@vertracloud/api-types 0.1.1 → 0.2.1

package/payloads/v1/api-key.js

@@ -0,0 +1,267 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// payloads/v1/api-key.ts
+var api_key_exports = {};
+__export(api_key_exports, {
+  APIApiKeyPreset: () => APIApiKeyPreset,
+  APIApiKeyScope: () => APIApiKeyScope,
+  API_KEY_MAX_ALLOWED_IPS: () => API_KEY_MAX_ALLOWED_IPS,
+  API_KEY_MAX_PER_USER: () => API_KEY_MAX_PER_USER,
+  API_KEY_NAME_MAX_LENGTH: () => API_KEY_NAME_MAX_LENGTH,
+  API_KEY_SCOPES: () => API_KEY_SCOPES,
+  API_KEY_SCOPE_LIST: () => API_KEY_SCOPE_LIST,
+  apiKeyPresetScopes: () => apiKeyPresetScopes
+});
+module.exports = __toCommonJS(api_key_exports);
+var APIApiKeyScope = {
+  APPS_READ: "apps:read",
+  APPS_WRITE: "apps:write",
+  APPS_DELETE: "apps:delete",
+  APPS_ENVS: "apps:envs",
+  APPS_FILES: "apps:files",
+  DATABASES_READ: "databases:read",
+  DATABASES_WRITE: "databases:write",
+  DATABASES_DELETE: "databases:delete",
+  DATABASES_CREDENTIALS: "databases:credentials",
+  SNAPSHOTS_READ: "snapshots:read",
+  SNAPSHOTS_WRITE: "snapshots:write",
+  ACCOUNT_READ: "account:read",
+  ACCOUNT_WRITE: "account:write",
+  WORKSPACES_READ: "workspaces:read",
+  WORKSPACES_WRITE: "workspaces:write",
+  WORKSPACES_DELETE: "workspaces:delete",
+  WORKSPACES_INVITES: "workspaces:invites",
+  BILLING_READ: "billing:read",
+  BILLING_WRITE: "billing:write",
+  REDEEM_WRITE: "redeem:write"
+};
+var APIApiKeyPreset = { Read: "read", Write: "write", Full: "full" };
+var API_KEY_SCOPES = {
+  "apps:read": {
+    group: "apps",
+    routes: [
+      { method: "GET", path: "/v1/apps/runtimes" },
+      { method: "GET", path: "/v1/apps/status" },
+      { method: "GET", path: "/v1/apps/:id" },
+      { method: "GET", path: "/v1/apps/:id/status" },
+      { method: "GET", path: "/v1/apps/:id/realtime" },
+      { method: "GET", path: "/v1/apps/:id/metrics" },
+      { method: "GET", path: "/v1/apps/:id/logs" },
+      { method: "GET", path: "/v1/apps/:id/download" },
+      { method: "GET", path: "/v1/apps/:id/deploys" },
+      { method: "GET", path: "/v1/apps/:id/deploys/webhook" },
+      { method: "GET", path: "/v1/apps/:id/network/custom" },
+      { method: "GET", path: "/v1/apps/:id/network/dns" }
+    ]
+  },
+  "apps:write": {
+    group: "apps",
+    routes: [
+      { method: "POST", path: "/v1/apps" },
+      { method: "POST", path: "/v1/apps/:id/start" },
+      { method: "POST", path: "/v1/apps/:id/stop" },
+      { method: "POST", path: "/v1/apps/:id/restart" },
+      { method: "PATCH", path: "/v1/apps/:id/config" },
+      { method: "POST", path: "/v1/apps/:id/deploys/webhook" },
+      { method: "DELETE", path: "/v1/apps/:id/deploys/webhook" },
+      { method: "POST", path: "/v1/apps/:id/network/custom" },
+      { method: "DELETE", path: "/v1/apps/:id/network/custom" },
+      { method: "POST", path: "/v1/apps/:id/network/purge-cache" },
+      { method: "PATCH", path: "/v1/apps/:id/network/subdomain" },
+      { method: "POST", path: "/v1/apps/:id/network/publish" },
+      { method: "DELETE", path: "/v1/apps/:id/network/publish" }
+    ]
+  },
+  "apps:delete": { group: "apps", routes: [{ method: "DELETE", path: "/v1/apps/:id" }] },
+  "apps:envs": {
+    group: "apps",
+    routes: [
+      { method: "GET", path: "/v1/apps/:id/envs" },
+      { method: "POST", path: "/v1/apps/:id/envs" },
+      { method: "DELETE", path: "/v1/apps/:id/envs/:envId" }
+    ]
+  },
+  "apps:files": {
+    group: "apps",
+    routes: [
+      { method: "GET", path: "/v1/apps/:id/files" },
+      { method: "GET", path: "/v1/apps/:id/files/tree" },
+      { method: "GET", path: "/v1/apps/:id/files/content" },
+      { method: "PUT", path: "/v1/apps/:id/files" },
+      { method: "PATCH", path: "/v1/apps/:id/files" },
+      { method: "DELETE", path: "/v1/apps/:id/files" },
+      { method: "POST", path: "/v1/apps/:id/files/upload" }
+    ]
+  },
+  "databases:read": {
+    group: "databases",
+    routes: [
+      { method: "GET", path: "/v1/databases/status" },
+      { method: "GET", path: "/v1/databases/:id" },
+      { method: "GET", path: "/v1/databases/:id/status" },
+      { method: "GET", path: "/v1/databases/:id/metrics" }
+    ]
+  },
+  "databases:write": {
+    group: "databases",
+    routes: [
+      { method: "POST", path: "/v1/databases" },
+      { method: "PUT", path: "/v1/databases/:id" },
+      { method: "POST", path: "/v1/databases/:id/start" },
+      { method: "POST", path: "/v1/databases/:id/stop" },
+      { method: "POST", path: "/v1/databases/:id/reset" }
+    ]
+  },
+  "databases:delete": { group: "databases", routes: [{ method: "DELETE", path: "/v1/databases/:id" }] },
+  "databases:credentials": {
+    group: "databases",
+    routes: [
+      { method: "GET", path: "/v1/databases/:id/credentials/certificate" },
+      { method: "POST", path: "/v1/databases/:id/credentials/certificate/reset" },
+      { method: "POST", path: "/v1/databases/:id/credentials/reset" }
+    ]
+  },
+  "snapshots:read": {
+    group: "snapshots",
+    routes: [
+      { method: "GET", path: "/v1/users/snapshots" },
+      { method: "GET", path: "/v1/users/:id/snapshots" },
+      { method: "GET", path: "/v1/users/:id/snapshots/:snapshot_id/download" }
+    ]
+  },
+  "snapshots:write": {
+    group: "snapshots",
+    routes: [
+      { method: "POST", path: "/v1/users/:id/snapshots" },
+      { method: "POST", path: "/v1/users/:id/snapshots/:snapshot_id/restore" }
+    ]
+  },
+  "account:read": {
+    group: "account",
+    routes: [
+      { method: "GET", path: "/v1/users/me" },
+      { method: "GET", path: "/v1/users/me/sessions" }
+    ]
+  },
+  "account:write": {
+    group: "account",
+    routes: [
+      { method: "PATCH", path: "/v1/users/me" },
+      { method: "POST", path: "/v1/users/me/folders" },
+      { method: "PATCH", path: "/v1/users/me/folders/:folder_id" },
+      { method: "DELETE", path: "/v1/users/me/folders/:folder_id" },
+      { method: "PUT", path: "/v1/users/me/folders/:folder_id/resources/:resource_type/:resource_id" },
+      { method: "DELETE", path: "/v1/users/me/folders/:folder_id/resources/:resource_type/:resource_id" },
+      { method: "PUT", path: "/v1/users/me/favorites/:resource_type/:resource_id" },
+      { method: "DELETE", path: "/v1/users/me/favorites/:resource_type/:resource_id" }
+    ]
+  },
+  "workspaces:read": {
+    group: "workspaces",
+    routes: [
+      { method: "GET", path: "/v1/workspaces" },
+      { method: "GET", path: "/v1/workspaces/:id" },
+      { method: "GET", path: "/v1/workspaces/:id/members" },
+      { method: "GET", path: "/v1/workspaces/:id/roles" },
+      { method: "GET", path: "/v1/workspaces/:id/action-requests" }
+    ]
+  },
+  "workspaces:write": {
+    group: "workspaces",
+    routes: [
+      { method: "POST", path: "/v1/workspaces" },
+      { method: "PUT", path: "/v1/workspaces/:id" },
+      { method: "PUT", path: "/v1/workspaces/:id/members/:user_id" },
+      { method: "DELETE", path: "/v1/workspaces/:id/members/:user_id" },
+      { method: "POST", path: "/v1/workspaces/:id/roles" },
+      { method: "PUT", path: "/v1/workspaces/:id/roles/:role_id" },
+      { method: "DELETE", path: "/v1/workspaces/:id/roles/:role_id" },
+      { method: "POST", path: "/v1/workspaces/:id/apps/:app_id" },
+      { method: "DELETE", path: "/v1/workspaces/:id/apps/:app_id" },
+      { method: "POST", path: "/v1/workspaces/:id/databases/:db_id" },
+      { method: "DELETE", path: "/v1/workspaces/:id/databases/:db_id" },
+      { method: "POST", path: "/v1/workspaces/:id/folders" },
+      { method: "PATCH", path: "/v1/workspaces/:id/folders/:folder_id" },
+      { method: "DELETE", path: "/v1/workspaces/:id/folders/:folder_id" },
+      { method: "PUT", path: "/v1/workspaces/:id/folders/:folder_id/resources/:resource_type/:resource_id" },
+      { method: "DELETE", path: "/v1/workspaces/:id/folders/:folder_id/resources/:resource_type/:resource_id" },
+      { method: "PUT", path: "/v1/workspaces/:id/favorites/:resource_type/:resource_id" },
+      { method: "DELETE", path: "/v1/workspaces/:id/favorites/:resource_type/:resource_id" },
+      { method: "POST", path: "/v1/workspaces/:id/action-requests" }
+    ]
+  },
+  /**
+   * Intentionally left out (dashboard session only): creating invites (a leaked key could grant
+   * access that outlives its revocation), transferring ownership, approving/rejecting action
+   * requests (approval is a human decision) and exporting activities.
+   */
+  /** Delete a workspace (soft delete). Only in the `full` preset, like `apps:delete`. */
+  "workspaces:delete": {
+    group: "workspaces",
+    routes: [{ method: "DELETE", path: "/v1/workspaces/:id" }]
+  },
+  /** List and revoke workspace invites; view, accept and decline your own invite by token. Only in the `full` preset. */
+  "workspaces:invites": {
+    group: "workspaces",
+    routes: [
+      { method: "GET", path: "/v1/workspaces/:id/invites" },
+      { method: "DELETE", path: "/v1/workspaces/:id/invites/:invite_id" },
+      { method: "GET", path: "/v1/workspaces/invites/:token" },
+      { method: "POST", path: "/v1/workspaces/invites/:token/accept" },
+      { method: "POST", path: "/v1/workspaces/invites/:token/decline" }
+    ]
+  },
+  "billing:read": {
+    group: "billing",
+    routes: [
+      { method: "GET", path: "/v1/orders" },
+      { method: "GET", path: "/v1/orders/:orderId/status" }
+    ]
+  },
+  /** Creates a plan order and generates the PIX charge; the payment itself is made by a person in their banking app. */
+  "billing:write": {
+    group: "billing",
+    routes: [
+      { method: "POST", path: "/v1/orders" },
+      { method: "POST", path: "/v1/orders/:orderId/initiate/pix" }
+    ]
+  },
+  "redeem:write": { group: "billing", routes: [{ method: "POST", path: "/v1/redeem/:code" }] }
+};
+var API_KEY_SCOPE_LIST = Object.keys(API_KEY_SCOPES);
+function apiKeyPresetScopes(preset) {
+  if (preset === "full") return API_KEY_SCOPE_LIST;
+  return API_KEY_SCOPE_LIST.filter((s) => s.endsWith(":read") || preset === "write" && s.endsWith(":write"));
+}
+var API_KEY_MAX_PER_USER = 10;
+var API_KEY_MAX_ALLOWED_IPS = 20;
+var API_KEY_NAME_MAX_LENGTH = 40;
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  APIApiKeyPreset,
+  APIApiKeyScope,
+  API_KEY_MAX_ALLOWED_IPS,
+  API_KEY_MAX_PER_USER,
+  API_KEY_NAME_MAX_LENGTH,
+  API_KEY_SCOPES,
+  API_KEY_SCOPE_LIST,
+  apiKeyPresetScopes
+});
+//# sourceMappingURL=api-key.js.map

package/payloads/v1/api-key.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["api-key.ts"],"sourcesContent":["import type { ISODateString } from \"../../common/v1\";\n\n/**\n * API key scope, in the form `<resource>:<action>`. Presets: `read` = every `*:read`;\n * `write` = `read` + every `*:write`; `full` = all of them, including the ones without a\n * `read`/`write` suffix (delete, envs, files, credentials).\n * @see https://docs.vertracloud.app/api-reference/introduction#scopes\n */\nexport type APIApiKeyScope =\n\t| \"apps:read\"\n\t| \"apps:write\"\n\t| \"apps:delete\"\n\t| \"apps:envs\"\n\t| \"apps:files\"\n\t| \"databases:read\"\n\t| \"databases:write\"\n\t| \"databases:delete\"\n\t| \"databases:credentials\"\n\t| \"snapshots:read\"\n\t| \"snapshots:write\"\n\t| \"account:read\"\n\t| \"account:write\"\n\t| \"workspaces:read\"\n\t| \"workspaces:write\"\n\t| \"workspaces:delete\"\n\t| \"workspaces:invites\"\n\t| \"billing:read\"\n\t| \"billing:write\"\n\t| \"redeem:write\";\n\nexport const APIApiKeyScope = {\n\tAPPS_READ: \"apps:read\",\n\tAPPS_WRITE: \"apps:write\",\n\tAPPS_DELETE: \"apps:delete\",\n\tAPPS_ENVS: \"apps:envs\",\n\tAPPS_FILES: \"apps:files\",\n\tDATABASES_READ: \"databases:read\",\n\tDATABASES_WRITE: \"databases:write\",\n\tDATABASES_DELETE: \"databases:delete\",\n\tDATABASES_CREDENTIALS: \"databases:credentials\",\n\tSNAPSHOTS_READ: \"snapshots:read\",\n\tSNAPSHOTS_WRITE: \"snapshots:write\",\n\tACCOUNT_READ: \"account:read\",\n\tACCOUNT_WRITE: \"account:write\",\n\tWORKSPACES_READ: \"workspaces:read\",\n\tWORKSPACES_WRITE: \"workspaces:write\",\n\tWORKSPACES_DELETE: \"workspaces:delete\",\n\tWORKSPACES_INVITES: \"workspaces:invites\",\n\tBILLING_READ: \"billing:read\",\n\tBILLING_WRITE: \"billing:write\",\n\tREDEEM_WRITE: \"redeem:write\",\n} as const satisfies Record<string, APIApiKeyScope>;\n\nexport type APIApiKeyPreset = \"read\" | \"write\" | \"full\";\nexport const APIApiKeyPreset = { Read: \"read\", Write: \"write\", Full: \"full\" } as const;\n\nexport type APIApiKeyRouteMethod = \"GET\" | \"POST\" | \"PUT\" | \"PATCH\" | \"DELETE\";\n\nexport interface APIApiKeyRoute {\n\tmethod: APIApiKeyRouteMethod;\n\t/** Full route pattern with `:param` placeholders (`/v1/apps/:id/files`). Matched exactly, no regex. */\n\tpath: string;\n}\n\nexport interface APIApiKeyScopeEntry {\n\t/** Display group the scope belongs to. */\n\tgroup: \"apps\" | \"databases\" | \"snapshots\" | \"account\" | \"workspaces\" | \"billing\";\n\troutes: APIApiKeyRoute[];\n}\n\n/**\n * Closed catalog of the routes an API key can reach, per scope. A key without the route's scope\n * gets 403 `API_KEY_SCOPE_DENIED`; a route that is not listed here always returns 403 to an API key.\n *\n * Intentionally left out (dashboard session only): key management, creating workspace invites\n * (an invite would outlive the key's revocation), revoking sessions, plan downgrade, and the\n * database **Data** tab (`/v1/databases/:id/data/*`).\n */\nexport const API_KEY_SCOPES: Record<APIApiKeyScope, APIApiKeyScopeEntry> = {\n\t\"apps:read\": {\n\t\tgroup: \"apps\",\n\t\troutes: [\n\t\t\t{ method: \"GET\", path: \"/v1/apps/runtimes\" },\n\t\t\t{ method: \"GET\", path: \"/v1/apps/status\" },\n\t\t\t{ method: \"GET\", path: \"/v1/apps/:id\" },\n\t\t\t{ method: \"GET\", path: \"/v1/apps/:id/status\" },\n\t\t\t{ method: \"GET\", path: \"/v1/apps/:id/realtime\" },\n\t\t\t{ method: \"GET\", path: \"/v1/apps/:id/metrics\" },\n\t\t\t{ method: \"GET\", path: \"/v1/apps/:id/logs\" },\n\t\t\t{ method: \"GET\", path: \"/v1/apps/:id/download\" },\n\t\t\t{ method: \"GET\", path: \"/v1/apps/:id/deploys\" },\n\t\t\t{ method: \"GET\", path: \"/v1/apps/:id/deploys/webhook\" },\n\t\t\t{ method: \"GET\", path: \"/v1/apps/:id/network/custom\" },\n\t\t\t{ method: \"GET\", path: \"/v1/apps/:id/network/dns\" },\n\t\t],\n\t},\n\t\"apps:write\": {\n\t\tgroup: \"apps\",\n\t\troutes: [\n\t\t\t{ method: \"POST\", path: \"/v1/apps\" },\n\t\t\t{ method: \"POST\", path: \"/v1/apps/:id/start\" },\n\t\t\t{ method: \"POST\", path: \"/v1/apps/:id/stop\" },\n\t\t\t{ method: \"POST\", path: \"/v1/apps/:id/restart\" },\n\t\t\t{ method: \"PATCH\", path: \"/v1/apps/:id/config\" },\n\t\t\t{ method: \"POST\", path: \"/v1/apps/:id/deploys/webhook\" },\n\t\t\t{ method: \"DELETE\", path: \"/v1/apps/:id/deploys/webhook\" },\n\t\t\t{ method: \"POST\", path: \"/v1/apps/:id/network/custom\" },\n\t\t\t{ method: \"DELETE\", path: \"/v1/apps/:id/network/custom\" },\n\t\t\t{ method: \"POST\", path: \"/v1/apps/:id/network/purge-cache\" },\n\t\t\t{ method: \"PATCH\", path: \"/v1/apps/:id/network/subdomain\" },\n\t\t\t{ method: \"POST\", path: \"/v1/apps/:id/network/publish\" },\n\t\t\t{ method: \"DELETE\", path: \"/v1/apps/:id/network/publish\" },\n\t\t],\n\t},\n\t\"apps:delete\": { group: \"apps\", routes: [{ method: \"DELETE\", path: \"/v1/apps/:id\" }] },\n\t\"apps:envs\": {\n\t\tgroup: \"apps\",\n\t\troutes: [\n\t\t\t{ method: \"GET\", path: \"/v1/apps/:id/envs\" },\n\t\t\t{ method: \"POST\", path: \"/v1/apps/:id/envs\" },\n\t\t\t{ method: \"DELETE\", path: \"/v1/apps/:id/envs/:envId\" },\n\t\t],\n\t},\n\t\"apps:files\": {\n\t\tgroup: \"apps\",\n\t\troutes: [\n\t\t\t{ method: \"GET\", path: \"/v1/apps/:id/files\" },\n\t\t\t{ method: \"GET\", path: \"/v1/apps/:id/files/tree\" },\n\t\t\t{ method: \"GET\", path: \"/v1/apps/:id/files/content\" },\n\t\t\t{ method: \"PUT\", path: \"/v1/apps/:id/files\" },\n\t\t\t{ method: \"PATCH\", path: \"/v1/apps/:id/files\" },\n\t\t\t{ method: \"DELETE\", path: \"/v1/apps/:id/files\" },\n\t\t\t{ method: \"POST\", path: \"/v1/apps/:id/files/upload\" },\n\t\t],\n\t},\n\t\"databases:read\": {\n\t\tgroup: \"databases\",\n\t\troutes: [\n\t\t\t{ method: \"GET\", path: \"/v1/databases/status\" },\n\t\t\t{ method: \"GET\", path: \"/v1/databases/:id\" },\n\t\t\t{ method: \"GET\", path: \"/v1/databases/:id/status\" },\n\t\t\t{ method: \"GET\", path: \"/v1/databases/:id/metrics\" },\n\t\t],\n\t},\n\t\"databases:write\": {\n\t\tgroup: \"databases\",\n\t\troutes: [\n\t\t\t{ method: \"POST\", path: \"/v1/databases\" },\n\t\t\t{ method: \"PUT\", path: \"/v1/databases/:id\" },\n\t\t\t{ method: \"POST\", path: \"/v1/databases/:id/start\" },\n\t\t\t{ method: \"POST\", path: \"/v1/databases/:id/stop\" },\n\t\t\t{ method: \"POST\", path: \"/v1/databases/:id/reset\" },\n\t\t],\n\t},\n\t\"databases:delete\": { group: \"databases\", routes: [{ method: \"DELETE\", path: \"/v1/databases/:id\" }] },\n\t\"databases:credentials\": {\n\t\tgroup: \"databases\",\n\t\troutes: [\n\t\t\t{ method: \"GET\", path: \"/v1/databases/:id/credentials/certificate\" },\n\t\t\t{ method: \"POST\", path: \"/v1/databases/:id/credentials/certificate/reset\" },\n\t\t\t{ method: \"POST\", path: \"/v1/databases/:id/credentials/reset\" },\n\t\t],\n\t},\n\t\"snapshots:read\": {\n\t\tgroup: \"snapshots\",\n\t\troutes: [\n\t\t\t{ method: \"GET\", path: \"/v1/users/snapshots\" },\n\t\t\t{ method: \"GET\", path: \"/v1/users/:id/snapshots\" },\n\t\t\t{ method: \"GET\", path: \"/v1/users/:id/snapshots/:snapshot_id/download\" },\n\t\t],\n\t},\n\t\"snapshots:write\": {\n\t\tgroup: \"snapshots\",\n\t\troutes: [\n\t\t\t{ method: \"POST\", path: \"/v1/users/:id/snapshots\" },\n\t\t\t{ method: \"POST\", path: \"/v1/users/:id/snapshots/:snapshot_id/restore\" },\n\t\t],\n\t},\n\t\"account:read\": {\n\t\tgroup: \"account\",\n\t\troutes: [\n\t\t\t{ method: \"GET\", path: \"/v1/users/me\" },\n\t\t\t{ method: \"GET\", path: \"/v1/users/me/sessions\" },\n\t\t],\n\t},\n\t\"account:write\": {\n\t\tgroup: \"account\",\n\t\troutes: [\n\t\t\t{ method: \"PATCH\", path: \"/v1/users/me\" },\n\t\t\t{ method: \"POST\", path: \"/v1/users/me/folders\" },\n\t\t\t{ method: \"PATCH\", path: \"/v1/users/me/folders/:folder_id\" },\n\t\t\t{ method: \"DELETE\", path: \"/v1/users/me/folders/:folder_id\" },\n\t\t\t{ method: \"PUT\", path: \"/v1/users/me/folders/:folder_id/resources/:resource_type/:resource_id\" },\n\t\t\t{ method: \"DELETE\", path: \"/v1/users/me/folders/:folder_id/resources/:resource_type/:resource_id\" },\n\t\t\t{ method: \"PUT\", path: \"/v1/users/me/favorites/:resource_type/:resource_id\" },\n\t\t\t{ method: \"DELETE\", path: \"/v1/users/me/favorites/:resource_type/:resource_id\" },\n\t\t],\n\t},\n\t\"workspaces:read\": {\n\t\tgroup: \"workspaces\",\n\t\troutes: [\n\t\t\t{ method: \"GET\", path: \"/v1/workspaces\" },\n\t\t\t{ method: \"GET\", path: \"/v1/workspaces/:id\" },\n\t\t\t{ method: \"GET\", path: \"/v1/workspaces/:id/members\" },\n\t\t\t{ method: \"GET\", path: \"/v1/workspaces/:id/roles\" },\n\t\t\t{ method: \"GET\", path: \"/v1/workspaces/:id/action-requests\" },\n\t\t],\n\t},\n\t\"workspaces:write\": {\n\t\tgroup: \"workspaces\",\n\t\troutes: [\n\t\t\t{ method: \"POST\", path: \"/v1/workspaces\" },\n\t\t\t{ method: \"PUT\", path: \"/v1/workspaces/:id\" },\n\t\t\t{ method: \"PUT\", path: \"/v1/workspaces/:id/members/:user_id\" },\n\t\t\t{ method: \"DELETE\", path: \"/v1/workspaces/:id/members/:user_id\" },\n\t\t\t{ method: \"POST\", path: \"/v1/workspaces/:id/roles\" },\n\t\t\t{ method: \"PUT\", path: \"/v1/workspaces/:id/roles/:role_id\" },\n\t\t\t{ method: \"DELETE\", path: \"/v1/workspaces/:id/roles/:role_id\" },\n\t\t\t{ method: \"POST\", path: \"/v1/workspaces/:id/apps/:app_id\" },\n\t\t\t{ method: \"DELETE\", path: \"/v1/workspaces/:id/apps/:app_id\" },\n\t\t\t{ method: \"POST\", path: \"/v1/workspaces/:id/databases/:db_id\" },\n\t\t\t{ method: \"DELETE\", path: \"/v1/workspaces/:id/databases/:db_id\" },\n\t\t\t{ method: \"POST\", path: \"/v1/workspaces/:id/folders\" },\n\t\t\t{ method: \"PATCH\", path: \"/v1/workspaces/:id/folders/:folder_id\" },\n\t\t\t{ method: \"DELETE\", path: \"/v1/workspaces/:id/folders/:folder_id\" },\n\t\t\t{ method: \"PUT\", path: \"/v1/workspaces/:id/folders/:folder_id/resources/:resource_type/:resource_id\" },\n\t\t\t{ method: \"DELETE\", path: \"/v1/workspaces/:id/folders/:folder_id/resources/:resource_type/:resource_id\" },\n\t\t\t{ method: \"PUT\", path: \"/v1/workspaces/:id/favorites/:resource_type/:resource_id\" },\n\t\t\t{ method: \"DELETE\", path: \"/v1/workspaces/:id/favorites/:resource_type/:resource_id\" },\n\t\t\t{ method: \"POST\", path: \"/v1/workspaces/:id/action-requests\" },\n\t\t],\n\t},\n\t/**\n\t * Intentionally left out (dashboard session only): creating invites (a leaked key could grant\n\t * access that outlives its revocation), transferring ownership, approving/rejecting action\n\t * requests (approval is a human decision) and exporting activities.\n\t */\n\t/** Delete a workspace (soft delete). Only in the `full` preset, like `apps:delete`. */\n\t\"workspaces:delete\": {\n\t\tgroup: \"workspaces\",\n\t\troutes: [{ method: \"DELETE\", path: \"/v1/workspaces/:id\" }],\n\t},\n\t/** List and revoke workspace invites; view, accept and decline your own invite by token. Only in the `full` preset. */\n\t\"workspaces:invites\": {\n\t\tgroup: \"workspaces\",\n\t\troutes: [\n\t\t\t{ method: \"GET\", path: \"/v1/workspaces/:id/invites\" },\n\t\t\t{ method: \"DELETE\", path: \"/v1/workspaces/:id/invites/:invite_id\" },\n\t\t\t{ method: \"GET\", path: \"/v1/workspaces/invites/:token\" },\n\t\t\t{ method: \"POST\", path: \"/v1/workspaces/invites/:token/accept\" },\n\t\t\t{ method: \"POST\", path: \"/v1/workspaces/invites/:token/decline\" },\n\t\t],\n\t},\n\t\"billing:read\": {\n\t\tgroup: \"billing\",\n\t\troutes: [\n\t\t\t{ method: \"GET\", path: \"/v1/orders\" },\n\t\t\t{ method: \"GET\", path: \"/v1/orders/:orderId/status\" },\n\t\t],\n\t},\n\t/** Creates a plan order and generates the PIX charge; the payment itself is made by a person in their banking app. */\n\t\"billing:write\": {\n\t\tgroup: \"billing\",\n\t\troutes: [\n\t\t\t{ method: \"POST\", path: \"/v1/orders\" },\n\t\t\t{ method: \"POST\", path: \"/v1/orders/:orderId/initiate/pix\" },\n\t\t],\n\t},\n\t\"redeem:write\": { group: \"billing\", routes: [{ method: \"POST\", path: \"/v1/redeem/:code\" }] },\n};\n\nexport const API_KEY_SCOPE_LIST = Object.keys(API_KEY_SCOPES) as APIApiKeyScope[];\n\n/** Scopes selected by a preset. `full` is the whole catalog. */\nexport function apiKeyPresetScopes(preset: APIApiKeyPreset): APIApiKeyScope[] {\n\tif (preset === \"full\") return API_KEY_SCOPE_LIST;\n\treturn API_KEY_SCOPE_LIST.filter((s) => s.endsWith(\":read\") || (preset === \"write\" && s.endsWith(\":write\")));\n}\n\n/** Maximum keys per account, entries in `allowed_ips`, and key name length. */\nexport const API_KEY_MAX_PER_USER = 10;\nexport const API_KEY_MAX_ALLOWED_IPS = 20;\nexport const API_KEY_NAME_MAX_LENGTH = 40;\n\n/**\n * An API key as listed. The secret is returned only ONCE, in `APIApiKeyCreated`.\n * @see https://docs.vertracloud.app/api-reference/endpoint/users/api-keys/list\n */\nexport interface APIApiKey {\n\tid: string;\n\tname: string;\n\t/** Public start of the key (`vc_live_a1b2c3d4`; older keys: 8 hex characters). */\n\tprefix: string;\n\t/** Last 4 characters; `null` for keys generated before the `vc_live_` format. */\n\tlast4: string | null;\n\tscopes: APIApiKeyScope[];\n\t/** Allowed IPs/CIDRs. Empty list = any IP. */\n\tallowed_ips: string[];\n\tcreated_at: ISODateString;\n\tlast_used_at: ISODateString | null;\n}\n\nexport interface APIApiKeyCreated extends APIApiKey {\n\t/** The full secret. Shown once; it cannot be recovered. */\n\tapi_key: string;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AA8BO,IAAM,iBAAiB;AAAA,EAC7B,WAAW;AAAA,EACX,YAAY;AAAA,EACZ,aAAa;AAAA,EACb,WAAW;AAAA,EACX,YAAY;AAAA,EACZ,gBAAgB;AAAA,EAChB,iBAAiB;AAAA,EACjB,kBAAkB;AAAA,EAClB,uBAAuB;AAAA,EACvB,gBAAgB;AAAA,EAChB,iBAAiB;AAAA,EACjB,cAAc;AAAA,EACd,eAAe;AAAA,EACf,iBAAiB;AAAA,EACjB,kBAAkB;AAAA,EAClB,mBAAmB;AAAA,EACnB,oBAAoB;AAAA,EACpB,cAAc;AAAA,EACd,eAAe;AAAA,EACf,cAAc;AACf;AAGO,IAAM,kBAAkB,EAAE,MAAM,QAAQ,OAAO,SAAS,MAAM,OAAO;AAwBrE,IAAM,iBAA8D;AAAA,EAC1E,aAAa;AAAA,IACZ,OAAO;AAAA,IACP,QAAQ;AAAA,MACP,EAAE,QAAQ,OAAO,MAAM,oBAAoB;AAAA,MAC3C,EAAE,QAAQ,OAAO,MAAM,kBAAkB;AAAA,MACzC,EAAE,QAAQ,OAAO,MAAM,eAAe;AAAA,MACtC,EAAE,QAAQ,OAAO,MAAM,sBAAsB;AAAA,MAC7C,EAAE,QAAQ,OAAO,MAAM,wBAAwB;AAAA,MAC/C,EAAE,QAAQ,OAAO,MAAM,uBAAuB;AAAA,MAC9C,EAAE,QAAQ,OAAO,MAAM,oBAAoB;AAAA,MAC3C,EAAE,QAAQ,OAAO,MAAM,wBAAwB;AAAA,MAC/C,EAAE,QAAQ,OAAO,MAAM,uBAAuB;AAAA,MAC9C,EAAE,QAAQ,OAAO,MAAM,+BAA+B;AAAA,MACtD,EAAE,QAAQ,OAAO,MAAM,8BAA8B;AAAA,MACrD,EAAE,QAAQ,OAAO,MAAM,2BAA2B;AAAA,IACnD;AAAA,EACD;AAAA,EACA,cAAc;AAAA,IACb,OAAO;AAAA,IACP,QAAQ;AAAA,MACP,EAAE,QAAQ,QAAQ,MAAM,WAAW;AAAA,MACnC,EAAE,QAAQ,QAAQ,MAAM,qBAAqB;AAAA,MAC7C,EAAE,QAAQ,QAAQ,MAAM,oBAAoB;AAAA,MAC5C,EAAE,QAAQ,QAAQ,MAAM,uBAAuB;AAAA,MAC/C,EAAE,QAAQ,SAAS,MAAM,sBAAsB;AAAA,MAC/C,EAAE,QAAQ,QAAQ,MAAM,+BAA+B;AAAA,MACvD,EAAE,QAAQ,UAAU,MAAM,+BAA+B;AAAA,MACzD,EAAE,QAAQ,QAAQ,MAAM,8BAA8B;AAAA,MACtD,EAAE,QAAQ,UAAU,MAAM,8BAA8B;AAAA,MACxD,EAAE,QAAQ,QAAQ,MAAM,mCAAmC;AAAA,MAC3D,EAAE,QAAQ,SAAS,MAAM,iCAAiC;AAAA,MAC1D,EAAE,QAAQ,QAAQ,MAAM,+BAA+B;AAAA,MACvD,EAAE,QAAQ,UAAU,MAAM,+BAA+B;AAAA,IAC1D;AAAA,EACD;AAAA,EACA,eAAe,EAAE,OAAO,QAAQ,QAAQ,CAAC,EAAE,QAAQ,UAAU,MAAM,eAAe,CAAC,EAAE;AAAA,EACrF,aAAa;AAAA,IACZ,OAAO;AAAA,IACP,QAAQ;AAAA,MACP,EAAE,QAAQ,OAAO,MAAM,oBAAoB;AAAA,MAC3C,EAAE,QAAQ,QAAQ,MAAM,oBAAoB;AAAA,MAC5C,EAAE,QAAQ,UAAU,MAAM,2BAA2B;AAAA,IACtD;AAAA,EACD;AAAA,EACA,cAAc;AAAA,IACb,OAAO;AAAA,IACP,QAAQ;AAAA,MACP,EAAE,QAAQ,OAAO,MAAM,qBAAqB;AAAA,MAC5C,EAAE,QAAQ,OAAO,MAAM,0BAA0B;AAAA,MACjD,EAAE,QAAQ,OAAO,MAAM,6BAA6B;AAAA,MACpD,EAAE,QAAQ,OAAO,MAAM,qBAAqB;AAAA,MAC5C,EAAE,QAAQ,SAAS,MAAM,qBAAqB;AAAA,MAC9C,EAAE,QAAQ,UAAU,MAAM,qBAAqB;AAAA,MAC/C,EAAE,QAAQ,QAAQ,MAAM,4BAA4B;AAAA,IACrD;AAAA,EACD;AAAA,EACA,kBAAkB;AAAA,IACjB,OAAO;AAAA,IACP,QAAQ;AAAA,MACP,EAAE,QAAQ,OAAO,MAAM,uBAAuB;AAAA,MAC9C,EAAE,QAAQ,OAAO,MAAM,oBAAoB;AAAA,MAC3C,EAAE,QAAQ,OAAO,MAAM,2BAA2B;AAAA,MAClD,EAAE,QAAQ,OAAO,MAAM,4BAA4B;AAAA,IACpD;AAAA,EACD;AAAA,EACA,mBAAmB;AAAA,IAClB,OAAO;AAAA,IACP,QAAQ;AAAA,MACP,EAAE,QAAQ,QAAQ,MAAM,gBAAgB;AAAA,MACxC,EAAE,QAAQ,OAAO,MAAM,oBAAoB;AAAA,MAC3C,EAAE,QAAQ,QAAQ,MAAM,0BAA0B;AAAA,MAClD,EAAE,QAAQ,QAAQ,MAAM,yBAAyB;AAAA,MACjD,EAAE,QAAQ,QAAQ,MAAM,0BAA0B;AAAA,IACnD;AAAA,EACD;AAAA,EACA,oBAAoB,EAAE,OAAO,aAAa,QAAQ,CAAC,EAAE,QAAQ,UAAU,MAAM,oBAAoB,CAAC,EAAE;AAAA,EACpG,yBAAyB;AAAA,IACxB,OAAO;AAAA,IACP,QAAQ;AAAA,MACP,EAAE,QAAQ,OAAO,MAAM,4CAA4C;AAAA,MACnE,EAAE,QAAQ,QAAQ,MAAM,kDAAkD;AAAA,MAC1E,EAAE,QAAQ,QAAQ,MAAM,sCAAsC;AAAA,IAC/D;AAAA,EACD;AAAA,EACA,kBAAkB;AAAA,IACjB,OAAO;AAAA,IACP,QAAQ;AAAA,MACP,EAAE,QAAQ,OAAO,MAAM,sBAAsB;AAAA,MAC7C,EAAE,QAAQ,OAAO,MAAM,0BAA0B;AAAA,MACjD,EAAE,QAAQ,OAAO,MAAM,gDAAgD;AAAA,IACxE;AAAA,EACD;AAAA,EACA,mBAAmB;AAAA,IAClB,OAAO;AAAA,IACP,QAAQ;AAAA,MACP,EAAE,QAAQ,QAAQ,MAAM,0BAA0B;AAAA,MAClD,EAAE,QAAQ,QAAQ,MAAM,+CAA+C;AAAA,IACxE;AAAA,EACD;AAAA,EACA,gBAAgB;AAAA,IACf,OAAO;AAAA,IACP,QAAQ;AAAA,MACP,EAAE,QAAQ,OAAO,MAAM,eAAe;AAAA,MACtC,EAAE,QAAQ,OAAO,MAAM,wBAAwB;AAAA,IAChD;AAAA,EACD;AAAA,EACA,iBAAiB;AAAA,IAChB,OAAO;AAAA,IACP,QAAQ;AAAA,MACP,EAAE,QAAQ,SAAS,MAAM,eAAe;AAAA,MACxC,EAAE,QAAQ,QAAQ,MAAM,uBAAuB;AAAA,MAC/C,EAAE,QAAQ,SAAS,MAAM,kCAAkC;AAAA,MAC3D,EAAE,QAAQ,UAAU,MAAM,kCAAkC;AAAA,MAC5D,EAAE,QAAQ,OAAO,MAAM,wEAAwE;AAAA,MAC/F,EAAE,QAAQ,UAAU,MAAM,wEAAwE;AAAA,MAClG,EAAE,QAAQ,OAAO,MAAM,qDAAqD;AAAA,MAC5E,EAAE,QAAQ,UAAU,MAAM,qDAAqD;AAAA,IAChF;AAAA,EACD;AAAA,EACA,mBAAmB;AAAA,IAClB,OAAO;AAAA,IACP,QAAQ;AAAA,MACP,EAAE,QAAQ,OAAO,MAAM,iBAAiB;AAAA,MACxC,EAAE,QAAQ,OAAO,MAAM,qBAAqB;AAAA,MAC5C,EAAE,QAAQ,OAAO,MAAM,6BAA6B;AAAA,MACpD,EAAE,QAAQ,OAAO,MAAM,2BAA2B;AAAA,MAClD,EAAE,QAAQ,OAAO,MAAM,qCAAqC;AAAA,IAC7D;AAAA,EACD;AAAA,EACA,oBAAoB;AAAA,IACnB,OAAO;AAAA,IACP,QAAQ;AAAA,MACP,EAAE,QAAQ,QAAQ,MAAM,iBAAiB;AAAA,MACzC,EAAE,QAAQ,OAAO,MAAM,qBAAqB;AAAA,MAC5C,EAAE,QAAQ,OAAO,MAAM,sCAAsC;AAAA,MAC7D,EAAE,QAAQ,UAAU,MAAM,sCAAsC;AAAA,MAChE,EAAE,QAAQ,QAAQ,MAAM,2BAA2B;AAAA,MACnD,EAAE,QAAQ,OAAO,MAAM,oCAAoC;AAAA,MAC3D,EAAE,QAAQ,UAAU,MAAM,oCAAoC;AAAA,MAC9D,EAAE,QAAQ,QAAQ,MAAM,kCAAkC;AAAA,MAC1D,EAAE,QAAQ,UAAU,MAAM,kCAAkC;AAAA,MAC5D,EAAE,QAAQ,QAAQ,MAAM,sCAAsC;AAAA,MAC9D,EAAE,QAAQ,UAAU,MAAM,sCAAsC;AAAA,MAChE,EAAE,QAAQ,QAAQ,MAAM,6BAA6B;AAAA,MACrD,EAAE,QAAQ,SAAS,MAAM,wCAAwC;AAAA,MACjE,EAAE,QAAQ,UAAU,MAAM,wCAAwC;AAAA,MAClE,EAAE,QAAQ,OAAO,MAAM,8EAA8E;AAAA,MACrG,EAAE,QAAQ,UAAU,MAAM,8EAA8E;AAAA,MACxG,EAAE,QAAQ,OAAO,MAAM,2DAA2D;AAAA,MAClF,EAAE,QAAQ,UAAU,MAAM,2DAA2D;AAAA,MACrF,EAAE,QAAQ,QAAQ,MAAM,qCAAqC;AAAA,IAC9D;AAAA,EACD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,qBAAqB;AAAA,IACpB,OAAO;AAAA,IACP,QAAQ,CAAC,EAAE,QAAQ,UAAU,MAAM,qBAAqB,CAAC;AAAA,EAC1D;AAAA;AAAA,EAEA,sBAAsB;AAAA,IACrB,OAAO;AAAA,IACP,QAAQ;AAAA,MACP,EAAE,QAAQ,OAAO,MAAM,6BAA6B;AAAA,MACpD,EAAE,QAAQ,UAAU,MAAM,wCAAwC;AAAA,MAClE,EAAE,QAAQ,OAAO,MAAM,gCAAgC;AAAA,MACvD,EAAE,QAAQ,QAAQ,MAAM,uCAAuC;AAAA,MAC/D,EAAE,QAAQ,QAAQ,MAAM,wCAAwC;AAAA,IACjE;AAAA,EACD;AAAA,EACA,gBAAgB;AAAA,IACf,OAAO;AAAA,IACP,QAAQ;AAAA,MACP,EAAE,QAAQ,OAAO,MAAM,aAAa;AAAA,MACpC,EAAE,QAAQ,OAAO,MAAM,6BAA6B;AAAA,IACrD;AAAA,EACD;AAAA;AAAA,EAEA,iBAAiB;AAAA,IAChB,OAAO;AAAA,IACP,QAAQ;AAAA,MACP,EAAE,QAAQ,QAAQ,MAAM,aAAa;AAAA,MACrC,EAAE,QAAQ,QAAQ,MAAM,mCAAmC;AAAA,IAC5D;AAAA,EACD;AAAA,EACA,gBAAgB,EAAE,OAAO,WAAW,QAAQ,CAAC,EAAE,QAAQ,QAAQ,MAAM,mBAAmB,CAAC,EAAE;AAC5F;AAEO,IAAM,qBAAqB,OAAO,KAAK,cAAc;AAGrD,SAAS,mBAAmB,QAA2C;AAC7E,MAAI,WAAW,OAAQ,QAAO;AAC9B,SAAO,mBAAmB,OAAO,CAAC,MAAM,EAAE,SAAS,OAAO,KAAM,WAAW,WAAW,EAAE,SAAS,QAAQ,CAAE;AAC5G;AAGO,IAAM,uBAAuB;AAC7B,IAAM,0BAA0B;AAChC,IAAM,0BAA0B;","names":[]}

package/payloads/v1/api-key.mjs

@@ -0,0 +1,235 @@
+// payloads/v1/api-key.ts
+var APIApiKeyScope = {
+  APPS_READ: "apps:read",
+  APPS_WRITE: "apps:write",
+  APPS_DELETE: "apps:delete",
+  APPS_ENVS: "apps:envs",
+  APPS_FILES: "apps:files",
+  DATABASES_READ: "databases:read",
+  DATABASES_WRITE: "databases:write",
+  DATABASES_DELETE: "databases:delete",
+  DATABASES_CREDENTIALS: "databases:credentials",
+  SNAPSHOTS_READ: "snapshots:read",
+  SNAPSHOTS_WRITE: "snapshots:write",
+  ACCOUNT_READ: "account:read",
+  ACCOUNT_WRITE: "account:write",
+  WORKSPACES_READ: "workspaces:read",
+  WORKSPACES_WRITE: "workspaces:write",
+  WORKSPACES_DELETE: "workspaces:delete",
+  WORKSPACES_INVITES: "workspaces:invites",
+  BILLING_READ: "billing:read",
+  BILLING_WRITE: "billing:write",
+  REDEEM_WRITE: "redeem:write"
+};
+var APIApiKeyPreset = { Read: "read", Write: "write", Full: "full" };
+var API_KEY_SCOPES = {
+  "apps:read": {
+    group: "apps",
+    routes: [
+      { method: "GET", path: "/v1/apps/runtimes" },
+      { method: "GET", path: "/v1/apps/status" },
+      { method: "GET", path: "/v1/apps/:id" },
+      { method: "GET", path: "/v1/apps/:id/status" },
+      { method: "GET", path: "/v1/apps/:id/realtime" },
+      { method: "GET", path: "/v1/apps/:id/metrics" },
+      { method: "GET", path: "/v1/apps/:id/logs" },
+      { method: "GET", path: "/v1/apps/:id/download" },
+      { method: "GET", path: "/v1/apps/:id/deploys" },
+      { method: "GET", path: "/v1/apps/:id/deploys/webhook" },
+      { method: "GET", path: "/v1/apps/:id/network/custom" },
+      { method: "GET", path: "/v1/apps/:id/network/dns" }
+    ]
+  },
+  "apps:write": {
+    group: "apps",
+    routes: [
+      { method: "POST", path: "/v1/apps" },
+      { method: "POST", path: "/v1/apps/:id/start" },
+      { method: "POST", path: "/v1/apps/:id/stop" },
+      { method: "POST", path: "/v1/apps/:id/restart" },
+      { method: "PATCH", path: "/v1/apps/:id/config" },
+      { method: "POST", path: "/v1/apps/:id/deploys/webhook" },
+      { method: "DELETE", path: "/v1/apps/:id/deploys/webhook" },
+      { method: "POST", path: "/v1/apps/:id/network/custom" },
+      { method: "DELETE", path: "/v1/apps/:id/network/custom" },
+      { method: "POST", path: "/v1/apps/:id/network/purge-cache" },
+      { method: "PATCH", path: "/v1/apps/:id/network/subdomain" },
+      { method: "POST", path: "/v1/apps/:id/network/publish" },
+      { method: "DELETE", path: "/v1/apps/:id/network/publish" }
+    ]
+  },
+  "apps:delete": { group: "apps", routes: [{ method: "DELETE", path: "/v1/apps/:id" }] },
+  "apps:envs": {
+    group: "apps",
+    routes: [
+      { method: "GET", path: "/v1/apps/:id/envs" },
+      { method: "POST", path: "/v1/apps/:id/envs" },
+      { method: "DELETE", path: "/v1/apps/:id/envs/:envId" }
+    ]
+  },
+  "apps:files": {
+    group: "apps",
+    routes: [
+      { method: "GET", path: "/v1/apps/:id/files" },
+      { method: "GET", path: "/v1/apps/:id/files/tree" },
+      { method: "GET", path: "/v1/apps/:id/files/content" },
+      { method: "PUT", path: "/v1/apps/:id/files" },
+      { method: "PATCH", path: "/v1/apps/:id/files" },
+      { method: "DELETE", path: "/v1/apps/:id/files" },
+      { method: "POST", path: "/v1/apps/:id/files/upload" }
+    ]
+  },
+  "databases:read": {
+    group: "databases",
+    routes: [
+      { method: "GET", path: "/v1/databases/status" },
+      { method: "GET", path: "/v1/databases/:id" },
+      { method: "GET", path: "/v1/databases/:id/status" },
+      { method: "GET", path: "/v1/databases/:id/metrics" }
+    ]
+  },
+  "databases:write": {
+    group: "databases",
+    routes: [
+      { method: "POST", path: "/v1/databases" },
+      { method: "PUT", path: "/v1/databases/:id" },
+      { method: "POST", path: "/v1/databases/:id/start" },
+      { method: "POST", path: "/v1/databases/:id/stop" },
+      { method: "POST", path: "/v1/databases/:id/reset" }
+    ]
+  },
+  "databases:delete": { group: "databases", routes: [{ method: "DELETE", path: "/v1/databases/:id" }] },
+  "databases:credentials": {
+    group: "databases",
+    routes: [
+      { method: "GET", path: "/v1/databases/:id/credentials/certificate" },
+      { method: "POST", path: "/v1/databases/:id/credentials/certificate/reset" },
+      { method: "POST", path: "/v1/databases/:id/credentials/reset" }
+    ]
+  },
+  "snapshots:read": {
+    group: "snapshots",
+    routes: [
+      { method: "GET", path: "/v1/users/snapshots" },
+      { method: "GET", path: "/v1/users/:id/snapshots" },
+      { method: "GET", path: "/v1/users/:id/snapshots/:snapshot_id/download" }
+    ]
+  },
+  "snapshots:write": {
+    group: "snapshots",
+    routes: [
+      { method: "POST", path: "/v1/users/:id/snapshots" },
+      { method: "POST", path: "/v1/users/:id/snapshots/:snapshot_id/restore" }
+    ]
+  },
+  "account:read": {
+    group: "account",
+    routes: [
+      { method: "GET", path: "/v1/users/me" },
+      { method: "GET", path: "/v1/users/me/sessions" }
+    ]
+  },
+  "account:write": {
+    group: "account",
+    routes: [
+      { method: "PATCH", path: "/v1/users/me" },
+      { method: "POST", path: "/v1/users/me/folders" },
+      { method: "PATCH", path: "/v1/users/me/folders/:folder_id" },
+      { method: "DELETE", path: "/v1/users/me/folders/:folder_id" },
+      { method: "PUT", path: "/v1/users/me/folders/:folder_id/resources/:resource_type/:resource_id" },
+      { method: "DELETE", path: "/v1/users/me/folders/:folder_id/resources/:resource_type/:resource_id" },
+      { method: "PUT", path: "/v1/users/me/favorites/:resource_type/:resource_id" },
+      { method: "DELETE", path: "/v1/users/me/favorites/:resource_type/:resource_id" }
+    ]
+  },
+  "workspaces:read": {
+    group: "workspaces",
+    routes: [
+      { method: "GET", path: "/v1/workspaces" },
+      { method: "GET", path: "/v1/workspaces/:id" },
+      { method: "GET", path: "/v1/workspaces/:id/members" },
+      { method: "GET", path: "/v1/workspaces/:id/roles" },
+      { method: "GET", path: "/v1/workspaces/:id/action-requests" }
+    ]
+  },
+  "workspaces:write": {
+    group: "workspaces",
+    routes: [
+      { method: "POST", path: "/v1/workspaces" },
+      { method: "PUT", path: "/v1/workspaces/:id" },
+      { method: "PUT", path: "/v1/workspaces/:id/members/:user_id" },
+      { method: "DELETE", path: "/v1/workspaces/:id/members/:user_id" },
+      { method: "POST", path: "/v1/workspaces/:id/roles" },
+      { method: "PUT", path: "/v1/workspaces/:id/roles/:role_id" },
+      { method: "DELETE", path: "/v1/workspaces/:id/roles/:role_id" },
+      { method: "POST", path: "/v1/workspaces/:id/apps/:app_id" },
+      { method: "DELETE", path: "/v1/workspaces/:id/apps/:app_id" },
+      { method: "POST", path: "/v1/workspaces/:id/databases/:db_id" },
+      { method: "DELETE", path: "/v1/workspaces/:id/databases/:db_id" },
+      { method: "POST", path: "/v1/workspaces/:id/folders" },
+      { method: "PATCH", path: "/v1/workspaces/:id/folders/:folder_id" },
+      { method: "DELETE", path: "/v1/workspaces/:id/folders/:folder_id" },
+      { method: "PUT", path: "/v1/workspaces/:id/folders/:folder_id/resources/:resource_type/:resource_id" },
+      { method: "DELETE", path: "/v1/workspaces/:id/folders/:folder_id/resources/:resource_type/:resource_id" },
+      { method: "PUT", path: "/v1/workspaces/:id/favorites/:resource_type/:resource_id" },
+      { method: "DELETE", path: "/v1/workspaces/:id/favorites/:resource_type/:resource_id" },
+      { method: "POST", path: "/v1/workspaces/:id/action-requests" }
+    ]
+  },
+  /**
+   * Intentionally left out (dashboard session only): creating invites (a leaked key could grant
+   * access that outlives its revocation), transferring ownership, approving/rejecting action
+   * requests (approval is a human decision) and exporting activities.
+   */
+  /** Delete a workspace (soft delete). Only in the `full` preset, like `apps:delete`. */
+  "workspaces:delete": {
+    group: "workspaces",
+    routes: [{ method: "DELETE", path: "/v1/workspaces/:id" }]
+  },
+  /** List and revoke workspace invites; view, accept and decline your own invite by token. Only in the `full` preset. */
+  "workspaces:invites": {
+    group: "workspaces",
+    routes: [
+      { method: "GET", path: "/v1/workspaces/:id/invites" },
+      { method: "DELETE", path: "/v1/workspaces/:id/invites/:invite_id" },
+      { method: "GET", path: "/v1/workspaces/invites/:token" },
+      { method: "POST", path: "/v1/workspaces/invites/:token/accept" },
+      { method: "POST", path: "/v1/workspaces/invites/:token/decline" }
+    ]
+  },
+  "billing:read": {
+    group: "billing",
+    routes: [
+      { method: "GET", path: "/v1/orders" },
+      { method: "GET", path: "/v1/orders/:orderId/status" }
+    ]
+  },
+  /** Creates a plan order and generates the PIX charge; the payment itself is made by a person in their banking app. */
+  "billing:write": {
+    group: "billing",
+    routes: [
+      { method: "POST", path: "/v1/orders" },
+      { method: "POST", path: "/v1/orders/:orderId/initiate/pix" }
+    ]
+  },
+  "redeem:write": { group: "billing", routes: [{ method: "POST", path: "/v1/redeem/:code" }] }
+};
+var API_KEY_SCOPE_LIST = Object.keys(API_KEY_SCOPES);
+function apiKeyPresetScopes(preset) {
+  if (preset === "full") return API_KEY_SCOPE_LIST;
+  return API_KEY_SCOPE_LIST.filter((s) => s.endsWith(":read") || preset === "write" && s.endsWith(":write"));
+}
+var API_KEY_MAX_PER_USER = 10;
+var API_KEY_MAX_ALLOWED_IPS = 20;
+var API_KEY_NAME_MAX_LENGTH = 40;
+export {
+  APIApiKeyPreset,
+  APIApiKeyScope,
+  API_KEY_MAX_ALLOWED_IPS,
+  API_KEY_MAX_PER_USER,
+  API_KEY_NAME_MAX_LENGTH,
+  API_KEY_SCOPES,
+  API_KEY_SCOPE_LIST,
+  apiKeyPresetScopes
+};
+//# sourceMappingURL=api-key.mjs.map