tapimo 0.4.4 → 0.5.0

package/dist/apps/management/routes/api-keys.d.ts

@@ -128,21 +128,26 @@ export declare namespace schema {
     }
 }
 /**
- * Mounts project-attributed API key mint, list, and revoke routes plus the org-wide list. Access follows the caller's organization ownership.
+ * Mounts project-attributed API key mint, list, and revoke routes plus the org-wide list. Project routes enforce caller organization and project attribution.
  */
 export declare function apiKeys(options?: apiKeys.Options): import("hono/hono-base").HonoBase<App.Environment, {
     "/v1/orgs/:orgId{org_[A-Za-z0-9_-]+}/projects/:projectId{prj_[A-Za-z0-9_-]+}/api-keys": {
         $post: {
             output: {
-                error: {
-                    code: "upstream_error";
-                    details?: readonly Response.error.Detail[] | undefined;
-                    message: string;
-                };
-                requestId: string;
+                createdAt: string;
+                createdBy?: string | undefined;
+                environment: "production" | "sandbox";
+                expiresAt?: string | undefined;
+                id: string;
+                name?: string | undefined;
+                orgId: string;
+                projectId?: string | undefined;
+                scopes: string[];
+                tokenLast4: string;
+                token: string;
             };
             outputFormat: "json";
-            status: 502;
+            status: 200;
             input: {
                 param: {
                     orgId: string;
@@ -181,14 +186,14 @@ export declare function apiKeys(options?: apiKeys.Options): import("hono/hono-ba
         } | {
             output: {
                 error: {
-                    code: "api_key_invalid" | "api_key_missing";
+                    code: "param_invalid";
                     details?: readonly Response.error.Detail[] | undefined;
                     message: string;
                 };
                 requestId: string;
             };
             outputFormat: "json";
-            status: 401;
+            status: 400;
             input: {
                 param: {
                     orgId: string;
@@ -204,14 +209,14 @@ export declare function apiKeys(options?: apiKeys.Options): import("hono/hono-ba
         } | {
             output: {
                 error: {
-                    code: "forbidden";
+                    code: "body_invalid";
                     details?: readonly Response.error.Detail[] | undefined;
                     message: string;
                 };
                 requestId: string;
             };
             outputFormat: "json";
-            status: 403;
+            status: 400;
             input: {
                 param: {
                     orgId: string;
@@ -227,14 +232,14 @@ export declare function apiKeys(options?: apiKeys.Options): import("hono/hono-ba
         } | {
             output: {
                 error: {
-                    code: "organization_not_found" | "project_not_found";
+                    code: "api_key_invalid" | "api_key_missing";
                     details?: readonly Response.error.Detail[] | undefined;
                     message: string;
                 };
                 requestId: string;
             };
             outputFormat: "json";
-            status: 404;
+            status: 401;
             input: {
                 param: {
                     orgId: string;
@@ -250,14 +255,14 @@ export declare function apiKeys(options?: apiKeys.Options): import("hono/hono-ba
         } | {
             output: {
                 error: {
-                    code: "param_invalid";
+                    code: "forbidden";
                     details?: readonly Response.error.Detail[] | undefined;
                     message: string;
                 };
                 requestId: string;
             };
             outputFormat: "json";
-            status: 400;
+            status: 403;
             input: {
                 param: {
                     orgId: string;
@@ -273,14 +278,14 @@ export declare function apiKeys(options?: apiKeys.Options): import("hono/hono-ba
         } | {
             output: {
                 error: {
-                    code: "body_invalid";
+                    code: "scope_not_issuable";
                     details?: readonly Response.error.Detail[] | undefined;
                     message: string;
                 };
                 requestId: string;
             };
             outputFormat: "json";
-            status: 400;
+            status: 403;
             input: {
                 param: {
                     orgId: string;
@@ -296,7 +301,7 @@ export declare function apiKeys(options?: apiKeys.Options): import("hono/hono-ba
         } | {
             output: {
                 error: {
-                    code: "api_keys_not_enabled";
+                    code: "organization_not_found" | "project_not_found";
                     details?: readonly Response.error.Detail[] | undefined;
                     message: string;
                 };
@@ -319,14 +324,14 @@ export declare function apiKeys(options?: apiKeys.Options): import("hono/hono-ba
         } | {
             output: {
                 error: {
-                    code: "scope_not_issuable";
+                    code: "api_keys_not_enabled";
                     details?: readonly Response.error.Detail[] | undefined;
                     message: string;
                 };
                 requestId: string;
             };
             outputFormat: "json";
-            status: 403;
+            status: 404;
             input: {
                 param: {
                     orgId: string;
@@ -341,20 +346,15 @@ export declare function apiKeys(options?: apiKeys.Options): import("hono/hono-ba
             };
         } | {
             output: {
-                createdAt: string;
-                createdBy?: string | undefined;
-                environment: "production" | "sandbox";
-                expiresAt?: string | undefined;
-                id: string;
-                name?: string | undefined;
-                orgId: string;
-                projectId?: string | undefined;
-                scopes: string[];
-                tokenLast4: string;
-                token: string;
+                error: {
+                    code: "upstream_error";
+                    details?: readonly Response.error.Detail[] | undefined;
+                    message: string;
+                };
+                requestId: string;
             };
             outputFormat: "json";
-            status: 200;
+            status: 502;
             input: {
                 param: {
                     orgId: string;
@@ -373,15 +373,21 @@ export declare function apiKeys(options?: apiKeys.Options): import("hono/hono-ba
     "/v1/orgs/:orgId{org_[A-Za-z0-9_-]+}/projects/:projectId{prj_[A-Za-z0-9_-]+}/api-keys": {
         $get: {
             output: {
-                error: {
-                    code: "upstream_error";
-                    details?: readonly Response.error.Detail[] | undefined;
-                    message: string;
-                };
-                requestId: string;
+                data: {
+                    createdAt: string;
+                    createdBy?: string | undefined;
+                    environment: "production" | "sandbox";
+                    expiresAt?: string | undefined;
+                    id: string;
+                    name?: string | undefined;
+                    orgId: string;
+                    projectId?: string | undefined;
+                    scopes: string[];
+                    tokenLast4: string;
+                }[];
             };
             outputFormat: "json";
-            status: 502;
+            status: 200;
             input: {
                 param: {
                     orgId: string;
@@ -416,14 +422,14 @@ export declare function apiKeys(options?: apiKeys.Options): import("hono/hono-ba
         } | {
             output: {
                 error: {
-                    code: "api_key_invalid" | "api_key_missing";
+                    code: "query_invalid";
                     details?: readonly Response.error.Detail[] | undefined;
                     message: string;
                 };
                 requestId: string;
             };
             outputFormat: "json";
-            status: 401;
+            status: 400;
             input: {
                 param: {
                     orgId: string;
@@ -437,14 +443,14 @@ export declare function apiKeys(options?: apiKeys.Options): import("hono/hono-ba
         } | {
             output: {
                 error: {
-                    code: "api_key_forbidden";
+                    code: "param_invalid";
                     details?: readonly Response.error.Detail[] | undefined;
                     message: string;
                 };
                 requestId: string;
             };
             outputFormat: "json";
-            status: 403;
+            status: 400;
             input: {
                 param: {
                     orgId: string;
@@ -458,14 +464,14 @@ export declare function apiKeys(options?: apiKeys.Options): import("hono/hono-ba
         } | {
             output: {
                 error: {
-                    code: "payment_required" | "rate_limit_exceeded";
+                    code: "api_key_invalid" | "api_key_missing";
                     details?: readonly Response.error.Detail[] | undefined;
                     message: string;
                 };
                 requestId: string;
             };
             outputFormat: "json";
-            status: 429;
+            status: 401;
             input: {
                 param: {
                     orgId: string;
@@ -479,14 +485,14 @@ export declare function apiKeys(options?: apiKeys.Options): import("hono/hono-ba
         } | {
             output: {
                 error: {
-                    code: "query_invalid";
+                    code: "api_key_forbidden";
                     details?: readonly Response.error.Detail[] | undefined;
                     message: string;
                 };
                 requestId: string;
             };
             outputFormat: "json";
-            status: 400;
+            status: 403;
             input: {
                 param: {
                     orgId: string;
@@ -521,14 +527,14 @@ export declare function apiKeys(options?: apiKeys.Options): import("hono/hono-ba
         } | {
             output: {
                 error: {
-                    code: "param_invalid";
+                    code: "api_keys_not_enabled";
                     details?: readonly Response.error.Detail[] | undefined;
                     message: string;
                 };
                 requestId: string;
             };
             outputFormat: "json";
-            status: 400;
+            status: 404;
             input: {
                 param: {
                     orgId: string;
@@ -542,14 +548,14 @@ export declare function apiKeys(options?: apiKeys.Options): import("hono/hono-ba
         } | {
             output: {
                 error: {
-                    code: "api_keys_not_enabled";
+                    code: "payment_required" | "rate_limit_exceeded";
                     details?: readonly Response.error.Detail[] | undefined;
                     message: string;
                 };
                 requestId: string;
             };
             outputFormat: "json";
-            status: 404;
+            status: 429;
             input: {
                 param: {
                     orgId: string;
@@ -562,21 +568,15 @@ export declare function apiKeys(options?: apiKeys.Options): import("hono/hono-ba
             };
         } | {
             output: {
-                data: {
-                    createdAt: string;
-                    createdBy?: string | undefined;
-                    environment: "production" | "sandbox";
-                    expiresAt?: string | undefined;
-                    id: string;
-                    name?: string | undefined;
-                    orgId: string;
-                    projectId?: string | undefined;
-                    scopes: string[];
-                    tokenLast4: string;
-                }[];
+                error: {
+                    code: "upstream_error";
+                    details?: readonly Response.error.Detail[] | undefined;
+                    message: string;
+                };
+                requestId: string;
             };
             outputFormat: "json";
-            status: 200;
+            status: 502;
             input: {
                 param: {
                     orgId: string;
@@ -593,15 +593,21 @@ export declare function apiKeys(options?: apiKeys.Options): import("hono/hono-ba
     "/v1/orgs/:orgId{org_[A-Za-z0-9_-]+}/api-keys": {
         $get: {
             output: {
-                error: {
-                    code: "upstream_error";
-                    details?: readonly Response.error.Detail[] | undefined;
-                    message: string;
-                };
-                requestId: string;
+                data: {
+                    createdAt: string;
+                    createdBy?: string | undefined;
+                    environment: "production" | "sandbox";
+                    expiresAt?: string | undefined;
+                    id: string;
+                    name?: string | undefined;
+                    orgId: string;
+                    projectId?: string | undefined;
+                    scopes: string[];
+                    tokenLast4: string;
+                }[];
             };
             outputFormat: "json";
-            status: 502;
+            status: 200;
             input: {
                 param: {
                     orgId: string;
@@ -634,14 +640,14 @@ export declare function apiKeys(options?: apiKeys.Options): import("hono/hono-ba
         } | {
             output: {
                 error: {
-                    code: "api_key_invalid" | "api_key_missing";
+                    code: "query_invalid";
                     details?: readonly Response.error.Detail[] | undefined;
                     message: string;
                 };
                 requestId: string;
             };
             outputFormat: "json";
-            status: 401;
+            status: 400;
             input: {
                 param: {
                     orgId: string;
@@ -654,14 +660,14 @@ export declare function apiKeys(options?: apiKeys.Options): import("hono/hono-ba
         } | {
             output: {
                 error: {
-                    code: "api_key_forbidden";
+                    code: "param_invalid";
                     details?: readonly Response.error.Detail[] | undefined;
                     message: string;
                 };
                 requestId: string;
             };
             outputFormat: "json";
-            status: 403;
+            status: 400;
             input: {
                 param: {
                     orgId: string;
@@ -674,14 +680,14 @@ export declare function apiKeys(options?: apiKeys.Options): import("hono/hono-ba
         } | {
             output: {
                 error: {
-                    code: "payment_required" | "rate_limit_exceeded";
+                    code: "api_key_invalid" | "api_key_missing";
                     details?: readonly Response.error.Detail[] | undefined;
                     message: string;
                 };
                 requestId: string;
             };
             outputFormat: "json";
-            status: 429;
+            status: 401;
             input: {
                 param: {
                     orgId: string;
@@ -694,14 +700,14 @@ export declare function apiKeys(options?: apiKeys.Options): import("hono/hono-ba
         } | {
             output: {
                 error: {
-                    code: "query_invalid";
+                    code: "api_key_forbidden";
                     details?: readonly Response.error.Detail[] | undefined;
                     message: string;
                 };
                 requestId: string;
             };
             outputFormat: "json";
-            status: 400;
+            status: 403;
             input: {
                 param: {
                     orgId: string;
@@ -714,14 +720,14 @@ export declare function apiKeys(options?: apiKeys.Options): import("hono/hono-ba
         } | {
             output: {
                 error: {
-                    code: "param_invalid";
+                    code: "api_keys_not_enabled";
                     details?: readonly Response.error.Detail[] | undefined;
                     message: string;
                 };
                 requestId: string;
             };
             outputFormat: "json";
-            status: 400;
+            status: 404;
             input: {
                 param: {
                     orgId: string;
@@ -734,7 +740,7 @@ export declare function apiKeys(options?: apiKeys.Options): import("hono/hono-ba
         } | {
             output: {
                 error: {
-                    code: "api_keys_not_enabled";
+                    code: "organization_not_found";
                     details?: readonly Response.error.Detail[] | undefined;
                     message: string;
                 };
@@ -754,14 +760,14 @@ export declare function apiKeys(options?: apiKeys.Options): import("hono/hono-ba
         } | {
             output: {
                 error: {
-                    code: "organization_not_found";
+                    code: "payment_required" | "rate_limit_exceeded";
                     details?: readonly Response.error.Detail[] | undefined;
                     message: string;
                 };
                 requestId: string;
             };
             outputFormat: "json";
-            status: 404;
+            status: 429;
             input: {
                 param: {
                     orgId: string;
@@ -773,21 +779,15 @@ export declare function apiKeys(options?: apiKeys.Options): import("hono/hono-ba
             };
         } | {
             output: {
-                data: {
-                    createdAt: string;
-                    createdBy?: string | undefined;
-                    environment: "production" | "sandbox";
-                    expiresAt?: string | undefined;
-                    id: string;
-                    name?: string | undefined;
-                    orgId: string;
-                    projectId?: string | undefined;
-                    scopes: string[];
-                    tokenLast4: string;
-                }[];
+                error: {
+                    code: "upstream_error";
+                    details?: readonly Response.error.Detail[] | undefined;
+                    message: string;
+                };
+                requestId: string;
             };
             outputFormat: "json";
-            status: 200;
+            status: 502;
             input: {
                 param: {
                     orgId: string;
@@ -803,15 +803,10 @@ export declare function apiKeys(options?: apiKeys.Options): import("hono/hono-ba
     "/v1/orgs/:orgId{org_[A-Za-z0-9_-]+}/projects/:projectId{prj_[A-Za-z0-9_-]+}/api-keys/:keyId{key_[A-Za-z0-9_-]+}": {
         $delete: {
             output: {
-                error: {
-                    code: "upstream_error";
-                    details?: readonly Response.error.Detail[] | undefined;
-                    message: string;
-                };
-                requestId: string;
+                id: string;
             };
             outputFormat: "json";
-            status: 502;
+            status: 200;
             input: {
                 param: {
                     keyId: string;
@@ -840,14 +835,14 @@ export declare function apiKeys(options?: apiKeys.Options): import("hono/hono-ba
         } | {
             output: {
                 error: {
-                    code: "api_key_invalid" | "api_key_missing";
+                    code: "param_invalid";
                     details?: readonly Response.error.Detail[] | undefined;
                     message: string;
                 };
                 requestId: string;
             };
             outputFormat: "json";
-            status: 401;
+            status: 400;
             input: {
                 param: {
                     keyId: string;
@@ -858,14 +853,14 @@ export declare function apiKeys(options?: apiKeys.Options): import("hono/hono-ba
         } | {
             output: {
                 error: {
-                    code: "api_key_forbidden";
+                    code: "api_key_invalid" | "api_key_missing";
                     details?: readonly Response.error.Detail[] | undefined;
                     message: string;
                 };
                 requestId: string;
             };
             outputFormat: "json";
-            status: 403;
+            status: 401;
             input: {
                 param: {
                     keyId: string;
@@ -876,14 +871,14 @@ export declare function apiKeys(options?: apiKeys.Options): import("hono/hono-ba
         } | {
             output: {
                 error: {
-                    code: "payment_required" | "rate_limit_exceeded";
+                    code: "api_key_forbidden";
                     details?: readonly Response.error.Detail[] | undefined;
                     message: string;
                 };
                 requestId: string;
             };
             outputFormat: "json";
-            status: 429;
+            status: 403;
             input: {
                 param: {
                     keyId: string;
@@ -912,14 +907,14 @@ export declare function apiKeys(options?: apiKeys.Options): import("hono/hono-ba
         } | {
             output: {
                 error: {
-                    code: "param_invalid";
+                    code: "api_keys_not_enabled";
                     details?: readonly Response.error.Detail[] | undefined;
                     message: string;
                 };
                 requestId: string;
             };
             outputFormat: "json";
-            status: 400;
+            status: 404;
             input: {
                 param: {
                     keyId: string;
@@ -930,7 +925,7 @@ export declare function apiKeys(options?: apiKeys.Options): import("hono/hono-ba
         } | {
             output: {
                 error: {
-                    code: "api_keys_not_enabled";
+                    code: "api_key_not_found";
                     details?: readonly Response.error.Detail[] | undefined;
                     message: string;
                 };
@@ -948,14 +943,14 @@ export declare function apiKeys(options?: apiKeys.Options): import("hono/hono-ba
         } | {
             output: {
                 error: {
-                    code: "api_key_not_found";
+                    code: "payment_required" | "rate_limit_exceeded";
                     details?: readonly Response.error.Detail[] | undefined;
                     message: string;
                 };
                 requestId: string;
             };
             outputFormat: "json";
-            status: 404;
+            status: 429;
             input: {
                 param: {
                     keyId: string;
@@ -965,10 +960,15 @@ export declare function apiKeys(options?: apiKeys.Options): import("hono/hono-ba
             };
         } | {
             output: {
-                id: string;
+                error: {
+                    code: "upstream_error";
+                    details?: readonly Response.error.Detail[] | undefined;
+                    message: string;
+                };
+                requestId: string;
             };
             outputFormat: "json";
-            status: 200;
+            status: 502;
             input: {
                 param: {
                     keyId: string;

package/dist/apps/management/routes/api-keys.js

@@ -38,7 +38,7 @@ export var schema;
         z.meta({ examples: ['prj_1a2b3c4d5e6f7g8h9j0k1m2n'] })),
         scopes: z
             .array(z.string().check(z.minLength(1)))
-            .check(z.describe("Granted scopes. '*' (grant-all) appears only on keys minted by the super admin."), z.meta({ examples: [['data:read']] })),
+            .check(z.describe("Granted scopes. '*' and non-self-serve scopes appear only on keys minted by the super admin."), z.meta({ examples: [['data:read']] })),
         tokenLast4: z
             .string()
             .check(z.describe('Last 4 characters of the plaintext token.'), z.meta({ examples: ['a1b2'] })),
@@ -140,7 +140,7 @@ export var schema;
     })(revokeApiKey = schema.revokeApiKey || (schema.revokeApiKey = {}));
 })(schema || (schema = {}));
 /**
- * Mounts project-attributed API key mint, list, and revoke routes plus the org-wide list. Access follows the caller's organization ownership.
+ * Mounts project-attributed API key mint, list, and revoke routes plus the org-wide list. Project routes enforce caller organization and project attribution.
  */
 export function apiKeys(options = {}) {
     const hidden = !options.enabled;