akeyless 5.0.25 → 5.0.26

data/lib/akeyless/models/gateway_start_producer.rb

@@ -16,12 +16,18 @@ require 'time'
 module Akeyless
   # gatewayStartProducer is a command that starts producer [Deprecated: Use set-item-state command]
   class GatewayStartProducer
+    # Agentic input rule in name=...,rule=... format (e.g. name=rule1,rule=Sanitize input) Mirrors commands.AgenticRulesParams — kept separate because ResourceDS cannot embed it (different package, different struct layout).
+    attr_accessor :input_rule
+
     # Set output format to JSON
     attr_accessor :json
 
     # Dynamic secret name
     attr_accessor :name
 
+    # Agentic output rule in name=...,rule=... format (e.g. name=rule1,rule=Mask secrets)
+    attr_accessor :output_rule
+
     # Authentication token (see `/auth` and `/configure`)
     attr_accessor :token
 
@@ -31,8 +37,10 @@ module Akeyless
     # Attribute mapping from ruby-style variable name to JSON key.
     def self.attribute_map
       {
+        :'input_rule' => :'input-rule',
         :'json' => :'json',
         :'name' => :'name',
+        :'output_rule' => :'output-rule',
         :'token' => :'token',
         :'uid_token' => :'uid-token'
       }
@@ -46,8 +54,10 @@ module Akeyless
     # Attribute type mapping.
     def self.openapi_types
       {
+        :'input_rule' => :'Array<String>',
         :'json' => :'Boolean',
         :'name' => :'String',
+        :'output_rule' => :'Array<String>',
         :'token' => :'String',
         :'uid_token' => :'String'
       }
@@ -74,6 +84,12 @@ module Akeyless
         h[k.to_sym] = v
       }
 
+      if attributes.key?(:'input_rule')
+        if (value = attributes[:'input_rule']).is_a?(Array)
+          self.input_rule = value
+        end
+      end
+
       if attributes.key?(:'json')
         self.json = attributes[:'json']
       else
@@ -86,6 +102,12 @@ module Akeyless
         self.name = nil
       end
 
+      if attributes.key?(:'output_rule')
+        if (value = attributes[:'output_rule']).is_a?(Array)
+          self.output_rule = value
+        end
+      end
+
       if attributes.key?(:'token')
         self.token = attributes[:'token']
       end
@@ -120,8 +142,10 @@ module Akeyless
     def ==(o)
       return true if self.equal?(o)
       self.class == o.class &&
+          input_rule == o.input_rule &&
           json == o.json &&
           name == o.name &&
+          output_rule == o.output_rule &&
           token == o.token &&
           uid_token == o.uid_token
     end
@@ -135,7 +159,7 @@ module Akeyless
     # Calculates hash code according to all attributes.
     # @return [Integer] Hash code
     def hash
-      [json, name, token, uid_token].hash
+      [input_rule, json, name, output_rule, token, uid_token].hash
     end
 
     # Builds the object from hash

data/lib/akeyless/models/gateway_stop_producer.rb

@@ -16,12 +16,18 @@ require 'time'
 module Akeyless
   # gatewayStopProducer is a command that stops producer [Deprecated: Use set-item-state command]
   class GatewayStopProducer
+    # Agentic input rule in name=...,rule=... format (e.g. name=rule1,rule=Sanitize input) Mirrors commands.AgenticRulesParams — kept separate because ResourceDS cannot embed it (different package, different struct layout).
+    attr_accessor :input_rule
+
     # Set output format to JSON
     attr_accessor :json
 
     # Dynamic secret name
     attr_accessor :name
 
+    # Agentic output rule in name=...,rule=... format (e.g. name=rule1,rule=Mask secrets)
+    attr_accessor :output_rule
+
     # Authentication token (see `/auth` and `/configure`)
     attr_accessor :token
 
@@ -31,8 +37,10 @@ module Akeyless
     # Attribute mapping from ruby-style variable name to JSON key.
     def self.attribute_map
       {
+        :'input_rule' => :'input-rule',
         :'json' => :'json',
         :'name' => :'name',
+        :'output_rule' => :'output-rule',
         :'token' => :'token',
         :'uid_token' => :'uid-token'
       }
@@ -46,8 +54,10 @@ module Akeyless
     # Attribute type mapping.
     def self.openapi_types
       {
+        :'input_rule' => :'Array<String>',
         :'json' => :'Boolean',
         :'name' => :'String',
+        :'output_rule' => :'Array<String>',
         :'token' => :'String',
         :'uid_token' => :'String'
       }
@@ -74,6 +84,12 @@ module Akeyless
         h[k.to_sym] = v
       }
 
+      if attributes.key?(:'input_rule')
+        if (value = attributes[:'input_rule']).is_a?(Array)
+          self.input_rule = value
+        end
+      end
+
       if attributes.key?(:'json')
         self.json = attributes[:'json']
       else
@@ -86,6 +102,12 @@ module Akeyless
         self.name = nil
       end
 
+      if attributes.key?(:'output_rule')
+        if (value = attributes[:'output_rule']).is_a?(Array)
+          self.output_rule = value
+        end
+      end
+
       if attributes.key?(:'token')
         self.token = attributes[:'token']
       end
@@ -120,8 +142,10 @@ module Akeyless
     def ==(o)
       return true if self.equal?(o)
       self.class == o.class &&
+          input_rule == o.input_rule &&
           json == o.json &&
           name == o.name &&
+          output_rule == o.output_rule &&
           token == o.token &&
           uid_token == o.uid_token
     end
@@ -135,7 +159,7 @@ module Akeyless
     # Calculates hash code according to all attributes.
     # @return [Integer] Hash code
     def hash
-      [json, name, token, uid_token].hash
+      [input_rule, json, name, output_rule, token, uid_token].hash
     end
 
     # Builds the object from hash

data/lib/akeyless/models/gateway_update_migration.rb

@@ -144,6 +144,9 @@ module Akeyless
     # Import secret key as json value or independent secrets (relevant only for HasiCorp Vault migration) [true/false]
     attr_accessor :hashi_json
 
+    # Controls the amount of HashiCorp Vault secret metadata migrated with each secret value. Options: none|minimal|full
+    attr_accessor :hashi_metadata_mode
+
     # HashiCorp Vault Namespaces is a comma-separated list of namespaces which need to be imported into Akeyless Vault. For every provided namespace, all its child namespaces are imported as well, e.g. nmsp/subnmsp1/subnmsp2,nmsp/anothernmsp. By default, import all namespaces (relevant only for HasiCorp Vault migration)
     attr_accessor :hashi_ns
 
@@ -286,6 +289,7 @@ module Akeyless
         :'gcp_key' => :'gcp-key',
         :'gcp_project_id' => :'gcp-project-id',
         :'hashi_json' => :'hashi-json',
+        :'hashi_metadata_mode' => :'hashi-metadata-mode',
         :'hashi_ns' => :'hashi-ns',
         :'hashi_token' => :'hashi-token',
         :'hashi_url' => :'hashi-url',
@@ -372,6 +376,7 @@ module Akeyless
         :'gcp_key' => :'String',
         :'gcp_project_id' => :'String',
         :'hashi_json' => :'String',
+        :'hashi_metadata_mode' => :'String',
         :'hashi_ns' => :'Array<String>',
         :'hashi_token' => :'String',
         :'hashi_url' => :'String',
@@ -624,6 +629,10 @@ module Akeyless
         self.hashi_json = 'true'
       end
 
+      if attributes.key?(:'hashi_metadata_mode')
+        self.hashi_metadata_mode = attributes[:'hashi_metadata_mode']
+      end
+
       if attributes.key?(:'hashi_ns')
         if (value = attributes[:'hashi_ns']).is_a?(Array)
           self.hashi_ns = value
@@ -858,6 +867,7 @@ module Akeyless
           gcp_key == o.gcp_key &&
           gcp_project_id == o.gcp_project_id &&
           hashi_json == o.hashi_json &&
+          hashi_metadata_mode == o.hashi_metadata_mode &&
           hashi_ns == o.hashi_ns &&
           hashi_token == o.hashi_token &&
           hashi_url == o.hashi_url &&
@@ -901,7 +911,7 @@ module Akeyless
     # Calculates hash code according to all attributes.
     # @return [Integer] Hash code
     def hash
-      [service_account_key_decoded, ad_auto_rotate, ad_cert_expiration_event_in, ad_certificates_path_template, ad_computer_base_dn, ad_discover_iis_app, ad_discover_services, ad_discovery_types, ad_domain_name, ad_domain_users_path_template, ad_local_users_ignore, ad_local_users_path_template, ad_os_filter, ad_rotation_hour, ad_rotation_interval, ad_sra_enable_rdp, ad_ssh_port, ad_target_format, ad_target_name, ad_targets_path_template, ad_targets_type, ad_user_base_dn, ad_user_groups, ad_winrm_over_http, ad_winrm_port, ad_discover_local_users, ai_certificate_discovery, aws_key, aws_key_id, aws_region, azure_client_id, azure_kv_name, azure_secret, azure_tenant_id, conjur_account, conjur_api_key, conjur_url, conjur_username, delete_remote, expiration_event_in, gcp_key, gcp_project_id, hashi_json, hashi_ns, hashi_token, hashi_url, hosts, id, json, k8s_ca_certificate, k8s_client_certificate, k8s_client_key, k8s_namespace, k8s_password, k8s_skip_system, k8s_token, k8s_url, k8s_username, name, new_name, port_ranges, protection_key, si_auto_rotate, si_rotation_hour, si_rotation_interval, si_sra_enable_rdp, si_target_name, si_user_groups, si_users_ignore, si_users_path_template, target_location, token, uid_token, usc_name, use_gw_cloud_identity].hash
+      [service_account_key_decoded, ad_auto_rotate, ad_cert_expiration_event_in, ad_certificates_path_template, ad_computer_base_dn, ad_discover_iis_app, ad_discover_services, ad_discovery_types, ad_domain_name, ad_domain_users_path_template, ad_local_users_ignore, ad_local_users_path_template, ad_os_filter, ad_rotation_hour, ad_rotation_interval, ad_sra_enable_rdp, ad_ssh_port, ad_target_format, ad_target_name, ad_targets_path_template, ad_targets_type, ad_user_base_dn, ad_user_groups, ad_winrm_over_http, ad_winrm_port, ad_discover_local_users, ai_certificate_discovery, aws_key, aws_key_id, aws_region, azure_client_id, azure_kv_name, azure_secret, azure_tenant_id, conjur_account, conjur_api_key, conjur_url, conjur_username, delete_remote, expiration_event_in, gcp_key, gcp_project_id, hashi_json, hashi_metadata_mode, hashi_ns, hashi_token, hashi_url, hosts, id, json, k8s_ca_certificate, k8s_client_certificate, k8s_client_key, k8s_namespace, k8s_password, k8s_skip_system, k8s_token, k8s_url, k8s_username, name, new_name, port_ranges, protection_key, si_auto_rotate, si_rotation_hour, si_rotation_interval, si_sra_enable_rdp, si_target_name, si_user_groups, si_users_ignore, si_users_path_template, target_location, token, uid_token, usc_name, use_gw_cloud_identity].hash
     end
 
     # Builds the object from hash

data/lib/akeyless/models/gateway_update_producer_artifactory.rb

@@ -37,6 +37,9 @@ module Akeyless
     # Protection from accidental deletion of this object [true/false]
     attr_accessor :delete_protection
 
+    # Agentic input rule in name=...,rule=... format (e.g. name=rule1,rule=Sanitize input) Mirrors commands.AgenticRulesParams — kept separate because ResourceDS cannot embed it (different package, different struct layout).
+    attr_accessor :input_rule
+
     # Additional custom fields to associate with the item
     attr_accessor :item_custom_fields
 
@@ -49,6 +52,9 @@ module Akeyless
     # Dynamic secret name
     attr_accessor :new_name
 
+    # Agentic output rule in name=...,rule=... format (e.g. name=rule1,rule=Mask secrets)
+    attr_accessor :output_rule
+
     # Dynamic producer encryption key
     attr_accessor :producer_encryption_key_name
 
@@ -77,10 +83,12 @@ module Akeyless
         :'base_url' => :'base-url',
         :'custom_username_template' => :'custom-username-template',
         :'delete_protection' => :'delete_protection',
+        :'input_rule' => :'input-rule',
         :'item_custom_fields' => :'item-custom-fields',
         :'json' => :'json',
         :'name' => :'name',
         :'new_name' => :'new-name',
+        :'output_rule' => :'output-rule',
         :'producer_encryption_key_name' => :'producer-encryption-key-name',
         :'tags' => :'tags',
         :'target_name' => :'target-name',
@@ -105,10 +113,12 @@ module Akeyless
         :'base_url' => :'String',
         :'custom_username_template' => :'String',
         :'delete_protection' => :'String',
+        :'input_rule' => :'Array<String>',
         :'item_custom_fields' => :'Hash<String, String>',
         :'json' => :'Boolean',
         :'name' => :'String',
         :'new_name' => :'String',
+        :'output_rule' => :'Array<String>',
         :'producer_encryption_key_name' => :'String',
         :'tags' => :'Array<String>',
         :'target_name' => :'String',
@@ -171,6 +181,12 @@ module Akeyless
         self.delete_protection = attributes[:'delete_protection']
       end
 
+      if attributes.key?(:'input_rule')
+        if (value = attributes[:'input_rule']).is_a?(Array)
+          self.input_rule = value
+        end
+      end
+
       if attributes.key?(:'item_custom_fields')
         if (value = attributes[:'item_custom_fields']).is_a?(Hash)
           self.item_custom_fields = value
@@ -193,6 +209,12 @@ module Akeyless
         self.new_name = attributes[:'new_name']
       end
 
+      if attributes.key?(:'output_rule')
+        if (value = attributes[:'output_rule']).is_a?(Array)
+          self.output_rule = value
+        end
+      end
+
       if attributes.key?(:'producer_encryption_key_name')
         self.producer_encryption_key_name = attributes[:'producer_encryption_key_name']
       end
@@ -264,10 +286,12 @@ module Akeyless
           base_url == o.base_url &&
           custom_username_template == o.custom_username_template &&
           delete_protection == o.delete_protection &&
+          input_rule == o.input_rule &&
           item_custom_fields == o.item_custom_fields &&
           json == o.json &&
           name == o.name &&
           new_name == o.new_name &&
+          output_rule == o.output_rule &&
           producer_encryption_key_name == o.producer_encryption_key_name &&
           tags == o.tags &&
           target_name == o.target_name &&
@@ -285,7 +309,7 @@ module Akeyless
     # Calculates hash code according to all attributes.
     # @return [Integer] Hash code
     def hash
-      [artifactory_admin_name, artifactory_admin_pwd, artifactory_token_audience, artifactory_token_scope, base_url, custom_username_template, delete_protection, item_custom_fields, json, name, new_name, producer_encryption_key_name, tags, target_name, token, uid_token, user_ttl].hash
+      [artifactory_admin_name, artifactory_admin_pwd, artifactory_token_audience, artifactory_token_scope, base_url, custom_username_template, delete_protection, input_rule, item_custom_fields, json, name, new_name, output_rule, producer_encryption_key_name, tags, target_name, token, uid_token, user_ttl].hash
     end
 
     # Builds the object from hash

data/lib/akeyless/models/gateway_update_producer_aws.rb

@@ -54,6 +54,9 @@ module Akeyless
     # Automatic admin credentials rotation
     attr_accessor :enable_admin_rotation
 
+    # Agentic input rule in name=...,rule=... format (e.g. name=rule1,rule=Sanitize input) Mirrors commands.AgenticRulesParams — kept separate because ResourceDS cannot embed it (different package, different struct layout).
+    attr_accessor :input_rule
+
     # Additional custom fields to associate with the item
     attr_accessor :item_custom_fields
 
@@ -66,6 +69,9 @@ module Akeyless
     # Dynamic secret name
     attr_accessor :new_name
 
+    # Agentic output rule in name=...,rule=... format (e.g. name=rule1,rule=Mask secrets)
+    attr_accessor :output_rule
+
     # The length of the password to be generated
     attr_accessor :password_length
 
@@ -139,10 +145,12 @@ module Akeyless
         :'custom_username_template' => :'custom-username-template',
         :'delete_protection' => :'delete_protection',
         :'enable_admin_rotation' => :'enable-admin-rotation',
+        :'input_rule' => :'input-rule',
         :'item_custom_fields' => :'item-custom-fields',
         :'json' => :'json',
         :'name' => :'name',
         :'new_name' => :'new-name',
+        :'output_rule' => :'output-rule',
         :'password_length' => :'password-length',
         :'producer_encryption_key_name' => :'producer-encryption-key-name',
         :'region' => :'region',
@@ -186,10 +194,12 @@ module Akeyless
         :'custom_username_template' => :'String',
         :'delete_protection' => :'String',
         :'enable_admin_rotation' => :'Boolean',
+        :'input_rule' => :'Array<String>',
         :'item_custom_fields' => :'Hash<String, String>',
         :'json' => :'Boolean',
         :'name' => :'String',
         :'new_name' => :'String',
+        :'output_rule' => :'Array<String>',
         :'password_length' => :'String',
         :'producer_encryption_key_name' => :'String',
         :'region' => :'String',
@@ -293,6 +303,12 @@ module Akeyless
         self.enable_admin_rotation = false
       end
 
+      if attributes.key?(:'input_rule')
+        if (value = attributes[:'input_rule']).is_a?(Array)
+          self.input_rule = value
+        end
+      end
+
       if attributes.key?(:'item_custom_fields')
         if (value = attributes[:'item_custom_fields']).is_a?(Hash)
           self.item_custom_fields = value
@@ -315,6 +331,12 @@ module Akeyless
         self.new_name = attributes[:'new_name']
       end
 
+      if attributes.key?(:'output_rule')
+        if (value = attributes[:'output_rule']).is_a?(Array)
+          self.output_rule = value
+        end
+      end
+
       if attributes.key?(:'password_length')
         self.password_length = attributes[:'password_length']
       end
@@ -442,10 +464,12 @@ module Akeyless
           custom_username_template == o.custom_username_template &&
           delete_protection == o.delete_protection &&
           enable_admin_rotation == o.enable_admin_rotation &&
+          input_rule == o.input_rule &&
           item_custom_fields == o.item_custom_fields &&
           json == o.json &&
           name == o.name &&
           new_name == o.new_name &&
+          output_rule == o.output_rule &&
           password_length == o.password_length &&
           producer_encryption_key_name == o.producer_encryption_key_name &&
           region == o.region &&
@@ -476,7 +500,7 @@ module Akeyless
     # Calculates hash code according to all attributes.
     # @return [Integer] Hash code
     def hash
-      [access_mode, admin_rotation_interval_days, aws_access_key_id, aws_access_secret_key, aws_external_id, aws_role_arns, aws_user_console_access, aws_user_groups, aws_user_policies, aws_user_programmatic_access, custom_username_template, delete_protection, enable_admin_rotation, item_custom_fields, json, name, new_name, password_length, producer_encryption_key_name, region, secure_access_aws_account_id, secure_access_aws_native_cli, secure_access_bastion_issuer, secure_access_certificate_issuer, secure_access_delay, secure_access_enable, secure_access_web, secure_access_web_browsing, secure_access_web_proxy, session_tags, tags, target_name, token, transitive_tag_keys, uid_token, user_ttl].hash
+      [access_mode, admin_rotation_interval_days, aws_access_key_id, aws_access_secret_key, aws_external_id, aws_role_arns, aws_user_console_access, aws_user_groups, aws_user_policies, aws_user_programmatic_access, custom_username_template, delete_protection, enable_admin_rotation, input_rule, item_custom_fields, json, name, new_name, output_rule, password_length, producer_encryption_key_name, region, secure_access_aws_account_id, secure_access_aws_native_cli, secure_access_bastion_issuer, secure_access_certificate_issuer, secure_access_delay, secure_access_enable, secure_access_web, secure_access_web_browsing, secure_access_web_proxy, session_tags, tags, target_name, token, transitive_tag_keys, uid_token, user_ttl].hash
     end
 
     # Builds the object from hash

data/lib/akeyless/models/gateway_update_producer_azure.rb

@@ -43,6 +43,9 @@ module Akeyless
     # Fixed user
     attr_accessor :fixed_user_only
 
+    # Agentic input rule in name=...,rule=... format (e.g. name=rule1,rule=Sanitize input) Mirrors commands.AgenticRulesParams — kept separate because ResourceDS cannot embed it (different package, different struct layout).
+    attr_accessor :input_rule
+
     # Additional custom fields to associate with the item
     attr_accessor :item_custom_fields
 
@@ -55,6 +58,9 @@ module Akeyless
     # Dynamic secret name
     attr_accessor :new_name
 
+    # Agentic output rule in name=...,rule=... format (e.g. name=rule1,rule=Mask secrets)
+    attr_accessor :output_rule
+
     # The length of the password to be generated
     attr_accessor :password_length
 
@@ -118,10 +124,12 @@ module Akeyless
         :'delete_protection' => :'delete_protection',
         :'fixed_user_claim_keyname' => :'fixed-user-claim-keyname',
         :'fixed_user_only' => :'fixed-user-only',
+        :'input_rule' => :'input-rule',
         :'item_custom_fields' => :'item-custom-fields',
         :'json' => :'json',
         :'name' => :'name',
         :'new_name' => :'new-name',
+        :'output_rule' => :'output-rule',
         :'password_length' => :'password-length',
         :'producer_encryption_key_name' => :'producer-encryption-key-name',
         :'secure_access_enable' => :'secure-access-enable',
@@ -159,10 +167,12 @@ module Akeyless
         :'delete_protection' => :'String',
         :'fixed_user_claim_keyname' => :'String',
         :'fixed_user_only' => :'Boolean',
+        :'input_rule' => :'Array<String>',
         :'item_custom_fields' => :'Hash<String, String>',
         :'json' => :'Boolean',
         :'name' => :'String',
         :'new_name' => :'String',
+        :'output_rule' => :'Array<String>',
         :'password_length' => :'String',
         :'producer_encryption_key_name' => :'String',
         :'secure_access_enable' => :'String',
@@ -244,6 +254,12 @@ module Akeyless
         self.fixed_user_only = false
       end
 
+      if attributes.key?(:'input_rule')
+        if (value = attributes[:'input_rule']).is_a?(Array)
+          self.input_rule = value
+        end
+      end
+
       if attributes.key?(:'item_custom_fields')
         if (value = attributes[:'item_custom_fields']).is_a?(Hash)
           self.item_custom_fields = value
@@ -266,6 +282,12 @@ module Akeyless
         self.new_name = attributes[:'new_name']
       end
 
+      if attributes.key?(:'output_rule')
+        if (value = attributes[:'output_rule']).is_a?(Array)
+          self.output_rule = value
+        end
+      end
+
       if attributes.key?(:'password_length')
         self.password_length = attributes[:'password_length']
       end
@@ -383,10 +405,12 @@ module Akeyless
           delete_protection == o.delete_protection &&
           fixed_user_claim_keyname == o.fixed_user_claim_keyname &&
           fixed_user_only == o.fixed_user_only &&
+          input_rule == o.input_rule &&
           item_custom_fields == o.item_custom_fields &&
           json == o.json &&
           name == o.name &&
           new_name == o.new_name &&
+          output_rule == o.output_rule &&
           password_length == o.password_length &&
           producer_encryption_key_name == o.producer_encryption_key_name &&
           secure_access_enable == o.secure_access_enable &&
@@ -415,7 +439,7 @@ module Akeyless
     # Calculates hash code according to all attributes.
     # @return [Integer] Hash code
     def hash
-      [app_obj_id, azure_administrative_unit, azure_client_id, azure_client_secret, azure_tenant_id, custom_username_template, delete_protection, fixed_user_claim_keyname, fixed_user_only, item_custom_fields, json, name, new_name, password_length, producer_encryption_key_name, secure_access_enable, secure_access_url, secure_access_web, secure_access_web_browsing, secure_access_web_proxy, tags, target_name, token, uid_token, user_group_obj_id, user_portal_access, user_principal_name, user_programmatic_access, user_role_template_id, user_ttl].hash
+      [app_obj_id, azure_administrative_unit, azure_client_id, azure_client_secret, azure_tenant_id, custom_username_template, delete_protection, fixed_user_claim_keyname, fixed_user_only, input_rule, item_custom_fields, json, name, new_name, output_rule, password_length, producer_encryption_key_name, secure_access_enable, secure_access_url, secure_access_web, secure_access_web_browsing, secure_access_web_proxy, tags, target_name, token, uid_token, user_group_obj_id, user_portal_access, user_principal_name, user_programmatic_access, user_role_template_id, user_ttl].hash
     end
 
     # Builds the object from hash

data/lib/akeyless/models/gateway_update_producer_cassandra.rb

@@ -37,6 +37,9 @@ module Akeyless
     # Protection from accidental deletion of this object [true/false]
     attr_accessor :delete_protection
 
+    # Agentic input rule in name=...,rule=... format (e.g. name=rule1,rule=Sanitize input) Mirrors commands.AgenticRulesParams — kept separate because ResourceDS cannot embed it (different package, different struct layout).
+    attr_accessor :input_rule
+
     # Additional custom fields to associate with the item
     attr_accessor :item_custom_fields
 
@@ -49,6 +52,9 @@ module Akeyless
     # Dynamic secret name
     attr_accessor :new_name
 
+    # Agentic output rule in name=...,rule=... format (e.g. name=rule1,rule=Mask secrets)
+    attr_accessor :output_rule
+
     # The length of the password to be generated
     attr_accessor :password_length
 
@@ -86,10 +92,12 @@ module Akeyless
         :'cassandra_username' => :'cassandra-username',
         :'custom_username_template' => :'custom-username-template',
         :'delete_protection' => :'delete_protection',
+        :'input_rule' => :'input-rule',
         :'item_custom_fields' => :'item-custom-fields',
         :'json' => :'json',
         :'name' => :'name',
         :'new_name' => :'new-name',
+        :'output_rule' => :'output-rule',
         :'password_length' => :'password-length',
         :'producer_encryption_key_name' => :'producer-encryption-key-name',
         :'ssl' => :'ssl',
@@ -117,10 +125,12 @@ module Akeyless
         :'cassandra_username' => :'String',
         :'custom_username_template' => :'String',
         :'delete_protection' => :'String',
+        :'input_rule' => :'Array<String>',
         :'item_custom_fields' => :'Hash<String, String>',
         :'json' => :'Boolean',
         :'name' => :'String',
         :'new_name' => :'String',
+        :'output_rule' => :'Array<String>',
         :'password_length' => :'String',
         :'producer_encryption_key_name' => :'String',
         :'ssl' => :'Boolean',
@@ -184,6 +194,12 @@ module Akeyless
         self.delete_protection = attributes[:'delete_protection']
       end
 
+      if attributes.key?(:'input_rule')
+        if (value = attributes[:'input_rule']).is_a?(Array)
+          self.input_rule = value
+        end
+      end
+
       if attributes.key?(:'item_custom_fields')
         if (value = attributes[:'item_custom_fields']).is_a?(Hash)
           self.item_custom_fields = value
@@ -206,6 +222,12 @@ module Akeyless
         self.new_name = attributes[:'new_name']
       end
 
+      if attributes.key?(:'output_rule')
+        if (value = attributes[:'output_rule']).is_a?(Array)
+          self.output_rule = value
+        end
+      end
+
       if attributes.key?(:'password_length')
         self.password_length = attributes[:'password_length']
       end
@@ -281,10 +303,12 @@ module Akeyless
           cassandra_username == o.cassandra_username &&
           custom_username_template == o.custom_username_template &&
           delete_protection == o.delete_protection &&
+          input_rule == o.input_rule &&
           item_custom_fields == o.item_custom_fields &&
           json == o.json &&
           name == o.name &&
           new_name == o.new_name &&
+          output_rule == o.output_rule &&
           password_length == o.password_length &&
           producer_encryption_key_name == o.producer_encryption_key_name &&
           ssl == o.ssl &&
@@ -305,7 +329,7 @@ module Akeyless
     # Calculates hash code according to all attributes.
     # @return [Integer] Hash code
     def hash
-      [cassandra_creation_statements, cassandra_hosts, cassandra_password, cassandra_port, cassandra_username, custom_username_template, delete_protection, item_custom_fields, json, name, new_name, password_length, producer_encryption_key_name, ssl, ssl_certificate, tags, target_name, token, uid_token, user_ttl].hash
+      [cassandra_creation_statements, cassandra_hosts, cassandra_password, cassandra_port, cassandra_username, custom_username_template, delete_protection, input_rule, item_custom_fields, json, name, new_name, output_rule, password_length, producer_encryption_key_name, ssl, ssl_certificate, tags, target_name, token, uid_token, user_ttl].hash
     end
 
     # Builds the object from hash