temper-rb 0.6.0 → 0.6.2

data/lib/temper/generated/api/admin_api.rb

@@ -3,7 +3,7 @@
 
 #Knowledge base management API for temper cloud
 
-The version of the OpenAPI document: 0.6.0
+The version of the OpenAPI document: 0.6.2
 
 Generated by: https://openapi-generator.tech
 Generator version: 7.23.0
@@ -49,7 +49,7 @@ module Temper::Generated
         fail ArgumentError, "invalid value for \"x_temper_surface\", must be one of #{allowable_values}"
       end
       # resource path
-      local_var_path = '/api/access/admin/principals/{id}/approve'.sub('{id}', CGI.escape(id.to_s))
+      local_var_path = '/api/access/admin/principals/{id}/approve'.sub('{id}', CGI.escape(id.to_s).gsub('.', '%2E'))
 
       # query parameters
       query_params = opts[:query_params] || {}
@@ -125,7 +125,7 @@ module Temper::Generated
         fail ArgumentError, "invalid value for \"x_temper_surface\", must be one of #{allowable_values}"
       end
       # resource path
-      local_var_path = '/api/access/admin/reviews/{id}'.sub('{id}', CGI.escape(id.to_s))
+      local_var_path = '/api/access/admin/reviews/{id}'.sub('{id}', CGI.escape(id.to_s).gsub('.', '%2E'))
 
       # query parameters
       query_params = opts[:query_params] || {}
@@ -328,7 +328,7 @@ module Temper::Generated
         fail ArgumentError, "invalid value for \"x_temper_surface\", must be one of #{allowable_values}"
       end
       # resource path
-      local_var_path = '/api/access/admin/principals/{id}/deactivate'.sub('{id}', CGI.escape(id.to_s))
+      local_var_path = '/api/access/admin/principals/{id}/deactivate'.sub('{id}', CGI.escape(id.to_s).gsub('.', '%2E'))
 
       # query parameters
       query_params = opts[:query_params] || {}
@@ -657,6 +657,70 @@ module Temper::Generated
       return data, status_code, headers
     end
 
+    # List the erasure retention policy
+    # Lists the categories a person erasure keeps, each with its policy's name, basis and period. Empty by default: the act then keeps nothing. Requires a system admin. Any other caller gets 404.
+    # @param [Hash] opts the optional parameters
+    # @option opts [String] :x_temper_surface The calling surface, for event-ledger attribution. Accepted values are `cli` and `sdk`; an absent or unrecognized value attributes the write to `web`. This is provenance, never authorization — an unrecognized value degrades, it never rejects.
+    # @return [RetentionPolicies]
+    def admin_list_erasure_retention(opts = {})
+      data, _status_code, _headers = admin_list_erasure_retention_with_http_info(opts)
+      data
+    end
+
+    # List the erasure retention policy
+    # Lists the categories a person erasure keeps, each with its policy's name, basis and period. Empty by default: the act then keeps nothing. Requires a system admin. Any other caller gets 404.
+    # @param [Hash] opts the optional parameters
+    # @option opts [String] :x_temper_surface The calling surface, for event-ledger attribution. Accepted values are `cli` and `sdk`; an absent or unrecognized value attributes the write to `web`. This is provenance, never authorization — an unrecognized value degrades, it never rejects.
+    # @return [Array<(RetentionPolicies, Integer, Hash)>] RetentionPolicies data, response status code and response headers
+    def admin_list_erasure_retention_with_http_info(opts = {})
+      if @api_client.config.debugging
+        @api_client.config.logger.debug 'Calling API: AdminApi.admin_list_erasure_retention ...'
+      end
+      allowable_values = ["cli", "sdk"]
+      if @api_client.config.client_side_validation && opts[:'x_temper_surface'] && !allowable_values.include?(opts[:'x_temper_surface'])
+        fail ArgumentError, "invalid value for \"x_temper_surface\", must be one of #{allowable_values}"
+      end
+      # resource path
+      local_var_path = '/api/admin/erasure/retention'
+
+      # query parameters
+      query_params = opts[:query_params] || {}
+
+      # header parameters
+      header_params = opts[:header_params] || {}
+      # HTTP header 'Accept' (if needed)
+      header_params['Accept'] = @api_client.select_header_accept(['application/json']) unless header_params['Accept']
+      header_params[:'X-Temper-Surface'] = opts[:'x_temper_surface'] if !opts[:'x_temper_surface'].nil?
+
+      # form parameters
+      form_params = opts[:form_params] || {}
+
+      # http body (model)
+      post_body = opts[:debug_body]
+
+      # return_type
+      return_type = opts[:debug_return_type] || 'RetentionPolicies'
+
+      # auth_names
+      auth_names = opts[:debug_auth_names] || ['bearer_auth']
+
+      new_options = opts.merge(
+        :operation => :"AdminApi.admin_list_erasure_retention",
+        :header_params => header_params,
+        :query_params => query_params,
+        :form_params => form_params,
+        :body => post_body,
+        :auth_names => auth_names,
+        :return_type => return_type
+      )
+
+      data, status_code, headers = @api_client.call_api(:GET, local_var_path, new_options)
+      if @api_client.config.debugging
+        @api_client.config.logger.debug "API called: AdminApi#admin_list_erasure_retention\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+      end
+      return data, status_code, headers
+    end
+
     # List pending join requests
     # Every join request still awaiting a decision, with the requesting profile's handle, display name and email. Requires a system admin.
     # @param [Hash] opts the optional parameters
@@ -803,6 +867,81 @@ module Temper::Generated
       return data, status_code, headers
     end
 
+    # List a resource's scrubbable fields
+    # Lists what a field scrub can name on a resource, without recording or changing anything: the title, the origin URI and each resource-owned property family by its handle (the id of the first event still carrying its key text), with its event count, whether it is live or unset, when and by which profile it was first seen, the JSON type of its latest value, and the sensitivity sweep's flags. No key text and no value. An erased resource or a charter, which the act refuses before it reads a family, lists nothing. Requires a system admin. Any other caller gets 404, decided before any lookup.
+    # @param field_scrub_families_request [FieldScrubFamiliesRequest] 
+    # @param [Hash] opts the optional parameters
+    # @option opts [String] :x_temper_surface The calling surface, for event-ledger attribution. Accepted values are &#x60;cli&#x60; and &#x60;sdk&#x60;; an absent or unrecognized value attributes the write to &#x60;web&#x60;. This is provenance, never authorization — an unrecognized value degrades, it never rejects.
+    # @return [FieldScrubFamilies]
+    def admin_list_resource_field_families(field_scrub_families_request, opts = {})
+      data, _status_code, _headers = admin_list_resource_field_families_with_http_info(field_scrub_families_request, opts)
+      data
+    end
+
+    # List a resource&#39;s scrubbable fields
+    # Lists what a field scrub can name on a resource, without recording or changing anything: the title, the origin URI and each resource-owned property family by its handle (the id of the first event still carrying its key text), with its event count, whether it is live or unset, when and by which profile it was first seen, the JSON type of its latest value, and the sensitivity sweep&#39;s flags. No key text and no value. An erased resource or a charter, which the act refuses before it reads a family, lists nothing. Requires a system admin. Any other caller gets 404, decided before any lookup.
+    # @param field_scrub_families_request [FieldScrubFamiliesRequest] 
+    # @param [Hash] opts the optional parameters
+    # @option opts [String] :x_temper_surface The calling surface, for event-ledger attribution. Accepted values are &#x60;cli&#x60; and &#x60;sdk&#x60;; an absent or unrecognized value attributes the write to &#x60;web&#x60;. This is provenance, never authorization — an unrecognized value degrades, it never rejects.
+    # @return [Array<(FieldScrubFamilies, Integer, Hash)>] FieldScrubFamilies data, response status code and response headers
+    def admin_list_resource_field_families_with_http_info(field_scrub_families_request, opts = {})
+      if @api_client.config.debugging
+        @api_client.config.logger.debug 'Calling API: AdminApi.admin_list_resource_field_families ...'
+      end
+      # verify the required parameter 'field_scrub_families_request' is set
+      if @api_client.config.client_side_validation && field_scrub_families_request.nil?
+        fail ArgumentError, "Missing the required parameter 'field_scrub_families_request' when calling AdminApi.admin_list_resource_field_families"
+      end
+      allowable_values = ["cli", "sdk"]
+      if @api_client.config.client_side_validation && opts[:'x_temper_surface'] && !allowable_values.include?(opts[:'x_temper_surface'])
+        fail ArgumentError, "invalid value for \"x_temper_surface\", must be one of #{allowable_values}"
+      end
+      # resource path
+      local_var_path = '/api/admin/resources/field-scrub/families'
+
+      # query parameters
+      query_params = opts[:query_params] || {}
+
+      # header parameters
+      header_params = opts[:header_params] || {}
+      # HTTP header 'Accept' (if needed)
+      header_params['Accept'] = @api_client.select_header_accept(['application/json']) unless header_params['Accept']
+      # HTTP header 'Content-Type'
+      content_type = @api_client.select_header_content_type(['application/json'])
+      if !content_type.nil?
+          header_params['Content-Type'] = content_type
+      end
+      header_params[:'X-Temper-Surface'] = opts[:'x_temper_surface'] if !opts[:'x_temper_surface'].nil?
+
+      # form parameters
+      form_params = opts[:form_params] || {}
+
+      # http body (model)
+      post_body = opts[:debug_body] || @api_client.object_to_http_body(field_scrub_families_request)
+
+      # return_type
+      return_type = opts[:debug_return_type] || 'FieldScrubFamilies'
+
+      # auth_names
+      auth_names = opts[:debug_auth_names] || ['bearer_auth']
+
+      new_options = opts.merge(
+        :operation => :"AdminApi.admin_list_resource_field_families",
+        :header_params => header_params,
+        :query_params => query_params,
+        :form_params => form_params,
+        :body => post_body,
+        :auth_names => auth_names,
+        :return_type => return_type
+      )
+
+      data, status_code, headers = @api_client.call_api(:POST, local_var_path, new_options)
+      if @api_client.config.debugging
+        @api_client.config.logger.debug "API called: AdminApi#admin_list_resource_field_families\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+      end
+      return data, status_code, headers
+    end
+
     # List open reconsideration requests
     # Reconsideration requests that have not been closed, with the asking principal's identity. Requires a system admin.
     # @param [Hash] opts the optional parameters
@@ -972,7 +1111,7 @@ module Temper::Generated
         fail ArgumentError, "invalid value for \"x_temper_surface\", must be one of #{allowable_values}"
       end
       # resource path
-      local_var_path = '/api/access/admin/principals/{id}/reactivate'.sub('{id}', CGI.escape(id.to_s))
+      local_var_path = '/api/access/admin/principals/{id}/reactivate'.sub('{id}', CGI.escape(id.to_s).gsub('.', '%2E'))
 
       # query parameters
       query_params = opts[:query_params] || {}
@@ -1013,7 +1152,7 @@ module Temper::Generated
     end
 
     # Rebind a machine client to a new client ID
-    # Points a fresh IdP `client_id` at the agent profile an existing machine client holds; by default the old client is revoked in the same transaction. The path `{id}` names the source client. Requires a system admin.
+    # Points a fresh IdP `client_id` at the agent profile an existing machine client holds; by default the old client is revoked in the same transaction. The path `{id}` names the source client. Requires a system admin. Refused for a temper-issued source client, whose secret is rotated instead, and on an instance that runs temper's own authorization server.
     # @param id [String] The machine client whose profile the new client id inherits
     # @param rebind_machine_request [RebindMachineRequest] 
     # @param [Hash] opts the optional parameters
@@ -1025,7 +1164,7 @@ module Temper::Generated
     end
 
     # Rebind a machine client to a new client ID
-    # Points a fresh IdP &#x60;client_id&#x60; at the agent profile an existing machine client holds; by default the old client is revoked in the same transaction. The path &#x60;{id}&#x60; names the source client. Requires a system admin.
+    # Points a fresh IdP &#x60;client_id&#x60; at the agent profile an existing machine client holds; by default the old client is revoked in the same transaction. The path &#x60;{id}&#x60; names the source client. Requires a system admin. Refused for a temper-issued source client, whose secret is rotated instead, and on an instance that runs temper&#39;s own authorization server.
     # @param id [String] The machine client whose profile the new client id inherits
     # @param rebind_machine_request [RebindMachineRequest] 
     # @param [Hash] opts the optional parameters
@@ -1048,7 +1187,7 @@ module Temper::Generated
         fail ArgumentError, "invalid value for \"x_temper_surface\", must be one of #{allowable_values}"
       end
       # resource path
-      local_var_path = '/api/machine-clients/{id}/rebind'.sub('{id}', CGI.escape(id.to_s))
+      local_var_path = '/api/machine-clients/{id}/rebind'.sub('{id}', CGI.escape(id.to_s).gsub('.', '%2E'))
 
       # query parameters
       query_params = opts[:query_params] || {}
@@ -1094,7 +1233,7 @@ module Temper::Generated
     end
 
     # Reconcile auto-join team rosters
-    # Adds every approved principal missing from an auto-join team and reports each (team, profile) pair added, plus the touched teams that also carry SAML group mappings (whose new native memberships take precedence over IdP role assertions). An empty `added` means nothing needed adding. Requires a system admin.
+    # Adds every approved person (never a machine principal) missing from an auto-join team and reports each (team, profile) pair added, plus the touched teams that also carry SAML group mappings (whose new native memberships take precedence over IdP role assertions). An empty `added` means nothing needed adding. Requires a system admin.
     # @param [Hash] opts the optional parameters
     # @option opts [String] :x_temper_surface The calling surface, for event-ledger attribution. Accepted values are &#x60;cli&#x60; and &#x60;sdk&#x60;; an absent or unrecognized value attributes the write to &#x60;web&#x60;. This is provenance, never authorization — an unrecognized value degrades, it never rejects.
     # @return [ReconcileAutoJoinOutcome]
@@ -1104,7 +1243,7 @@ module Temper::Generated
     end
 
     # Reconcile auto-join team rosters
-    # Adds every approved principal missing from an auto-join team and reports each (team, profile) pair added, plus the touched teams that also carry SAML group mappings (whose new native memberships take precedence over IdP role assertions). An empty &#x60;added&#x60; means nothing needed adding. Requires a system admin.
+    # Adds every approved person (never a machine principal) missing from an auto-join team and reports each (team, profile) pair added, plus the touched teams that also carry SAML group mappings (whose new native memberships take precedence over IdP role assertions). An empty &#x60;added&#x60; means nothing needed adding. Requires a system admin.
     # @param [Hash] opts the optional parameters
     # @option opts [String] :x_temper_surface The calling surface, for event-ledger attribution. Accepted values are &#x60;cli&#x60; and &#x60;sdk&#x60;; an absent or unrecognized value attributes the write to &#x60;web&#x60;. This is provenance, never authorization — an unrecognized value degrades, it never rejects.
     # @return [Array<(ReconcileAutoJoinOutcome, Integer, Hash)>] ReconcileAutoJoinOutcome data, response status code and response headers
@@ -1232,6 +1371,76 @@ module Temper::Generated
       return data, status_code, headers
     end
 
+    # Remove an erasure retention policy
+    # Stops keeping a category: a person erasure run afterwards removes it. Removing a category with no policy is a no-op. Requires a system admin. Any other caller gets 404.
+    # @param category [RetentionCategory] The category to stop keeping
+    # @param [Hash] opts the optional parameters
+    # @option opts [String] :x_temper_surface The calling surface, for event-ledger attribution. Accepted values are &#x60;cli&#x60; and &#x60;sdk&#x60;; an absent or unrecognized value attributes the write to &#x60;web&#x60;. This is provenance, never authorization — an unrecognized value degrades, it never rejects.
+    # @return [RetentionPolicies]
+    def admin_remove_erasure_retention(category, opts = {})
+      data, _status_code, _headers = admin_remove_erasure_retention_with_http_info(category, opts)
+      data
+    end
+
+    # Remove an erasure retention policy
+    # Stops keeping a category: a person erasure run afterwards removes it. Removing a category with no policy is a no-op. Requires a system admin. Any other caller gets 404.
+    # @param category [RetentionCategory] The category to stop keeping
+    # @param [Hash] opts the optional parameters
+    # @option opts [String] :x_temper_surface The calling surface, for event-ledger attribution. Accepted values are &#x60;cli&#x60; and &#x60;sdk&#x60;; an absent or unrecognized value attributes the write to &#x60;web&#x60;. This is provenance, never authorization — an unrecognized value degrades, it never rejects.
+    # @return [Array<(RetentionPolicies, Integer, Hash)>] RetentionPolicies data, response status code and response headers
+    def admin_remove_erasure_retention_with_http_info(category, opts = {})
+      if @api_client.config.debugging
+        @api_client.config.logger.debug 'Calling API: AdminApi.admin_remove_erasure_retention ...'
+      end
+      # verify the required parameter 'category' is set
+      if @api_client.config.client_side_validation && category.nil?
+        fail ArgumentError, "Missing the required parameter 'category' when calling AdminApi.admin_remove_erasure_retention"
+      end
+      allowable_values = ["cli", "sdk"]
+      if @api_client.config.client_side_validation && opts[:'x_temper_surface'] && !allowable_values.include?(opts[:'x_temper_surface'])
+        fail ArgumentError, "invalid value for \"x_temper_surface\", must be one of #{allowable_values}"
+      end
+      # resource path
+      local_var_path = '/api/admin/erasure/retention/{category}'.sub('{category}', CGI.escape(category.to_s).gsub('.', '%2E'))
+
+      # query parameters
+      query_params = opts[:query_params] || {}
+
+      # header parameters
+      header_params = opts[:header_params] || {}
+      # HTTP header 'Accept' (if needed)
+      header_params['Accept'] = @api_client.select_header_accept(['application/json']) unless header_params['Accept']
+      header_params[:'X-Temper-Surface'] = opts[:'x_temper_surface'] if !opts[:'x_temper_surface'].nil?
+
+      # form parameters
+      form_params = opts[:form_params] || {}
+
+      # http body (model)
+      post_body = opts[:debug_body]
+
+      # return_type
+      return_type = opts[:debug_return_type] || 'RetentionPolicies'
+
+      # auth_names
+      auth_names = opts[:debug_auth_names] || ['bearer_auth']
+
+      new_options = opts.merge(
+        :operation => :"AdminApi.admin_remove_erasure_retention",
+        :header_params => header_params,
+        :query_params => query_params,
+        :form_params => form_params,
+        :body => post_body,
+        :auth_names => auth_names,
+        :return_type => return_type
+      )
+
+      data, status_code, headers = @api_client.call_api(:DELETE, local_var_path, new_options)
+      if @api_client.config.debugging
+        @api_client.config.logger.debug "API called: AdminApi#admin_remove_erasure_retention\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+      end
+      return data, status_code, headers
+    end
+
     # Approve or reject a join request
     # Records the decision on a pending join request, with an optional note. Requires a system admin.
     # @param id [String] Join request ID
@@ -1268,7 +1477,7 @@ module Temper::Generated
         fail ArgumentError, "invalid value for \"x_temper_surface\", must be one of #{allowable_values}"
       end
       # resource path
-      local_var_path = '/api/access/admin/requests/{id}'.sub('{id}', CGI.escape(id.to_s))
+      local_var_path = '/api/access/admin/requests/{id}'.sub('{id}', CGI.escape(id.to_s).gsub('.', '%2E'))
 
       # query parameters
       query_params = opts[:query_params] || {}
@@ -1349,7 +1558,7 @@ module Temper::Generated
         fail ArgumentError, "invalid value for \"x_temper_surface\", must be one of #{allowable_values}"
       end
       # resource path
-      local_var_path = '/api/access/admin/principals/{id}/revoke'.sub('{id}', CGI.escape(id.to_s))
+      local_var_path = '/api/access/admin/principals/{id}/revoke'.sub('{id}', CGI.escape(id.to_s).gsub('.', '%2E'))
 
       # query parameters
       query_params = opts[:query_params] || {}
@@ -1469,6 +1678,156 @@ module Temper::Generated
       return data, status_code, headers
     end
 
+    # Scrub a resource field's history
+    # Redacts every prior value of a resource's title, origin URI, one property family (named by its handle from the family listing) or every property family, from the ledger and the projection, while the resource survives. By default today's value is kept; with `clear`, the act first clears it (a placeholder title or origin URI, the placeholder type for `doc_type`, or an unset of the family) and then redacts every value the field held. `properties` cannot be cleared. The server mints the request reference. The answer is either a completion or a recorded refusal (`status`). The request and the handle are checked first, whatever the resource's state, so a recorded refusal names only a real family of the resource. No key text or value appears in the request, the answer or the record. Requires a system admin. Any other caller gets 404, decided before any lookup, so a refusal reveals nothing about the resource.
+    # @param field_scrub_request_body [FieldScrubRequestBody] 
+    # @param [Hash] opts the optional parameters
+    # @option opts [String] :x_temper_surface The calling surface, for event-ledger attribution. Accepted values are &#x60;cli&#x60; and &#x60;sdk&#x60;; an absent or unrecognized value attributes the write to &#x60;web&#x60;. This is provenance, never authorization — an unrecognized value degrades, it never rejects.
+    # @return [FieldScrubExecuteResponse]
+    def admin_scrub_resource_field(field_scrub_request_body, opts = {})
+      data, _status_code, _headers = admin_scrub_resource_field_with_http_info(field_scrub_request_body, opts)
+      data
+    end
+
+    # Scrub a resource field&#39;s history
+    # Redacts every prior value of a resource&#39;s title, origin URI, one property family (named by its handle from the family listing) or every property family, from the ledger and the projection, while the resource survives. By default today&#39;s value is kept; with &#x60;clear&#x60;, the act first clears it (a placeholder title or origin URI, the placeholder type for &#x60;doc_type&#x60;, or an unset of the family) and then redacts every value the field held. &#x60;properties&#x60; cannot be cleared. The server mints the request reference. The answer is either a completion or a recorded refusal (&#x60;status&#x60;). The request and the handle are checked first, whatever the resource&#39;s state, so a recorded refusal names only a real family of the resource. No key text or value appears in the request, the answer or the record. Requires a system admin. Any other caller gets 404, decided before any lookup, so a refusal reveals nothing about the resource.
+    # @param field_scrub_request_body [FieldScrubRequestBody] 
+    # @param [Hash] opts the optional parameters
+    # @option opts [String] :x_temper_surface The calling surface, for event-ledger attribution. Accepted values are &#x60;cli&#x60; and &#x60;sdk&#x60;; an absent or unrecognized value attributes the write to &#x60;web&#x60;. This is provenance, never authorization — an unrecognized value degrades, it never rejects.
+    # @return [Array<(FieldScrubExecuteResponse, Integer, Hash)>] FieldScrubExecuteResponse data, response status code and response headers
+    def admin_scrub_resource_field_with_http_info(field_scrub_request_body, opts = {})
+      if @api_client.config.debugging
+        @api_client.config.logger.debug 'Calling API: AdminApi.admin_scrub_resource_field ...'
+      end
+      # verify the required parameter 'field_scrub_request_body' is set
+      if @api_client.config.client_side_validation && field_scrub_request_body.nil?
+        fail ArgumentError, "Missing the required parameter 'field_scrub_request_body' when calling AdminApi.admin_scrub_resource_field"
+      end
+      allowable_values = ["cli", "sdk"]
+      if @api_client.config.client_side_validation && opts[:'x_temper_surface'] && !allowable_values.include?(opts[:'x_temper_surface'])
+        fail ArgumentError, "invalid value for \"x_temper_surface\", must be one of #{allowable_values}"
+      end
+      # resource path
+      local_var_path = '/api/admin/resources/field-scrub'
+
+      # query parameters
+      query_params = opts[:query_params] || {}
+
+      # header parameters
+      header_params = opts[:header_params] || {}
+      # HTTP header 'Accept' (if needed)
+      header_params['Accept'] = @api_client.select_header_accept(['application/json']) unless header_params['Accept']
+      # HTTP header 'Content-Type'
+      content_type = @api_client.select_header_content_type(['application/json'])
+      if !content_type.nil?
+          header_params['Content-Type'] = content_type
+      end
+      header_params[:'X-Temper-Surface'] = opts[:'x_temper_surface'] if !opts[:'x_temper_surface'].nil?
+
+      # form parameters
+      form_params = opts[:form_params] || {}
+
+      # http body (model)
+      post_body = opts[:debug_body] || @api_client.object_to_http_body(field_scrub_request_body)
+
+      # return_type
+      return_type = opts[:debug_return_type] || 'FieldScrubExecuteResponse'
+
+      # auth_names
+      auth_names = opts[:debug_auth_names] || ['bearer_auth']
+
+      new_options = opts.merge(
+        :operation => :"AdminApi.admin_scrub_resource_field",
+        :header_params => header_params,
+        :query_params => query_params,
+        :form_params => form_params,
+        :body => post_body,
+        :auth_names => auth_names,
+        :return_type => return_type
+      )
+
+      data, status_code, headers = @api_client.call_api(:POST, local_var_path, new_options)
+      if @api_client.config.debugging
+        @api_client.config.logger.debug "API called: AdminApi#admin_scrub_resource_field\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+      end
+      return data, status_code, headers
+    end
+
+    # Set an erasure retention policy
+    # Names a category a person erasure keeps, with the basis and the period, replacing the category's existing policy. Only free text and replay evidence can be kept; identifiers and credentials cannot. The act records each kept category and its policy. Nothing deletes kept data when the period ends. Requires a system admin. Any other caller gets 404.
+    # @param retention_policy_set [RetentionPolicySet] 
+    # @param [Hash] opts the optional parameters
+    # @option opts [String] :x_temper_surface The calling surface, for event-ledger attribution. Accepted values are &#x60;cli&#x60; and &#x60;sdk&#x60;; an absent or unrecognized value attributes the write to &#x60;web&#x60;. This is provenance, never authorization — an unrecognized value degrades, it never rejects.
+    # @return [RetentionPolicies]
+    def admin_set_erasure_retention(retention_policy_set, opts = {})
+      data, _status_code, _headers = admin_set_erasure_retention_with_http_info(retention_policy_set, opts)
+      data
+    end
+
+    # Set an erasure retention policy
+    # Names a category a person erasure keeps, with the basis and the period, replacing the category&#39;s existing policy. Only free text and replay evidence can be kept; identifiers and credentials cannot. The act records each kept category and its policy. Nothing deletes kept data when the period ends. Requires a system admin. Any other caller gets 404.
+    # @param retention_policy_set [RetentionPolicySet] 
+    # @param [Hash] opts the optional parameters
+    # @option opts [String] :x_temper_surface The calling surface, for event-ledger attribution. Accepted values are &#x60;cli&#x60; and &#x60;sdk&#x60;; an absent or unrecognized value attributes the write to &#x60;web&#x60;. This is provenance, never authorization — an unrecognized value degrades, it never rejects.
+    # @return [Array<(RetentionPolicies, Integer, Hash)>] RetentionPolicies data, response status code and response headers
+    def admin_set_erasure_retention_with_http_info(retention_policy_set, opts = {})
+      if @api_client.config.debugging
+        @api_client.config.logger.debug 'Calling API: AdminApi.admin_set_erasure_retention ...'
+      end
+      # verify the required parameter 'retention_policy_set' is set
+      if @api_client.config.client_side_validation && retention_policy_set.nil?
+        fail ArgumentError, "Missing the required parameter 'retention_policy_set' when calling AdminApi.admin_set_erasure_retention"
+      end
+      allowable_values = ["cli", "sdk"]
+      if @api_client.config.client_side_validation && opts[:'x_temper_surface'] && !allowable_values.include?(opts[:'x_temper_surface'])
+        fail ArgumentError, "invalid value for \"x_temper_surface\", must be one of #{allowable_values}"
+      end
+      # resource path
+      local_var_path = '/api/admin/erasure/retention'
+
+      # query parameters
+      query_params = opts[:query_params] || {}
+
+      # header parameters
+      header_params = opts[:header_params] || {}
+      # HTTP header 'Accept' (if needed)
+      header_params['Accept'] = @api_client.select_header_accept(['application/json']) unless header_params['Accept']
+      # HTTP header 'Content-Type'
+      content_type = @api_client.select_header_content_type(['application/json'])
+      if !content_type.nil?
+          header_params['Content-Type'] = content_type
+      end
+      header_params[:'X-Temper-Surface'] = opts[:'x_temper_surface'] if !opts[:'x_temper_surface'].nil?
+
+      # form parameters
+      form_params = opts[:form_params] || {}
+
+      # http body (model)
+      post_body = opts[:debug_body] || @api_client.object_to_http_body(retention_policy_set)
+
+      # return_type
+      return_type = opts[:debug_return_type] || 'RetentionPolicies'
+
+      # auth_names
+      auth_names = opts[:debug_auth_names] || ['bearer_auth']
+
+      new_options = opts.merge(
+        :operation => :"AdminApi.admin_set_erasure_retention",
+        :header_params => header_params,
+        :query_params => query_params,
+        :form_params => form_params,
+        :body => post_body,
+        :auth_names => auth_names,
+        :return_type => return_type
+      )
+
+      data, status_code, headers = @api_client.call_api(:PUT, local_var_path, new_options)
+      if @api_client.config.debugging
+        @api_client.config.logger.debug "API called: AdminApi#admin_set_erasure_retention\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+      end
+      return data, status_code, headers
+    end
+
     # Show a profile's state card
     # One profile's admission state, governance, identity links, team memberships, pending invitations and open queue items. Requires a system admin.
     # @param profile_id [String] Profile ID
@@ -1499,7 +1858,7 @@ module Temper::Generated
         fail ArgumentError, "invalid value for \"x_temper_surface\", must be one of #{allowable_values}"
       end
       # resource path
-      local_var_path = '/api/access/admin/profiles/{profile_id}'.sub('{profile_id}', CGI.escape(profile_id.to_s))
+      local_var_path = '/api/access/admin/profiles/{profile_id}'.sub('{profile_id}', CGI.escape(profile_id.to_s).gsub('.', '%2E'))
 
       # query parameters
       query_params = opts[:query_params] || {}
@@ -1764,6 +2123,81 @@ module Temper::Generated
       return data, status_code, headers
     end
 
+    # Survey a field scrub
+    # Reports what the field scrub would do, without recording or changing anything: the ledger paths it would redact, the paths it keeps (today's value) or cannot reach and why, the folded property rows it would rewrite, and the events `clear` would append, beside the family listing with the sensitivity sweep's flags. For a charter, an erased resource, a sentinel collision or a title or origin URI whose latest event disagrees with the projection it reports the refusal the act would record (`refusal`, `detail`) and no plan, once the request and its handle are well formed. In keep mode a plan with no `redacted_fields` means nothing is prior, which the act answers 400; with `clear`, a field already cleared is answered 400 here as the act answers it. Requires a system admin. Any other caller gets 404, decided before any lookup.
+    # @param field_scrub_request_body [FieldScrubRequestBody] 
+    # @param [Hash] opts the optional parameters
+    # @option opts [String] :x_temper_surface The calling surface, for event-ledger attribution. Accepted values are &#x60;cli&#x60; and &#x60;sdk&#x60;; an absent or unrecognized value attributes the write to &#x60;web&#x60;. This is provenance, never authorization — an unrecognized value degrades, it never rejects.
+    # @return [FieldScrubSurvey]
+    def admin_survey_resource_field_scrub(field_scrub_request_body, opts = {})
+      data, _status_code, _headers = admin_survey_resource_field_scrub_with_http_info(field_scrub_request_body, opts)
+      data
+    end
+
+    # Survey a field scrub
+    # Reports what the field scrub would do, without recording or changing anything: the ledger paths it would redact, the paths it keeps (today&#39;s value) or cannot reach and why, the folded property rows it would rewrite, and the events &#x60;clear&#x60; would append, beside the family listing with the sensitivity sweep&#39;s flags. For a charter, an erased resource, a sentinel collision or a title or origin URI whose latest event disagrees with the projection it reports the refusal the act would record (&#x60;refusal&#x60;, &#x60;detail&#x60;) and no plan, once the request and its handle are well formed. In keep mode a plan with no &#x60;redacted_fields&#x60; means nothing is prior, which the act answers 400; with &#x60;clear&#x60;, a field already cleared is answered 400 here as the act answers it. Requires a system admin. Any other caller gets 404, decided before any lookup.
+    # @param field_scrub_request_body [FieldScrubRequestBody] 
+    # @param [Hash] opts the optional parameters
+    # @option opts [String] :x_temper_surface The calling surface, for event-ledger attribution. Accepted values are &#x60;cli&#x60; and &#x60;sdk&#x60;; an absent or unrecognized value attributes the write to &#x60;web&#x60;. This is provenance, never authorization — an unrecognized value degrades, it never rejects.
+    # @return [Array<(FieldScrubSurvey, Integer, Hash)>] FieldScrubSurvey data, response status code and response headers
+    def admin_survey_resource_field_scrub_with_http_info(field_scrub_request_body, opts = {})
+      if @api_client.config.debugging
+        @api_client.config.logger.debug 'Calling API: AdminApi.admin_survey_resource_field_scrub ...'
+      end
+      # verify the required parameter 'field_scrub_request_body' is set
+      if @api_client.config.client_side_validation && field_scrub_request_body.nil?
+        fail ArgumentError, "Missing the required parameter 'field_scrub_request_body' when calling AdminApi.admin_survey_resource_field_scrub"
+      end
+      allowable_values = ["cli", "sdk"]
+      if @api_client.config.client_side_validation && opts[:'x_temper_surface'] && !allowable_values.include?(opts[:'x_temper_surface'])
+        fail ArgumentError, "invalid value for \"x_temper_surface\", must be one of #{allowable_values}"
+      end
+      # resource path
+      local_var_path = '/api/admin/resources/field-scrub/survey'
+
+      # query parameters
+      query_params = opts[:query_params] || {}
+
+      # header parameters
+      header_params = opts[:header_params] || {}
+      # HTTP header 'Accept' (if needed)
+      header_params['Accept'] = @api_client.select_header_accept(['application/json']) unless header_params['Accept']
+      # HTTP header 'Content-Type'
+      content_type = @api_client.select_header_content_type(['application/json'])
+      if !content_type.nil?
+          header_params['Content-Type'] = content_type
+      end
+      header_params[:'X-Temper-Surface'] = opts[:'x_temper_surface'] if !opts[:'x_temper_surface'].nil?
+
+      # form parameters
+      form_params = opts[:form_params] || {}
+
+      # http body (model)
+      post_body = opts[:debug_body] || @api_client.object_to_http_body(field_scrub_request_body)
+
+      # return_type
+      return_type = opts[:debug_return_type] || 'FieldScrubSurvey'
+
+      # auth_names
+      auth_names = opts[:debug_auth_names] || ['bearer_auth']
+
+      new_options = opts.merge(
+        :operation => :"AdminApi.admin_survey_resource_field_scrub",
+        :header_params => header_params,
+        :query_params => query_params,
+        :form_params => form_params,
+        :body => post_body,
+        :auth_names => auth_names,
+        :return_type => return_type
+      )
+
+      data, status_code, headers = @api_client.call_api(:POST, local_var_path, new_options)
+      if @api_client.config.debugging
+        @api_client.config.logger.debug "API called: AdminApi#admin_survey_resource_field_scrub\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+      end
+      return data, status_code, headers
+    end
+
     # Update system settings
     # Partial update: each field present overwrites its setting, each field absent is left unchanged. Requires a system admin.
     # @param update_settings_request [UpdateSettingsRequest] 

data/lib/temper/generated/api/admin_ledger_api.rb

@@ -3,7 +3,7 @@
 
 #Knowledge base management API for temper cloud
 
-The version of the OpenAPI document: 0.6.0
+The version of the OpenAPI document: 0.6.2
 
 Generated by: https://openapi-generator.tech
 Generator version: 7.23.0
@@ -20,7 +20,7 @@ module Temper::Generated
       @api_client = api_client
     end
     # Read the admin ledger
-    # Returns a page of recorded administrative acts, newest first, on exactly one axis. `subject` (`<kind>:<uuid>`, e.g. `kb_resources:<uuid>`) returns the acts performed on that subject, limited to the act families the caller may read about it: a system admin reads all of them, and a caller who may administer grants on the subject reads its grant acts. `actor` returns the acts a profile performed: any caller may read their own, and only a system admin may read another's. A read the caller is not allowed is answered 404, not 403, so a refusal reveals nothing about the subject. `epoch` is when recording began; acts before it were not recorded. `limit` defaults to 50 and is capped at 200.
+    # Returns a page of recorded administrative acts, newest first, on exactly one axis. `subject` (`<kind>:<uuid>`, e.g. `kb_resources:<uuid>`) returns the acts performed on that subject, limited to the act families the caller may read about it: a system admin reads all of them, a caller who may administer grants on the subject reads its grant acts, and an owner or maintainer of a team (`kb_teams:<uuid>`) reads that team's membership changes (on the gating team, only a system admin does). `actor` returns the acts a profile performed: any caller may read their own, and only a system admin may read another's. A read the caller is not allowed is answered 404, not 403, so a refusal reveals nothing about the subject. `epoch` is when recording began; acts before it were not recorded. `limit` defaults to 50 and is capped at 200.
     # @param [Hash] opts the optional parameters
     # @option opts [String] :subject Subject axis: &#x60;&lt;kind&gt;:&lt;uuid&gt;&#x60;, e.g. &#x60;kb_resources:0199c3f1-...&#x60;.
     # @option opts [String] :actor Actor axis: whose acts to read. Reading your own is always allowed; reading another profile&#39;s requires a system admin.
@@ -34,7 +34,7 @@ module Temper::Generated
     end
 
     # Read the admin ledger
-    # Returns a page of recorded administrative acts, newest first, on exactly one axis. &#x60;subject&#x60; (&#x60;&lt;kind&gt;:&lt;uuid&gt;&#x60;, e.g. &#x60;kb_resources:&lt;uuid&gt;&#x60;) returns the acts performed on that subject, limited to the act families the caller may read about it: a system admin reads all of them, and a caller who may administer grants on the subject reads its grant acts. &#x60;actor&#x60; returns the acts a profile performed: any caller may read their own, and only a system admin may read another&#39;s. A read the caller is not allowed is answered 404, not 403, so a refusal reveals nothing about the subject. &#x60;epoch&#x60; is when recording began; acts before it were not recorded. &#x60;limit&#x60; defaults to 50 and is capped at 200.
+    # Returns a page of recorded administrative acts, newest first, on exactly one axis. &#x60;subject&#x60; (&#x60;&lt;kind&gt;:&lt;uuid&gt;&#x60;, e.g. &#x60;kb_resources:&lt;uuid&gt;&#x60;) returns the acts performed on that subject, limited to the act families the caller may read about it: a system admin reads all of them, a caller who may administer grants on the subject reads its grant acts, and an owner or maintainer of a team (&#x60;kb_teams:&lt;uuid&gt;&#x60;) reads that team&#39;s membership changes (on the gating team, only a system admin does). &#x60;actor&#x60; returns the acts a profile performed: any caller may read their own, and only a system admin may read another&#39;s. A read the caller is not allowed is answered 404, not 403, so a refusal reveals nothing about the subject. &#x60;epoch&#x60; is when recording began; acts before it were not recorded. &#x60;limit&#x60; defaults to 50 and is capped at 200.
     # @param [Hash] opts the optional parameters
     # @option opts [String] :subject Subject axis: &#x60;&lt;kind&gt;:&lt;uuid&gt;&#x60;, e.g. &#x60;kb_resources:0199c3f1-...&#x60;.
     # @option opts [String] :actor Actor axis: whose acts to read. Reading your own is always allowed; reading another profile&#39;s requires a system admin.

data/lib/temper/generated/api/auditor_api.rb

@@ -3,7 +3,7 @@
 
 #Knowledge base management API for temper cloud
 
-The version of the OpenAPI document: 0.6.0
+The version of the OpenAPI document: 0.6.2
 
 Generated by: https://openapi-generator.tech
 Generator version: 7.23.0
@@ -185,7 +185,7 @@ module Temper::Generated
         fail ArgumentError, "invalid value for \"x_temper_surface\", must be one of #{allowable_values}"
       end
       # resource path
-      local_var_path = '/api/auditor/{cogmap}/complete'.sub('{cogmap}', CGI.escape(cogmap.to_s))
+      local_var_path = '/api/auditor/{cogmap}/complete'.sub('{cogmap}', CGI.escape(cogmap.to_s).gsub('.', '%2E'))
 
       # query parameters
       query_params = opts[:query_params] || {}