windmill-client 1.700.2 → 1.701.0

package/dist/core/OpenAPI.mjs

@@ -29,7 +29,7 @@ const OpenAPI = {
 	PASSWORD: void 0,
 	TOKEN: getEnv("WM_TOKEN"),
 	USERNAME: void 0,
-	VERSION: "1.700.2",
+	VERSION: "1.701.0",
 	WITH_CREDENTIALS: true,
 	interceptors: {
 		request: new Interceptors(),

package/dist/index.js

@@ -126,7 +126,7 @@ const OpenAPI = {
 	PASSWORD: void 0,
 	TOKEN: getEnv$1("WM_TOKEN"),
 	USERNAME: void 0,
-	VERSION: "1.700.2",
+	VERSION: "1.701.0",
 	WITH_CREDENTIALS: true,
 	interceptors: {
 		request: new Interceptors(),

package/dist/types.gen.d.ts

@@ -1952,6 +1952,7 @@ export type TruncatedToken = {
     scopes?: Array<(string)>;
     email?: string;
     workspace_id?: string;
+    read_only: boolean;
 };
 export type ExternalJwtToken = {
     jwt_hash: number;
@@ -1969,6 +1970,13 @@ export type NewToken = {
     expiration?: string;
     scopes?: Array<(string)>;
     workspace_id?: string;
+    /**
+     * If true, the token is restricted to read-only HTTP methods
+     * (GET/HEAD/OPTIONS). Mutating endpoints and job-run actions are
+     * rejected with 403, regardless of the scopes attached.
+     *
+     */
+    read_only?: boolean;
 };
 export type NewTokenImpersonate = {
     label?: string;

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "windmill-client",
   "description": "Windmill SDK client for browsers and Node.js",
-  "version": "1.700.2",
+  "version": "1.701.0",
   "author": "Ruben Fiszel",
   "license": "Apache 2.0",
   "sideEffects": false,