSeconds) != null ? requestOptions.timeoutInSeconds * 1e3 : 18e4,
+      maxRetries: requestOptions == null ? void 0 : requestOptions.maxRetries,
+      abortSignal: requestOptions == null ? void 0 : requestOptions.abortSignal
+    });
+    if (_response.ok) {
+      return AuthTokenInspectResponse.parseOrThrow(_response.body, {
+        unrecognizedObjectKeys: "passthrough",
+        allowUnrecognizedUnionMembers: true,
+        allowUnrecognizedEnumValues: true,
+        skipValidation: true,
+        breadcrumbsPrefix: ["response"]
+      });
+    }
+    if (_response.error.reason === "status-code") {
+      throw new RivetError({
+        statusCode: _response.error.statusCode,
+        body: _response.error.body
+      });
+    }
+    switch (_response.error.reason) {
+      case "non-json":
+        throw new RivetError({
+          statusCode: _response.error.statusCode,
+          body: _response.error.rawBody
+        });
+      case "timeout":
+        throw new RivetTimeoutError("Timeout exceeded when calling GET /auth/tokens/inspect.");
+      case "unknown":
+        throw new RivetError({
+          message: _response.error.errorMessage
+        });
+    }
+  }
+  async _getAuthorizationHeader() {
+    return `Bearer ${await Supplier.get(this._options.token)}`;
+  }
+};
+
+// src/api/resources/datacenters/client/Client.ts
+var import_url_join2 = __toESM(require("url-join"));
 var Datacenters = class {
   constructor(_options) {
     this._options = _options;
@@ -2873,7 +3097,7 @@ var Datacenters = class {
    */
   async list(requestOptions) {
     const _response = await (this._options.fetcher ?? fetcher)({
-      url: (0, import_url_join.default)(
+      url: (0, import_url_join2.default)(
         await Supplier.get(this._options.baseUrl) ?? await Supplier.get(this._options.environment),
         "datacenters"
       ),
@@ -2926,7 +3150,7 @@ var Datacenters = class {
 };
 
 // src/api/resources/envoys/client/Client.ts
-var import_url_join2 = __toESM(require("url-join"));
+var import_url_join3 = __toESM(require("url-join"));
 var Envoys = class {
   constructor(_options) {
     this._options = _options;
@@ -2961,7 +3185,7 @@ var Envoys = class {
       _queryParams["cursor"] = cursor;
     }
     const _response = await (this._options.fetcher ?? fetcher)({
-      url: (0, import_url_join2.default)(
+      url: (0, import_url_join3.default)(
         await Supplier.get(this._options.baseUrl) ?? await Supplier.get(this._options.environment),
         "envoys"
       ),
@@ -3015,7 +3239,7 @@ var Envoys = class {
 };
 
 // src/api/resources/health/client/Client.ts
-var import_url_join3 = __toESM(require("url-join"));
+var import_url_join4 = __toESM(require("url-join"));
 var Health = class {
   constructor(_options) {
     this._options = _options;
@@ -3028,7 +3252,7 @@ var Health = class {
    */
   async fanout(requestOptions) {
     const _response = await (this._options.fetcher ?? fetcher)({
-      url: (0, import_url_join3.default)(
+      url: (0, import_url_join4.default)(
         await Supplier.get(this._options.baseUrl) ?? await Supplier.get(this._options.environment),
         "health/fanout"
       ),
@@ -3081,7 +3305,7 @@ var Health = class {
 };
 
 // src/api/resources/metadata/client/Client.ts
-var import_url_join4 = __toESM(require("url-join"));
+var import_url_join5 = __toESM(require("url-join"));
 var Metadata = class {
   constructor(_options) {
     this._options = _options;
@@ -3094,7 +3318,7 @@ var Metadata = class {
    */
   async get(requestOptions) {
     const _response = await (this._options.fetcher ?? fetcher)({
-      url: (0, import_url_join4.default)(
+      url: (0, import_url_join5.default)(
         await Supplier.get(this._options.baseUrl) ?? await Supplier.get(this._options.environment),
         "metadata"
       ),
@@ -3147,7 +3371,7 @@ var Metadata = class {
 };
 
 // src/api/resources/namespaces/client/Client.ts
-var import_url_join5 = __toESM(require("url-join"));
+var import_url_join6 = __toESM(require("url-join"));
 var Namespaces = class {
   constructor(_options) {
     this._options = _options;
@@ -3184,7 +3408,7 @@ var Namespaces = class {
       }
     }
     const _response = await (this._options.fetcher ?? fetcher)({
-      url: (0, import_url_join5.default)(
+      url: (0, import_url_join6.default)(
         await Supplier.get(this._options.baseUrl) ?? await Supplier.get(this._options.environment),
         "namespaces"
       ),
@@ -3244,7 +3468,7 @@ var Namespaces = class {
    */
   async create(request, requestOptions) {
     const _response = await (this._options.fetcher ?? fetcher)({
-      url: (0, import_url_join5.default)(
+      url: (0, import_url_join6.default)(
         await Supplier.get(this._options.baseUrl) ?? await Supplier.get(this._options.environment),
         "namespaces"
       ),
@@ -3298,7 +3522,7 @@ var Namespaces = class {
 };
 
 // src/api/resources/runners/client/Client.ts
-var import_url_join6 = __toESM(require("url-join"));
+var import_url_join7 = __toESM(require("url-join"));
 var Runners = class {
   constructor(_options) {
     this._options = _options;
@@ -3341,7 +3565,7 @@ var Runners = class {
       _queryParams["cursor"] = cursor;
     }
     const _response = await (this._options.fetcher ?? fetcher)({
-      url: (0, import_url_join6.default)(
+      url: (0, import_url_join7.default)(
         await Supplier.get(this._options.baseUrl) ?? await Supplier.get(this._options.environment),
         "runners"
       ),
@@ -3414,7 +3638,7 @@ var Runners = class {
       _queryParams["cursor"] = cursor;
     }
     const _response = await (this._options.fetcher ?? fetcher)({
-      url: (0, import_url_join6.default)(
+      url: (0, import_url_join7.default)(
         await Supplier.get(this._options.baseUrl) ?? await Supplier.get(this._options.environment),
         "runners/names"
       ),
@@ -3472,12 +3696,16 @@ var RivetClient = class {
   constructor(_options) {
     this._options = _options;
   }
+  _authTokens;
   _datacenters;
   _envoys;
   _health;
   _metadata;
   _namespaces;
   _runners;
+  get authTokens() {
+    return this._authTokens ?? (this._authTokens = new AuthTokens(this._options));
+  }
   get datacenters() {
     return this._datacenters ?? (this._datacenters = new Datacenters(this._options));
   }
@@ -3560,7 +3788,7 @@ var RivetClient = class {
       _queryParams["cursor"] = cursor;
     }
     const _response = await (this._options.fetcher ?? fetcher)({
-      url: (0, import_url_join7.default)(
+      url: (0, import_url_join8.default)(
         await Supplier.get(this._options.baseUrl) ?? await Supplier.get(this._options.environment),
         "actors"
       ),
@@ -3642,7 +3870,7 @@ var RivetClient = class {
     const _queryParams = {};
     _queryParams["namespace"] = namespace;
     const _response = await (this._options.fetcher ?? fetcher)({
-      url: (0, import_url_join7.default)(
+      url: (0, import_url_join8.default)(
         await Supplier.get(this._options.baseUrl) ?? await Supplier.get(this._options.environment),
         "actors"
       ),
@@ -3735,7 +3963,7 @@ var RivetClient = class {
     const _queryParams = {};
     _queryParams["namespace"] = namespace;
     const _response = await (this._options.fetcher ?? fetcher)({
-      url: (0, import_url_join7.default)(
+      url: (0, import_url_join8.default)(
         await Supplier.get(this._options.baseUrl) ?? await Supplier.get(this._options.environment),
         "actors"
       ),
@@ -3809,7 +4037,7 @@ var RivetClient = class {
       _queryParams["cursor"] = cursor;
     }
     const _response = await (this._options.fetcher ?? fetcher)({
-      url: (0, import_url_join7.default)(
+      url: (0, import_url_join8.default)(
         await Supplier.get(this._options.baseUrl) ?? await Supplier.get(this._options.environment),
         "actors/names"
       ),
@@ -3877,7 +4105,7 @@ var RivetClient = class {
     const _queryParams = {};
     _queryParams["namespace"] = namespace;
     const _response = await (this._options.fetcher ?? fetcher)({
-      url: (0, import_url_join7.default)(
+      url: (0, import_url_join8.default)(
         await Supplier.get(this._options.baseUrl) ?? await Supplier.get(this._options.environment),
         `actors/${encodeURIComponent(RivetId.jsonOrThrow(actorId))}`
       ),
@@ -3941,7 +4169,7 @@ var RivetClient = class {
     const _queryParams = {};
     _queryParams["namespace"] = namespace;
     const _response = await (this._options.fetcher ?? fetcher)({
-      url: (0, import_url_join7.default)(
+      url: (0, import_url_join8.default)(
         await Supplier.get(this._options.baseUrl) ?? await Supplier.get(this._options.environment),
         `actors/${encodeURIComponent(RivetId.jsonOrThrow(actorId))}/kv/keys/${encodeURIComponent(key)}`
       ),
@@ -4009,7 +4237,7 @@ var RivetClient = class {
     const _queryParams = {};
     _queryParams["namespace"] = namespace;
     const _response = await (this._options.fetcher ?? fetcher)({
-      url: (0, import_url_join7.default)(
+      url: (0, import_url_join8.default)(
         await Supplier.get(this._options.baseUrl) ?? await Supplier.get(this._options.environment),
         `actors/${encodeURIComponent(RivetId.jsonOrThrow(actorId))}/reschedule`
       ),
@@ -4076,7 +4304,7 @@ var RivetClient = class {
     const _queryParams = {};
     _queryParams["namespace"] = namespace;
     const _response = await (this._options.fetcher ?? fetcher)({
-      url: (0, import_url_join7.default)(
+      url: (0, import_url_join8.default)(
         await Supplier.get(this._options.baseUrl) ?? await Supplier.get(this._options.environment),
         `actors/${encodeURIComponent(RivetId.jsonOrThrow(actorId))}/sleep`
       ),
@@ -4160,7 +4388,7 @@ var RivetClient = class {
       }
     }
     const _response = await (this._options.fetcher ?? fetcher)({
-      url: (0, import_url_join7.default)(
+      url: (0, import_url_join8.default)(
         await Supplier.get(this._options.baseUrl) ?? await Supplier.get(this._options.environment),
         "runner-configs"
       ),
@@ -4223,7 +4451,7 @@ var RivetClient = class {
     const _queryParams = {};
     _queryParams["namespace"] = namespace;
     const _response = await (this._options.fetcher ?? fetcher)({
-      url: (0, import_url_join7.default)(
+      url: (0, import_url_join8.default)(
         await Supplier.get(this._options.baseUrl) ?? await Supplier.get(this._options.environment),
         "runner-configs/serverless-health-check"
       ),
@@ -4294,7 +4522,7 @@ var RivetClient = class {
     const _queryParams = {};
     _queryParams["namespace"] = namespace;
     const _response = await (this._options.fetcher ?? fetcher)({
-      url: (0, import_url_join7.default)(
+      url: (0, import_url_join8.default)(
         await Supplier.get(this._options.baseUrl) ?? await Supplier.get(this._options.environment),
         `runner-configs/${encodeURIComponent(runnerName)}`
       ),
@@ -4358,7 +4586,7 @@ var RivetClient = class {
     const _queryParams = {};
     _queryParams["namespace"] = namespace;
     const _response = await (this._options.fetcher ?? fetcher)({
-      url: (0, import_url_join7.default)(
+      url: (0, import_url_join8.default)(
         await Supplier.get(this._options.baseUrl) ?? await Supplier.get(this._options.environment),
         `runner-configs/${encodeURIComponent(runnerName)}`
       ),
@@ -4426,7 +4654,7 @@ var RivetClient = class {
     const _queryParams = {};
     _queryParams["namespace"] = namespace;
     const _response = await (this._options.fetcher ?? fetcher)({
-      url: (0, import_url_join7.default)(
+      url: (0, import_url_join8.default)(
         await Supplier.get(this._options.baseUrl) ?? await Supplier.get(this._options.environment),
         `runner-configs/${encodeURIComponent(runnerName)}/refresh-metadata`
       ),

package/dist/node/cjs/serialization.js

@@ -44,6 +44,14 @@ __export(serialization_exports, {
   ActorsRescheduleResponse: () => ActorsRescheduleResponse,
   ActorsSleepRequestBody: () => ActorsSleepRequestBody,
   ActorsSleepResponse: () => ActorsSleepResponse,
+  AuthOperationKind: () => AuthOperationKind,
+  AuthTokenCreateRequest: () => AuthTokenCreateRequest,
+  AuthTokenCreateResponse: () => AuthTokenCreateResponse,
+  AuthTokenGrant: () => AuthTokenGrant,
+  AuthTokenInspectResponse: () => AuthTokenInspectResponse,
+  AuthTokenResource: () => AuthTokenResource,
+  AuthTokenTargetScope: () => AuthTokenTargetScope,
+  AuthTokenTargetScopeId: () => AuthTokenTargetScopeId,
   CrashPolicy: () => CrashPolicy,
   Datacenter: () => Datacenter,
   DatacenterHealth: () => DatacenterHealth,
@@ -87,6 +95,7 @@ __export(serialization_exports, {
   RunnerConfigsUpsertResponse: () => RunnerConfigsUpsertResponse,
   RunnersListNamesResponse: () => RunnersListNamesResponse,
   RunnersListResponse: () => RunnersListResponse,
+  authTokens: () => authTokens_exports,
   namespaces: () => namespaces_exports
 });
 module.exports = __toCommonJS(serialization_exports);
@@ -1633,6 +1642,51 @@ var ActorsSleepRequestBody = schemas_exports.record(schemas_exports.string(), sc
 // src/serialization/types/ActorsSleepResponse.ts
 var ActorsSleepResponse = schemas_exports.record(schemas_exports.string(), schemas_exports.unknown());
 
+// src/serialization/types/AuthOperationKind.ts
+var AuthOperationKind = schemas_exports.enum_(["read", "update", "list", "create", "delete"]);
+
+// src/serialization/types/AuthTokenCreateResponse.ts
+var AuthTokenCreateResponse = schemas_exports.object({
+  expiresTs: schemas_exports.property("expires_ts", schemas_exports.number()),
+  issuedTs: schemas_exports.property("issued_ts", schemas_exports.number()),
+  token: schemas_exports.string()
+});
+
+// src/serialization/types/AuthTokenResource.ts
+var AuthTokenResource = schemas_exports.enum_([
+  "namespace",
+  "actor",
+  "runner",
+  "runner_config",
+  "datacenter",
+  "actor_gateway",
+  "actor_kv"
+]);
+
+// src/serialization/types/AuthTokenTargetScopeId.ts
+var AuthTokenTargetScopeId = schemas_exports.object({
+  id: RivetId
+});
+
+// src/serialization/types/AuthTokenTargetScope.ts
+var AuthTokenTargetScope = schemas_exports.undiscriminatedUnion([schemas_exports.stringLiteral("any"), AuthTokenTargetScopeId]);
+
+// src/serialization/types/AuthTokenGrant.ts
+var AuthTokenGrant = schemas_exports.object({
+  operations: schemas_exports.list(AuthOperationKind),
+  resource: AuthTokenResource,
+  target: AuthTokenTargetScope
+});
+
+// src/serialization/types/AuthTokenInspectResponse.ts
+var AuthTokenInspectResponse = schemas_exports.object({
+  expiresTs: schemas_exports.property("expires_ts", schemas_exports.number()),
+  grants: schemas_exports.list(AuthTokenGrant),
+  issuedTs: schemas_exports.property("issued_ts", schemas_exports.number()),
+  namespaceId: schemas_exports.property("namespace_id", RivetId),
+  subject: schemas_exports.string().optional()
+});
+
 // src/serialization/types/Datacenter.ts
 var Datacenter = schemas_exports.object({
   label: schemas_exports.number(),
@@ -1949,6 +2003,20 @@ var RunnerConfigsUpsertRequestBody = schemas_exports.object({
   datacenters: schemas_exports.record(schemas_exports.string(), RunnerConfig)
 });
 
+// src/serialization/resources/authTokens/index.ts
+var authTokens_exports = {};
+__export(authTokens_exports, {
+  AuthTokenCreateRequest: () => AuthTokenCreateRequest
+});
+
+// src/serialization/resources/authTokens/client/requests/AuthTokenCreateRequest.ts
+var AuthTokenCreateRequest = schemas_exports.object({
+  duration: schemas_exports.number().optional(),
+  grants: schemas_exports.list(AuthTokenGrant),
+  namespace: schemas_exports.string(),
+  subject: schemas_exports.string().optional()
+});
+
 // src/serialization/resources/namespaces/index.ts
 var namespaces_exports = {};
 __export(namespaces_exports, {
@@ -1976,6 +2044,14 @@ var NamespacesCreateRequest = schemas_exports.object({
   ActorsRescheduleResponse,
   ActorsSleepRequestBody,
   ActorsSleepResponse,
+  AuthOperationKind,
+  AuthTokenCreateRequest,
+  AuthTokenCreateResponse,
+  AuthTokenGrant,
+  AuthTokenInspectResponse,
+  AuthTokenResource,
+  AuthTokenTargetScope,
+  AuthTokenTargetScopeId,
   CrashPolicy,
   Datacenter,
   DatacenterHealth,
@@ -2019,5 +2095,6 @@ var NamespacesCreateRequest = schemas_exports.object({
   RunnerConfigsUpsertResponse,
   RunnersListNamesResponse,
   RunnersListResponse,
+  authTokens,
   namespaces
 });