@unkey/api 2.0.2 → 2.0.4

package/src/funcs/keysRerollKey.ts

@@ -0,0 +1,227 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import { UnkeyCore } from "../core.js";
+import { encodeJSON } from "../lib/encodings.js";
+import * as M from "../lib/matchers.js";
+import { compactMap } from "../lib/primitives.js";
+import { safeParse } from "../lib/schemas.js";
+import { RequestOptions } from "../lib/sdks.js";
+import { extractSecurity, resolveGlobalSecurity } from "../lib/security.js";
+import { pathToFunc } from "../lib/url.js";
+import * as components from "../models/components/index.js";
+import {
+  ConnectionError,
+  InvalidRequestError,
+  RequestAbortedError,
+  RequestTimeoutError,
+  UnexpectedClientError,
+} from "../models/errors/httpclienterrors.js";
+import * as errors from "../models/errors/index.js";
+import { ResponseValidationError } from "../models/errors/responsevalidationerror.js";
+import { SDKValidationError } from "../models/errors/sdkvalidationerror.js";
+import { UnkeyError } from "../models/errors/unkeyerror.js";
+import { APICall, APIPromise } from "../types/async.js";
+import { Result } from "../types/fp.js";
+
+/**
+ * Reroll Key
+ *
+ * @remarks
+ * Generate a new API key while preserving the configuration from an existing key.
+ *
+ * This operation creates a fresh key with a new token while maintaining all settings from the original key:
+ * - Permissions and roles
+ * - Custom metadata
+ * - Rate limit configurations
+ * - Identity associations
+ * - Remaining credits
+ * - Recovery settings
+ *
+ * **Key Generation:**
+ * - The system attempts to extract the prefix from the original key
+ * - If prefix extraction fails, the default API prefix is used
+ * - Key length follows the API's default byte configuration (or 16 bytes if not specified)
+ *
+ * **Original Key Handling:**
+ * - The original key will be revoked after the duration specified in `expiration`
+ * - Set `expiration` to 0 to revoke immediately
+ * - This allows for graceful key rotation with an overlap period
+ *
+ * Common use cases include:
+ * - Rotating keys for security compliance
+ * - Issuing replacement keys for compromised credentials
+ * - Creating backup keys with identical permissions
+ *
+ * **Important:** Analytics and usage metrics are tracked at both the key level AND identity level. If the original key has an identity, the new key will inherit it, allowing you to track usage across both individual keys and the overall identity.
+ *
+ * **Required Permissions**
+ *
+ *  Your root key must have:
+ *  - `api.*.create_key` or `api.<api_id>.create_key`
+ *  - `api.*.encrypt_key` or `api.<api_id>.encrypt_key` (only when the original key is recoverable)
+ */
+export function keysRerollKey(
+  client: UnkeyCore,
+  request: components.V2KeysRerollKeyRequestBody,
+  options?: RequestOptions,
+): APIPromise<
+  Result<
+    components.V2KeysRerollKeyResponseBody,
+    | errors.BadRequestErrorResponse
+    | errors.UnauthorizedErrorResponse
+    | errors.ForbiddenErrorResponse
+    | errors.NotFoundErrorResponse
+    | errors.InternalServerErrorResponse
+    | UnkeyError
+    | ResponseValidationError
+    | ConnectionError
+    | RequestAbortedError
+    | RequestTimeoutError
+    | InvalidRequestError
+    | UnexpectedClientError
+    | SDKValidationError
+  >
+> {
+  return new APIPromise($do(
+    client,
+    request,
+    options,
+  ));
+}
+
+async function $do(
+  client: UnkeyCore,
+  request: components.V2KeysRerollKeyRequestBody,
+  options?: RequestOptions,
+): Promise<
+  [
+    Result<
+      components.V2KeysRerollKeyResponseBody,
+      | errors.BadRequestErrorResponse
+      | errors.UnauthorizedErrorResponse
+      | errors.ForbiddenErrorResponse
+      | errors.NotFoundErrorResponse
+      | errors.InternalServerErrorResponse
+      | UnkeyError
+      | ResponseValidationError
+      | ConnectionError
+      | RequestAbortedError
+      | RequestTimeoutError
+      | InvalidRequestError
+      | UnexpectedClientError
+      | SDKValidationError
+    >,
+    APICall,
+  ]
+> {
+  const parsed = safeParse(
+    request,
+    (value) =>
+      components.V2KeysRerollKeyRequestBody$outboundSchema.parse(value),
+    "Input validation failed",
+  );
+  if (!parsed.ok) {
+    return [parsed, { status: "invalid" }];
+  }
+  const payload = parsed.value;
+  const body = encodeJSON("body", payload, { explode: true });
+
+  const path = pathToFunc("/v2/keys.rerollKey")();
+
+  const headers = new Headers(compactMap({
+    "Content-Type": "application/json",
+    Accept: "application/json",
+  }));
+
+  const secConfig = await extractSecurity(client._options.rootKey);
+  const securityInput = secConfig == null ? {} : { rootKey: secConfig };
+  const requestSecurity = resolveGlobalSecurity(securityInput);
+
+  const context = {
+    options: client._options,
+    baseURL: options?.serverURL ?? client._baseURL ?? "",
+    operationID: "rerollKey",
+    oAuth2Scopes: [],
+
+    resolvedSecurity: requestSecurity,
+
+    securitySource: client._options.rootKey,
+    retryConfig: options?.retries
+      || client._options.retryConfig
+      || {
+        strategy: "backoff",
+        backoff: {
+          initialInterval: 50,
+          maxInterval: 1000,
+          exponent: 1.5,
+          maxElapsedTime: 10000,
+        },
+        retryConnectionErrors: true,
+      }
+      || { strategy: "none" },
+    retryCodes: options?.retryCodes || ["5XX"],
+  };
+
+  const requestRes = client._createRequest(context, {
+    security: requestSecurity,
+    method: "POST",
+    baseURL: options?.serverURL,
+    path: path,
+    headers: headers,
+    body: body,
+    userAgent: client._options.userAgent,
+    timeoutMs: options?.timeoutMs || client._options.timeoutMs || -1,
+  }, options);
+  if (!requestRes.ok) {
+    return [requestRes, { status: "invalid" }];
+  }
+  const req = requestRes.value;
+
+  const doResult = await client._do(req, {
+    context,
+    errorCodes: ["400", "401", "403", "404", "4XX", "500", "5XX"],
+    retryConfig: context.retryConfig,
+    retryCodes: context.retryCodes,
+  });
+  if (!doResult.ok) {
+    return [doResult, { status: "request-error", request: req }];
+  }
+  const response = doResult.value;
+
+  const responseFields = {
+    HttpMeta: { Response: response, Request: req },
+  };
+
+  const [result] = await M.match<
+    components.V2KeysRerollKeyResponseBody,
+    | errors.BadRequestErrorResponse
+    | errors.UnauthorizedErrorResponse
+    | errors.ForbiddenErrorResponse
+    | errors.NotFoundErrorResponse
+    | errors.InternalServerErrorResponse
+    | UnkeyError
+    | ResponseValidationError
+    | ConnectionError
+    | RequestAbortedError
+    | RequestTimeoutError
+    | InvalidRequestError
+    | UnexpectedClientError
+    | SDKValidationError
+  >(
+    M.json(200, components.V2KeysRerollKeyResponseBody$inboundSchema),
+    M.jsonErr(400, errors.BadRequestErrorResponse$inboundSchema),
+    M.jsonErr(401, errors.UnauthorizedErrorResponse$inboundSchema),
+    M.jsonErr(403, errors.ForbiddenErrorResponse$inboundSchema),
+    M.jsonErr(404, errors.NotFoundErrorResponse$inboundSchema),
+    M.jsonErr(500, errors.InternalServerErrorResponse$inboundSchema),
+    M.fail("4XX"),
+    M.fail("5XX"),
+  )(response, req, { extraFields: responseFields });
+  if (!result.ok) {
+    return [result, { status: "complete", request: req, response }];
+  }
+
+  return [result, { status: "complete", request: req, response }];
+}

package/src/funcs/permissionsListPermissions.ts

@@ -29,7 +29,8 @@ import { Result } from "../types/fp.js";
  * List permissions
  *
  * @remarks
- * Retrieve all permissions in your workspace. Results are paginated and sorted alphabetically by permission name.
+ * Retrieve all permissions in your workspace.
+ * Results are paginated and sorted by their id.
  *
  * **Required Permissions**
  *

package/src/funcs/permissionsListRoles.ts

@@ -29,7 +29,8 @@ import { Result } from "../types/fp.js";
  * List roles
  *
  * @remarks
- * Retrieve all roles in your workspace including their assigned permissions. Results are paginated and sorted alphabetically by role name.
+ * Retrieve all roles in your workspace including their assigned permissions.
+ * Results are paginated and sorted by their id.
  *
  * **Required Permissions**
  *

package/src/lib/config.ts

@@ -58,7 +58,7 @@ export function serverURLFromOptions(options: SDKOptions): URL | null {
 export const SDK_METADATA = {
   language: "typescript",
   openapiDocVersion: "2.0.0",
-  sdkVersion: "2.0.2",
-  genVersion: "2.672.0",
-  userAgent: "speakeasy-sdk/typescript 2.0.2 2.672.0 2.0.0 @unkey/api",
+  sdkVersion: "2.0.4",
+  genVersion: "2.683.1",
+  userAgent: "speakeasy-sdk/typescript 2.0.4 2.683.1 2.0.0 @unkey/api",
 } as const;

package/src/mcp-server/mcp-server.ts

@@ -19,7 +19,7 @@ const routes = buildRouteMap({
 export const app = buildApplication(routes, {
   name: "mcp",
   versionInfo: {
-    currentVersion: "2.0.2",
+    currentVersion: "2.0.4",
   },
 });
 

package/src/mcp-server/server.ts

@@ -29,6 +29,7 @@ import { tool$keysDeleteKey } from "./tools/keysDeleteKey.js";
 import { tool$keysGetKey } from "./tools/keysGetKey.js";
 import { tool$keysRemovePermissions } from "./tools/keysRemovePermissions.js";
 import { tool$keysRemoveRoles } from "./tools/keysRemoveRoles.js";
+import { tool$keysRerollKey } from "./tools/keysRerollKey.js";
 import { tool$keysSetPermissions } from "./tools/keysSetPermissions.js";
 import { tool$keysSetRoles } from "./tools/keysSetRoles.js";
 import { tool$keysUpdateCredits } from "./tools/keysUpdateCredits.js";
@@ -59,7 +60,7 @@ export function createMCPServer(deps: {
 }) {
   const server = new McpServer({
     name: "Unkey",
-    version: "2.0.2",
+    version: "2.0.4",
   });
 
   const client = new UnkeyCore({
@@ -105,6 +106,7 @@ export function createMCPServer(deps: {
   tool(tool$keysGetKey);
   tool(tool$keysRemovePermissions);
   tool(tool$keysRemoveRoles);
+  tool(tool$keysRerollKey);
   tool(tool$keysSetPermissions);
   tool(tool$keysSetRoles);
   tool(tool$keysUpdateCredits);

package/src/mcp-server/tools/apisDeleteApi.ts

@@ -16,9 +16,11 @@ export const tool$apisDeleteApi: ToolDefinition<typeof args> = {
 
 Permanently delete an API namespace and immediately invalidate all associated keys.
 
-Use this for cleaning up development environments, retiring deprecated services, or removing unused resources. All keys in the namespace are immediately marked as deleted and will fail verification with \`code=NOT_FOUND\`.
+Use this for cleaning up development environments, retiring deprecated services, or removing unused resources.
+All keys in the namespace are immediately marked as deleted and will fail verification with \`code=NOT_FOUND\`.
 
-**Important**: This operation is immediate and permanent. Verify you have the correct API ID before deletion. If delete protection is enabled, disable it first through the dashboard or API configuration.
+**Important**: This operation is immediate and permanent. Verify you have the correct API ID before deletion.
+If delete protection is enabled, disable it first through the dashboard or API configuration.
 
 **Required Permissions**
 

package/src/mcp-server/tools/identitiesCreateIdentity.ts

@@ -18,8 +18,8 @@ Create an identity to group multiple API keys under a single entity. Identities
 
 Perfect for users with multiple devices, organizations with multiple API keys, or when you need unified rate limiting across different services.
 
-> **Important**  
-> Requires \`identity.*.create_identity\` permission
+**Important**
+Requires \`identity.*.create_identity\` permission
 `,
   args,
   tool: async (client, args, ctx) => {

package/src/mcp-server/tools/identitiesUpdateIdentity.ts

@@ -18,8 +18,8 @@ Update an identity's metadata and rate limits. Only specified fields are modifie
 
 Perfect for subscription changes, plan upgrades, or updating user information. Changes take effect immediately.
 
-> **Important**  
-> Requires \`identity.*.update_identity\` permission  
+> **Important**
+> Requires \`identity.*.update_identity\` permission
 > Rate limit changes propagate within 30 seconds
 `,
   args,

package/src/mcp-server/tools/keysRerollKey.ts

@@ -0,0 +1,69 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import { keysRerollKey } from "../../funcs/keysRerollKey.js";
+import * as components from "../../models/components/index.js";
+import { formatResult, ToolDefinition } from "../tools.js";
+
+const args = {
+  request: components.V2KeysRerollKeyRequestBody$inboundSchema,
+};
+
+export const tool$keysRerollKey: ToolDefinition<typeof args> = {
+  name: "keys-reroll-key",
+  description: `Reroll Key
+
+Generate a new API key while preserving the configuration from an existing key.
+
+This operation creates a fresh key with a new token while maintaining all settings from the original key:
+- Permissions and roles
+- Custom metadata
+- Rate limit configurations
+- Identity associations
+- Remaining credits
+- Recovery settings
+
+**Key Generation:**
+- The system attempts to extract the prefix from the original key
+- If prefix extraction fails, the default API prefix is used
+- Key length follows the API's default byte configuration (or 16 bytes if not specified)
+
+**Original Key Handling:**
+- The original key will be revoked after the duration specified in \`expiration\`
+- Set \`expiration\` to 0 to revoke immediately
+- This allows for graceful key rotation with an overlap period
+
+Common use cases include:
+- Rotating keys for security compliance
+- Issuing replacement keys for compromised credentials
+- Creating backup keys with identical permissions
+
+**Important:** Analytics and usage metrics are tracked at both the key level AND identity level. If the original key has an identity, the new key will inherit it, allowing you to track usage across both individual keys and the overall identity.
+
+**Required Permissions**
+
+ Your root key must have:
+ - \`api.*.create_key\` or \`api.<api_id>.create_key\`
+ - \`api.*.encrypt_key\` or \`api.<api_id>.encrypt_key\` (only when the original key is recoverable)
+`,
+  args,
+  tool: async (client, args, ctx) => {
+    const [result, apiCall] = await keysRerollKey(
+      client,
+      args.request,
+      { fetchOptions: { signal: ctx.signal } },
+    ).$inspect();
+
+    if (!result.ok) {
+      return {
+        content: [{ type: "text", text: result.error.message }],
+        isError: true,
+      };
+    }
+
+    const value = result.value;
+
+    return formatResult(value, apiCall);
+  },
+};

package/src/mcp-server/tools/permissionsListPermissions.ts

@@ -14,7 +14,8 @@ export const tool$permissionsListPermissions: ToolDefinition<typeof args> = {
   name: "permissions-list-permissions",
   description: `List permissions
 
-Retrieve all permissions in your workspace. Results are paginated and sorted alphabetically by permission name.
+Retrieve all permissions in your workspace. 
+Results are paginated and sorted by their id.
 
 **Required Permissions**
 

package/src/mcp-server/tools/permissionsListRoles.ts

@@ -14,7 +14,8 @@ export const tool$permissionsListRoles: ToolDefinition<typeof args> = {
   name: "permissions-list-roles",
   description: `List roles
 
-Retrieve all roles in your workspace including their assigned permissions. Results are paginated and sorted alphabetically by role name.
+Retrieve all roles in your workspace including their assigned permissions. 
+Results are paginated and sorted by their id.
 
 **Required Permissions**
 

package/src/models/components/identity.ts

@@ -19,6 +19,10 @@ import {
 export type IdentityMeta = {};
 
 export type Identity = {
+  /**
+   * Identity ID
+   */
+  id: string;
   /**
    * External identity ID
    */
@@ -27,8 +31,10 @@ export type Identity = {
    * Identity metadata
    */
   meta?: IdentityMeta | undefined;
+  /**
+   * Identity ratelimits
+   */
   ratelimits?: Array<RatelimitResponse> | undefined;
-  description?: any | undefined;
 };
 
 /** @internal */
@@ -81,18 +87,18 @@ export const Identity$inboundSchema: z.ZodType<
   z.ZodTypeDef,
   unknown
 > = z.object({
+  id: z.string(),
   externalId: z.string(),
   meta: z.lazy(() => IdentityMeta$inboundSchema).optional(),
   ratelimits: z.array(RatelimitResponse$inboundSchema).optional(),
-  description: z.any().optional(),
 });
 
 /** @internal */
 export type Identity$Outbound = {
+  id: string;
   externalId: string;
   meta?: IdentityMeta$Outbound | undefined;
   ratelimits?: Array<RatelimitResponse$Outbound> | undefined;
-  description?: any | undefined;
 };
 
 /** @internal */
@@ -101,10 +107,10 @@ export const Identity$outboundSchema: z.ZodType<
   z.ZodTypeDef,
   Identity
 > = z.object({
+  id: z.string(),
   externalId: z.string(),
   meta: z.lazy(() => IdentityMeta$outboundSchema).optional(),
   ratelimits: z.array(RatelimitResponse$outboundSchema).optional(),
-  description: z.any().optional(),
 });
 
 /**

package/src/models/components/index.ts

@@ -36,7 +36,6 @@ export * from "./v2identitiesdeleteidentityrequestbody.js";
 export * from "./v2identitiesdeleteidentityresponsebody.js";
 export * from "./v2identitiesgetidentityrequestbody.js";
 export * from "./v2identitiesgetidentityresponsebody.js";
-export * from "./v2identitiesgetidentityresponsedata.js";
 export * from "./v2identitieslistidentitiesrequestbody.js";
 export * from "./v2identitieslistidentitiesresponsebody.js";
 export * from "./v2identitiesupdateidentityrequestbody.js";
@@ -56,6 +55,9 @@ export * from "./v2keysremovepermissionsrequestbody.js";
 export * from "./v2keysremovepermissionsresponsebody.js";
 export * from "./v2keysremoverolesrequestbody.js";
 export * from "./v2keysremoverolesresponsebody.js";
+export * from "./v2keysrerollkeyrequestbody.js";
+export * from "./v2keysrerollkeyresponsebody.js";
+export * from "./v2keysrerollkeyresponsedata.js";
 export * from "./v2keyssetpermissionsrequestbody.js";
 export * from "./v2keyssetpermissionsresponsebody.js";
 export * from "./v2keyssetrolesrequestbody.js";
@@ -81,10 +83,8 @@ export * from "./v2permissionsdeleterolerequestbody.js";
 export * from "./v2permissionsdeleteroleresponsebody.js";
 export * from "./v2permissionsgetpermissionrequestbody.js";
 export * from "./v2permissionsgetpermissionresponsebody.js";
-export * from "./v2permissionsgetpermissionresponsedata.js";
 export * from "./v2permissionsgetrolerequestbody.js";
 export * from "./v2permissionsgetroleresponsebody.js";
-export * from "./v2permissionsgetroleresponsedata.js";
 export * from "./v2permissionslistpermissionsrequestbody.js";
 export * from "./v2permissionslistpermissionsresponsebody.js";
 export * from "./v2permissionslistrolesrequestbody.js";

package/src/models/components/keyresponsedata.ts

@@ -58,10 +58,6 @@ export type KeyResponseData = {
    * Unix timestamp in milliseconds when key expires (if set).
    */
   expires?: number | undefined;
-  /**
-   * External identifier linking this key to an entity in your system.
-   */
-  externalId?: string | undefined;
   permissions?: Array<string> | undefined;
   roles?: Array<string> | undefined;
   /**
@@ -90,7 +86,6 @@ export const KeyResponseData$inboundSchema: z.ZodType<
   createdAt: z.number().int(),
   updatedAt: z.number().int().optional(),
   expires: z.number().int().optional(),
-  externalId: z.string().optional(),
   permissions: z.array(z.string()).optional(),
   roles: z.array(z.string()).optional(),
   credits: KeyCreditsData$inboundSchema.optional(),
@@ -109,7 +104,6 @@ export type KeyResponseData$Outbound = {
   createdAt: number;
   updatedAt?: number | undefined;
   expires?: number | undefined;
-  externalId?: string | undefined;
   permissions?: Array<string> | undefined;
   roles?: Array<string> | undefined;
   credits?: KeyCreditsData$Outbound | undefined;
@@ -132,7 +126,6 @@ export const KeyResponseData$outboundSchema: z.ZodType<
   createdAt: z.number().int(),
   updatedAt: z.number().int().optional(),
   expires: z.number().int().optional(),
-  externalId: z.string().optional(),
   permissions: z.array(z.string()).optional(),
   roles: z.array(z.string()).optional(),
   credits: KeyCreditsData$outboundSchema.optional(),

package/src/models/components/permission.ts

@@ -26,7 +26,7 @@ export type Permission = {
    */
   name: string;
   /**
-   * The URL-safe identifier when this permission was created.
+   * The unique URL-safe identifier for this permission.
    */
   slug: string;
   /**

package/src/models/components/v2identitiesgetidentityresponsebody.ts

@@ -6,25 +6,25 @@ import * as z from "zod";
 import { safeParse } from "../../lib/schemas.js";
 import { Result as SafeParseResult } from "../../types/fp.js";
 import { SDKValidationError } from "../errors/sdkvalidationerror.js";
+import {
+  Identity,
+  Identity$inboundSchema,
+  Identity$Outbound,
+  Identity$outboundSchema,
+} from "./identity.js";
 import {
   Meta,
   Meta$inboundSchema,
   Meta$Outbound,
   Meta$outboundSchema,
 } from "./meta.js";
-import {
-  V2IdentitiesGetIdentityResponseData,
-  V2IdentitiesGetIdentityResponseData$inboundSchema,
-  V2IdentitiesGetIdentityResponseData$Outbound,
-  V2IdentitiesGetIdentityResponseData$outboundSchema,
-} from "./v2identitiesgetidentityresponsedata.js";
 
 export type V2IdentitiesGetIdentityResponseBody = {
   /**
    * Metadata object included in every API response. This provides context about the request and is essential for debugging, audit trails, and support inquiries. The `requestId` is particularly important when troubleshooting issues with the Unkey support team.
    */
   meta: Meta;
-  data: V2IdentitiesGetIdentityResponseData;
+  data: Identity;
 };
 
 /** @internal */
@@ -34,13 +34,13 @@ export const V2IdentitiesGetIdentityResponseBody$inboundSchema: z.ZodType<
   unknown
 > = z.object({
   meta: Meta$inboundSchema,
-  data: V2IdentitiesGetIdentityResponseData$inboundSchema,
+  data: Identity$inboundSchema,
 });
 
 /** @internal */
 export type V2IdentitiesGetIdentityResponseBody$Outbound = {
   meta: Meta$Outbound;
-  data: V2IdentitiesGetIdentityResponseData$Outbound;
+  data: Identity$Outbound;
 };
 
 /** @internal */
@@ -50,7 +50,7 @@ export const V2IdentitiesGetIdentityResponseBody$outboundSchema: z.ZodType<
   V2IdentitiesGetIdentityResponseBody
 > = z.object({
   meta: Meta$outboundSchema,
-  data: V2IdentitiesGetIdentityResponseData$outboundSchema,
+  data: Identity$outboundSchema,
 });
 
 /**

package/src/models/components/v2identitiesupdateidentityrequestbody.ts

@@ -15,13 +15,9 @@ import {
 
 export type V2IdentitiesUpdateIdentityRequestBody = {
   /**
-   * Specifies which identity to update using your system's identifier from identity creation.
-   *
-   * @remarks
-   * Use this when you track identities by your own user IDs, organization IDs, or tenant identifiers.
-   * Accepts letters, numbers, underscores, dots, and hyphens for flexible identifier formats.
+   * The ID of the identity to update. Accepts either the externalId (your system-generated identifier) or the identityId (internal identifier returned by the identity service).
    */
-  externalId: string;
+  identity: string;
   /**
    * Replaces all existing metadata with this new metadata object.
    *
@@ -48,14 +44,14 @@ export const V2IdentitiesUpdateIdentityRequestBody$inboundSchema: z.ZodType<
   z.ZodTypeDef,
   unknown
 > = z.object({
-  externalId: z.string(),
+  identity: z.string(),
   meta: z.record(z.any()).optional(),
   ratelimits: z.array(RatelimitRequest$inboundSchema).optional(),
 });
 
 /** @internal */
 export type V2IdentitiesUpdateIdentityRequestBody$Outbound = {
-  externalId: string;
+  identity: string;
   meta?: { [k: string]: any } | undefined;
   ratelimits?: Array<RatelimitRequest$Outbound> | undefined;
 };
@@ -66,7 +62,7 @@ export const V2IdentitiesUpdateIdentityRequestBody$outboundSchema: z.ZodType<
   z.ZodTypeDef,
   V2IdentitiesUpdateIdentityRequestBody
 > = z.object({
-  externalId: z.string(),
+  identity: z.string(),
   meta: z.record(z.any()).optional(),
   ratelimits: z.array(RatelimitRequest$outboundSchema).optional(),
 });

package/src/models/components/v2keysaddpermissionsresponsebody.ts

@@ -31,7 +31,6 @@ export type V2KeysAddPermissionsResponseBody = {
    *
    * This response includes:
    * - All direct permissions assigned to the key (both pre-existing and newly added)
-   * - Permissions sorted alphabetically by name for consistent response format
    * - Both the permission ID and name for each permission
    *
    * Important notes:

package/src/models/components/v2keysaddrolesresponsebody.ts

@@ -32,7 +32,6 @@ export type V2KeysAddRolesResponseBody = {
    * The response includes:
    * - All roles now assigned to the key (both pre-existing and newly added)
    * - Both ID and name of each role for easy reference
-   * - Roles sorted alphabetically by name for consistent response format
    *
    * Important notes:
    * - The response shows the complete current state after the addition