feat: refine api key permissions and admin routes

apps/web/src/api.ts

@@ -65,15 +65,15 @@ export async function loginLocalAccount(input: { account: string; password: stri
 }
 
 export async function listPlatforms(token: string): Promise<ListResponse<IntegrationPlatform>> {
-  return request<ListResponse<IntegrationPlatform>>('/api/v1/platforms', { token });
+  return request<ListResponse<IntegrationPlatform>>('/api/admin/platforms', { token });
 }
 
 export async function listModels(token: string): Promise<ListResponse<PlatformModel>> {
-  return request<ListResponse<PlatformModel>>('/api/v1/models', { token });
+  return request<ListResponse<PlatformModel>>('/api/admin/models', { token });
 }
 
 export async function listPlayableModels(token: string): Promise<ListResponse<PlatformModel>> {
-  return request<ListResponse<PlatformModel>>('/api/v1/playground/models', { token });
+  return request<ListResponse<PlatformModel>>('/api/v1/models', { token });
 }
 
 export async function listPublicCatalogProviders(): Promise<ListResponse<CatalogProvider>> {
@@ -81,14 +81,14 @@ export async function listPublicCatalogProviders(): Promise<ListResponse<Catalog
 }
 
 export async function listCatalogProviders(token: string): Promise<ListResponse<CatalogProvider>> {
-  return request<ListResponse<CatalogProvider>>('/api/v1/catalog/providers', { token });
+  return request<ListResponse<CatalogProvider>>('/api/admin/catalog/providers', { token });
 }
 
 export async function createCatalogProvider(
   token: string,
   input: CatalogProviderUpsertRequest,
 ): Promise<CatalogProvider> {
-  return request<CatalogProvider>('/api/v1/catalog/providers', {
+  return request<CatalogProvider>('/api/admin/catalog/providers', {
     body: input,
     method: 'POST',
     token,
@@ -100,7 +100,7 @@ export async function updateCatalogProvider(
   providerId: string,
   input: CatalogProviderUpsertRequest,
 ): Promise<CatalogProvider> {
-  return request<CatalogProvider>(`/api/v1/catalog/providers/${providerId}`, {
+  return request<CatalogProvider>(`/api/admin/catalog/providers/${providerId}`, {
     body: input,
     method: 'PATCH',
     token,
@@ -108,7 +108,7 @@ export async function updateCatalogProvider(
 }
 
 export async function deleteCatalogProvider(token: string, providerId: string): Promise<void> {
-  await request<void>(`/api/v1/catalog/providers/${providerId}`, {
+  await request<void>(`/api/admin/catalog/providers/${providerId}`, {
     method: 'DELETE',
     token,
   });
@@ -119,11 +119,11 @@ export async function listPublicBaseModels(): Promise<ListResponse<BaseModelCata
 }
 
 export async function listBaseModels(token: string): Promise<ListResponse<BaseModelCatalogItem>> {
-  return request<ListResponse<BaseModelCatalogItem>>('/api/v1/catalog/base-models', { token });
+  return request<ListResponse<BaseModelCatalogItem>>('/api/admin/catalog/base-models', { token });
 }
 
 export async function createBaseModel(token: string, input: BaseModelUpsertRequest): Promise<BaseModelCatalogItem> {
-  return request<BaseModelCatalogItem>('/api/v1/catalog/base-models', {
+  return request<BaseModelCatalogItem>('/api/admin/catalog/base-models', {
     body: input,
     method: 'POST',
     token,
@@ -135,7 +135,7 @@ export async function updateBaseModel(
   baseModelId: string,
   input: BaseModelUpsertRequest,
 ): Promise<BaseModelCatalogItem> {
-  return request<BaseModelCatalogItem>(`/api/v1/catalog/base-models/${baseModelId}`, {
+  return request<BaseModelCatalogItem>(`/api/admin/catalog/base-models/${baseModelId}`, {
     body: input,
     method: 'PATCH',
     token,
@@ -143,39 +143,39 @@ export async function updateBaseModel(
 }
 
 export async function resetBaseModel(token: string, baseModelId: string): Promise<BaseModelCatalogItem> {
-  return request<BaseModelCatalogItem>(`/api/v1/catalog/base-models/${baseModelId}/reset`, {
+  return request<BaseModelCatalogItem>(`/api/admin/catalog/base-models/${baseModelId}/reset`, {
     method: 'POST',
     token,
   });
 }
 
 export async function resetAllBaseModels(token: string): Promise<ListResponse<BaseModelCatalogItem>> {
-  return request<ListResponse<BaseModelCatalogItem>>('/api/v1/catalog/base-models/reset-all', {
+  return request<ListResponse<BaseModelCatalogItem>>('/api/admin/catalog/base-models/reset-all', {
     method: 'POST',
     token,
   });
 }
 
 export async function deleteBaseModel(token: string, baseModelId: string): Promise<void> {
-  await request<void>(`/api/v1/catalog/base-models/${baseModelId}`, {
+  await request<void>(`/api/admin/catalog/base-models/${baseModelId}`, {
     method: 'DELETE',
     token,
   });
 }
 
 export async function listPricingRules(token: string): Promise<ListResponse<PricingRule>> {
-  return request<ListResponse<PricingRule>>('/api/v1/pricing/rules', { token });
+  return request<ListResponse<PricingRule>>('/api/admin/pricing/rules', { token });
 }
 
 export async function listPricingRuleSets(token: string): Promise<ListResponse<PricingRuleSet>> {
-  return request<ListResponse<PricingRuleSet>>('/api/v1/pricing/rule-sets', { token });
+  return request<ListResponse<PricingRuleSet>>('/api/admin/pricing/rule-sets', { token });
 }
 
 export async function createPricingRuleSet(
   token: string,
   input: PricingRuleSetUpsertRequest,
 ): Promise<PricingRuleSet> {
-  return request<PricingRuleSet>('/api/v1/pricing/rule-sets', {
+  return request<PricingRuleSet>('/api/admin/pricing/rule-sets', {
     body: input,
     method: 'POST',
     token,
@@ -187,7 +187,7 @@ export async function updatePricingRuleSet(
   ruleSetId: string,
   input: PricingRuleSetUpsertRequest,
 ): Promise<PricingRuleSet> {
-  return request<PricingRuleSet>(`/api/v1/pricing/rule-sets/${ruleSetId}`, {
+  return request<PricingRuleSet>(`/api/admin/pricing/rule-sets/${ruleSetId}`, {
     body: input,
     method: 'PATCH',
     token,
@@ -195,21 +195,21 @@ export async function updatePricingRuleSet(
 }
 
 export async function deletePricingRuleSet(token: string, ruleSetId: string): Promise<void> {
-  await request<void>(`/api/v1/pricing/rule-sets/${ruleSetId}`, {
+  await request<void>(`/api/admin/pricing/rule-sets/${ruleSetId}`, {
     method: 'DELETE',
     token,
   });
 }
 
 export async function listRuntimePolicySets(token: string): Promise<ListResponse<RuntimePolicySet>> {
-  return request<ListResponse<RuntimePolicySet>>('/api/v1/runtime/policy-sets', { token });
+  return request<ListResponse<RuntimePolicySet>>('/api/admin/runtime/policy-sets', { token });
 }
 
 export async function createRuntimePolicySet(
   token: string,
   input: RuntimePolicySetUpsertRequest,
 ): Promise<RuntimePolicySet> {
-  return request<RuntimePolicySet>('/api/v1/runtime/policy-sets', {
+  return request<RuntimePolicySet>('/api/admin/runtime/policy-sets', {
     body: input,
     method: 'POST',
     token,
@@ -221,7 +221,7 @@ export async function updateRuntimePolicySet(
   policySetId: string,
   input: RuntimePolicySetUpsertRequest,
 ): Promise<RuntimePolicySet> {
-  return request<RuntimePolicySet>(`/api/v1/runtime/policy-sets/${policySetId}`, {
+  return request<RuntimePolicySet>(`/api/admin/runtime/policy-sets/${policySetId}`, {
     body: input,
     method: 'PATCH',
     token,
@@ -229,18 +229,18 @@ export async function updateRuntimePolicySet(
 }
 
 export async function deleteRuntimePolicySet(token: string, policySetId: string): Promise<void> {
-  await request<void>(`/api/v1/runtime/policy-sets/${policySetId}`, {
+  await request<void>(`/api/admin/runtime/policy-sets/${policySetId}`, {
     method: 'DELETE',
     token,
   });
 }
 
 export async function listTenants(token: string): Promise<ListResponse<GatewayTenant>> {
-  return request<ListResponse<GatewayTenant>>('/api/v1/tenants', { token });
+  return request<ListResponse<GatewayTenant>>('/api/admin/tenants', { token });
 }
 
 export async function createTenant(token: string, input: GatewayTenantUpsertRequest): Promise<GatewayTenant> {
-  return request<GatewayTenant>('/api/v1/tenants', {
+  return request<GatewayTenant>('/api/admin/tenants', {
     body: input,
     method: 'POST',
     token,
@@ -248,7 +248,7 @@ export async function createTenant(token: string, input: GatewayTenantUpsertRequ
 }
 
 export async function updateTenant(token: string, tenantId: string, input: GatewayTenantUpsertRequest): Promise<GatewayTenant> {
-  return request<GatewayTenant>(`/api/v1/tenants/${tenantId}`, {
+  return request<GatewayTenant>(`/api/admin/tenants/${tenantId}`, {
     body: input,
     method: 'PATCH',
     token,
@@ -256,18 +256,18 @@ export async function updateTenant(token: string, tenantId: string, input: Gatew
 }
 
 export async function deleteTenant(token: string, tenantId: string): Promise<void> {
-  await request<void>(`/api/v1/tenants/${tenantId}`, {
+  await request<void>(`/api/admin/tenants/${tenantId}`, {
     method: 'DELETE',
     token,
   });
 }
 
 export async function listUsers(token: string): Promise<ListResponse<GatewayUser>> {
-  return request<ListResponse<GatewayUser>>('/api/v1/users', { token });
+  return request<ListResponse<GatewayUser>>('/api/admin/users', { token });
 }
 
 export async function createGatewayUser(token: string, input: GatewayUserUpsertRequest): Promise<GatewayUser> {
-  return request<GatewayUser>('/api/v1/users', {
+  return request<GatewayUser>('/api/admin/users', {
     body: input,
     method: 'POST',
     token,
@@ -275,7 +275,7 @@ export async function createGatewayUser(token: string, input: GatewayUserUpsertR
 }
 
 export async function updateGatewayUser(token: string, userId: string, input: GatewayUserUpsertRequest): Promise<GatewayUser> {
-  return request<GatewayUser>(`/api/v1/users/${userId}`, {
+  return request<GatewayUser>(`/api/admin/users/${userId}`, {
     body: input,
     method: 'PATCH',
     token,
@@ -283,18 +283,18 @@ export async function updateGatewayUser(token: string, userId: string, input: Ga
 }
 
 export async function deleteGatewayUser(token: string, userId: string): Promise<void> {
-  await request<void>(`/api/v1/users/${userId}`, {
+  await request<void>(`/api/admin/users/${userId}`, {
     method: 'DELETE',
     token,
   });
 }
 
 export async function listUserGroups(token: string): Promise<ListResponse<UserGroup>> {
-  return request<ListResponse<UserGroup>>('/api/v1/user-groups', { token });
+  return request<ListResponse<UserGroup>>('/api/admin/user-groups', { token });
 }
 
 export async function createUserGroup(token: string, input: UserGroupUpsertRequest): Promise<UserGroup> {
-  return request<UserGroup>('/api/v1/user-groups', {
+  return request<UserGroup>('/api/admin/user-groups', {
     body: input,
     method: 'POST',
     token,
@@ -302,7 +302,7 @@ export async function createUserGroup(token: string, input: UserGroupUpsertReque
 }
 
 export async function updateUserGroup(token: string, groupId: string, input: UserGroupUpsertRequest): Promise<UserGroup> {
-  return request<UserGroup>(`/api/v1/user-groups/${groupId}`, {
+  return request<UserGroup>(`/api/admin/user-groups/${groupId}`, {
     body: input,
     method: 'PATCH',
     token,
@@ -310,18 +310,22 @@ export async function updateUserGroup(token: string, groupId: string, input: Use
 }
 
 export async function deleteUserGroup(token: string, groupId: string): Promise<void> {
-  await request<void>(`/api/v1/user-groups/${groupId}`, {
+  await request<void>(`/api/admin/user-groups/${groupId}`, {
     method: 'DELETE',
     token,
   });
 }
 
 export async function listAccessRules(token: string): Promise<ListResponse<GatewayAccessRule>> {
-  return request<ListResponse<GatewayAccessRule>>('/api/v1/access-rules', { token });
+  return request<ListResponse<GatewayAccessRule>>('/api/admin/access-rules', { token });
+}
+
+export async function listApiKeyAccessRules(token: string): Promise<ListResponse<GatewayAccessRule>> {
+  return request<ListResponse<GatewayAccessRule>>('/api/v1/api-keys/access-rules', { token });
 }
 
 export async function createAccessRule(token: string, input: GatewayAccessRuleUpsertRequest): Promise<GatewayAccessRule> {
-  return request<GatewayAccessRule>('/api/v1/access-rules', {
+  return request<GatewayAccessRule>('/api/admin/access-rules', {
     body: input,
     method: 'POST',
     token,
@@ -329,7 +333,15 @@ export async function createAccessRule(token: string, input: GatewayAccessRuleUp
 }
 
 export async function batchAccessRules(token: string, input: GatewayAccessRuleBatchRequest): Promise<ListResponse<GatewayAccessRule>> {
-  return request<ListResponse<GatewayAccessRule>>('/api/v1/access-rules/batch', {
+  return request<ListResponse<GatewayAccessRule>>('/api/admin/access-rules/batch', {
+    body: input,
+    method: 'POST',
+    token,
+  });
+}
+
+export async function batchApiKeyAccessRules(token: string, input: GatewayAccessRuleBatchRequest): Promise<ListResponse<GatewayAccessRule>> {
+  return request<ListResponse<GatewayAccessRule>>('/api/v1/api-keys/access-rules/batch', {
     body: input,
     method: 'POST',
     token,
@@ -341,7 +353,7 @@ export async function updateAccessRule(
   ruleId: string,
   input: GatewayAccessRuleUpsertRequest,
 ): Promise<GatewayAccessRule> {
-  return request<GatewayAccessRule>(`/api/v1/access-rules/${ruleId}`, {
+  return request<GatewayAccessRule>(`/api/admin/access-rules/${ruleId}`, {
     body: input,
     method: 'PATCH',
     token,
@@ -349,7 +361,7 @@ export async function updateAccessRule(
 }
 
 export async function deleteAccessRule(token: string, ruleId: string): Promise<void> {
-  await request<void>(`/api/v1/access-rules/${ruleId}`, {
+  await request<void>(`/api/admin/access-rules/${ruleId}`, {
     method: 'DELETE',
     token,
   });
@@ -365,7 +377,7 @@ export async function listPlayableApiKeys(token: string): Promise<ListResponse<P
 
 export async function createApiKey(
   token: string,
-  input: { name: string; scopes?: string[] },
+  input: { name: string; scopes?: string[]; expiresAt?: string },
 ): Promise<CreatedGatewayApiKey> {
   return request<CreatedGatewayApiKey>('/api/v1/api-keys', {
     body: input,
@@ -374,8 +386,15 @@ export async function createApiKey(
   });
 }
 
+export async function deleteApiKey(token: string, apiKeyId: string): Promise<void> {
+  await request<void>(`/api/v1/api-keys/${apiKeyId}`, {
+    method: 'DELETE',
+    token,
+  });
+}
+
 export async function createPlatform(token: string, input: PlatformCreateInput): Promise<IntegrationPlatform> {
-  return request<IntegrationPlatform>('/api/v1/platforms', {
+  return request<IntegrationPlatform>('/api/admin/platforms', {
     body: input,
     method: 'POST',
     token,
@@ -383,7 +402,7 @@ export async function createPlatform(token: string, input: PlatformCreateInput):
 }
 
 export async function updatePlatform(token: string, platformId: string, input: PlatformCreateInput): Promise<IntegrationPlatform> {
-  return request<IntegrationPlatform>(`/api/v1/platforms/${platformId}`, {
+  return request<IntegrationPlatform>(`/api/admin/platforms/${platformId}`, {
     body: input,
     method: 'PATCH',
     token,
@@ -391,7 +410,7 @@ export async function updatePlatform(token: string, platformId: string, input: P
 }
 
 export async function deletePlatform(token: string, platformId: string): Promise<void> {
-  await request<void>(`/api/v1/platforms/${platformId}`, {
+  await request<void>(`/api/admin/platforms/${platformId}`, {
     method: 'DELETE',
     token,
   });
@@ -402,7 +421,7 @@ export async function createPlatformModel(
   platformId: string,
   input: PlatformModelBindingInput,
 ): Promise<PlatformModel> {
-  return request<PlatformModel>(`/api/v1/platforms/${platformId}/models`, {
+  return request<PlatformModel>(`/api/admin/platforms/${platformId}/models`, {
     body: input,
     method: 'POST',
     token,
@@ -414,7 +433,7 @@ export async function replacePlatformModels(
   platformId: string,
   models: PlatformModelBindingInput[],
 ): Promise<ListResponse<PlatformModel>> {
-  return request<ListResponse<PlatformModel>>(`/api/v1/platforms/${platformId}/models`, {
+  return request<ListResponse<PlatformModel>>(`/api/admin/platforms/${platformId}/models`, {
     body: { models },
     method: 'PUT',
     token,
@@ -422,7 +441,7 @@ export async function replacePlatformModels(
 }
 
 export async function deletePlatformModel(token: string, modelId: string): Promise<void> {
-  await request<void>(`/api/v1/platform-models/${modelId}`, {
+  await request<void>(`/api/admin/platform-models/${modelId}`, {
     method: 'DELETE',
     token,
   });
@@ -528,7 +547,7 @@ export async function getTask(token: string, taskId: string): Promise<GatewayTas
 }
 
 export async function listRateLimitWindows(token: string): Promise<ListResponse<RateLimitWindow>> {
-  return request<ListResponse<RateLimitWindow>>('/api/v1/runtime/rate-limit-windows', { token });
+  return request<ListResponse<RateLimitWindow>>('/api/admin/runtime/rate-limit-windows', { token });
 }
 
 async function request<T>(