temper-rb 0.5.4 → 0.6.0

data/lib/temper/generated/api/machine_clients_api.rb

@@ -0,0 +1,460 @@
+=begin
+#Temper Cloud API
+
+#Knowledge base management API for temper cloud
+
+The version of the OpenAPI document: 0.6.0
+
+Generated by: https://openapi-generator.tech
+Generator version: 7.23.0
+
+=end
+
+require 'cgi'
+
+module Temper::Generated
+  class MachineClientsApi
+    attr_accessor :api_client
+
+    def initialize(api_client = ApiClient.default)
+      @api_client = api_client
+    end
+    # Get a machine client
+    # Returns one machine client. Requires a system admin or the owner of the machine's owning team. Any other caller with system access is answered 404, exactly as for an id that does not exist.
+    # @param id [String] Machine client ID
+    # @param [Hash] opts the optional parameters
+    # @option opts [String] :x_temper_surface The calling surface, for event-ledger attribution. Accepted values are `cli` and `sdk`; an absent or unrecognized value attributes the write to `web`. This is provenance, never authorization — an unrecognized value degrades, it never rejects.
+    # @return [MachineClient]
+    def get_machine_client(id, opts = {})
+      data, _status_code, _headers = get_machine_client_with_http_info(id, opts)
+      data
+    end
+
+    # Get a machine client
+    # Returns one machine client. Requires a system admin or the owner of the machine's owning team. Any other caller with system access is answered 404, exactly as for an id that does not exist.
+    # @param id [String] Machine client ID
+    # @param [Hash] opts the optional parameters
+    # @option opts [String] :x_temper_surface The calling surface, for event-ledger attribution. Accepted values are `cli` and `sdk`; an absent or unrecognized value attributes the write to `web`. This is provenance, never authorization — an unrecognized value degrades, it never rejects.
+    # @return [Array<(MachineClient, Integer, Hash)>] MachineClient data, response status code and response headers
+    def get_machine_client_with_http_info(id, opts = {})
+      if @api_client.config.debugging
+        @api_client.config.logger.debug 'Calling API: MachineClientsApi.get_machine_client ...'
+      end
+      # verify the required parameter 'id' is set
+      if @api_client.config.client_side_validation && id.nil?
+        fail ArgumentError, "Missing the required parameter 'id' when calling MachineClientsApi.get_machine_client"
+      end
+      allowable_values = ["cli", "sdk"]
+      if @api_client.config.client_side_validation && opts[:'x_temper_surface'] && !allowable_values.include?(opts[:'x_temper_surface'])
+        fail ArgumentError, "invalid value for \"x_temper_surface\", must be one of #{allowable_values}"
+      end
+      # resource path
+      local_var_path = '/api/machine-clients/{id}'.sub('{id}', CGI.escape(id.to_s))
+
+      # query parameters
+      query_params = opts[:query_params] || {}
+
+      # header parameters
+      header_params = opts[:header_params] || {}
+      # HTTP header 'Accept' (if needed)
+      header_params['Accept'] = @api_client.select_header_accept(['application/json']) unless header_params['Accept']
+      header_params[:'X-Temper-Surface'] = opts[:'x_temper_surface'] if !opts[:'x_temper_surface'].nil?
+
+      # form parameters
+      form_params = opts[:form_params] || {}
+
+      # http body (model)
+      post_body = opts[:debug_body]
+
+      # return_type
+      return_type = opts[:debug_return_type] || 'MachineClient'
+
+      # auth_names
+      auth_names = opts[:debug_auth_names] || ['bearer_auth']
+
+      new_options = opts.merge(
+        :operation => :"MachineClientsApi.get_machine_client",
+        :header_params => header_params,
+        :query_params => query_params,
+        :form_params => form_params,
+        :body => post_body,
+        :auth_names => auth_names,
+        :return_type => return_type
+      )
+
+      data, status_code, headers = @api_client.call_api(:GET, local_var_path, new_options)
+      if @api_client.config.debugging
+        @api_client.config.logger.debug "API called: MachineClientsApi#get_machine_client\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+      end
+      return data, status_code, headers
+    end
+
+    # Issue a machine credential
+    # Mints a new machine principal with a temper-issued `client_id` and secret. The `client_secret` in the response is shown once and never stored; only its hash is kept, so it cannot be retrieved later. Requires a system admin or the owner of `owner_team_id`; a machine with no owning team can only be issued by a system admin. Reach rules are those of registration.
+    # @param issue_machine_request [IssueMachineRequest] 
+    # @param [Hash] opts the optional parameters
+    # @option opts [String] :x_temper_surface The calling surface, for event-ledger attribution. Accepted values are &#x60;cli&#x60; and &#x60;sdk&#x60;; an absent or unrecognized value attributes the write to &#x60;web&#x60;. This is provenance, never authorization — an unrecognized value degrades, it never rejects.
+    # @return [IssuedMachineCredential]
+    def issue_machine_credential(issue_machine_request, opts = {})
+      data, _status_code, _headers = issue_machine_credential_with_http_info(issue_machine_request, opts)
+      data
+    end
+
+    # Issue a machine credential
+    # Mints a new machine principal with a temper-issued &#x60;client_id&#x60; and secret. The &#x60;client_secret&#x60; in the response is shown once and never stored; only its hash is kept, so it cannot be retrieved later. Requires a system admin or the owner of &#x60;owner_team_id&#x60;; a machine with no owning team can only be issued by a system admin. Reach rules are those of registration.
+    # @param issue_machine_request [IssueMachineRequest] 
+    # @param [Hash] opts the optional parameters
+    # @option opts [String] :x_temper_surface The calling surface, for event-ledger attribution. Accepted values are &#x60;cli&#x60; and &#x60;sdk&#x60;; an absent or unrecognized value attributes the write to &#x60;web&#x60;. This is provenance, never authorization — an unrecognized value degrades, it never rejects.
+    # @return [Array<(IssuedMachineCredential, Integer, Hash)>] IssuedMachineCredential data, response status code and response headers
+    def issue_machine_credential_with_http_info(issue_machine_request, opts = {})
+      if @api_client.config.debugging
+        @api_client.config.logger.debug 'Calling API: MachineClientsApi.issue_machine_credential ...'
+      end
+      # verify the required parameter 'issue_machine_request' is set
+      if @api_client.config.client_side_validation && issue_machine_request.nil?
+        fail ArgumentError, "Missing the required parameter 'issue_machine_request' when calling MachineClientsApi.issue_machine_credential"
+      end
+      allowable_values = ["cli", "sdk"]
+      if @api_client.config.client_side_validation && opts[:'x_temper_surface'] && !allowable_values.include?(opts[:'x_temper_surface'])
+        fail ArgumentError, "invalid value for \"x_temper_surface\", must be one of #{allowable_values}"
+      end
+      # resource path
+      local_var_path = '/api/machine-clients/issue'
+
+      # query parameters
+      query_params = opts[:query_params] || {}
+
+      # header parameters
+      header_params = opts[:header_params] || {}
+      # HTTP header 'Accept' (if needed)
+      header_params['Accept'] = @api_client.select_header_accept(['application/json']) unless header_params['Accept']
+      # HTTP header 'Content-Type'
+      content_type = @api_client.select_header_content_type(['application/json'])
+      if !content_type.nil?
+          header_params['Content-Type'] = content_type
+      end
+      header_params[:'X-Temper-Surface'] = opts[:'x_temper_surface'] if !opts[:'x_temper_surface'].nil?
+
+      # form parameters
+      form_params = opts[:form_params] || {}
+
+      # http body (model)
+      post_body = opts[:debug_body] || @api_client.object_to_http_body(issue_machine_request)
+
+      # return_type
+      return_type = opts[:debug_return_type] || 'IssuedMachineCredential'
+
+      # auth_names
+      auth_names = opts[:debug_auth_names] || ['bearer_auth']
+
+      new_options = opts.merge(
+        :operation => :"MachineClientsApi.issue_machine_credential",
+        :header_params => header_params,
+        :query_params => query_params,
+        :form_params => form_params,
+        :body => post_body,
+        :auth_names => auth_names,
+        :return_type => return_type
+      )
+
+      data, status_code, headers = @api_client.call_api(:POST, local_var_path, new_options)
+      if @api_client.config.debugging
+        @api_client.config.logger.debug "API called: MachineClientsApi#issue_machine_credential\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+      end
+      return data, status_code, headers
+    end
+
+    # List machine clients
+    # Lists the machine clients the caller may manage, newest first. A system admin sees every machine client; any other caller sees only those owned by a team they own. Revoked clients are omitted unless `include_revoked` is set.
+    # @param [Hash] opts the optional parameters
+    # @option opts [Boolean] :include_revoked Include revoked machine clients. Default &#x60;false&#x60;.
+    # @option opts [String] :x_temper_surface The calling surface, for event-ledger attribution. Accepted values are &#x60;cli&#x60; and &#x60;sdk&#x60;; an absent or unrecognized value attributes the write to &#x60;web&#x60;. This is provenance, never authorization — an unrecognized value degrades, it never rejects.
+    # @return [Array<MachineClient>]
+    def list_machine_clients(opts = {})
+      data, _status_code, _headers = list_machine_clients_with_http_info(opts)
+      data
+    end
+
+    # List machine clients
+    # Lists the machine clients the caller may manage, newest first. A system admin sees every machine client; any other caller sees only those owned by a team they own. Revoked clients are omitted unless &#x60;include_revoked&#x60; is set.
+    # @param [Hash] opts the optional parameters
+    # @option opts [Boolean] :include_revoked Include revoked machine clients. Default &#x60;false&#x60;.
+    # @option opts [String] :x_temper_surface The calling surface, for event-ledger attribution. Accepted values are &#x60;cli&#x60; and &#x60;sdk&#x60;; an absent or unrecognized value attributes the write to &#x60;web&#x60;. This is provenance, never authorization — an unrecognized value degrades, it never rejects.
+    # @return [Array<(Array<MachineClient>, Integer, Hash)>] Array<MachineClient> data, response status code and response headers
+    def list_machine_clients_with_http_info(opts = {})
+      if @api_client.config.debugging
+        @api_client.config.logger.debug 'Calling API: MachineClientsApi.list_machine_clients ...'
+      end
+      allowable_values = ["cli", "sdk"]
+      if @api_client.config.client_side_validation && opts[:'x_temper_surface'] && !allowable_values.include?(opts[:'x_temper_surface'])
+        fail ArgumentError, "invalid value for \"x_temper_surface\", must be one of #{allowable_values}"
+      end
+      # resource path
+      local_var_path = '/api/machine-clients'
+
+      # query parameters
+      query_params = opts[:query_params] || {}
+      query_params[:'include_revoked'] = opts[:'include_revoked'] if !opts[:'include_revoked'].nil?
+
+      # header parameters
+      header_params = opts[:header_params] || {}
+      # HTTP header 'Accept' (if needed)
+      header_params['Accept'] = @api_client.select_header_accept(['application/json']) unless header_params['Accept']
+      header_params[:'X-Temper-Surface'] = opts[:'x_temper_surface'] if !opts[:'x_temper_surface'].nil?
+
+      # form parameters
+      form_params = opts[:form_params] || {}
+
+      # http body (model)
+      post_body = opts[:debug_body]
+
+      # return_type
+      return_type = opts[:debug_return_type] || 'Array<MachineClient>'
+
+      # auth_names
+      auth_names = opts[:debug_auth_names] || ['bearer_auth']
+
+      new_options = opts.merge(
+        :operation => :"MachineClientsApi.list_machine_clients",
+        :header_params => header_params,
+        :query_params => query_params,
+        :form_params => form_params,
+        :body => post_body,
+        :auth_names => auth_names,
+        :return_type => return_type
+      )
+
+      data, status_code, headers = @api_client.call_api(:GET, local_var_path, new_options)
+      if @api_client.config.debugging
+        @api_client.config.logger.debug "API called: MachineClientsApi#list_machine_clients\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+      end
+      return data, status_code, headers
+    end
+
+    # Register a machine client
+    # Registers an externally issued IdP `client_id` as a machine principal and creates its agent profile, enrolling it in the listed teams and cogmap grants. Requires a system admin or the owner of `owner_team_id`; a machine with no owning team can only be registered by a system admin. A team owner can confer only reach they could grant themselves, and no caller can give a machine a team role above `member`.
+    # @param provision_machine_request [ProvisionMachineRequest] 
+    # @param [Hash] opts the optional parameters
+    # @option opts [String] :x_temper_surface The calling surface, for event-ledger attribution. Accepted values are &#x60;cli&#x60; and &#x60;sdk&#x60;; an absent or unrecognized value attributes the write to &#x60;web&#x60;. This is provenance, never authorization — an unrecognized value degrades, it never rejects.
+    # @return [MachineClient]
+    def provision_machine_client(provision_machine_request, opts = {})
+      data, _status_code, _headers = provision_machine_client_with_http_info(provision_machine_request, opts)
+      data
+    end
+
+    # Register a machine client
+    # Registers an externally issued IdP &#x60;client_id&#x60; as a machine principal and creates its agent profile, enrolling it in the listed teams and cogmap grants. Requires a system admin or the owner of &#x60;owner_team_id&#x60;; a machine with no owning team can only be registered by a system admin. A team owner can confer only reach they could grant themselves, and no caller can give a machine a team role above &#x60;member&#x60;.
+    # @param provision_machine_request [ProvisionMachineRequest] 
+    # @param [Hash] opts the optional parameters
+    # @option opts [String] :x_temper_surface The calling surface, for event-ledger attribution. Accepted values are &#x60;cli&#x60; and &#x60;sdk&#x60;; an absent or unrecognized value attributes the write to &#x60;web&#x60;. This is provenance, never authorization — an unrecognized value degrades, it never rejects.
+    # @return [Array<(MachineClient, Integer, Hash)>] MachineClient data, response status code and response headers
+    def provision_machine_client_with_http_info(provision_machine_request, opts = {})
+      if @api_client.config.debugging
+        @api_client.config.logger.debug 'Calling API: MachineClientsApi.provision_machine_client ...'
+      end
+      # verify the required parameter 'provision_machine_request' is set
+      if @api_client.config.client_side_validation && provision_machine_request.nil?
+        fail ArgumentError, "Missing the required parameter 'provision_machine_request' when calling MachineClientsApi.provision_machine_client"
+      end
+      allowable_values = ["cli", "sdk"]
+      if @api_client.config.client_side_validation && opts[:'x_temper_surface'] && !allowable_values.include?(opts[:'x_temper_surface'])
+        fail ArgumentError, "invalid value for \"x_temper_surface\", must be one of #{allowable_values}"
+      end
+      # resource path
+      local_var_path = '/api/machine-clients'
+
+      # query parameters
+      query_params = opts[:query_params] || {}
+
+      # header parameters
+      header_params = opts[:header_params] || {}
+      # HTTP header 'Accept' (if needed)
+      header_params['Accept'] = @api_client.select_header_accept(['application/json']) unless header_params['Accept']
+      # HTTP header 'Content-Type'
+      content_type = @api_client.select_header_content_type(['application/json'])
+      if !content_type.nil?
+          header_params['Content-Type'] = content_type
+      end
+      header_params[:'X-Temper-Surface'] = opts[:'x_temper_surface'] if !opts[:'x_temper_surface'].nil?
+
+      # form parameters
+      form_params = opts[:form_params] || {}
+
+      # http body (model)
+      post_body = opts[:debug_body] || @api_client.object_to_http_body(provision_machine_request)
+
+      # return_type
+      return_type = opts[:debug_return_type] || 'MachineClient'
+
+      # auth_names
+      auth_names = opts[:debug_auth_names] || ['bearer_auth']
+
+      new_options = opts.merge(
+        :operation => :"MachineClientsApi.provision_machine_client",
+        :header_params => header_params,
+        :query_params => query_params,
+        :form_params => form_params,
+        :body => post_body,
+        :auth_names => auth_names,
+        :return_type => return_type
+      )
+
+      data, status_code, headers = @api_client.call_api(:POST, local_var_path, new_options)
+      if @api_client.config.debugging
+        @api_client.config.logger.debug "API called: MachineClientsApi#provision_machine_client\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+      end
+      return data, status_code, headers
+    end
+
+    # Revoke a machine client
+    # Revokes a machine client so its credential no longer authenticates, and revokes the agent profile's standing if it was approved. Team memberships and grants are left in place. Revoking an already-revoked client returns it unchanged. Requires a system admin or the owner of the machine's owning team. Any other caller with system access is answered 404, exactly as for an id that does not exist.
+    # @param id [String] Machine client ID
+    # @param [Hash] opts the optional parameters
+    # @option opts [String] :x_temper_surface The calling surface, for event-ledger attribution. Accepted values are &#x60;cli&#x60; and &#x60;sdk&#x60;; an absent or unrecognized value attributes the write to &#x60;web&#x60;. This is provenance, never authorization — an unrecognized value degrades, it never rejects.
+    # @return [MachineClient]
+    def revoke_machine_client(id, opts = {})
+      data, _status_code, _headers = revoke_machine_client_with_http_info(id, opts)
+      data
+    end
+
+    # Revoke a machine client
+    # Revokes a machine client so its credential no longer authenticates, and revokes the agent profile&#39;s standing if it was approved. Team memberships and grants are left in place. Revoking an already-revoked client returns it unchanged. Requires a system admin or the owner of the machine&#39;s owning team. Any other caller with system access is answered 404, exactly as for an id that does not exist.
+    # @param id [String] Machine client ID
+    # @param [Hash] opts the optional parameters
+    # @option opts [String] :x_temper_surface The calling surface, for event-ledger attribution. Accepted values are &#x60;cli&#x60; and &#x60;sdk&#x60;; an absent or unrecognized value attributes the write to &#x60;web&#x60;. This is provenance, never authorization — an unrecognized value degrades, it never rejects.
+    # @return [Array<(MachineClient, Integer, Hash)>] MachineClient data, response status code and response headers
+    def revoke_machine_client_with_http_info(id, opts = {})
+      if @api_client.config.debugging
+        @api_client.config.logger.debug 'Calling API: MachineClientsApi.revoke_machine_client ...'
+      end
+      # verify the required parameter 'id' is set
+      if @api_client.config.client_side_validation && id.nil?
+        fail ArgumentError, "Missing the required parameter 'id' when calling MachineClientsApi.revoke_machine_client"
+      end
+      allowable_values = ["cli", "sdk"]
+      if @api_client.config.client_side_validation && opts[:'x_temper_surface'] && !allowable_values.include?(opts[:'x_temper_surface'])
+        fail ArgumentError, "invalid value for \"x_temper_surface\", must be one of #{allowable_values}"
+      end
+      # resource path
+      local_var_path = '/api/machine-clients/{id}'.sub('{id}', CGI.escape(id.to_s))
+
+      # query parameters
+      query_params = opts[:query_params] || {}
+
+      # header parameters
+      header_params = opts[:header_params] || {}
+      # HTTP header 'Accept' (if needed)
+      header_params['Accept'] = @api_client.select_header_accept(['application/json']) unless header_params['Accept']
+      header_params[:'X-Temper-Surface'] = opts[:'x_temper_surface'] if !opts[:'x_temper_surface'].nil?
+
+      # form parameters
+      form_params = opts[:form_params] || {}
+
+      # http body (model)
+      post_body = opts[:debug_body]
+
+      # return_type
+      return_type = opts[:debug_return_type] || 'MachineClient'
+
+      # auth_names
+      auth_names = opts[:debug_auth_names] || ['bearer_auth']
+
+      new_options = opts.merge(
+        :operation => :"MachineClientsApi.revoke_machine_client",
+        :header_params => header_params,
+        :query_params => query_params,
+        :form_params => form_params,
+        :body => post_body,
+        :auth_names => auth_names,
+        :return_type => return_type
+      )
+
+      data, status_code, headers = @api_client.call_api(:DELETE, local_var_path, new_options)
+      if @api_client.config.debugging
+        @api_client.config.logger.debug "API called: MachineClientsApi#revoke_machine_client\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+      end
+      return data, status_code, headers
+    end
+
+    # Rotate a machine client secret
+    # Installs a fresh secret for a temper-issued machine client. The previous secret stays valid for `grace_seconds` (0 to 604800). The new `client_secret` in the response is shown once and never stored. Requires a system admin or the owner of the machine's owning team. Any other caller with system access is answered 404, exactly as for an id that does not exist.
+    # @param id [String] Machine client ID
+    # @param rotate_secret_request [RotateSecretRequest] 
+    # @param [Hash] opts the optional parameters
+    # @option opts [String] :x_temper_surface The calling surface, for event-ledger attribution. Accepted values are &#x60;cli&#x60; and &#x60;sdk&#x60;; an absent or unrecognized value attributes the write to &#x60;web&#x60;. This is provenance, never authorization — an unrecognized value degrades, it never rejects.
+    # @return [IssuedMachineCredential]
+    def rotate_machine_client_secret(id, rotate_secret_request, opts = {})
+      data, _status_code, _headers = rotate_machine_client_secret_with_http_info(id, rotate_secret_request, opts)
+      data
+    end
+
+    # Rotate a machine client secret
+    # Installs a fresh secret for a temper-issued machine client. The previous secret stays valid for &#x60;grace_seconds&#x60; (0 to 604800). The new &#x60;client_secret&#x60; in the response is shown once and never stored. Requires a system admin or the owner of the machine&#39;s owning team. Any other caller with system access is answered 404, exactly as for an id that does not exist.
+    # @param id [String] Machine client ID
+    # @param rotate_secret_request [RotateSecretRequest] 
+    # @param [Hash] opts the optional parameters
+    # @option opts [String] :x_temper_surface The calling surface, for event-ledger attribution. Accepted values are &#x60;cli&#x60; and &#x60;sdk&#x60;; an absent or unrecognized value attributes the write to &#x60;web&#x60;. This is provenance, never authorization — an unrecognized value degrades, it never rejects.
+    # @return [Array<(IssuedMachineCredential, Integer, Hash)>] IssuedMachineCredential data, response status code and response headers
+    def rotate_machine_client_secret_with_http_info(id, rotate_secret_request, opts = {})
+      if @api_client.config.debugging
+        @api_client.config.logger.debug 'Calling API: MachineClientsApi.rotate_machine_client_secret ...'
+      end
+      # verify the required parameter 'id' is set
+      if @api_client.config.client_side_validation && id.nil?
+        fail ArgumentError, "Missing the required parameter 'id' when calling MachineClientsApi.rotate_machine_client_secret"
+      end
+      # verify the required parameter 'rotate_secret_request' is set
+      if @api_client.config.client_side_validation && rotate_secret_request.nil?
+        fail ArgumentError, "Missing the required parameter 'rotate_secret_request' when calling MachineClientsApi.rotate_machine_client_secret"
+      end
+      allowable_values = ["cli", "sdk"]
+      if @api_client.config.client_side_validation && opts[:'x_temper_surface'] && !allowable_values.include?(opts[:'x_temper_surface'])
+        fail ArgumentError, "invalid value for \"x_temper_surface\", must be one of #{allowable_values}"
+      end
+      # resource path
+      local_var_path = '/api/machine-clients/{id}/rotate-secret'.sub('{id}', CGI.escape(id.to_s))
+
+      # query parameters
+      query_params = opts[:query_params] || {}
+
+      # header parameters
+      header_params = opts[:header_params] || {}
+      # HTTP header 'Accept' (if needed)
+      header_params['Accept'] = @api_client.select_header_accept(['application/json']) unless header_params['Accept']
+      # HTTP header 'Content-Type'
+      content_type = @api_client.select_header_content_type(['application/json'])
+      if !content_type.nil?
+          header_params['Content-Type'] = content_type
+      end
+      header_params[:'X-Temper-Surface'] = opts[:'x_temper_surface'] if !opts[:'x_temper_surface'].nil?
+
+      # form parameters
+      form_params = opts[:form_params] || {}
+
+      # http body (model)
+      post_body = opts[:debug_body] || @api_client.object_to_http_body(rotate_secret_request)
+
+      # return_type
+      return_type = opts[:debug_return_type] || 'IssuedMachineCredential'
+
+      # auth_names
+      auth_names = opts[:debug_auth_names] || ['bearer_auth']
+
+      new_options = opts.merge(
+        :operation => :"MachineClientsApi.rotate_machine_client_secret",
+        :header_params => header_params,
+        :query_params => query_params,
+        :form_params => form_params,
+        :body => post_body,
+        :auth_names => auth_names,
+        :return_type => return_type
+      )
+
+      data, status_code, headers = @api_client.call_api(:POST, local_var_path, new_options)
+      if @api_client.config.debugging
+        @api_client.config.logger.debug "API called: MachineClientsApi#rotate_machine_client_secret\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+      end
+      return data, status_code, headers
+    end
+  end
+end

data/lib/temper/generated/api/meta_api.rb

@@ -3,7 +3,7 @@
 
 #Knowledge base management API for temper cloud
 
-The version of the OpenAPI document: 0.5.4
+The version of the OpenAPI document: 0.6.0
 
 Generated by: https://openapi-generator.tech
 Generator version: 7.23.0

data/lib/temper/generated/api/profile_api.rb

@@ -3,7 +3,7 @@
 
 #Knowledge base management API for temper cloud
 
-The version of the OpenAPI document: 0.5.4
+The version of the OpenAPI document: 0.6.0
 
 Generated by: https://openapi-generator.tech
 Generator version: 7.23.0

data/lib/temper/generated/api/query_api.rb

@@ -3,7 +3,7 @@
 
 #Knowledge base management API for temper cloud
 
-The version of the OpenAPI document: 0.5.4
+The version of the OpenAPI document: 0.6.0
 
 Generated by: https://openapi-generator.tech
 Generator version: 7.23.0

data/lib/temper/generated/api/reblocking_api.rb

@@ -3,7 +3,7 @@
 
 #Knowledge base management API for temper cloud
 
-The version of the OpenAPI document: 0.5.4
+The version of the OpenAPI document: 0.6.0
 
 Generated by: https://openapi-generator.tech
 Generator version: 7.23.0

data/lib/temper/generated/api/relationships_api.rb

@@ -3,7 +3,7 @@
 
 #Knowledge base management API for temper cloud
 
-The version of the OpenAPI document: 0.5.4
+The version of the OpenAPI document: 0.6.0
 
 Generated by: https://openapi-generator.tech
 Generator version: 7.23.0

data/lib/temper/generated/api/resources_api.rb

@@ -3,7 +3,7 @@
 
 #Knowledge base management API for temper cloud
 
-The version of the OpenAPI document: 0.5.4
+The version of the OpenAPI document: 0.6.0
 
 Generated by: https://openapi-generator.tech
 Generator version: 7.23.0
@@ -176,11 +176,11 @@ module Temper::Generated
     # @param [Hash] opts the optional parameters
     # @option opts [String] :invocation_id The invocation this act is correlated under (`kb_events.invocation_id`). Optional — a correlation aid, never a substitute for authn/authz.
     # @option opts [String] :correlation_id The act-grain thread this write belongs to (`kb_events.correlation_id`). Optional, caller- minted, provenance-only. Rides independently of `invocation_id` and of authorship.
-    # @option opts [String] :reasoning Free-text reasoning for the act. Authorship field — requires `confidence`.
+    # @option opts [String] :reasoning Free-text reasoning for the act. Authorship field — requires `confidence`. At most 16384 bytes.
     # @option opts [ConfidenceBand] :confidence Graded self-assessed confidence band. Required whenever any other authorship field is set.
-    # @option opts [String] :rationale Structured rationale for the act. Authorship field — requires `confidence`.
-    # @option opts [String] :persona The persona/role the author acted as. Authorship field — requires `confidence`.
-    # @option opts [String] :model The model that authored the act. Authorship field — requires `confidence`.
+    # @option opts [String] :rationale Structured rationale for the act. Authorship field — requires `confidence`. At most 16384 bytes.
+    # @option opts [String] :persona The persona/role the author acted as. Authorship field — requires `confidence`. At most 256 bytes.
+    # @option opts [String] :model The model that authored the act. Authorship field — requires `confidence`. At most 256 bytes.
     # @option opts [String] :x_temper_surface The calling surface, for event-ledger attribution. Accepted values are `cli` and `sdk`; an absent or unrecognized value attributes the write to `web`. This is provenance, never authorization — an unrecognized value degrades, it never rejects.
     # @return [DeleteResponse]
     def delete_resource(id, opts = {})
@@ -193,11 +193,11 @@ module Temper::Generated
     # @param [Hash] opts the optional parameters
     # @option opts [String] :invocation_id The invocation this act is correlated under (`kb_events.invocation_id`). Optional — a correlation aid, never a substitute for authn/authz.
     # @option opts [String] :correlation_id The act-grain thread this write belongs to (`kb_events.correlation_id`). Optional, caller- minted, provenance-only. Rides independently of `invocation_id` and of authorship.
-    # @option opts [String] :reasoning Free-text reasoning for the act. Authorship field — requires `confidence`.
+    # @option opts [String] :reasoning Free-text reasoning for the act. Authorship field — requires `confidence`. At most 16384 bytes.
     # @option opts [ConfidenceBand] :confidence Graded self-assessed confidence band. Required whenever any other authorship field is set.
-    # @option opts [String] :rationale Structured rationale for the act. Authorship field — requires `confidence`.
-    # @option opts [String] :persona The persona/role the author acted as. Authorship field — requires `confidence`.
-    # @option opts [String] :model The model that authored the act. Authorship field — requires `confidence`.
+    # @option opts [String] :rationale Structured rationale for the act. Authorship field — requires `confidence`. At most 16384 bytes.
+    # @option opts [String] :persona The persona/role the author acted as. Authorship field — requires `confidence`. At most 256 bytes.
+    # @option opts [String] :model The model that authored the act. Authorship field — requires `confidence`. At most 256 bytes.
     # @option opts [String] :x_temper_surface The calling surface, for event-ledger attribution. Accepted values are `cli` and `sdk`; an absent or unrecognized value attributes the write to `web`. This is provenance, never authorization — an unrecognized value degrades, it never rejects.
     # @return [Array<(DeleteResponse, Integer, Hash)>] DeleteResponse data, response status code and response headers
     def delete_resource_with_http_info(id, opts = {})
@@ -870,7 +870,7 @@ module Temper::Generated
     end
 
     # Read one content block by address (the three-state resolution)
-    # The defined-dangling-state design: `200` the block is live (identity, chunk identities, provenance), `410 Gone` the block is folded (the envelope carries its attribution history and its gated successor dispositions), `404` absent. No redirect — successor names ride as data inside the gated envelope, never as a Location the caller may not be authorized to follow.
+    # The defined-dangling-state design: `200` the block is live (identity, chunk identities, provenance), `410 Gone` the block is folded (the envelope carries its attribution history and its gated successor dispositions), `404` absent. A home resource that was erased answers `410` under the error envelope (`RESOURCE_ERASED`) to a caller who held it, and `404` to everyone else. No redirect — successor names ride as data inside the gated envelope, never as a Location the caller may not be authorized to follow.
     # @param id [String] Resource ID
     # @param block_id [String] Content block ID
     # @param [Hash] opts the optional parameters
@@ -882,7 +882,7 @@ module Temper::Generated
     end
 
     # Read one content block by address (the three-state resolution)
-    # The defined-dangling-state design: &#x60;200&#x60; the block is live (identity, chunk identities, provenance), &#x60;410 Gone&#x60; the block is folded (the envelope carries its attribution history and its gated successor dispositions), &#x60;404&#x60; absent. No redirect — successor names ride as data inside the gated envelope, never as a Location the caller may not be authorized to follow.
+    # The defined-dangling-state design: &#x60;200&#x60; the block is live (identity, chunk identities, provenance), &#x60;410 Gone&#x60; the block is folded (the envelope carries its attribution history and its gated successor dispositions), &#x60;404&#x60; absent. A home resource that was erased answers &#x60;410&#x60; under the error envelope (&#x60;RESOURCE_ERASED&#x60;) to a caller who held it, and &#x60;404&#x60; to everyone else. No redirect — successor names ride as data inside the gated envelope, never as a Location the caller may not be authorized to follow.
     # @param id [String] Resource ID
     # @param block_id [String] Content block ID
     # @param [Hash] opts the optional parameters

data/lib/temper/generated/api/schema_api.rb

@@ -3,7 +3,7 @@
 
 #Knowledge base management API for temper cloud
 
-The version of the OpenAPI document: 0.5.4
+The version of the OpenAPI document: 0.6.0
 
 Generated by: https://openapi-generator.tech
 Generator version: 7.23.0

data/lib/temper/generated/api/search_api.rb

@@ -3,7 +3,7 @@
 
 #Knowledge base management API for temper cloud
 
-The version of the OpenAPI document: 0.5.4
+The version of the OpenAPI document: 0.6.0
 
 Generated by: https://openapi-generator.tech
 Generator version: 7.23.0

data/lib/temper/generated/api/slack_link_api.rb

@@ -3,7 +3,7 @@
 
 #Knowledge base management API for temper cloud
 
-The version of the OpenAPI document: 0.5.4
+The version of the OpenAPI document: 0.6.0
 
 Generated by: https://openapi-generator.tech
 Generator version: 7.23.0

data/lib/temper/generated/api/steward_api.rb

@@ -3,7 +3,7 @@
 
 #Knowledge base management API for temper cloud
 
-The version of the OpenAPI document: 0.5.4
+The version of the OpenAPI document: 0.6.0
 
 Generated by: https://openapi-generator.tech
 Generator version: 7.23.0