@roarkanalytics/sdk 4.22.0 → 4.23.0

package/resources/me.d.mts

@@ -2,6 +2,22 @@ import { APIResource } from "../core/resource.mjs";
 import { APIPromise } from "../core/api-promise.mjs";
 import { RequestOptions } from "../internal/request-options.mjs";
 export declare class Me extends APIResource {
+    /**
+     * Mints a credential that acts as you, for a CLI or an automation. The key value
+     * is returned exactly once, in the `key` field: capture it now, it is unreadable
+     * afterwards. Requires a personal credential (a project API key is refused) and
+     * admin on the project the credential defaults to. The new credential can never
+     * exceed the one that created it: not in scope, not in permissions, and not in
+     * lifetime. Omit a field to copy it from the calling credential.
+     *
+     * @example
+     * ```ts
+     * const response = await client.me.createAPIKey({
+     *   name: 'CI deploy gate',
+     * });
+     * ```
+     */
+    createAPIKey(body: MeCreateAPIKeyParams, options?: RequestOptions): APIPromise<MeCreateAPIKeyResponse>;
     /**
      * Returns the scope of the credential making the request, the organization it acts
      * in, its default project (if any) and the permissions it was granted. Works for
@@ -14,6 +30,84 @@ export declare class Me extends APIResource {
      * ```
      */
     get(options?: RequestOptions): APIPromise<MeGetResponse>;
+    /**
+     * Returns the credentials that act as you: the ones created in the dashboard, from
+     * `roark auth login`, and MCP connectors. Requires a personal credential; a
+     * project API key is refused. Defaults to ACTIVE, pass ?status=REVOKED to see
+     * revoked ones. The key value itself is never returned.
+     *
+     * @example
+     * ```ts
+     * const response = await client.me.listAPIKeys();
+     * ```
+     */
+    listAPIKeys(query?: MeListAPIKeysParams | null | undefined, options?: RequestOptions): APIPromise<MeListAPIKeysResponse>;
+    /**
+     * Revokes a credential that acts as you. It stops working immediately. A
+     * credential may revoke itself, which is what `roark auth logout` does. Repeating
+     * the call is safe; an unknown id, or one belonging to someone else, answers 404.
+     *
+     * @example
+     * ```ts
+     * const response = await client.me.revokeAPIKey('id');
+     * ```
+     */
+    revokeAPIKey(id: string, options?: RequestOptions): APIPromise<MeRevokeAPIKeyResponse>;
+}
+export interface MeCreateAPIKeyResponse {
+    /**
+     * The created credential, with its key
+     */
+    data: MeCreateAPIKeyResponse.Data;
+}
+export declare namespace MeCreateAPIKeyResponse {
+    /**
+     * The created credential, with its key
+     */
+    interface Data {
+        /**
+         * Roark ID of the credential. Pass it to DELETE to revoke.
+         */
+        id: string;
+        /**
+         * ISO 8601 timestamp
+         */
+        createdAt: string;
+        /**
+         * The project a request acts on when it sends no X-Roark-Project-Id header. Null
+         * once that project is deleted.
+         */
+        defaultProjectId: string | null;
+        /**
+         * ISO 8601 timestamp, null if it never expires
+         */
+        expiresAt: string | null;
+        /**
+         * The credential value. Returned only here, only once.
+         */
+        key: string;
+        /**
+         * ISO 8601 timestamp, null if never used
+         */
+        lastUsedAt: string | null;
+        /**
+         * The label chosen when it was created
+         */
+        name: string;
+        /**
+         * The organization this credential is pinned to
+         */
+        organizationId: string | null;
+        /**
+         * Granted 'resource:action' permissions
+         */
+        permissions: Array<string>;
+        /**
+         * Coarse tier: READ, or WRITE for read and write
+         */
+        scopes: Array<string>;
+        status: 'ACTIVE' | 'REVOKED' | null;
+    }
 }
 export interface MeGetResponse {
     /**
@@ -50,7 +144,120 @@ export declare namespace MeGetResponse {
         }
     }
 }
+export interface MeListAPIKeysResponse {
+    /**
+     * The credentials that act as the caller
+     */
+    data: MeListAPIKeysResponse.Data;
+}
+export declare namespace MeListAPIKeysResponse {
+    /**
+     * The credentials that act as the caller
+     */
+    interface Data {
+        apiKeys: Array<Data.APIKey>;
+    }
+    namespace Data {
+        /**
+         * A credential that acts as the caller
+         */
+        interface APIKey {
+            /**
+             * Roark ID of the credential. Pass it to DELETE to revoke.
+             */
+            id: string;
+            /**
+             * ISO 8601 timestamp
+             */
+            createdAt: string;
+            /**
+             * The project a request acts on when it sends no X-Roark-Project-Id header. Null
+             * once that project is deleted.
+             */
+            defaultProjectId: string | null;
+            /**
+             * ISO 8601 timestamp, null if it never expires
+             */
+            expiresAt: string | null;
+            /**
+             * ISO 8601 timestamp, null if never used
+             */
+            lastUsedAt: string | null;
+            /**
+             * The label chosen when it was created
+             */
+            name: string;
+            /**
+             * The organization this credential is pinned to
+             */
+            organizationId: string | null;
+            /**
+             * Granted 'resource:action' permissions
+             */
+            permissions: Array<string>;
+            /**
+             * Coarse tier: READ, or WRITE for read and write
+             */
+            scopes: Array<string>;
+            status: 'ACTIVE' | 'REVOKED' | null;
+        }
+    }
+}
+export interface MeRevokeAPIKeyResponse {
+    /**
+     * Result of revoking one of your credentials
+     */
+    data: MeRevokeAPIKeyResponse.Data;
+}
+export declare namespace MeRevokeAPIKeyResponse {
+    /**
+     * Result of revoking one of your credentials
+     */
+    interface Data {
+        id: string;
+        /**
+         * Always true when the credential was revoked
+         */
+        deleted: true;
+    }
+}
+export interface MeCreateAPIKeyParams {
+    /**
+     * A label you will recognise later. It is the only thing that tells two
+     * credentials apart in the list you revoke from.
+     */
+    name: string;
+    /**
+     * ISO 8601 expiry. Defaults to the calling credential's own expiry (no expiry, for
+     * a `roark auth login` credential) and may not outlive it, so a short-lived
+     * connector credential cannot mint a permanent one.
+     */
+    expiresAt?: string;
+    /**
+     * Granular 'resource:action' permissions. Defaults to the calling credential's own
+     * set, and can never exceed it. A ceiling, not an entitlement: the holder still
+     * only reaches what their project membership allows.
+     */
+    permissions?: Array<string>;
+    /**
+     * Project the credential assumes when a request sends no X-Roark-Project-Id
+     * header. Defaults to the calling credential's own default project. You must be an
+     * admin of whichever project is used.
+     */
+    projectId?: string;
+    /**
+     * Coarse tier. Defaults to the calling credential's own tier, and can never exceed
+     * it: a READ credential cannot mint a WRITE one.
+     */
+    scopes?: Array<'READ' | 'WRITE'>;
+}
+export interface MeListAPIKeysParams {
+    /**
+     * Filter by status. Defaults to ACTIVE.
+     */
+    status?: 'ACTIVE' | 'REVOKED';
+}
 export declare namespace Me {
-    export { type MeGetResponse as MeGetResponse };
+    export { type MeCreateAPIKeyResponse as MeCreateAPIKeyResponse, type MeGetResponse as MeGetResponse, type MeListAPIKeysResponse as MeListAPIKeysResponse, type MeRevokeAPIKeyResponse as MeRevokeAPIKeyResponse, type MeCreateAPIKeyParams as MeCreateAPIKeyParams, type MeListAPIKeysParams as MeListAPIKeysParams, };
 }
 //# sourceMappingURL=me.d.mts.map

package/resources/me.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"me.d.mts","sourceRoot":"","sources":["../src/resources/me.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,6BAAyB;AAC/C,OAAO,EAAE,UAAU,EAAE,gCAA4B;AACjD,OAAO,EAAE,cAAc,EAAE,wCAAoC;AAE7D,qBAAa,EAAG,SAAQ,WAAW;IACjC;;;;;;;;;;OAUG;IACH,GAAG,CAAC,OAAO,CAAC,EAAE,cAAc,GAAG,UAAU,CAAC,aAAa,CAAC;CAGzD;AAED,MAAM,WAAW,aAAa;IAC5B;;OAEG;IACH,IAAI,EAAE,aAAa,CAAC,IAAI,CAAC;CAC1B;AAED,yBAAiB,aAAa,CAAC;IAC7B;;OAEG;IACH,UAAiB,IAAI;QACnB,cAAc,EAAE,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;QAE3C,kBAAkB,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QAElC,YAAY,EAAE,IAAI,CAAC,YAAY,CAAC;QAEhC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QAEtB,UAAU,EAAE,SAAS,GAAG,MAAM,CAAC;QAE/B,IAAI,EAAE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;KACxB;IAED,UAAiB,IAAI,CAAC;QACpB,UAAiB,cAAc;YAC7B,EAAE,EAAE,MAAM,CAAC;YAEX,IAAI,EAAE,MAAM,CAAC;YAEb,IAAI,EAAE,MAAM,CAAC;SACd;QAED,UAAiB,YAAY;YAC3B,EAAE,EAAE,MAAM,CAAC;YAEX,IAAI,EAAE,MAAM,CAAC;SACd;QAED,UAAiB,IAAI;YACnB,EAAE,EAAE,MAAM,CAAC;YAEX,KAAK,EAAE,MAAM,CAAC;YAEd,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;SACrB;KACF;CACF;AAED,MAAM,CAAC,OAAO,WAAW,EAAE,CAAC;IAC1B,OAAO,EAAE,KAAK,aAAa,IAAI,aAAa,EAAE,CAAC;CAChD"}
+{"version":3,"file":"me.d.mts","sourceRoot":"","sources":["../src/resources/me.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,6BAAyB;AAC/C,OAAO,EAAE,UAAU,EAAE,gCAA4B;AACjD,OAAO,EAAE,cAAc,EAAE,wCAAoC;AAG7D,qBAAa,EAAG,SAAQ,WAAW;IACjC;;;;;;;;;;;;;;OAcG;IACH,YAAY,CAAC,IAAI,EAAE,oBAAoB,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,UAAU,CAAC,sBAAsB,CAAC;IAItG;;;;;;;;;;OAUG;IACH,GAAG,CAAC,OAAO,CAAC,EAAE,cAAc,GAAG,UAAU,CAAC,aAAa,CAAC;IAIxD;;;;;;;;;;OAUG;IACH,WAAW,CACT,KAAK,GAAE,mBAAmB,GAAG,IAAI,GAAG,SAAc,EAClD,OAAO,CAAC,EAAE,cAAc,GACvB,UAAU,CAAC,qBAAqB,CAAC;IAIpC;;;;;;;;;OASG;IACH,YAAY,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,UAAU,CAAC,sBAAsB,CAAC;CAGvF;AAED,MAAM,WAAW,sBAAsB;IACrC;;OAEG;IACH,IAAI,EAAE,sBAAsB,CAAC,IAAI,CAAC;CACnC;AAED,yBAAiB,sBAAsB,CAAC;IACtC;;OAEG;IACH,UAAiB,IAAI;QACnB;;WAEG;QACH,EAAE,EAAE,MAAM,CAAC;QAEX;;WAEG;QACH,SAAS,EAAE,MAAM,CAAC;QAElB;;;WAGG;QACH,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;QAEhC;;WAEG;QACH,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;QAEzB;;WAEG;QACH,GAAG,EAAE,MAAM,CAAC;QAEZ;;WAEG;QACH,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;QAE1B;;WAEG;QACH,IAAI,EAAE,MAAM,CAAC;QAEb;;WAEG;QACH,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;QAE9B;;WAEG;QACH,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QAE3B;;WAEG;QACH,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QAEtB,MAAM,EAAE,QAAQ,GAAG,SAAS,GAAG,IAAI,CAAC;KACrC;CACF;AAED,MAAM,WAAW,aAAa;IAC5B;;OAEG;IACH,IAAI,EAAE,aAAa,CAAC,IAAI,CAAC;CAC1B;AAED,yBAAiB,aAAa,CAAC;IAC7B;;OAEG;IACH,UAAiB,IAAI;QACnB,cAAc,EAAE,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;QAE3C,kBAAkB,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QAElC,YAAY,EAAE,IAAI,CAAC,YAAY,CAAC;QAEhC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QAEtB,UAAU,EAAE,SAAS,GAAG,MAAM,CAAC;QAE/B,IAAI,EAAE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;KACxB;IAED,UAAiB,IAAI,CAAC;QACpB,UAAiB,cAAc;YAC7B,EAAE,EAAE,MAAM,CAAC;YAEX,IAAI,EAAE,MAAM,CAAC;YAEb,IAAI,EAAE,MAAM,CAAC;SACd;QAED,UAAiB,YAAY;YAC3B,EAAE,EAAE,MAAM,CAAC;YAEX,IAAI,EAAE,MAAM,CAAC;SACd;QAED,UAAiB,IAAI;YACnB,EAAE,EAAE,MAAM,CAAC;YAEX,KAAK,EAAE,MAAM,CAAC;YAEd,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;SACrB;KACF;CACF;AAED,MAAM,WAAW,qBAAqB;IACpC;;OAEG;IACH,IAAI,EAAE,qBAAqB,CAAC,IAAI,CAAC;CAClC;AAED,yBAAiB,qBAAqB,CAAC;IACrC;;OAEG;IACH,UAAiB,IAAI;QACnB,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;KAC7B;IAED,UAAiB,IAAI,CAAC;QACpB;;WAEG;QACH,UAAiB,MAAM;YACrB;;eAEG;YACH,EAAE,EAAE,MAAM,CAAC;YAEX;;eAEG;YACH,SAAS,EAAE,MAAM,CAAC;YAElB;;;eAGG;YACH,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;YAEhC;;eAEG;YACH,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;YAEzB;;eAEG;YACH,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;YAE1B;;eAEG;YACH,IAAI,EAAE,MAAM,CAAC;YAEb;;eAEG;YACH,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;YAE9B;;eAEG;YACH,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;YAE3B;;eAEG;YACH,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;YAEtB,MAAM,EAAE,QAAQ,GAAG,SAAS,GAAG,IAAI,CAAC;SACrC;KACF;CACF;AAED,MAAM,WAAW,sBAAsB;IACrC;;OAEG;IACH,IAAI,EAAE,sBAAsB,CAAC,IAAI,CAAC;CACnC;AAED,yBAAiB,sBAAsB,CAAC;IACtC;;OAEG;IACH,UAAiB,IAAI;QACnB,EAAE,EAAE,MAAM,CAAC;QAEX;;WAEG;QACH,OAAO,EAAE,IAAI,CAAC;KACf;CACF;AAED,MAAM,WAAW,oBAAoB;IACnC;;;OAGG;IACH,IAAI,EAAE,MAAM,CAAC;IAEb;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB;;;;OAIG;IACH,WAAW,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAE5B;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB;;;OAGG;IACH,MAAM,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,OAAO,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,mBAAmB;IAClC;;OAEG;IACH,MAAM,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAC;CAC/B;AAED,MAAM,CAAC,OAAO,WAAW,EAAE,CAAC;IAC1B,OAAO,EACL,KAAK,sBAAsB,IAAI,sBAAsB,EACrD,KAAK,aAAa,IAAI,aAAa,EACnC,KAAK,qBAAqB,IAAI,qBAAqB,EACnD,KAAK,sBAAsB,IAAI,sBAAsB,EACrD,KAAK,oBAAoB,IAAI,oBAAoB,EACjD,KAAK,mBAAmB,IAAI,mBAAmB,GAChD,CAAC;CACH"}

package/resources/me.d.ts

@@ -2,6 +2,22 @@ import { APIResource } from "../core/resource.js";
 import { APIPromise } from "../core/api-promise.js";
 import { RequestOptions } from "../internal/request-options.js";
 export declare class Me extends APIResource {
+    /**
+     * Mints a credential that acts as you, for a CLI or an automation. The key value
+     * is returned exactly once, in the `key` field: capture it now, it is unreadable
+     * afterwards. Requires a personal credential (a project API key is refused) and
+     * admin on the project the credential defaults to. The new credential can never
+     * exceed the one that created it: not in scope, not in permissions, and not in
+     * lifetime. Omit a field to copy it from the calling credential.
+     *
+     * @example
+     * ```ts
+     * const response = await client.me.createAPIKey({
+     *   name: 'CI deploy gate',
+     * });
+     * ```
+     */
+    createAPIKey(body: MeCreateAPIKeyParams, options?: RequestOptions): APIPromise<MeCreateAPIKeyResponse>;
     /**
      * Returns the scope of the credential making the request, the organization it acts
      * in, its default project (if any) and the permissions it was granted. Works for
@@ -14,6 +30,84 @@ export declare class Me extends APIResource {
      * ```
      */
     get(options?: RequestOptions): APIPromise<MeGetResponse>;
+    /**
+     * Returns the credentials that act as you: the ones created in the dashboard, from
+     * `roark auth login`, and MCP connectors. Requires a personal credential; a
+     * project API key is refused. Defaults to ACTIVE, pass ?status=REVOKED to see
+     * revoked ones. The key value itself is never returned.
+     *
+     * @example
+     * ```ts
+     * const response = await client.me.listAPIKeys();
+     * ```
+     */
+    listAPIKeys(query?: MeListAPIKeysParams | null | undefined, options?: RequestOptions): APIPromise<MeListAPIKeysResponse>;
+    /**
+     * Revokes a credential that acts as you. It stops working immediately. A
+     * credential may revoke itself, which is what `roark auth logout` does. Repeating
+     * the call is safe; an unknown id, or one belonging to someone else, answers 404.
+     *
+     * @example
+     * ```ts
+     * const response = await client.me.revokeAPIKey('id');
+     * ```
+     */
+    revokeAPIKey(id: string, options?: RequestOptions): APIPromise<MeRevokeAPIKeyResponse>;
+}
+export interface MeCreateAPIKeyResponse {
+    /**
+     * The created credential, with its key
+     */
+    data: MeCreateAPIKeyResponse.Data;
+}
+export declare namespace MeCreateAPIKeyResponse {
+    /**
+     * The created credential, with its key
+     */
+    interface Data {
+        /**
+         * Roark ID of the credential. Pass it to DELETE to revoke.
+         */
+        id: string;
+        /**
+         * ISO 8601 timestamp
+         */
+        createdAt: string;
+        /**
+         * The project a request acts on when it sends no X-Roark-Project-Id header. Null
+         * once that project is deleted.
+         */
+        defaultProjectId: string | null;
+        /**
+         * ISO 8601 timestamp, null if it never expires
+         */
+        expiresAt: string | null;
+        /**
+         * The credential value. Returned only here, only once.
+         */
+        key: string;
+        /**
+         * ISO 8601 timestamp, null if never used
+         */
+        lastUsedAt: string | null;
+        /**
+         * The label chosen when it was created
+         */
+        name: string;
+        /**
+         * The organization this credential is pinned to
+         */
+        organizationId: string | null;
+        /**
+         * Granted 'resource:action' permissions
+         */
+        permissions: Array<string>;
+        /**
+         * Coarse tier: READ, or WRITE for read and write
+         */
+        scopes: Array<string>;
+        status: 'ACTIVE' | 'REVOKED' | null;
+    }
 }
 export interface MeGetResponse {
     /**
@@ -50,7 +144,120 @@ export declare namespace MeGetResponse {
         }
     }
 }
+export interface MeListAPIKeysResponse {
+    /**
+     * The credentials that act as the caller
+     */
+    data: MeListAPIKeysResponse.Data;
+}
+export declare namespace MeListAPIKeysResponse {
+    /**
+     * The credentials that act as the caller
+     */
+    interface Data {
+        apiKeys: Array<Data.APIKey>;
+    }
+    namespace Data {
+        /**
+         * A credential that acts as the caller
+         */
+        interface APIKey {
+            /**
+             * Roark ID of the credential. Pass it to DELETE to revoke.
+             */
+            id: string;
+            /**
+             * ISO 8601 timestamp
+             */
+            createdAt: string;
+            /**
+             * The project a request acts on when it sends no X-Roark-Project-Id header. Null
+             * once that project is deleted.
+             */
+            defaultProjectId: string | null;
+            /**
+             * ISO 8601 timestamp, null if it never expires
+             */
+            expiresAt: string | null;
+            /**
+             * ISO 8601 timestamp, null if never used
+             */
+            lastUsedAt: string | null;
+            /**
+             * The label chosen when it was created
+             */
+            name: string;
+            /**
+             * The organization this credential is pinned to
+             */
+            organizationId: string | null;
+            /**
+             * Granted 'resource:action' permissions
+             */
+            permissions: Array<string>;
+            /**
+             * Coarse tier: READ, or WRITE for read and write
+             */
+            scopes: Array<string>;
+            status: 'ACTIVE' | 'REVOKED' | null;
+        }
+    }
+}
+export interface MeRevokeAPIKeyResponse {
+    /**
+     * Result of revoking one of your credentials
+     */
+    data: MeRevokeAPIKeyResponse.Data;
+}
+export declare namespace MeRevokeAPIKeyResponse {
+    /**
+     * Result of revoking one of your credentials
+     */
+    interface Data {
+        id: string;
+        /**
+         * Always true when the credential was revoked
+         */
+        deleted: true;
+    }
+}
+export interface MeCreateAPIKeyParams {
+    /**
+     * A label you will recognise later. It is the only thing that tells two
+     * credentials apart in the list you revoke from.
+     */
+    name: string;
+    /**
+     * ISO 8601 expiry. Defaults to the calling credential's own expiry (no expiry, for
+     * a `roark auth login` credential) and may not outlive it, so a short-lived
+     * connector credential cannot mint a permanent one.
+     */
+    expiresAt?: string;
+    /**
+     * Granular 'resource:action' permissions. Defaults to the calling credential's own
+     * set, and can never exceed it. A ceiling, not an entitlement: the holder still
+     * only reaches what their project membership allows.
+     */
+    permissions?: Array<string>;
+    /**
+     * Project the credential assumes when a request sends no X-Roark-Project-Id
+     * header. Defaults to the calling credential's own default project. You must be an
+     * admin of whichever project is used.
+     */
+    projectId?: string;
+    /**
+     * Coarse tier. Defaults to the calling credential's own tier, and can never exceed
+     * it: a READ credential cannot mint a WRITE one.
+     */
+    scopes?: Array<'READ' | 'WRITE'>;
+}
+export interface MeListAPIKeysParams {
+    /**
+     * Filter by status. Defaults to ACTIVE.
+     */
+    status?: 'ACTIVE' | 'REVOKED';
+}
 export declare namespace Me {
-    export { type MeGetResponse as MeGetResponse };
+    export { type MeCreateAPIKeyResponse as MeCreateAPIKeyResponse, type MeGetResponse as MeGetResponse, type MeListAPIKeysResponse as MeListAPIKeysResponse, type MeRevokeAPIKeyResponse as MeRevokeAPIKeyResponse, type MeCreateAPIKeyParams as MeCreateAPIKeyParams, type MeListAPIKeysParams as MeListAPIKeysParams, };
 }
 //# sourceMappingURL=me.d.ts.map

package/resources/me.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"me.d.ts","sourceRoot":"","sources":["../src/resources/me.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,4BAAyB;AAC/C,OAAO,EAAE,UAAU,EAAE,+BAA4B;AACjD,OAAO,EAAE,cAAc,EAAE,uCAAoC;AAE7D,qBAAa,EAAG,SAAQ,WAAW;IACjC;;;;;;;;;;OAUG;IACH,GAAG,CAAC,OAAO,CAAC,EAAE,cAAc,GAAG,UAAU,CAAC,aAAa,CAAC;CAGzD;AAED,MAAM,WAAW,aAAa;IAC5B;;OAEG;IACH,IAAI,EAAE,aAAa,CAAC,IAAI,CAAC;CAC1B;AAED,yBAAiB,aAAa,CAAC;IAC7B;;OAEG;IACH,UAAiB,IAAI;QACnB,cAAc,EAAE,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;QAE3C,kBAAkB,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QAElC,YAAY,EAAE,IAAI,CAAC,YAAY,CAAC;QAEhC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QAEtB,UAAU,EAAE,SAAS,GAAG,MAAM,CAAC;QAE/B,IAAI,EAAE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;KACxB;IAED,UAAiB,IAAI,CAAC;QACpB,UAAiB,cAAc;YAC7B,EAAE,EAAE,MAAM,CAAC;YAEX,IAAI,EAAE,MAAM,CAAC;YAEb,IAAI,EAAE,MAAM,CAAC;SACd;QAED,UAAiB,YAAY;YAC3B,EAAE,EAAE,MAAM,CAAC;YAEX,IAAI,EAAE,MAAM,CAAC;SACd;QAED,UAAiB,IAAI;YACnB,EAAE,EAAE,MAAM,CAAC;YAEX,KAAK,EAAE,MAAM,CAAC;YAEd,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;SACrB;KACF;CACF;AAED,MAAM,CAAC,OAAO,WAAW,EAAE,CAAC;IAC1B,OAAO,EAAE,KAAK,aAAa,IAAI,aAAa,EAAE,CAAC;CAChD"}
+{"version":3,"file":"me.d.ts","sourceRoot":"","sources":["../src/resources/me.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,4BAAyB;AAC/C,OAAO,EAAE,UAAU,EAAE,+BAA4B;AACjD,OAAO,EAAE,cAAc,EAAE,uCAAoC;AAG7D,qBAAa,EAAG,SAAQ,WAAW;IACjC;;;;;;;;;;;;;;OAcG;IACH,YAAY,CAAC,IAAI,EAAE,oBAAoB,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,UAAU,CAAC,sBAAsB,CAAC;IAItG;;;;;;;;;;OAUG;IACH,GAAG,CAAC,OAAO,CAAC,EAAE,cAAc,GAAG,UAAU,CAAC,aAAa,CAAC;IAIxD;;;;;;;;;;OAUG;IACH,WAAW,CACT,KAAK,GAAE,mBAAmB,GAAG,IAAI,GAAG,SAAc,EAClD,OAAO,CAAC,EAAE,cAAc,GACvB,UAAU,CAAC,qBAAqB,CAAC;IAIpC;;;;;;;;;OASG;IACH,YAAY,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,UAAU,CAAC,sBAAsB,CAAC;CAGvF;AAED,MAAM,WAAW,sBAAsB;IACrC;;OAEG;IACH,IAAI,EAAE,sBAAsB,CAAC,IAAI,CAAC;CACnC;AAED,yBAAiB,sBAAsB,CAAC;IACtC;;OAEG;IACH,UAAiB,IAAI;QACnB;;WAEG;QACH,EAAE,EAAE,MAAM,CAAC;QAEX;;WAEG;QACH,SAAS,EAAE,MAAM,CAAC;QAElB;;;WAGG;QACH,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;QAEhC;;WAEG;QACH,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;QAEzB;;WAEG;QACH,GAAG,EAAE,MAAM,CAAC;QAEZ;;WAEG;QACH,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;QAE1B;;WAEG;QACH,IAAI,EAAE,MAAM,CAAC;QAEb;;WAEG;QACH,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;QAE9B;;WAEG;QACH,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QAE3B;;WAEG;QACH,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QAEtB,MAAM,EAAE,QAAQ,GAAG,SAAS,GAAG,IAAI,CAAC;KACrC;CACF;AAED,MAAM,WAAW,aAAa;IAC5B;;OAEG;IACH,IAAI,EAAE,aAAa,CAAC,IAAI,CAAC;CAC1B;AAED,yBAAiB,aAAa,CAAC;IAC7B;;OAEG;IACH,UAAiB,IAAI;QACnB,cAAc,EAAE,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;QAE3C,kBAAkB,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QAElC,YAAY,EAAE,IAAI,CAAC,YAAY,CAAC;QAEhC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QAEtB,UAAU,EAAE,SAAS,GAAG,MAAM,CAAC;QAE/B,IAAI,EAAE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;KACxB;IAED,UAAiB,IAAI,CAAC;QACpB,UAAiB,cAAc;YAC7B,EAAE,EAAE,MAAM,CAAC;YAEX,IAAI,EAAE,MAAM,CAAC;YAEb,IAAI,EAAE,MAAM,CAAC;SACd;QAED,UAAiB,YAAY;YAC3B,EAAE,EAAE,MAAM,CAAC;YAEX,IAAI,EAAE,MAAM,CAAC;SACd;QAED,UAAiB,IAAI;YACnB,EAAE,EAAE,MAAM,CAAC;YAEX,KAAK,EAAE,MAAM,CAAC;YAEd,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;SACrB;KACF;CACF;AAED,MAAM,WAAW,qBAAqB;IACpC;;OAEG;IACH,IAAI,EAAE,qBAAqB,CAAC,IAAI,CAAC;CAClC;AAED,yBAAiB,qBAAqB,CAAC;IACrC;;OAEG;IACH,UAAiB,IAAI;QACnB,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;KAC7B;IAED,UAAiB,IAAI,CAAC;QACpB;;WAEG;QACH,UAAiB,MAAM;YACrB;;eAEG;YACH,EAAE,EAAE,MAAM,CAAC;YAEX;;eAEG;YACH,SAAS,EAAE,MAAM,CAAC;YAElB;;;eAGG;YACH,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;YAEhC;;eAEG;YACH,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;YAEzB;;eAEG;YACH,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;YAE1B;;eAEG;YACH,IAAI,EAAE,MAAM,CAAC;YAEb;;eAEG;YACH,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;YAE9B;;eAEG;YACH,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;YAE3B;;eAEG;YACH,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;YAEtB,MAAM,EAAE,QAAQ,GAAG,SAAS,GAAG,IAAI,CAAC;SACrC;KACF;CACF;AAED,MAAM,WAAW,sBAAsB;IACrC;;OAEG;IACH,IAAI,EAAE,sBAAsB,CAAC,IAAI,CAAC;CACnC;AAED,yBAAiB,sBAAsB,CAAC;IACtC;;OAEG;IACH,UAAiB,IAAI;QACnB,EAAE,EAAE,MAAM,CAAC;QAEX;;WAEG;QACH,OAAO,EAAE,IAAI,CAAC;KACf;CACF;AAED,MAAM,WAAW,oBAAoB;IACnC;;;OAGG;IACH,IAAI,EAAE,MAAM,CAAC;IAEb;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB;;;;OAIG;IACH,WAAW,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAE5B;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB;;;OAGG;IACH,MAAM,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,OAAO,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,mBAAmB;IAClC;;OAEG;IACH,MAAM,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAC;CAC/B;AAED,MAAM,CAAC,OAAO,WAAW,EAAE,CAAC;IAC1B,OAAO,EACL,KAAK,sBAAsB,IAAI,sBAAsB,EACrD,KAAK,aAAa,IAAI,aAAa,EACnC,KAAK,qBAAqB,IAAI,qBAAqB,EACnD,KAAK,sBAAsB,IAAI,sBAAsB,EACrD,KAAK,oBAAoB,IAAI,oBAAoB,EACjD,KAAK,mBAAmB,IAAI,mBAAmB,GAChD,CAAC;CACH"}

package/resources/me.js

@@ -3,7 +3,26 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.Me = void 0;
 const resource_1 = require("../core/resource.js");
+const path_1 = require("../internal/utils/path.js");
 class Me extends resource_1.APIResource {
+    /**
+     * Mints a credential that acts as you, for a CLI or an automation. The key value
+     * is returned exactly once, in the `key` field: capture it now, it is unreadable
+     * afterwards. Requires a personal credential (a project API key is refused) and
+     * admin on the project the credential defaults to. The new credential can never
+     * exceed the one that created it: not in scope, not in permissions, and not in
+     * lifetime. Omit a field to copy it from the calling credential.
+     *
+     * @example
+     * ```ts
+     * const response = await client.me.createAPIKey({
+     *   name: 'CI deploy gate',
+     * });
+     * ```
+     */
+    createAPIKey(body, options) {
+        return this._client.post('/v1/me/api-keys', { body, ...options });
+    }
     /**
      * Returns the scope of the credential making the request, the organization it acts
      * in, its default project (if any) and the permissions it was granted. Works for
@@ -18,6 +37,33 @@ class Me extends resource_1.APIResource {
     get(options) {
         return this._client.get('/v1/me', options);
     }
+    /**
+     * Returns the credentials that act as you: the ones created in the dashboard, from
+     * `roark auth login`, and MCP connectors. Requires a personal credential; a
+     * project API key is refused. Defaults to ACTIVE, pass ?status=REVOKED to see
+     * revoked ones. The key value itself is never returned.
+     *
+     * @example
+     * ```ts
+     * const response = await client.me.listAPIKeys();
+     * ```
+     */
+    listAPIKeys(query = {}, options) {
+        return this._client.get('/v1/me/api-keys', { query, ...options });
+    }
+    /**
+     * Revokes a credential that acts as you. It stops working immediately. A
+     * credential may revoke itself, which is what `roark auth logout` does. Repeating
+     * the call is safe; an unknown id, or one belonging to someone else, answers 404.
+     *
+     * @example
+     * ```ts
+     * const response = await client.me.revokeAPIKey('id');
+     * ```
+     */
+    revokeAPIKey(id, options) {
+        return this._client.delete((0, path_1.path) `/v1/me/api-keys/${id}`, options);
+    }
 }
 exports.Me = Me;
 //# sourceMappingURL=me.js.map

package/resources/me.js.map

@@ -1 +1 @@
-{"version":3,"file":"me.js","sourceRoot":"","sources":["../src/resources/me.ts"],"names":[],"mappings":";AAAA,sFAAsF;;;AAEtF,kDAA+C;AAI/C,MAAa,EAAG,SAAQ,sBAAW;IACjC;;;;;;;;;;OAUG;IACH,GAAG,CAAC,OAAwB;QAC1B,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC7C,CAAC;CACF;AAfD,gBAeC"}
+{"version":3,"file":"me.js","sourceRoot":"","sources":["../src/resources/me.ts"],"names":[],"mappings":";AAAA,sFAAsF;;;AAEtF,kDAA+C;AAG/C,oDAA8C;AAE9C,MAAa,EAAG,SAAQ,sBAAW;IACjC;;;;;;;;;;;;;;OAcG;IACH,YAAY,CAAC,IAA0B,EAAE,OAAwB;QAC/D,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,iBAAiB,EAAE,EAAE,IAAI,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;IACpE,CAAC;IAED;;;;;;;;;;OAUG;IACH,GAAG,CAAC,OAAwB;QAC1B,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC7C,CAAC;IAED;;;;;;;;;;OAUG;IACH,WAAW,CACT,QAAgD,EAAE,EAClD,OAAwB;QAExB,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,EAAE,KAAK,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;IACpE,CAAC;IAED;;;;;;;;;OASG;IACH,YAAY,CAAC,EAAU,EAAE,OAAwB;QAC/C,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAA,WAAI,EAAA,mBAAmB,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC;IACnE,CAAC;CACF;AAlED,gBAkEC"}

package/resources/me.mjs

@@ -1,6 +1,25 @@
 // File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
 import { APIResource } from "../core/resource.mjs";
+import { path } from "../internal/utils/path.mjs";
 export class Me extends APIResource {
+    /**
+     * Mints a credential that acts as you, for a CLI or an automation. The key value
+     * is returned exactly once, in the `key` field: capture it now, it is unreadable
+     * afterwards. Requires a personal credential (a project API key is refused) and
+     * admin on the project the credential defaults to. The new credential can never
+     * exceed the one that created it: not in scope, not in permissions, and not in
+     * lifetime. Omit a field to copy it from the calling credential.
+     *
+     * @example
+     * ```ts
+     * const response = await client.me.createAPIKey({
+     *   name: 'CI deploy gate',
+     * });
+     * ```
+     */
+    createAPIKey(body, options) {
+        return this._client.post('/v1/me/api-keys', { body, ...options });
+    }
     /**
      * Returns the scope of the credential making the request, the organization it acts
      * in, its default project (if any) and the permissions it was granted. Works for
@@ -15,5 +34,32 @@ export class Me extends APIResource {
     get(options) {
         return this._client.get('/v1/me', options);
     }
+    /**
+     * Returns the credentials that act as you: the ones created in the dashboard, from
+     * `roark auth login`, and MCP connectors. Requires a personal credential; a
+     * project API key is refused. Defaults to ACTIVE, pass ?status=REVOKED to see
+     * revoked ones. The key value itself is never returned.
+     *
+     * @example
+     * ```ts
+     * const response = await client.me.listAPIKeys();
+     * ```
+     */
+    listAPIKeys(query = {}, options) {
+        return this._client.get('/v1/me/api-keys', { query, ...options });
+    }
+    /**
+     * Revokes a credential that acts as you. It stops working immediately. A
+     * credential may revoke itself, which is what `roark auth logout` does. Repeating
+     * the call is safe; an unknown id, or one belonging to someone else, answers 404.
+     *
+     * @example
+     * ```ts
+     * const response = await client.me.revokeAPIKey('id');
+     * ```
+     */
+    revokeAPIKey(id, options) {
+        return this._client.delete(path `/v1/me/api-keys/${id}`, options);
+    }
 }
 //# sourceMappingURL=me.mjs.map

package/resources/me.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"me.mjs","sourceRoot":"","sources":["../src/resources/me.ts"],"names":[],"mappings":"AAAA,sFAAsF;AAEtF,OAAO,EAAE,WAAW,EAAE,6BAAyB;AAI/C,MAAM,OAAO,EAAG,SAAQ,WAAW;IACjC;;;;;;;;;;OAUG;IACH,GAAG,CAAC,OAAwB;QAC1B,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC7C,CAAC;CACF"}
+{"version":3,"file":"me.mjs","sourceRoot":"","sources":["../src/resources/me.ts"],"names":[],"mappings":"AAAA,sFAAsF;AAEtF,OAAO,EAAE,WAAW,EAAE,6BAAyB;AAG/C,OAAO,EAAE,IAAI,EAAE,mCAA+B;AAE9C,MAAM,OAAO,EAAG,SAAQ,WAAW;IACjC;;;;;;;;;;;;;;OAcG;IACH,YAAY,CAAC,IAA0B,EAAE,OAAwB;QAC/D,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,iBAAiB,EAAE,EAAE,IAAI,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;IACpE,CAAC;IAED;;;;;;;;;;OAUG;IACH,GAAG,CAAC,OAAwB;QAC1B,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC7C,CAAC;IAED;;;;;;;;;;OAUG;IACH,WAAW,CACT,QAAgD,EAAE,EAClD,OAAwB;QAExB,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,EAAE,KAAK,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;IACpE,CAAC;IAED;;;;;;;;;OASG;IACH,YAAY,CAAC,EAAU,EAAE,OAAwB;QAC/C,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAA,mBAAmB,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC;IACnE,CAAC;CACF"}

package/src/client.ts

@@ -152,7 +152,15 @@ import {
   HTTPRequestDefinitionUpdateParams,
   HTTPRequestDefinitionUpdateResponse,
 } from './resources/http-request-definition';
-import { Me, MeGetResponse } from './resources/me';
+import {
+  Me,
+  MeCreateAPIKeyParams,
+  MeCreateAPIKeyResponse,
+  MeGetResponse,
+  MeListAPIKeysParams,
+  MeListAPIKeysResponse,
+  MeRevokeAPIKeyResponse,
+} from './resources/me';
 import {
   Metric,
   MetricCreateDefinitionParams,
@@ -1082,7 +1090,15 @@ export declare namespace Roark {
 
   export { Health as Health, type HealthGetResponse as HealthGetResponse };
 
-  export { Me as Me, type MeGetResponse as MeGetResponse };
+  export {
+    Me as Me,
+    type MeCreateAPIKeyResponse as MeCreateAPIKeyResponse,
+    type MeGetResponse as MeGetResponse,
+    type MeListAPIKeysResponse as MeListAPIKeysResponse,
+    type MeRevokeAPIKeyResponse as MeRevokeAPIKeyResponse,
+    type MeCreateAPIKeyParams as MeCreateAPIKeyParams,
+    type MeListAPIKeysParams as MeListAPIKeysParams,
+  };
 
   export { Project as Project, type ProjectListResponse as ProjectListResponse };
 

package/src/resources/index.ts

@@ -135,7 +135,15 @@ export {
   type HTTPRequestDefinitionListParams,
 } from './http-request-definition';
 export { Health, type HealthGetResponse } from './health';
-export { Me, type MeGetResponse } from './me';
+export {
+  Me,
+  type MeCreateAPIKeyResponse,
+  type MeGetResponse,
+  type MeListAPIKeysResponse,
+  type MeRevokeAPIKeyResponse,
+  type MeCreateAPIKeyParams,
+  type MeListAPIKeysParams,
+} from './me';
 export {
   Metric,
   type MetricCreateDefinitionResponse,