feat: authStatus() — read-only hub auth-policy snapshot
Some checks failed
Security / Security check (push) Failing after 2s

Regenerated stubs for the additive AuthStatus HubAdmin RPC and a
typed wrapper: active validator, anonymous flag, token entries with
scope grants, rate limits and env-var set-state. Secret values never
cross the wire.

Signed-off-by: flemming-it <stefan.a.flemming@googlemail.com>
This commit is contained in:
flemming-it 2026-07-15 00:50:21 +02:00
parent 3fe96c9487
commit 9141a91314
4 changed files with 420 additions and 0 deletions

View file

@ -68,6 +68,9 @@ typedef ListSystemAiCuratedModelsResponse =
typedef CuratedModel = pb.CuratedModel;
typedef ClearEventLogResponse = pb.ClearEventLogResponse;
typedef DaemonPathsResponse = pb.DaemonPathsResponse;
typedef AuthStatusResponse = pb.AuthStatusResponse;
typedef AuthTokenInfo = pb.AuthTokenInfo;
typedef JwtValidatorInfo = pb.JwtValidatorInfo;
typedef UninstallModuleResponse = pb.UninstallModuleResponse;
typedef FetchModuleDocsResponse = pb.FetchModuleDocsResponse;
typedef GetInstalledModuleDocsResponse = pb.GetInstalledModuleDocsResponse;
@ -251,6 +254,15 @@ class HubClient {
return r.tokenCount;
}
/// Read-only snapshot of the hub's authentication policy as
/// persisted in the operator config: active validator, whether
/// anonymous calls are accepted, and the static token entries
/// (names, scope grants, env-var name + set-flag never the
/// secret value). Admin-scoped like [reloadAuth].
Future<AuthStatusResponse> authStatus() {
return _admin.authStatus(Empty());
}
/// Server-streaming audit-log subscription. The hub first
/// replays up to [backfill] historical events (oldest-last so
/// the receiver sees them in chronological order), then keeps