@cube-dev/platform-client 0.19.0 → 0.19.1

package/dist/schema.d.ts

@@ -1100,6 +1100,84 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/api/v1/deployments/{deploymentId}/ossie-conversions": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Start an Apache Ossie conversion
+         * @description Converts between a Cube data model and an [Apache Ossie (Open Semantic Interchange)](https://github.com/apache/ossie) model, and returns polling URLs immediately. An export converts the YAML data model of the deployment's latest successful build, or uploaded YAML files, to one Ossie model; an import converts an uploaded Ossie model to Cube data model files. Neither changes the deployment. Only static YAML model files are converted; JavaScript models and Jinja-templated files are skipped. Uploads are limited to 512 files of at most 2 MiB each and 20 MiB in total. Requests and results are kept for at most one day. Requires `SchemaRead` or `SchemaUpdate` access. This is currently in preview — reach out to the Cube support team to activate it for your account.
+         */
+        post: operations["OssieConversionPublicController.startConversion"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/v1/deployments/{deploymentId}/ossie-conversions/{conversionId}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /** Get an Apache Ossie conversion status */
+        get: operations["OssieConversionPublicController.conversionStatus"];
+        put?: never;
+        post?: never;
+        /** Cancel an Apache Ossie conversion */
+        delete: operations["OssieConversionPublicController.cancelConversion"];
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/v1/deployments/{deploymentId}/ossie-conversions/{conversionId}/files": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Get the files of an Apache Ossie conversion
+         * @description Returns `ossie.yaml` for an export, or the generated Cube data model files for an import; empty when the conversion failed. Returns 409 while the conversion is still running or if it ended without a result.
+         */
+        get: operations["OssieConversionPublicController.conversionFiles"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/v1/deployments/{deploymentId}/ossie-conversions/{conversionId}/result": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Get an Apache Ossie conversion result
+         * @description Returns the outcome, counts, issues and converter versions of a completed conversion. Returns 409 while the conversion is still running or if it ended without a result. Read the converted files from `/files`.
+         */
+        get: operations["OssieConversionPublicController.conversionResult"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/api/v1/deployments/{deploymentId}/pods": {
         parameters: {
             query?: never;
@@ -3089,6 +3167,122 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/api/v1/roles/": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * List custom roles
+         * @description **🔒 Admin only.** Requires administrator privileges — the authenticated principal (API key, embed JWT, or any bearer token) must belong to a user with the admin role.
+         *
+         *     Lists the tenant's custom roles, newest first, cursor-paginated via `first`/`after`. Cube's built-in roles are not included — they are not tenant data.
+         */
+        get: operations["RolesPublicController.getRoles"];
+        put?: never;
+        /**
+         * Create a custom role
+         * @description **🔒 Admin only.** Requires administrator privileges — the authenticated principal (API key, embed JWT, or any bearer token) must belong to a user with the admin role.
+         *
+         *     Creates a role and returns it with the `id` to assign it by. Role names are unique, so recreating one that already exists answers `409`.
+         *
+         *     To scope the role to specific deployments, send a `Deployment` policy whose `resources` are the deployment ids as strings. A role usually also needs a `Global` policy naming the holder's license tier — `AIBIView`, `AIBIExplore` or `AIBIDevelop` — which is what the console calls the role's Base Role. Pick a tier that covers the deployment actions you grant: the console forces Developer (`AIBIDevelop`) for every deployment action except `DeploymentRead`, `DeploymentAgentRead`, `DownloadData` and `ChatHistoryRead`, so a lower tier here produces a role its role builder would not have let you save:
+         *
+         *     ```json
+         *     {
+         *       "name": "team-analytics",
+         *       "policies": [
+         *         {
+         *           "resourceType": "Global",
+         *           "actions": ["AIBIDevelop"],
+         *           "resources": ["All"]
+         *         },
+         *         {
+         *           "resourceType": "Deployment",
+         *           "actions": ["DeploymentRead", "SchemaRead", "SqlRunnerRead"],
+         *           "resources": ["1734"]
+         *         }
+         *       ]
+         *     }
+         *     ```
+         *
+         *     The tier is **not** required and is **not** derived from the deployment actions: a role sent without one is accepted and simply confers no tier, so a user holding only that role gets the deployment grants and still cannot use the product. That is deliberate — a user holds the union of their roles, so a role that only adds a deployment scope beside another role carrying the tier is valid — but it means nothing warns you. Omit the `Global` policy only when some other role supplies the tier. Note the console does require one on every role it writes, so a role created here without a tier shows an unset Base Role when opened in the role builder.
+         *
+         *     Use `["All"]` as `resources` to cover every deployment, and `"All"` as the single action for full access to the deployments in scope. A policy is rejected when it grants no action, when it names no resource, or when a `Deployment` resource is not a deployment id — pass the numeric id returned by POST /build/api/v1/deployments, not a slug or a name. Ids are checked for shape, not existence, so an id whose deployment was since deleted is kept and simply grants nothing.
+         */
+        post: operations["RolesPublicController.createRole"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/v1/roles/{roleId}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Get a custom role
+         * @description **🔒 Admin only.** Requires administrator privileges — the authenticated principal (API key, embed JWT, or any bearer token) must belong to a user with the admin role.
+         *
+         *     Returns one custom role by id, with its policies.
+         */
+        get: operations["RolesPublicController.getRole"];
+        /**
+         * Update a custom role
+         * @description **🔒 Admin only.** Requires administrator privileges — the authenticated principal (API key, embed JWT, or any bearer token) must belong to a user with the admin role.
+         *
+         *     Updates the fields present in the body and leaves the rest alone. Sending `policies` replaces the role's policies outright, so read the role first if you mean to add one rather than start over. Renaming to a name another role already holds answers `409`. Built-in roles cannot be updated.
+         */
+        put: operations["RolesPublicController.updateRole"];
+        post?: never;
+        /**
+         * Delete a custom role
+         * @description **🔒 Admin only.** Requires administrator privileges — the authenticated principal (API key, embed JWT, or any bearer token) must belong to a user with the admin role.
+         *
+         *     Deletes the role and every assignment of it, from users and from groups. Built-in roles cannot be deleted.
+         */
+        delete: operations["RolesPublicController.deleteRole"];
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/v1/roles/{roleId}/users/{userId}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        /**
+         * Assign a role to a user
+         * @description **🔒 Admin only.** Requires administrator privileges — the authenticated principal (API key, embed JWT, or any bearer token) must belong to a user with the admin role.
+         *
+         *     Gives the user everything the role grants. Idempotent — assigning a role the user already holds changes nothing. Returns `404` if either the user or the role is unknown.
+         *
+         *     Unlike the other endpoints here, this one is not limited to your custom roles: it also accepts the id of a built-in role, and assigning one grants everything that role confers. **Cube's Admin role is the exception and cannot be granted this way** — it is not among the built-in roles this endpoint resolves, so its id returns `404`. No call to this endpoint can make a user an account-wide administrator.
+         */
+        put: operations["RolesPublicController.assignRoleToUser"];
+        post?: never;
+        /**
+         * Remove a role from a user
+         * @description **🔒 Admin only.** Requires administrator privileges — the authenticated principal (API key, embed JWT, or any bearer token) must belong to a user with the admin role.
+         *
+         *     Takes the role away from the user. Idempotent — removing a role the user does not hold changes nothing. Returns `404` if the user is unknown.
+         */
+        delete: operations["RolesPublicController.removeRoleFromUser"];
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/api/v1/spec": {
         parameters: {
             query?: never;
@@ -3770,6 +3964,7 @@ export interface components {
             createdAt: string;
             dedicatedAiEngineerRegion?: string | null;
             deploymentId?: number | null;
+            displayName?: string | null;
             embeddingLlm?: components["schemas"]["AgentLlm"] | null;
             embeddingUrl?: string | null;
             id: number;
@@ -5875,6 +6070,122 @@ export interface components {
         };
         /** @enum {string} */
         OidcTokenConfigDTOSubjectType: "deployment" | "user";
+        OssieConversionCounts: {
+            /** @description Cube cubes. */
+            cubes: number;
+            /** @description Ossie datasets. */
+            datasets: number;
+            /** @description Ossie dataset fields. */
+            fields: number;
+            /** @description Cube data model files. */
+            files: number;
+            issues: components["schemas"]["OssieConversionIssueCounts"];
+            /** @description Ossie metrics. */
+            metrics: number;
+            /** @description Ossie relationships. */
+            relationships: number;
+            /** @description Cube views. */
+            views: number;
+        };
+        OssieConversionFile: {
+            content: string;
+            /** @description For an export, `ossie.yaml`. For an import, the path of the generated file within the data model project. */
+            path: string;
+        };
+        OssieConversionFilesListResponse: {
+            /** @description The converted files, empty when the conversion failed. */
+            items: components["schemas"]["OssieConversionFile"][];
+            pageInfo: components["schemas"]["PageInfo"];
+        };
+        OssieConversionInput: {
+            /** @description Import only. The dataset the generated view is rooted at, for an Ossie model whose relationships do not determine one. */
+            baseCube?: string | null;
+            /** @description Import only. The warehouse dialect whose expressions are preferred where the Ossie model has several; ANSI_SQL is always the fallback. Defaults to the dialect of the deployment's default data source, or ANSI_SQL. */
+            dialect?: components["schemas"]["OssieConversionInputDialect"] | null;
+            /** @description 'export' converts a Cube data model to an Ossie model; 'import' converts an Ossie model to Cube data model files. */
+            direction: components["schemas"]["OssieConversionInputDirection"];
+            /** @description Export with source 'files' only. Relative `.yml`/`.yaml` paths mapped to their contents, such as a local checkout of the data model. Other files are not accepted. */
+            files?: {
+                [key: string]: string;
+            } | null;
+            /** @description Import only. The Ossie YAML document to convert. */
+            ossieYaml?: string | null;
+            /** @description Export only. 'deployment' (the default) converts the YAML data model of the deployment's latest successful build; 'files' converts the `files` sent with the request. */
+            source?: components["schemas"]["OssieConversionInputSource"] | null;
+            /** @description Export only. Refuse a metric whose value join fan-out could change, instead of converting it with a warning. Defaults to false for a whole-model export and true for a view export. */
+            strictFanout?: boolean | null;
+            /** @description Export only. Convert just this view's public members instead of the whole model. */
+            view?: string | null;
+        };
+        /** @enum {string} */
+        OssieConversionInputDialect: "ANSI_SQL" | "SNOWFLAKE" | "DATABRICKS" | "BIGQUERY";
+        /** @enum {string} */
+        OssieConversionInputDirection: "export" | "import";
+        /** @enum {string} */
+        OssieConversionInputSource: "deployment" | "files";
+        OssieConversionIssue: {
+            /** @description The converter issue type, such as DROPPED_MEASURE or CONVERSION_FAILED. */
+            code: string;
+            /** @description The model element the issue is about. */
+            element?: string | null;
+            message: string;
+            /** @description ERROR fails the conversion. WARNING marks something dropped or changed. INFO marks something kept in another form. */
+            severity: components["schemas"]["OssieConversionIssueSeverity"];
+        };
+        OssieConversionIssueCounts: {
+            error: number;
+            info: number;
+            warning: number;
+        };
+        /** @enum {string} */
+        OssieConversionIssueSeverity: "ERROR" | "WARNING" | "INFO";
+        OssieConversionResultResponse: {
+            completedAt: string;
+            conversionId: string;
+            counts: components["schemas"]["OssieConversionCounts"];
+            deploymentId: number;
+            direction: components["schemas"]["OssieConversionResultResponseDirection"];
+            durationMs: number;
+            issues: components["schemas"]["OssieConversionIssue"][];
+            /** @description 'failed' exactly when an issue has severity ERROR. */
+            outcome: components["schemas"]["OssieConversionResultResponseOutcome"];
+            runtime: components["schemas"]["OssieConversionRuntime"];
+            /** @description SHA-256 of the converted input. */
+            sourceSha256: string;
+        };
+        /** @enum {string} */
+        OssieConversionResultResponseDirection: "export" | "import";
+        /** @enum {string} */
+        OssieConversionResultResponseOutcome: "success" | "failed";
+        OssieConversionRuntime: {
+            cubeConverterVersion: string;
+            /** @description The apache/ossie commit the converter was built from. */
+            ossieCommit: string;
+            ossieCoreVersion: string;
+        };
+        OssieConversionStartResponse: {
+            conversionId: string;
+            resultUrl: string;
+            status: components["schemas"]["OssieConversionStartResponseStatus"];
+            statusUrl: string;
+        };
+        /** @enum {string} */
+        OssieConversionStartResponseStatus: "QUEUED";
+        OssieConversionStatusResponse: {
+            conversionId: string;
+            deploymentId: number;
+            direction: components["schemas"]["OssieConversionStatusResponseDirection"];
+            /** @description Why the job ended without a result. */
+            error?: string | null;
+            startedAt: string;
+            /** @description One of QUEUED, RUNNING, COMPLETED, FAILED or CANCELLED. COMPLETED means a result is available, even when the conversion itself failed; read its outcome. FAILED means the job ended without a result. */
+            status: components["schemas"]["OssieConversionStatusResponseStatus"];
+            updatedAt: string;
+        };
+        /** @enum {string} */
+        OssieConversionStatusResponseDirection: "export" | "import";
+        /** @enum {string} */
+        OssieConversionStatusResponseStatus: "QUEUED" | "RUNNING" | "COMPLETED" | "FAILED" | "CANCELLED";
         PageInfo: {
             endCursor?: string | null;
             hasNextPage: boolean;
@@ -6468,11 +6779,36 @@ export interface components {
             /** @description The session id returned by `POST /api/v1/embed/generate-session`. Works whether or not the session has already been exchanged for a token. */
             sessionId: string;
         };
+        Role: {
+            description?: string | null;
+            id: number;
+            name: string;
+            policies: components["schemas"]["Policy"][];
+        };
+        RoleCreateBody: {
+            description?: string | null;
+            /** @description Unique role name. Cannot be one of the built-in role names, which are rejected with `400`: `Admin`, `Developer`, `AIBIDeveloper`, `D3User`, `AIBIUser`, `AIBIViewer`, `Guest`, `EmbedUser`. (The console additionally refuses `None` and `All` in its own role builder; those are accepted here.) */
+            name: string;
+            /** @description What the role grants. Scope a policy to specific deployments by setting `resourceType` to `Deployment` and listing the deployment ids — as returned by POST /build/api/v1/deployments — in `resources`, or `["All"]` for every deployment. An empty `policies` list is accepted and creates a role that grants nothing yet; an individual policy with no actions, or none naming a resource, is rejected. */
+            policies: components["schemas"]["Policy"][];
+        };
+        RoleUpdateBody: {
+            /** @description Omit to leave the description unchanged; `null` clears it. */
+            description?: string | null;
+            /** @description Omit to leave the name unchanged. `null` is rejected. */
+            name?: string;
+            /** @description Replaces the role's policies outright when present — there is no per-policy merge. Omit it to leave them unchanged, or send `[]` to remove them all. `null` is rejected, so a partly-filled client object cannot strip a role's grants by accident. */
+            policies?: components["schemas"]["Policy"][];
+        };
         RoleWithAccess: {
             actions: ("All" | "DeploymentsManage" | "DeploymentCreate" | "DeploymentRead" | "DeploymentUpdate" | "DeploymentDelete" | "SecretsManage" | "DownloadData" | "PlaygroundRead" | "SchemaRead" | "SchemaUpdate" | "SchemaUpdateDevBranches" | "APMRead" | "ChatHistoryRead" | "PreAggregationRead" | "PreAggregationBuild" | "AlertsCreate" | "AlertsRead" | "AlertsUpdate" | "AlertsDelete" | "AuditLogManage" | "BillingRead" | "SqlRunnerRead" | "DataAssetsRead" | "DataAssetsManage" | "CubeNetworkConnect" | "ReportRead" | "ReportEdit" | "ReportManage" | "WorkbookManage" | "WorkbookRead" | "WorkbookEdit" | "ChatThreadRead" | "AgentManage" | "AgentRead" | "AgentSpaceManage" | "AgentAdmin" | "DeploymentAgentRead" | "ScheduledTasksCreate" | "ScheduledTaskRead" | "OAuthIntegrationsManage" | "OAuthIntegrationsIssueTokens" | "McpToolsManage" | "AIBIDevelop" | "AIBIExplore" | "AIBIView" | "ChartPalettesManage" | "DashboardThemesManage" | "AIBIDeveloper" | "AIBIUser" | "AIBIViewer" | "EmbedDeploymentRead" | "EmbedDashboardRead" | "FolderRead" | "FolderEdit" | "FolderManage")[];
             id: number;
             name: string;
         };
+        RolesListResponse: {
+            items: components["schemas"]["Role"][];
+            pageInfo: components["schemas"]["PageInfo"];
+        };
         RunScheduledTaskResponse: {
             /** @description The chat thread this run writes to. */
             chatThreadUuid: string;
@@ -9256,6 +9592,131 @@ export interface operations {
             };
         };
     };
+    "OssieConversionPublicController.startConversion": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                deploymentId: number;
+            };
+            cookie?: never;
+        };
+        /** @description OssieConversionInput */
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["OssieConversionInput"];
+            };
+        };
+        responses: {
+            202: {
+                headers: {
+                    [name: string]: any;
+                };
+                content: {
+                    "application/json": components["schemas"]["OssieConversionStartResponse"];
+                };
+            };
+        };
+    };
+    "OssieConversionPublicController.conversionStatus": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                deploymentId: number;
+                conversionId: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            200: {
+                headers: {
+                    [name: string]: any;
+                };
+                content: {
+                    "application/json": components["schemas"]["OssieConversionStatusResponse"];
+                };
+            };
+        };
+    };
+    "OssieConversionPublicController.cancelConversion": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                deploymentId: number;
+                conversionId: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Successful response */
+            200: {
+                headers: {
+                    [name: string]: any;
+                };
+                content: {
+                    "application/json": any;
+                };
+            };
+            /** @description Cancelled, or already finished. */
+            204: {
+                headers: {
+                    [name: string]: any;
+                };
+                content?: never;
+            };
+        };
+    };
+    "OssieConversionPublicController.conversionFiles": {
+        parameters: {
+            query?: {
+                after?: string | null;
+                first?: number | null;
+            };
+            header?: never;
+            path: {
+                deploymentId: number;
+                conversionId: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            200: {
+                headers: {
+                    [name: string]: any;
+                };
+                content: {
+                    "application/json": components["schemas"]["OssieConversionFilesListResponse"];
+                };
+            };
+        };
+    };
+    "OssieConversionPublicController.conversionResult": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                deploymentId: number;
+                conversionId: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            200: {
+                headers: {
+                    [name: string]: any;
+                };
+                content: {
+                    "application/json": components["schemas"]["OssieConversionResultResponse"];
+                };
+            };
+        };
+    };
     "DeploymentsPublicController.pods": {
         parameters: {
             query?: {
@@ -12298,6 +12759,251 @@ export interface operations {
             };
         };
     };
+    "RolesPublicController.getRoles": {
+        parameters: {
+            query?: {
+                after?: string | null;
+                first?: number | null;
+            };
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            200: {
+                headers: {
+                    [name: string]: any;
+                };
+                content: {
+                    "application/json": components["schemas"]["RolesListResponse"];
+                };
+            };
+        };
+    };
+    "RolesPublicController.createRole": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /** @description RoleCreateBody */
+        requestBody?: {
+            content: {
+                "application/json": components["schemas"]["RoleCreateBody"];
+            };
+        };
+        responses: {
+            200: {
+                headers: {
+                    [name: string]: any;
+                };
+                content: {
+                    "application/json": components["schemas"]["Role"];
+                };
+            };
+            /** @description The name is one of the built-in role names, or a policy grants no action, names no resource, or scopes a `Deployment` to something that is not a deployment id. */
+            400: {
+                headers: {
+                    [name: string]: any;
+                };
+                content?: never;
+            };
+            /** @description A role with that name already exists. */
+            409: {
+                headers: {
+                    [name: string]: any;
+                };
+                content?: never;
+            };
+        };
+    };
+    "RolesPublicController.getRole": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                roleId: number;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            200: {
+                headers: {
+                    [name: string]: any;
+                };
+                content: {
+                    "application/json": components["schemas"]["Role"];
+                };
+            };
+            /** @description No custom role has that id. */
+            404: {
+                headers: {
+                    [name: string]: any;
+                };
+                content?: never;
+            };
+        };
+    };
+    "RolesPublicController.updateRole": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                roleId: number;
+            };
+            cookie?: never;
+        };
+        /** @description RoleUpdateBody */
+        requestBody?: {
+            content: {
+                "application/json": components["schemas"]["RoleUpdateBody"];
+            };
+        };
+        responses: {
+            200: {
+                headers: {
+                    [name: string]: any;
+                };
+                content: {
+                    "application/json": components["schemas"]["Role"];
+                };
+            };
+            /** @description `name` or `policies` was `null`, the new name is one of the built-in role names, or a policy is not a valid one. */
+            400: {
+                headers: {
+                    [name: string]: any;
+                };
+                content?: never;
+            };
+            /** @description No custom role has that id. */
+            404: {
+                headers: {
+                    [name: string]: any;
+                };
+                content?: never;
+            };
+            /** @description A role with that name already exists. */
+            409: {
+                headers: {
+                    [name: string]: any;
+                };
+                content?: never;
+            };
+        };
+    };
+    "RolesPublicController.deleteRole": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                roleId: number;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Successful response */
+            200: {
+                headers: {
+                    [name: string]: any;
+                };
+                content: {
+                    "application/json": any;
+                };
+            };
+            /** @description Role deleted. */
+            204: {
+                headers: {
+                    [name: string]: any;
+                };
+                content?: never;
+            };
+            /** @description No custom role has that id. */
+            404: {
+                headers: {
+                    [name: string]: any;
+                };
+                content?: never;
+            };
+        };
+    };
+    "RolesPublicController.assignRoleToUser": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                roleId: number;
+                userId: number;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Successful response */
+            200: {
+                headers: {
+                    [name: string]: any;
+                };
+                content: {
+                    "application/json": any;
+                };
+            };
+            /** @description Role assigned, or already held. */
+            204: {
+                headers: {
+                    [name: string]: any;
+                };
+                content?: never;
+            };
+            /** @description The user or the role is unknown. Cube's Admin role is not resolvable here, so its id answers `404` as well. */
+            404: {
+                headers: {
+                    [name: string]: any;
+                };
+                content?: never;
+            };
+        };
+    };
+    "RolesPublicController.removeRoleFromUser": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                roleId: number;
+                userId: number;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Successful response */
+            200: {
+                headers: {
+                    [name: string]: any;
+                };
+                content: {
+                    "application/json": any;
+                };
+            };
+            /** @description Role removed, or was not held. */
+            204: {
+                headers: {
+                    [name: string]: any;
+                };
+                content?: never;
+            };
+            /** @description The user is unknown. */
+            404: {
+                headers: {
+                    [name: string]: any;
+                };
+                content?: never;
+            };
+        };
+    };
     "OpenApiSpecPublicController.getSpec": {
         parameters: {
             query?: never;