@cdot65/prisma-airs-sdk 0.19.0 → 0.20.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (8) hide show
  1. package/README.md +16 -3
  2. package/dist/index.cjs +1167 -195
  3. package/dist/index.cjs.map +1 -1
  4. package/dist/index.d.cts +3524 -381
  5. package/dist/index.d.ts +3524 -381
  6. package/dist/index.js +1085 -194
  7. package/dist/index.js.map +1 -1
  8. package/package.json +3 -2
package/dist/index.js CHANGED
@@ -29,7 +29,7 @@ var MAX_NUMBER_OF_BATCH_SCAN_OBJECTS = 20;
29
29
  var MAX_CONNECTION_POOL_SIZE = 100;
30
30
  var MAX_NUMBER_OF_RETRIES = 5;
31
31
  var HTTP_FORCE_RETRY_STATUS_CODES = [500, 502, 503, 504];
32
- var SDK_VERSION = "0.17.0";
32
+ var SDK_VERSION = "0.20.1";
33
33
  var USER_AGENT = `PAN-AIRS/${SDK_VERSION}-typescript-sdk`;
34
34
  var DEFAULT_MGMT_ENDPOINT = "https://api.sase.paloaltonetworks.com/aisec";
35
35
  var DEFAULT_TOKEN_ENDPOINT = "https://auth.apps.paloaltonetworks.com/oauth2/access_token";
@@ -272,8 +272,8 @@ import { z as z15 } from "zod";
272
272
  // src/utils.ts
273
273
  import { createHmac } from "crypto";
274
274
  var UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
275
- function isValidUuid(value) {
276
- return UUID_RE.test(value);
275
+ function isValidUuid(value2) {
276
+ return UUID_RE.test(value2);
277
277
  }
278
278
  function generatePayloadHash(payload, secret) {
279
279
  return createHmac("sha256", secret).update(payload).digest("hex");
@@ -333,9 +333,9 @@ function extractErrorMessage(body, status) {
333
333
  return body ? `API error ${status}: ${body}` : `API error ${status}`;
334
334
  }
335
335
  }
336
- function parseRetryAfterHeader(value) {
337
- if (value === null) return void 0;
338
- const normalized = value.trim();
336
+ function parseRetryAfterHeader(value2) {
337
+ if (value2 === null) return void 0;
338
+ const normalized = value2.trim();
339
339
  if (/^\d+$/.test(normalized)) {
340
340
  const milliseconds = Number(normalized) * 1e3;
341
341
  return Number.isFinite(milliseconds) ? milliseconds : void 0;
@@ -437,6 +437,120 @@ async function executeWithRetry(opts) {
437
437
 
438
438
  // src/http/debug.ts
439
439
  import { createHash } from "crypto";
440
+
441
+ // src/ai-gateway/secret-fields.ts
442
+ var AI_GATEWAY_REDACTED = "[REDACTED]";
443
+ var value = (...path) => ({
444
+ path,
445
+ redact: "value"
446
+ });
447
+ var subtree = (...path) => ({
448
+ path,
449
+ redact: "subtree"
450
+ });
451
+ var oneTime = (...path) => ({
452
+ path,
453
+ redact: "value",
454
+ oneTime: true
455
+ });
456
+ var providerRequestSecrets = [
457
+ value("key"),
458
+ value("configurations", "azure_entra_client_secret"),
459
+ value("configurations", "aws_secret_access_key"),
460
+ subtree("configurations", "vertex_service_account_json"),
461
+ value("configurations", "custom_headers", "*")
462
+ ];
463
+ var mcpRequestSecrets = [
464
+ value("configurations", "custom_headers", "*"),
465
+ value("configurations", "client_secret"),
466
+ value("configurations", "oauth_client_secret"),
467
+ subtree("configurations", "oauth_metadata")
468
+ ];
469
+ var empty = [];
470
+ var AI_GATEWAY_SECRET_FIELDS = {
471
+ "apiKeys.createService": { request: empty, response: [oneTime("key")] },
472
+ "apiKeys.createUser": { request: empty, response: [oneTime("key")] },
473
+ "apiKeys.rotateService": { request: empty, response: [oneTime("key")] },
474
+ "apiKeys.rotateUser": { request: empty, response: [oneTime("key")] },
475
+ "deployments.create": {
476
+ request: empty,
477
+ response: [oneTime("client_auth"), oneTime("credentials", "password")]
478
+ },
479
+ "deployments.update": {
480
+ request: empty,
481
+ response: [oneTime("client_auth"), oneTime("credentials", "password")]
482
+ },
483
+ "integrations.create": { request: providerRequestSecrets, response: empty },
484
+ "integrations.update": { request: providerRequestSecrets, response: empty },
485
+ "mcpIntegrations.create": { request: mcpRequestSecrets, response: empty },
486
+ "mcpIntegrations.update": { request: mcpRequestSecrets, response: empty },
487
+ "organisations.getAuthSettings": {
488
+ request: empty,
489
+ response: [value("scim_token"), value("data", "scim_token")]
490
+ },
491
+ "organisations.updateAuthSettings": {
492
+ request: [value("scim_token"), value("auth_settings", "client_secret")],
493
+ response: [value("scim_token"), value("data", "scim_token")]
494
+ },
495
+ "plugins.create": { request: [value("credentials", "*")], response: empty },
496
+ "providers.get": {
497
+ request: empty,
498
+ response: [
499
+ value("key"),
500
+ subtree("model_config"),
501
+ subtree("credentials"),
502
+ value("configurations", "azure_entra_client_secret"),
503
+ value("configurations", "aws_secret_access_key"),
504
+ subtree("configurations", "vertex_service_account_json"),
505
+ value("configurations", "custom_headers", "*")
506
+ ]
507
+ }
508
+ };
509
+ function cloneValue(input, seen = /* @__PURE__ */ new WeakMap()) {
510
+ if (typeof input !== "object" || input === null) return input;
511
+ const cached = seen.get(input);
512
+ if (cached !== void 0) return cached;
513
+ const output = Array.isArray(input) ? [] : {};
514
+ seen.set(input, output);
515
+ if (Array.isArray(input)) {
516
+ for (const item of input) output.push(cloneValue(item, seen));
517
+ } else {
518
+ for (const [key, item] of Object.entries(input)) {
519
+ Object.defineProperty(output, key, {
520
+ value: cloneValue(item, seen),
521
+ enumerable: true,
522
+ configurable: true,
523
+ writable: true
524
+ });
525
+ }
526
+ }
527
+ return output;
528
+ }
529
+ function applyRule(current, path, index) {
530
+ if (index === path.length) return AI_GATEWAY_REDACTED;
531
+ if (typeof current !== "object" || current === null) return current;
532
+ const segment = path[index];
533
+ if (Array.isArray(current)) {
534
+ if (segment !== "*") return current;
535
+ for (let i = 0; i < current.length; i++) current[i] = applyRule(current[i], path, index + 1);
536
+ return current;
537
+ }
538
+ const record = current;
539
+ if (segment === "*") {
540
+ for (const key of Object.keys(record)) record[key] = applyRule(record[key], path, index + 1);
541
+ } else if (Object.prototype.hasOwnProperty.call(record, segment)) {
542
+ record[segment] = applyRule(record[segment], path, index + 1);
543
+ }
544
+ return record;
545
+ }
546
+ function redactAIGatewaySecrets(operation, input, direction = "request") {
547
+ const output = cloneValue(input);
548
+ const metadata = AI_GATEWAY_SECRET_FIELDS[operation];
549
+ for (const rule of metadata[direction]) applyRule(output, rule.path, 0);
550
+ return output;
551
+ }
552
+
553
+ // src/http/debug.ts
440
554
  var TRUTHY = /* @__PURE__ */ new Set(["1", "true", "yes", "on"]);
441
555
  var SENSITIVE_HEADERS = /* @__PURE__ */ new Set([HEADER_AUTH_TOKEN.toLowerCase(), HEADER_API_KEY.toLowerCase()]);
442
556
  var PREFIX = "[airs-sdk]";
@@ -444,16 +558,23 @@ function isDebugEnabled() {
444
558
  const raw = process.env.PANW_AI_SEC_DEBUG;
445
559
  return raw !== void 0 && TRUTHY.has(raw.trim().toLowerCase());
446
560
  }
447
- function hashToken(value) {
448
- return "sha256:" + createHash("sha256").update(value).digest("hex").slice(0, 12);
561
+ function hashToken(value2) {
562
+ return "sha256:" + createHash("sha256").update(value2).digest("hex").slice(0, 12);
449
563
  }
450
564
  function sanitizeHeaders(headers) {
451
565
  const out = {};
452
- for (const [key, value] of Object.entries(headers)) {
453
- out[key] = SENSITIVE_HEADERS.has(key.toLowerCase()) ? hashToken(value) : value;
566
+ for (const [key, value2] of Object.entries(headers)) {
567
+ out[key] = SENSITIVE_HEADERS.has(key.toLowerCase()) ? hashToken(value2) : value2;
454
568
  }
455
569
  return out;
456
570
  }
571
+ function sanitizeAIGatewayDebugBody(body, operation, direction) {
572
+ try {
573
+ return JSON.stringify(redactAIGatewaySecrets(operation, JSON.parse(body), direction));
574
+ } catch {
575
+ return "[BODY OMITTED: REDACTION FAILED]";
576
+ }
577
+ }
457
578
  function logRequest(method, url, headers, body) {
458
579
  console.error(`${PREFIX} \u2192 ${method} ${url}`);
459
580
  console.error(`${PREFIX} headers ${JSON.stringify(sanitizeHeaders(headers))}`);
@@ -465,6 +586,20 @@ function logResponse(status, ms, body) {
465
586
 
466
587
  // src/http/request.ts
467
588
  async function request(spec) {
589
+ let validatedBody = spec.body;
590
+ if (spec.requestSchema !== void 0) {
591
+ const result2 = spec.requestSchema.safeParse(spec.body);
592
+ if (!result2.success) {
593
+ const issues = result2.error.issues.map(
594
+ (issue) => `${issue.path.length > 0 ? issue.path.join(".") : "<root>"}: ${issue.message}`
595
+ ).join("; ");
596
+ throw new AISecSDKException(
597
+ `Request body for ${spec.method} ${spec.path} did not match schema: ${issues}`,
598
+ "AISEC_USER_REQUEST_PAYLOAD_ERROR" /* USER_REQUEST_PAYLOAD_ERROR */
599
+ );
600
+ }
601
+ validatedBody = result2.data;
602
+ }
468
603
  let hasRetriedAuth = false;
469
604
  const debug = isDebugEnabled();
470
605
  const response = await executeWithRetry({
@@ -473,11 +608,11 @@ async function request(spec) {
473
608
  const baseUrl = spec.baseUrl.replace(/\/+$/, "");
474
609
  const url = new URL(`${baseUrl}${spec.path}`);
475
610
  if (spec.params) {
476
- for (const [key, value] of Object.entries(spec.params)) {
477
- if (Array.isArray(value)) {
478
- for (const v of value) url.searchParams.append(key, v);
611
+ for (const [key, value2] of Object.entries(spec.params)) {
612
+ if (Array.isArray(value2)) {
613
+ for (const v of value2) url.searchParams.append(key, v);
479
614
  } else {
480
- url.searchParams.set(key, value);
615
+ url.searchParams.set(key, value2);
481
616
  }
482
617
  }
483
618
  }
@@ -489,16 +624,19 @@ async function request(spec) {
489
624
  let bodyForFetch;
490
625
  if (spec.formData !== void 0) {
491
626
  bodyForFetch = spec.formData;
492
- } else if (spec.body !== void 0) {
627
+ } else if (validatedBody !== void 0) {
493
628
  headers["Content-Type"] = spec.contentType ?? "application/json";
494
- bodyText = JSON.stringify(spec.body);
629
+ bodyText = JSON.stringify(validatedBody);
495
630
  bodyForFetch = bodyText;
496
631
  }
497
632
  const prepared = { method: spec.method, url, headers, bodyText };
498
633
  const final = await spec.auth.prepare(prepared);
499
634
  const startedAt = debug ? Date.now() : 0;
500
635
  if (debug) {
501
- const logBody = spec.formData !== void 0 ? "[multipart/form-data]" : final.bodyText;
636
+ let logBody = spec.formData !== void 0 ? "[multipart/form-data]" : final.bodyText;
637
+ if (logBody !== void 0 && spec.secretOperation !== void 0) {
638
+ logBody = sanitizeAIGatewayDebugBody(logBody, spec.secretOperation, "request");
639
+ }
502
640
  logRequest(final.method, final.url.toString(), final.headers, logBody);
503
641
  }
504
642
  const res = await fetch(final.url.toString(), {
@@ -510,6 +648,9 @@ async function request(spec) {
510
648
  let respBody;
511
649
  try {
512
650
  respBody = await res.clone().text();
651
+ if (respBody && spec.secretOperation !== void 0) {
652
+ respBody = sanitizeAIGatewayDebugBody(respBody, spec.secretOperation, "response");
653
+ }
513
654
  } catch {
514
655
  }
515
656
  logResponse(res.status, Date.now() - startedAt, respBody);
@@ -1163,14 +1304,14 @@ var Content = class _Content {
1163
1304
  get prompt() {
1164
1305
  return this._prompt;
1165
1306
  }
1166
- set prompt(value) {
1167
- if (value !== void 0 && Buffer.byteLength(value) > MAX_CONTENT_PROMPT_LENGTH) {
1307
+ set prompt(value2) {
1308
+ if (value2 !== void 0 && Buffer.byteLength(value2) > MAX_CONTENT_PROMPT_LENGTH) {
1168
1309
  throw new AISecSDKException(
1169
1310
  `prompt exceeds max length of ${MAX_CONTENT_PROMPT_LENGTH} bytes`,
1170
1311
  "AISEC_USER_REQUEST_PAYLOAD_ERROR" /* USER_REQUEST_PAYLOAD_ERROR */
1171
1312
  );
1172
1313
  }
1173
- this._prompt = value;
1314
+ this._prompt = value2;
1174
1315
  }
1175
1316
  /**
1176
1317
  * AI model response text. Setting a value validates its byte length (max 2 MB).
@@ -1185,14 +1326,14 @@ var Content = class _Content {
1185
1326
  get response() {
1186
1327
  return this._response;
1187
1328
  }
1188
- set response(value) {
1189
- if (value !== void 0 && Buffer.byteLength(value) > MAX_CONTENT_RESPONSE_LENGTH) {
1329
+ set response(value2) {
1330
+ if (value2 !== void 0 && Buffer.byteLength(value2) > MAX_CONTENT_RESPONSE_LENGTH) {
1190
1331
  throw new AISecSDKException(
1191
1332
  `response exceeds max length of ${MAX_CONTENT_RESPONSE_LENGTH} bytes`,
1192
1333
  "AISEC_USER_REQUEST_PAYLOAD_ERROR" /* USER_REQUEST_PAYLOAD_ERROR */
1193
1334
  );
1194
1335
  }
1195
- this._response = value;
1336
+ this._response = value2;
1196
1337
  }
1197
1338
  /**
1198
1339
  * Conversation context. Setting a value validates its byte length (max 100 MB).
@@ -1207,14 +1348,14 @@ var Content = class _Content {
1207
1348
  get context() {
1208
1349
  return this._context;
1209
1350
  }
1210
- set context(value) {
1211
- if (value !== void 0 && Buffer.byteLength(value) > MAX_CONTENT_CONTEXT_LENGTH) {
1351
+ set context(value2) {
1352
+ if (value2 !== void 0 && Buffer.byteLength(value2) > MAX_CONTENT_CONTEXT_LENGTH) {
1212
1353
  throw new AISecSDKException(
1213
1354
  `context exceeds max length of ${MAX_CONTENT_CONTEXT_LENGTH} bytes`,
1214
1355
  "AISEC_USER_REQUEST_PAYLOAD_ERROR" /* USER_REQUEST_PAYLOAD_ERROR */
1215
1356
  );
1216
1357
  }
1217
- this._context = value;
1358
+ this._context = value2;
1218
1359
  }
1219
1360
  /**
1220
1361
  * Code prompt text. Setting a value validates its byte length (max 2 MB).
@@ -1229,14 +1370,14 @@ var Content = class _Content {
1229
1370
  get codePrompt() {
1230
1371
  return this._codePrompt;
1231
1372
  }
1232
- set codePrompt(value) {
1233
- if (value !== void 0 && Buffer.byteLength(value) > MAX_CONTENT_PROMPT_LENGTH) {
1373
+ set codePrompt(value2) {
1374
+ if (value2 !== void 0 && Buffer.byteLength(value2) > MAX_CONTENT_PROMPT_LENGTH) {
1234
1375
  throw new AISecSDKException(
1235
1376
  `codePrompt exceeds max length of ${MAX_CONTENT_PROMPT_LENGTH} bytes`,
1236
1377
  "AISEC_USER_REQUEST_PAYLOAD_ERROR" /* USER_REQUEST_PAYLOAD_ERROR */
1237
1378
  );
1238
1379
  }
1239
- this._codePrompt = value;
1380
+ this._codePrompt = value2;
1240
1381
  }
1241
1382
  /**
1242
1383
  * Code response text. Setting a value validates its byte length (max 2 MB).
@@ -1251,14 +1392,14 @@ var Content = class _Content {
1251
1392
  get codeResponse() {
1252
1393
  return this._codeResponse;
1253
1394
  }
1254
- set codeResponse(value) {
1255
- if (value !== void 0 && Buffer.byteLength(value) > MAX_CONTENT_RESPONSE_LENGTH) {
1395
+ set codeResponse(value2) {
1396
+ if (value2 !== void 0 && Buffer.byteLength(value2) > MAX_CONTENT_RESPONSE_LENGTH) {
1256
1397
  throw new AISecSDKException(
1257
1398
  `codeResponse exceeds max length of ${MAX_CONTENT_RESPONSE_LENGTH} bytes`,
1258
1399
  "AISEC_USER_REQUEST_PAYLOAD_ERROR" /* USER_REQUEST_PAYLOAD_ERROR */
1259
1400
  );
1260
1401
  }
1261
- this._codeResponse = value;
1402
+ this._codeResponse = value2;
1262
1403
  }
1263
1404
  /**
1264
1405
  * Tool/function call event data attached to the content.
@@ -1276,8 +1417,8 @@ var Content = class _Content {
1276
1417
  get toolEvent() {
1277
1418
  return this._toolEvent;
1278
1419
  }
1279
- set toolEvent(value) {
1280
- this._toolEvent = value;
1420
+ set toolEvent(value2) {
1421
+ this._toolEvent = value2;
1281
1422
  }
1282
1423
  /**
1283
1424
  * Total byte length of all text content fields.
@@ -2693,7 +2834,7 @@ var RuleEvaluationListSchema = z32.object({
2693
2834
  }).passthrough();
2694
2835
  var ViolationRemediationSchema = z32.object({
2695
2836
  steps: z32.array(z32.string()),
2696
- url: z32.string()
2837
+ url: z32.string().optional()
2697
2838
  }).passthrough();
2698
2839
  var ViolationResponseSchema = z32.object({
2699
2840
  uuid: z32.string(),
@@ -2705,7 +2846,7 @@ var ViolationResponseSchema = z32.object({
2705
2846
  rule_name: z32.string(),
2706
2847
  rule_description: z32.string(),
2707
2848
  rule_instance_state: z32.string(),
2708
- remediation: ViolationRemediationSchema,
2849
+ remediation: ViolationRemediationSchema.optional(),
2709
2850
  file: z32.string().nullable().optional(),
2710
2851
  hash: z32.string().nullable().optional(),
2711
2852
  module: z32.string().nullable().optional(),
@@ -2757,12 +2898,12 @@ var ListModelSecurityRulesResponseSchema = z32.object({
2757
2898
  var ModelSecurityRuleInstanceResponseSchema = z32.object({
2758
2899
  uuid: z32.string(),
2759
2900
  tsg_id: z32.string(),
2760
- created_at: z32.string(),
2761
- updated_at: z32.string(),
2901
+ created_at: z32.string().optional(),
2902
+ updated_at: z32.string().optional(),
2762
2903
  security_group_uuid: z32.string(),
2763
- security_rule_uuid: z32.string(),
2904
+ security_rule_uuid: z32.string().optional(),
2764
2905
  state: z32.string(),
2765
- rule: ModelSecurityRuleResponseSchema,
2906
+ rule: ModelSecurityRuleResponseSchema.optional(),
2766
2907
  field_values: z32.record(z32.unknown()).optional()
2767
2908
  }).passthrough();
2768
2909
  var ModelSecurityRuleInstanceUpdateRequestSchema = z32.object({
@@ -4751,6 +4892,472 @@ var GatewayAuditLogRecordSchema = z35.object({
4751
4892
  }).passthrough();
4752
4893
  var GatewayAuditLogsResponseSchema = z35.object({ records: z35.array(GatewayAuditLogRecordSchema) }).passthrough();
4753
4894
 
4895
+ // src/models/ai-gateway-routing.ts
4896
+ import { z as z36 } from "zod";
4897
+ var AI_GATEWAY_DEPLOYMENT_TYPES = ["non_production", "production"];
4898
+ var GatewayDeploymentTypeSchema = z36.enum(AI_GATEWAY_DEPLOYMENT_TYPES);
4899
+ var AI_GATEWAY_DEPLOYMENT_STATUSES = ["active", "archived"];
4900
+ var GatewayDeploymentStatusSchema = z36.enum(AI_GATEWAY_DEPLOYMENT_STATUSES);
4901
+ var AI_GATEWAY_MUTABLE_MCP_CAPABILITY_TYPES = ["prompt", "resource", "tool"];
4902
+ var GatewayMutableMcpCapabilityTypeSchema = z36.enum(
4903
+ AI_GATEWAY_MUTABLE_MCP_CAPABILITY_TYPES
4904
+ );
4905
+ var AI_GATEWAY_KNOWN_API_KEY_SCOPES = [
4906
+ "agents.invoke",
4907
+ "completions.write",
4908
+ "logs.write",
4909
+ "mcp.invoke",
4910
+ "prompts.render"
4911
+ ];
4912
+ var AI_GATEWAY_KNOWN_CACHE_MODES = ["semantic", "simple"];
4913
+ var AI_GATEWAY_KNOWN_CONFIG_STRATEGIES = ["fallback", "loadbalance", "single"];
4914
+ var AI_GATEWAY_KNOWN_MCP_AUTH_TYPES = [
4915
+ "headers",
4916
+ "none",
4917
+ "oauth_auto",
4918
+ "oauth_client_credentials"
4919
+ ];
4920
+ var AI_GATEWAY_KNOWN_MCP_TRANSPORTS = ["http", "interactive", "sse"];
4921
+ var AI_GATEWAY_KNOWN_RATE_LIMIT_TYPES = ["requests", "tokens"];
4922
+ var AI_GATEWAY_KNOWN_RATE_LIMIT_UNITS = ["rpd", "rph", "rpm", "rps", "rpw"];
4923
+ var openValue = () => z36.string().min(1);
4924
+ var GatewayApiKeyScopeSchema = openValue();
4925
+ var GatewayConfigCacheModeSchema = openValue();
4926
+ var GatewayConfigStrategySchema = openValue();
4927
+ var GatewayMcpAuthTypeSchema = openValue();
4928
+ var GatewayMcpTransportSchema = openValue();
4929
+ var GatewayRateLimitTypeSchema = openValue();
4930
+ var GatewayRateLimitUnitSchema = openValue();
4931
+ var unsafeJsonKeys = /* @__PURE__ */ new Set(["__proto__", "constructor", "prototype"]);
4932
+ function isFiniteJsonValue(value2, ancestors = /* @__PURE__ */ new WeakSet()) {
4933
+ if (value2 === null || typeof value2 === "string" || typeof value2 === "boolean" || typeof value2 === "number" && Number.isFinite(value2)) {
4934
+ return true;
4935
+ }
4936
+ if (typeof value2 !== "object" || ancestors.has(value2)) return false;
4937
+ if (Array.isArray(value2)) {
4938
+ const keys = Object.keys(value2);
4939
+ if (keys.length !== value2.length || keys.some((key, index) => key !== String(index)) || Object.getOwnPropertySymbols(value2).length > 0) {
4940
+ return false;
4941
+ }
4942
+ ancestors.add(value2);
4943
+ const valid2 = value2.every((item) => isFiniteJsonValue(item, ancestors));
4944
+ ancestors.delete(value2);
4945
+ return valid2;
4946
+ }
4947
+ const prototype = Object.getPrototypeOf(value2);
4948
+ if (prototype !== Object.prototype && prototype !== null) return false;
4949
+ if (Object.getOwnPropertySymbols(value2).length > 0) return false;
4950
+ ancestors.add(value2);
4951
+ const valid = Object.entries(Object.getOwnPropertyDescriptors(value2)).every(
4952
+ ([key, descriptor]) => descriptor.enumerable === true && "value" in descriptor && !unsafeJsonKeys.has(key) && isFiniteJsonValue(descriptor.value, ancestors)
4953
+ );
4954
+ ancestors.delete(value2);
4955
+ return valid;
4956
+ }
4957
+ var GatewayJsonValueSchema = z36.custom(
4958
+ (value2) => isFiniteJsonValue(value2),
4959
+ "Expected a finite, prototype-safe JSON value"
4960
+ );
4961
+ var GatewayJsonObjectSchema = z36.custom(
4962
+ (value2) => typeof value2 === "object" && value2 !== null && !Array.isArray(value2) && isFiniteJsonValue(value2),
4963
+ "Expected a finite, prototype-safe JSON object"
4964
+ );
4965
+ var GatewayRoutingRetrySchema = z36.object({
4966
+ attempts: z36.number().int().min(0).optional(),
4967
+ on_status_codes: z36.array(z36.number().int().min(100).max(599)).optional()
4968
+ }).catchall(GatewayJsonValueSchema);
4969
+ var GatewayRoutingCacheSchema = z36.object({
4970
+ mode: GatewayConfigCacheModeSchema.optional(),
4971
+ max_age: z36.number().int().min(0).optional()
4972
+ }).catchall(GatewayJsonValueSchema);
4973
+ var GatewayRoutingStrategySchema = z36.object({ mode: GatewayConfigStrategySchema }).catchall(GatewayJsonValueSchema);
4974
+ var GatewayRoutingTargetSchema = z36.object({
4975
+ provider: z36.string().min(1).optional(),
4976
+ virtual_key: z36.string().min(1).optional()
4977
+ }).catchall(GatewayJsonValueSchema);
4978
+ var GatewayRoutingConfigSchema = z36.object({
4979
+ retry: GatewayRoutingRetrySchema.optional(),
4980
+ cache: GatewayRoutingCacheSchema.optional(),
4981
+ strategy: GatewayRoutingStrategySchema.optional(),
4982
+ targets: z36.array(GatewayRoutingTargetSchema).optional(),
4983
+ provider: z36.string().min(1).optional(),
4984
+ virtual_key: z36.string().min(1).optional()
4985
+ }).catchall(GatewayJsonValueSchema);
4986
+ var GatewayOpenAIConfigurationSchema = z36.object({
4987
+ openai_organization: z36.string().min(1).optional(),
4988
+ openai_project: z36.string().min(1).optional()
4989
+ }).catchall(GatewayJsonValueSchema);
4990
+ var GatewayAzureDeploymentConfigurationSchema = z36.object({
4991
+ alias: z36.string().min(1).optional(),
4992
+ azure_api_version: z36.string().min(1).max(30),
4993
+ azure_deployment_name: z36.string().min(1),
4994
+ is_default: z36.boolean().optional(),
4995
+ azure_model_slug: z36.string().min(1)
4996
+ }).catchall(GatewayJsonValueSchema);
4997
+ var azureAuthModeSchema = z36.enum(["default", "entra", "managed"]);
4998
+ var GatewayAzureOpenAIConfigurationSchema = z36.object({
4999
+ azure_auth_mode: azureAuthModeSchema,
5000
+ azure_resource_name: z36.string().min(1),
5001
+ azure_deployment_config: z36.array(GatewayAzureDeploymentConfigurationSchema).min(1),
5002
+ azure_entra_tenant_id: z36.string().min(1).optional(),
5003
+ azure_entra_client_id: z36.string().min(1).optional(),
5004
+ azure_entra_client_secret: z36.string().min(1).optional(),
5005
+ azure_managed_client_id: z36.string().min(1).optional()
5006
+ }).catchall(GatewayJsonValueSchema);
5007
+ var GatewayBedrockConfigurationSchema = z36.object({
5008
+ aws_auth_type: z36.enum(["accessKey", "assumedRole"]),
5009
+ aws_region: z36.string().min(1),
5010
+ aws_access_key_id: z36.string().min(1).optional(),
5011
+ aws_secret_access_key: z36.string().min(1).optional(),
5012
+ aws_role_arn: z36.string().min(1).optional(),
5013
+ aws_external_id: z36.string().min(1).nullable().optional()
5014
+ }).catchall(GatewayJsonValueSchema);
5015
+ var GatewaySageMakerConfigurationSchema = GatewayBedrockConfigurationSchema.extend({
5016
+ amzn_sagemaker_custom_attributes: z36.string().optional(),
5017
+ amzn_sagemaker_target_model: z36.string().optional(),
5018
+ amzn_sagemaker_target_variant: z36.string().optional(),
5019
+ amzn_sagemaker_target_container_hostname: z36.string().optional(),
5020
+ amzn_sagemaker_inference_id: z36.string().optional(),
5021
+ amzn_sagemaker_enable_explanations: z36.string().optional(),
5022
+ amzn_sagemaker_inference_component: z36.string().optional(),
5023
+ amzn_sagemaker_session_id: z36.string().optional(),
5024
+ amzn_sagemaker_model_name: z36.string().optional()
5025
+ }).catchall(GatewayJsonValueSchema);
5026
+ var GatewayVertexAIConfigurationSchema = z36.object({
5027
+ vertex_auth_type: z36.enum(["basic", "serviceAccount"]),
5028
+ vertex_region: z36.string().min(1),
5029
+ vertex_project_id: z36.string().min(1).optional(),
5030
+ vertex_service_account_json: GatewayJsonObjectSchema.optional()
5031
+ }).catchall(GatewayJsonValueSchema);
5032
+ var GatewayAzureAIConfigurationSchema = z36.object({
5033
+ azure_auth_mode: azureAuthModeSchema,
5034
+ azure_foundry_url: z36.string().url(),
5035
+ azure_api_version: z36.string().min(1).max(30).optional(),
5036
+ azure_deployment_name: z36.string().min(1).optional(),
5037
+ azure_entra_tenant_id: z36.string().min(1).optional(),
5038
+ azure_entra_client_id: z36.string().min(1).optional(),
5039
+ azure_entra_client_secret: z36.string().min(1).optional(),
5040
+ azure_managed_client_id: z36.string().min(1).optional()
5041
+ }).catchall(GatewayJsonValueSchema);
5042
+ var GatewayWorkersAIConfigurationSchema = z36.object({ workers_ai_account_id: z36.string().min(1) }).catchall(GatewayJsonValueSchema);
5043
+ var GatewayHuggingFaceConfigurationSchema = z36.object({ huggingface_base_url: z36.string().url().optional() }).catchall(GatewayJsonValueSchema);
5044
+ var GatewayCortexConfigurationSchema = z36.object({ snowflake_account: z36.string().min(1) }).catchall(GatewayJsonValueSchema);
5045
+ var GatewayCustomHostConfigurationSchema = z36.object({
5046
+ custom_host: z36.string().url().optional(),
5047
+ custom_headers: z36.record(z36.string()).optional()
5048
+ }).catchall(GatewayJsonValueSchema);
5049
+
5050
+ // src/models/ai-gateway-requests.ts
5051
+ import { z as z37 } from "zod";
5052
+ var nonEmptyString = z37.string().min(1);
5053
+ var uuid = z37.string().uuid();
5054
+ var numericId = z37.string().regex(/^\d+$/, "Expected a numeric-string TSG id");
5055
+ var workspaceRef = z37.string().regex(/^[A-Za-z0-9][A-Za-z0-9_-]*$/);
5056
+ var dateTime = z37.string().datetime({ offset: true });
5057
+ var nonEmptyObject = (schema, message = "Provide at least one field") => schema.refine((body) => Object.keys(body).length > 0, { message });
5058
+ var GatewayRateLimitInputSchema = z37.object({
5059
+ type: GatewayRateLimitTypeSchema,
5060
+ unit: GatewayRateLimitUnitSchema,
5061
+ value: z37.number().int().min(0)
5062
+ }).strict();
5063
+ var GatewayUsageLimitInputSchema = nonEmptyObject(
5064
+ z37.object({
5065
+ credit_limit: z37.number().min(0).optional(),
5066
+ type: z37.enum(["cost", "tokens"]).optional(),
5067
+ alert_threshold: z37.number().min(0).optional(),
5068
+ periodic_reset: z37.enum(["monthly", "weekly"]).nullable().optional(),
5069
+ periodic_reset_days: z37.number().int().min(1).max(365).nullable().optional(),
5070
+ next_usage_reset_at: dateTime.nullable().optional()
5071
+ }).strict()
5072
+ ).refine(
5073
+ (value2) => value2.periodic_reset == null || value2.periodic_reset_days == null,
5074
+ "periodic_reset and periodic_reset_days are mutually exclusive"
5075
+ );
5076
+ var GatewayDefaultsInputSchema = z37.object({
5077
+ metadata: z37.record(GatewayJsonValueSchema).optional(),
5078
+ config_id: nonEmptyString.optional(),
5079
+ allow_config_override: z37.boolean().optional()
5080
+ }).catchall(GatewayJsonValueSchema);
5081
+ var GatewaySecretMappingSchema = z37.object({
5082
+ target_field: nonEmptyString,
5083
+ secret_reference_id: nonEmptyString,
5084
+ secret_key: nonEmptyString.nullable().optional(),
5085
+ value_format: z37.enum(["json", "string"]).nullable().optional()
5086
+ }).strict();
5087
+ var GatewayGlobalWorkspaceAccessInputSchema = z37.object({
5088
+ enabled: z37.boolean(),
5089
+ usage_limits: z37.array(GatewayUsageLimitInputSchema).max(1).nullable().optional(),
5090
+ rate_limits: z37.array(GatewayRateLimitInputSchema).max(1).nullable().optional()
5091
+ }).strict();
5092
+ var GatewayWorkspaceBindingSchema = z37.object({
5093
+ id: workspaceRef,
5094
+ enabled: z37.boolean(),
5095
+ usage_limits: z37.array(GatewayUsageLimitInputSchema).max(1).nullable().optional(),
5096
+ rate_limits: z37.array(GatewayRateLimitInputSchema).max(1).nullable().optional(),
5097
+ reset_usage: z37.boolean().optional(),
5098
+ create_default_provider: z37.boolean().optional(),
5099
+ default_provider_slug: nonEmptyString.optional()
5100
+ }).strict();
5101
+ var GatewayWorkspaceCreateRequestSchema = z37.object({
5102
+ name: nonEmptyString,
5103
+ scope_name: nonEmptyString,
5104
+ description: z37.string().optional(),
5105
+ icon: z37.string().optional(),
5106
+ defaults: GatewayDefaultsInputSchema.optional(),
5107
+ users: z37.array(nonEmptyString).optional(),
5108
+ usage_limits: z37.array(GatewayUsageLimitInputSchema).optional(),
5109
+ rate_limits: z37.array(GatewayRateLimitInputSchema).optional()
5110
+ }).strict();
5111
+ var GatewayWorkspaceUpdateRequestSchema = nonEmptyObject(
5112
+ z37.object({
5113
+ name: nonEmptyString.optional(),
5114
+ description: z37.string().optional(),
5115
+ icon: z37.string().optional(),
5116
+ defaults: GatewayDefaultsInputSchema.optional(),
5117
+ usage_limits: z37.array(GatewayUsageLimitInputSchema).optional(),
5118
+ rate_limits: z37.array(GatewayRateLimitInputSchema).optional()
5119
+ }).strict()
5120
+ );
5121
+ var GatewayConfigCreateRequestSchema = z37.object({
5122
+ name: nonEmptyString,
5123
+ workspace_id: uuid,
5124
+ config: GatewayRoutingConfigSchema
5125
+ }).strict();
5126
+ var GatewayConfigUpdateRequestSchema = nonEmptyObject(
5127
+ z37.object({
5128
+ name: nonEmptyString.optional(),
5129
+ workspace_id: uuid.optional(),
5130
+ config: GatewayRoutingConfigSchema.optional(),
5131
+ status: nonEmptyString.optional()
5132
+ }).strict()
5133
+ );
5134
+ var GatewayGuardrailCheckSchema = z37.object({
5135
+ id: nonEmptyString,
5136
+ parameters: GatewayJsonObjectSchema.optional(),
5137
+ is_enabled: z37.boolean().optional(),
5138
+ name: nonEmptyString.optional()
5139
+ }).strict();
5140
+ var feedbackSchema = z37.object({
5141
+ value: z37.number(),
5142
+ weight: z37.number(),
5143
+ metadata: z37.string()
5144
+ }).catchall(GatewayJsonValueSchema);
5145
+ var actionResultSchema = z37.object({ feedback: feedbackSchema.optional() }).catchall(GatewayJsonValueSchema);
5146
+ var GatewayGuardrailActionsSchema = nonEmptyObject(
5147
+ z37.object({
5148
+ deny: z37.boolean().optional(),
5149
+ async: z37.boolean().optional(),
5150
+ on_success: actionResultSchema.optional(),
5151
+ on_fail: actionResultSchema.optional()
5152
+ }).catchall(GatewayJsonValueSchema)
5153
+ );
5154
+ var GatewayGuardrailCreateRequestSchema = z37.object({
5155
+ workspace_id: uuid,
5156
+ name: nonEmptyString,
5157
+ checks: z37.array(GatewayGuardrailCheckSchema).min(1),
5158
+ actions: GatewayGuardrailActionsSchema
5159
+ }).strict();
5160
+ var GatewayGuardrailUpdateRequestSchema = nonEmptyObject(
5161
+ z37.object({
5162
+ name: nonEmptyString.optional(),
5163
+ checks: z37.array(GatewayGuardrailCheckSchema).min(1).optional(),
5164
+ actions: GatewayGuardrailActionsSchema.optional()
5165
+ }).strict()
5166
+ );
5167
+ var GatewayProviderCreateRequestSchema = z37.object({
5168
+ workspace_id: uuid,
5169
+ ai_provider_id: uuid,
5170
+ name: nonEmptyString,
5171
+ integration_id: uuid,
5172
+ slug: nonEmptyString,
5173
+ note: z37.string().nullable().optional(),
5174
+ usage_limits: GatewayUsageLimitInputSchema.nullable().optional(),
5175
+ rate_limits: GatewayRateLimitInputSchema.nullable().optional(),
5176
+ expires_at: dateTime.nullable().optional()
5177
+ }).strict();
5178
+ var GatewayProviderUpdateRequestSchema = nonEmptyObject(
5179
+ z37.object({
5180
+ name: nonEmptyString.optional(),
5181
+ note: z37.string().nullable().optional(),
5182
+ usage_limits: GatewayUsageLimitInputSchema.nullable().optional(),
5183
+ rate_limits: GatewayRateLimitInputSchema.nullable().optional(),
5184
+ expires_at: dateTime.nullable().optional(),
5185
+ reset_usage: z37.boolean().optional()
5186
+ }).strict()
5187
+ );
5188
+ var GatewayApiKeyRotationPolicySchema = nonEmptyObject(
5189
+ z37.object({
5190
+ rotation_period: z37.enum(["monthly", "weekly"]).nullable().optional(),
5191
+ next_rotation_at: dateTime.nullable().optional(),
5192
+ key_transition_period_ms: z37.number().int().min(18e5).optional()
5193
+ }).strict()
5194
+ ).refine(
5195
+ (value2) => value2.rotation_period == null || value2.next_rotation_at == null,
5196
+ "rotation_period and next_rotation_at are mutually exclusive"
5197
+ );
5198
+ var apiKeyMutableFields = {
5199
+ name: nonEmptyString,
5200
+ description: z37.string().optional(),
5201
+ scopes: z37.array(GatewayApiKeyScopeSchema).min(1),
5202
+ rate_limits: z37.array(GatewayRateLimitInputSchema).nullable().optional(),
5203
+ usage_limits: GatewayUsageLimitInputSchema.nullable().optional(),
5204
+ defaults: GatewayDefaultsInputSchema.nullable().optional(),
5205
+ alert_emails: z37.array(z37.string().email()).optional(),
5206
+ expires_at: dateTime.nullable().optional(),
5207
+ rotation_policy: GatewayApiKeyRotationPolicySchema.nullable().optional()
5208
+ };
5209
+ var serviceApiKeyCreateFields = {
5210
+ ...apiKeyMutableFields,
5211
+ organisation_id: numericId,
5212
+ workspace_id: uuid,
5213
+ type: nonEmptyString
5214
+ };
5215
+ var GatewayServiceApiKeyCreateRequestSchema = z37.object(serviceApiKeyCreateFields).strict();
5216
+ var GatewayUserApiKeyCreateRequestSchema = z37.object({ ...serviceApiKeyCreateFields, user_id: uuid }).strict();
5217
+ var GatewayApiKeyCreateRequestSchema = z37.union([
5218
+ GatewayUserApiKeyCreateRequestSchema,
5219
+ GatewayServiceApiKeyCreateRequestSchema
5220
+ ]);
5221
+ var GatewayApiKeyUpdateRequestSchema = nonEmptyObject(
5222
+ z37.object({
5223
+ name: nonEmptyString.optional(),
5224
+ description: z37.string().optional(),
5225
+ scopes: z37.array(GatewayApiKeyScopeSchema).min(1).optional(),
5226
+ rate_limits: z37.array(GatewayRateLimitInputSchema).nullable().optional(),
5227
+ usage_limits: GatewayUsageLimitInputSchema.nullable().optional(),
5228
+ reset_usage: z37.boolean().optional(),
5229
+ defaults: GatewayDefaultsInputSchema.nullable().optional(),
5230
+ alert_emails: z37.array(z37.string().email()).optional(),
5231
+ expires_at: dateTime.nullable().optional(),
5232
+ rotation_policy: GatewayApiKeyRotationPolicySchema.nullable().optional()
5233
+ }).strict()
5234
+ );
5235
+ var GatewayApiKeyRotateRequestSchema = z37.object({ key_transition_period_ms: z37.number().int().min(18e5).optional() }).strict();
5236
+ var GatewayIntegrationCreateRequestSchema = z37.object({
5237
+ organisation_id: numericId,
5238
+ ai_provider_id: uuid,
5239
+ name: nonEmptyString,
5240
+ slug: nonEmptyString,
5241
+ description: z37.string().optional(),
5242
+ configurations: GatewayJsonObjectSchema.optional(),
5243
+ key: nonEmptyString.optional(),
5244
+ secret_mappings: z37.array(GatewaySecretMappingSchema).optional()
5245
+ }).strict();
5246
+ var GatewayIntegrationUpdateRequestSchema = nonEmptyObject(
5247
+ z37.object({
5248
+ name: nonEmptyString.optional(),
5249
+ description: z37.string().optional(),
5250
+ configurations: GatewayJsonObjectSchema.optional(),
5251
+ key: nonEmptyString.optional(),
5252
+ secret_mappings: z37.array(GatewaySecretMappingSchema).optional()
5253
+ }).strict()
5254
+ );
5255
+ var GatewayIntegrationModelUpdateSchema = z37.object({
5256
+ slug: nonEmptyString,
5257
+ enabled: z37.boolean(),
5258
+ is_custom: z37.boolean().nullable().optional(),
5259
+ is_finetune: z37.boolean().nullable().optional(),
5260
+ base_model_slug: nonEmptyString.nullable().optional(),
5261
+ configurations: GatewayJsonObjectSchema.optional(),
5262
+ pricing_config: GatewayJsonObjectSchema.optional()
5263
+ }).strict();
5264
+ var GatewayIntegrationModelsBulkUpdateRequestSchema = z37.object({
5265
+ models: z37.array(GatewayIntegrationModelUpdateSchema).min(1),
5266
+ allow_all_models: z37.boolean().optional()
5267
+ }).strict();
5268
+ var GatewayIntegrationWorkspacesBulkUpdateRequestSchema = nonEmptyObject(
5269
+ z37.object({
5270
+ workspaces: z37.array(GatewayWorkspaceBindingSchema).optional(),
5271
+ global_workspace_access: GatewayGlobalWorkspaceAccessInputSchema.optional(),
5272
+ override_existing_workspace_access: z37.boolean().optional(),
5273
+ create_default_provider: z37.boolean().optional(),
5274
+ default_provider_slug: nonEmptyString.optional()
5275
+ }).strict()
5276
+ );
5277
+ var McpIntegrationCreateRequestSchema = z37.object({
5278
+ name: nonEmptyString,
5279
+ organisation_id: numericId,
5280
+ slug: nonEmptyString,
5281
+ url: z37.string().url(),
5282
+ auth_type: GatewayMcpAuthTypeSchema,
5283
+ transport: GatewayMcpTransportSchema,
5284
+ description: z37.string().nullable().optional(),
5285
+ configurations: GatewayJsonObjectSchema.optional(),
5286
+ secret_mappings: z37.array(GatewaySecretMappingSchema).optional()
5287
+ }).strict();
5288
+ var McpIntegrationUpdateRequestSchema = nonEmptyObject(
5289
+ z37.object({
5290
+ name: nonEmptyString.optional(),
5291
+ description: z37.string().nullable().optional(),
5292
+ configurations: GatewayJsonObjectSchema.optional(),
5293
+ url: z37.string().url().optional(),
5294
+ auth_type: GatewayMcpAuthTypeSchema.optional(),
5295
+ transport: GatewayMcpTransportSchema.optional(),
5296
+ secret_mappings: z37.array(GatewaySecretMappingSchema).optional()
5297
+ }).strict()
5298
+ );
5299
+ var McpIntegrationCapabilityUpdateSchema = z37.object({
5300
+ name: nonEmptyString,
5301
+ type: GatewayMutableMcpCapabilityTypeSchema,
5302
+ enabled: z37.boolean()
5303
+ }).strict();
5304
+ var McpIntegrationCapabilitiesBulkUpdateRequestSchema = z37.object({ capabilities: z37.array(McpIntegrationCapabilityUpdateSchema).min(1) }).strict();
5305
+ var McpIntegrationWorkspacesBulkUpdateRequestSchema = nonEmptyObject(
5306
+ z37.object({
5307
+ workspaces: z37.array(z37.object({ id: workspaceRef, enabled: z37.boolean() }).strict()).optional(),
5308
+ global_workspace_access: z37.object({ enabled: z37.boolean() }).strict().nullable().optional(),
5309
+ override_existing_workspace_access: z37.boolean().optional()
5310
+ }).strict()
5311
+ );
5312
+ var GatewayDeploymentAuthSettingsInputSchema = z37.object({
5313
+ gateway_base_url: z37.string().url().optional(),
5314
+ mcp_gateway_base_url: z37.string().url().optional(),
5315
+ is_dataservice_hosted: z37.union([z37.literal(0), z37.literal(1)]).optional(),
5316
+ is_playground_proxy_allowed: z37.union([z37.literal(0), z37.literal(1)]).optional(),
5317
+ workspaces_allowed: z37.array(workspaceRef).optional(),
5318
+ jwt_subs_allowed: z37.array(nonEmptyString).optional(),
5319
+ jwt_sub_workspace_mapping: z37.record(workspaceRef).optional(),
5320
+ allow_all_workspaces: z37.boolean().optional(),
5321
+ remove_workspaces_allowed: z37.array(workspaceRef).optional(),
5322
+ remove_subs_allowed: z37.array(nonEmptyString).optional()
5323
+ }).strict();
5324
+ var GatewayDeploymentCreateRequestSchema = z37.object({
5325
+ name: nonEmptyString,
5326
+ type: GatewayDeploymentTypeSchema,
5327
+ organisation_id: numericId,
5328
+ auth_settings: GatewayDeploymentAuthSettingsInputSchema.optional(),
5329
+ deployment_config: GatewayJsonObjectSchema.optional(),
5330
+ is_default: z37.boolean().optional(),
5331
+ slug: nonEmptyString.optional()
5332
+ }).strict();
5333
+ var GatewayDeploymentUpdateRequestSchema = nonEmptyObject(
5334
+ z37.object({
5335
+ name: nonEmptyString.optional(),
5336
+ type: GatewayDeploymentTypeSchema.optional(),
5337
+ status: GatewayDeploymentStatusSchema.optional(),
5338
+ deployment_config: GatewayJsonObjectSchema.nullable().optional(),
5339
+ is_default: z37.boolean().optional(),
5340
+ rotate_auth: z37.boolean().optional(),
5341
+ override_existing: z37.boolean().optional(),
5342
+ auth_settings: GatewayDeploymentAuthSettingsInputSchema.optional()
5343
+ }).strict()
5344
+ );
5345
+ var GatewayPluginCreateRequestSchema = z37.object({
5346
+ organisation_id: numericId,
5347
+ integration_id: uuid,
5348
+ credentials: z37.record(z37.string().min(1)).refine((value2) => Object.keys(value2).length > 0)
5349
+ }).strict();
5350
+ var GatewayOrganisationUpdateRequestSchema = nonEmptyObject(
5351
+ z37.object({ name: nonEmptyString.optional() }).catchall(GatewayJsonValueSchema)
5352
+ );
5353
+ var GatewayOrganisationAuthSettingsUpdateRequestSchema = nonEmptyObject(
5354
+ z37.object({
5355
+ auth_settings: GatewayJsonObjectSchema.optional(),
5356
+ domains: z37.array(nonEmptyString).optional(),
5357
+ scim_token: nonEmptyString.optional()
5358
+ }).catchall(GatewayJsonValueSchema)
5359
+ );
5360
+
4754
5361
  // src/http/auth/oauth.ts
4755
5362
  var OAuthAuth = class {
4756
5363
  constructor(oauthClient) {
@@ -4773,12 +5380,12 @@ var OAuthAuth = class {
4773
5380
  };
4774
5381
 
4775
5382
  // src/models/oauth-token.ts
4776
- import { z as z36 } from "zod";
4777
- var OAuthTokenResponseSchema = z36.object({
4778
- access_token: z36.string(),
4779
- token_type: z36.string().optional(),
4780
- expires_in: z36.number(),
4781
- scope: z36.string().optional()
5383
+ import { z as z38 } from "zod";
5384
+ var OAuthTokenResponseSchema = z38.object({
5385
+ access_token: z38.string(),
5386
+ token_type: z38.string().optional(),
5387
+ expires_in: z38.number(),
5388
+ scope: z38.string().optional()
4782
5389
  }).passthrough();
4783
5390
 
4784
5391
  // src/management/oauth-client.ts
@@ -4996,26 +5603,26 @@ function resolveOAuthConfig(opts) {
4996
5603
  }
4997
5604
 
4998
5605
  // src/validators.ts
4999
- function assertUuid(value, fieldName) {
5000
- if (!isValidUuid(value)) {
5606
+ function assertUuid(value2, fieldName) {
5607
+ if (!isValidUuid(value2)) {
5001
5608
  throw new AISecSDKException(
5002
- `Invalid ${fieldName}: ${value}`,
5609
+ `Invalid ${fieldName}: ${value2}`,
5003
5610
  "AISEC_USER_REQUEST_PAYLOAD_ERROR" /* USER_REQUEST_PAYLOAD_ERROR */
5004
5611
  );
5005
5612
  }
5006
5613
  }
5007
- function assertWorkspaceRef(value, fieldName) {
5008
- if (!isValidUuid(value) && !/^[A-Za-z0-9][A-Za-z0-9_-]*$/.test(value)) {
5614
+ function assertWorkspaceRef(value2, fieldName) {
5615
+ if (!isValidUuid(value2) && !/^[A-Za-z0-9][A-Za-z0-9_-]*$/.test(value2)) {
5009
5616
  throw new AISecSDKException(
5010
- `Invalid ${fieldName}: ${value} (expected a workspace UUID or slug)`,
5617
+ `Invalid ${fieldName}: ${value2} (expected a workspace UUID or slug)`,
5011
5618
  "AISEC_USER_REQUEST_PAYLOAD_ERROR" /* USER_REQUEST_PAYLOAD_ERROR */
5012
5619
  );
5013
5620
  }
5014
5621
  }
5015
- function assertNumericId(value, fieldName) {
5016
- if (!/^\d+$/.test(value)) {
5622
+ function assertNumericId(value2, fieldName) {
5623
+ if (!/^\d+$/.test(value2)) {
5017
5624
  throw new AISecSDKException(
5018
- `Invalid ${fieldName}: ${value}`,
5625
+ `Invalid ${fieldName}: ${value2}`,
5019
5626
  "AISEC_USER_REQUEST_PAYLOAD_ERROR" /* USER_REQUEST_PAYLOAD_ERROR */
5020
5627
  );
5021
5628
  }
@@ -5884,7 +6491,7 @@ var ScanLogsClient = class {
5884
6491
  };
5885
6492
 
5886
6493
  // src/management/oauth-management.ts
5887
- import { z as z37 } from "zod";
6494
+ import { z as z39 } from "zod";
5888
6495
  var OAuthManagementClient = class {
5889
6496
  baseUrl;
5890
6497
  auth;
@@ -5918,7 +6525,7 @@ var OAuthManagementClient = class {
5918
6525
  path: MGMT_OAUTH_INVALIDATE_PATH,
5919
6526
  params: { token },
5920
6527
  body,
5921
- responseSchema: z37.string(),
6528
+ responseSchema: z39.string(),
5922
6529
  auth: this.auth,
5923
6530
  numRetries: this.numRetries
5924
6531
  });
@@ -6982,12 +7589,12 @@ var ModelSecurityScansClient = class {
6982
7589
  * // { uuid: '550e8400-...', eval_outcome: 'ALLOWED', model_uri: 'hf://org/model', ... }
6983
7590
  * ```
6984
7591
  */
6985
- async get(uuid) {
6986
- assertUuid(uuid, "scan uuid");
7592
+ async get(uuid2) {
7593
+ assertUuid(uuid2, "scan uuid");
6987
7594
  return request({
6988
7595
  method: "GET",
6989
7596
  baseUrl: this.baseUrl,
6990
- path: `${MODEL_SEC_SCANS_PATH}/${uuid}`,
7597
+ path: `${MODEL_SEC_SCANS_PATH}/${uuid2}`,
6991
7598
  responseSchema: ScanBaseResponseSchema,
6992
7599
  auth: this.auth,
6993
7600
  numRetries: this.numRetries
@@ -7224,12 +7831,12 @@ var ModelSecurityScansClient = class {
7224
7831
  * // { uuid: '660e8400-...', rule_name: 'Pickle Scan', result: 'FAILED', violation_count: 2, ... }
7225
7832
  * ```
7226
7833
  */
7227
- async getEvaluation(uuid) {
7228
- assertUuid(uuid, "evaluation uuid");
7834
+ async getEvaluation(uuid2) {
7835
+ assertUuid(uuid2, "evaluation uuid");
7229
7836
  return request({
7230
7837
  method: "GET",
7231
7838
  baseUrl: this.baseUrl,
7232
- path: `${MODEL_SEC_EVALUATIONS_PATH}/${uuid}`,
7839
+ path: `${MODEL_SEC_EVALUATIONS_PATH}/${uuid2}`,
7233
7840
  responseSchema: RuleEvaluationResponseSchema,
7234
7841
  auth: this.auth,
7235
7842
  numRetries: this.numRetries
@@ -7249,12 +7856,12 @@ var ModelSecurityScansClient = class {
7249
7856
  * // { uuid: '660e8400-...', rule_name: 'Pickle Scan', description: 'Unsafe pickle opcode', ... }
7250
7857
  * ```
7251
7858
  */
7252
- async getViolation(uuid) {
7253
- assertUuid(uuid, "violation uuid");
7859
+ async getViolation(uuid2) {
7860
+ assertUuid(uuid2, "violation uuid");
7254
7861
  return request({
7255
7862
  method: "GET",
7256
7863
  baseUrl: this.baseUrl,
7257
- path: `${MODEL_SEC_VIOLATIONS_PATH}/${uuid}`,
7864
+ path: `${MODEL_SEC_VIOLATIONS_PATH}/${uuid2}`,
7258
7865
  responseSchema: ViolationResponseSchema,
7259
7866
  auth: this.auth,
7260
7867
  numRetries: this.numRetries
@@ -7367,12 +7974,12 @@ var ModelSecurityGroupsClient = class {
7367
7974
  * // { uuid: '550e8400-...', name: 'hf-strict', source_type: 'HUGGING_FACE', state: 'ACTIVE', ... }
7368
7975
  * ```
7369
7976
  */
7370
- async get(uuid) {
7371
- assertUuid(uuid, "security group uuid");
7977
+ async get(uuid2) {
7978
+ assertUuid(uuid2, "security group uuid");
7372
7979
  return request({
7373
7980
  method: "GET",
7374
7981
  baseUrl: this.baseUrl,
7375
- path: `${MODEL_SEC_SECURITY_GROUPS_PATH}/${uuid}`,
7982
+ path: `${MODEL_SEC_SECURITY_GROUPS_PATH}/${uuid2}`,
7376
7983
  responseSchema: ModelSecurityGroupResponseSchema,
7377
7984
  auth: this.auth,
7378
7985
  numRetries: this.numRetries
@@ -7396,12 +8003,12 @@ var ModelSecurityGroupsClient = class {
7396
8003
  * // { uuid: '550e8400-...', name: 'hf-strict-v2', state: 'ACTIVE', ... }
7397
8004
  * ```
7398
8005
  */
7399
- async update(uuid, body) {
7400
- assertUuid(uuid, "security group uuid");
8006
+ async update(uuid2, body) {
8007
+ assertUuid(uuid2, "security group uuid");
7401
8008
  return request({
7402
8009
  method: "PUT",
7403
8010
  baseUrl: this.baseUrl,
7404
- path: `${MODEL_SEC_SECURITY_GROUPS_PATH}/${uuid}`,
8011
+ path: `${MODEL_SEC_SECURITY_GROUPS_PATH}/${uuid2}`,
7405
8012
  body,
7406
8013
  responseSchema: ModelSecurityGroupResponseSchema,
7407
8014
  auth: this.auth,
@@ -7421,12 +8028,12 @@ var ModelSecurityGroupsClient = class {
7421
8028
  * // resolves to undefined on success
7422
8029
  * ```
7423
8030
  */
7424
- async delete(uuid) {
7425
- assertUuid(uuid, "security group uuid");
8031
+ async delete(uuid2) {
8032
+ assertUuid(uuid2, "security group uuid");
7426
8033
  await request({
7427
8034
  method: "DELETE",
7428
8035
  baseUrl: this.baseUrl,
7429
- path: `${MODEL_SEC_SECURITY_GROUPS_PATH}/${uuid}`,
8036
+ path: `${MODEL_SEC_SECURITY_GROUPS_PATH}/${uuid2}`,
7430
8037
  auth: this.auth,
7431
8038
  numRetries: this.numRetries
7432
8039
  });
@@ -7589,12 +8196,12 @@ var ModelSecurityRulesClient = class {
7589
8196
  * // { uuid: '550e8400-...', name: 'Pickle Scan', rule_type: 'ARTIFACT', default_state: 'BLOCKING', ... }
7590
8197
  * ```
7591
8198
  */
7592
- async get(uuid) {
7593
- assertUuid(uuid, "security rule uuid");
8199
+ async get(uuid2) {
8200
+ assertUuid(uuid2, "security rule uuid");
7594
8201
  return request({
7595
8202
  method: "GET",
7596
8203
  baseUrl: this.baseUrl,
7597
- path: `${MODEL_SEC_SECURITY_RULES_PATH}/${uuid}`,
8204
+ path: `${MODEL_SEC_SECURITY_RULES_PATH}/${uuid2}`,
7598
8205
  responseSchema: ModelSecurityRuleResponseSchema,
7599
8206
  auth: this.auth,
7600
8207
  numRetries: this.numRetries
@@ -7675,12 +8282,12 @@ var ModelSecurityModelsClient = class {
7675
8282
  * // { uuid: '550e8400-...', name: 'org/model', latest_version_uuid: '660e8400-...', latest_version_outcome: 'PASSED' }
7676
8283
  * ```
7677
8284
  */
7678
- async getModel(uuid) {
7679
- assertUuid(uuid, "model uuid");
8285
+ async getModel(uuid2) {
8286
+ assertUuid(uuid2, "model uuid");
7680
8287
  return request({
7681
8288
  method: "GET",
7682
8289
  baseUrl: this.baseUrl,
7683
- path: `${MODEL_SEC_MODELS_PATH}/${uuid}`,
8290
+ path: `${MODEL_SEC_MODELS_PATH}/${uuid2}`,
7684
8291
  responseSchema: ModelResponseSchema,
7685
8292
  auth: this.auth,
7686
8293
  numRetries: this.numRetries
@@ -7738,12 +8345,12 @@ var ModelSecurityModelsClient = class {
7738
8345
  * // { uuid: '660e8400-...', revision: 'main', model_uuid: '550e8400-...', last_eval_outcome: 'PASSED' }
7739
8346
  * ```
7740
8347
  */
7741
- async getModelVersion(uuid) {
7742
- assertUuid(uuid, "model version uuid");
8348
+ async getModelVersion(uuid2) {
8349
+ assertUuid(uuid2, "model version uuid");
7743
8350
  return request({
7744
8351
  method: "GET",
7745
8352
  baseUrl: this.baseUrl,
7746
- path: `${MODEL_SEC_MODEL_VERSIONS_PATH}/${uuid}`,
8353
+ path: `${MODEL_SEC_MODEL_VERSIONS_PATH}/${uuid2}`,
7747
8354
  responseSchema: ModelVersionResponseSchema,
7748
8355
  auth: this.auth,
7749
8356
  numRetries: this.numRetries
@@ -7856,7 +8463,7 @@ var ModelSecurityClient = class {
7856
8463
  };
7857
8464
 
7858
8465
  // src/red-team/scans-client.ts
7859
- import { z as z38 } from "zod";
8466
+ import { z as z40 } from "zod";
7860
8467
  var RedTeamScansClient = class {
7861
8468
  baseUrl;
7862
8469
  auth;
@@ -8000,7 +8607,7 @@ var RedTeamScansClient = class {
8000
8607
  method: "GET",
8001
8608
  baseUrl: this.baseUrl,
8002
8609
  path: RED_TEAM_CATEGORIES_PATH,
8003
- responseSchema: z38.array(CategoryModelSchema),
8610
+ responseSchema: z40.array(CategoryModelSchema),
8004
8611
  auth: this.auth,
8005
8612
  numRetries: this.numRetries
8006
8613
  });
@@ -8008,7 +8615,7 @@ var RedTeamScansClient = class {
8008
8615
  };
8009
8616
 
8010
8617
  // src/red-team/reports-client.ts
8011
- import { z as z39 } from "zod";
8618
+ import { z as z41 } from "zod";
8012
8619
  var RedTeamReportsClient = class {
8013
8620
  baseUrl;
8014
8621
  auth;
@@ -8383,7 +8990,7 @@ var RedTeamReportsClient = class {
8383
8990
  baseUrl: this.baseUrl,
8384
8991
  path: `${RED_TEAM_REPORT_PATH}/${jobId}/download`,
8385
8992
  params: { file_format: format },
8386
- responseSchema: z39.unknown(),
8993
+ responseSchema: z41.unknown(),
8387
8994
  auth: this.auth,
8388
8995
  numRetries: this.numRetries
8389
8996
  });
@@ -8407,7 +9014,7 @@ var RedTeamReportsClient = class {
8407
9014
  method: "POST",
8408
9015
  baseUrl: this.baseUrl,
8409
9016
  path: `${RED_TEAM_REPORT_PATH}/${jobId}/generate-partial-report`,
8410
- responseSchema: z39.unknown(),
9017
+ responseSchema: z41.unknown(),
8411
9018
  auth: this.auth,
8412
9019
  numRetries: this.numRetries
8413
9020
  });
@@ -8415,7 +9022,7 @@ var RedTeamReportsClient = class {
8415
9022
  };
8416
9023
 
8417
9024
  // src/red-team/custom-attack-reports-client.ts
8418
- import { z as z40 } from "zod";
9025
+ import { z as z42 } from "zod";
8419
9026
  var RedTeamCustomAttackReportsClient = class {
8420
9027
  baseUrl;
8421
9028
  auth;
@@ -8505,7 +9112,7 @@ var RedTeamCustomAttackReportsClient = class {
8505
9112
  baseUrl: this.baseUrl,
8506
9113
  path: `${RED_TEAM_CUSTOM_ATTACKS_REPORT_PATH}/report/${jobId}/prompt-set/${promptSetId}/prompts`,
8507
9114
  params,
8508
- responseSchema: z40.array(PromptDetailResponseSchema),
9115
+ responseSchema: z42.array(PromptDetailResponseSchema),
8509
9116
  auth: this.auth,
8510
9117
  numRetries: this.numRetries
8511
9118
  });
@@ -8599,7 +9206,7 @@ var RedTeamCustomAttackReportsClient = class {
8599
9206
  method: "GET",
8600
9207
  baseUrl: this.baseUrl,
8601
9208
  path: `${RED_TEAM_CUSTOM_ATTACKS_REPORT_PATH}/job/${jobId}/attack/${attackId}/list-outputs`,
8602
- responseSchema: z40.array(CustomAttackOutputSchema),
9209
+ responseSchema: z42.array(CustomAttackOutputSchema),
8603
9210
  auth: this.auth,
8604
9211
  numRetries: this.numRetries
8605
9212
  });
@@ -8624,7 +9231,7 @@ var RedTeamCustomAttackReportsClient = class {
8624
9231
  method: "GET",
8625
9232
  baseUrl: this.baseUrl,
8626
9233
  path: `${RED_TEAM_CUSTOM_ATTACKS_REPORT_PATH}/job/${jobId}/property-stats`,
8627
- responseSchema: z40.array(PropertyStatisticSchema),
9234
+ responseSchema: z42.array(PropertyStatisticSchema),
8628
9235
  auth: this.auth,
8629
9236
  numRetries: this.numRetries
8630
9237
  });
@@ -8632,7 +9239,7 @@ var RedTeamCustomAttackReportsClient = class {
8632
9239
  };
8633
9240
 
8634
9241
  // src/red-team/targets-client.ts
8635
- import { z as z41 } from "zod";
9242
+ import { z as z43 } from "zod";
8636
9243
  var RedTeamTargetsClient = class {
8637
9244
  baseUrl;
8638
9245
  auth;
@@ -8746,12 +9353,12 @@ var RedTeamTargetsClient = class {
8746
9353
  * // { uuid: '550e8400-...', name: 'prod-chatbot', status: 'READY', active: true, validated: true }
8747
9354
  * ```
8748
9355
  */
8749
- async get(uuid) {
8750
- assertUuid(uuid, "target uuid");
9356
+ async get(uuid2) {
9357
+ assertUuid(uuid2, "target uuid");
8751
9358
  return request({
8752
9359
  method: "GET",
8753
9360
  baseUrl: this.baseUrl,
8754
- path: `${RED_TEAM_TARGET_PATH}/${uuid}`,
9361
+ path: `${RED_TEAM_TARGET_PATH}/${uuid2}`,
8755
9362
  responseSchema: TargetResponseSchema,
8756
9363
  auth: this.auth,
8757
9364
  numRetries: this.numRetries
@@ -8777,14 +9384,14 @@ var RedTeamTargetsClient = class {
8777
9384
  * // { uuid: '550e8400-...', name: 'prod-chatbot-v2', status: 'READY', updated_at: '2026-03-08T10:00:00Z' }
8778
9385
  * ```
8779
9386
  */
8780
- async update(uuid, body, opts) {
8781
- assertUuid(uuid, "target uuid");
9387
+ async update(uuid2, body, opts) {
9388
+ assertUuid(uuid2, "target uuid");
8782
9389
  const params = {};
8783
9390
  if (opts?.validate !== void 0) params.validate = String(opts.validate);
8784
9391
  return request({
8785
9392
  method: "PUT",
8786
9393
  baseUrl: this.baseUrl,
8787
- path: `${RED_TEAM_TARGET_PATH}/${uuid}`,
9394
+ path: `${RED_TEAM_TARGET_PATH}/${uuid2}`,
8788
9395
  body,
8789
9396
  params: Object.keys(params).length > 0 ? params : void 0,
8790
9397
  responseSchema: TargetResponseSchema,
@@ -8806,12 +9413,12 @@ var RedTeamTargetsClient = class {
8806
9413
  * // { message: 'ok', status: 200 }
8807
9414
  * ```
8808
9415
  */
8809
- async delete(uuid) {
8810
- assertUuid(uuid, "target uuid");
9416
+ async delete(uuid2) {
9417
+ assertUuid(uuid2, "target uuid");
8811
9418
  return request({
8812
9419
  method: "DELETE",
8813
9420
  baseUrl: this.baseUrl,
8814
- path: `${RED_TEAM_TARGET_PATH}/${uuid}`,
9421
+ path: `${RED_TEAM_TARGET_PATH}/${uuid2}`,
8815
9422
  responseSchema: BaseResponseSchema.optional(),
8816
9423
  allowEmptyBody: true,
8817
9424
  auth: this.auth,
@@ -8861,12 +9468,12 @@ var RedTeamTargetsClient = class {
8861
9468
  * // { target_id: '550e8400-...', target_version: 1, status: 'READY' }
8862
9469
  * ```
8863
9470
  */
8864
- async getProfile(uuid) {
8865
- assertUuid(uuid, "target uuid");
9471
+ async getProfile(uuid2) {
9472
+ assertUuid(uuid2, "target uuid");
8866
9473
  return request({
8867
9474
  method: "GET",
8868
9475
  baseUrl: this.baseUrl,
8869
- path: `${RED_TEAM_TARGET_PATH}/${uuid}/profile`,
9476
+ path: `${RED_TEAM_TARGET_PATH}/${uuid2}/profile`,
8870
9477
  responseSchema: TargetProfileResponseSchema,
8871
9478
  auth: this.auth,
8872
9479
  numRetries: this.numRetries
@@ -8890,12 +9497,12 @@ var RedTeamTargetsClient = class {
8890
9497
  * // { uuid: '550e8400-...', name: 'prod-chatbot', status: 'READY' }
8891
9498
  * ```
8892
9499
  */
8893
- async updateProfile(uuid, body) {
8894
- assertUuid(uuid, "target uuid");
9500
+ async updateProfile(uuid2, body) {
9501
+ assertUuid(uuid2, "target uuid");
8895
9502
  return request({
8896
9503
  method: "PUT",
8897
9504
  baseUrl: this.baseUrl,
8898
- path: `${RED_TEAM_TARGET_PATH}/${uuid}/profile`,
9505
+ path: `${RED_TEAM_TARGET_PATH}/${uuid2}/profile`,
8899
9506
  body,
8900
9507
  responseSchema: TargetResponseSchema,
8901
9508
  auth: this.auth,
@@ -8948,7 +9555,7 @@ var RedTeamTargetsClient = class {
8948
9555
  method: "GET",
8949
9556
  baseUrl: this.baseUrl,
8950
9557
  path: `${RED_TEAM_TEMPLATE_PATH}/target-metadata`,
8951
- responseSchema: z41.record(z41.unknown()),
9558
+ responseSchema: z43.record(z43.unknown()),
8952
9559
  auth: this.auth,
8953
9560
  numRetries: this.numRetries
8954
9561
  });
@@ -9069,12 +9676,12 @@ var RedTeamCustomAttacksClient = class {
9069
9676
  * // { uuid: '550e8400-...', name: 'jailbreaks', status: 'READY', active: true, archive: false }
9070
9677
  * ```
9071
9678
  */
9072
- async getPromptSet(uuid) {
9073
- assertUuid(uuid, "prompt set uuid");
9679
+ async getPromptSet(uuid2) {
9680
+ assertUuid(uuid2, "prompt set uuid");
9074
9681
  return request({
9075
9682
  method: "GET",
9076
9683
  baseUrl: this.baseUrl,
9077
- path: `${RED_TEAM_CUSTOM_ATTACK_PATH}/custom-prompt-set/${uuid}`,
9684
+ path: `${RED_TEAM_CUSTOM_ATTACK_PATH}/custom-prompt-set/${uuid2}`,
9078
9685
  responseSchema: CustomPromptSetResponseSchema,
9079
9686
  auth: this.auth,
9080
9687
  numRetries: this.numRetries
@@ -9097,12 +9704,12 @@ var RedTeamCustomAttacksClient = class {
9097
9704
  * // { uuid: '550e8400-...', name: 'jailbreaks-v2', status: 'READY', active: true }
9098
9705
  * ```
9099
9706
  */
9100
- async updatePromptSet(uuid, body) {
9101
- assertUuid(uuid, "prompt set uuid");
9707
+ async updatePromptSet(uuid2, body) {
9708
+ assertUuid(uuid2, "prompt set uuid");
9102
9709
  return request({
9103
9710
  method: "PUT",
9104
9711
  baseUrl: this.baseUrl,
9105
- path: `${RED_TEAM_CUSTOM_ATTACK_PATH}/custom-prompt-set/${uuid}`,
9712
+ path: `${RED_TEAM_CUSTOM_ATTACK_PATH}/custom-prompt-set/${uuid2}`,
9106
9713
  body,
9107
9714
  responseSchema: CustomPromptSetResponseSchema,
9108
9715
  auth: this.auth,
@@ -9126,12 +9733,12 @@ var RedTeamCustomAttacksClient = class {
9126
9733
  * // { uuid: '550e8400-...', name: 'jailbreaks', status: 'READY', archive: true }
9127
9734
  * ```
9128
9735
  */
9129
- async archivePromptSet(uuid, body) {
9130
- assertUuid(uuid, "prompt set uuid");
9736
+ async archivePromptSet(uuid2, body) {
9737
+ assertUuid(uuid2, "prompt set uuid");
9131
9738
  return request({
9132
9739
  method: "PUT",
9133
9740
  baseUrl: this.baseUrl,
9134
- path: `${RED_TEAM_CUSTOM_ATTACK_PATH}/custom-prompt-set/${uuid}/archive`,
9741
+ path: `${RED_TEAM_CUSTOM_ATTACK_PATH}/custom-prompt-set/${uuid2}/archive`,
9135
9742
  body,
9136
9743
  responseSchema: CustomPromptSetResponseSchema,
9137
9744
  auth: this.auth,
@@ -9152,12 +9759,12 @@ var RedTeamCustomAttacksClient = class {
9152
9759
  * // { uuid: '550e8400-...', name: 'jailbreaks', status: 'READY', active: true, tsg_id: 'tsg-1' }
9153
9760
  * ```
9154
9761
  */
9155
- async getPromptSetReference(uuid) {
9156
- assertUuid(uuid, "prompt set uuid");
9762
+ async getPromptSetReference(uuid2) {
9763
+ assertUuid(uuid2, "prompt set uuid");
9157
9764
  return request({
9158
9765
  method: "GET",
9159
9766
  baseUrl: this.baseUrl,
9160
- path: `${RED_TEAM_CUSTOM_ATTACK_PATH}/custom-prompt-set/${uuid}/reference`,
9767
+ path: `${RED_TEAM_CUSTOM_ATTACK_PATH}/custom-prompt-set/${uuid2}/reference`,
9161
9768
  responseSchema: CustomPromptSetReferenceSchema,
9162
9769
  auth: this.auth,
9163
9770
  numRetries: this.numRetries
@@ -9178,14 +9785,14 @@ var RedTeamCustomAttacksClient = class {
9178
9785
  * // { uuid: '550e8400-...', status: 'READY', is_latest: true, version: 'gen-12345' }
9179
9786
  * ```
9180
9787
  */
9181
- async getPromptSetVersionInfo(uuid, opts) {
9182
- assertUuid(uuid, "prompt set uuid");
9788
+ async getPromptSetVersionInfo(uuid2, opts) {
9789
+ assertUuid(uuid2, "prompt set uuid");
9183
9790
  const params = {};
9184
9791
  if (opts?.version !== void 0) params.version = opts.version;
9185
9792
  return request({
9186
9793
  method: "GET",
9187
9794
  baseUrl: this.baseUrl,
9188
- path: `${RED_TEAM_CUSTOM_ATTACK_PATH}/custom-prompt-set/${uuid}/version-info`,
9795
+ path: `${RED_TEAM_CUSTOM_ATTACK_PATH}/custom-prompt-set/${uuid2}/version-info`,
9189
9796
  params: Object.keys(params).length > 0 ? params : void 0,
9190
9797
  responseSchema: CustomPromptSetVersionInfoSchema,
9191
9798
  auth: this.auth,
@@ -9233,10 +9840,10 @@ var RedTeamCustomAttacksClient = class {
9233
9840
  * // 'prompt,goal,category,severity\n'
9234
9841
  * ```
9235
9842
  */
9236
- async downloadTemplate(uuid) {
9237
- assertUuid(uuid, "prompt set uuid");
9843
+ async downloadTemplate(uuid2) {
9844
+ assertUuid(uuid2, "prompt set uuid");
9238
9845
  const url = new URL(
9239
- `${this.baseUrl.replace(/\/+$/, "")}${RED_TEAM_CUSTOM_ATTACK_PATH}/download-template/${uuid}`
9846
+ `${this.baseUrl.replace(/\/+$/, "")}${RED_TEAM_CUSTOM_ATTACK_PATH}/download-template/${uuid2}`
9240
9847
  );
9241
9848
  const stub = {
9242
9849
  method: "GET",
@@ -10137,12 +10744,12 @@ var RedTeamAdaptersClient = class {
10137
10744
  * // adapter.status => 'ACTIVE'
10138
10745
  * ```
10139
10746
  */
10140
- async get(uuid) {
10141
- assertUuid(uuid, "adapter uuid");
10747
+ async get(uuid2) {
10748
+ assertUuid(uuid2, "adapter uuid");
10142
10749
  return request({
10143
10750
  method: "GET",
10144
10751
  baseUrl: this.baseUrl,
10145
- path: `${RED_TEAM_ADAPTER_PATH}/${uuid}`,
10752
+ path: `${RED_TEAM_ADAPTER_PATH}/${uuid2}`,
10146
10753
  responseSchema: AdapterResponseSchema,
10147
10754
  auth: this.auth,
10148
10755
  numRetries: this.numRetries
@@ -10170,13 +10777,13 @@ var RedTeamAdaptersClient = class {
10170
10777
  * });
10171
10778
  * ```
10172
10779
  */
10173
- async update(uuid, body, opts) {
10174
- assertUuid(uuid, "adapter uuid");
10780
+ async update(uuid2, body, opts) {
10781
+ assertUuid(uuid2, "adapter uuid");
10175
10782
  const validate = opts?.validate ?? true;
10176
10783
  return request({
10177
10784
  method: "PUT",
10178
10785
  baseUrl: this.baseUrl,
10179
- path: `${RED_TEAM_ADAPTER_PATH}/${uuid}`,
10786
+ path: `${RED_TEAM_ADAPTER_PATH}/${uuid2}`,
10180
10787
  params: { validate: String(validate) },
10181
10788
  body,
10182
10789
  responseSchema: AdapterResponseSchema,
@@ -10192,12 +10799,12 @@ var RedTeamAdaptersClient = class {
10192
10799
  * await rt.adapters.delete('550e8400-e29b-41d4-a716-446655440000');
10193
10800
  * ```
10194
10801
  */
10195
- async delete(uuid) {
10196
- assertUuid(uuid, "adapter uuid");
10802
+ async delete(uuid2) {
10803
+ assertUuid(uuid2, "adapter uuid");
10197
10804
  return request({
10198
10805
  method: "DELETE",
10199
10806
  baseUrl: this.baseUrl,
10200
- path: `${RED_TEAM_ADAPTER_PATH}/${uuid}`,
10807
+ path: `${RED_TEAM_ADAPTER_PATH}/${uuid2}`,
10201
10808
  responseSchema: BaseResponseSchema.optional(),
10202
10809
  allowEmptyBody: true,
10203
10810
  auth: this.auth,
@@ -11066,12 +11673,12 @@ var AIGatewayWorkspacesClient = class {
11066
11673
  * const other = await gw.workspaces.get('ws-produc-985697', { plane: 'admin' });
11067
11674
  * ```
11068
11675
  */
11069
- async get(workspaceRef, options = {}) {
11070
- assertWorkspaceRef(workspaceRef, "workspaceRef");
11676
+ async get(workspaceRef2, options = {}) {
11677
+ assertWorkspaceRef(workspaceRef2, "workspaceRef");
11071
11678
  return request({
11072
11679
  method: "GET",
11073
11680
  baseUrl: this.urlFor(options.plane),
11074
- path: `${AI_GW_WORKSPACES_PATH}/${workspaceRef}`,
11681
+ path: `${AI_GW_WORKSPACES_PATH}/${workspaceRef2}`,
11075
11682
  responseSchema: GatewayWorkspaceDetailSchema,
11076
11683
  auth: this.auth,
11077
11684
  numRetries: this.numRetries
@@ -11100,17 +11707,12 @@ var AIGatewayWorkspacesClient = class {
11100
11707
  * ```
11101
11708
  */
11102
11709
  async create(body) {
11103
- if (!body.name) {
11104
- throw new AISecSDKException("Missing name", "AISEC_USER_REQUEST_PAYLOAD_ERROR" /* USER_REQUEST_PAYLOAD_ERROR */);
11105
- }
11106
- if (!body.scope_name) {
11107
- throw new AISecSDKException("Missing scope_name", "AISEC_USER_REQUEST_PAYLOAD_ERROR" /* USER_REQUEST_PAYLOAD_ERROR */);
11108
- }
11109
11710
  return request({
11110
11711
  method: "POST",
11111
11712
  baseUrl: this.adminBaseUrl,
11112
11713
  path: AI_GW_WORKSPACES_PATH,
11113
11714
  body,
11715
+ requestSchema: GatewayWorkspaceCreateRequestSchema,
11114
11716
  responseSchema: GatewayWorkspaceCreateResponseSchema,
11115
11717
  auth: this.auth,
11116
11718
  numRetries: this.numRetries
@@ -11135,19 +11737,14 @@ var AIGatewayWorkspacesClient = class {
11135
11737
  * });
11136
11738
  * ```
11137
11739
  */
11138
- async update(workspaceRef, body) {
11139
- assertWorkspaceRef(workspaceRef, "workspaceRef");
11140
- if (Object.keys(body).length === 0) {
11141
- throw new AISecSDKException(
11142
- "Empty update: provide at least one of name, description, icon, defaults, usage_limits, rate_limits",
11143
- "AISEC_USER_REQUEST_PAYLOAD_ERROR" /* USER_REQUEST_PAYLOAD_ERROR */
11144
- );
11145
- }
11740
+ async update(workspaceRef2, body) {
11741
+ assertWorkspaceRef(workspaceRef2, "workspaceRef");
11146
11742
  return request({
11147
11743
  method: "PUT",
11148
11744
  baseUrl: this.adminBaseUrl,
11149
- path: `${AI_GW_WORKSPACES_PATH}/${workspaceRef}`,
11745
+ path: `${AI_GW_WORKSPACES_PATH}/${workspaceRef2}`,
11150
11746
  body,
11747
+ requestSchema: GatewayWorkspaceUpdateRequestSchema,
11151
11748
  responseSchema: GatewayWriteResponseSchema,
11152
11749
  auth: this.auth,
11153
11750
  numRetries: this.numRetries
@@ -11178,12 +11775,12 @@ var AIGatewayWorkspacesClient = class {
11178
11775
  * const gone = await gw.workspaces.list({ plane: 'admin', status: 'archived' });
11179
11776
  * ```
11180
11777
  */
11181
- async delete(workspaceRef) {
11182
- assertWorkspaceRef(workspaceRef, "workspaceRef");
11778
+ async delete(workspaceRef2) {
11779
+ assertWorkspaceRef(workspaceRef2, "workspaceRef");
11183
11780
  return request({
11184
11781
  method: "DELETE",
11185
11782
  baseUrl: this.adminBaseUrl,
11186
- path: `${AI_GW_WORKSPACES_PATH}/${workspaceRef}`,
11783
+ path: `${AI_GW_WORKSPACES_PATH}/${workspaceRef2}`,
11187
11784
  auth: this.auth,
11188
11785
  numRetries: this.numRetries
11189
11786
  });
@@ -11309,6 +11906,7 @@ var AIGatewayConfigsClient = class {
11309
11906
  baseUrl: this.baseUrl,
11310
11907
  path: AI_GW_CONFIGS_PATH,
11311
11908
  body,
11909
+ requestSchema: GatewayConfigCreateRequestSchema,
11312
11910
  responseSchema: GatewayConfigCreateResponseSchema,
11313
11911
  auth: this.auth,
11314
11912
  numRetries: this.numRetries
@@ -11317,7 +11915,7 @@ var AIGatewayConfigsClient = class {
11317
11915
  /**
11318
11916
  * Update a config.
11319
11917
  * @param configId - Config UUID.
11320
- * @param body - Replacement fields.
11918
+ * @param body - One or more fields to update. A supplied `config` replaces the routing document.
11321
11919
  * @returns The raw update response. Shape unverified against a live tenant — see the PRD.
11322
11920
  * @example
11323
11921
  * ```ts
@@ -11333,12 +11931,12 @@ var AIGatewayConfigsClient = class {
11333
11931
  */
11334
11932
  async update(configId, body) {
11335
11933
  assertUuid(configId, "configId");
11336
- assertUuid(body.workspace_id, "workspace_id");
11337
11934
  return request({
11338
11935
  method: "PUT",
11339
11936
  baseUrl: this.baseUrl,
11340
11937
  path: `${AI_GW_CONFIGS_PATH}/${configId}`,
11341
11938
  body,
11939
+ requestSchema: GatewayConfigUpdateRequestSchema,
11342
11940
  responseSchema: GatewayWriteResponseSchema,
11343
11941
  auth: this.auth,
11344
11942
  numRetries: this.numRetries
@@ -11466,6 +12064,7 @@ var AIGatewayGuardrailsClient = class {
11466
12064
  baseUrl: this.baseUrl,
11467
12065
  path: AI_GW_GUARDRAILS_PATH,
11468
12066
  body,
12067
+ requestSchema: GatewayGuardrailCreateRequestSchema,
11469
12068
  responseSchema: GatewayGuardrailCreateResponseSchema,
11470
12069
  auth: this.auth,
11471
12070
  numRetries: this.numRetries
@@ -11492,6 +12091,7 @@ var AIGatewayGuardrailsClient = class {
11492
12091
  baseUrl: this.baseUrl,
11493
12092
  path: `${AI_GW_GUARDRAILS_PATH}/${guardrailId}`,
11494
12093
  body,
12094
+ requestSchema: GatewayGuardrailUpdateRequestSchema,
11495
12095
  responseSchema: GatewayWriteResponseSchema,
11496
12096
  auth: this.auth,
11497
12097
  numRetries: this.numRetries
@@ -11567,7 +12167,8 @@ var AIGatewayProvidersClient = class {
11567
12167
  * Fetch one provider binding. Verified live 2026-08-29.
11568
12168
  *
11569
12169
  * @remarks The response can contain provider credential material. Do not log or persist it,
11570
- * and do not enable SDK debug logging around this call in production.
12170
+ * and avoid logging the complete returned object. SDK debug logs redact the known credential
12171
+ * fields for this operation.
11571
12172
  * @param providerId - Provider UUID.
11572
12173
  * @returns Provider configuration and lifecycle detail.
11573
12174
  * @example
@@ -11584,6 +12185,7 @@ var AIGatewayProvidersClient = class {
11584
12185
  method: "GET",
11585
12186
  baseUrl: this.baseUrl,
11586
12187
  path: `${AI_GW_PROVIDERS_PATH}/${providerId}`,
12188
+ secretOperation: "providers.get",
11587
12189
  responseSchema: GatewayProviderDetailSchema,
11588
12190
  auth: this.auth,
11589
12191
  numRetries: this.numRetries
@@ -11624,6 +12226,7 @@ var AIGatewayProvidersClient = class {
11624
12226
  baseUrl: this.baseUrl,
11625
12227
  path: AI_GW_PROVIDERS_PATH,
11626
12228
  body,
12229
+ requestSchema: GatewayProviderCreateRequestSchema,
11627
12230
  responseSchema: GatewayProviderCreateResponseSchema,
11628
12231
  auth: this.auth,
11629
12232
  numRetries: this.numRetries
@@ -11651,6 +12254,7 @@ var AIGatewayProvidersClient = class {
11651
12254
  baseUrl: this.baseUrl,
11652
12255
  path: `${AI_GW_PROVIDERS_PATH}/${providerId}`,
11653
12256
  body,
12257
+ requestSchema: GatewayProviderUpdateRequestSchema,
11654
12258
  responseSchema: GatewayWriteResponseSchema,
11655
12259
  auth: this.auth,
11656
12260
  numRetries: this.numRetries
@@ -11711,13 +12315,14 @@ var AIGatewayApiKeysClient = class {
11711
12315
  });
11712
12316
  }
11713
12317
  /** @internal */
11714
- writeAt(method, path, body) {
11715
- assertUuid(body.workspace_id, "workspace_id");
12318
+ writeAt(method, path, body, requestSchema, secretOperation) {
11716
12319
  return request({
11717
12320
  method,
11718
12321
  baseUrl: this.baseUrl,
11719
12322
  path,
11720
12323
  body,
12324
+ requestSchema,
12325
+ secretOperation,
11721
12326
  responseSchema: GatewayWriteResponseSchema,
11722
12327
  auth: this.auth,
11723
12328
  numRetries: this.numRetries
@@ -11776,13 +12381,15 @@ var AIGatewayApiKeysClient = class {
11776
12381
  numRetries: this.numRetries
11777
12382
  });
11778
12383
  }
11779
- rotateAt(path, keyId, body = {}) {
12384
+ rotateAt(path, keyId, body, secretOperation) {
11780
12385
  assertUuid(keyId, "keyId");
11781
12386
  return request({
11782
12387
  method: "POST",
11783
12388
  baseUrl: this.baseUrl,
11784
12389
  path: `${path}/${keyId}/rotate`,
11785
12390
  body,
12391
+ requestSchema: GatewayApiKeyRotateRequestSchema,
12392
+ secretOperation,
11786
12393
  responseSchema: GatewayApiKeyRotateResponseSchema,
11787
12394
  auth: this.auth,
11788
12395
  numRetries: this.numRetries
@@ -11806,11 +12413,11 @@ var AIGatewayApiKeysClient = class {
11806
12413
  }
11807
12414
  /** Rotate a service key; capture the returned secret. @example `const rotated = await gw.apiKeys.rotateService(keyId);` */
11808
12415
  async rotateService(keyId, body = {}) {
11809
- return this.rotateAt(AI_GW_API_KEYS_SERVICE_PATH, keyId, body);
12416
+ return this.rotateAt(AI_GW_API_KEYS_SERVICE_PATH, keyId, body, "apiKeys.rotateService");
11810
12417
  }
11811
12418
  /** Rotate a user key; capture the returned secret. @example `const rotated = await gw.apiKeys.rotateUser(keyId);` */
11812
12419
  async rotateUser(keyId, body = {}) {
11813
- return this.rotateAt(AI_GW_API_KEYS_USER_PATH, keyId, body);
12420
+ return this.rotateAt(AI_GW_API_KEYS_USER_PATH, keyId, body, "apiKeys.rotateUser");
11814
12421
  }
11815
12422
  /**
11816
12423
  * Create a service API key.
@@ -11831,7 +12438,13 @@ var AIGatewayApiKeysClient = class {
11831
12438
  * ```
11832
12439
  */
11833
12440
  async createService(body) {
11834
- return this.writeAt("POST", AI_GW_API_KEYS_SERVICE_PATH, body);
12441
+ return this.writeAt(
12442
+ "POST",
12443
+ AI_GW_API_KEYS_SERVICE_PATH,
12444
+ body,
12445
+ GatewayServiceApiKeyCreateRequestSchema,
12446
+ "apiKeys.createService"
12447
+ );
11835
12448
  }
11836
12449
  /**
11837
12450
  * Create a user API key.
@@ -11853,12 +12466,18 @@ var AIGatewayApiKeysClient = class {
11853
12466
  * ```
11854
12467
  */
11855
12468
  async createUser(body) {
11856
- return this.writeAt("POST", AI_GW_API_KEYS_USER_PATH, body);
12469
+ return this.writeAt(
12470
+ "POST",
12471
+ AI_GW_API_KEYS_USER_PATH,
12472
+ body,
12473
+ GatewayUserApiKeyCreateRequestSchema,
12474
+ "apiKeys.createUser"
12475
+ );
11857
12476
  }
11858
12477
  /**
11859
12478
  * Update a service API key.
11860
12479
  * @param keyId - Key UUID.
11861
- * @param body - Replacement fields.
12480
+ * @param body - One or more fields to update.
11862
12481
  * @returns The raw update response. Shape unverified against a live tenant — see the PRD.
11863
12482
  * @example
11864
12483
  * ```ts
@@ -11876,12 +12495,17 @@ var AIGatewayApiKeysClient = class {
11876
12495
  */
11877
12496
  async updateService(keyId, body) {
11878
12497
  assertUuid(keyId, "keyId");
11879
- return this.writeAt("PUT", `${AI_GW_API_KEYS_SERVICE_PATH}/${keyId}`, body);
12498
+ return this.writeAt(
12499
+ "PUT",
12500
+ `${AI_GW_API_KEYS_SERVICE_PATH}/${keyId}`,
12501
+ body,
12502
+ GatewayApiKeyUpdateRequestSchema
12503
+ );
11880
12504
  }
11881
12505
  /**
11882
12506
  * Update a user API key.
11883
12507
  * @param keyId - Key UUID.
11884
- * @param body - Replacement fields.
12508
+ * @param body - One or more fields to update.
11885
12509
  * @returns The raw update response. Shape unverified against a live tenant — see the PRD.
11886
12510
  * @example
11887
12511
  * ```ts
@@ -11900,7 +12524,12 @@ var AIGatewayApiKeysClient = class {
11900
12524
  */
11901
12525
  async updateUser(keyId, body) {
11902
12526
  assertUuid(keyId, "keyId");
11903
- return this.writeAt("PUT", `${AI_GW_API_KEYS_USER_PATH}/${keyId}`, body);
12527
+ return this.writeAt(
12528
+ "PUT",
12529
+ `${AI_GW_API_KEYS_USER_PATH}/${keyId}`,
12530
+ body,
12531
+ GatewayApiKeyUpdateRequestSchema
12532
+ );
11904
12533
  }
11905
12534
  };
11906
12535
 
@@ -11964,8 +12593,8 @@ var AIGatewayIntegrationsClient = class {
11964
12593
  * Create an integration.
11965
12594
  *
11966
12595
  * @remarks
11967
- * `body.key` (the provider API key) is a live secret. Setting `PANW_AI_SEC_DEBUG` will
11968
- * print it, unredacted, to the SDK's own debug log.
12596
+ * `body.key` (the provider API key) is a live secret. SDK debug logs replace known
12597
+ * credential fields with `[REDACTED]`, but callers must still avoid logging the input object.
11969
12598
  *
11970
12599
  * @param body - Provider id, name, slug, and provider-specific configuration.
11971
12600
  * @returns The raw create response. Shape unverified against a live tenant — see the PRD.
@@ -11990,6 +12619,8 @@ var AIGatewayIntegrationsClient = class {
11990
12619
  baseUrl: this.baseUrl,
11991
12620
  path: AI_GW_INTEGRATIONS_PATH,
11992
12621
  body,
12622
+ requestSchema: GatewayIntegrationCreateRequestSchema,
12623
+ secretOperation: "integrations.create",
11993
12624
  responseSchema: GatewayWriteResponseSchema,
11994
12625
  auth: this.auth,
11995
12626
  numRetries: this.numRetries
@@ -11998,7 +12629,7 @@ var AIGatewayIntegrationsClient = class {
11998
12629
  /**
11999
12630
  * Update an integration.
12000
12631
  * @param integrationId - Integration UUID.
12001
- * @param body - Replacement fields.
12632
+ * @param body - One or more fields to update.
12002
12633
  * @returns The raw update response. Shape unverified against a live tenant — see the PRD.
12003
12634
  * @example
12004
12635
  * ```ts
@@ -12013,12 +12644,13 @@ var AIGatewayIntegrationsClient = class {
12013
12644
  */
12014
12645
  async update(integrationId, body) {
12015
12646
  assertUuid(integrationId, "integrationId");
12016
- if (body.ai_provider_id !== void 0) assertUuid(body.ai_provider_id, "ai_provider_id");
12017
12647
  return request({
12018
12648
  method: "PUT",
12019
12649
  baseUrl: this.baseUrl,
12020
12650
  path: `${AI_GW_INTEGRATIONS_PATH}/${integrationId}`,
12021
12651
  body,
12652
+ requestSchema: GatewayIntegrationUpdateRequestSchema,
12653
+ secretOperation: "integrations.update",
12022
12654
  responseSchema: GatewayWriteResponseSchema,
12023
12655
  auth: this.auth,
12024
12656
  numRetries: this.numRetries
@@ -12074,9 +12706,9 @@ var AIGatewayIntegrationsClient = class {
12074
12706
  });
12075
12707
  }
12076
12708
  /**
12077
- * Replace which models this integration exposes.
12709
+ * Bulk-update model enablement for this integration.
12078
12710
  * @param integrationId - Integration UUID.
12079
- * @param body - Full model list; this is a replace, not a merge.
12711
+ * @param body - One or more model entries to update; omission is not documented as deletion.
12080
12712
  * @returns The raw response. Shape unverified against a live tenant — see the PRD.
12081
12713
  * @example
12082
12714
  * ```ts
@@ -12095,6 +12727,7 @@ var AIGatewayIntegrationsClient = class {
12095
12727
  baseUrl: this.baseUrl,
12096
12728
  path: `${AI_GW_INTEGRATIONS_PATH}/${integrationId}/models`,
12097
12729
  body,
12730
+ requestSchema: GatewayIntegrationModelsBulkUpdateRequestSchema,
12098
12731
  responseSchema: GatewayWriteResponseSchema,
12099
12732
  auth: this.auth,
12100
12733
  numRetries: this.numRetries
@@ -12106,7 +12739,7 @@ var AIGatewayIntegrationsClient = class {
12106
12739
  * @remarks
12107
12740
  * `global_workspace_access` is an **object** on this read, not a boolean, despite the
12108
12741
  * field name — `{ enabled, rate_limits, usage_limits }`. The corresponding write
12109
- * ({@link setWorkspaces}) DOES send a plain boolean; the two are not symmetric.
12742
+ * ({@link setWorkspaces}) uses the same object shape.
12110
12743
  *
12111
12744
  * @param integrationId - Integration UUID.
12112
12745
  * @returns Bound workspaces plus the `global_workspace_access` object.
@@ -12131,9 +12764,9 @@ var AIGatewayIntegrationsClient = class {
12131
12764
  });
12132
12765
  }
12133
12766
  /**
12134
- * Replace which workspaces may use this integration.
12767
+ * Bulk-update which workspaces may use this integration.
12135
12768
  * @param integrationId - Integration UUID.
12136
- * @param body - Workspace bindings or a global-access flag.
12769
+ * @param body - Workspace bindings, global-access settings, or explicit override behavior.
12137
12770
  * @returns The raw response. Shape unverified against a live tenant — see the PRD.
12138
12771
  * @example
12139
12772
  * ```ts
@@ -12141,7 +12774,7 @@ var AIGatewayIntegrationsClient = class {
12141
12774
  * const gw = new AIGatewayClient();
12142
12775
  *
12143
12776
  * await gw.integrations.setWorkspaces('f6692544-3265-49be-9711-bbdcebc079e4', {
12144
- * global_workspace_access: true,
12777
+ * global_workspace_access: { enabled: true },
12145
12778
  * });
12146
12779
  * ```
12147
12780
  */
@@ -12152,6 +12785,7 @@ var AIGatewayIntegrationsClient = class {
12152
12785
  baseUrl: this.baseUrl,
12153
12786
  path: `${AI_GW_INTEGRATIONS_PATH}/${integrationId}/workspaces`,
12154
12787
  body,
12788
+ requestSchema: GatewayIntegrationWorkspacesBulkUpdateRequestSchema,
12155
12789
  responseSchema: GatewayWriteResponseSchema,
12156
12790
  auth: this.auth,
12157
12791
  numRetries: this.numRetries
@@ -12285,6 +12919,8 @@ var AIGatewayMcpIntegrationsClient = class {
12285
12919
  baseUrl: this.baseUrl,
12286
12920
  path: AI_GW_MCP_INTEGRATIONS_PATH,
12287
12921
  body,
12922
+ requestSchema: McpIntegrationCreateRequestSchema,
12923
+ secretOperation: "mcpIntegrations.create",
12288
12924
  responseSchema: GatewayWriteResponseSchema,
12289
12925
  auth: this.auth,
12290
12926
  numRetries: this.numRetries
@@ -12298,6 +12934,8 @@ var AIGatewayMcpIntegrationsClient = class {
12298
12934
  baseUrl: this.baseUrl,
12299
12935
  path: `${AI_GW_MCP_INTEGRATIONS_PATH}/${mcpIntegrationId}`,
12300
12936
  body,
12937
+ requestSchema: McpIntegrationUpdateRequestSchema,
12938
+ secretOperation: "mcpIntegrations.update",
12301
12939
  responseSchema: GatewayWriteResponseSchema,
12302
12940
  auth: this.auth,
12303
12941
  numRetries: this.numRetries
@@ -12314,7 +12952,7 @@ var AIGatewayMcpIntegrationsClient = class {
12314
12952
  numRetries: this.numRetries
12315
12953
  });
12316
12954
  }
12317
- /** Replace capability enablement values. @example `await gw.mcpIntegrations.setCapabilities(id, { capabilities: [{ name: 'lookup', type: 'tool', enabled: true }] });` */
12955
+ /** Bulk-update capability enablement values. @example `await gw.mcpIntegrations.setCapabilities(id, { capabilities: [{ name: 'lookup', type: 'tool', enabled: true }] });` */
12318
12956
  async setCapabilities(mcpIntegrationId, body) {
12319
12957
  assertUuid(mcpIntegrationId, "mcpIntegrationId");
12320
12958
  return request({
@@ -12322,15 +12960,17 @@ var AIGatewayMcpIntegrationsClient = class {
12322
12960
  baseUrl: this.baseUrl,
12323
12961
  path: `${AI_GW_MCP_INTEGRATIONS_PATH}/${mcpIntegrationId}/capabilities`,
12324
12962
  body,
12963
+ requestSchema: McpIntegrationCapabilitiesBulkUpdateRequestSchema,
12325
12964
  responseSchema: McpIntegrationCapabilitiesUpdateResponseSchema,
12326
12965
  auth: this.auth,
12327
12966
  numRetries: this.numRetries
12328
12967
  });
12329
12968
  }
12330
12969
  /**
12331
- * Replace which workspaces may use this MCP integration.
12970
+ * Bulk-update which workspaces may use this MCP integration.
12332
12971
  * @param mcpIntegrationId - MCP integration UUID.
12333
- * @param body - Workspace bindings or a global-access flag; this is a replace, not a merge.
12972
+ * @param body - Workspace bindings or global-access settings. Use the explicit override flag
12973
+ * to request replacement behavior.
12334
12974
  * @returns An empty object. Verified live 2026-08-30.
12335
12975
  * @example
12336
12976
  * ```ts
@@ -12351,6 +12991,7 @@ var AIGatewayMcpIntegrationsClient = class {
12351
12991
  baseUrl: this.baseUrl,
12352
12992
  path: `${AI_GW_MCP_INTEGRATIONS_PATH}/${mcpIntegrationId}/workspaces`,
12353
12993
  body,
12994
+ requestSchema: McpIntegrationWorkspacesBulkUpdateRequestSchema,
12354
12995
  responseSchema: McpIntegrationWorkspacesUpdateResponseSchema,
12355
12996
  auth: this.auth,
12356
12997
  numRetries: this.numRetries
@@ -12429,8 +13070,8 @@ var AIGatewayDeploymentsClient = class {
12429
13070
  *
12430
13071
  * This is the **only** time `credentials.password` and `client_auth` are readable; the
12431
13072
  * detail read masks them. Capture them here or they are unrecoverable. Never log them.
12432
- * Note that setting `PANW_AI_SEC_DEBUG` will print the raw request/response, including
12433
- * `credentials.password`, to the SDK's own debug log regardless of this warning.
13073
+ * SDK debug logs redact returned one-time `client_auth` and registry passwords. Callers
13074
+ * must still capture the create response once and store it securely.
12434
13075
  *
12435
13076
  * @param body - Name, type, TSG, and auth settings.
12436
13077
  * @returns The creation receipt including the deployment's gateway credentials.
@@ -12455,6 +13096,8 @@ var AIGatewayDeploymentsClient = class {
12455
13096
  baseUrl: this.baseUrl,
12456
13097
  path: AI_GW_DEPLOYMENTS_PATH,
12457
13098
  body,
13099
+ requestSchema: GatewayDeploymentCreateRequestSchema,
13100
+ secretOperation: "deployments.create",
12458
13101
  responseSchema: GatewayDeploymentCreateResponseSchema,
12459
13102
  auth: this.auth,
12460
13103
  numRetries: this.numRetries
@@ -12484,6 +13127,8 @@ var AIGatewayDeploymentsClient = class {
12484
13127
  baseUrl: this.baseUrl,
12485
13128
  path: `${AI_GW_DEPLOYMENTS_PATH}/${deploymentId}`,
12486
13129
  body,
13130
+ requestSchema: GatewayDeploymentUpdateRequestSchema,
13131
+ secretOperation: "deployments.update",
12487
13132
  responseSchema: GatewayWriteResponseSchema,
12488
13133
  auth: this.auth,
12489
13134
  numRetries: this.numRetries
@@ -12586,8 +13231,8 @@ var AIGatewayPluginsClient = class {
12586
13231
  * Bind a plugin to the organisation.
12587
13232
  *
12588
13233
  * @remarks
12589
- * `body.credentials` (e.g. `AIRS_API_KEY`) is a live secret. Setting `PANW_AI_SEC_DEBUG`
12590
- * will print it, unredacted, to the SDK's own debug log.
13234
+ * `body.credentials` (e.g. `AIRS_API_KEY`) is a live secret. SDK debug logs replace each
13235
+ * credential value with `[REDACTED]`, but callers must still avoid logging the input object.
12591
13236
  *
12592
13237
  * @param body - Integration id and provider-specific credentials.
12593
13238
  * @returns The raw create response. Shape unverified against a live tenant — see the PRD.
@@ -12610,6 +13255,8 @@ var AIGatewayPluginsClient = class {
12610
13255
  baseUrl: this.baseUrl,
12611
13256
  path: AI_GW_PLUGINS_PATH,
12612
13257
  body,
13258
+ requestSchema: GatewayPluginCreateRequestSchema,
13259
+ secretOperation: "plugins.create",
12613
13260
  responseSchema: GatewayWriteResponseSchema,
12614
13261
  auth: this.auth,
12615
13262
  numRetries: this.numRetries
@@ -12651,7 +13298,7 @@ var AIGatewayOrganisationsClient = class {
12651
13298
  }
12652
13299
  /**
12653
13300
  * Update the calling organisation's settings.
12654
- * @param body - Replacement fields.
13301
+ * @param body - One or more fields to update.
12655
13302
  * @returns The raw update response. Shape unverified against a live tenant — see the PRD.
12656
13303
  * @example
12657
13304
  * ```ts
@@ -12667,6 +13314,7 @@ var AIGatewayOrganisationsClient = class {
12667
13314
  baseUrl: this.baseUrl,
12668
13315
  path: AI_GW_ORGANISATIONS_SELF_PATH,
12669
13316
  body,
13317
+ requestSchema: GatewayOrganisationUpdateRequestSchema,
12670
13318
  responseSchema: GatewayWriteResponseSchema,
12671
13319
  auth: this.auth,
12672
13320
  numRetries: this.numRetries
@@ -12677,8 +13325,8 @@ var AIGatewayOrganisationsClient = class {
12677
13325
  *
12678
13326
  * @remarks
12679
13327
  * The response includes a `scim_token` — a live secret. Never log the returned object.
12680
- * Note that setting `PANW_AI_SEC_DEBUG` will print it (unredacted) to the SDK's own debug
12681
- * log regardless of this warning, since debug logging only sanitizes header values.
13328
+ * SDK debug logs redact `scim_token` and known nested client-secret fields. Callers must
13329
+ * still avoid logging the input object or returned auth settings directly.
12682
13330
  *
12683
13331
  * @param tsgId - The TSG as a numeric string, not a UUID.
12684
13332
  * @returns Auth settings, including domains and the SCIM token.
@@ -12697,6 +13345,7 @@ var AIGatewayOrganisationsClient = class {
12697
13345
  method: "GET",
12698
13346
  baseUrl: this.baseUrl,
12699
13347
  path: aiGwOrganisationsAuthSettingsPath(tsgId),
13348
+ secretOperation: "organisations.getAuthSettings",
12700
13349
  responseSchema: AuthSettingsResponseSchema,
12701
13350
  auth: this.auth,
12702
13351
  numRetries: this.numRetries
@@ -12705,7 +13354,7 @@ var AIGatewayOrganisationsClient = class {
12705
13354
  /**
12706
13355
  * Update an organisation's auth settings.
12707
13356
  * @param tsgId - The TSG as a numeric string, not a UUID.
12708
- * @param body - Replacement fields.
13357
+ * @param body - One or more auth-setting fields to update.
12709
13358
  * @returns The raw update response. Shape unverified against a live tenant — see the PRD.
12710
13359
  * @example
12711
13360
  * ```ts
@@ -12724,6 +13373,8 @@ var AIGatewayOrganisationsClient = class {
12724
13373
  baseUrl: this.baseUrl,
12725
13374
  path: aiGwOrganisationsAuthSettingsPath(tsgId),
12726
13375
  body,
13376
+ requestSchema: GatewayOrganisationAuthSettingsUpdateRequestSchema,
13377
+ secretOperation: "organisations.updateAuthSettings",
12727
13378
  responseSchema: GatewayWriteResponseSchema,
12728
13379
  auth: this.auth,
12729
13380
  numRetries: this.numRetries
@@ -12841,6 +13492,165 @@ var AIGatewayClient = class {
12841
13492
  this.auditLogs = new AIGatewayAuditLogsClient(adminOpts);
12842
13493
  }
12843
13494
  };
13495
+
13496
+ // src/ai-gateway/nested-values.ts
13497
+ var FORBIDDEN_SEGMENTS = /* @__PURE__ */ new Set(["__proto__", "constructor", "prototype"]);
13498
+ var ESCAPABLE = /* @__PURE__ */ new Set([".", "[", "]", "\\"]);
13499
+ function invalid(message) {
13500
+ throw new AISecSDKException(message, "AISEC_USER_REQUEST_PAYLOAD_ERROR" /* USER_REQUEST_PAYLOAD_ERROR */);
13501
+ }
13502
+ function pushProperty(tokens, value2, path) {
13503
+ if (!value2) invalid(`Invalid dotted path: ${path}`);
13504
+ if (FORBIDDEN_SEGMENTS.has(value2)) invalid(`Unsafe dotted path segment: ${value2}`);
13505
+ tokens.push(value2);
13506
+ }
13507
+ function parsePath(path) {
13508
+ if (!path) invalid("Dotted path must not be empty");
13509
+ const tokens = [];
13510
+ let property = "";
13511
+ let afterDot = false;
13512
+ let afterIndex = false;
13513
+ for (let i = 0; i < path.length; i++) {
13514
+ const char = path[i];
13515
+ if (char === "\\") {
13516
+ const escaped = path[++i];
13517
+ if (escaped === void 0 || !ESCAPABLE.has(escaped)) {
13518
+ invalid(`Invalid escape in dotted path: ${path}`);
13519
+ }
13520
+ if (afterIndex) invalid(`Missing dot after array index in path: ${path}`);
13521
+ property += escaped;
13522
+ afterDot = false;
13523
+ continue;
13524
+ }
13525
+ if (char === ".") {
13526
+ if (property) {
13527
+ pushProperty(tokens, property, path);
13528
+ property = "";
13529
+ } else if (!afterIndex) {
13530
+ invalid(`Invalid empty segment in dotted path: ${path}`);
13531
+ }
13532
+ afterDot = true;
13533
+ afterIndex = false;
13534
+ continue;
13535
+ }
13536
+ if (char === "[") {
13537
+ if (afterDot) invalid(`Invalid array segment in dotted path: ${path}`);
13538
+ if (property) {
13539
+ pushProperty(tokens, property, path);
13540
+ property = "";
13541
+ } else if (tokens.length === 0) {
13542
+ invalid(`Dotted paths must start with an object property: ${path}`);
13543
+ }
13544
+ const close = path.indexOf("]", i + 1);
13545
+ if (close === -1) invalid(`Unclosed array index in dotted path: ${path}`);
13546
+ const rawIndex = path.slice(i + 1, close);
13547
+ if (!/^(0|[1-9]\d*)$/.test(rawIndex)) invalid(`Invalid array index in dotted path: ${path}`);
13548
+ tokens.push(Number(rawIndex));
13549
+ i = close;
13550
+ afterIndex = true;
13551
+ afterDot = false;
13552
+ continue;
13553
+ }
13554
+ if (char === "]") invalid(`Unexpected ] in dotted path: ${path}`);
13555
+ if (afterIndex) invalid(`Missing dot after array index in path: ${path}`);
13556
+ property += char;
13557
+ afterDot = false;
13558
+ }
13559
+ if (property) pushProperty(tokens, property, path);
13560
+ else if (afterDot) invalid(`Dotted path must not end with a dot: ${path}`);
13561
+ if (tokens.length === 0) invalid(`Invalid dotted path: ${path}`);
13562
+ return tokens;
13563
+ }
13564
+ function isContainerFor(value2, expectArray) {
13565
+ return expectArray ? Array.isArray(value2) : typeof value2 === "object" && value2 !== null && !Array.isArray(value2);
13566
+ }
13567
+ function readSegment(container, segment) {
13568
+ return typeof segment === "number" ? container[segment] : container[segment];
13569
+ }
13570
+ function writeSegment(container, segment, value2) {
13571
+ if (typeof segment === "number") container[segment] = value2;
13572
+ else container[segment] = value2;
13573
+ }
13574
+ function assign(root, tokens, value2, replaceExisting) {
13575
+ let current = root;
13576
+ for (let i = 0; i < tokens.length; i++) {
13577
+ const segment = tokens[i];
13578
+ const final = i === tokens.length - 1;
13579
+ if (typeof segment === "number" && !Array.isArray(current)) {
13580
+ invalid("Array index conflicts with an object path");
13581
+ }
13582
+ if (typeof segment === "string" && Array.isArray(current)) {
13583
+ invalid("Object property conflicts with an array path");
13584
+ }
13585
+ const hasValue = Object.prototype.hasOwnProperty.call(current, segment);
13586
+ if (final) {
13587
+ if (hasValue && !replaceExisting) invalid("Duplicate dotted path");
13588
+ writeSegment(current, segment, value2);
13589
+ return;
13590
+ }
13591
+ const expectArray = typeof tokens[i + 1] === "number";
13592
+ if (!hasValue) {
13593
+ writeSegment(current, segment, expectArray ? [] : {});
13594
+ } else {
13595
+ const existing = readSegment(current, segment);
13596
+ if (!isContainerFor(existing, expectArray)) invalid("Dotted path shape conflict");
13597
+ }
13598
+ current = readSegment(current, segment);
13599
+ }
13600
+ }
13601
+ function assertDenseArrays(value2) {
13602
+ if (Array.isArray(value2)) {
13603
+ for (let i = 0; i < value2.length; i++) {
13604
+ if (!Object.prototype.hasOwnProperty.call(value2, i))
13605
+ invalid("Sparse arrays are not supported");
13606
+ assertDenseArrays(value2[i]);
13607
+ }
13608
+ return;
13609
+ }
13610
+ if (typeof value2 === "object" && value2 !== null) {
13611
+ for (const nested of Object.values(value2)) assertDenseArrays(nested);
13612
+ }
13613
+ }
13614
+ function cloneJson(value2) {
13615
+ if (Array.isArray(value2)) {
13616
+ return value2.map((item) => cloneJson(item));
13617
+ }
13618
+ if (typeof value2 === "object" && value2 !== null) {
13619
+ return Object.fromEntries(
13620
+ Object.entries(value2).map(([key, item]) => [key, cloneJson(item)])
13621
+ );
13622
+ }
13623
+ return value2;
13624
+ }
13625
+ function parseJsonValue(value2) {
13626
+ const result = GatewayJsonValueSchema.safeParse(value2);
13627
+ if (!result.success) invalid("Dotted value must be finite JSON");
13628
+ return cloneJson(result.data);
13629
+ }
13630
+ function buildDottedObject(entries) {
13631
+ const parsed = entries.map((entry) => ({
13632
+ tokens: parsePath(entry.path),
13633
+ value: parseJsonValue(entry.value)
13634
+ }));
13635
+ const identities = /* @__PURE__ */ new Set();
13636
+ for (const entry of parsed) {
13637
+ const identity = JSON.stringify(entry.tokens);
13638
+ if (identities.has(identity)) invalid("Duplicate dotted path");
13639
+ identities.add(identity);
13640
+ }
13641
+ const result = {};
13642
+ for (const entry of parsed) assign(result, entry.tokens, entry.value, false);
13643
+ assertDenseArrays(result);
13644
+ return result;
13645
+ }
13646
+ function setDottedValue(input, path, value2) {
13647
+ const parsedInput = GatewayJsonObjectSchema.safeParse(input);
13648
+ if (!parsedInput.success) invalid("Input must be a finite JSON object");
13649
+ const result = cloneJson(parsedInput.data);
13650
+ assign(result, parsePath(path), parseJsonValue(value2), true);
13651
+ assertDenseArrays(result);
13652
+ return result;
13653
+ }
12844
13654
  export {
12845
13655
  AIGatewayApiKeysClient,
12846
13656
  AIGatewayAuditLogsClient,
@@ -12857,6 +13667,18 @@ export {
12857
13667
  AIGatewayWorkspacesClient,
12858
13668
  AIRS_ENDPOINTS,
12859
13669
  AISecSDKException,
13670
+ AI_GATEWAY_DEPLOYMENT_STATUSES,
13671
+ AI_GATEWAY_DEPLOYMENT_TYPES,
13672
+ AI_GATEWAY_KNOWN_API_KEY_SCOPES,
13673
+ AI_GATEWAY_KNOWN_CACHE_MODES,
13674
+ AI_GATEWAY_KNOWN_CONFIG_STRATEGIES,
13675
+ AI_GATEWAY_KNOWN_MCP_AUTH_TYPES,
13676
+ AI_GATEWAY_KNOWN_MCP_TRANSPORTS,
13677
+ AI_GATEWAY_KNOWN_RATE_LIMIT_TYPES,
13678
+ AI_GATEWAY_KNOWN_RATE_LIMIT_UNITS,
13679
+ AI_GATEWAY_MUTABLE_MCP_CAPABILITY_TYPES,
13680
+ AI_GATEWAY_REDACTED,
13681
+ AI_GATEWAY_SECRET_FIELDS,
12860
13682
  AI_GW_ADMIN_ENDPOINT,
12861
13683
  AI_GW_API_KEYS_SERVICE_PATH,
12862
13684
  AI_GW_API_KEYS_USER_PATH,
@@ -13108,39 +13930,100 @@ export {
13108
13930
  FileScanDataSchema,
13109
13931
  FileScanResult,
13110
13932
  FileType,
13933
+ GatewayApiKeyCreateRequestSchema,
13934
+ GatewayApiKeyRotateRequestSchema,
13111
13935
  GatewayApiKeyRotateResponseSchema,
13936
+ GatewayApiKeyRotationPolicySchema,
13112
13937
  GatewayApiKeySchema,
13938
+ GatewayApiKeyScopeSchema,
13939
+ GatewayApiKeyUpdateRequestSchema,
13113
13940
  GatewayAuditLogRecordSchema,
13114
13941
  GatewayAuditLogsResponseSchema,
13942
+ GatewayAzureAIConfigurationSchema,
13943
+ GatewayAzureDeploymentConfigurationSchema,
13944
+ GatewayAzureOpenAIConfigurationSchema,
13945
+ GatewayBedrockConfigurationSchema,
13115
13946
  GatewayChartRecordSchema,
13947
+ GatewayConfigCacheModeSchema,
13948
+ GatewayConfigCreateRequestSchema,
13116
13949
  GatewayConfigCreateResponseSchema,
13117
13950
  GatewayConfigDetailSchema,
13118
13951
  GatewayConfigSchema,
13952
+ GatewayConfigStrategySchema,
13953
+ GatewayConfigUpdateRequestSchema,
13119
13954
  GatewayConfigVersionSchema,
13955
+ GatewayCortexConfigurationSchema,
13956
+ GatewayCustomHostConfigurationSchema,
13957
+ GatewayDefaultsInputSchema,
13958
+ GatewayDeploymentAuthSettingsInputSchema,
13959
+ GatewayDeploymentCreateRequestSchema,
13120
13960
  GatewayDeploymentCreateResponseSchema,
13121
13961
  GatewayDeploymentDetailSchema,
13122
13962
  GatewayDeploymentPingResponseSchema,
13123
13963
  GatewayDeploymentSchema,
13964
+ GatewayDeploymentStatusSchema,
13965
+ GatewayDeploymentTypeSchema,
13966
+ GatewayDeploymentUpdateRequestSchema,
13967
+ GatewayGlobalWorkspaceAccessInputSchema,
13124
13968
  GatewayGlobalWorkspaceAccessSchema,
13125
13969
  GatewayGroupRowSchema,
13970
+ GatewayGuardrailActionsSchema,
13971
+ GatewayGuardrailCheckSchema,
13972
+ GatewayGuardrailCreateRequestSchema,
13126
13973
  GatewayGuardrailCreateResponseSchema,
13127
13974
  GatewayGuardrailDetailSchema,
13128
13975
  GatewayGuardrailSchema,
13976
+ GatewayGuardrailUpdateRequestSchema,
13977
+ GatewayHuggingFaceConfigurationSchema,
13978
+ GatewayIntegrationCreateRequestSchema,
13979
+ GatewayIntegrationModelUpdateSchema,
13980
+ GatewayIntegrationModelsBulkUpdateRequestSchema,
13129
13981
  GatewayIntegrationModelsResponseSchema,
13130
13982
  GatewayIntegrationSchema,
13983
+ GatewayIntegrationUpdateRequestSchema,
13131
13984
  GatewayIntegrationWorkspaceSchema,
13985
+ GatewayIntegrationWorkspacesBulkUpdateRequestSchema,
13132
13986
  GatewayIntegrationWorkspacesResponseSchema,
13987
+ GatewayJsonObjectSchema,
13988
+ GatewayJsonValueSchema,
13133
13989
  GatewayLogRecordSchema,
13134
13990
  GatewayLogsResponseSchema,
13991
+ GatewayMcpAuthTypeSchema,
13992
+ GatewayMcpTransportSchema,
13993
+ GatewayMutableMcpCapabilityTypeSchema,
13994
+ GatewayOpenAIConfigurationSchema,
13995
+ GatewayOrganisationAuthSettingsUpdateRequestSchema,
13996
+ GatewayOrganisationUpdateRequestSchema,
13997
+ GatewayPluginCreateRequestSchema,
13135
13998
  GatewayPluginSchema,
13999
+ GatewayProviderCreateRequestSchema,
13136
14000
  GatewayProviderCreateResponseSchema,
13137
14001
  GatewayProviderDetailSchema,
13138
14002
  GatewayProviderSchema,
14003
+ GatewayProviderUpdateRequestSchema,
14004
+ GatewayRateLimitInputSchema,
13139
14005
  GatewayRateLimitSchema,
14006
+ GatewayRateLimitTypeSchema,
14007
+ GatewayRateLimitUnitSchema,
14008
+ GatewayRoutingCacheSchema,
14009
+ GatewayRoutingConfigSchema,
14010
+ GatewayRoutingRetrySchema,
14011
+ GatewayRoutingStrategySchema,
14012
+ GatewayRoutingTargetSchema,
14013
+ GatewaySageMakerConfigurationSchema,
14014
+ GatewaySecretMappingSchema,
14015
+ GatewayServiceApiKeyCreateRequestSchema,
14016
+ GatewayUsageLimitInputSchema,
13140
14017
  GatewayUsageLimitSchema,
14018
+ GatewayUserApiKeyCreateRequestSchema,
14019
+ GatewayVertexAIConfigurationSchema,
14020
+ GatewayWorkersAIConfigurationSchema,
14021
+ GatewayWorkspaceBindingSchema,
14022
+ GatewayWorkspaceCreateRequestSchema,
13141
14023
  GatewayWorkspaceCreateResponseSchema,
13142
14024
  GatewayWorkspaceDetailSchema,
13143
14025
  GatewayWorkspaceSchema,
14026
+ GatewayWorkspaceUpdateRequestSchema,
13144
14027
  GatewayWriteResponseSchema,
13145
14028
  GoalListResponseSchema,
13146
14029
  GoalSchema,
@@ -13244,12 +14127,17 @@ export {
13244
14127
  MaskedDataSchema,
13245
14128
  McEntrySchema,
13246
14129
  McReportSchema,
14130
+ McpIntegrationCapabilitiesBulkUpdateRequestSchema,
13247
14131
  McpIntegrationCapabilitiesResponseSchema,
13248
14132
  McpIntegrationCapabilitiesUpdateResponseSchema,
13249
14133
  McpIntegrationCapabilitySchema,
14134
+ McpIntegrationCapabilityUpdateSchema,
14135
+ McpIntegrationCreateRequestSchema,
13250
14136
  McpIntegrationDetailSchema,
13251
14137
  McpIntegrationMetadataSchema,
13252
14138
  McpIntegrationSchema,
14139
+ McpIntegrationUpdateRequestSchema,
14140
+ McpIntegrationWorkspacesBulkUpdateRequestSchema,
13253
14141
  McpIntegrationWorkspacesUpdateResponseSchema,
13254
14142
  MetadataCriterionSchema,
13255
14143
  MetadataSchema,
@@ -13493,6 +14381,7 @@ export {
13493
14381
  WebSocketConnectionParamsSchema,
13494
14382
  WeightedRegexSchema,
13495
14383
  aiGwOrganisationsAuthSettingsPath,
14384
+ buildDottedObject,
13496
14385
  collectAll,
13497
14386
  collectSkipPages,
13498
14387
  collectSpringPages,
@@ -13501,6 +14390,8 @@ export {
13501
14390
  jsonNullable,
13502
14391
  pageSchema,
13503
14392
  paginate,
13504
- serializeListing
14393
+ redactAIGatewaySecrets,
14394
+ serializeListing,
14395
+ setDottedValue
13505
14396
  };
13506
14397
  //# sourceMappingURL=index.js.map