temper-rb 0.5.4 → 0.6.1

data/lib/temper/generated/api/graph_api.rb

@@ -3,7 +3,7 @@
 
 #Knowledge base management API for temper cloud
 
-The version of the OpenAPI document: 0.5.4
+The version of the OpenAPI document: 0.6.1
 
 Generated by: https://openapi-generator.tech
 Generator version: 7.23.0
@@ -115,7 +115,7 @@ module Temper::Generated
         fail ArgumentError, "invalid value for \"x_temper_surface\", must be one of #{allowable_values}"
       end
       # resource path
-      local_var_path = '/api/cogmaps/{id}/graph/slice'.sub('{id}', CGI.escape(id.to_s))
+      local_var_path = '/api/cogmaps/{id}/graph/slice'.sub('{id}', CGI.escape(id.to_s).gsub('.', '%2E'))
 
       # query parameters
       query_params = opts[:query_params] || {}
@@ -190,7 +190,7 @@ module Temper::Generated
         fail ArgumentError, "invalid value for \"x_temper_surface\", must be one of #{allowable_values}"
       end
       # resource path
-      local_var_path = '/api/graph/cogmaps/{id}/panorama'.sub('{id}', CGI.escape(id.to_s))
+      local_var_path = '/api/graph/cogmaps/{id}/panorama'.sub('{id}', CGI.escape(id.to_s).gsub('.', '%2E'))
 
       # query parameters
       query_params = opts[:query_params] || {}

data/lib/temper/generated/api/health_api.rb

@@ -3,7 +3,7 @@
 
 #Knowledge base management API for temper cloud
 
-The version of the OpenAPI document: 0.5.4
+The version of the OpenAPI document: 0.6.1
 
 Generated by: https://openapi-generator.tech
 Generator version: 7.23.0

data/lib/temper/generated/api/ingest_api.rb

@@ -3,7 +3,7 @@
 
 #Knowledge base management API for temper cloud
 
-The version of the OpenAPI document: 0.5.4
+The version of the OpenAPI document: 0.6.1
 
 Generated by: https://openapi-generator.tech
 Generator version: 7.23.0
@@ -53,7 +53,7 @@ module Temper::Generated
         fail ArgumentError, "invalid value for \"x_temper_surface\", must be one of #{allowable_values}"
       end
       # resource path
-      local_var_path = '/api/resources/{id}/blocks'.sub('{id}', CGI.escape(id.to_s))
+      local_var_path = '/api/resources/{id}/blocks'.sub('{id}', CGI.escape(id.to_s).gsub('.', '%2E'))
 
       # query parameters
       query_params = opts[:query_params] || {}
@@ -205,13 +205,15 @@ module Temper::Generated
         fail ArgumentError, "invalid value for \"x_temper_surface\", must be one of #{allowable_values}"
       end
       # resource path
-      local_var_path = '/api/resources/{id}/finalize'.sub('{id}', CGI.escape(id.to_s))
+      local_var_path = '/api/resources/{id}/finalize'.sub('{id}', CGI.escape(id.to_s).gsub('.', '%2E'))
 
       # query parameters
       query_params = opts[:query_params] || {}
 
       # header parameters
       header_params = opts[:header_params] || {}
+      # HTTP header 'Accept' (if needed)
+      header_params['Accept'] = @api_client.select_header_accept(['application/json']) unless header_params['Accept']
       # HTTP header 'Content-Type'
       content_type = @api_client.select_header_content_type(['application/json'])
       if !content_type.nil?
@@ -276,7 +278,7 @@ module Temper::Generated
         fail ArgumentError, "invalid value for \"x_temper_surface\", must be one of #{allowable_values}"
       end
       # resource path
-      local_var_path = '/api/resources/{id}/blocks'.sub('{id}', CGI.escape(id.to_s))
+      local_var_path = '/api/resources/{id}/blocks'.sub('{id}', CGI.escape(id.to_s).gsub('.', '%2E'))
 
       # query parameters
       query_params = opts[:query_params] || {}
@@ -350,7 +352,7 @@ module Temper::Generated
         fail ArgumentError, "invalid value for \"x_temper_surface\", must be one of #{allowable_values}"
       end
       # resource path
-      local_var_path = '/api/ingest/{id}'.sub('{id}', CGI.escape(id.to_s))
+      local_var_path = '/api/ingest/{id}'.sub('{id}', CGI.escape(id.to_s).gsub('.', '%2E'))
 
       # query parameters
       query_params = opts[:query_params] || {}

data/lib/temper/generated/api/invitations_api.rb

@@ -3,7 +3,7 @@
 
 #Knowledge base management API for temper cloud
 
-The version of the OpenAPI document: 0.5.4
+The version of the OpenAPI document: 0.6.1
 
 Generated by: https://openapi-generator.tech
 Generator version: 7.23.0
@@ -93,7 +93,7 @@ module Temper::Generated
     end
 
     # Count the invitations addressed to you
-    # The counting half of `list_mine`, for callers that want the number and not the rows — principally `temper warmup`, which runs at every session start. Its sibling returns each invitation's redemption `token`; this returns an integer, so no bearer capability moves across the wire to answer \"how many?\".  `team_slug` folds a second question into the same round trip: *of those, how many are to this team?* Absent parameter, absent answer — `matching` is `null`, not `0`.
+    # The counting half of `list_mine`, for callers that want the number and not the rows — principally `temper warmup`, which runs at every session start. Its sibling returns each invitation's redemption `token`; this returns an integer, so no redemption token moves across the wire to answer \"how many?\".  `team_slug` folds a second question into the same round trip: *of those, how many are to this team?* Absent parameter, absent answer — `matching` is `null`, not `0`.
     # @param [Hash] opts the optional parameters
     # @option opts [String] :team_slug Restrict the `matching` half of the answer to invitations to this team.
     # @option opts [String] :x_temper_surface The calling surface, for event-ledger attribution. Accepted values are `cli` and `sdk`; an absent or unrecognized value attributes the write to `web`. This is provenance, never authorization — an unrecognized value degrades, it never rejects.
@@ -104,7 +104,7 @@ module Temper::Generated
     end
 
     # Count the invitations addressed to you
-    # The counting half of `list_mine`, for callers that want the number and not the rows — principally `temper warmup`, which runs at every session start. Its sibling returns each invitation's redemption `token`; this returns an integer, so no bearer capability moves across the wire to answer \"how many?\".  `team_slug` folds a second question into the same round trip: *of those, how many are to this team?* Absent parameter, absent answer — `matching` is `null`, not `0`.
+    # The counting half of `list_mine`, for callers that want the number and not the rows — principally `temper warmup`, which runs at every session start. Its sibling returns each invitation's redemption `token`; this returns an integer, so no redemption token moves across the wire to answer \"how many?\".  `team_slug` folds a second question into the same round trip: *of those, how many are to this team?* Absent parameter, absent answer — `matching` is `null`, not `0`.
     # @param [Hash] opts the optional parameters
     # @option opts [String] :team_slug Restrict the `matching` half of the answer to invitations to this team.
     # @option opts [String] :x_temper_surface The calling surface, for event-ledger attribution. Accepted values are `cli` and `sdk`; an absent or unrecognized value attributes the write to `web`. This is provenance, never authorization — an unrecognized value degrades, it never rejects.
@@ -193,7 +193,7 @@ module Temper::Generated
         fail ArgumentError, "invalid value for \"x_temper_surface\", must be one of #{allowable_values}"
       end
       # resource path
-      local_var_path = '/api/teams/{id}/invite'.sub('{id}', CGI.escape(id.to_s))
+      local_var_path = '/api/teams/{id}/invite'.sub('{id}', CGI.escape(id.to_s).gsub('.', '%2E'))
 
       # query parameters
       query_params = opts[:query_params] || {}
@@ -273,6 +273,8 @@ module Temper::Generated
 
       # header parameters
       header_params = opts[:header_params] || {}
+      # HTTP header 'Accept' (if needed)
+      header_params['Accept'] = @api_client.select_header_accept(['application/json']) unless header_params['Accept']
       # HTTP header 'Content-Type'
       content_type = @api_client.select_header_content_type(['application/json'])
       if !content_type.nil?
@@ -399,7 +401,7 @@ module Temper::Generated
         fail ArgumentError, "invalid value for \"x_temper_surface\", must be one of #{allowable_values}"
       end
       # resource path
-      local_var_path = '/api/teams/{id}/invitations'.sub('{id}', CGI.escape(id.to_s))
+      local_var_path = '/api/teams/{id}/invitations'.sub('{id}', CGI.escape(id.to_s).gsub('.', '%2E'))
 
       # query parameters
       query_params = opts[:query_params] || {}
@@ -473,13 +475,15 @@ module Temper::Generated
         fail ArgumentError, "invalid value for \"x_temper_surface\", must be one of #{allowable_values}"
       end
       # resource path
-      local_var_path = '/api/teams/{id}/invitations/{invitation_id}'.sub('{id}', CGI.escape(id.to_s)).sub('{invitation_id}', CGI.escape(invitation_id.to_s))
+      local_var_path = '/api/teams/{id}/invitations/{invitation_id}'.sub('{id}', CGI.escape(id.to_s).gsub('.', '%2E')).sub('{invitation_id}', CGI.escape(invitation_id.to_s).gsub('.', '%2E'))
 
       # query parameters
       query_params = opts[:query_params] || {}
 
       # header parameters
       header_params = opts[:header_params] || {}
+      # HTTP header 'Accept' (if needed)
+      header_params['Accept'] = @api_client.select_header_accept(['application/json']) unless header_params['Accept']
       header_params[:'X-Temper-Surface'] = opts[:'x_temper_surface'] if !opts[:'x_temper_surface'].nil?
 
       # form parameters

data/lib/temper/generated/api/invocations_api.rb

@@ -3,7 +3,7 @@
 
 #Knowledge base management API for temper cloud
 
-The version of the OpenAPI document: 0.5.4
+The version of the OpenAPI document: 0.6.1
 
 Generated by: https://openapi-generator.tech
 Generator version: 7.23.0
@@ -53,7 +53,7 @@ module Temper::Generated
         fail ArgumentError, "invalid value for \"x_temper_surface\", must be one of #{allowable_values}"
       end
       # resource path
-      local_var_path = '/api/invocations/{id}/close'.sub('{id}', CGI.escape(id.to_s))
+      local_var_path = '/api/invocations/{id}/close'.sub('{id}', CGI.escape(id.to_s).gsub('.', '%2E'))
 
       # query parameters
       query_params = opts[:query_params] || {}
@@ -265,7 +265,7 @@ module Temper::Generated
         fail ArgumentError, "invalid value for \"x_temper_surface\", must be one of #{allowable_values}"
       end
       # resource path
-      local_var_path = '/api/invocations/{id}'.sub('{id}', CGI.escape(id.to_s))
+      local_var_path = '/api/invocations/{id}'.sub('{id}', CGI.escape(id.to_s).gsub('.', '%2E'))
 
       # query parameters
       query_params = opts[:query_params] || {}

data/lib/temper/generated/api/machine_clients_api.rb

@@ -0,0 +1,460 @@
+=begin
+#Temper Cloud API
+
+#Knowledge base management API for temper cloud
+
+The version of the OpenAPI document: 0.6.1
+
+Generated by: https://openapi-generator.tech
+Generator version: 7.23.0
+
+=end
+
+require 'cgi'
+
+module Temper::Generated
+  class MachineClientsApi
+    attr_accessor :api_client
+
+    def initialize(api_client = ApiClient.default)
+      @api_client = api_client
+    end
+    # Get a machine client
+    # Returns one machine client. Requires a system admin or the owner of the machine's owning team. Any other caller with system access is answered 404, exactly as for an id that does not exist.
+    # @param id [String] Machine client ID
+    # @param [Hash] opts the optional parameters
+    # @option opts [String] :x_temper_surface The calling surface, for event-ledger attribution. Accepted values are `cli` and `sdk`; an absent or unrecognized value attributes the write to `web`. This is provenance, never authorization — an unrecognized value degrades, it never rejects.
+    # @return [MachineClient]
+    def get_machine_client(id, opts = {})
+      data, _status_code, _headers = get_machine_client_with_http_info(id, opts)
+      data
+    end
+
+    # Get a machine client
+    # Returns one machine client. Requires a system admin or the owner of the machine's owning team. Any other caller with system access is answered 404, exactly as for an id that does not exist.
+    # @param id [String] Machine client ID
+    # @param [Hash] opts the optional parameters
+    # @option opts [String] :x_temper_surface The calling surface, for event-ledger attribution. Accepted values are `cli` and `sdk`; an absent or unrecognized value attributes the write to `web`. This is provenance, never authorization — an unrecognized value degrades, it never rejects.
+    # @return [Array<(MachineClient, Integer, Hash)>] MachineClient data, response status code and response headers
+    def get_machine_client_with_http_info(id, opts = {})
+      if @api_client.config.debugging
+        @api_client.config.logger.debug 'Calling API: MachineClientsApi.get_machine_client ...'
+      end
+      # verify the required parameter 'id' is set
+      if @api_client.config.client_side_validation && id.nil?
+        fail ArgumentError, "Missing the required parameter 'id' when calling MachineClientsApi.get_machine_client"
+      end
+      allowable_values = ["cli", "sdk"]
+      if @api_client.config.client_side_validation && opts[:'x_temper_surface'] && !allowable_values.include?(opts[:'x_temper_surface'])
+        fail ArgumentError, "invalid value for \"x_temper_surface\", must be one of #{allowable_values}"
+      end
+      # resource path
+      local_var_path = '/api/machine-clients/{id}'.sub('{id}', CGI.escape(id.to_s).gsub('.', '%2E'))
+
+      # query parameters
+      query_params = opts[:query_params] || {}
+
+      # header parameters
+      header_params = opts[:header_params] || {}
+      # HTTP header 'Accept' (if needed)
+      header_params['Accept'] = @api_client.select_header_accept(['application/json']) unless header_params['Accept']
+      header_params[:'X-Temper-Surface'] = opts[:'x_temper_surface'] if !opts[:'x_temper_surface'].nil?
+
+      # form parameters
+      form_params = opts[:form_params] || {}
+
+      # http body (model)
+      post_body = opts[:debug_body]
+
+      # return_type
+      return_type = opts[:debug_return_type] || 'MachineClient'
+
+      # auth_names
+      auth_names = opts[:debug_auth_names] || ['bearer_auth']
+
+      new_options = opts.merge(
+        :operation => :"MachineClientsApi.get_machine_client",
+        :header_params => header_params,
+        :query_params => query_params,
+        :form_params => form_params,
+        :body => post_body,
+        :auth_names => auth_names,
+        :return_type => return_type
+      )
+
+      data, status_code, headers = @api_client.call_api(:GET, local_var_path, new_options)
+      if @api_client.config.debugging
+        @api_client.config.logger.debug "API called: MachineClientsApi#get_machine_client\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+      end
+      return data, status_code, headers
+    end
+
+    # Issue a machine credential
+    # Mints a new machine principal with a temper-issued `client_id` and secret. The `client_secret` in the response is shown once and never stored; only its hash is kept, so it cannot be retrieved later. Requires a system admin or the owner of `owner_team_id`; a machine with no owning team can only be issued by a system admin. A team owner can confer only reach they could grant themselves, and no caller can give a machine a team role above `member`. Where an external identity provider mints this instance's tokens, the credential is returned with `dormant: true`: it authenticates once the instance runs temper's own authorization server.
+    # @param issue_machine_request [IssueMachineRequest] 
+    # @param [Hash] opts the optional parameters
+    # @option opts [String] :x_temper_surface The calling surface, for event-ledger attribution. Accepted values are &#x60;cli&#x60; and &#x60;sdk&#x60;; an absent or unrecognized value attributes the write to &#x60;web&#x60;. This is provenance, never authorization — an unrecognized value degrades, it never rejects.
+    # @return [IssuedMachineCredential]
+    def issue_machine_credential(issue_machine_request, opts = {})
+      data, _status_code, _headers = issue_machine_credential_with_http_info(issue_machine_request, opts)
+      data
+    end
+
+    # Issue a machine credential
+    # Mints a new machine principal with a temper-issued &#x60;client_id&#x60; and secret. The &#x60;client_secret&#x60; in the response is shown once and never stored; only its hash is kept, so it cannot be retrieved later. Requires a system admin or the owner of &#x60;owner_team_id&#x60;; a machine with no owning team can only be issued by a system admin. A team owner can confer only reach they could grant themselves, and no caller can give a machine a team role above &#x60;member&#x60;. Where an external identity provider mints this instance&#39;s tokens, the credential is returned with &#x60;dormant: true&#x60;: it authenticates once the instance runs temper&#39;s own authorization server.
+    # @param issue_machine_request [IssueMachineRequest] 
+    # @param [Hash] opts the optional parameters
+    # @option opts [String] :x_temper_surface The calling surface, for event-ledger attribution. Accepted values are &#x60;cli&#x60; and &#x60;sdk&#x60;; an absent or unrecognized value attributes the write to &#x60;web&#x60;. This is provenance, never authorization — an unrecognized value degrades, it never rejects.
+    # @return [Array<(IssuedMachineCredential, Integer, Hash)>] IssuedMachineCredential data, response status code and response headers
+    def issue_machine_credential_with_http_info(issue_machine_request, opts = {})
+      if @api_client.config.debugging
+        @api_client.config.logger.debug 'Calling API: MachineClientsApi.issue_machine_credential ...'
+      end
+      # verify the required parameter 'issue_machine_request' is set
+      if @api_client.config.client_side_validation && issue_machine_request.nil?
+        fail ArgumentError, "Missing the required parameter 'issue_machine_request' when calling MachineClientsApi.issue_machine_credential"
+      end
+      allowable_values = ["cli", "sdk"]
+      if @api_client.config.client_side_validation && opts[:'x_temper_surface'] && !allowable_values.include?(opts[:'x_temper_surface'])
+        fail ArgumentError, "invalid value for \"x_temper_surface\", must be one of #{allowable_values}"
+      end
+      # resource path
+      local_var_path = '/api/machine-clients/issue'
+
+      # query parameters
+      query_params = opts[:query_params] || {}
+
+      # header parameters
+      header_params = opts[:header_params] || {}
+      # HTTP header 'Accept' (if needed)
+      header_params['Accept'] = @api_client.select_header_accept(['application/json']) unless header_params['Accept']
+      # HTTP header 'Content-Type'
+      content_type = @api_client.select_header_content_type(['application/json'])
+      if !content_type.nil?
+          header_params['Content-Type'] = content_type
+      end
+      header_params[:'X-Temper-Surface'] = opts[:'x_temper_surface'] if !opts[:'x_temper_surface'].nil?
+
+      # form parameters
+      form_params = opts[:form_params] || {}
+
+      # http body (model)
+      post_body = opts[:debug_body] || @api_client.object_to_http_body(issue_machine_request)
+
+      # return_type
+      return_type = opts[:debug_return_type] || 'IssuedMachineCredential'
+
+      # auth_names
+      auth_names = opts[:debug_auth_names] || ['bearer_auth']
+
+      new_options = opts.merge(
+        :operation => :"MachineClientsApi.issue_machine_credential",
+        :header_params => header_params,
+        :query_params => query_params,
+        :form_params => form_params,
+        :body => post_body,
+        :auth_names => auth_names,
+        :return_type => return_type
+      )
+
+      data, status_code, headers = @api_client.call_api(:POST, local_var_path, new_options)
+      if @api_client.config.debugging
+        @api_client.config.logger.debug "API called: MachineClientsApi#issue_machine_credential\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+      end
+      return data, status_code, headers
+    end
+
+    # List machine clients
+    # Lists the machine clients the caller may manage, newest first. A system admin sees every machine client; any other caller sees only those owned by a team they own. Revoked clients are omitted unless `include_revoked` is set.
+    # @param [Hash] opts the optional parameters
+    # @option opts [Boolean] :include_revoked Include revoked machine clients. Default &#x60;false&#x60;.
+    # @option opts [String] :x_temper_surface The calling surface, for event-ledger attribution. Accepted values are &#x60;cli&#x60; and &#x60;sdk&#x60;; an absent or unrecognized value attributes the write to &#x60;web&#x60;. This is provenance, never authorization — an unrecognized value degrades, it never rejects.
+    # @return [Array<MachineClient>]
+    def list_machine_clients(opts = {})
+      data, _status_code, _headers = list_machine_clients_with_http_info(opts)
+      data
+    end
+
+    # List machine clients
+    # Lists the machine clients the caller may manage, newest first. A system admin sees every machine client; any other caller sees only those owned by a team they own. Revoked clients are omitted unless &#x60;include_revoked&#x60; is set.
+    # @param [Hash] opts the optional parameters
+    # @option opts [Boolean] :include_revoked Include revoked machine clients. Default &#x60;false&#x60;.
+    # @option opts [String] :x_temper_surface The calling surface, for event-ledger attribution. Accepted values are &#x60;cli&#x60; and &#x60;sdk&#x60;; an absent or unrecognized value attributes the write to &#x60;web&#x60;. This is provenance, never authorization — an unrecognized value degrades, it never rejects.
+    # @return [Array<(Array<MachineClient>, Integer, Hash)>] Array<MachineClient> data, response status code and response headers
+    def list_machine_clients_with_http_info(opts = {})
+      if @api_client.config.debugging
+        @api_client.config.logger.debug 'Calling API: MachineClientsApi.list_machine_clients ...'
+      end
+      allowable_values = ["cli", "sdk"]
+      if @api_client.config.client_side_validation && opts[:'x_temper_surface'] && !allowable_values.include?(opts[:'x_temper_surface'])
+        fail ArgumentError, "invalid value for \"x_temper_surface\", must be one of #{allowable_values}"
+      end
+      # resource path
+      local_var_path = '/api/machine-clients'
+
+      # query parameters
+      query_params = opts[:query_params] || {}
+      query_params[:'include_revoked'] = opts[:'include_revoked'] if !opts[:'include_revoked'].nil?
+
+      # header parameters
+      header_params = opts[:header_params] || {}
+      # HTTP header 'Accept' (if needed)
+      header_params['Accept'] = @api_client.select_header_accept(['application/json']) unless header_params['Accept']
+      header_params[:'X-Temper-Surface'] = opts[:'x_temper_surface'] if !opts[:'x_temper_surface'].nil?
+
+      # form parameters
+      form_params = opts[:form_params] || {}
+
+      # http body (model)
+      post_body = opts[:debug_body]
+
+      # return_type
+      return_type = opts[:debug_return_type] || 'Array<MachineClient>'
+
+      # auth_names
+      auth_names = opts[:debug_auth_names] || ['bearer_auth']
+
+      new_options = opts.merge(
+        :operation => :"MachineClientsApi.list_machine_clients",
+        :header_params => header_params,
+        :query_params => query_params,
+        :form_params => form_params,
+        :body => post_body,
+        :auth_names => auth_names,
+        :return_type => return_type
+      )
+
+      data, status_code, headers = @api_client.call_api(:GET, local_var_path, new_options)
+      if @api_client.config.debugging
+        @api_client.config.logger.debug "API called: MachineClientsApi#list_machine_clients\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+      end
+      return data, status_code, headers
+    end
+
+    # Register a machine client
+    # Registers an externally issued IdP `client_id` as a machine principal and creates its agent profile, enrolling it in the listed teams and cogmap grants. Requires a system admin. An instance that runs temper's own authorization server refuses it, because an externally issued client id could never authenticate there; issue a credential instead. No caller can give a machine a team role above `member`.
+    # @param provision_machine_request [ProvisionMachineRequest] 
+    # @param [Hash] opts the optional parameters
+    # @option opts [String] :x_temper_surface The calling surface, for event-ledger attribution. Accepted values are &#x60;cli&#x60; and &#x60;sdk&#x60;; an absent or unrecognized value attributes the write to &#x60;web&#x60;. This is provenance, never authorization — an unrecognized value degrades, it never rejects.
+    # @return [MachineClient]
+    def provision_machine_client(provision_machine_request, opts = {})
+      data, _status_code, _headers = provision_machine_client_with_http_info(provision_machine_request, opts)
+      data
+    end
+
+    # Register a machine client
+    # Registers an externally issued IdP &#x60;client_id&#x60; as a machine principal and creates its agent profile, enrolling it in the listed teams and cogmap grants. Requires a system admin. An instance that runs temper&#39;s own authorization server refuses it, because an externally issued client id could never authenticate there; issue a credential instead. No caller can give a machine a team role above &#x60;member&#x60;.
+    # @param provision_machine_request [ProvisionMachineRequest] 
+    # @param [Hash] opts the optional parameters
+    # @option opts [String] :x_temper_surface The calling surface, for event-ledger attribution. Accepted values are &#x60;cli&#x60; and &#x60;sdk&#x60;; an absent or unrecognized value attributes the write to &#x60;web&#x60;. This is provenance, never authorization — an unrecognized value degrades, it never rejects.
+    # @return [Array<(MachineClient, Integer, Hash)>] MachineClient data, response status code and response headers
+    def provision_machine_client_with_http_info(provision_machine_request, opts = {})
+      if @api_client.config.debugging
+        @api_client.config.logger.debug 'Calling API: MachineClientsApi.provision_machine_client ...'
+      end
+      # verify the required parameter 'provision_machine_request' is set
+      if @api_client.config.client_side_validation && provision_machine_request.nil?
+        fail ArgumentError, "Missing the required parameter 'provision_machine_request' when calling MachineClientsApi.provision_machine_client"
+      end
+      allowable_values = ["cli", "sdk"]
+      if @api_client.config.client_side_validation && opts[:'x_temper_surface'] && !allowable_values.include?(opts[:'x_temper_surface'])
+        fail ArgumentError, "invalid value for \"x_temper_surface\", must be one of #{allowable_values}"
+      end
+      # resource path
+      local_var_path = '/api/machine-clients'
+
+      # query parameters
+      query_params = opts[:query_params] || {}
+
+      # header parameters
+      header_params = opts[:header_params] || {}
+      # HTTP header 'Accept' (if needed)
+      header_params['Accept'] = @api_client.select_header_accept(['application/json']) unless header_params['Accept']
+      # HTTP header 'Content-Type'
+      content_type = @api_client.select_header_content_type(['application/json'])
+      if !content_type.nil?
+          header_params['Content-Type'] = content_type
+      end
+      header_params[:'X-Temper-Surface'] = opts[:'x_temper_surface'] if !opts[:'x_temper_surface'].nil?
+
+      # form parameters
+      form_params = opts[:form_params] || {}
+
+      # http body (model)
+      post_body = opts[:debug_body] || @api_client.object_to_http_body(provision_machine_request)
+
+      # return_type
+      return_type = opts[:debug_return_type] || 'MachineClient'
+
+      # auth_names
+      auth_names = opts[:debug_auth_names] || ['bearer_auth']
+
+      new_options = opts.merge(
+        :operation => :"MachineClientsApi.provision_machine_client",
+        :header_params => header_params,
+        :query_params => query_params,
+        :form_params => form_params,
+        :body => post_body,
+        :auth_names => auth_names,
+        :return_type => return_type
+      )
+
+      data, status_code, headers = @api_client.call_api(:POST, local_var_path, new_options)
+      if @api_client.config.debugging
+        @api_client.config.logger.debug "API called: MachineClientsApi#provision_machine_client\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+      end
+      return data, status_code, headers
+    end
+
+    # Revoke a machine client
+    # Revokes a machine client so its credential no longer authenticates. When a system admin revokes the agent profile's last live credential, its standing is revoked too if it was approved; while another credential on the profile is still live, or when a team owner revokes, standing is left as an admin set it. Team memberships and grants are left in place. Revoking an already-revoked client returns it unchanged. Requires a system admin or the owner of the machine's owning team. Any other caller with system access is answered 404, exactly as for an id that does not exist.
+    # @param id [String] Machine client ID
+    # @param [Hash] opts the optional parameters
+    # @option opts [String] :x_temper_surface The calling surface, for event-ledger attribution. Accepted values are &#x60;cli&#x60; and &#x60;sdk&#x60;; an absent or unrecognized value attributes the write to &#x60;web&#x60;. This is provenance, never authorization — an unrecognized value degrades, it never rejects.
+    # @return [MachineClient]
+    def revoke_machine_client(id, opts = {})
+      data, _status_code, _headers = revoke_machine_client_with_http_info(id, opts)
+      data
+    end
+
+    # Revoke a machine client
+    # Revokes a machine client so its credential no longer authenticates. When a system admin revokes the agent profile&#39;s last live credential, its standing is revoked too if it was approved; while another credential on the profile is still live, or when a team owner revokes, standing is left as an admin set it. Team memberships and grants are left in place. Revoking an already-revoked client returns it unchanged. Requires a system admin or the owner of the machine&#39;s owning team. Any other caller with system access is answered 404, exactly as for an id that does not exist.
+    # @param id [String] Machine client ID
+    # @param [Hash] opts the optional parameters
+    # @option opts [String] :x_temper_surface The calling surface, for event-ledger attribution. Accepted values are &#x60;cli&#x60; and &#x60;sdk&#x60;; an absent or unrecognized value attributes the write to &#x60;web&#x60;. This is provenance, never authorization — an unrecognized value degrades, it never rejects.
+    # @return [Array<(MachineClient, Integer, Hash)>] MachineClient data, response status code and response headers
+    def revoke_machine_client_with_http_info(id, opts = {})
+      if @api_client.config.debugging
+        @api_client.config.logger.debug 'Calling API: MachineClientsApi.revoke_machine_client ...'
+      end
+      # verify the required parameter 'id' is set
+      if @api_client.config.client_side_validation && id.nil?
+        fail ArgumentError, "Missing the required parameter 'id' when calling MachineClientsApi.revoke_machine_client"
+      end
+      allowable_values = ["cli", "sdk"]
+      if @api_client.config.client_side_validation && opts[:'x_temper_surface'] && !allowable_values.include?(opts[:'x_temper_surface'])
+        fail ArgumentError, "invalid value for \"x_temper_surface\", must be one of #{allowable_values}"
+      end
+      # resource path
+      local_var_path = '/api/machine-clients/{id}'.sub('{id}', CGI.escape(id.to_s).gsub('.', '%2E'))
+
+      # query parameters
+      query_params = opts[:query_params] || {}
+
+      # header parameters
+      header_params = opts[:header_params] || {}
+      # HTTP header 'Accept' (if needed)
+      header_params['Accept'] = @api_client.select_header_accept(['application/json']) unless header_params['Accept']
+      header_params[:'X-Temper-Surface'] = opts[:'x_temper_surface'] if !opts[:'x_temper_surface'].nil?
+
+      # form parameters
+      form_params = opts[:form_params] || {}
+
+      # http body (model)
+      post_body = opts[:debug_body]
+
+      # return_type
+      return_type = opts[:debug_return_type] || 'MachineClient'
+
+      # auth_names
+      auth_names = opts[:debug_auth_names] || ['bearer_auth']
+
+      new_options = opts.merge(
+        :operation => :"MachineClientsApi.revoke_machine_client",
+        :header_params => header_params,
+        :query_params => query_params,
+        :form_params => form_params,
+        :body => post_body,
+        :auth_names => auth_names,
+        :return_type => return_type
+      )
+
+      data, status_code, headers = @api_client.call_api(:DELETE, local_var_path, new_options)
+      if @api_client.config.debugging
+        @api_client.config.logger.debug "API called: MachineClientsApi#revoke_machine_client\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+      end
+      return data, status_code, headers
+    end
+
+    # Rotate a machine client secret
+    # Installs a fresh secret for a temper-issued machine client. The previous secret stays valid for `grace_seconds` (0 to 604800). The new `client_secret` in the response is shown once and never stored. Requires a system admin or the owner of the machine's owning team. Any other caller with system access is answered 404, exactly as for an id that does not exist. Where an external identity provider mints this instance's tokens, the credential is still `dormant: true`.
+    # @param id [String] Machine client ID
+    # @param rotate_secret_request [RotateSecretRequest] 
+    # @param [Hash] opts the optional parameters
+    # @option opts [String] :x_temper_surface The calling surface, for event-ledger attribution. Accepted values are &#x60;cli&#x60; and &#x60;sdk&#x60;; an absent or unrecognized value attributes the write to &#x60;web&#x60;. This is provenance, never authorization — an unrecognized value degrades, it never rejects.
+    # @return [IssuedMachineCredential]
+    def rotate_machine_client_secret(id, rotate_secret_request, opts = {})
+      data, _status_code, _headers = rotate_machine_client_secret_with_http_info(id, rotate_secret_request, opts)
+      data
+    end
+
+    # Rotate a machine client secret
+    # Installs a fresh secret for a temper-issued machine client. The previous secret stays valid for &#x60;grace_seconds&#x60; (0 to 604800). The new &#x60;client_secret&#x60; in the response is shown once and never stored. Requires a system admin or the owner of the machine&#39;s owning team. Any other caller with system access is answered 404, exactly as for an id that does not exist. Where an external identity provider mints this instance&#39;s tokens, the credential is still &#x60;dormant: true&#x60;.
+    # @param id [String] Machine client ID
+    # @param rotate_secret_request [RotateSecretRequest] 
+    # @param [Hash] opts the optional parameters
+    # @option opts [String] :x_temper_surface The calling surface, for event-ledger attribution. Accepted values are &#x60;cli&#x60; and &#x60;sdk&#x60;; an absent or unrecognized value attributes the write to &#x60;web&#x60;. This is provenance, never authorization — an unrecognized value degrades, it never rejects.
+    # @return [Array<(IssuedMachineCredential, Integer, Hash)>] IssuedMachineCredential data, response status code and response headers
+    def rotate_machine_client_secret_with_http_info(id, rotate_secret_request, opts = {})
+      if @api_client.config.debugging
+        @api_client.config.logger.debug 'Calling API: MachineClientsApi.rotate_machine_client_secret ...'
+      end
+      # verify the required parameter 'id' is set
+      if @api_client.config.client_side_validation && id.nil?
+        fail ArgumentError, "Missing the required parameter 'id' when calling MachineClientsApi.rotate_machine_client_secret"
+      end
+      # verify the required parameter 'rotate_secret_request' is set
+      if @api_client.config.client_side_validation && rotate_secret_request.nil?
+        fail ArgumentError, "Missing the required parameter 'rotate_secret_request' when calling MachineClientsApi.rotate_machine_client_secret"
+      end
+      allowable_values = ["cli", "sdk"]
+      if @api_client.config.client_side_validation && opts[:'x_temper_surface'] && !allowable_values.include?(opts[:'x_temper_surface'])
+        fail ArgumentError, "invalid value for \"x_temper_surface\", must be one of #{allowable_values}"
+      end
+      # resource path
+      local_var_path = '/api/machine-clients/{id}/rotate-secret'.sub('{id}', CGI.escape(id.to_s).gsub('.', '%2E'))
+
+      # query parameters
+      query_params = opts[:query_params] || {}
+
+      # header parameters
+      header_params = opts[:header_params] || {}
+      # HTTP header 'Accept' (if needed)
+      header_params['Accept'] = @api_client.select_header_accept(['application/json']) unless header_params['Accept']
+      # HTTP header 'Content-Type'
+      content_type = @api_client.select_header_content_type(['application/json'])
+      if !content_type.nil?
+          header_params['Content-Type'] = content_type
+      end
+      header_params[:'X-Temper-Surface'] = opts[:'x_temper_surface'] if !opts[:'x_temper_surface'].nil?
+
+      # form parameters
+      form_params = opts[:form_params] || {}
+
+      # http body (model)
+      post_body = opts[:debug_body] || @api_client.object_to_http_body(rotate_secret_request)
+
+      # return_type
+      return_type = opts[:debug_return_type] || 'IssuedMachineCredential'
+
+      # auth_names
+      auth_names = opts[:debug_auth_names] || ['bearer_auth']
+
+      new_options = opts.merge(
+        :operation => :"MachineClientsApi.rotate_machine_client_secret",
+        :header_params => header_params,
+        :query_params => query_params,
+        :form_params => form_params,
+        :body => post_body,
+        :auth_names => auth_names,
+        :return_type => return_type
+      )
+
+      data, status_code, headers = @api_client.call_api(:POST, local_var_path, new_options)
+      if @api_client.config.debugging
+        @api_client.config.logger.debug "API called: MachineClientsApi#rotate_machine_client_secret\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+      end
+      return data, status_code, headers
+    end
+  end
+end