@alicloud/agentcore20260804 2.4.0 → 2.6.0

package/src/models/CreateCustomAgentShrinkRequest.ts

@@ -10,7 +10,7 @@ export class CreateCustomAgentShrinkRequest extends $dara.Model {
   bodyShrink?: string;
   /**
    * @remarks
-   * Idempotency is not currently guaranteed. Do not rely on this parameter to prevent duplicate requests.
+   * Idempotence is not currently guaranteed. Do not rely on this parameter to prevent duplicate requests.
    * 
    * @example
    * custom-agent-request-20261010-001

package/src/models/CreateIdentityProviderRequest.ts

@@ -5,7 +5,7 @@ import * as $dara from '@darabonba/typescript';
 export class CreateIdentityProviderRequestBodyMetadata extends $dara.Model {
   /**
    * @remarks
-   * The App ID of the Lark application. This parameter is required when the binding type is Feishu.
+   * The App ID of the Feishu application. This parameter is required when the binding type is Feishu.
    * 
    * @example
    * cli_exampleappid01
@@ -21,7 +21,7 @@ export class CreateIdentityProviderRequestBodyMetadata extends $dara.Model {
   appKey?: string;
   /**
    * @remarks
-   * Required. The application secret of the external identity provider. This parameter is used only for write operations and is not returned by query operations.
+   * Required. The secret of the external identity provider application. This parameter is used only for writing and is not returned by the query API.
    * 
    * @example
    * example-app-secret
@@ -29,7 +29,7 @@ export class CreateIdentityProviderRequestBodyMetadata extends $dara.Model {
   appSecret?: string;
   /**
    * @remarks
-   * The CorpId of the DingTalk organization. This parameter is required when the binding type is DingTalk.
+   * The CorpId of the DingTalk enterprise. This parameter is required when the binding type is DingTalk.
    * 
    * @example
    * dingexamplecorpid01
@@ -37,7 +37,7 @@ export class CreateIdentityProviderRequestBodyMetadata extends $dara.Model {
   corpId?: string;
   /**
    * @remarks
-   * The data encryption key for event subscriptions. The value must be the same as the one configured in the external identity provider application. This parameter is used only for write operations and is not returned by query operations.
+   * The data encryption key for event subscription. The value must be the same as the one configured in the external identity provider application. This parameter is used only for writing and is not returned by the query API.
    * 
    * @example
    * example-encrypt-key
@@ -45,7 +45,7 @@ export class CreateIdentityProviderRequestBodyMetadata extends $dara.Model {
   encryptKey?: string;
   /**
    * @remarks
-   * The verification token for event subscriptions. The value must be the same as the one configured in the external identity provider application. This parameter is used only for write operations and is not returned by query operations.
+   * The verification token for event subscription. The value must be the same as the one configured in the external identity provider application. This parameter is used only for writing and is not returned by the query API.
    * 
    * @example
    * example-verification-token
@@ -82,6 +82,52 @@ export class CreateIdentityProviderRequestBodyMetadata extends $dara.Model {
   }
 }
 
+export class CreateIdentityProviderRequestBodySyncScope extends $dara.Model {
+  /**
+   * @remarks
+   * When the mode is SelectedDepartments, this parameter must contain at least one non-empty department ID, which should be obtained from ListIdentityProviderDepartments. When the mode is AllAuthorized, pass an empty array or omit this parameter.
+   * 
+   * @example
+   * ["10001"]
+   */
+  departmentIds?: string[];
+  /**
+   * @remarks
+   * Valid values:
+   * - AllAuthorized: The full authorization scope, which is limited by the application address book authorization.
+   * - SelectedDepartments: The selected departments and all their sub-departments.
+   * When you explicitly submit syncScope, you must provide a valid mode, which is verified by the backend.
+   * 
+   * @example
+   * SelectedDepartments
+   */
+  mode?: string;
+  static names(): { [key: string]: string } {
+    return {
+      departmentIds: 'departmentIds',
+      mode: 'mode',
+    };
+  }
+
+  static types(): { [key: string]: any } {
+    return {
+      departmentIds: { 'type': 'array', 'itemType': 'string' },
+      mode: 'string',
+    };
+  }
+
+  validate() {
+    if(Array.isArray(this.departmentIds)) {
+      $dara.Model.validateArray(this.departmentIds);
+    }
+    super.validate();
+  }
+
+  constructor(map?: { [key: string]: any }) {
+    super(map);
+  }
+}
+
 export class CreateIdentityProviderRequestBody extends $dara.Model {
   /**
    * @remarks
@@ -95,25 +141,37 @@ export class CreateIdentityProviderRequestBody extends $dara.Model {
   identityProviderType?: string;
   /**
    * @remarks
-   * Specifies whether workspace users can log on through the external identity provider.
+   * Specifies whether to allow workspace users to log on through the external identity provider.
    */
   loginEnabled?: boolean;
   /**
    * @remarks
-   * The application configuration for the external identity provider. When you bind DingTalk, you must provide appKey, appSecret, and corpId. When you bind Feishu, you must provide appId and appSecret.
+   * The application configuration of the external identity provider. When you bind DingTalk, you must provide appKey, appSecret, and corpId. When you bind Feishu, you must provide appId and appSecret.
    */
   metadata?: CreateIdentityProviderRequestBodyMetadata;
   /**
    * @remarks
-   * Specifies whether to enable organization member synchronization. If enabled, organization members are synchronized to workspace users from the external identity provider.
+   * Specifies whether to enable organization member synchronization. After this feature is enabled, the external identity provider synchronizes organization members as workspace users.
    */
   syncEnabled?: boolean;
+  /**
+   * @remarks
+   * Controls the initial synchronization when DingTalk or Feishu is bound. If this parameter is omitted or set to null, the default value is true. If this parameter is set to false, only the configuration is saved, and synchronization is explicitly triggered later. CustomSSO does not use the vendor pull link.
+   */
+  syncOnBind?: boolean;
+  /**
+   * @remarks
+   * Retains the department-based synchronization scope definition. If this parameter is omitted during creation, the default value is AllAuthorized, and the initial vendor synchronization is determined by syncOnBind. If this parameter is omitted or set to null during an update, the original value is retained. Updating and saving the scope does not automatically perform full synchronization.
+   */
+  syncScope?: CreateIdentityProviderRequestBodySyncScope;
   static names(): { [key: string]: string } {
     return {
       identityProviderType: 'identityProviderType',
       loginEnabled: 'loginEnabled',
       metadata: 'metadata',
       syncEnabled: 'syncEnabled',
+      syncOnBind: 'syncOnBind',
+      syncScope: 'syncScope',
     };
   }
 
@@ -123,6 +181,8 @@ export class CreateIdentityProviderRequestBody extends $dara.Model {
       loginEnabled: 'boolean',
       metadata: CreateIdentityProviderRequestBodyMetadata,
       syncEnabled: 'boolean',
+      syncOnBind: 'boolean',
+      syncScope: CreateIdentityProviderRequestBodySyncScope,
     };
   }
 
@@ -130,6 +190,9 @@ export class CreateIdentityProviderRequestBody extends $dara.Model {
     if(this.metadata && typeof (this.metadata as any).validate === 'function') {
       (this.metadata as any).validate();
     }
+    if(this.syncScope && typeof (this.syncScope as any).validate === 'function') {
+      (this.syncScope as any).validate();
+    }
     super.validate();
   }
 
@@ -141,7 +204,7 @@ export class CreateIdentityProviderRequestBody extends $dara.Model {
 export class CreateIdentityProviderRequest extends $dara.Model {
   /**
    * @remarks
-   * The request body for binding an external identity provider.
+   * The request content for binding an external identity provider.
    */
   body?: CreateIdentityProviderRequestBody;
   static names(): { [key: string]: string } {

package/src/models/CreateIdentityProviderResponseBody.ts

@@ -2,7 +2,221 @@
 import * as $dara from '@darabonba/typescript';
 
 
+export class CreateIdentityProviderResponseBodyDataConfiguration extends $dara.Model {
+  /**
+   * @remarks
+   * HTTP-Redirect or HTTP-POST. This parameter is required when you manually enter the configuration. Queries return the short name.
+   * 
+   * @example
+   * HTTP-Redirect
+   */
+  bindingType?: string;
+  /**
+   * @remarks
+   * This parameter is required when you manually enter the configuration. It cannot be empty and cannot exceed 2,048 characters. Existing configurations cannot be replaced. This is different from the entity ID of the service provider (SP) returned in queries.
+   * 
+   * @example
+   * https://idp.example.com/entity
+   */
+  entityId?: string;
+  /**
+   * @remarks
+   * The actual switch value, which is Enabled or Disabled.
+   * 
+   * @example
+   * Disabled
+   */
+  jitProvisionStatus?: string;
+  /**
+   * @remarks
+   * The actual switch value, which is Enabled or Disabled.
+   * 
+   * @example
+   * Disabled
+   */
+  jitUpdateStatus?: string;
+  /**
+   * @remarks
+   * This parameter is required when you manually enter the configuration. It must be an absolute HTTPS URL and cannot contain user credentials or fragments.
+   * 
+   * @example
+   * https://idp.example.com/sso
+   */
+  loginUrl?: string;
+  /**
+   * @remarks
+   * The actual switch value, which is Enabled or Disabled. This is not equivalent to the expected loginEnabled value saved in AC.
+   * 
+   * @example
+   * Enabled
+   */
+  ssoStatus?: string;
+  static names(): { [key: string]: string } {
+    return {
+      bindingType: 'bindingType',
+      entityId: 'entityId',
+      jitProvisionStatus: 'jitProvisionStatus',
+      jitUpdateStatus: 'jitUpdateStatus',
+      loginUrl: 'loginUrl',
+      ssoStatus: 'ssoStatus',
+    };
+  }
+
+  static types(): { [key: string]: any } {
+    return {
+      bindingType: 'string',
+      entityId: 'string',
+      jitProvisionStatus: 'string',
+      jitUpdateStatus: 'string',
+      loginUrl: 'string',
+      ssoStatus: 'string',
+    };
+  }
+
+  validate() {
+    super.validate();
+  }
+
+  constructor(map?: { [key: string]: any }) {
+    super(map);
+  }
+}
+
+export class CreateIdentityProviderResponseBodyDataSaml extends $dara.Model {
+  /**
+   * @remarks
+   * HTTP-Redirect or HTTP-POST. This parameter is required when you manually enter the configuration. Queries return the short name.
+   * 
+   * @example
+   * HTTP-Redirect
+   */
+  bindingType?: string;
+  /**
+   * @remarks
+   * This parameter is required when you manually enter the configuration. It cannot be empty and cannot exceed 2,048 characters. Existing configurations cannot be replaced. This is different from the entity ID of the service provider (SP) returned in queries.
+   * 
+   * @example
+   * https://idp.example.com/entity
+   */
+  entityId?: string;
+  /**
+   * @remarks
+   * This parameter can be set independently. If it is omitted during an update, the existing value is retained. If it is omitted for the first time, the default value is false. A valid SAML configuration is required.
+   * 
+   * @example
+   * false
+   */
+  jitProvisionEnabled?: boolean;
+  /**
+   * @remarks
+   * This parameter can be set independently. If it is omitted during an update, the existing value is retained. If it is omitted for the first time, the default value is false. A valid SAML configuration is required.
+   * 
+   * @example
+   * false
+   */
+  jitUpdateEnabled?: boolean;
+  /**
+   * @remarks
+   * This parameter is required when you manually enter the configuration. It must be an absolute HTTPS URL and cannot contain user credentials or fragments.
+   * 
+   * @example
+   * https://idp.example.com/sso
+   */
+  loginUrl?: string;
+  /**
+   * @remarks
+   * This parameter is required when you manually enter the configuration. It must be a non-empty array that uses PEM X.509 certificate text. The current validity period is verified. A maximum of 10 certificates are supported.
+   * 
+   * @example
+   * ["-----BEGIN CERTIFICATE-----\\\\nMIICwDCCAaigAwIBAgIULlsHLfcADyBax5ZtFlj+YGzZVo0wDQYJKoZIhvcNAQEL\\\\nBQAwGjEYMBYGA1UEAwwPaWRwLmV4YW1wbGUuY29tMB4XDTI2MDEwMTAwMDAwMFoX\\\\nDTM2MDEwMTAwMDAwMFowGjEYMBYGA1UEAwwPaWRwLmV4YW1wbGUuY29tMIIBIjAN\\\\nBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAto0DN0W1CrPRzK9QZ9A1aApb4Lg8\\\\noGlp2c0PbN3LokXe/HzwxCMXx65IDnrenttxzTwp9BgUnUN/3LRzWaOL2UQ/vNYN\\\\nW9LFLkI1T64UPyI7eyi28YlALhb41xkYhEp7rz+MjqifBzVZeTDUxBYtbK2hAhbY\\\\nEL1+udwsXEx0KB7xuQ/rbI2OKeqAEAD1tfYg7T/SM2wrXNYhx+o1HtchM4/0I8Ok\\\\nkk27JQ4y3ofzC5sTySmFF1Y7XcpSd+5WSyazedhkAieo8AB01DkJV6nnKfH8sH0E\\\\nBsnH3FP8FhqCLrIeEkjX9B9OcIRLGjiZqx4u/ryW1QhMldnv+pFfNjWy/wIDAQAB\\\\nMA0GCSqGSIb3DQEBCwUAA4IBAQC1hSQG8AwtGOoX2gKBK4Hi5XBrBreij8WlLTUW\\\\nld0FINQ0Rg84f/27CjDthywj6wgxCesCuOVFhpxQa1UacsP/Gcai1aKABtLWImca\\\\nWECRYK5gDkwhTMFKM9mXA26hH1l4v/UR2iTpEK9H78egC4W7bs2LDTpPryuaNKTq\\\\nP2O0tMbNkAHB8yecz5LxHXnxadL9Egow25g2RClvpifWqDnuS9TSbKkIWLcPLjoc\\\\nJj2K9ILpBwhXiXi/BiSgyYTLiYvVvih9vX4s+hKGZNJc0j92YLiOHDF0XH1oxgdV\\\\njfTmRiedeb2VZJZElptD92z0AqFR7z2d5B+OqpPA2gjuMLV5\\\\n-----END CERTIFICATE-----"]
+   */
+  x509Certificates?: string[];
+  static names(): { [key: string]: string } {
+    return {
+      bindingType: 'bindingType',
+      entityId: 'entityId',
+      jitProvisionEnabled: 'jitProvisionEnabled',
+      jitUpdateEnabled: 'jitUpdateEnabled',
+      loginUrl: 'loginUrl',
+      x509Certificates: 'x509Certificates',
+    };
+  }
+
+  static types(): { [key: string]: any } {
+    return {
+      bindingType: 'string',
+      entityId: 'string',
+      jitProvisionEnabled: 'boolean',
+      jitUpdateEnabled: 'boolean',
+      loginUrl: 'string',
+      x509Certificates: { 'type': 'array', 'itemType': 'string' },
+    };
+  }
+
+  validate() {
+    if(Array.isArray(this.x509Certificates)) {
+      $dara.Model.validateArray(this.x509Certificates);
+    }
+    super.validate();
+  }
+
+  constructor(map?: { [key: string]: any }) {
+    super(map);
+  }
+}
+
+export class CreateIdentityProviderResponseBodyDataSyncScope extends $dara.Model {
+  /**
+   * @remarks
+   * When the mode is SelectedDepartments, this parameter must contain at least one non-empty department ID, which should be obtained from ListIdentityProviderDepartments. When the mode is AllAuthorized, pass an empty array or omit this parameter.
+   * 
+   * @example
+   * ["10001"]
+   */
+  departmentIds?: string[];
+  /**
+   * @remarks
+   * Valid values:
+   * - AllAuthorized: The full authorization scope, which is limited by the application address book authorization.
+   * - SelectedDepartments: The selected departments and all their sub-departments.
+   * When you explicitly submit syncScope, you must provide a valid mode, which is verified by the backend.
+   * 
+   * @example
+   * SelectedDepartments
+   */
+  mode?: string;
+  static names(): { [key: string]: string } {
+    return {
+      departmentIds: 'departmentIds',
+      mode: 'mode',
+    };
+  }
+
+  static types(): { [key: string]: any } {
+    return {
+      departmentIds: { 'type': 'array', 'itemType': 'string' },
+      mode: 'string',
+    };
+  }
+
+  validate() {
+    if(Array.isArray(this.departmentIds)) {
+      $dara.Model.validateArray(this.departmentIds);
+    }
+    super.validate();
+  }
+
+  constructor(map?: { [key: string]: any }) {
+    super(map);
+  }
+}
+
 export class CreateIdentityProviderResponseBodyData extends $dara.Model {
+  /**
+   * @remarks
+   * The actual SAML configuration is read back on demand only in GetIdentityProvider. SCIM queries and preparations return the actual received status and URL.
+   */
+  configuration?: CreateIdentityProviderResponseBodyDataConfiguration;
   /**
    * @remarks
    * The type of the external identity provider. Valid values: DingTalk and Feishu.
@@ -13,20 +227,33 @@ export class CreateIdentityProviderResponseBodyData extends $dara.Model {
   identityProviderType?: string;
   /**
    * @remarks
-   * Specifies whether workspace users can log on through the external identity provider.
+   * Specifies whether to allow workspace users to log on through the external identity provider.
    */
   loginEnabled?: boolean;
+  /**
+   * @remarks
+   * Only SAML is currently supported. This parameter may not be returned if no valid configuration is saved. Placeholder initialization with OIDC is not supported.
+   * 
+   * @example
+   * SAML
+   */
+  protocol?: string;
+  /**
+   * @remarks
+   * The input supports either XML or complete manual entry. Queries return the standardized configuration and do not echo the original XML. This parameter can be omitted if it is not configured.
+   */
+  saml?: CreateIdentityProviderResponseBodyDataSaml;
   /**
    * @remarks
    * The binding status. Valid values:
-   * - CONFIGURED: The configuration is accepted, and the system is waiting to activate the user pool.
-   * - SYNCING: Organization members are being synchronized.
-   * - SYNCED: Organization member synchronization is completed.
+   * - CONFIGURED: The configuration is accepted and the system is waiting to activate the user pool.
+   * - SYNCING: The system is synchronizing organization members.
+   * - SYNCED: The synchronization of organization members is complete.
    * - READY: The binding is in effect.
-   * - SYNC_FAILED: Organization member synchronization failed.
-   * - UPDATING: The configuration is being updated.
+   * - SYNC_FAILED: The synchronization of organization members failed.
+   * - UPDATING: The system is updating the configuration.
    * - UPDATE_FAILED: The configuration update failed.
-   * - DISCONNECTING: The unbinding is in progress.
+   * - DISCONNECTING: The system is unbinding.
    * - DISCONNECT_FAILED: The unbinding failed.
    * 
    * @example
@@ -35,9 +262,14 @@ export class CreateIdentityProviderResponseBodyData extends $dara.Model {
   status?: string;
   /**
    * @remarks
-   * Specifies whether to enable organization member synchronization. If enabled, organization members are synchronized to workspace users from the external identity provider.
+   * Specifies whether to enable organization member synchronization. After this feature is enabled, the external identity provider synchronizes organization members as workspace users.
    */
   syncEnabled?: boolean;
+  /**
+   * @remarks
+   * Retains the department-based synchronization scope definition. If this parameter is omitted during creation, the default value is AllAuthorized, and the initial vendor synchronization is determined by syncOnBind. If this parameter is omitted or set to null during an update, the original value is retained. Updating and saving the scope does not automatically perform full synchronization.
+   */
+  syncScope?: CreateIdentityProviderResponseBodyDataSyncScope;
   /**
    * @remarks
    * The workspace ID.
@@ -48,25 +280,42 @@ export class CreateIdentityProviderResponseBodyData extends $dara.Model {
   workspaceId?: string;
   static names(): { [key: string]: string } {
     return {
+      configuration: 'configuration',
       identityProviderType: 'identityProviderType',
       loginEnabled: 'loginEnabled',
+      protocol: 'protocol',
+      saml: 'saml',
       status: 'status',
       syncEnabled: 'syncEnabled',
+      syncScope: 'syncScope',
       workspaceId: 'workspaceId',
     };
   }
 
   static types(): { [key: string]: any } {
     return {
+      configuration: CreateIdentityProviderResponseBodyDataConfiguration,
       identityProviderType: 'string',
       loginEnabled: 'boolean',
+      protocol: 'string',
+      saml: CreateIdentityProviderResponseBodyDataSaml,
       status: 'string',
       syncEnabled: 'boolean',
+      syncScope: CreateIdentityProviderResponseBodyDataSyncScope,
       workspaceId: 'string',
     };
   }
 
   validate() {
+    if(this.configuration && typeof (this.configuration as any).validate === 'function') {
+      (this.configuration as any).validate();
+    }
+    if(this.saml && typeof (this.saml as any).validate === 'function') {
+      (this.saml as any).validate();
+    }
+    if(this.syncScope && typeof (this.syncScope as any).validate === 'function') {
+      (this.syncScope as any).validate();
+    }
     super.validate();
   }
 
@@ -99,7 +348,7 @@ export class CreateIdentityProviderResponseBody extends $dara.Model {
   httpStatusCode?: number;
   /**
    * @remarks
-   * The response message. If the request fails, an error description is returned.
+   * The response message. An error description is returned if the request fails.
    * 
    * @example
    * success

package/src/models/CreateIdentityProviderShrinkRequest.ts

@@ -5,7 +5,7 @@ import * as $dara from '@darabonba/typescript';
 export class CreateIdentityProviderShrinkRequest extends $dara.Model {
   /**
    * @remarks
-   * The request body for binding an external identity provider.
+   * The request content for binding an external identity provider.
    */
   bodyShrink?: string;
   static names(): { [key: string]: string } {

package/src/models/CreateIdentityProviderSyncJobRequest.ts

@@ -0,0 +1,24 @@
+// This file is auto-generated, don't edit it
+import * as $dara from '@darabonba/typescript';
+
+
+export class CreateIdentityProviderSyncJobRequest extends $dara.Model {
+  static names(): { [key: string]: string } {
+    return {
+    };
+  }
+
+  static types(): { [key: string]: any } {
+    return {
+    };
+  }
+
+  validate() {
+    super.validate();
+  }
+
+  constructor(map?: { [key: string]: any }) {
+    super(map);
+  }
+}
+

package/src/models/CreateIdentityProviderSyncJobResponse.ts

@@ -0,0 +1,40 @@
+// This file is auto-generated, don't edit it
+import * as $dara from '@darabonba/typescript';
+import { CreateIdentityProviderSyncJobResponseBody } from "./CreateIdentityProviderSyncJobResponseBody";
+
+
+export class CreateIdentityProviderSyncJobResponse extends $dara.Model {
+  headers?: { [key: string]: string };
+  statusCode?: number;
+  body?: CreateIdentityProviderSyncJobResponseBody;
+  static names(): { [key: string]: string } {
+    return {
+      headers: 'headers',
+      statusCode: 'statusCode',
+      body: 'body',
+    };
+  }
+
+  static types(): { [key: string]: any } {
+    return {
+      headers: { 'type': 'map', 'keyType': 'string', 'valueType': 'string' },
+      statusCode: 'number',
+      body: CreateIdentityProviderSyncJobResponseBody,
+    };
+  }
+
+  validate() {
+    if(this.headers) {
+      $dara.Model.validateMap(this.headers);
+    }
+    if(this.body && typeof (this.body as any).validate === 'function') {
+      (this.body as any).validate();
+    }
+    super.validate();
+  }
+
+  constructor(map?: { [key: string]: any }) {
+    super(map);
+  }
+}
+