@alicloud/agentcore20260804 2.5.0 → 3.0.0

package/src/models/CreateIdentityProviderRequest.ts

@@ -5,7 +5,7 @@ import * as $dara from '@darabonba/typescript';
 export class CreateIdentityProviderRequestBodyMetadata extends $dara.Model {
   /**
    * @remarks
-   * The App ID of the Lark application. This parameter is required when the binding type is Feishu.
+   * The app ID of the Feishu application. This parameter is required when the binding type is Feishu.
    * 
    * @example
    * cli_exampleappid01
@@ -13,7 +13,7 @@ export class CreateIdentityProviderRequestBodyMetadata extends $dara.Model {
   appId?: string;
   /**
    * @remarks
-   * The AppKey of the DingTalk application. This parameter is required when the binding type is DingTalk.
+   * The appKey of the DingTalk application. This parameter is required when the binding type is DingTalk.
    * 
    * @example
    * dingexampleappkey01
@@ -21,7 +21,7 @@ export class CreateIdentityProviderRequestBodyMetadata extends $dara.Model {
   appKey?: string;
   /**
    * @remarks
-   * Required. The application secret of the external identity provider. This parameter is used only for write operations and is not returned by query operations.
+   * Required. The secret of the external identity provider application. This parameter is used only for writing and is not returned by the query API.
    * 
    * @example
    * example-app-secret
@@ -29,7 +29,7 @@ export class CreateIdentityProviderRequestBodyMetadata extends $dara.Model {
   appSecret?: string;
   /**
    * @remarks
-   * The CorpId of the DingTalk organization. This parameter is required when the binding type is DingTalk.
+   * The corpId of the DingTalk enterprise. This parameter is required when the binding type is DingTalk.
    * 
    * @example
    * dingexamplecorpid01
@@ -37,7 +37,7 @@ export class CreateIdentityProviderRequestBodyMetadata extends $dara.Model {
   corpId?: string;
   /**
    * @remarks
-   * The data encryption key for event subscriptions. The value must be the same as the one configured in the external identity provider application. This parameter is used only for write operations and is not returned by query operations.
+   * The data encryption key for event subscription. The value must be the same as the one configured in the external identity provider application. This parameter is used only for writing and is not returned by the query API.
    * 
    * @example
    * example-encrypt-key
@@ -45,7 +45,7 @@ export class CreateIdentityProviderRequestBodyMetadata extends $dara.Model {
   encryptKey?: string;
   /**
    * @remarks
-   * The verification token for event subscriptions. The value must be the same as the one configured in the external identity provider application. This parameter is used only for write operations and is not returned by query operations.
+   * The verification token for event subscription. The value must be the same as the one configured in the external identity provider application. This parameter is used only for writing and is not returned by the query API.
    * 
    * @example
    * example-verification-token
@@ -82,6 +82,52 @@ export class CreateIdentityProviderRequestBodyMetadata extends $dara.Model {
   }
 }
 
+export class CreateIdentityProviderRequestBodySyncScope extends $dara.Model {
+  /**
+   * @remarks
+   * When the mode is SelectedDepartments, at least one non-empty department ID must be included, which should be obtained from ListIdentityProviderDepartments. When the mode is AllAuthorized, pass an empty array or omit this parameter.
+   * 
+   * @example
+   * ["10001"]
+   */
+  departmentIds?: string[];
+  /**
+   * @remarks
+   * Valid values:
+   * - AllAuthorized: The full authorization scope, which is limited by the application address book authorization.
+   * - SelectedDepartments: The selected departments and all their sub-departments.
+   * When you explicitly submit syncScope, you must provide a valid mode, which is verified by the backend.
+   * 
+   * @example
+   * SelectedDepartments
+   */
+  mode?: string;
+  static names(): { [key: string]: string } {
+    return {
+      departmentIds: 'departmentIds',
+      mode: 'mode',
+    };
+  }
+
+  static types(): { [key: string]: any } {
+    return {
+      departmentIds: { 'type': 'array', 'itemType': 'string' },
+      mode: 'string',
+    };
+  }
+
+  validate() {
+    if(Array.isArray(this.departmentIds)) {
+      $dara.Model.validateArray(this.departmentIds);
+    }
+    super.validate();
+  }
+
+  constructor(map?: { [key: string]: any }) {
+    super(map);
+  }
+}
+
 export class CreateIdentityProviderRequestBody extends $dara.Model {
   /**
    * @remarks
@@ -95,25 +141,37 @@ export class CreateIdentityProviderRequestBody extends $dara.Model {
   identityProviderType?: string;
   /**
    * @remarks
-   * Specifies whether workspace users can log on through the external identity provider.
+   * Specifies whether to allow workspace users to log on through the external identity provider.
    */
   loginEnabled?: boolean;
   /**
    * @remarks
-   * The application configuration for the external identity provider. When you bind DingTalk, you must provide appKey, appSecret, and corpId. When you bind Feishu, you must provide appId and appSecret.
+   * The application configuration of the external identity provider. When you bind DingTalk, you must provide appKey, appSecret, and corpId. When you bind Feishu, you must provide appId and appSecret.
    */
   metadata?: CreateIdentityProviderRequestBodyMetadata;
   /**
    * @remarks
-   * Specifies whether to enable organization member synchronization. If enabled, organization members are synchronized to workspace users from the external identity provider.
+   * Specifies whether to enable organization member synchronization. After this feature is enabled, the external identity provider synchronizes organization members as workspace users.
    */
   syncEnabled?: boolean;
+  /**
+   * @remarks
+   * Controls the first synchronization when DingTalk or Feishu is bound. If this parameter is omitted or set to null, the default value is true. If this parameter is set to false, only the configuration is saved, and synchronization is explicitly triggered later. CustomSSO does not use the vendor pull link.
+   */
+  syncOnBind?: boolean;
+  /**
+   * @remarks
+   * Retains the department-based synchronization scope definition. If this parameter is omitted during creation, the default value is AllAuthorized, and the first vendor synchronization is determined by syncOnBind. If this parameter is omitted or set to null during an update, the original value is retained. Updating and saving the scope does not automatically perform full synchronization.
+   */
+  syncScope?: CreateIdentityProviderRequestBodySyncScope;
   static names(): { [key: string]: string } {
     return {
       identityProviderType: 'identityProviderType',
       loginEnabled: 'loginEnabled',
       metadata: 'metadata',
       syncEnabled: 'syncEnabled',
+      syncOnBind: 'syncOnBind',
+      syncScope: 'syncScope',
     };
   }
 
@@ -123,6 +181,8 @@ export class CreateIdentityProviderRequestBody extends $dara.Model {
       loginEnabled: 'boolean',
       metadata: CreateIdentityProviderRequestBodyMetadata,
       syncEnabled: 'boolean',
+      syncOnBind: 'boolean',
+      syncScope: CreateIdentityProviderRequestBodySyncScope,
     };
   }
 
@@ -130,6 +190,9 @@ export class CreateIdentityProviderRequestBody extends $dara.Model {
     if(this.metadata && typeof (this.metadata as any).validate === 'function') {
       (this.metadata as any).validate();
     }
+    if(this.syncScope && typeof (this.syncScope as any).validate === 'function') {
+      (this.syncScope as any).validate();
+    }
     super.validate();
   }
 
@@ -141,7 +204,7 @@ export class CreateIdentityProviderRequestBody extends $dara.Model {
 export class CreateIdentityProviderRequest extends $dara.Model {
   /**
    * @remarks
-   * The request body for binding an external identity provider.
+   * The request content for binding an external identity provider.
    */
   body?: CreateIdentityProviderRequestBody;
   static names(): { [key: string]: string } {

package/src/models/CreateIdentityProviderResponseBody.ts

@@ -2,7 +2,181 @@
 import * as $dara from '@darabonba/typescript';
 
 
+export class CreateIdentityProviderResponseBodyDataConfiguration extends $dara.Model {
+  /**
+   * @remarks
+   * HTTP-Redirect or HTTP-POST. This parameter is required for manual entry. Queries return the short name.
+   * 
+   * @example
+   * HTTP-Redirect
+   */
+  bindingType?: string;
+  /**
+   * @remarks
+   * This parameter is required for manual entry. It must be non-empty and cannot exceed 2,048 characters. Existing configurations cannot be replaced. It is different from the Entity ID of the service provider (SP) returned in queries.
+   * 
+   * @example
+   * https://idp.example.com/entity
+   */
+  entityId?: string;
+  /**
+   * @remarks
+   * This parameter is required for manual entry. It must be an absolute HTTPS URL and cannot contain user credentials or fragments.
+   * 
+   * @example
+   * https://idp.example.com/sso
+   */
+  loginUrl?: string;
+  /**
+   * @remarks
+   * The actual switch value is Enabled or Disabled. It is not equivalent to the expected loginEnabled value saved in the access configuration.
+   * 
+   * @example
+   * Enabled
+   */
+  ssoStatus?: string;
+  static names(): { [key: string]: string } {
+    return {
+      bindingType: 'bindingType',
+      entityId: 'entityId',
+      loginUrl: 'loginUrl',
+      ssoStatus: 'ssoStatus',
+    };
+  }
+
+  static types(): { [key: string]: any } {
+    return {
+      bindingType: 'string',
+      entityId: 'string',
+      loginUrl: 'string',
+      ssoStatus: 'string',
+    };
+  }
+
+  validate() {
+    super.validate();
+  }
+
+  constructor(map?: { [key: string]: any }) {
+    super(map);
+  }
+}
+
+export class CreateIdentityProviderResponseBodyDataSaml extends $dara.Model {
+  /**
+   * @remarks
+   * HTTP-Redirect or HTTP-POST. This parameter is required for manual entry. Queries return the short name.
+   * 
+   * @example
+   * HTTP-Redirect
+   */
+  bindingType?: string;
+  /**
+   * @remarks
+   * This parameter is required for manual entry. It must be non-empty and cannot exceed 2,048 characters. Existing configurations cannot be replaced. It is different from the Entity ID of the service provider (SP) returned in queries.
+   * 
+   * @example
+   * https://idp.example.com/entity
+   */
+  entityId?: string;
+  /**
+   * @remarks
+   * This parameter is required for manual entry. It must be an absolute HTTPS URL and cannot contain user credentials or fragments.
+   * 
+   * @example
+   * https://idp.example.com/sso
+   */
+  loginUrl?: string;
+  /**
+   * @remarks
+   * This parameter is required for manual entry and must be a non-empty array. Use PEM X.509 certificate text. The current validity period is verified. A maximum of 10 certificates are supported.
+   * 
+   * @example
+   * ["-----BEGIN CERTIFICATE-----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\\\\njfTmRiedeb2VZJZElptD92z0AqFR7z2d5B+OqpPA2gjuMLV5\\\\n-----END CERTIFICATE-----"]
+   */
+  x509Certificates?: string[];
+  static names(): { [key: string]: string } {
+    return {
+      bindingType: 'bindingType',
+      entityId: 'entityId',
+      loginUrl: 'loginUrl',
+      x509Certificates: 'x509Certificates',
+    };
+  }
+
+  static types(): { [key: string]: any } {
+    return {
+      bindingType: 'string',
+      entityId: 'string',
+      loginUrl: 'string',
+      x509Certificates: { 'type': 'array', 'itemType': 'string' },
+    };
+  }
+
+  validate() {
+    if(Array.isArray(this.x509Certificates)) {
+      $dara.Model.validateArray(this.x509Certificates);
+    }
+    super.validate();
+  }
+
+  constructor(map?: { [key: string]: any }) {
+    super(map);
+  }
+}
+
+export class CreateIdentityProviderResponseBodyDataSyncScope extends $dara.Model {
+  /**
+   * @remarks
+   * When the mode is SelectedDepartments, at least one non-empty department ID must be included, which should be obtained from ListIdentityProviderDepartments. When the mode is AllAuthorized, pass an empty array or omit this parameter.
+   * 
+   * @example
+   * ["10001"]
+   */
+  departmentIds?: string[];
+  /**
+   * @remarks
+   * Valid values:
+   * - AllAuthorized: The full authorization scope, which is limited by the application address book authorization.
+   * - SelectedDepartments: The selected departments and all their sub-departments.
+   * When you explicitly submit syncScope, you must provide a valid mode, which is verified by the backend.
+   * 
+   * @example
+   * SelectedDepartments
+   */
+  mode?: string;
+  static names(): { [key: string]: string } {
+    return {
+      departmentIds: 'departmentIds',
+      mode: 'mode',
+    };
+  }
+
+  static types(): { [key: string]: any } {
+    return {
+      departmentIds: { 'type': 'array', 'itemType': 'string' },
+      mode: 'string',
+    };
+  }
+
+  validate() {
+    if(Array.isArray(this.departmentIds)) {
+      $dara.Model.validateArray(this.departmentIds);
+    }
+    super.validate();
+  }
+
+  constructor(map?: { [key: string]: any }) {
+    super(map);
+  }
+}
+
 export class CreateIdentityProviderResponseBodyData extends $dara.Model {
+  /**
+   * @remarks
+   * The actual SAML configuration is read back on demand only in the GetIdentityProvider operation. SCIM queries and preparations return the actual receiving status and URL.
+   */
+  configuration?: CreateIdentityProviderResponseBodyDataConfiguration;
   /**
    * @remarks
    * The type of the external identity provider. Valid values: DingTalk and Feishu.
@@ -13,21 +187,34 @@ export class CreateIdentityProviderResponseBodyData extends $dara.Model {
   identityProviderType?: string;
   /**
    * @remarks
-   * Specifies whether workspace users can log on through the external identity provider.
+   * Specifies whether to allow workspace users to log on through the external identity provider.
    */
   loginEnabled?: boolean;
+  /**
+   * @remarks
+   * Only SAML is currently supported. This parameter may not be returned if no valid configuration is saved. Placeholder initialization with OIDC is not supported.
+   * 
+   * @example
+   * SAML
+   */
+  protocol?: string;
+  /**
+   * @remarks
+   * The input supports either XML or complete manual entry. Queries return the standardized configuration and do not echo the original XML. This parameter can be omitted if it is not configured.
+   */
+  saml?: CreateIdentityProviderResponseBodyDataSaml;
   /**
    * @remarks
    * The binding status. Valid values:
-   * - CONFIGURED: The configuration is accepted, and the system is waiting to activate the user pool.
+   * - CONFIGURED: The configuration is accepted and waiting for the user pool to be activated.
    * - SYNCING: Organization members are being synchronized.
-   * - SYNCED: Organization member synchronization is completed.
+   * - SYNCED: Organization members are synchronized.
    * - READY: The binding is in effect.
    * - SYNC_FAILED: Organization member synchronization failed.
    * - UPDATING: The configuration is being updated.
-   * - UPDATE_FAILED: The configuration update failed.
-   * - DISCONNECTING: The unbinding is in progress.
-   * - DISCONNECT_FAILED: The unbinding failed.
+   * - UPDATE_FAILED: Configuration update failed.
+   * - DISCONNECTING: The binding is being removed.
+   * - DISCONNECT_FAILED: Binding removal failed.
    * 
    * @example
    * READY
@@ -35,9 +222,14 @@ export class CreateIdentityProviderResponseBodyData extends $dara.Model {
   status?: string;
   /**
    * @remarks
-   * Specifies whether to enable organization member synchronization. If enabled, organization members are synchronized to workspace users from the external identity provider.
+   * Specifies whether to enable organization member synchronization. After this feature is enabled, the external identity provider synchronizes organization members as workspace users.
    */
   syncEnabled?: boolean;
+  /**
+   * @remarks
+   * Retains the department-based synchronization scope definition. If this parameter is omitted during creation, the default value is AllAuthorized, and the first vendor synchronization is determined by syncOnBind. If this parameter is omitted or set to null during an update, the original value is retained. Updating and saving the scope does not automatically perform full synchronization.
+   */
+  syncScope?: CreateIdentityProviderResponseBodyDataSyncScope;
   /**
    * @remarks
    * The workspace ID.
@@ -48,25 +240,42 @@ export class CreateIdentityProviderResponseBodyData extends $dara.Model {
   workspaceId?: string;
   static names(): { [key: string]: string } {
     return {
+      configuration: 'configuration',
       identityProviderType: 'identityProviderType',
       loginEnabled: 'loginEnabled',
+      protocol: 'protocol',
+      saml: 'saml',
       status: 'status',
       syncEnabled: 'syncEnabled',
+      syncScope: 'syncScope',
       workspaceId: 'workspaceId',
     };
   }
 
   static types(): { [key: string]: any } {
     return {
+      configuration: CreateIdentityProviderResponseBodyDataConfiguration,
       identityProviderType: 'string',
       loginEnabled: 'boolean',
+      protocol: 'string',
+      saml: CreateIdentityProviderResponseBodyDataSaml,
       status: 'string',
       syncEnabled: 'boolean',
+      syncScope: CreateIdentityProviderResponseBodyDataSyncScope,
       workspaceId: 'string',
     };
   }
 
   validate() {
+    if(this.configuration && typeof (this.configuration as any).validate === 'function') {
+      (this.configuration as any).validate();
+    }
+    if(this.saml && typeof (this.saml as any).validate === 'function') {
+      (this.saml as any).validate();
+    }
+    if(this.syncScope && typeof (this.syncScope as any).validate === 'function') {
+      (this.syncScope as any).validate();
+    }
     super.validate();
   }
 
@@ -99,7 +308,7 @@ export class CreateIdentityProviderResponseBody extends $dara.Model {
   httpStatusCode?: number;
   /**
    * @remarks
-   * The response message. If the request fails, an error description is returned.
+   * The response message. An error description is returned when the request fails.
    * 
    * @example
    * success

package/src/models/CreateIdentityProviderScimcredentialRequest.ts

@@ -0,0 +1,24 @@
+// This file is auto-generated, don't edit it
+import * as $dara from '@darabonba/typescript';
+
+
+export class CreateIdentityProviderSCIMCredentialRequest extends $dara.Model {
+  static names(): { [key: string]: string } {
+    return {
+    };
+  }
+
+  static types(): { [key: string]: any } {
+    return {
+    };
+  }
+
+  validate() {
+    super.validate();
+  }
+
+  constructor(map?: { [key: string]: any }) {
+    super(map);
+  }
+}
+

package/src/models/CreateIdentityProviderScimcredentialResponse.ts

@@ -0,0 +1,40 @@
+// This file is auto-generated, don't edit it
+import * as $dara from '@darabonba/typescript';
+import { CreateIdentityProviderSCIMCredentialResponseBody } from "./CreateIdentityProviderScimcredentialResponseBody";
+
+
+export class CreateIdentityProviderSCIMCredentialResponse extends $dara.Model {
+  headers?: { [key: string]: string };
+  statusCode?: number;
+  body?: CreateIdentityProviderSCIMCredentialResponseBody;
+  static names(): { [key: string]: string } {
+    return {
+      headers: 'headers',
+      statusCode: 'statusCode',
+      body: 'body',
+    };
+  }
+
+  static types(): { [key: string]: any } {
+    return {
+      headers: { 'type': 'map', 'keyType': 'string', 'valueType': 'string' },
+      statusCode: 'number',
+      body: CreateIdentityProviderSCIMCredentialResponseBody,
+    };
+  }
+
+  validate() {
+    if(this.headers) {
+      $dara.Model.validateMap(this.headers);
+    }
+    if(this.body && typeof (this.body as any).validate === 'function') {
+      (this.body as any).validate();
+    }
+    super.validate();
+  }
+
+  constructor(map?: { [key: string]: any }) {
+    super(map);
+  }
+}
+