@barndoor-ai/sdk 2.17.0-dev.gc76b9f3 → 2.18.0

package/dist/apis/LlmGatewayApi.js

@@ -5,7 +5,7 @@
  * Barndoor.ai Public API
  * Unified public API specification for Barndoor.ai platform
  *
- * The version of the OpenAPI document: 2.17.0
+ * The version of the OpenAPI document: 2.18.0
  *
  *
  * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
@@ -53,6 +53,9 @@ const AdminModelPricing_js_1 = require("../models/AdminModelPricing.js");
 const AgentRuntimeProfile_js_1 = require("../models/AgentRuntimeProfile.js");
 const ApiKey_js_1 = require("../models/ApiKey.js");
 const ApiKeyDisabledResponse_js_1 = require("../models/ApiKeyDisabledResponse.js");
+const ApiKeyLifetimePolicies_js_1 = require("../models/ApiKeyLifetimePolicies.js");
+const ApiKeyLifetimePolicy_js_1 = require("../models/ApiKeyLifetimePolicy.js");
+const ApiKeyLifetimeUserOverride_js_1 = require("../models/ApiKeyLifetimeUserOverride.js");
 const ArchivePricingResponse_js_1 = require("../models/ArchivePricingResponse.js");
 const ClientSettings_js_1 = require("../models/ClientSettings.js");
 const Connection_js_1 = require("../models/Connection.js");
@@ -60,6 +63,7 @@ const CreateApiKeyRequest_js_1 = require("../models/CreateApiKeyRequest.js");
 const CreateApiKeyResponse_js_1 = require("../models/CreateApiKeyResponse.js");
 const CreateBudgetRequest_js_1 = require("../models/CreateBudgetRequest.js");
 const CreateConnectionRequest_js_1 = require("../models/CreateConnectionRequest.js");
+const CreateGroupLifetimePolicyRequest_js_1 = require("../models/CreateGroupLifetimePolicyRequest.js");
 const CreateModelAccessRequest_js_1 = require("../models/CreateModelAccessRequest.js");
 const CreateModelMappingRequest_js_1 = require("../models/CreateModelMappingRequest.js");
 const CreatePricingRequest_js_1 = require("../models/CreatePricingRequest.js");
@@ -67,11 +71,13 @@ const CreateProfileRequest_js_1 = require("../models/CreateProfileRequest.js");
 const CreateProviderRequest_js_1 = require("../models/CreateProviderRequest.js");
 const CreateRateLimitRequest_js_1 = require("../models/CreateRateLimitRequest.js");
 const CreateRouteGroupRequest_js_1 = require("../models/CreateRouteGroupRequest.js");
+const CreateUserLifetimePolicyRequest_js_1 = require("../models/CreateUserLifetimePolicyRequest.js");
 const DefaultPricingEntry_js_1 = require("../models/DefaultPricingEntry.js");
 const DefaultSetupRequest_js_1 = require("../models/DefaultSetupRequest.js");
 const DefaultSetupResponse_js_1 = require("../models/DefaultSetupResponse.js");
 const DeletedResponse_js_1 = require("../models/DeletedResponse.js");
 const GovernanceConfig_js_1 = require("../models/GovernanceConfig.js");
+const LifetimeLimitInput_js_1 = require("../models/LifetimeLimitInput.js");
 const ListClientSettingsResponse_js_1 = require("../models/ListClientSettingsResponse.js");
 const ListProfilesResponse_js_1 = require("../models/ListProfilesResponse.js");
 const ListRoutingRulesResponse_js_1 = require("../models/ListRoutingRulesResponse.js");
@@ -90,12 +96,15 @@ const RenameModelRouteResponse_js_1 = require("../models/RenameModelRouteRespons
 const ReorderModelMappingsRequest_js_1 = require("../models/ReorderModelMappingsRequest.js");
 const ReorderedResponse_js_1 = require("../models/ReorderedResponse.js");
 const RevokedResponse_js_1 = require("../models/RevokedResponse.js");
+const RotateApiKeyRequest_js_1 = require("../models/RotateApiKeyRequest.js");
+const RotateApiKeyResponse_js_1 = require("../models/RotateApiKeyResponse.js");
 const RoutingPolicy_js_1 = require("../models/RoutingPolicy.js");
 const RoutingPolicyDraft_js_1 = require("../models/RoutingPolicyDraft.js");
 const RoutingPolicyUpdate_js_1 = require("../models/RoutingPolicyUpdate.js");
 const RoutingRuleDraft_js_1 = require("../models/RoutingRuleDraft.js");
 const RoutingRuleWriteResponse_js_1 = require("../models/RoutingRuleWriteResponse.js");
 const SetApiKeyDisabledRequest_js_1 = require("../models/SetApiKeyDisabledRequest.js");
+const SetApiKeyExpiryRequest_js_1 = require("../models/SetApiKeyExpiryRequest.js");
 const UpdateBudgetRequest_js_1 = require("../models/UpdateBudgetRequest.js");
 const UpdateConnectionRequest_js_1 = require("../models/UpdateConnectionRequest.js");
 const UpdateContractRequest_js_1 = require("../models/UpdateContractRequest.js");
@@ -553,6 +562,63 @@ class LlmGatewayApi extends runtime.BaseAPI {
         const response = await this.createDefaultSetupRaw(requestParameters, initOverrides);
         return await response.value();
     }
+    /**
+     * Creates request options for createGroupLifetimePolicy without sending the request
+     */
+    async createGroupLifetimePolicyRequestOpts(requestParameters) {
+        if (requestParameters['createGroupLifetimePolicyRequest'] == null) {
+            throw new runtime.RequiredError('createGroupLifetimePolicyRequest', 'Required parameter "createGroupLifetimePolicyRequest" was null or undefined when calling createGroupLifetimePolicy().');
+        }
+        const queryParameters = {};
+        const headerParameters = {};
+        headerParameters['Content-Type'] = 'application/json';
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("ApiKey", []);
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+        let urlPath = `/api/llm-gateway/admin/api-key-lifetime-policies/groups`;
+        return {
+            path: urlPath,
+            method: 'POST',
+            headers: headerParameters,
+            query: queryParameters,
+            body: (0, CreateGroupLifetimePolicyRequest_js_1.CreateGroupLifetimePolicyRequestToJSON)(requestParameters['createGroupLifetimePolicyRequest']),
+        };
+    }
+    /**
+     * Override the default for members of one IdP group. An override replaces the default for its members, so one with neither field set exempts the group. A user in several overridden groups gets the strictest: the shortest maximum, and an expiry required if any requires one.
+     * Create a group API key lifetime override
+     */
+    async createGroupLifetimePolicyRaw(requestParameters, initOverrides) {
+        const requestOptions = await this.createGroupLifetimePolicyRequestOpts(requestParameters);
+        const response = await this.request(requestOptions, initOverrides);
+        return new runtime.JSONApiResponse(response, (jsonValue) => (0, ApiKeyLifetimePolicy_js_1.ApiKeyLifetimePolicyFromJSON)(jsonValue));
+    }
+    /**
+     * Override the default for members of one IdP group. An override replaces the default for its members, so one with neither field set exempts the group. A user in several overridden groups gets the strictest: the shortest maximum, and an expiry required if any requires one.
+     * Create a group API key lifetime override
+     */
+    async createGroupLifetimePolicy(requestParameters, initOverrides) {
+        const response = await this.createGroupLifetimePolicyRaw(requestParameters, initOverrides);
+        return await response.value();
+    }
     /**
      * Creates request options for createModelAccess without sending the request
      */
@@ -1059,6 +1125,63 @@ class LlmGatewayApi extends runtime.BaseAPI {
         const response = await this.createRoutingRuleRaw(requestParameters, initOverrides);
         return await response.value();
     }
+    /**
+     * Creates request options for createUserLifetimePolicy without sending the request
+     */
+    async createUserLifetimePolicyRequestOpts(requestParameters) {
+        if (requestParameters['createUserLifetimePolicyRequest'] == null) {
+            throw new runtime.RequiredError('createUserLifetimePolicyRequest', 'Required parameter "createUserLifetimePolicyRequest" was null or undefined when calling createUserLifetimePolicy().');
+        }
+        const queryParameters = {};
+        const headerParameters = {};
+        headerParameters['Content-Type'] = 'application/json';
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("ApiKey", []);
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+        let urlPath = `/api/llm-gateway/admin/api-key-lifetime-policies/users`;
+        return {
+            path: urlPath,
+            method: 'POST',
+            headers: headerParameters,
+            query: queryParameters,
+            body: (0, CreateUserLifetimePolicyRequest_js_1.CreateUserLifetimePolicyRequestToJSON)(requestParameters['createUserLifetimePolicyRequest']),
+        };
+    }
+    /**
+     * Override the policy for one user. A user override wins outright: it replaces the user\'s group overrides and the default, so it can be looser or stricter than both. One with neither field set exempts the user.
+     * Create a user API key lifetime override
+     */
+    async createUserLifetimePolicyRaw(requestParameters, initOverrides) {
+        const requestOptions = await this.createUserLifetimePolicyRequestOpts(requestParameters);
+        const response = await this.request(requestOptions, initOverrides);
+        return new runtime.JSONApiResponse(response, (jsonValue) => (0, ApiKeyLifetimeUserOverride_js_1.ApiKeyLifetimeUserOverrideFromJSON)(jsonValue));
+    }
+    /**
+     * Override the policy for one user. A user override wins outright: it replaces the user\'s group overrides and the default, so it can be looser or stricter than both. One with neither field set exempts the user.
+     * Create a user API key lifetime override
+     */
+    async createUserLifetimePolicy(requestParameters, initOverrides) {
+        const response = await this.createUserLifetimePolicyRaw(requestParameters, initOverrides);
+        return await response.value();
+    }
     /**
      * Creates request options for deleteBudget without sending the request
      */
@@ -1167,6 +1290,62 @@ class LlmGatewayApi extends runtime.BaseAPI {
         const response = await this.deleteConnectionRaw(requestParameters, initOverrides);
         return await response.value();
     }
+    /**
+     * Creates request options for deleteGroupLifetimePolicy without sending the request
+     */
+    async deleteGroupLifetimePolicyRequestOpts(requestParameters) {
+        if (requestParameters['id'] == null) {
+            throw new runtime.RequiredError('id', 'Required parameter "id" was null or undefined when calling deleteGroupLifetimePolicy().');
+        }
+        const queryParameters = {};
+        const headerParameters = {};
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("ApiKey", []);
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+        let urlPath = `/api/llm-gateway/admin/api-key-lifetime-policies/groups/{id}`;
+        urlPath = urlPath.replace('{id}', encodeURIComponent(String(requestParameters['id'])));
+        return {
+            path: urlPath,
+            method: 'DELETE',
+            headers: headerParameters,
+            query: queryParameters,
+        };
+    }
+    /**
+     * Members of the group fall back to the default (or to their other groups\' overrides).
+     * Delete a group API key lifetime override
+     */
+    async deleteGroupLifetimePolicyRaw(requestParameters, initOverrides) {
+        const requestOptions = await this.deleteGroupLifetimePolicyRequestOpts(requestParameters);
+        const response = await this.request(requestOptions, initOverrides);
+        return new runtime.JSONApiResponse(response, (jsonValue) => (0, DeletedResponse_js_1.DeletedResponseFromJSON)(jsonValue));
+    }
+    /**
+     * Members of the group fall back to the default (or to their other groups\' overrides).
+     * Delete a group API key lifetime override
+     */
+    async deleteGroupLifetimePolicy(requestParameters, initOverrides) {
+        const response = await this.deleteGroupLifetimePolicyRaw(requestParameters, initOverrides);
+        return await response.value();
+    }
     /**
      * Creates request options for deleteModelAccess without sending the request
      */
@@ -1605,6 +1784,62 @@ class LlmGatewayApi extends runtime.BaseAPI {
     async deleteRoutingRule(requestParameters, initOverrides) {
         await this.deleteRoutingRuleRaw(requestParameters, initOverrides);
     }
+    /**
+     * Creates request options for deleteUserLifetimePolicy without sending the request
+     */
+    async deleteUserLifetimePolicyRequestOpts(requestParameters) {
+        if (requestParameters['id'] == null) {
+            throw new runtime.RequiredError('id', 'Required parameter "id" was null or undefined when calling deleteUserLifetimePolicy().');
+        }
+        const queryParameters = {};
+        const headerParameters = {};
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("ApiKey", []);
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+        let urlPath = `/api/llm-gateway/admin/api-key-lifetime-policies/users/{id}`;
+        urlPath = urlPath.replace('{id}', encodeURIComponent(String(requestParameters['id'])));
+        return {
+            path: urlPath,
+            method: 'DELETE',
+            headers: headerParameters,
+            query: queryParameters,
+        };
+    }
+    /**
+     * The user falls back to their groups\' overrides, or to the default.
+     * Delete a user API key lifetime override
+     */
+    async deleteUserLifetimePolicyRaw(requestParameters, initOverrides) {
+        const requestOptions = await this.deleteUserLifetimePolicyRequestOpts(requestParameters);
+        const response = await this.request(requestOptions, initOverrides);
+        return new runtime.JSONApiResponse(response, (jsonValue) => (0, DeletedResponse_js_1.DeletedResponseFromJSON)(jsonValue));
+    }
+    /**
+     * The user falls back to their groups\' overrides, or to the default.
+     * Delete a user API key lifetime override
+     */
+    async deleteUserLifetimePolicy(requestParameters, initOverrides) {
+        const response = await this.deleteUserLifetimePolicyRaw(requestParameters, initOverrides);
+        return await response.value();
+    }
     /**
      * Creates request options for getApiKey without sending the request
      */
@@ -2280,6 +2515,58 @@ class LlmGatewayApi extends runtime.BaseAPI {
         const response = await this.listDefaultsRaw(initOverrides);
         return await response.value();
     }
+    /**
+     * Creates request options for listLifetimePolicies without sending the request
+     */
+    async listLifetimePoliciesRequestOpts() {
+        const queryParameters = {};
+        const headerParameters = {};
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("ApiKey", []);
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+        let urlPath = `/api/llm-gateway/admin/api-key-lifetime-policies`;
+        return {
+            path: urlPath,
+            method: 'GET',
+            headers: headerParameters,
+            query: queryParameters,
+        };
+    }
+    /**
+     * The org default, per-group overrides and per-user overrides that limit how long self-serve API keys (created by users for themselves) may live. A user\'s own override wins; otherwise the strictest of their groups\' overrides; otherwise the default. Keys created by admins are exempt. Existing keys keep their expiry; the policy is checked when a key is created or rotated.
+     * Get the API key lifetime policy
+     */
+    async listLifetimePoliciesRaw(initOverrides) {
+        const requestOptions = await this.listLifetimePoliciesRequestOpts();
+        const response = await this.request(requestOptions, initOverrides);
+        return new runtime.JSONApiResponse(response, (jsonValue) => (0, ApiKeyLifetimePolicies_js_1.ApiKeyLifetimePoliciesFromJSON)(jsonValue));
+    }
+    /**
+     * The org default, per-group overrides and per-user overrides that limit how long self-serve API keys (created by users for themselves) may live. A user\'s own override wins; otherwise the strictest of their groups\' overrides; otherwise the default. Keys created by admins are exempt. Existing keys keep their expiry; the policy is checked when a key is created or rotated.
+     * Get the API key lifetime policy
+     */
+    async listLifetimePolicies(initOverrides) {
+        const response = await this.listLifetimePoliciesRaw(initOverrides);
+        return await response.value();
+    }
     /**
      * Creates request options for listModelAccess without sending the request
      */
@@ -3208,6 +3495,67 @@ class LlmGatewayApi extends runtime.BaseAPI {
         const response = await this.revokeApiKeyRaw(requestParameters, initOverrides);
         return await response.value();
     }
+    /**
+     * Creates request options for rotateApiKey without sending the request
+     */
+    async rotateApiKeyRequestOpts(requestParameters) {
+        if (requestParameters['id'] == null) {
+            throw new runtime.RequiredError('id', 'Required parameter "id" was null or undefined when calling rotateApiKey().');
+        }
+        if (requestParameters['rotateApiKeyRequest'] == null) {
+            throw new runtime.RequiredError('rotateApiKeyRequest', 'Required parameter "rotateApiKeyRequest" was null or undefined when calling rotateApiKey().');
+        }
+        const queryParameters = {};
+        const headerParameters = {};
+        headerParameters['Content-Type'] = 'application/json';
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("ApiKey", []);
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+        let urlPath = `/api/llm-gateway/admin/api-keys/{id}/rotate`;
+        urlPath = urlPath.replace('{id}', encodeURIComponent(String(requestParameters['id'])));
+        return {
+            path: urlPath,
+            method: 'POST',
+            headers: headerParameters,
+            query: queryParameters,
+            body: (0, RotateApiKeyRequest_js_1.RotateApiKeyRequestToJSON)(requestParameters['rotateApiKeyRequest']),
+        };
+    }
+    /**
+     * Replace the key\'s secret in place. The key id, name, bindings and usage history are kept. With `grace_period_secs` the previous secret keeps working for that long (at most 7 days); otherwise it stops working immediately. The new secret is returned once and never stored.
+     * Rotate an API key
+     */
+    async rotateApiKeyRaw(requestParameters, initOverrides) {
+        const requestOptions = await this.rotateApiKeyRequestOpts(requestParameters);
+        const response = await this.request(requestOptions, initOverrides);
+        return new runtime.JSONApiResponse(response, (jsonValue) => (0, RotateApiKeyResponse_js_1.RotateApiKeyResponseFromJSON)(jsonValue));
+    }
+    /**
+     * Replace the key\'s secret in place. The key id, name, bindings and usage history are kept. With `grace_period_secs` the previous secret keeps working for that long (at most 7 days); otherwise it stops working immediately. The new secret is returned once and never stored.
+     * Rotate an API key
+     */
+    async rotateApiKey(requestParameters, initOverrides) {
+        const response = await this.rotateApiKeyRaw(requestParameters, initOverrides);
+        return await response.value();
+    }
     /**
      * Creates request options for setApiKeyDisabled without sending the request
      */
@@ -3267,6 +3615,124 @@ class LlmGatewayApi extends runtime.BaseAPI {
         const response = await this.setApiKeyDisabledRaw(requestParameters, initOverrides);
         return await response.value();
     }
+    /**
+     * Creates request options for setApiKeyExpiry without sending the request
+     */
+    async setApiKeyExpiryRequestOpts(requestParameters) {
+        if (requestParameters['id'] == null) {
+            throw new runtime.RequiredError('id', 'Required parameter "id" was null or undefined when calling setApiKeyExpiry().');
+        }
+        if (requestParameters['setApiKeyExpiryRequest'] == null) {
+            throw new runtime.RequiredError('setApiKeyExpiryRequest', 'Required parameter "setApiKeyExpiryRequest" was null or undefined when calling setApiKeyExpiry().');
+        }
+        const queryParameters = {};
+        const headerParameters = {};
+        headerParameters['Content-Type'] = 'application/json';
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("ApiKey", []);
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+        let urlPath = `/api/llm-gateway/admin/api-keys/{id}/expiry`;
+        urlPath = urlPath.replace('{id}', encodeURIComponent(String(requestParameters['id'])));
+        return {
+            path: urlPath,
+            method: 'PUT',
+            headers: headerParameters,
+            query: queryParameters,
+            body: (0, SetApiKeyExpiryRequest_js_1.SetApiKeyExpiryRequestToJSON)(requestParameters['setApiKeyExpiryRequest']),
+        };
+    }
+    /**
+     * Extend, shorten or remove a key\'s expiry without issuing a new secret, so clients keep working unchanged. Also reactivates an expired key. A shortened expiry takes effect immediately. Admin only, and not limited by the API key lifetime policy. To replace the secret as well, rotate the key instead.
+     * Change an API key\'s expiry
+     */
+    async setApiKeyExpiryRaw(requestParameters, initOverrides) {
+        const requestOptions = await this.setApiKeyExpiryRequestOpts(requestParameters);
+        const response = await this.request(requestOptions, initOverrides);
+        return new runtime.JSONApiResponse(response, (jsonValue) => (0, ApiKey_js_1.ApiKeyFromJSON)(jsonValue));
+    }
+    /**
+     * Extend, shorten or remove a key\'s expiry without issuing a new secret, so clients keep working unchanged. Also reactivates an expired key. A shortened expiry takes effect immediately. Admin only, and not limited by the API key lifetime policy. To replace the secret as well, rotate the key instead.
+     * Change an API key\'s expiry
+     */
+    async setApiKeyExpiry(requestParameters, initOverrides) {
+        const response = await this.setApiKeyExpiryRaw(requestParameters, initOverrides);
+        return await response.value();
+    }
+    /**
+     * Creates request options for setDefaultLifetimePolicy without sending the request
+     */
+    async setDefaultLifetimePolicyRequestOpts(requestParameters) {
+        if (requestParameters['lifetimeLimitInput'] == null) {
+            throw new runtime.RequiredError('lifetimeLimitInput', 'Required parameter "lifetimeLimitInput" was null or undefined when calling setDefaultLifetimePolicy().');
+        }
+        const queryParameters = {};
+        const headerParameters = {};
+        headerParameters['Content-Type'] = 'application/json';
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("ApiKey", []);
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+        let urlPath = `/api/llm-gateway/admin/api-key-lifetime-policies/default`;
+        return {
+            path: urlPath,
+            method: 'PUT',
+            headers: headerParameters,
+            query: queryParameters,
+            body: (0, LifetimeLimitInput_js_1.LifetimeLimitInputToJSON)(requestParameters['lifetimeLimitInput']),
+        };
+    }
+    /**
+     * Set the org-wide limit for self-serve API keys. `max_lifetime_days` (1-3650) caps how long a key may live from when it is created or rotated, and also rules out keys that never expire; `require_expiry` requires an expiry without capping it; `fixed_lifetime` gives every key exactly `max_lifetime_days`, so users don\'t choose one. Sending none removes the default.
+     * Set the default API key lifetime policy
+     */
+    async setDefaultLifetimePolicyRaw(requestParameters, initOverrides) {
+        const requestOptions = await this.setDefaultLifetimePolicyRequestOpts(requestParameters);
+        const response = await this.request(requestOptions, initOverrides);
+        return new runtime.JSONApiResponse(response, (jsonValue) => (0, ApiKeyLifetimePolicies_js_1.ApiKeyLifetimePoliciesFromJSON)(jsonValue));
+    }
+    /**
+     * Set the org-wide limit for self-serve API keys. `max_lifetime_days` (1-3650) caps how long a key may live from when it is created or rotated, and also rules out keys that never expire; `require_expiry` requires an expiry without capping it; `fixed_lifetime` gives every key exactly `max_lifetime_days`, so users don\'t choose one. Sending none removes the default.
+     * Set the default API key lifetime policy
+     */
+    async setDefaultLifetimePolicy(requestParameters, initOverrides) {
+        const response = await this.setDefaultLifetimePolicyRaw(requestParameters, initOverrides);
+        return await response.value();
+    }
     /**
      * Creates request options for setProfileDefault without sending the request
      * @deprecated
@@ -3499,6 +3965,65 @@ class LlmGatewayApi extends runtime.BaseAPI {
         const response = await this.updateGovernanceConfigRaw(requestParameters, initOverrides);
         return await response.value();
     }
+    /**
+     * Creates request options for updateGroupLifetimePolicy without sending the request
+     */
+    async updateGroupLifetimePolicyRequestOpts(requestParameters) {
+        if (requestParameters['id'] == null) {
+            throw new runtime.RequiredError('id', 'Required parameter "id" was null or undefined when calling updateGroupLifetimePolicy().');
+        }
+        if (requestParameters['lifetimeLimitInput'] == null) {
+            throw new runtime.RequiredError('lifetimeLimitInput', 'Required parameter "lifetimeLimitInput" was null or undefined when calling updateGroupLifetimePolicy().');
+        }
+        const queryParameters = {};
+        const headerParameters = {};
+        headerParameters['Content-Type'] = 'application/json';
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("ApiKey", []);
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+        let urlPath = `/api/llm-gateway/admin/api-key-lifetime-policies/groups/{id}`;
+        urlPath = urlPath.replace('{id}', encodeURIComponent(String(requestParameters['id'])));
+        return {
+            path: urlPath,
+            method: 'PUT',
+            headers: headerParameters,
+            query: queryParameters,
+            body: (0, LifetimeLimitInput_js_1.LifetimeLimitInputToJSON)(requestParameters['lifetimeLimitInput']),
+        };
+    }
+    /**
+     * Update a group API key lifetime override
+     */
+    async updateGroupLifetimePolicyRaw(requestParameters, initOverrides) {
+        const requestOptions = await this.updateGroupLifetimePolicyRequestOpts(requestParameters);
+        const response = await this.request(requestOptions, initOverrides);
+        return new runtime.JSONApiResponse(response, (jsonValue) => (0, ApiKeyLifetimePolicy_js_1.ApiKeyLifetimePolicyFromJSON)(jsonValue));
+    }
+    /**
+     * Update a group API key lifetime override
+     */
+    async updateGroupLifetimePolicy(requestParameters, initOverrides) {
+        const response = await this.updateGroupLifetimePolicyRaw(requestParameters, initOverrides);
+        return await response.value();
+    }
     /**
      * Creates request options for updateModelAccess without sending the request
      */
@@ -4035,5 +4560,64 @@ class LlmGatewayApi extends runtime.BaseAPI {
         const response = await this.updateRoutingRuleRaw(requestParameters, initOverrides);
         return await response.value();
     }
+    /**
+     * Creates request options for updateUserLifetimePolicy without sending the request
+     */
+    async updateUserLifetimePolicyRequestOpts(requestParameters) {
+        if (requestParameters['id'] == null) {
+            throw new runtime.RequiredError('id', 'Required parameter "id" was null or undefined when calling updateUserLifetimePolicy().');
+        }
+        if (requestParameters['lifetimeLimitInput'] == null) {
+            throw new runtime.RequiredError('lifetimeLimitInput', 'Required parameter "lifetimeLimitInput" was null or undefined when calling updateUserLifetimePolicy().');
+        }
+        const queryParameters = {};
+        const headerParameters = {};
+        headerParameters['Content-Type'] = 'application/json';
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("ApiKey", []);
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+        let urlPath = `/api/llm-gateway/admin/api-key-lifetime-policies/users/{id}`;
+        urlPath = urlPath.replace('{id}', encodeURIComponent(String(requestParameters['id'])));
+        return {
+            path: urlPath,
+            method: 'PUT',
+            headers: headerParameters,
+            query: queryParameters,
+            body: (0, LifetimeLimitInput_js_1.LifetimeLimitInputToJSON)(requestParameters['lifetimeLimitInput']),
+        };
+    }
+    /**
+     * Update a user API key lifetime override
+     */
+    async updateUserLifetimePolicyRaw(requestParameters, initOverrides) {
+        const requestOptions = await this.updateUserLifetimePolicyRequestOpts(requestParameters);
+        const response = await this.request(requestOptions, initOverrides);
+        return new runtime.JSONApiResponse(response, (jsonValue) => (0, ApiKeyLifetimeUserOverride_js_1.ApiKeyLifetimeUserOverrideFromJSON)(jsonValue));
+    }
+    /**
+     * Update a user API key lifetime override
+     */
+    async updateUserLifetimePolicy(requestParameters, initOverrides) {
+        const response = await this.updateUserLifetimePolicyRaw(requestParameters, initOverrides);
+        return await response.value();
+    }
 }
 exports.LlmGatewayApi = LlmGatewayApi;