agentrouter.identity.v1.MeService
MeService is the caller-bound surface -- every RPC operates on the
authenticated identity, with no path-level identity selector. The
CLI's ia whoami, ia keys ..., ia login consume this.
Login
Login initiates an OIDC authorization-code + PKCE flow. Returns an
Logout
Logout invalidates the caller's current OIDC session. Subsequent
GetMe
GetMe returns the full identity record for the authenticated caller.
ListMyKeys
ListMyKeys lists all API keys belonging to the caller. Returns
IssueMyKey
IssueMyKey issues a new long-lived API key for the caller. The
RevokeMyKey
RevokeMyKey permanently and irrevocably revokes an API key.
UpdateMyKey
UpdateMyKey replaces the scope set of a caller-owned management key
ListMyProjects
ListMyProjects lists the projects the calling identity can access within
CreateUser
CreateUser provisions a user identity (an authn.user row). Admin-scoped