@barndoor-ai/sdk 2.16.0-dev.gdc152d9 → 2.18.0-dev.g5fbcd55

package/dist/esm/apis/LlmGatewayApi.js

@@ -4,7 +4,7 @@
  * Barndoor.ai Public API
  * Unified public API specification for Barndoor.ai platform
  *
- * The version of the OpenAPI document: 2.16.0
+ * The version of the OpenAPI document: 2.18.0
  *
  *
  * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
@@ -17,6 +17,9 @@ import { AdminModelPricingFromJSON, } from '../models/AdminModelPricing.js';
 import { AgentRuntimeProfileFromJSON, } from '../models/AgentRuntimeProfile.js';
 import { ApiKeyFromJSON, } from '../models/ApiKey.js';
 import { ApiKeyDisabledResponseFromJSON, } from '../models/ApiKeyDisabledResponse.js';
+import { ApiKeyLifetimePoliciesFromJSON, } from '../models/ApiKeyLifetimePolicies.js';
+import { ApiKeyLifetimePolicyFromJSON, } from '../models/ApiKeyLifetimePolicy.js';
+import { ApiKeyLifetimeUserOverrideFromJSON, } from '../models/ApiKeyLifetimeUserOverride.js';
 import { ArchivePricingResponseFromJSON, } from '../models/ArchivePricingResponse.js';
 import { ClientSettingsFromJSON, } from '../models/ClientSettings.js';
 import { ConnectionFromJSON, } from '../models/Connection.js';
@@ -24,6 +27,7 @@ import { CreateApiKeyRequestToJSON, } from '../models/CreateApiKeyRequest.js';
 import { CreateApiKeyResponseFromJSON, } from '../models/CreateApiKeyResponse.js';
 import { CreateBudgetRequestToJSON, } from '../models/CreateBudgetRequest.js';
 import { CreateConnectionRequestToJSON, } from '../models/CreateConnectionRequest.js';
+import { CreateGroupLifetimePolicyRequestToJSON, } from '../models/CreateGroupLifetimePolicyRequest.js';
 import { CreateModelAccessRequestToJSON, } from '../models/CreateModelAccessRequest.js';
 import { CreateModelMappingRequestToJSON, } from '../models/CreateModelMappingRequest.js';
 import { CreatePricingRequestToJSON, } from '../models/CreatePricingRequest.js';
@@ -31,11 +35,13 @@ import { CreateProfileRequestToJSON, } from '../models/CreateProfileRequest.js';
 import { CreateProviderRequestToJSON, } from '../models/CreateProviderRequest.js';
 import { CreateRateLimitRequestToJSON, } from '../models/CreateRateLimitRequest.js';
 import { CreateRouteGroupRequestToJSON, } from '../models/CreateRouteGroupRequest.js';
+import { CreateUserLifetimePolicyRequestToJSON, } from '../models/CreateUserLifetimePolicyRequest.js';
 import { DefaultPricingEntryFromJSON, } from '../models/DefaultPricingEntry.js';
 import { DefaultSetupRequestToJSON, } from '../models/DefaultSetupRequest.js';
 import { DefaultSetupResponseFromJSON, } from '../models/DefaultSetupResponse.js';
 import { DeletedResponseFromJSON, } from '../models/DeletedResponse.js';
 import { GovernanceConfigFromJSON, GovernanceConfigToJSON, } from '../models/GovernanceConfig.js';
+import { LifetimeLimitInputToJSON, } from '../models/LifetimeLimitInput.js';
 import { ListClientSettingsResponseFromJSON, } from '../models/ListClientSettingsResponse.js';
 import { ListProfilesResponseFromJSON, } from '../models/ListProfilesResponse.js';
 import { ListRoutingRulesResponseFromJSON, } from '../models/ListRoutingRulesResponse.js';
@@ -54,12 +60,15 @@ import { RenameModelRouteResponseFromJSON, } from '../models/RenameModelRouteRes
 import { ReorderModelMappingsRequestToJSON, } from '../models/ReorderModelMappingsRequest.js';
 import { ReorderedResponseFromJSON, } from '../models/ReorderedResponse.js';
 import { RevokedResponseFromJSON, } from '../models/RevokedResponse.js';
+import { RotateApiKeyRequestToJSON, } from '../models/RotateApiKeyRequest.js';
+import { RotateApiKeyResponseFromJSON, } from '../models/RotateApiKeyResponse.js';
 import { RoutingPolicyFromJSON, } from '../models/RoutingPolicy.js';
 import { RoutingPolicyDraftToJSON, } from '../models/RoutingPolicyDraft.js';
 import { RoutingPolicyUpdateToJSON, } from '../models/RoutingPolicyUpdate.js';
 import { RoutingRuleDraftToJSON, } from '../models/RoutingRuleDraft.js';
 import { RoutingRuleWriteResponseFromJSON, } from '../models/RoutingRuleWriteResponse.js';
 import { SetApiKeyDisabledRequestToJSON, } from '../models/SetApiKeyDisabledRequest.js';
+import { SetApiKeyExpiryRequestToJSON, } from '../models/SetApiKeyExpiryRequest.js';
 import { UpdateBudgetRequestToJSON, } from '../models/UpdateBudgetRequest.js';
 import { UpdateConnectionRequestToJSON, } from '../models/UpdateConnectionRequest.js';
 import { UpdateContractRequestToJSON, } from '../models/UpdateContractRequest.js';
@@ -517,6 +526,63 @@ export class LlmGatewayApi extends runtime.BaseAPI {
         const response = await this.createDefaultSetupRaw(requestParameters, initOverrides);
         return await response.value();
     }
+    /**
+     * Creates request options for createGroupLifetimePolicy without sending the request
+     */
+    async createGroupLifetimePolicyRequestOpts(requestParameters) {
+        if (requestParameters['createGroupLifetimePolicyRequest'] == null) {
+            throw new runtime.RequiredError('createGroupLifetimePolicyRequest', 'Required parameter "createGroupLifetimePolicyRequest" was null or undefined when calling createGroupLifetimePolicy().');
+        }
+        const queryParameters = {};
+        const headerParameters = {};
+        headerParameters['Content-Type'] = 'application/json';
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("ApiKey", []);
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+        let urlPath = `/api/llm-gateway/admin/api-key-lifetime-policies/groups`;
+        return {
+            path: urlPath,
+            method: 'POST',
+            headers: headerParameters,
+            query: queryParameters,
+            body: CreateGroupLifetimePolicyRequestToJSON(requestParameters['createGroupLifetimePolicyRequest']),
+        };
+    }
+    /**
+     * Override the default for members of one IdP group. An override replaces the default for its members, so one with neither field set exempts the group. A user in several overridden groups gets the strictest: the shortest maximum, and an expiry required if any requires one.
+     * Create a group API key lifetime override
+     */
+    async createGroupLifetimePolicyRaw(requestParameters, initOverrides) {
+        const requestOptions = await this.createGroupLifetimePolicyRequestOpts(requestParameters);
+        const response = await this.request(requestOptions, initOverrides);
+        return new runtime.JSONApiResponse(response, (jsonValue) => ApiKeyLifetimePolicyFromJSON(jsonValue));
+    }
+    /**
+     * Override the default for members of one IdP group. An override replaces the default for its members, so one with neither field set exempts the group. A user in several overridden groups gets the strictest: the shortest maximum, and an expiry required if any requires one.
+     * Create a group API key lifetime override
+     */
+    async createGroupLifetimePolicy(requestParameters, initOverrides) {
+        const response = await this.createGroupLifetimePolicyRaw(requestParameters, initOverrides);
+        return await response.value();
+    }
     /**
      * Creates request options for createModelAccess without sending the request
      */
@@ -1023,6 +1089,63 @@ export class LlmGatewayApi extends runtime.BaseAPI {
         const response = await this.createRoutingRuleRaw(requestParameters, initOverrides);
         return await response.value();
     }
+    /**
+     * Creates request options for createUserLifetimePolicy without sending the request
+     */
+    async createUserLifetimePolicyRequestOpts(requestParameters) {
+        if (requestParameters['createUserLifetimePolicyRequest'] == null) {
+            throw new runtime.RequiredError('createUserLifetimePolicyRequest', 'Required parameter "createUserLifetimePolicyRequest" was null or undefined when calling createUserLifetimePolicy().');
+        }
+        const queryParameters = {};
+        const headerParameters = {};
+        headerParameters['Content-Type'] = 'application/json';
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("ApiKey", []);
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+        let urlPath = `/api/llm-gateway/admin/api-key-lifetime-policies/users`;
+        return {
+            path: urlPath,
+            method: 'POST',
+            headers: headerParameters,
+            query: queryParameters,
+            body: CreateUserLifetimePolicyRequestToJSON(requestParameters['createUserLifetimePolicyRequest']),
+        };
+    }
+    /**
+     * Override the policy for one user. A user override wins outright: it replaces the user\'s group overrides and the default, so it can be looser or stricter than both. One with neither field set exempts the user.
+     * Create a user API key lifetime override
+     */
+    async createUserLifetimePolicyRaw(requestParameters, initOverrides) {
+        const requestOptions = await this.createUserLifetimePolicyRequestOpts(requestParameters);
+        const response = await this.request(requestOptions, initOverrides);
+        return new runtime.JSONApiResponse(response, (jsonValue) => ApiKeyLifetimeUserOverrideFromJSON(jsonValue));
+    }
+    /**
+     * Override the policy for one user. A user override wins outright: it replaces the user\'s group overrides and the default, so it can be looser or stricter than both. One with neither field set exempts the user.
+     * Create a user API key lifetime override
+     */
+    async createUserLifetimePolicy(requestParameters, initOverrides) {
+        const response = await this.createUserLifetimePolicyRaw(requestParameters, initOverrides);
+        return await response.value();
+    }
     /**
      * Creates request options for deleteBudget without sending the request
      */
@@ -1131,6 +1254,62 @@ export class LlmGatewayApi extends runtime.BaseAPI {
         const response = await this.deleteConnectionRaw(requestParameters, initOverrides);
         return await response.value();
     }
+    /**
+     * Creates request options for deleteGroupLifetimePolicy without sending the request
+     */
+    async deleteGroupLifetimePolicyRequestOpts(requestParameters) {
+        if (requestParameters['id'] == null) {
+            throw new runtime.RequiredError('id', 'Required parameter "id" was null or undefined when calling deleteGroupLifetimePolicy().');
+        }
+        const queryParameters = {};
+        const headerParameters = {};
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("ApiKey", []);
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+        let urlPath = `/api/llm-gateway/admin/api-key-lifetime-policies/groups/{id}`;
+        urlPath = urlPath.replace('{id}', encodeURIComponent(String(requestParameters['id'])));
+        return {
+            path: urlPath,
+            method: 'DELETE',
+            headers: headerParameters,
+            query: queryParameters,
+        };
+    }
+    /**
+     * Members of the group fall back to the default (or to their other groups\' overrides).
+     * Delete a group API key lifetime override
+     */
+    async deleteGroupLifetimePolicyRaw(requestParameters, initOverrides) {
+        const requestOptions = await this.deleteGroupLifetimePolicyRequestOpts(requestParameters);
+        const response = await this.request(requestOptions, initOverrides);
+        return new runtime.JSONApiResponse(response, (jsonValue) => DeletedResponseFromJSON(jsonValue));
+    }
+    /**
+     * Members of the group fall back to the default (or to their other groups\' overrides).
+     * Delete a group API key lifetime override
+     */
+    async deleteGroupLifetimePolicy(requestParameters, initOverrides) {
+        const response = await this.deleteGroupLifetimePolicyRaw(requestParameters, initOverrides);
+        return await response.value();
+    }
     /**
      * Creates request options for deleteModelAccess without sending the request
      */
@@ -1569,6 +1748,62 @@ export class LlmGatewayApi extends runtime.BaseAPI {
     async deleteRoutingRule(requestParameters, initOverrides) {
         await this.deleteRoutingRuleRaw(requestParameters, initOverrides);
     }
+    /**
+     * Creates request options for deleteUserLifetimePolicy without sending the request
+     */
+    async deleteUserLifetimePolicyRequestOpts(requestParameters) {
+        if (requestParameters['id'] == null) {
+            throw new runtime.RequiredError('id', 'Required parameter "id" was null or undefined when calling deleteUserLifetimePolicy().');
+        }
+        const queryParameters = {};
+        const headerParameters = {};
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("ApiKey", []);
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+        let urlPath = `/api/llm-gateway/admin/api-key-lifetime-policies/users/{id}`;
+        urlPath = urlPath.replace('{id}', encodeURIComponent(String(requestParameters['id'])));
+        return {
+            path: urlPath,
+            method: 'DELETE',
+            headers: headerParameters,
+            query: queryParameters,
+        };
+    }
+    /**
+     * The user falls back to their groups\' overrides, or to the default.
+     * Delete a user API key lifetime override
+     */
+    async deleteUserLifetimePolicyRaw(requestParameters, initOverrides) {
+        const requestOptions = await this.deleteUserLifetimePolicyRequestOpts(requestParameters);
+        const response = await this.request(requestOptions, initOverrides);
+        return new runtime.JSONApiResponse(response, (jsonValue) => DeletedResponseFromJSON(jsonValue));
+    }
+    /**
+     * The user falls back to their groups\' overrides, or to the default.
+     * Delete a user API key lifetime override
+     */
+    async deleteUserLifetimePolicy(requestParameters, initOverrides) {
+        const response = await this.deleteUserLifetimePolicyRaw(requestParameters, initOverrides);
+        return await response.value();
+    }
     /**
      * Creates request options for getApiKey without sending the request
      */
@@ -2244,6 +2479,58 @@ export class LlmGatewayApi extends runtime.BaseAPI {
         const response = await this.listDefaultsRaw(initOverrides);
         return await response.value();
     }
+    /**
+     * Creates request options for listLifetimePolicies without sending the request
+     */
+    async listLifetimePoliciesRequestOpts() {
+        const queryParameters = {};
+        const headerParameters = {};
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("ApiKey", []);
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+        let urlPath = `/api/llm-gateway/admin/api-key-lifetime-policies`;
+        return {
+            path: urlPath,
+            method: 'GET',
+            headers: headerParameters,
+            query: queryParameters,
+        };
+    }
+    /**
+     * The org default, per-group overrides and per-user overrides that limit how long self-serve API keys (created by users for themselves) may live. A user\'s own override wins; otherwise the strictest of their groups\' overrides; otherwise the default. Keys created by admins are exempt. Existing keys keep their expiry; the policy is checked when a key is created or rotated.
+     * Get the API key lifetime policy
+     */
+    async listLifetimePoliciesRaw(initOverrides) {
+        const requestOptions = await this.listLifetimePoliciesRequestOpts();
+        const response = await this.request(requestOptions, initOverrides);
+        return new runtime.JSONApiResponse(response, (jsonValue) => ApiKeyLifetimePoliciesFromJSON(jsonValue));
+    }
+    /**
+     * The org default, per-group overrides and per-user overrides that limit how long self-serve API keys (created by users for themselves) may live. A user\'s own override wins; otherwise the strictest of their groups\' overrides; otherwise the default. Keys created by admins are exempt. Existing keys keep their expiry; the policy is checked when a key is created or rotated.
+     * Get the API key lifetime policy
+     */
+    async listLifetimePolicies(initOverrides) {
+        const response = await this.listLifetimePoliciesRaw(initOverrides);
+        return await response.value();
+    }
     /**
      * Creates request options for listModelAccess without sending the request
      */
@@ -3172,6 +3459,67 @@ export class LlmGatewayApi extends runtime.BaseAPI {
         const response = await this.revokeApiKeyRaw(requestParameters, initOverrides);
         return await response.value();
     }
+    /**
+     * Creates request options for rotateApiKey without sending the request
+     */
+    async rotateApiKeyRequestOpts(requestParameters) {
+        if (requestParameters['id'] == null) {
+            throw new runtime.RequiredError('id', 'Required parameter "id" was null or undefined when calling rotateApiKey().');
+        }
+        if (requestParameters['rotateApiKeyRequest'] == null) {
+            throw new runtime.RequiredError('rotateApiKeyRequest', 'Required parameter "rotateApiKeyRequest" was null or undefined when calling rotateApiKey().');
+        }
+        const queryParameters = {};
+        const headerParameters = {};
+        headerParameters['Content-Type'] = 'application/json';
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("ApiKey", []);
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+        let urlPath = `/api/llm-gateway/admin/api-keys/{id}/rotate`;
+        urlPath = urlPath.replace('{id}', encodeURIComponent(String(requestParameters['id'])));
+        return {
+            path: urlPath,
+            method: 'POST',
+            headers: headerParameters,
+            query: queryParameters,
+            body: RotateApiKeyRequestToJSON(requestParameters['rotateApiKeyRequest']),
+        };
+    }
+    /**
+     * Replace the key\'s secret in place. The key id, name, bindings and usage history are kept. With `grace_period_secs` the previous secret keeps working for that long (at most 7 days); otherwise it stops working immediately. The new secret is returned once and never stored.
+     * Rotate an API key
+     */
+    async rotateApiKeyRaw(requestParameters, initOverrides) {
+        const requestOptions = await this.rotateApiKeyRequestOpts(requestParameters);
+        const response = await this.request(requestOptions, initOverrides);
+        return new runtime.JSONApiResponse(response, (jsonValue) => RotateApiKeyResponseFromJSON(jsonValue));
+    }
+    /**
+     * Replace the key\'s secret in place. The key id, name, bindings and usage history are kept. With `grace_period_secs` the previous secret keeps working for that long (at most 7 days); otherwise it stops working immediately. The new secret is returned once and never stored.
+     * Rotate an API key
+     */
+    async rotateApiKey(requestParameters, initOverrides) {
+        const response = await this.rotateApiKeyRaw(requestParameters, initOverrides);
+        return await response.value();
+    }
     /**
      * Creates request options for setApiKeyDisabled without sending the request
      */
@@ -3231,6 +3579,124 @@ export class LlmGatewayApi extends runtime.BaseAPI {
         const response = await this.setApiKeyDisabledRaw(requestParameters, initOverrides);
         return await response.value();
     }
+    /**
+     * Creates request options for setApiKeyExpiry without sending the request
+     */
+    async setApiKeyExpiryRequestOpts(requestParameters) {
+        if (requestParameters['id'] == null) {
+            throw new runtime.RequiredError('id', 'Required parameter "id" was null or undefined when calling setApiKeyExpiry().');
+        }
+        if (requestParameters['setApiKeyExpiryRequest'] == null) {
+            throw new runtime.RequiredError('setApiKeyExpiryRequest', 'Required parameter "setApiKeyExpiryRequest" was null or undefined when calling setApiKeyExpiry().');
+        }
+        const queryParameters = {};
+        const headerParameters = {};
+        headerParameters['Content-Type'] = 'application/json';
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("ApiKey", []);
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+        let urlPath = `/api/llm-gateway/admin/api-keys/{id}/expiry`;
+        urlPath = urlPath.replace('{id}', encodeURIComponent(String(requestParameters['id'])));
+        return {
+            path: urlPath,
+            method: 'PUT',
+            headers: headerParameters,
+            query: queryParameters,
+            body: SetApiKeyExpiryRequestToJSON(requestParameters['setApiKeyExpiryRequest']),
+        };
+    }
+    /**
+     * Extend, shorten or remove a key\'s expiry without issuing a new secret, so clients keep working unchanged. Also reactivates an expired key. A shortened expiry takes effect immediately. Admin only, and not limited by the API key lifetime policy. To replace the secret as well, rotate the key instead.
+     * Change an API key\'s expiry
+     */
+    async setApiKeyExpiryRaw(requestParameters, initOverrides) {
+        const requestOptions = await this.setApiKeyExpiryRequestOpts(requestParameters);
+        const response = await this.request(requestOptions, initOverrides);
+        return new runtime.JSONApiResponse(response, (jsonValue) => ApiKeyFromJSON(jsonValue));
+    }
+    /**
+     * Extend, shorten or remove a key\'s expiry without issuing a new secret, so clients keep working unchanged. Also reactivates an expired key. A shortened expiry takes effect immediately. Admin only, and not limited by the API key lifetime policy. To replace the secret as well, rotate the key instead.
+     * Change an API key\'s expiry
+     */
+    async setApiKeyExpiry(requestParameters, initOverrides) {
+        const response = await this.setApiKeyExpiryRaw(requestParameters, initOverrides);
+        return await response.value();
+    }
+    /**
+     * Creates request options for setDefaultLifetimePolicy without sending the request
+     */
+    async setDefaultLifetimePolicyRequestOpts(requestParameters) {
+        if (requestParameters['lifetimeLimitInput'] == null) {
+            throw new runtime.RequiredError('lifetimeLimitInput', 'Required parameter "lifetimeLimitInput" was null or undefined when calling setDefaultLifetimePolicy().');
+        }
+        const queryParameters = {};
+        const headerParameters = {};
+        headerParameters['Content-Type'] = 'application/json';
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("ApiKey", []);
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+        let urlPath = `/api/llm-gateway/admin/api-key-lifetime-policies/default`;
+        return {
+            path: urlPath,
+            method: 'PUT',
+            headers: headerParameters,
+            query: queryParameters,
+            body: LifetimeLimitInputToJSON(requestParameters['lifetimeLimitInput']),
+        };
+    }
+    /**
+     * Set the org-wide limit for self-serve API keys. `max_lifetime_days` (1-3650) caps how long a key may live from when it is created or rotated, and also rules out keys that never expire; `require_expiry` requires an expiry without capping it; `fixed_lifetime` gives every key exactly `max_lifetime_days`, so users don\'t choose one. Sending none removes the default.
+     * Set the default API key lifetime policy
+     */
+    async setDefaultLifetimePolicyRaw(requestParameters, initOverrides) {
+        const requestOptions = await this.setDefaultLifetimePolicyRequestOpts(requestParameters);
+        const response = await this.request(requestOptions, initOverrides);
+        return new runtime.JSONApiResponse(response, (jsonValue) => ApiKeyLifetimePoliciesFromJSON(jsonValue));
+    }
+    /**
+     * Set the org-wide limit for self-serve API keys. `max_lifetime_days` (1-3650) caps how long a key may live from when it is created or rotated, and also rules out keys that never expire; `require_expiry` requires an expiry without capping it; `fixed_lifetime` gives every key exactly `max_lifetime_days`, so users don\'t choose one. Sending none removes the default.
+     * Set the default API key lifetime policy
+     */
+    async setDefaultLifetimePolicy(requestParameters, initOverrides) {
+        const response = await this.setDefaultLifetimePolicyRaw(requestParameters, initOverrides);
+        return await response.value();
+    }
     /**
      * Creates request options for setProfileDefault without sending the request
      * @deprecated
@@ -3463,6 +3929,65 @@ export class LlmGatewayApi extends runtime.BaseAPI {
         const response = await this.updateGovernanceConfigRaw(requestParameters, initOverrides);
         return await response.value();
     }
+    /**
+     * Creates request options for updateGroupLifetimePolicy without sending the request
+     */
+    async updateGroupLifetimePolicyRequestOpts(requestParameters) {
+        if (requestParameters['id'] == null) {
+            throw new runtime.RequiredError('id', 'Required parameter "id" was null or undefined when calling updateGroupLifetimePolicy().');
+        }
+        if (requestParameters['lifetimeLimitInput'] == null) {
+            throw new runtime.RequiredError('lifetimeLimitInput', 'Required parameter "lifetimeLimitInput" was null or undefined when calling updateGroupLifetimePolicy().');
+        }
+        const queryParameters = {};
+        const headerParameters = {};
+        headerParameters['Content-Type'] = 'application/json';
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("ApiKey", []);
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+        let urlPath = `/api/llm-gateway/admin/api-key-lifetime-policies/groups/{id}`;
+        urlPath = urlPath.replace('{id}', encodeURIComponent(String(requestParameters['id'])));
+        return {
+            path: urlPath,
+            method: 'PUT',
+            headers: headerParameters,
+            query: queryParameters,
+            body: LifetimeLimitInputToJSON(requestParameters['lifetimeLimitInput']),
+        };
+    }
+    /**
+     * Update a group API key lifetime override
+     */
+    async updateGroupLifetimePolicyRaw(requestParameters, initOverrides) {
+        const requestOptions = await this.updateGroupLifetimePolicyRequestOpts(requestParameters);
+        const response = await this.request(requestOptions, initOverrides);
+        return new runtime.JSONApiResponse(response, (jsonValue) => ApiKeyLifetimePolicyFromJSON(jsonValue));
+    }
+    /**
+     * Update a group API key lifetime override
+     */
+    async updateGroupLifetimePolicy(requestParameters, initOverrides) {
+        const response = await this.updateGroupLifetimePolicyRaw(requestParameters, initOverrides);
+        return await response.value();
+    }
     /**
      * Creates request options for updateModelAccess without sending the request
      */
@@ -3999,4 +4524,63 @@ export class LlmGatewayApi extends runtime.BaseAPI {
         const response = await this.updateRoutingRuleRaw(requestParameters, initOverrides);
         return await response.value();
     }
+    /**
+     * Creates request options for updateUserLifetimePolicy without sending the request
+     */
+    async updateUserLifetimePolicyRequestOpts(requestParameters) {
+        if (requestParameters['id'] == null) {
+            throw new runtime.RequiredError('id', 'Required parameter "id" was null or undefined when calling updateUserLifetimePolicy().');
+        }
+        if (requestParameters['lifetimeLimitInput'] == null) {
+            throw new runtime.RequiredError('lifetimeLimitInput', 'Required parameter "lifetimeLimitInput" was null or undefined when calling updateUserLifetimePolicy().');
+        }
+        const queryParameters = {};
+        const headerParameters = {};
+        headerParameters['Content-Type'] = 'application/json';
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("ApiKey", []);
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+        let urlPath = `/api/llm-gateway/admin/api-key-lifetime-policies/users/{id}`;
+        urlPath = urlPath.replace('{id}', encodeURIComponent(String(requestParameters['id'])));
+        return {
+            path: urlPath,
+            method: 'PUT',
+            headers: headerParameters,
+            query: queryParameters,
+            body: LifetimeLimitInputToJSON(requestParameters['lifetimeLimitInput']),
+        };
+    }
+    /**
+     * Update a user API key lifetime override
+     */
+    async updateUserLifetimePolicyRaw(requestParameters, initOverrides) {
+        const requestOptions = await this.updateUserLifetimePolicyRequestOpts(requestParameters);
+        const response = await this.request(requestOptions, initOverrides);
+        return new runtime.JSONApiResponse(response, (jsonValue) => ApiKeyLifetimeUserOverrideFromJSON(jsonValue));
+    }
+    /**
+     * Update a user API key lifetime override
+     */
+    async updateUserLifetimePolicy(requestParameters, initOverrides) {
+        const response = await this.updateUserLifetimePolicyRaw(requestParameters, initOverrides);
+        return await response.value();
+    }
 }