@binalyze/air-sdk 5.23.0 → 5.24.3

package/dist/sdk/typescript-axios/sdk.gen.js

@@ -2,21 +2,21 @@
 // @ts-nocheck
 // This file is auto-generated by @hey-api/openapi-ts
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.endpointGetCasesById0 = exports.endpointSearch1 = exports.endpointSearch0 = exports.endpointFilterByPolicyFilter1 = exports.endpointFilterByPolicyFilter0 = exports.endpointFilterDisks1 = exports.endpointFilterDisks0 = exports.assetsSetMitreAttackDatabaseVersion2 = exports.assetsSetMitreAttackDatabaseVersion = exports.assetsAddTags2 = exports.assetsRemoveTags2 = exports.assetsAddTags = exports.assetsRemoveTags = exports.endpointPurgeAssetDataByFilter1 = exports.endpointPurgeAssetDataByFilter0 = exports.endpointUninstallEndpointsByFilter1 = exports.endpointUninstallEndpointsByFilter0 = exports.endpointUninstallAgentsAndPurgeByFilter2 = exports.endpointUninstallAgentsAndPurgeByFilter1 = exports.endpointUninstallAgentsAndPurgeByFilter0 = exports.endpointImportPpcToExistedEndpoint1 = exports.endpointImportPpcToExistedEndpoint0 = exports.endpointImportPpcAsEndpoint1 = exports.endpointImportPpcAsEndpoint0 = exports.assetsGetMany4 = exports.assetsGetMany3 = exports.endpointGetDeviceNameConflicts1 = exports.endpointGetDeviceNameConflicts0 = exports.endpointGetEndpointsStats1 = exports.endpointGetEndpointsStats0 = exports.endpointGetEndpointsWithTaskCount = exports.assetsGetManyByFilter2 = exports.assetsGetManyByFilter = exports.assetsGetMany2 = exports.assetsGetMany = exports.assetsUpdateLabel2 = exports.assetsUpdateLabel = exports.assetsUpdateTags2 = exports.assetsUpdateTags = exports.endpointExportEndpoints1 = exports.endpointExportEndpoints0 = exports.openApiAliasV2ApiControllerGet = exports.capabilitiesV2ApiControllerGet = exports.paramsGetMitreAttackTactics = exports.paramsEvidenceList = exports.paramsEventLogRecordTypes = exports.paramsEDiscoveryPatterns = exports.paramsGetDroneAnalyzers = exports.loggerDownloadLogsDir = exports.appGetBasicInfo = void 0;
-exports.endpointTaskPurgeLocalData1 = exports.endpointTaskPurgeLocalData0 = exports.assetsGetTasks2 = exports.assetsGetTasks = exports.assetsAssignIsolationTask2 = exports.assetsAssignIsolationTask = exports.assetsAssignVersionUpdateTask2 = exports.assetsAssignVersionUpdateTask = exports.endpointTaskAssignRetrieveLogTask1 = exports.endpointTaskAssignRetrieveLogTask0 = exports.assetsAssignShutdownTask2 = exports.assetsAssignShutdownTask = exports.assetsAssignRebootTask2 = exports.assetsAssignRebootTask = exports.taskGenerateOffNetworkZipPassword = exports.taskDownloadOffNetworkTask = exports.taskImportOffNetworkCollectionToTask = exports.taskCreateOffNetworkTask = exports.taskCancel = exports.taskCancelByFilter = exports.taskDeleteAndPurgeByFilter = exports.taskDeleteByFilter = exports.tasksGetData = exports.taskRenameTask = exports.tasksGetMany = exports.tasksGetById = exports.taskDelete = exports.getTaskDisplayTypes = exports.endpointGroupGetRootGroups = exports.endpointGroupGetChildGroupsOfGroup = exports.endpointTagDeleteTag = exports.endpointTagDeleteAllTags = exports.endpointTagFilterTags = exports.endpointSetMaintenanceMode1 = exports.endpointSetMaintenanceMode0 = exports.endpointUpdateEndpointConnectionRoute1 = exports.endpointUpdateEndpointConnectionRoute0 = exports.endpointDeployCloudAssetsByFilter1 = exports.endpointDeployCloudAssetsByFilter0 = exports.endpointGetCloudAssetDetails1 = exports.endpointGetCloudAssetDetails0 = exports.endpointSyncLdap1 = exports.endpointSyncLdap0 = exports.endpointDownloadLogFile1 = exports.endpointDownloadLogFile0 = exports.endpointSetExcludeFromUpdatesToEndpointsByFilter1 = exports.endpointSetExcludeFromUpdatesToEndpointsByFilter0 = exports.endpointExportCasesByEndpointId1 = exports.endpointExportCasesByEndpointId0 = exports.endpointGetCasesById1 = void 0;
-exports.settingsSaveRfc3161 = exports.settingsSaveLocard = exports.settingsSaveIpRestriction = exports.settingsValidateIpRestriction = exports.settingsSaveCaseAutoClose = exports.settingsSaveFleetAi = exports.settingsSaveInterAct = exports.settingsSaveAutoAssetTagging = exports.settingsSaveEnforceTfa = exports.settingsSaveAgent = exports.settingsValidateS3 = exports.settingsValidateSftp = exports.settingsSaveBackupRestore = exports.settingsSavePolicy = exports.settingsValidateSsl = exports.settingsSaveSsl = exports.settingsValidateSmtp = exports.settingsSaveSmtp = exports.settingsValidateSyslog = exports.settingsSaveSyslog = exports.settingsGetSyslogEventTypes = exports.settingsValidateActiveDirectory = exports.settingsSaveActiveDirectory = exports.settingsValidateTrustedCertificate = exports.settingsDeleteTrustedCertificate = exports.settingsAddTrustedCertificateWithoutValidation = exports.settingsAddTrustedCertificate = exports.settingsGetTrustedCertificates = exports.settingsTestProxy1 = exports.settingsTestProxy0 = exports.settingsSaveProxy = exports.settingsSaveGeneralSettings = exports.settingsGetSettings = exports.tasksTriageV2ApiControllerDeleteOne = exports.tasksTriageV2ApiControllerCancelOne = exports.tasksTriageV2ApiControllerDelete = exports.tasksTriageV2ApiControllerCancel = exports.tasksTriageV2ApiControllerListHuntTasks = exports.tasksV2ApiControllerListTaskAssignments = exports.tasksV2ApiControllerListTaskAssets = exports.tasksV2ApiControllerUpdateTask = exports.tasksV2ApiControllerGetTaskById = exports.taskAssignmentGenerateTaskAssignmentReport = exports.taskAssignmentGet = exports.taskAssignmentDelete = exports.taskAssignmentCancel = exports.tasksAssignmentsGetMany = exports.endpointTaskGetComparableTasksByVendorDeviceId = exports.endpointTaskRetryUpload1 = exports.endpointTaskRetryUpload0 = void 0;
-exports.userPatTokensDelete = exports.userPatTokensRotate = exports.userPatTokensCreate = exports.userPatTokensGetMany = exports.userGroupUpdateGroup = exports.userGroupGetGroup = exports.userGroupDeleteGroup = exports.userGroupCreateGroup = exports.userGroupFilterGroups = exports.userRolesUpdateRole = exports.userRolesGetRole = exports.userRolesDeleteRole = exports.userRolesCreateRole = exports.userRolesGetRoles = exports.userRolesGetPrivileges = exports.userCreateApiUser = exports.userResetUserPassword = exports.userChangePassword = exports.userResetTfa = exports.userManagementUsersPurgeAndDelete = exports.userUpdateUser = exports.userPatchUser = exports.userManagementUsersGet = exports.userDelete = exports.userCreate = exports.userManagementUsersGetMany = exports.authGetUserSessionHistory = exports.authRegeneratePatToken = exports.authRenewOneClickLoginUrl = exports.authGenerateOneClickLoginUrl = exports.authLogin = exports.authOneClickLogin = exports.authUpdateProfile = exports.authCheckAuth = exports.settingsUpdateSsoProvider = exports.settingsDeleteSsoProvider = exports.settingsCreateSsoProvider = exports.settingsGetSsoProviders = exports.settingsSingleSignOnCallback = exports.settingsSaveMandatoryCaseSelection = exports.settingsGetMitreAttackDatabaseReleaseNotes = exports.settingsGetMitreAttackDatabaseVersions = exports.settingsSaveMitreAttackDatabaseSettings = exports.settingsGetAutoUpdateWindows = exports.settingsSaveAutoUpdateSettings = exports.settingsGetAutoUpdateSettings = exports.settingsSaveUninstallationPasswordProtection = exports.settingsSaveBanner = exports.settingsSaveConsoleAddress = exports.settingsValidateConsoleAddress = void 0;
-exports.getManyTriageRules = exports.taxiiFeedsBulkDelete = exports.taxiiFeedsUpdateStatus = exports.taxiiFeedsCancelSync = exports.taxiiFeedsTriggerSync = exports.taxiiFeedsDiscoverCollections = exports.taxiiFeedsGetSyncLogs = exports.taxiiFeedsUpdate = exports.taxiiFeedsGetOne = exports.taxiiFeedsDelete = exports.taxiiFeedsGetIndicatorSummary = exports.taxiiFeedsGetIndicators = exports.taxiiFeedsCreate = exports.taxiiFeedsGetMany = exports.gitRepositoriesGetRepositoryBranches = exports.gitRepositoriesTestConnection = exports.gitRepositoriesBrowseTree = exports.gitRepositoriesGetSyncLogs = exports.gitRepositoriesCancelSync = exports.gitRepositoriesTriggerSync = exports.gitRepositoriesBulkDelete = exports.gitRepositoriesUpdate = exports.gitRepositoriesGetOne = exports.gitRepositoriesDelete = exports.gitRepositoriesCreate = exports.gitRepositoriesGetMany = exports.acquisitionLibraryDeviceV2ApiControllerUpdate = exports.acquisitionLibraryDeviceV2ApiControllerGet = exports.acquisitionLibraryDeviceV2ApiControllerDelete = exports.acquisitionLibraryDeviceV2ApiControllerBulkDelete = exports.acquisitionLibraryDeviceV2ApiControllerCreate = exports.acquisitionLibraryDeviceV2ApiControllerList = exports.acquisitionValidateOsQueries = exports.acquisitionUpdateScheduledImageAcquisition = exports.acquisitionUpdateScheduledEvidenceAcquisition = exports.acquisitionAcquireImage = exports.createOffNetworkAcquisitionTaskFile = exports.acquisitionAssignEvidenceTask2 = exports.acquisitionAssignEvidenceTask = exports.acquisitionDeleteBulk = exports.acquisitionUpdate = exports.acquisitionGet = exports.acquisitionDelete = exports.acquisitionCreate = exports.acquisitionProfilesGetOne = exports.licenseGetQuota = exports.licenseGetSubscriptionDetails = exports.licenseRefreshLicense = exports.licenseSetLicense = exports.licenseGetLicense = void 0;
-exports.evidenceRepositoryUpdateGoogleCloudStorage = exports.evidenceRepositoryCreateGoogleCloudStorage = exports.evidenceRepositoryValidateGoogleCloudStorage = exports.evidenceRepositoryValidateSftpRepository = exports.evidenceRepositoryValidateFtpsRepository = exports.evidenceRepositoryValidateAzureStorage = exports.evidenceRepositoryValidateS3Compatible = exports.evidenceRepositoryValidateAmazonS3 = exports.evidenceRepositoryValidateById = exports.evidenceRepositoriesGetMany = exports.evidenceRepositoriesGet = exports.evidenceRepositoryDelete = exports.evidenceRepositoryUpdateS3Compatible = exports.evidenceRepositoryCreateS3Compatible = exports.evidenceRepositoryUpdateAmazonS3 = exports.evidenceRepositoryCreateAmazonS3 = exports.evidenceRepositoryUpdateAzureStorage = exports.evidenceRepositoryCreateAzureStorage = exports.evidenceRepositoryUpdateFtps = exports.evidenceRepositoryCreateFtps = exports.evidenceRepositoryUpdateSftp = exports.evidenceRepositoryCreateSftp = exports.evidenceRepositoryUpdateSmb = exports.evidenceRepositoryCreateSmb = exports.evidenceGetCasePpcFile = exports.evidenceGetCaseReportFileInfo = exports.evidenceDownloadExternalEvidence = exports.evidenceGetCaseReport1 = exports.evidenceGetCaseReport0 = exports.triageLibraryExportV2ApiControllerDownload = exports.triageLibraryExportV2ApiControllerExport = exports.triageLibraryV2ApiControllerUpdate = exports.triageLibraryV2ApiControllerGet = exports.triageLibraryV2ApiControllerDelete = exports.triageLibraryV2ApiControllerValidate = exports.triageLibraryV2ApiControllerBulkDelete = exports.triageLibraryV2ApiControllerCreate = exports.triageLibraryV2ApiControllerList = exports.deleteTriageRuleTag = exports.createTriageRuleTag = exports.filterTriageRuleTags = exports.createOffNetworkTriageTaskFile = exports.updateScheduledTriageTask = exports.assignTriageTask = exports.validateTriageRule = exports.deleteBulkTriageRules = exports.updateTriageRule = exports.getTriageRule = exports.deleteTriageRule = exports.createTriageRule = void 0;
-exports.caseUserV2ApiControllerFilterUsers = exports.caseAssetV2ApiControllerFilterAssets = exports.caseBulkActionV2ApiControllerArchive = exports.caseBulkActionV2ApiControllerClose = exports.caseExportV2ApiControllerExportCases = exports.caseActivityV2ApiControllerFilterCaseActivities = exports.caseActivityV2ApiControllerFilterGlobalActivities = exports.autoAssetTagUpdateScheduledAatTask = exports.autoAssetTagAssignAutoAssetTaggingTask = exports.autoAssetTagDeleteBulk = exports.autoAssetTagUpdateStatus = exports.autoAssetTagUpdateAutoAssetTag = exports.autoAssetTagGetById = exports.autoAssetTagDelete = exports.autoAssetTagSaveAutoAssetTag = exports.autoAssetTagFilter = exports.organizationGetUsers = exports.organizationAddTags = exports.organizationRemoveTags = exports.organizationUpdateDeploymentToken = exports.organizationUpdateShareableDeploymentStatus = exports.organizationGetOrganizationIdByToken = exports.organizationAssignGroups = exports.organizationRemoveGroups = exports.organizationAssignUsers = exports.organizationRemoveUsers = exports.organizationUpdate = exports.organizationGet = exports.organizationDelete = exports.organizationCheckNameExists = exports.organizationCreate = exports.organizationsGetMany = exports.policyCheckNameExists = exports.policyUpdateStatus = exports.policyUpdate = exports.policyGet = exports.policyDelete = exports.policyUpdatePriorities = exports.policyCreate = exports.policyFilter = exports.policyGetMatchStats = exports.auditLogsUpdateEventFilter = exports.auditLogsGetEventFilter = exports.auditLogsGetEventTypes = exports.auditLogExport = exports.auditLogsGetMany = exports.notificationMarkAsRead = exports.notificationMarkAllAsRead = exports.notificationFilter = exports.notificationDeleteAll = void 0;
-exports.caseCategoriesCreate = exports.caseCategoriesFilter = exports.caseTagsDelete = exports.caseTagsCreate = exports.caseTagsFilter = exports.caseRemoveTaskAssignmentFromCase = exports.caseRemoveEndpointsFromCaseByFilter1 = exports.caseRemoveEndpointsFromCaseByFilter0 = exports.casesGetUsers = exports.caseImportTaskAssignment = exports.caseEditCaseNote = exports.caseDeleteCaseNote = exports.caseAddCaseNote = exports.caseExportActivities = exports.casesGetActivities = exports.casesGetEndpoints2 = exports.casesGetEndpoints = exports.caseFilterTaskAssignments = exports.casesGetTasks = exports.casesChangeOwner = exports.casesArchiveByFilter = exports.casesCloseByFilter = exports.caseArchiveCase = exports.caseReopenCase = exports.casesClose = exports.casesCreate = exports.casesGetMany = exports.caseUpdateCase = exports.casesGet = exports.caseExportCaseEndpoints1 = exports.caseExportCaseEndpoints0 = exports.caseExportCaseNotes = exports.caseExportCases = exports.casesCheckName = exports.caseV2ApiControllerUpdateCase = exports.caseV2ApiControllerGetCaseByIdOrName = exports.caseV2ApiControllerCreateCase = exports.caseV2ApiControllerFilterCases = exports.caseActionV2ApiControllerRemoveAssets = exports.caseActionV2ApiControllerArchive = exports.caseActionV2ApiControllerReopen = exports.caseActionV2ApiControllerClose = exports.caseTaskAssignmentV2ApiControllerRemoveTaskAssignment = exports.caseTaskAssignmentV2ApiControllerImportTaskAssignments = exports.caseTaskAssignmentV2ApiControllerFilterTaskAssignments = exports.caseNoteV2ApiControllerUpdateNote = exports.caseNoteV2ApiControllerDeleteNote = exports.caseNoteV2ApiControllerCreateNote = exports.caseNoteV2ApiControllerFilterNotes = exports.caseTaskV2ApiControllerFilterTasks = void 0;
-exports.interactLibraryFileV2ApiControllerDelete = exports.interactLibraryFileV2ApiControllerBulkDelete = exports.interactLibraryFileV2ApiControllerUpload = exports.interactLibraryFileV2ApiControllerList = exports.interactLibraryTagV2ApiControllerUpdate = exports.interactLibraryTagV2ApiControllerGet = exports.interactLibraryTagV2ApiControllerDelete = exports.interactLibraryTagV2ApiControllerBulkDelete = exports.interactLibraryTagV2ApiControllerCreate = exports.interactLibraryTagV2ApiControllerList = exports.interactLibrarySnippetV2ApiControllerUpdate = exports.interactLibrarySnippetV2ApiControllerGet = exports.interactLibrarySnippetV2ApiControllerDelete = exports.interactLibrarySnippetV2ApiControllerBulkDelete = exports.interactLibrarySnippetV2ApiControllerCreate = exports.interactLibrarySnippetV2ApiControllerList = exports.interactCommandSnippetTagsUpdate = exports.interactCommandSnippetTagsDelete = exports.interactCommandSnippetTagsCreate = exports.interactCommandSnippetTagsGetMany = exports.interactCommandSnippetsBulkDelete = exports.interactCommandSnippetsUpdate = exports.interactCommandSnippetsGetOne = exports.interactCommandSnippetsDelete = exports.interactCommandSnippetsCreate = exports.interactCommandSnippetsGetMany = exports.interactLibraryDelete = exports.interactLibraryDeleteBulk = exports.interactLibraryDownload = exports.interactLibraryUpload = exports.interactLibraryCheckLibraryFileExists = exports.interactLibraryFilter = exports.interactSessionGetCommandMessage = exports.interactSessionClose = exports.interactSessionInterruptCommand = exports.interactSessionExecuteAsyncCommand = exports.interactSessionExecuteCommand = exports.interactGetInterActShellReport = exports.interactShellAssignTask = exports.interactCommandsDownloadResultFile = exports.interactCommandsGetMany = exports.exportClosureReportAssets = exports.exportClosureReportFlags = exports.exportClosureReportFindings = exports.updateCaseCloseReport2 = exports.getCaseCloseReport2 = exports.updateCaseCloseReport = exports.getCaseCloseReport = exports.getCaseCloseReportHistory = exports.caseCategoriesDelete = void 0;
-exports.investigationCreateExportRequestForFlags = exports.investigationExportFlags = exports.investigationGetEvidenceRelationData = exports.investigationGetEvidenceData = exports.investigationGetEvidenceDataStructure = exports.investigationGetInvestigationMigrationsSummary = exports.investigationUpdateInvestigation = exports.investigationGetInvestigationById = exports.investigationSqlV2ApiControllerExecuteSqlQuery = exports.investigationSqlV2ApiControllerGetSchema = exports.investigationEvidenceFlagV2ApiControllerUnflagEvidence = exports.investigationEvidenceFlagV2ApiControllerFlagEvidence = exports.flagsLibraryV2ApiControllerUpdate = exports.flagsLibraryV2ApiControllerGet = exports.flagsLibraryV2ApiControllerDelete = exports.flagsLibraryV2ApiControllerCreate = exports.flagsLibraryV2ApiControllerList = exports.cloudAccountsSyncAllCloudAccount = exports.cloudAccountsSyncCloudAccount = exports.cloudAccountsUpdateCloudAccount = exports.cloudAccountsGetCloudAccountById = exports.cloudAccountsDelete = exports.cloudAccountsExport = exports.cloudAccountsGetConfig = exports.cloudAccountsCreateCloudAccount = exports.cloudAccountsFilter = exports.systemApiTokensUpdate = exports.systemApiTokensGetOne = exports.systemApiTokensDelete = exports.systemApiTokensCreate = exports.systemApiTokensGetMany = exports.apiTokensBulkDelete = exports.apiTokensUpdate = exports.apiTokensGetOne = exports.apiTokensDelete = exports.apiTokensGetCurrent = exports.apiTokensCreate = exports.apiTokensGetMany = exports.baselineGetComparisonReportByVendorDeviceId = exports.baselineGetComparisonReport = exports.baselineAcquire = exports.baselineCompare = exports.multipartUploadUploadPart = exports.multipartUploadDeleteFileParts = exports.multipartUploadIsReady = exports.multipartUploadFinalize = exports.multipartUploadInitialize = exports.multipartUploadInitializeHead = exports.interactCommandV2ApiControllerList = exports.interactLibraryFileV2ApiControllerDownload = void 0;
-exports.investigationFlagCreateFlag = exports.investigationFlagFilterFlags = exports.investigationReportDownloadPdfReport = exports.investigationReportGeneratePdfReport = exports.investigationReportUpdateReport = exports.investigationReportGetReport = exports.investigationReportDeleteReport = exports.investigationReportCreateReport = exports.investigationReportFilterReports = exports.investigationReportExportReports = exports.investigationExclusionDeleteIndividualFindingExclusionRule = exports.investigationExclusionApplyFindingExclusionRuleForAllAssets = exports.investigationExclusionApplyFindingExclusionRuleForOrganization = exports.investigationExclusionGetExclusionReasons = exports.investigationExclusionFilterFindingExclusionRules = exports.investigationExclusionDeleteFindingExclusionRule = exports.investigationExclusionGetFindingExclusionRulesMatches = exports.investigationExclusionBulkAddFindingExclusionRules = exports.investigationExclusionAddFindingExclusionRule = exports.investigationImportTornadoEvidenceToInvestigation1 = exports.investigationImportTornadoEvidenceToInvestigation0 = exports.investigationCreateExportRequestForFindings = exports.investigationExportFindingsData = exports.investigationGetInvestigationHubDataImportProgress = exports.investigationGetInvestigationTaskAssignmentDataImportProgress = exports.investigationGetInvestigationTaskAssignmentForImportedEvidence = exports.investigationUpdateInvestigationFinding = exports.investigationMarkInvestigationEvidenceAsFinding = exports.investigationRetryImportTaskAssignment = exports.investigationImportPstEvidencesToInvestigation = exports.investigationGetImportErrors = exports.investigationDeleteImport = exports.investigationGetAllImports = exports.investigationImportDataToInvestigationEvidence = exports.investigationUpdateInvestigationEvidence = exports.investigationCreateInvestigationEvidence = exports.investigationUpdateEvidenceNote = exports.investigationFlagEvidence = exports.investigationRemoveEvidenceFlag = exports.investigationEvidenceCounts = exports.investigationGlobalSearch = exports.investigationGetMitreMatches = exports.investigationGetFindingsSummary = exports.investigationFilterEndpointFindings = exports.investigationGetFindingDataStructure = exports.investigationGetSummary = exports.investigationGetSectionsByEndpoints = exports.investigationGetAssetsByInvestigationId = exports.investigationCreateExportRequestForSectionData = exports.investigationExportEvidenceData = void 0;
-exports.assetBulkActionV2ApiControllerVersionUpdate = exports.assetBulkActionV2ApiControllerRetrieveLogs = exports.assetBulkActionV2ApiControllerUnisolate = exports.assetBulkActionV2ApiControllerIsolate = exports.assetBulkActionV2ApiControllerShutdown = exports.assetBulkActionV2ApiControllerReboot = exports.assetActionV2ApiControllerImportPpcToExistingAsset = exports.assetActionV2ApiControllerDisableMaintenance = exports.assetActionV2ApiControllerEnableMaintenance = exports.assetActionV2ApiControllerVersionUpdate = exports.assetActionV2ApiControllerRetrieveLogs = exports.assetActionV2ApiControllerUnisolate = exports.assetActionV2ApiControllerIsolate = exports.assetActionV2ApiControllerShutdown = exports.assetActionV2ApiControllerReboot = exports.processorGetProcessorTypeByAssetType = exports.processorGetProcessorsByAssetType = exports.processorGetAllProcessors = exports.recentActivitiesCreate = exports.recentActivitiesGetMany = exports.relayProUpdateRelayUrl = exports.relayProRemove = exports.relayServerUpdateAddress = exports.relayServerRemoveRelayServer = exports.relayServerAssignFixUpdateRequiredIssueTask = exports.relayServerAssignRetrieveLogTask = exports.relayServerAssignRebootTask = exports.relayServerFilter = exports.relayServerGetById = exports.relayServerUpdateLabel = exports.relayServerUpdateTags = exports.investigationTaskExecutionLogFilterTaskExecutionLogs = exports.investigationTaskExecutionLogGetTaskExecutionLogs = exports.investigationTimelineCreateExportRequestForTimeline = exports.investigationTimelineExportTimelineData = exports.investigationTimelineGetTotalTimelineCount = exports.investigationTimelineGetTimelineStructure = exports.investigationTimelineFilterTimelineEvents = exports.investigationTimelineGetTimelineEventCountByAdvancedFilter = exports.investigationAdvancedFilterUpdateFilter = exports.investigationAdvancedFilterDeleteFilter = exports.investigationAdvancedFilterCreateFilter = exports.investigationAdvancedFilterGetFilters = exports.investigationCommentDeleteComment = exports.investigationCommentCommentEvidence = exports.investigationCommentFilterComments = exports.investigationActivityMarkAsRead = exports.investigationActivityFilter = exports.investigationFlagUpdateFlag = exports.investigationFlagDeleteFlag = void 0;
-exports.investigationDataUsageExportActualDataUsages = exports.investigationDataUsageGetActualDataUsages = exports.eventSubscriptionTestEventSubscription = exports.eventSubscriptionDeleteBulkEventSubscriptions = exports.eventSubscriptionSubscriptionEventNames = exports.eventSubscriptionUpdateEventSubscription = exports.eventSubscriptionGetEventSubscription = exports.eventSubscriptionDeleteEventSubscription = exports.eventSubscriptionCreateEventSubscription = exports.eventSubscriptionFilterEventSubscriptions = exports.webhookDeleteBulk = exports.webhookUpdate = exports.webhookGet = exports.webhookDelete = exports.webhookCreate = exports.webhookFilter = exports.webhookFilterParsers = exports.assetInteractMessageV2ApiControllerGetSessionReport = exports.assetInteractMessageV2ApiControllerDownloadMessageOutput = exports.assetInteractMessageV2ApiControllerGetMessage = exports.assetInteractMessageV2ApiControllerListSessionsForAsset = exports.assetAcquisitionV2ApiControllerFilterAcquisitionTasks = exports.assetAcquisitionV2ApiControllerDeleteAcquisitionAssignment = exports.assetAcquisitionV2ApiControllerCancelAcquisition = exports.assetAcquisitionV2ApiControllerAcquire = exports.assetTriageV2ApiControllerDeleteTriageAssignment = exports.assetTriageV2ApiControllerCancelTriage = exports.assetTriageV2ApiControllerRunTriage = exports.assetTriageV2ApiControllerFilterTriageTasks = exports.assetV2ApiControllerUpdateLabel = exports.assetV2ApiControllerReplaceTags = exports.assetV2ApiControllerGetAsset = exports.assetV2ApiControllerDeleteAsset = exports.assetV2ApiControllerFilterAssets = exports.assetV2ApiControllerExportAssets = exports.assetV2ApiControllerGetStats = exports.assetInteractV2ApiControllerCloseSession = exports.assetInteractV2ApiControllerCancelCommand = exports.assetInteractV2ApiControllerRunCommand = exports.assetInteractMessageV2ApiControllerListForAsset = exports.assetBulkTriageV2ApiControllerRunTriage = exports.assetBulkMetadataV2ApiControllerImportOffNetworkPpc = exports.assetBulkMetadataV2ApiControllerDeleteAssets = exports.assetBulkMetadataV2ApiControllerSetMitreDatabaseVersion = exports.assetBulkMetadataV2ApiControllerSetConnectionRoute = exports.assetBulkMetadataV2ApiControllerSetUpdateExclusion = exports.assetBulkMetadataV2ApiControllerRemoveTags = exports.assetBulkMetadataV2ApiControllerAddTags = exports.assetBulkActionV2ApiControllerDisableMaintenance = exports.assetBulkActionV2ApiControllerEnableMaintenance = void 0;
-exports.imageEvidenceAcquisitionProfilesDelete = exports.imageEvidenceAcquisitionProfilesCreate = exports.imageEvidenceAcquisitionProfilesGetMany = exports.cloudAcquisitionLibraryApiControllerUpdate = exports.cloudAcquisitionLibraryApiControllerGet = exports.cloudAcquisitionLibraryApiControllerDelete = exports.cloudAcquisitionLibraryApiControllerBulkDelete = exports.cloudAcquisitionLibraryApiControllerCreate = exports.cloudAcquisitionLibraryApiControllerList = exports.cloudAcquisitionProfilesUpdate = exports.cloudAcquisitionProfilesGetOne = exports.cloudAcquisitionProfilesDelete = exports.cloudAcquisitionProfilesCreate = exports.cloudAcquisitionProfilesGetMany = exports.fullTextSearchTaskUpdateScheduledFullTextSearchTask = exports.fullTextSearchTaskAssign = exports.fullTextSearchProfilesDeleteBulk = exports.fullTextSearchProfilesUpdate = exports.fullTextSearchProfilesGetOne = exports.fullTextSearchProfilesDelete = exports.fullTextSearchProfilesCreate = exports.fullTextSearchProfilesGetMany = exports.automationHubDisableAutomation = exports.automationHubEnableAutomation = exports.automationHubGetAutomationChangeHistory = exports.automationHubGetAutomationExecutions = exports.automationHubUpdateAutomation = exports.automationHubGetAutomation = exports.automationHubDeleteAutomation = exports.automationHubExecuteIntegration = exports.automationHubGetTags = exports.automationHubGetTriggerTypes = exports.automationHubTestAction = exports.automationHubGetActionTypes = exports.automationHubCreateAutomation = exports.automationHubFilterAutomations = exports.automationHubGetExecutionHistory = exports.presetFiltersUpdate = exports.presetFiltersDelete = exports.presetFiltersCreate = exports.presetFiltersGetMany = exports.investigationDataUsageCreateFilter = exports.investigationDataUsageUpdateFilter = exports.investigationDataUsageGetFilter = exports.investigationDataUsageDeleteFilter = exports.investigationDataUsageGetFilters = exports.investigationDataUsageGetDataUsageFilters = exports.investigationDataUsageGetHistoricalDataUsageStatistics = exports.investigationDataUsageGetActualDataUsageStatistics = exports.investigationDataUsageCreateExportRequestForActualDataUsages = void 0;
-exports.diskImageAcquisitionTasksDownload = exports.diskImageAcquisitionTasksCreate = exports.diskImageAcquisitionLibraryApiControllerUpdate = exports.diskImageAcquisitionLibraryApiControllerGet = exports.diskImageAcquisitionLibraryApiControllerDelete = exports.diskImageAcquisitionLibraryApiControllerBulkDelete = exports.diskImageAcquisitionLibraryApiControllerCreate = exports.diskImageAcquisitionLibraryApiControllerList = exports.imageEvidenceAcquisitionProfilesDeleteBulk = exports.imageEvidenceAcquisitionProfilesUpdate = exports.imageEvidenceAcquisitionProfilesGetOne = void 0;
+exports.endpointGetCasesById0 = exports.endpointSearch1 = exports.endpointSearch0 = exports.endpointFilterByPolicyFilter1 = exports.endpointFilterByPolicyFilter0 = exports.endpointFilterDisks1 = exports.endpointFilterDisks0 = exports.assetsSetMitreAttackDatabaseVersion2 = exports.assetsSetMitreAttackDatabaseVersion = exports.assetsAddTags2 = exports.assetsRemoveTags2 = exports.assetsAddTags = exports.assetsRemoveTags = exports.endpointPurgeAssetDataByFilter1 = exports.endpointPurgeAssetDataByFilter0 = exports.endpointUninstallEndpointsByFilter1 = exports.endpointUninstallEndpointsByFilter0 = exports.endpointUninstallAgentsAndPurgeByFilter2 = exports.endpointUninstallAgentsAndPurgeByFilter1 = exports.endpointUninstallAgentsAndPurgeByFilter0 = exports.endpointImportPpcToExistedEndpoint1 = exports.endpointImportPpcToExistedEndpoint0 = exports.endpointImportPpcAsEndpoint1 = exports.endpointImportPpcAsEndpoint0 = exports.assetsGetMany4 = exports.assetsGetMany3 = exports.endpointGetDeviceNameConflicts1 = exports.endpointGetDeviceNameConflicts0 = exports.endpointGetEndpointsWithTaskCount = exports.assetsGetManyByFilterExpression2 = exports.assetsGetManyByFilterExpression = exports.assetsGetManyByFilter2 = exports.assetsGetManyByFilter = exports.assetsGetMany2 = exports.assetsGetMany = exports.assetsUpdateLabel2 = exports.assetsUpdateLabel = exports.assetsUpdateTags2 = exports.assetsUpdateTags = exports.endpointExportEndpoints1 = exports.endpointExportEndpoints0 = exports.openApiAliasV2ApiControllerGet = exports.capabilitiesV2ApiControllerGet = exports.paramsGetMitreAttackTactics = exports.paramsEvidenceList = exports.paramsEventLogRecordTypes = exports.paramsEDiscoveryPatterns = exports.paramsGetDroneAnalyzers = exports.loggerDownloadLogsDir = exports.appGetBasicInfo = void 0;
+exports.assetsGetTasks2 = exports.assetsGetTasks = exports.assetsAssignIsolationTask2 = exports.assetsAssignIsolationTask = exports.assetsAssignVersionUpdateTask2 = exports.assetsAssignVersionUpdateTask = exports.endpointTaskAssignRetrieveLogTask1 = exports.endpointTaskAssignRetrieveLogTask0 = exports.assetsAssignShutdownTask2 = exports.assetsAssignShutdownTask = exports.assetsAssignRebootTask2 = exports.assetsAssignRebootTask = exports.taskGenerateOffNetworkZipPassword = exports.taskDownloadOffNetworkTask = exports.taskImportOffNetworkCollectionToTask = exports.taskCreateOffNetworkTask = exports.taskCancel = exports.taskCancelByFilter = exports.taskDeleteAndPurgeByFilter = exports.taskDeleteByFilter = exports.tasksGetData = exports.taskRenameTask = exports.tasksGetMany = exports.tasksGetById = exports.taskDelete = exports.getTaskDisplayTypes = exports.endpointGroupGetRootGroups = exports.endpointGroupGetChildGroupsOfGroup = exports.endpointTagRenameAssetTag = exports.endpointTagDeleteAssetTag = exports.endpointTagDeleteAllAssetTags = exports.endpointTagCreateAssetTag = exports.endpointTagFilterAssetTags = exports.endpointSetMaintenanceMode1 = exports.endpointSetMaintenanceMode0 = exports.endpointUpdateEndpointConnectionRoute1 = exports.endpointUpdateEndpointConnectionRoute0 = exports.endpointDeployCloudAssetsByFilter1 = exports.endpointDeployCloudAssetsByFilter0 = exports.endpointGetCloudAssetDetails1 = exports.endpointGetCloudAssetDetails0 = exports.endpointSyncLdap1 = exports.endpointSyncLdap0 = exports.endpointDownloadLogFile1 = exports.endpointDownloadLogFile0 = exports.endpointSetExcludeFromUpdatesToEndpointsByFilter1 = exports.endpointSetExcludeFromUpdatesToEndpointsByFilter0 = exports.endpointExportCasesByEndpointId1 = exports.endpointExportCasesByEndpointId0 = exports.endpointGetCasesById1 = void 0;
+exports.settingsSaveIpRestriction = exports.settingsValidateIpRestriction = exports.settingsSaveCaseAutoClose = exports.settingsSaveFleetAi = exports.settingsSaveInterAct = exports.settingsSaveAutoAssetTagging = exports.settingsSaveEnforceTfa = exports.settingsSaveAgent = exports.settingsValidateS3 = exports.settingsValidateSftp = exports.settingsSaveBackupRestore = exports.settingsSavePolicy = exports.settingsValidateSsl = exports.settingsSaveSsl = exports.settingsValidateSmtp = exports.settingsSaveSmtp = exports.settingsValidateSyslog = exports.settingsSaveSyslog = exports.settingsGetSyslogEventTypes = exports.settingsValidateActiveDirectory = exports.settingsSaveActiveDirectory = exports.settingsValidateTrustedCertificate = exports.settingsDeleteTrustedCertificate = exports.settingsAddTrustedCertificateWithoutValidation = exports.settingsAddTrustedCertificate = exports.settingsGetTrustedCertificates = exports.settingsTestProxy1 = exports.settingsTestProxy0 = exports.settingsSaveProxy = exports.settingsSaveGeneralSettings = exports.settingsGetSettings = exports.tasksTriageV2ApiControllerDeleteOne = exports.tasksTriageV2ApiControllerCancelOne = exports.tasksTriageV2ApiControllerDelete = exports.tasksTriageV2ApiControllerCancel = exports.tasksTriageV2ApiControllerListHuntTasks = exports.tasksV2ApiControllerListTaskAssignments = exports.tasksV2ApiControllerListTaskAssets = exports.tasksV2ApiControllerUpdateTask = exports.tasksV2ApiControllerGetTaskById = exports.taskAssignmentGenerateTaskAssignmentReport = exports.taskAssignmentGet = exports.taskAssignmentDelete = exports.taskAssignmentCancel = exports.tasksAssignmentsGetMany = exports.endpointTaskGetComparableTasksByVendorDeviceId = exports.endpointTaskRetryUpload1 = exports.endpointTaskRetryUpload0 = exports.endpointTaskPurgeLocalData1 = exports.endpointTaskPurgeLocalData0 = void 0;
+exports.userPatTokensCreate = exports.userPatTokensGetMany = exports.userGroupUpdateGroup = exports.userGroupGetGroup = exports.userGroupDeleteGroup = exports.userGroupCreateGroup = exports.userGroupFilterGroups = exports.userRolesUpdateRole = exports.userRolesGetRole = exports.userRolesDeleteRole = exports.userRolesCreateRole = exports.userRolesGetRoles = exports.userRolesGetPrivileges = exports.userCreateApiUser = exports.userResetUserPassword = exports.userChangePassword = exports.userResetTfa = exports.userManagementUsersPurgeAndDelete = exports.userUpdateUser = exports.userPatchUser = exports.userManagementUsersGet = exports.userDelete = exports.userCreate = exports.userManagementUsersGetMany = exports.authGetUserSessionHistory = exports.authRegeneratePatToken = exports.authRenewOneClickLoginUrl = exports.authGenerateOneClickLoginUrl = exports.authLogin = exports.authOneClickLogin = exports.authUpdateProfile = exports.authCheckAuth = exports.settingsUpdateSsoProvider = exports.settingsDeleteSsoProvider = exports.settingsCreateSsoProvider = exports.settingsGetSsoProviders = exports.settingsSingleSignOnCallback = exports.settingsSaveMandatoryCaseSelection = exports.settingsGetMitreAttackDatabaseReleaseNotes = exports.settingsGetMitreAttackDatabaseVersions = exports.settingsSaveMitreAttackDatabaseSettings = exports.settingsGetAutoUpdateWindows = exports.settingsSaveAutoUpdateSettings = exports.settingsGetAutoUpdateSettings = exports.settingsSaveUninstallationPasswordProtection = exports.settingsSaveBanner = exports.settingsSaveConsoleAddress = exports.settingsValidateConsoleAddress = exports.settingsSaveRfc3161 = exports.settingsSaveLocard = void 0;
+exports.taxiiFeedsUpdateStatus = exports.taxiiFeedsCancelSync = exports.taxiiFeedsTriggerSync = exports.taxiiFeedsDiscoverCollections = exports.taxiiFeedsGetSyncLogs = exports.taxiiFeedsUpdate = exports.taxiiFeedsGetOne = exports.taxiiFeedsDelete = exports.taxiiFeedsGetIndicatorSummary = exports.taxiiFeedsGetIndicators = exports.taxiiFeedsCreate = exports.taxiiFeedsGetMany = exports.gitRepositoriesGetRepositoryBranches = exports.gitRepositoriesTestConnection = exports.gitRepositoriesBrowseTree = exports.gitRepositoriesGetSyncLogs = exports.gitRepositoriesCancelSync = exports.gitRepositoriesTriggerSync = exports.gitRepositoriesBulkDelete = exports.gitRepositoriesUpdate = exports.gitRepositoriesGetOne = exports.gitRepositoriesDelete = exports.gitRepositoriesCreate = exports.gitRepositoriesGetMany = exports.acquisitionLibraryDeviceV2ApiControllerUpdate = exports.acquisitionLibraryDeviceV2ApiControllerGet = exports.acquisitionLibraryDeviceV2ApiControllerDelete = exports.acquisitionLibraryDeviceV2ApiControllerBulkDelete = exports.acquisitionLibraryDeviceV2ApiControllerCreate = exports.acquisitionLibraryDeviceV2ApiControllerList = exports.acquisitionValidateOsQueries = exports.acquisitionUpdateScheduledImageAcquisition = exports.acquisitionUpdateScheduledEvidenceAcquisition = exports.acquisitionAcquireImage = exports.createOffNetworkAcquisitionTaskFile = exports.acquisitionAssignEvidenceTask2 = exports.acquisitionAssignEvidenceTask = exports.acquisitionDeleteBulk = exports.acquisitionUpdate = exports.acquisitionGet = exports.acquisitionDelete = exports.acquisitionCreate = exports.acquisitionProfilesGetOne = exports.licenseGetQuota = exports.licenseGetSubscriptionDetails = exports.licenseRefreshLicense = exports.licenseSetLicense = exports.licenseGetLicense = exports.userPatTokensDelete = exports.userPatTokensRotate = void 0;
+exports.evidenceRepositoryValidateGoogleCloudStorage = exports.evidenceRepositoryValidateSftpRepository = exports.evidenceRepositoryValidateFtpsRepository = exports.evidenceRepositoryValidateAzureStorage = exports.evidenceRepositoryValidateS3Compatible = exports.evidenceRepositoryValidateAmazonS3 = exports.evidenceRepositoryValidateById = exports.evidenceRepositoriesGetMany = exports.evidenceRepositoriesGet = exports.evidenceRepositoryDelete = exports.evidenceRepositoryUpdateS3Compatible = exports.evidenceRepositoryCreateS3Compatible = exports.evidenceRepositoryUpdateAmazonS3 = exports.evidenceRepositoryCreateAmazonS3 = exports.evidenceRepositoryUpdateAzureStorage = exports.evidenceRepositoryCreateAzureStorage = exports.evidenceRepositoryUpdateFtps = exports.evidenceRepositoryCreateFtps = exports.evidenceRepositoryUpdateSftp = exports.evidenceRepositoryCreateSftp = exports.evidenceRepositoryUpdateSmb = exports.evidenceRepositoryCreateSmb = exports.evidenceGetCasePpcFile = exports.evidenceGetCaseReportFileInfo = exports.evidenceDownloadExternalEvidence = exports.evidenceGetCaseReport1 = exports.evidenceGetCaseReport0 = exports.triageLibraryExportV2ApiControllerDownload = exports.triageLibraryExportV2ApiControllerExport = exports.triageLibraryV2ApiControllerUpdate = exports.triageLibraryV2ApiControllerGet = exports.triageLibraryV2ApiControllerDelete = exports.triageLibraryV2ApiControllerValidate = exports.triageLibraryV2ApiControllerBulkDelete = exports.triageLibraryV2ApiControllerCreate = exports.triageLibraryV2ApiControllerList = exports.deleteTriageRuleTag = exports.createTriageRuleTag = exports.filterTriageRuleTags = exports.createOffNetworkTriageTaskFile = exports.updateScheduledTriageTask = exports.assignTriageTask = exports.validateTriageRule = exports.deleteBulkTriageRules = exports.updateTriageRule = exports.getTriageRule = exports.deleteTriageRule = exports.createTriageRule = exports.getManyTriageRules = exports.taxiiFeedsBulkDelete = void 0;
+exports.caseActivityV2ApiControllerFilterCaseActivities = exports.caseActivityV2ApiControllerFilterGlobalActivities = exports.autoAssetTagUpdateScheduledAatTask = exports.autoAssetTagAssignAutoAssetTaggingTask = exports.autoAssetTagDeleteBulk = exports.autoAssetTagUpdateStatus = exports.autoAssetTagUpdateAutoAssetTag = exports.autoAssetTagGetById = exports.autoAssetTagDelete = exports.autoAssetTagSaveAutoAssetTag = exports.autoAssetTagFilter = exports.organizationGetUsers = exports.organizationAddTags = exports.organizationRemoveTags = exports.organizationUpdateDeploymentToken = exports.organizationUpdateShareableDeploymentStatus = exports.organizationGetOrganizationIdByToken = exports.organizationAssignGroups = exports.organizationRemoveGroups = exports.organizationAssignUsers = exports.organizationRemoveUsers = exports.organizationUpdate = exports.organizationGet = exports.organizationDelete = exports.organizationCheckNameExists = exports.organizationCreate = exports.organizationsGetMany = exports.policyCheckNameExists = exports.policyUpdateStatus = exports.policyUpdate = exports.policyGet = exports.policyDelete = exports.policyUpdatePriorities = exports.policyCreate = exports.policyFilter = exports.policyGetMatchStats = exports.auditLogsUpdateEventFilter = exports.auditLogsGetEventFilter = exports.auditLogsGetEventTypes = exports.auditLogExport = exports.auditLogsGetMany = exports.notificationMarkAsRead = exports.notificationMarkAllAsRead = exports.notificationFilter = exports.notificationDeleteAll = exports.evidenceRepositoryUpdateBox = exports.evidenceRepositoryCreateBox = exports.evidenceRepositoryValidateBox = exports.evidenceRepositoryUpdateGoogleCloudStorage = exports.evidenceRepositoryCreateGoogleCloudStorage = void 0;
+exports.caseDeleteCaseNote = exports.caseAddCaseNote = exports.caseExportActivities = exports.casesGetActivities = exports.casesGetAssetsByFilterExpression2 = exports.casesGetAssetsByFilterExpression = exports.casesGetEndpoints2 = exports.casesGetEndpoints = exports.caseFilterTaskAssignments = exports.casesGetTasks = exports.casesChangeOwner = exports.casesArchiveByFilter = exports.casesCloseByFilter = exports.caseArchiveCase = exports.caseReopenCase = exports.casesClose = exports.casesCreate = exports.casesGetMany = exports.caseUpdateCase = exports.casesGet = exports.casesCreateAssetsExpressionExport2 = exports.casesDownloadAssetsExpressionExport2 = exports.casesCreateAssetsExpressionExport = exports.casesDownloadAssetsExpressionExport = exports.caseExportCaseEndpoints1 = exports.caseExportCaseEndpoints0 = exports.caseExportCaseNotes = exports.caseExportCases = exports.casesCheckName = exports.caseV2ApiControllerUpdateCase = exports.caseV2ApiControllerGetCaseByIdOrName = exports.caseV2ApiControllerCreateCase = exports.caseV2ApiControllerFilterCases = exports.caseActionV2ApiControllerRemoveAssets = exports.caseActionV2ApiControllerArchive = exports.caseActionV2ApiControllerReopen = exports.caseActionV2ApiControllerClose = exports.caseTaskAssignmentV2ApiControllerRemoveTaskAssignment = exports.caseTaskAssignmentV2ApiControllerImportTaskAssignments = exports.caseTaskAssignmentV2ApiControllerFilterTaskAssignments = exports.caseNoteV2ApiControllerUpdateNote = exports.caseNoteV2ApiControllerDeleteNote = exports.caseNoteV2ApiControllerCreateNote = exports.caseNoteV2ApiControllerFilterNotes = exports.caseTaskV2ApiControllerFilterTasks = exports.caseUserV2ApiControllerFilterUsers = exports.caseAssetV2ApiControllerFilterAssets = exports.caseBulkActionV2ApiControllerArchive = exports.caseBulkActionV2ApiControllerClose = exports.caseExportV2ApiControllerExportCases = void 0;
+exports.interactLibrarySnippetV2ApiControllerGet = exports.interactLibrarySnippetV2ApiControllerDelete = exports.interactLibrarySnippetV2ApiControllerBulkDelete = exports.interactLibrarySnippetV2ApiControllerCreate = exports.interactLibrarySnippetV2ApiControllerList = exports.interactCommandSnippetTagsUpdate = exports.interactCommandSnippetTagsDelete = exports.interactCommandSnippetTagsCreate = exports.interactCommandSnippetTagsGetMany = exports.interactCommandSnippetsBulkDelete = exports.interactCommandSnippetsUpdate = exports.interactCommandSnippetsGetOne = exports.interactCommandSnippetsDelete = exports.interactCommandSnippetsCreate = exports.interactCommandSnippetsGetMany = exports.interactLibraryDelete = exports.interactLibraryDeleteBulk = exports.interactLibraryDownload = exports.interactLibraryUpload = exports.interactLibraryCheckLibraryFileExists = exports.interactLibraryFilter = exports.interactSessionGetCommandMessage = exports.interactSessionClose = exports.interactSessionInterruptCommand = exports.interactSessionExecuteAsyncCommand = exports.interactSessionExecuteCommand = exports.interactGetInterActShellReport = exports.interactShellAssignTask = exports.interactCommandsDownloadResultFile = exports.interactCommandsGetMany = exports.exportClosureReportAssets = exports.exportClosureReportFlags = exports.exportClosureReportFindings = exports.updateCaseCloseReport2 = exports.getCaseCloseReport2 = exports.updateCaseCloseReport = exports.getCaseCloseReport = exports.getCaseCloseReportHistory = exports.caseCategoriesDelete = exports.caseCategoriesCreate = exports.caseCategoriesFilter = exports.caseTagsDelete = exports.caseTagsCreate = exports.caseTagsFilter = exports.caseRemoveTaskAssignmentFromCase = exports.caseRemoveEndpointsFromCaseByFilter1 = exports.caseRemoveEndpointsFromCaseByFilter0 = exports.casesGetUsers = exports.caseImportTaskAssignment = exports.caseEditCaseNote = void 0;
+exports.investigationEvidenceFlagV2ApiControllerFlagEvidence = exports.flagsLibraryV2ApiControllerUpdate = exports.flagsLibraryV2ApiControllerGet = exports.flagsLibraryV2ApiControllerDelete = exports.flagsLibraryV2ApiControllerCreate = exports.flagsLibraryV2ApiControllerList = exports.cloudAccountsSyncAllCloudAccount = exports.cloudAccountsSyncCloudAccount = exports.cloudAccountsUpdateCloudAccount = exports.cloudAccountsGetCloudAccountById = exports.cloudAccountsDelete = exports.cloudAccountsExport = exports.cloudAccountsGetConfig = exports.cloudAccountsCreateCloudAccount = exports.cloudAccountsFilter = exports.systemApiTokensUpdate = exports.systemApiTokensGetOne = exports.systemApiTokensDelete = exports.systemApiTokensCreate = exports.systemApiTokensGetMany = exports.apiTokensBulkDelete = exports.apiTokensUpdate = exports.apiTokensGetOne = exports.apiTokensDelete = exports.apiTokensGetCurrent = exports.apiTokensCreate = exports.apiTokensGetMany = exports.baselineGetComparisonReportByVendorDeviceId = exports.baselineGetComparisonReport = exports.baselineAcquire = exports.baselineCompare = exports.multipartUploadUploadPart = exports.multipartUploadDeleteFileParts = exports.multipartUploadIsReady = exports.multipartUploadFinalize = exports.multipartUploadInitialize = exports.multipartUploadInitializeHead = exports.interactCommandV2ApiControllerList = exports.interactLibraryFileV2ApiControllerDownload = exports.interactLibraryFileV2ApiControllerDelete = exports.interactLibraryFileV2ApiControllerBulkDelete = exports.interactLibraryFileV2ApiControllerUpload = exports.interactLibraryFileV2ApiControllerList = exports.interactLibraryTagV2ApiControllerUpdate = exports.interactLibraryTagV2ApiControllerGet = exports.interactLibraryTagV2ApiControllerDelete = exports.interactLibraryTagV2ApiControllerBulkDelete = exports.interactLibraryTagV2ApiControllerCreate = exports.interactLibraryTagV2ApiControllerList = exports.interactLibrarySnippetV2ApiControllerUpdate = void 0;
+exports.investigationExclusionApplyFindingExclusionRuleForAllAssets = exports.investigationExclusionApplyFindingExclusionRuleForOrganization = exports.investigationExclusionGetExclusionReasons = exports.investigationExclusionFilterFindingExclusionRules = exports.investigationExclusionDeleteFindingExclusionRule = exports.investigationExclusionGetFindingExclusionRulesMatches = exports.investigationExclusionBulkAddFindingExclusionRules = exports.investigationExclusionAddFindingExclusionRule = exports.investigationImportTornadoEvidenceToInvestigation1 = exports.investigationImportTornadoEvidenceToInvestigation0 = exports.investigationCreateExportRequestForFindings = exports.investigationExportFindingsData = exports.investigationGetInvestigationHubDataImportProgress = exports.investigationGetInvestigationTaskAssignmentDataImportProgress = exports.investigationGetInvestigationTaskAssignmentForImportedEvidence = exports.investigationUpdateInvestigationFinding = exports.investigationMarkInvestigationEvidenceAsFinding = exports.investigationRetryImportTaskAssignment = exports.investigationImportPstEvidencesToInvestigation = exports.investigationGetImportErrors = exports.investigationDeleteImport = exports.investigationGetAllImports = exports.investigationImportDataToInvestigationEvidence = exports.investigationUpdateInvestigationEvidence = exports.investigationCreateInvestigationEvidence = exports.investigationUpdateEvidenceNote = exports.investigationFlagEvidence = exports.investigationRemoveEvidenceFlag = exports.investigationEvidenceCounts = exports.investigationGlobalSearch = exports.investigationGetMitreMatches = exports.investigationGetFindingsSummary = exports.investigationFilterEndpointFindings = exports.investigationGetFindingDataStructure = exports.investigationGetSummary = exports.investigationGetSectionsByEndpoints = exports.investigationGetAssetsByInvestigationId = exports.investigationCreateExportRequestForSectionData = exports.investigationExportEvidenceData = exports.investigationCreateExportRequestForFlags = exports.investigationExportFlags = exports.investigationGetEvidenceRelationData = exports.investigationGetEvidenceData = exports.investigationGetEvidenceDataStructure = exports.investigationGetInvestigationMigrationsSummary = exports.investigationUpdateInvestigation = exports.investigationGetInvestigationById = exports.investigationSqlV2ApiControllerExecuteSqlQuery = exports.investigationSqlV2ApiControllerGetSchema = exports.investigationEvidenceFlagV2ApiControllerUnflagEvidence = void 0;
+exports.assetActionV2ApiControllerUnisolate = exports.assetActionV2ApiControllerIsolate = exports.assetActionV2ApiControllerShutdown = exports.assetActionV2ApiControllerReboot = exports.processorGetProcessorTypeByAssetType = exports.processorGetProcessorsByAssetType = exports.processorGetAllProcessors = exports.recentActivitiesCreate = exports.recentActivitiesGetMany = exports.relayProUpdateRelayUrl = exports.relayProRemove = exports.relayServerUpdateAddress = exports.relayServerRemoveRelayServer = exports.relayServerAssignFixUpdateRequiredIssueTask = exports.relayServerAssignRetrieveLogTask = exports.relayServerAssignRebootTask = exports.relayServerFilter = exports.relayServerGetById = exports.relayServerUpdateLabel = exports.relayServerUpdateTags = exports.investigationTaskExecutionLogFilterTaskExecutionLogs = exports.investigationTaskExecutionLogGetTaskExecutionLogs = exports.investigationTimelineCreateExportRequestForTimeline = exports.investigationTimelineExportTimelineData = exports.investigationTimelineGetTotalTimelineCount = exports.investigationTimelineGetTimelineStructure = exports.investigationTimelineFilterTimelineEvents = exports.investigationTimelineGetTimelineEventCountByAdvancedFilter = exports.investigationAdvancedFilterUpdateFilter = exports.investigationAdvancedFilterDeleteFilter = exports.investigationAdvancedFilterCreateFilter = exports.investigationAdvancedFilterGetFilters = exports.investigationCommentDeleteComment = exports.investigationCommentCommentEvidence = exports.investigationCommentFilterComments = exports.investigationActivityMarkAsRead = exports.investigationActivityFilter = exports.investigationFlagUpdateFlag = exports.investigationFlagDeleteFlag = exports.investigationFlagCreateFlag = exports.investigationFlagFilterFlags = exports.investigationReportDownloadPdfReport = exports.investigationReportGeneratePdfReport = exports.investigationReportUpdateReport = exports.investigationReportGetReport = exports.investigationReportDeleteReport = exports.investigationReportCreateReport = exports.investigationReportFilterReports = exports.investigationReportExportReports = exports.investigationExclusionDeleteIndividualFindingExclusionRule = void 0;
+exports.webhookUpdate = exports.webhookGet = exports.webhookDelete = exports.webhookCreate = exports.webhookFilter = exports.webhookFilterParsers = exports.assetInteractMessageV2ApiControllerGetSessionReport = exports.assetInteractMessageV2ApiControllerDownloadMessageOutput = exports.assetInteractMessageV2ApiControllerGetMessage = exports.assetInteractMessageV2ApiControllerListSessionsForAsset = exports.assetAcquisitionV2ApiControllerFilterAcquisitionTasks = exports.assetAcquisitionV2ApiControllerDeleteAcquisitionAssignment = exports.assetAcquisitionV2ApiControllerCancelAcquisition = exports.assetAcquisitionV2ApiControllerAcquire = exports.assetTriageV2ApiControllerDeleteTriageAssignment = exports.assetTriageV2ApiControllerCancelTriage = exports.assetTriageV2ApiControllerRunTriage = exports.assetTriageV2ApiControllerFilterTriageTasks = exports.assetV2ApiControllerUpdateLabel = exports.assetV2ApiControllerReplaceTags = exports.assetV2ApiControllerGetAsset = exports.assetV2ApiControllerDeleteAsset = exports.assetV2ApiControllerFilterAssets = exports.assetV2ApiControllerExportAssets = exports.assetV2ApiControllerGetStats = exports.assetInteractV2ApiControllerCloseSession = exports.assetInteractV2ApiControllerCancelCommand = exports.assetInteractV2ApiControllerRunCommand = exports.assetInteractMessageV2ApiControllerListForAsset = exports.assetBulkTriageV2ApiControllerRunTriage = exports.assetBulkMetadataV2ApiControllerImportOffNetworkPpc = exports.assetBulkMetadataV2ApiControllerDeleteAssets = exports.assetBulkMetadataV2ApiControllerSetMitreDatabaseVersion = exports.assetBulkMetadataV2ApiControllerSetConnectionRoute = exports.assetBulkMetadataV2ApiControllerSetUpdateExclusion = exports.assetBulkMetadataV2ApiControllerRemoveTags = exports.assetBulkMetadataV2ApiControllerAddTags = exports.assetBulkActionV2ApiControllerDisableMaintenance = exports.assetBulkActionV2ApiControllerEnableMaintenance = exports.assetBulkActionV2ApiControllerVersionUpdate = exports.assetBulkActionV2ApiControllerRetrieveLogs = exports.assetBulkActionV2ApiControllerUnisolate = exports.assetBulkActionV2ApiControllerIsolate = exports.assetBulkActionV2ApiControllerShutdown = exports.assetBulkActionV2ApiControllerReboot = exports.assetActionV2ApiControllerImportPpcToExistingAsset = exports.assetActionV2ApiControllerDisableMaintenance = exports.assetActionV2ApiControllerEnableMaintenance = exports.assetActionV2ApiControllerVersionUpdate = exports.assetActionV2ApiControllerRetrieveLogs = void 0;
+exports.cloudAcquisitionProfilesCreate = exports.cloudAcquisitionProfilesGetMany = exports.fullTextSearchTaskUpdateScheduledFullTextSearchTask = exports.fullTextSearchTaskAssign = exports.fullTextSearchProfilesDeleteBulk = exports.fullTextSearchProfilesUpdate = exports.fullTextSearchProfilesGetOne = exports.fullTextSearchProfilesDelete = exports.fullTextSearchProfilesCreate = exports.fullTextSearchProfilesGetMany = exports.automationHubDisableAutomation = exports.automationHubEnableAutomation = exports.automationHubGenerateTriggerSecret = exports.automationHubGetAutomationChangeHistory = exports.automationHubGetAutomationExecutions = exports.automationHubUpdateAutomation = exports.automationHubGetAutomation = exports.automationHubDeleteAutomation = exports.automationHubExecuteIntegration = exports.automationHubGetTags = exports.automationHubGetTriggerTypes = exports.automationHubTestAction = exports.automationHubGetActionTypes = exports.automationHubCreateAutomation = exports.automationHubFilterAutomations = exports.automationHubGetExecutionHistory = exports.presetFiltersUpdate = exports.presetFiltersDelete = exports.presetFiltersCreate = exports.presetFiltersGetMany = exports.investigationDataUsageCreateFilter = exports.investigationDataUsageUpdateFilter = exports.investigationDataUsageGetFilter = exports.investigationDataUsageDeleteFilter = exports.investigationDataUsageGetFilters = exports.investigationDataUsageGetDataUsageFilters = exports.investigationDataUsageGetHistoricalDataUsageStatistics = exports.investigationDataUsageGetActualDataUsageStatistics = exports.investigationDataUsageCreateExportRequestForActualDataUsages = exports.investigationDataUsageExportActualDataUsages = exports.investigationDataUsageGetActualDataUsages = exports.eventSubscriptionTestEventSubscription = exports.eventSubscriptionDeleteBulkEventSubscriptions = exports.eventSubscriptionSubscriptionEventNames = exports.eventSubscriptionUpdateEventSubscription = exports.eventSubscriptionGetEventSubscription = exports.eventSubscriptionDeleteEventSubscription = exports.eventSubscriptionCreateEventSubscription = exports.eventSubscriptionFilterEventSubscriptions = exports.webhookDeleteBulk = void 0;
+exports.diskImageAcquisitionTasksDownload = exports.diskImageAcquisitionTasksCreate = exports.diskImageAcquisitionLibraryApiControllerUpdate = exports.diskImageAcquisitionLibraryApiControllerGet = exports.diskImageAcquisitionLibraryApiControllerDelete = exports.diskImageAcquisitionLibraryApiControllerBulkDelete = exports.diskImageAcquisitionLibraryApiControllerCreate = exports.diskImageAcquisitionLibraryApiControllerList = exports.imageEvidenceAcquisitionProfilesDeleteBulk = exports.imageEvidenceAcquisitionProfilesUpdate = exports.imageEvidenceAcquisitionProfilesGetOne = exports.imageEvidenceAcquisitionProfilesDelete = exports.imageEvidenceAcquisitionProfilesCreate = exports.imageEvidenceAcquisitionProfilesGetMany = exports.cloudAcquisitionLibraryApiControllerUpdate = exports.cloudAcquisitionLibraryApiControllerGet = exports.cloudAcquisitionLibraryApiControllerDelete = exports.cloudAcquisitionLibraryApiControllerBulkDelete = exports.cloudAcquisitionLibraryApiControllerCreate = exports.cloudAcquisitionLibraryApiControllerList = exports.cloudAcquisitionProfilesUpdate = exports.cloudAcquisitionProfilesGetOne = exports.cloudAcquisitionProfilesDelete = void 0;
 const client_1 = require("./client");
 const client_gen_1 = require("./client.gen");
 const appGetBasicInfo = (options) => {
@@ -346,33 +346,51 @@ const assetsGetManyByFilter2 = (options) => {
     });
 };
 exports.assetsGetManyByFilter2 = assetsGetManyByFilter2;
-const endpointGetEndpointsWithTaskCount = (options) => {
-    return (options.client ?? client_gen_1.client).get({
+/**
+ * Retrieve many assets by expression filter
+ * Retrieve a paginated list of assets by a flexible filter expression
+ */
+const assetsGetManyByFilterExpression = (options) => {
+    return (options.client ?? client_gen_1.client).post({
+        responseType: 'json',
         security: [
             {
                 scheme: 'bearer',
                 type: 'http'
             }
         ],
-        url: '/api/public/assets/with-task-count',
-        ...options
+        url: '/api/public/endpoints/filter-query',
+        ...options,
+        headers: {
+            'Content-Type': 'application/json',
+            ...options.headers
+        }
     });
 };
-exports.endpointGetEndpointsWithTaskCount = endpointGetEndpointsWithTaskCount;
-const endpointGetEndpointsStats0 = (options) => {
-    return (options.client ?? client_gen_1.client).get({
+exports.assetsGetManyByFilterExpression = assetsGetManyByFilterExpression;
+/**
+ * Retrieve many assets by expression filter
+ * Retrieve a paginated list of assets by a flexible filter expression
+ */
+const assetsGetManyByFilterExpression2 = (options) => {
+    return (options.client ?? client_gen_1.client).post({
+        responseType: 'json',
         security: [
             {
                 scheme: 'bearer',
                 type: 'http'
             }
         ],
-        url: '/api/public/endpoints/stats',
-        ...options
+        url: '/api/public/assets/filter-query',
+        ...options,
+        headers: {
+            'Content-Type': 'application/json',
+            ...options.headers
+        }
     });
 };
-exports.endpointGetEndpointsStats0 = endpointGetEndpointsStats0;
-const endpointGetEndpointsStats1 = (options) => {
+exports.assetsGetManyByFilterExpression2 = assetsGetManyByFilterExpression2;
+const endpointGetEndpointsWithTaskCount = (options) => {
     return (options.client ?? client_gen_1.client).get({
         security: [
             {
@@ -380,11 +398,11 @@ const endpointGetEndpointsStats1 = (options) => {
                 type: 'http'
             }
         ],
-        url: '/api/public/assets/stats',
+        url: '/api/public/assets/with-task-count',
         ...options
     });
 };
-exports.endpointGetEndpointsStats1 = endpointGetEndpointsStats1;
+exports.endpointGetEndpointsWithTaskCount = endpointGetEndpointsWithTaskCount;
 const endpointGetDeviceNameConflicts0 = (options) => {
     return (options.client ?? client_gen_1.client).get({
         security: [
@@ -753,7 +771,7 @@ const assetsSetMitreAttackDatabaseVersion2 = (options) => {
 };
 exports.assetsSetMitreAttackDatabaseVersion2 = assetsSetMitreAttackDatabaseVersion2;
 const endpointFilterDisks0 = (options) => {
-    return (options.client ?? client_gen_1.client).get({
+    return (options.client ?? client_gen_1.client).post({
         security: [
             {
                 scheme: 'bearer',
@@ -761,12 +779,16 @@ const endpointFilterDisks0 = (options) => {
             }
         ],
         url: '/api/public/endpoints/disks',
-        ...options
+        ...options,
+        headers: {
+            'Content-Type': 'application/json',
+            ...options.headers
+        }
     });
 };
 exports.endpointFilterDisks0 = endpointFilterDisks0;
 const endpointFilterDisks1 = (options) => {
-    return (options.client ?? client_gen_1.client).get({
+    return (options.client ?? client_gen_1.client).post({
         security: [
             {
                 scheme: 'bearer',
@@ -774,7 +796,11 @@ const endpointFilterDisks1 = (options) => {
             }
         ],
         url: '/api/public/assets/disks',
-        ...options
+        ...options,
+        headers: {
+            'Content-Type': 'application/json',
+            ...options.headers
+        }
     });
 };
 exports.endpointFilterDisks1 = endpointFilterDisks1;
@@ -1104,7 +1130,7 @@ const endpointSetMaintenanceMode1 = (options) => {
     });
 };
 exports.endpointSetMaintenanceMode1 = endpointSetMaintenanceMode1;
-const endpointTagFilterTags = (options) => {
+const endpointTagFilterAssetTags = (options) => {
     return (options.client ?? client_gen_1.client).get({
         security: [
             {
@@ -1116,8 +1142,25 @@ const endpointTagFilterTags = (options) => {
         ...options
     });
 };
-exports.endpointTagFilterTags = endpointTagFilterTags;
-const endpointTagDeleteAllTags = (options) => {
+exports.endpointTagFilterAssetTags = endpointTagFilterAssetTags;
+const endpointTagCreateAssetTag = (options) => {
+    return (options.client ?? client_gen_1.client).post({
+        security: [
+            {
+                scheme: 'bearer',
+                type: 'http'
+            }
+        ],
+        url: '/api/public/asset-tags',
+        ...options,
+        headers: {
+            'Content-Type': 'application/json',
+            ...options.headers
+        }
+    });
+};
+exports.endpointTagCreateAssetTag = endpointTagCreateAssetTag;
+const endpointTagDeleteAllAssetTags = (options) => {
     return (options?.client ?? client_gen_1.client).delete({
         security: [
             {
@@ -1129,8 +1172,8 @@ const endpointTagDeleteAllTags = (options) => {
         ...options
     });
 };
-exports.endpointTagDeleteAllTags = endpointTagDeleteAllTags;
-const endpointTagDeleteTag = (options) => {
+exports.endpointTagDeleteAllAssetTags = endpointTagDeleteAllAssetTags;
+const endpointTagDeleteAssetTag = (options) => {
     return (options?.client ?? client_gen_1.client).delete({
         security: [
             {
@@ -1142,7 +1185,24 @@ const endpointTagDeleteTag = (options) => {
         ...options
     });
 };
-exports.endpointTagDeleteTag = endpointTagDeleteTag;
+exports.endpointTagDeleteAssetTag = endpointTagDeleteAssetTag;
+const endpointTagRenameAssetTag = (options) => {
+    return (options.client ?? client_gen_1.client).put({
+        security: [
+            {
+                scheme: 'bearer',
+                type: 'http'
+            }
+        ],
+        url: '/api/public/asset-tags/{organizationId}/{id}',
+        ...options,
+        headers: {
+            'Content-Type': 'application/json',
+            ...options.headers
+        }
+    });
+};
+exports.endpointTagRenameAssetTag = endpointTagRenameAssetTag;
 const endpointGroupGetChildGroupsOfGroup = (options) => {
     return (options?.client ?? client_gen_1.client).get({
         security: [
@@ -1789,7 +1849,7 @@ const taskAssignmentGenerateTaskAssignmentReport = (options) => {
 exports.taskAssignmentGenerateTaskAssignmentReport = taskAssignmentGenerateTaskAssignmentReport;
 /**
  * Get task by id
- * Fetch one Binalyze AIR task by UUID using GET /api/v2/tasks/{taskId}. Type-independent: works for triage, acquisition, interactShell and other task types. The response wraps the single task in result.entities[0] and is polymorphic: it carries a type/subtype discriminator plus only the matching domain block (triage{} / acquisition{} / interactShell{}); other blocks are absent, not null. It also returns counts{assigned,completed,failed,cancelled}, organization{id,name}, cases[], schedule (null when not scheduled) and taskAssignments{taskAssignmentCount,taskAssignmentsUrl}. Use air-tasks-assignments for the full per-endpoint assignment list and air-tasks-assets for the targeted assets. Only a task UUID is accepted; names and hostnames are rejected. A 404 'Task not found' also covers tasks outside the caller's organizations (leak-safe), so do not infer the task does not exist.
+ * Fetch one Binalyze AIR task by UUID using GET /api/v2/tasks/{taskId}. Type-independent: works for triage, acquisition, interactShell and other task types. The response wraps the single task in result.entities[0] and is polymorphic: it carries a type/subtype discriminator plus only the matching domain block (triage{} / acquisition{} / interactShell{}); other blocks are absent, not null. It also returns counts{assigned,completed,failed,cancelled}, organizations[{id,name}], cases[], schedule (null when not scheduled) and taskAssignments{taskAssignmentCount,taskAssignmentsUrl}. Use air-tasks-assignments for the full per-endpoint assignment list and air-tasks-assets for the targeted assets. Only a task UUID is accepted; names and hostnames are rejected. A 404 'Task not found' also covers tasks outside the caller's organizations (leak-safe), so do not infer the task does not exist.
  */
 const tasksV2ApiControllerGetTaskById = (options) => {
     return (options.client ?? client_gen_1.client).get({
@@ -1862,7 +1922,7 @@ const tasksV2ApiControllerListTaskAssets = (options) => {
 exports.tasksV2ApiControllerListTaskAssets = tasksV2ApiControllerListTaskAssets;
 /**
  * List a task assignments
- * List the per-endpoint task assignments of one Binalyze AIR task using GET /api/v2/tasks/{taskId}/task-assignments. Paginated; this is the resolver for the taskAssignmentsUrl field in task detail responses. Each entity carries id, taskId, name, type, endpointId, endpointName, status, progress, hasDroneData, durations, metadata, organization{id,name}, response and cases[]. Use this when the user wants per-host progress, per-host status, or which endpoints completed/failed for a task; use air-tasks-assets for asset details instead. 404 'Task not found' also covers tasks outside the caller's organizations (leak-safe). Placeholder defaults such as pageNumber=1 are ignored.
+ * List the per-endpoint task assignments of one Binalyze AIR task using GET /api/v2/tasks/{taskId}/task-assignments. Paginated; this is the resolver for the taskAssignmentsUrl field in task detail responses. Each entity carries id, taskId, name, type, endpointId, endpointName, status, progress, hasDroneData, durations, metadata, organizations[{id,name}], response and cases[]. Use this when the user wants per-host progress, per-host status, or which endpoints completed/failed for a task; use air-tasks-assets for asset details instead. 404 'Task not found' also covers tasks outside the caller's organizations (leak-safe). Placeholder defaults such as pageNumber=1 are ignored.
  */
 const tasksV2ApiControllerListTaskAssignments = (options) => {
     return (options.client ?? client_gen_1.client).get({
@@ -1908,7 +1968,7 @@ const tasksTriageV2ApiControllerListHuntTasks = (options) => {
 exports.tasksTriageV2ApiControllerListHuntTasks = tasksTriageV2ApiControllerListHuntTasks;
 /**
  * Bulk cancel hunt (triage) tasks (body dryRun preview)
- * Cancel one or more Binalyze AIR hunt (triage) tasks via POST /api/v2/hunt/cancel. MUTATING: cancels ALL active assignments of each task across all its assets; cancellation is queued asynchronously and an abort signal is sent to the agents. Task records and downloaded data are kept (use air-hunt-bulk-delete to remove them). taskIds takes task UUIDs from air-hunt-list. Setting all=true sends taskIds='all' and cancels EVERY active (scheduled/assigned/processing) hunt task in the required organizations scope -- body organizations (ids/names or "all") is REQUIRED for taskIds='all' and optional for explicit id lists; confirm with the user before using it. dryRun defaults to true: the preview (200) returns result.entities[] = {taskId, taskName, willCancelAssignmentCount, status} without cancelling anything. ALWAYS run the preview first and show the user what would be cancelled; pass dryRun=false only after the user explicitly confirms the exact task list. The real cancel returns cancelledAssignmentCount and status 'cancelling' instead. Both forms include warnings[] for skipped tasks (e.g. already in a terminal state). 400 'No matching tasks found' means no given id resolved to an accessible hunt task. For a single task prefer air-hunt-cancel, which returns a leak-safe 404 for unknown ids.
+ * Cancel one or more Binalyze AIR hunt (triage) tasks via POST /api/v2/hunt/cancel. MUTATING: cancels ALL active assignments of each task across all its assets; cancellation is queued asynchronously and an abort signal is sent to the agents. Task records and downloaded data are kept (use air-hunt-bulk-delete to remove them). taskIds takes task UUIDs from air-hunt-list. Setting all=true sends taskIds='all' and cancels EVERY active (scheduled/assigned/processing) hunt task in the required organizations scope -- body organizations (ids/names or "all") is REQUIRED for taskIds='all' and optional for explicit id lists; confirm with the user before using it. dryRun is opt-in at the API level (defaults to false); the OpenCode tools send dryRun=true by default. The preview (200) returns result.entities[] = {taskId, taskName, willCancelAssignmentCount, status} without cancelling anything. ALWAYS run the preview first and show the user what would be cancelled; pass dryRun=false only after the user explicitly confirms the exact task list. The real cancel returns cancelledAssignmentCount and status 'cancelling' instead. Both forms include warnings[] for skipped tasks (e.g. already in a terminal state). 400 'No matching tasks found' means no given id resolved to an accessible hunt task. For a single task prefer air-hunt-cancel, which returns a leak-safe 404 for unknown ids.
  */
 const tasksTriageV2ApiControllerCancel = (options) => {
     return (options.client ?? client_gen_1.client).post({
@@ -1935,7 +1995,7 @@ const tasksTriageV2ApiControllerCancel = (options) => {
 exports.tasksTriageV2ApiControllerCancel = tasksTriageV2ApiControllerCancel;
 /**
  * Bulk delete hunt (triage) tasks (body dryRun preview)
- * Delete one or more Binalyze AIR hunt (triage) tasks via POST /api/v2/hunt/delete. DESTRUCTIVE and irreversible: removes the task records, ALL assignments, and downloaded files/artifacts; nothing remains in history. Active tasks additionally get an agent cancel signal. Use air-hunt-bulk-cancel to merely stop tasks while keeping records. taskIds takes task UUIDs from air-hunt-list. Setting all=true sends taskIds='all' and deletes EVERY hunt task (active and finished) in the required organizations scope -- body organizations (ids/names or "all") is REQUIRED for taskIds='all' and optional for explicit id lists. dryRun defaults to true: the preview (200) returns result.entities[] = {taskId, taskName, willDeleteAssignmentCount, affectedAssets[], status, createdAt} without deleting anything. ALWAYS run the preview first and show the user what would be deleted; pass dryRun=false only after the user explicitly confirms the exact task list. The real delete returns deletedAssignmentCount instead of willDeleteAssignmentCount. 400 'No matching tasks found' means no given id resolved to an accessible hunt task. For a single task prefer air-hunt-delete (leak-safe 404).
+ * Delete one or more Binalyze AIR hunt (triage) tasks via POST /api/v2/hunt/delete. DESTRUCTIVE and irreversible: removes the task records, ALL assignments, and downloaded files/artifacts; nothing remains in history. Active tasks additionally get an agent cancel signal. Use air-hunt-bulk-cancel to merely stop tasks while keeping records. taskIds takes task UUIDs from air-hunt-list. Setting all=true sends taskIds='all' and deletes EVERY hunt task (active and finished) in the required organizations scope -- body organizations (ids/names or "all") is REQUIRED for taskIds='all' and optional for explicit id lists. dryRun is opt-in at the API level (defaults to false); the OpenCode tools send dryRun=true by default. The preview (200) returns result.entities[] = {taskId, taskName, willDeleteAssignmentCount, affectedAssets[], status, createdAt} without deleting anything. ALWAYS run the preview first and show the user what would be deleted; pass dryRun=false only after the user explicitly confirms the exact task list. The real delete returns deletedAssignmentCount instead of willDeleteAssignmentCount. 400 'No matching tasks found' means no given id resolved to an accessible hunt task. For a single task prefer air-hunt-delete (leak-safe 404).
  */
 const tasksTriageV2ApiControllerDelete = (options) => {
     return (options.client ?? client_gen_1.client).post({
@@ -1985,7 +2045,7 @@ const tasksTriageV2ApiControllerCancelOne = (options) => {
 exports.tasksTriageV2ApiControllerCancelOne = tasksTriageV2ApiControllerCancelOne;
 /**
  * Delete a single hunt (triage) task (dryRun query preview)
- * Delete a single Binalyze AIR hunt (triage) task via POST /api/v2/hunt/{taskId}/delete. DESTRUCTIVE and irreversible: removes the task record, ALL its assignments, and downloaded files/artifacts; nothing remains in history. An active task additionally gets an agent cancel signal. Use air-hunt-cancel to merely stop the task while keeping records. Use this for exactly one task; use air-hunt-bulk-delete for several tasks at once. The taskId comes from air-hunt-list or air-tasks-get. dryRun defaults to true and is sent as the ?dryRun=true query parameter: the preview (200) returns result.entities[] = {taskId, taskName, willDeleteAssignmentCount, affectedAssets[], status, createdAt} without deleting anything. ALWAYS preview first and show the user; pass dryRun=false only after the user explicitly confirms this exact task. The real delete returns deletedAssignmentCount instead of willDeleteAssignmentCount. 404 'Task not found' also covers tasks outside the caller's organizations (leak-safe).
+ * Delete a single Binalyze AIR hunt (triage) task via POST /api/v2/hunt/{taskId}/delete. DESTRUCTIVE and irreversible: removes the task record, ALL its assignments, and downloaded files/artifacts; nothing remains in history. An active task additionally gets an agent cancel signal. Use air-hunt-cancel to merely stop the task while keeping records. Use this for exactly one task; use air-hunt-bulk-delete for several tasks at once. The taskId comes from air-hunt-list or air-tasks-get. dryRun is opt-in at the API level (defaults to false) and is sent as the ?dryRun=true query parameter; the OpenCode tools send it by default. The preview (200) returns result.entities[] = {taskId, taskName, willDeleteAssignmentCount, affectedAssets[], status, createdAt} without deleting anything. ALWAYS preview first and show the user; pass dryRun=false only after the user explicitly confirms this exact task. The real delete returns deletedAssignmentCount instead of willDeleteAssignmentCount. 404 'Task not found' also covers tasks outside the caller's organizations (leak-safe).
  */
 const tasksTriageV2ApiControllerDeleteOne = (options) => {
     return (options.client ?? client_gen_1.client).post({
@@ -3059,6 +3119,7 @@ const userChangePassword = (options) => {
 exports.userChangePassword = userChangePassword;
 const userResetUserPassword = (options) => {
     return (options.client ?? client_gen_1.client).post({
+        responseType: 'json',
         security: [
             {
                 scheme: 'bearer',
@@ -3619,7 +3680,7 @@ const acquisitionValidateOsQueries = (options) => {
 exports.acquisitionValidateOsQueries = acquisitionValidateOsQueries;
 /**
  * List device acquisition profiles
- * List Binalyze AIR device (evidence) acquisition profiles via GET /api/v2/libraries/acquisition/device. Read-only and paginated. Each entity is a profile summary: id, name, organizationIds, averageTime, createdAt/createdBy, lastUsedAt/lastUsedBy, deletable, and a detailsUrl. Per-OS configs (windows/linux/macos/aix/eDiscovery) are NOT included; use air-acquisition-device-get for one profile's full config. Use this when the user asks to list or search evidence acquisition profiles, or needs a profile id or exact name before get, update, delete, or bulk delete. sortBy accepts only name, createdBy, createdAt, lastUsedAt, lastUsedBy (default createdAt). Profiles with empty organizationIds are global.
+ * List Binalyze AIR device (evidence) acquisition profiles via GET /api/v2/libraries/acquisition/device. Read-only and paginated. Each entity is a profile summary: id, name, organizations[{id,name}], averageTime, createdAt/createdBy, lastUsedAt/lastUsedBy, deletable, and a detailsUrl. Per-OS configs (windows/linux/macos/aix/eDiscovery) are NOT included; use air-acquisition-device-get for one profile's full config. Use this when the user asks to list or search evidence acquisition profiles, or needs a profile id or exact name before get, update, delete, or bulk delete. sortBy accepts only name, createdBy, createdAt, lastUsedAt, lastUsedBy (default createdAt). Profiles with an empty organizations array are global.
  */
 const acquisitionLibraryDeviceV2ApiControllerList = (options) => {
     return (options?.client ?? client_gen_1.client).get({
@@ -3642,7 +3703,7 @@ const acquisitionLibraryDeviceV2ApiControllerList = (options) => {
 exports.acquisitionLibraryDeviceV2ApiControllerList = acquisitionLibraryDeviceV2ApiControllerList;
 /**
  * Create device acquisition profile
- * Create a Binalyze AIR device (evidence) acquisition profile via POST /api/v2/libraries/acquisition/device. MUTATING: persists a new profile in the acquisition library. Returns 200 with entities[0] = the created profile detail. `name` is required (alphanumeric) plus at least one config block: windows, linux, macos, aix (each with evidenceList/artifactList/customContentProfiles/networkCapture) or eDiscovery ({patterns:[{pattern,category}]}). Any subset of OS blocks is accepted. dryRun DEFAULTS TO TRUE: the first call validates and returns the would-be entity without persisting anything; pass dryRun=false only to actually create after the user confirms. Get the exact evidence/artifact keys from an existing profile (air-acquisition-device-get) when cloning or when unsure of valid values.
+ * Create a Binalyze AIR device (evidence) acquisition profile via POST /api/v2/libraries/acquisition/device. MUTATING: persists a new profile in the acquisition library. Returns 200 with entities[0] = the created profile detail. `name` is required (alphanumeric) plus at least one config block: windows, linux, macos, aix (each with evidenceList/artifactList/customContentProfiles/networkCapture) or eDiscovery ({patterns:[{pattern,category}]}). Any subset of OS blocks is accepted. Body `organizationIds` controls which organizations own the profile; common query `organizations`, `orgs`, and `org` parameters are rejected. dryRun DEFAULTS TO TRUE: the first call validates and returns the would-be entity without persisting anything; pass dryRun=false only to actually create after the user confirms. Get the exact evidence/artifact keys from an existing profile (air-acquisition-device-get) when cloning or when unsure of valid values.
  */
 const acquisitionLibraryDeviceV2ApiControllerCreate = (options) => {
     return (options.client ?? client_gen_1.client).post({
@@ -3719,7 +3780,7 @@ const acquisitionLibraryDeviceV2ApiControllerDelete = (options) => {
 exports.acquisitionLibraryDeviceV2ApiControllerDelete = acquisitionLibraryDeviceV2ApiControllerDelete;
 /**
  * Get device acquisition profile by id or name
- * Get ONE Binalyze AIR device (evidence) acquisition profile by UUID or exact name via GET /api/v2/libraries/acquisition/device/{idOrName}. Read-only. Returns the full profile detail in entities[0]: id, name, organizationIds, the per-OS configs (windows/linux/macos/aix with evidence and artifact lists), eDiscovery patterns, deletable, and timestamps. Use this when the user asks to show or inspect an evidence acquisition profile's contents, or to clone one. Ids and exact names come from air-acquisition-device-list. An unknown idOrName returns 404 NOT_FOUND with did-you-mean suggestions in errors[0].details.suggestions[]; an ambiguous name returns 400 AMBIGUOUS_NAME with candidates in errors[0].details.matches[].
+ * Get ONE Binalyze AIR device (evidence) acquisition profile by UUID or exact name via GET /api/v2/libraries/acquisition/device/{idOrName}. Read-only. Returns the full profile detail in entities[0]: id, name, organizations[{id,name}], the per-OS configs (windows/linux/macos/aix with evidence and artifact lists), eDiscovery patterns, deletable, and timestamps. Use this when the user asks to show or inspect an evidence acquisition profile's contents, or to clone one. Ids and exact names come from air-acquisition-device-list. An unknown idOrName returns 404 NOT_FOUND with did-you-mean suggestions in errors[0].details.suggestions[]; an ambiguous name returns 400 AMBIGUOUS_NAME with candidates in errors[0].details.matches[].
  */
 const acquisitionLibraryDeviceV2ApiControllerGet = (options) => {
     return (options.client ?? client_gen_1.client).get({
@@ -5202,6 +5263,57 @@ const evidenceRepositoryUpdateGoogleCloudStorage = (options) => {
     });
 };
 exports.evidenceRepositoryUpdateGoogleCloudStorage = evidenceRepositoryUpdateGoogleCloudStorage;
+const evidenceRepositoryValidateBox = (options) => {
+    return (options.client ?? client_gen_1.client).post({
+        security: [
+            {
+                scheme: 'bearer',
+                type: 'http'
+            }
+        ],
+        url: '/api/public/evidences/repositories/validate/box',
+        ...options,
+        headers: {
+            'Content-Type': 'application/json',
+            ...options.headers
+        }
+    });
+};
+exports.evidenceRepositoryValidateBox = evidenceRepositoryValidateBox;
+const evidenceRepositoryCreateBox = (options) => {
+    return (options.client ?? client_gen_1.client).post({
+        security: [
+            {
+                scheme: 'bearer',
+                type: 'http'
+            }
+        ],
+        url: '/api/public/evidences/repositories/box',
+        ...options,
+        headers: {
+            'Content-Type': 'application/json',
+            ...options.headers
+        }
+    });
+};
+exports.evidenceRepositoryCreateBox = evidenceRepositoryCreateBox;
+const evidenceRepositoryUpdateBox = (options) => {
+    return (options.client ?? client_gen_1.client).put({
+        security: [
+            {
+                scheme: 'bearer',
+                type: 'http'
+            }
+        ],
+        url: '/api/public/evidences/repositories/box/{id}',
+        ...options,
+        headers: {
+            'Content-Type': 'application/json',
+            ...options.headers
+        }
+    });
+};
+exports.evidenceRepositoryUpdateBox = evidenceRepositoryUpdateBox;
 const notificationDeleteAll = (options) => {
     return (options?.client ?? client_gen_1.client).delete({
         security: [
@@ -6051,7 +6163,7 @@ const caseBulkActionV2ApiControllerArchive = (options) => {
 exports.caseBulkActionV2ApiControllerArchive = caseBulkActionV2ApiControllerArchive;
 /**
  * List assets linked to case
- * List the assets linked to a Binalyze AIR case using GET /api/v2/cases/{idOrName}/assets. Read-only, paginated; returns full canonical v2 asset entities (nested endpoint{} block) for every asset attached to the case. Use this to see which endpoints belong to a case, to pick asset ids for air-cases-remove-assets, or before acting on the case's machines with the asset tools. The path accepts a case UUID or exact case name. JSON only (the API's format=csv variant is not exposed here; use air-cases-export for file exports).
+ * List the assets linked to a Binalyze AIR case using GET /api/v2/cases/{idOrName}/assets. Read-only, paginated; returns full canonical v2 asset entities (nested endpoint{} block) for every asset attached to the case. Use this to see which endpoints belong to a case, to pick asset ids for air-cases-remove-assets, or before acting on the case's machines with the asset tools. The path accepts a case UUID or exact case name. Use format=json (default) for a paginated response or format=csv to stream the linked assets as text/csv.
  */
 const caseAssetV2ApiControllerFilterAssets = (options) => {
     return (options.client ?? client_gen_1.client).get({
@@ -6393,7 +6505,7 @@ const caseActionV2ApiControllerRemoveAssets = (options) => {
 exports.caseActionV2ApiControllerRemoveAssets = caseActionV2ApiControllerRemoveAssets;
 /**
  * List cases
- * List Binalyze AIR cases using GET /api/v2/cases. Read-only, paginated. Each entity uses object refs: owner{id,name}, organization{id,name}, category{id,name}, tags[], assignedUsers[], plus taskCounts{} and assets/taskAssignments {count,url} summaries. Lifecycle is open -> closed -> archived (no unarchive). Reference filters (owner, assignedUser, category, tags) accept a UUID or an exact name/username; name is a case-insensitive substring match. Use this to find a case id or name before calling air-cases-get, air-cases-update, air-cases-close or the case sub-resource tools. organizations defaults to all accessible organizations.
+ * List Binalyze AIR cases using GET /api/v2/cases. Read-only, paginated. Each entity uses object refs: owner{id,name}, organizations[{id,name}], category{id,name}, tags[], assignedUsers[], plus taskCounts{} and assets/taskAssignments {count,url} summaries. Lifecycle is open -> closed -> archived (no unarchive). Reference filters (owner, assignedUser, category, tags) accept a UUID or an exact name/username; name is a case-insensitive substring match. Use this to find a case id or name before calling air-cases-get, air-cases-update, air-cases-close or the case sub-resource tools. organizations defaults to all accessible organizations.
  */
 const caseV2ApiControllerFilterCases = (options) => {
     return (options?.client ?? client_gen_1.client).get({
@@ -6443,7 +6555,7 @@ const caseV2ApiControllerCreateCase = (options) => {
 exports.caseV2ApiControllerCreateCase = caseV2ApiControllerCreateCase;
 /**
  * Get case by id or name
- * Fetch one Binalyze AIR case by UUID or case name using GET /api/v2/cases/{idOrName}. Read-only; the case is wrapped in result.entities[0]. The entity uses object refs (owner{}, organization{}, category{}, tags[], assignedUsers[]), taskCounts{}, and assets/taskAssignments {count,url} summaries. Lifecycle status is open, closed or archived. A 404 also covers cases outside the caller's organizations (leak-safe), so do not infer the case does not exist. Use air-cases-list to discover ids and names first.
+ * Fetch one Binalyze AIR case by UUID or case name using GET /api/v2/cases/{idOrName}. Read-only; the case is wrapped in result.entities[0]. The entity uses object refs (owner{}, organizations[{id,name}], category{}, tags[], assignedUsers[]), taskCounts{}, and assets/taskAssignments {count,url} summaries. Lifecycle status is open, closed or archived. A 404 also covers cases outside the caller's organizations (leak-safe), so do not infer the case does not exist. Use air-cases-list to discover ids and names first.
  */
 const caseV2ApiControllerGetCaseByIdOrName = (options) => {
     return (options.client ?? client_gen_1.client).get({
@@ -6561,6 +6673,84 @@ const caseExportCaseEndpoints1 = (options) => {
     });
 };
 exports.caseExportCaseEndpoints1 = caseExportCaseEndpoints1;
+/**
+ * Download a case assets expression export
+ * Downloads CSV for a previously created case assets expression export
+ */
+const casesDownloadAssetsExpressionExport = (options) => {
+    return (options.client ?? client_gen_1.client).get({
+        security: [
+            {
+                scheme: 'bearer',
+                type: 'http'
+            }
+        ],
+        url: '/api/public/cases/{id}/endpoints/export-query',
+        ...options
+    });
+};
+exports.casesDownloadAssetsExpressionExport = casesDownloadAssetsExpressionExport;
+/**
+ * Create a case assets expression export
+ * Caches an expression filter for downloading case-linked assets as CSV. Use the returned exportUrl within 60 seconds.
+ */
+const casesCreateAssetsExpressionExport = (options) => {
+    return (options.client ?? client_gen_1.client).post({
+        responseType: 'json',
+        security: [
+            {
+                scheme: 'bearer',
+                type: 'http'
+            }
+        ],
+        url: '/api/public/cases/{id}/endpoints/export-query',
+        ...options,
+        headers: {
+            'Content-Type': 'application/json',
+            ...options.headers
+        }
+    });
+};
+exports.casesCreateAssetsExpressionExport = casesCreateAssetsExpressionExport;
+/**
+ * Download a case assets expression export
+ * Downloads CSV for a previously created case assets expression export
+ */
+const casesDownloadAssetsExpressionExport2 = (options) => {
+    return (options.client ?? client_gen_1.client).get({
+        security: [
+            {
+                scheme: 'bearer',
+                type: 'http'
+            }
+        ],
+        url: '/api/public/cases/{id}/assets/export-query',
+        ...options
+    });
+};
+exports.casesDownloadAssetsExpressionExport2 = casesDownloadAssetsExpressionExport2;
+/**
+ * Create a case assets expression export
+ * Caches an expression filter for downloading case-linked assets as CSV. Use the returned exportUrl within 60 seconds.
+ */
+const casesCreateAssetsExpressionExport2 = (options) => {
+    return (options.client ?? client_gen_1.client).post({
+        responseType: 'json',
+        security: [
+            {
+                scheme: 'bearer',
+                type: 'http'
+            }
+        ],
+        url: '/api/public/cases/{id}/assets/export-query',
+        ...options,
+        headers: {
+            'Content-Type': 'application/json',
+            ...options.headers
+        }
+    });
+};
+exports.casesCreateAssetsExpressionExport2 = casesCreateAssetsExpressionExport2;
 /**
  * Retrieve a specific case
  * Fetches detailed information about a specific case
@@ -6813,6 +7003,50 @@ const casesGetEndpoints2 = (options) => {
     });
 };
 exports.casesGetEndpoints2 = casesGetEndpoints2;
+/**
+ * Get case assets by expression filter
+ * Retrieves a paginated list of endpoints/assets linked to the specified case using a filter expression
+ */
+const casesGetAssetsByFilterExpression = (options) => {
+    return (options.client ?? client_gen_1.client).post({
+        responseType: 'json',
+        security: [
+            {
+                scheme: 'bearer',
+                type: 'http'
+            }
+        ],
+        url: '/api/public/cases/{id}/endpoints/filter-query',
+        ...options,
+        headers: {
+            'Content-Type': 'application/json',
+            ...options.headers
+        }
+    });
+};
+exports.casesGetAssetsByFilterExpression = casesGetAssetsByFilterExpression;
+/**
+ * Get case assets by expression filter
+ * Retrieves a paginated list of endpoints/assets linked to the specified case using a filter expression
+ */
+const casesGetAssetsByFilterExpression2 = (options) => {
+    return (options.client ?? client_gen_1.client).post({
+        responseType: 'json',
+        security: [
+            {
+                scheme: 'bearer',
+                type: 'http'
+            }
+        ],
+        url: '/api/public/cases/{id}/assets/filter-query',
+        ...options,
+        headers: {
+            'Content-Type': 'application/json',
+            ...options.headers
+        }
+    });
+};
+exports.casesGetAssetsByFilterExpression2 = casesGetAssetsByFilterExpression2;
 /**
  * Get activities for a specific case
  * Retrieves a paginated list of activities for a case
@@ -8642,7 +8876,7 @@ const flagsLibraryV2ApiControllerList = (options) => {
 exports.flagsLibraryV2ApiControllerList = flagsLibraryV2ApiControllerList;
 /**
  * Create investigation flag
- * Create a Binalyze AIR investigation flag via POST /api/v2/libraries/flags. MUTATING: persists a new flag. Required: name (max 50 chars, not purely numeric). Optional: color (CSS color, defaults to #4A4D55), description, and organization (id or exact name; defaults to the caller organization when the caller has exactly one, otherwise the default organization). A name collision within the organization is resolved by auto-suffixing with a NAME_ADJUSTED warning; if a unique name cannot be allocated, returns 409 NAME_CONFLICT. dryRun DEFAULTS TO TRUE in the tool layer: the first call previews the would-create entity (action='would-create', final name) without persisting; pass dryRun=false only after the user confirms. Success returns entities[0] with the created flag.
+ * Create a Binalyze AIR investigation flag via POST /api/v2/libraries/flags. MUTATING: persists a new flag. Required: name (max 50 chars, not purely numeric). Optional: color (CSS color, defaults to #4A4D55), description, and organization (id or exact name; defaults to the caller organization when the caller has exactly one; multi-organization and all-organization callers must pass it explicitly or receive 400 ORGANIZATION_REQUIRED). A name collision within the organization is resolved by auto-suffixing with a NAME_ADJUSTED warning; if a unique name cannot be allocated, returns 409 NAME_CONFLICT. dryRun DEFAULTS TO TRUE in the tool layer: the first call previews the would-create entity (action='would-create', final name) without persisting; pass dryRun=false only after the user confirms. Success returns entities[0] with the created flag.
  */
 const flagsLibraryV2ApiControllerCreate = (options) => {
     return (options.client ?? client_gen_1.client).post({
@@ -8823,7 +9057,7 @@ const investigationSqlV2ApiControllerGetSchema = (options) => {
 exports.investigationSqlV2ApiControllerGetSchema = investigationSqlV2ApiControllerGetSchema;
 /**
  * Run a read-only SQL query on an investigation
- * Execute one read-only SELECT statement inside the investigation schema via POST /api/v2/investigations/{idOrName}/sql-query. Returns a paginated result (pageNumber/pageSize in the body; totalEntityCount, totalPageCount, nextPage/previousPage in the envelope). Trailing semicolons, end-of-query -- comments, and trailing LIMIT/OFFSET in sqlQuery are stripped so request paging owns the page slice. Write statements, multiple statements and cross-schema references are rejected. Fixed tables: air_investigation_activities, air_investigation_activity_user_reads, air_investigation_comments, air_investigation_evidence_metadata, air_investigation_evidence_relations, air_investigation_evidence_transformer_versions, air_investigation_external_section_import_error, air_investigation_external_section_import_status, air_investigation_finding_timeline, air_investigation_flags, air_investigation_full_text_search, air_investigation_metadata, air_investigation_notes, air_investigation_reports, air_investigation_report_history, air_investigation_task_assignments, air_investigation_task_execution_logs, air_investigation_timeline, air_investigation_timeline_event_range, air_investigation_timeline_hourly, air_investigation_user_findings, drone_findings. Views: air_all_findings_view, air_excluded_findings_view, air_findings_view, air_timeline_findings_view. Evidence tables are named <platform>_<section> (e.g. windows_triage_file, linux_triage_file, windows_event_records) and vary per investigation. POST the schema endpoint with an empty body to list the populated tables of this investigation with row counts; POST { "table": "<name>" } for column details.
+ * Execute one read-only SELECT statement inside the investigation schema via POST /api/v2/investigations/{idOrName}/sql-query. Returns a paginated result (pageNumber/pageSize in the body; totalEntityCount, totalPageCount, nextPage/previousPage in the envelope). Trailing semicolons, end-of-query -- comments, and trailing LIMIT/OFFSET in sqlQuery are stripped so request paging owns the page slice. Write statements, multiple statements and cross-schema references are rejected. Every result-producing branch must be anchored to at least one relation in the selected investigation. Functions are admitted through PostgreSQL catalog capability checks; volatile, dangerous, user-schema and object-reference functions are rejected. Use the schema endpoint to discover the selected investigation tables and columns; PostgreSQL catalog, object-reference, and cross-schema introspection are rejected. Fixed tables: air_investigation_activities, air_investigation_activity_user_reads, air_investigation_comments, air_investigation_evidence_metadata, air_investigation_evidence_relations, air_investigation_evidence_transformer_versions, air_investigation_external_section_import_error, air_investigation_external_section_import_status, air_investigation_finding_timeline, air_investigation_flags, air_investigation_full_text_search, air_investigation_metadata, air_investigation_notes, air_investigation_reports, air_investigation_report_history, air_investigation_task_assignments, air_investigation_task_execution_logs, air_investigation_timeline, air_investigation_timeline_event_range, air_investigation_timeline_hourly, air_investigation_user_findings, drone_findings. Views: air_all_findings_view, air_excluded_findings_view, air_findings_view, air_timeline_findings_view. Evidence tables are named <platform>_<section> (e.g. windows_triage_file, linux_triage_file, windows_event_records) and vary per investigation. POST the schema endpoint with an empty body to list the populated tables of this investigation with row counts; POST { "table": "<name>" } for column details. Documented row-analysis functions (94): abs, age, array_agg, array_cat, array_length, array_position, array_remove, array_to_string, ascii, avg, bit_length, bool_and, bool_or, btrim, cardinality, ceil, ceiling, char_length, chr, concat, concat_ws, corr, count, date_part, date_trunc, dense_rank, div, first_value, floor, initcap, json_array_length, json_typeof, jsonb_array_elements, jsonb_array_elements_text, jsonb_array_length, jsonb_path_exists, jsonb_typeof, lag, last_value, lead, left, length, lower, lpad, ltrim, max, md5, min, mod, mode, now, nth_value, ntile, octet_length, percentile_cont, percentile_disc, plainto_tsquery, position, power, rank, regexp_matches, regexp_replace, regexp_split_to_array, repeat, replace, reverse, right, round, row_number, rpad, rtrim, split_part, sqrt, starts_with, stddev, stddev_pop, string_agg, string_to_array, strpos, substr, substring, sum, to_char, to_date, to_timestamp, to_tsquery, to_tsvector, translate, trim, trunc, unnest, upper, var_pop, variance. Allowed cast types: bigint, boolean, character, character varying, date, double precision, integer, interval, json, jsonb, numeric, real, smallint, text, time, time with time zone, time without time zone, timestamp with time zone, timestamp without time zone, uuid (plus the usual aliases such as int, varchar, timestamptz). Additional functions are admitted only when PostgreSQL catalog metadata proves they are safe, non-volatile built-ins; unknown, extension, user-schema and dangerous functions are rejected. Object-reference (regclass/oid), catalog, session, filesystem, network and *_to_xml* capabilities are rejected. Safe set-returning functions may expand rows in SELECT, FROM or LATERAL. GROUP BY accepts ROLLUP and GROUPING SETS; CUBE is not supported because the name doubles as an extension function. Execution-context expressions (current_user, current_schema, current_catalog) are rejected.
  */
 const investigationSqlV2ApiControllerExecuteSqlQuery = (options) => {
     return (options.client ?? client_gen_1.client).post({
@@ -10916,7 +11150,7 @@ const assetBulkMetadataV2ApiControllerDeleteAssets = (options) => {
 exports.assetBulkMetadataV2ApiControllerDeleteAssets = assetBulkMetadataV2ApiControllerDeleteAssets;
 /**
  * Import an off-network PPC (find-or-create asset + offline task)
- * Import an OFF-NETWORK Task.dat via POST /api/v2/assets/import (multipart upload) and create an OFFLINE TASK (offline-triage or offline-acquisition). IMPORTANT semantics: this endpoint does NOT create or find an asset -- it only creates a task from the uploaded Task.dat (the asset is resolved later, when the evidence collection zip is imported into the task). The file must be a valid RC4-encrypted Task.dat; anything else (e.g. a regular case .ppc) is rejected 400 'Missing or invalid Task.dat format!'. Requires the Off-Network Responder feature. Success response (200): result.entities[0] = { taskId, taskName, organizationId, taskDetailsViewUrl, ppcFileName, importedAt } -- a task summary, no asset id/name. organizations must resolve to EXACTLY ONE organization id (the task is single-org). Optionally attach to a case via caseIdOrName (unknown case -> 400 'Case not found'). ALWAYS send dryRun=true first (generic preview; does not validate the file); pass dryRun=false only to perform the real import after the user confirms. To import a case PPC into an asset that already exists in AIR, use air-assets-import instead.
+ * Import an OFF-NETWORK Task.dat via POST /api/v2/assets/import (multipart upload) and create an OFFLINE TASK (offline-triage or offline-acquisition). IMPORTANT semantics: this endpoint does NOT create or find an asset -- it only creates a task from the uploaded Task.dat (the asset is resolved later, when the evidence collection zip is imported into the task). The file must be a valid RC4-encrypted Task.dat; anything else (e.g. a regular case .ppc) is rejected 400 'Missing or invalid Task.dat format!'. Requires the Off-Network Responder feature. Success response (200): result.entities[0] = { taskId, taskName, organizations: [{ id, name }], taskDetailsViewUrl, ppcFileName, importedAt } -- a task summary, no asset id/name. organizations must resolve to EXACTLY ONE organization id (the task is single-org). Optionally attach to a case via caseIdOrName (unknown case -> 400 'Case not found'). ALWAYS send dryRun=true first (generic preview; does not validate the file); pass dryRun=false only to perform the real import after the user confirms. To import a case PPC into an asset that already exists in AIR, use air-assets-import instead.
  */
 const assetBulkMetadataV2ApiControllerImportOffNetworkPpc = (options) => {
     return (options.client ?? client_gen_1.client).post({
@@ -10971,7 +11205,7 @@ const assetBulkTriageV2ApiControllerRunTriage = (options) => {
 exports.assetBulkTriageV2ApiControllerRunTriage = assetBulkTriageV2ApiControllerRunTriage;
 /**
  * List InterAct messages for an asset
- * List the InterAct shell messages of EXACTLY ONE Binalyze AIR asset across all its sessions via GET /api/v2/assets/{idOrName}/interact. Read-only; returns a paginated envelope of messages (command + latest response, status, detectedType, output/outputUrl). Supports filtering by session, status, detected type, snippet, and created/completed date ranges. Use this when the user asks for an asset's shell command history, or to poll an async command's status by sessionId/status. Prefer UUID; names can be ambiguous across organizations. Omit any filter the user did not ask for. On HTTP 404 with errors[0].details.suggestions, the asset name was not found -- show those suggestions to the user and confirm before retrying, never guess; on HTTP 400 AMBIGUOUS_NAME with errors[0].details.matches, ask which asset by id.
+ * List the InterAct shell messages of EXACTLY ONE Binalyze AIR asset across all its sessions via GET /api/v2/assets/{idOrName}/interact. Read-only; returns a paginated envelope of messages (command + latest response, status, detectedType, output/outputUrl). Supports filtering by session and creation date range. Use this when the user asks for an asset's shell command history. Prefer UUID; names can be ambiguous across organizations. Omit any filter the user did not ask for. On HTTP 404 with errors[0].details.suggestions, the asset name was not found -- show those suggestions to the user and confirm before retrying, never guess; on HTTP 400 AMBIGUOUS_NAME with errors[0].details.matches, ask which asset by id.
  */
 const assetInteractMessageV2ApiControllerListForAsset = (options) => {
     return (options.client ?? client_gen_1.client).get({
@@ -12031,6 +12265,7 @@ const automationHubFilterAutomations = (options) => {
 exports.automationHubFilterAutomations = automationHubFilterAutomations;
 const automationHubCreateAutomation = (options) => {
     return (options.client ?? client_gen_1.client).post({
+        responseType: 'json',
         security: [
             {
                 scheme: 'bearer',
@@ -12180,6 +12415,20 @@ const automationHubGetAutomationChangeHistory = (options) => {
     });
 };
 exports.automationHubGetAutomationChangeHistory = automationHubGetAutomationChangeHistory;
+const automationHubGenerateTriggerSecret = (options) => {
+    return (options.client ?? client_gen_1.client).post({
+        responseType: 'json',
+        security: [
+            {
+                scheme: 'bearer',
+                type: 'http'
+            }
+        ],
+        url: '/api/public/automation-hub/{id}/trigger/secret',
+        ...options
+    });
+};
+exports.automationHubGenerateTriggerSecret = automationHubGenerateTriggerSecret;
 const automationHubEnableAutomation = (options) => {
     return (options.client ?? client_gen_1.client).patch({
         security: [
@@ -12457,7 +12706,7 @@ const cloudAcquisitionProfilesUpdate = (options) => {
 exports.cloudAcquisitionProfilesUpdate = cloudAcquisitionProfilesUpdate;
 /**
  * List cloud acquisition profiles
- * List Binalyze AIR cloud (M365) acquisition profiles via GET /api/v2/libraries/acquisition/cloud. Read-only and paginated. Each entity is a profile summary: id, name, organizationIds, averageTime, createdAt/createdBy, lastUsedAt/lastUsedBy, deletable, and a detailsUrl. The m365UserBased/m365TenantWide evidence lists are NOT included; use air-acquisition-cloud-get for one profile's full config. Use this when the user asks to list or search cloud acquisition profiles, or needs a profile id or exact name before get, update, delete, or bulk delete. sortBy accepts only name, createdBy, createdAt, lastUsedAt, lastUsedBy (default createdAt). Profiles with empty organizationIds are global.
+ * List Binalyze AIR cloud (M365) acquisition profiles via GET /api/v2/libraries/acquisition/cloud. Read-only and paginated. Each entity is a profile summary: id, name, organizations[{id,name}], averageTime, createdAt/createdBy, lastUsedAt/lastUsedBy, deletable, and a detailsUrl. The m365UserBased/m365TenantWide evidence lists are NOT included; use air-acquisition-cloud-get for one profile's full config. Use this when the user asks to list or search cloud acquisition profiles, or needs a profile id or exact name before get, update, delete, or bulk delete. sortBy accepts only name, createdBy, createdAt, lastUsedAt, lastUsedBy (default createdAt). Profiles with an empty organizations array are global.
  */
 const cloudAcquisitionLibraryApiControllerList = (options) => {
     return (options?.client ?? client_gen_1.client).get({
@@ -12480,7 +12729,7 @@ const cloudAcquisitionLibraryApiControllerList = (options) => {
 exports.cloudAcquisitionLibraryApiControllerList = cloudAcquisitionLibraryApiControllerList;
 /**
  * Create cloud acquisition profile
- * Create a Binalyze AIR cloud (M365) acquisition profile via POST /api/v2/libraries/acquisition/cloud. MUTATING: persists a new profile. Returns 200 with entities[0] = the created profile detail. `name` (alphanumeric) plus BOTH m365UserBased and m365TenantWide blocks are required; each block is {evidenceList: string[]} and at least one evidence must be selected across the two blocks. Evidence keys are lowercase M365 collector names, e.g. user-based: outlookmails, onedrive, teams, teamschat, calendar, mfa, user; tenant-wide: ual, adminauditlog, azureadaccountlogon, sharepoint, exchangeadmin, riskyusers. dryRun DEFAULTS TO TRUE: the first call validates and returns the would-be entity without persisting anything; pass dryRun=false only to actually create after the user confirms. Inspect an existing profile with air-acquisition-cloud-get for the full list of valid evidence keys.
+ * Create a Binalyze AIR cloud (M365) acquisition profile via POST /api/v2/libraries/acquisition/cloud. MUTATING: persists a new profile. Returns 200 with entities[0] = the created profile detail. `name` (alphanumeric) plus BOTH m365UserBased and m365TenantWide blocks are required; each block is {evidenceList: string[]} and at least one evidence must be selected across the two blocks. Body `organizationIds` controls which organizations own the profile; common query `organizations`, `orgs`, and `org` parameters are rejected. Evidence keys are lowercase M365 collector names, e.g. user-based: outlookmails, onedrive, teams, teamschat, calendar, mfa, user; tenant-wide: ual, adminauditlog, azureadaccountlogon, sharepoint, exchangeadmin, riskyusers. dryRun DEFAULTS TO TRUE: the first call validates and returns the would-be entity without persisting anything; pass dryRun=false only to actually create after the user confirms. Inspect an existing profile with air-acquisition-cloud-get for the full list of valid evidence keys.
  */
 const cloudAcquisitionLibraryApiControllerCreate = (options) => {
     return (options.client ?? client_gen_1.client).post({
@@ -12557,7 +12806,7 @@ const cloudAcquisitionLibraryApiControllerDelete = (options) => {
 exports.cloudAcquisitionLibraryApiControllerDelete = cloudAcquisitionLibraryApiControllerDelete;
 /**
  * Get cloud acquisition profile by id or name
- * Get ONE Binalyze AIR cloud (M365) acquisition profile by UUID or exact name via GET /api/v2/libraries/acquisition/cloud/{idOrName}. Read-only. Returns the full profile detail in entities[0]: id, name, organizationIds, m365UserBased.evidenceList, m365TenantWide.evidenceList, deletable, and timestamps. Use this when the user asks to show or inspect a cloud acquisition profile's evidence selection, to clone one, or to discover valid M365 evidence keys. Ids and exact names come from air-acquisition-cloud-list. An unknown idOrName returns 404 NOT_FOUND with did-you-mean suggestions in errors[0].details.suggestions[]; an ambiguous name returns 400 AMBIGUOUS_NAME with candidates in errors[0].details.matches[].
+ * Get ONE Binalyze AIR cloud (M365) acquisition profile by UUID or exact name via GET /api/v2/libraries/acquisition/cloud/{idOrName}. Read-only. Returns the full profile detail in entities[0]: id, name, organizations[{id,name}], m365UserBased.evidenceList, m365TenantWide.evidenceList, deletable, and timestamps. Use this when the user asks to show or inspect a cloud acquisition profile's evidence selection, to clone one, or to discover valid M365 evidence keys. Ids and exact names come from air-acquisition-cloud-list. An unknown idOrName returns 404 NOT_FOUND with did-you-mean suggestions in errors[0].details.suggestions[]; an ambiguous name returns 400 AMBIGUOUS_NAME with candidates in errors[0].details.matches[].
  */
 const cloudAcquisitionLibraryApiControllerGet = (options) => {
     return (options.client ?? client_gen_1.client).get({
@@ -12725,7 +12974,7 @@ const imageEvidenceAcquisitionProfilesDeleteBulk = (options) => {
 exports.imageEvidenceAcquisitionProfilesDeleteBulk = imageEvidenceAcquisitionProfilesDeleteBulk;
 /**
  * List disk image acquisition profiles
- * List Binalyze AIR disk-image acquisition profiles via GET /api/v2/libraries/acquisition/disk-image. Read-only and paginated. Requires the image-evidence-acquisition feature to be enabled on the Console. Each entity is a profile summary: id, name, organizationIds, averageTime, createdAt/updatedAt, createdBy, lastUsedAt/lastUsedBy, deletable, and a detailsUrl. allFiles/paths/evidence config is NOT included; use air-acquisition-disk-image-get for one profile's full config. Use this when the user asks to list or search disk-image (forensic imaging) profiles, or needs a profile id or exact name before get, update, delete, or bulk delete. sortBy accepts only name, createdAt, updatedAt, lastUsedAt, createdBy, lastUsedBy (default createdAt). Profiles with empty organizationIds are global.
+ * List Binalyze AIR disk-image acquisition profiles via GET /api/v2/libraries/acquisition/disk-image. Read-only and paginated. Requires the image-evidence-acquisition feature to be enabled on the Console. Each entity is a profile summary: id, name, organizations[{id,name}], averageTime, createdAt/updatedAt, createdBy, lastUsedAt/lastUsedBy, deletable, and a detailsUrl. allFiles/paths/evidence config is NOT included; use air-acquisition-disk-image-get for one profile's full config. Use this when the user asks to list or search disk-image (forensic imaging) profiles, or needs a profile id or exact name before get, update, delete, or bulk delete. sortBy accepts only name, createdAt, updatedAt, lastUsedAt, createdBy, lastUsedBy (default createdAt). Profiles with an empty organizations array are global.
  */
 const diskImageAcquisitionLibraryApiControllerList = (options) => {
     return (options?.client ?? client_gen_1.client).get({
@@ -12748,7 +12997,7 @@ const diskImageAcquisitionLibraryApiControllerList = (options) => {
 exports.diskImageAcquisitionLibraryApiControllerList = diskImageAcquisitionLibraryApiControllerList;
 /**
  * Create disk image acquisition profile
- * Create a Binalyze AIR disk-image acquisition profile via POST /api/v2/libraries/acquisition/disk-image. MUTATING: persists a new profile. Returns 200 with entities[0] = the created profile detail. Requires the image-evidence-acquisition feature to be enabled on the Console. `name` is required (alphanumeric). Scope is either allFiles=true (full image) OR a `paths` list of directories/files to image; the allFiles/paths combination must be consistent (a profile cannot have both allFiles=true and paths). `imageAcquisitionEvidences` optionally selects extra evidence to collect alongside the image. dryRun DEFAULTS TO TRUE: the first call validates and returns the would-be entity without persisting anything; pass dryRun=false only to actually create after the user confirms. Inspect an existing profile with air-acquisition-disk-image-get when cloning or when unsure of valid evidence keys.
+ * Create a Binalyze AIR disk-image acquisition profile via POST /api/v2/libraries/acquisition/disk-image. MUTATING: persists a new profile. Returns 200 with entities[0] = the created profile detail. Requires the image-evidence-acquisition feature to be enabled on the Console. `name` is required (alphanumeric). Scope is either allFiles=true (full image) OR a `paths` list of directories/files to image; the allFiles/paths combination must be consistent (a profile cannot have both allFiles=true and paths). `imageAcquisitionEvidences` optionally selects extra evidence to collect alongside the image. Body `organizationIds` controls which organizations own the profile; common query `organizations`, `orgs`, and `org` parameters are rejected. dryRun DEFAULTS TO TRUE: the first call validates and returns the would-be entity without persisting anything; pass dryRun=false only to actually create after the user confirms. Inspect an existing profile with air-acquisition-disk-image-get when cloning or when unsure of valid evidence keys.
  */
 const diskImageAcquisitionLibraryApiControllerCreate = (options) => {
     return (options.client ?? client_gen_1.client).post({
@@ -12825,7 +13074,7 @@ const diskImageAcquisitionLibraryApiControllerDelete = (options) => {
 exports.diskImageAcquisitionLibraryApiControllerDelete = diskImageAcquisitionLibraryApiControllerDelete;
 /**
  * Get disk image acquisition profile by id or name
- * Get ONE Binalyze AIR disk-image acquisition profile by UUID or exact name via GET /api/v2/libraries/acquisition/disk-image/{idOrName}. Read-only. Requires the image-evidence-acquisition feature to be enabled on the Console. Returns the full profile detail in entities[0]: id, name, organizationIds, allFiles, paths[] ({path, description}), imageAcquisitionEvidences, deletable, and timestamps. Use this when the user asks to show or inspect a disk-image profile's scope, or to clone one. Ids and exact names come from air-acquisition-disk-image-list. An unknown idOrName returns 404 NOT_FOUND with did-you-mean suggestions in errors[0].details.suggestions[]; an ambiguous name returns 400 AMBIGUOUS_NAME with candidates in errors[0].details.matches[].
+ * Get ONE Binalyze AIR disk-image acquisition profile by UUID or exact name via GET /api/v2/libraries/acquisition/disk-image/{idOrName}. Read-only. Requires the image-evidence-acquisition feature to be enabled on the Console. Returns the full profile detail in entities[0]: id, name, organizations[{id,name}], allFiles, paths[] ({path, description}), imageAcquisitionEvidences, deletable, and timestamps. Use this when the user asks to show or inspect a disk-image profile's scope, or to clone one. Ids and exact names come from air-acquisition-disk-image-list. An unknown idOrName returns 404 NOT_FOUND with did-you-mean suggestions in errors[0].details.suggestions[]; an ambiguous name returns 400 AMBIGUOUS_NAME with candidates in errors[0].details.matches[].
  */
 const diskImageAcquisitionLibraryApiControllerGet = (options) => {
     return (options.client ?? client_gen_1.client).get({