@envsync-cloud/envsync-management-ts-sdk 0.9.1 → 0.10.0

package/dist/index.d.ts

@@ -54,6 +54,220 @@ declare abstract class BaseHttpRequest {
     abstract request<T>(options: ApiRequestOptions): CancelablePromise<T>;
 }
 
+type CleanupResponse = {
+    cleaned: number;
+};
+
+type CreateDynamicSecretEngineRequest = {
+    engine_type: CreateDynamicSecretEngineRequest.engine_type;
+    name: string;
+    config: ({
+        host: string;
+        port?: number;
+        database: string;
+        superuser: {
+            username: string;
+            password: string;
+        };
+        creation_statements?: Array<string>;
+        default_ttl_seconds?: number;
+        max_ttl_seconds?: number;
+    } | {
+        access_key_id: string;
+        secret_access_key: string;
+        region?: string;
+        iam_policy: string;
+        default_ttl_seconds?: number;
+        max_ttl_seconds?: number;
+    } | {
+        tenant_id: string;
+        client_id: string;
+        client_secret: string;
+        subscription_id: string;
+        roles?: Array<string>;
+        default_ttl_seconds?: number;
+        max_ttl_seconds?: number;
+    });
+    enabled?: boolean;
+};
+declare namespace CreateDynamicSecretEngineRequest {
+    enum engine_type {
+        POSTGRES = "postgres",
+        MYSQL = "mysql",
+        AWS_IAM = "aws-iam",
+        AZURE_SP = "azure-sp"
+    }
+}
+
+type CreateDynamicSecretLeaseRequest = {
+    app_id: string;
+    env_type_id: string;
+    variable_key: string;
+    ttl_seconds?: number;
+};
+
+type DynamicSecretEngineResponse = {
+    id: string;
+    org_id: string;
+    engine_type: DynamicSecretEngineResponse.engine_type;
+    name: string;
+    config: Record<string, any>;
+    enabled: boolean;
+    created_at: string;
+    updated_at: string;
+};
+declare namespace DynamicSecretEngineResponse {
+    enum engine_type {
+        POSTGRES = "postgres",
+        MYSQL = "mysql",
+        AWS_IAM = "aws-iam",
+        AZURE_SP = "azure-sp"
+    }
+}
+
+type DynamicSecretEnginesResponse = Array<DynamicSecretEngineResponse>;
+
+type DynamicSecretLeaseResponse = {
+    id: string;
+    engine_id: string;
+    app_id: string;
+    env_type_id: string;
+    variable_key: string;
+    credential_data: Record<string, any>;
+    expires_at: string;
+    revoked_at: string | null;
+    created_at: string;
+    updated_at: string;
+};
+
+type DynamicSecretLeasesResponse = Array<DynamicSecretLeaseResponse>;
+
+type ErrorResponse = {
+    error: string;
+};
+
+type RevokeLeaseResponse = {
+    message: string;
+    id: string;
+};
+
+type UpdateDynamicSecretEngineRequest = {
+    name?: string;
+    config?: ({
+        host: string;
+        port?: number;
+        database: string;
+        superuser: {
+            username: string;
+            password: string;
+        };
+        creation_statements?: Array<string>;
+        default_ttl_seconds?: number;
+        max_ttl_seconds?: number;
+    } | {
+        access_key_id: string;
+        secret_access_key: string;
+        region?: string;
+        iam_policy: string;
+        default_ttl_seconds?: number;
+        max_ttl_seconds?: number;
+    } | {
+        tenant_id: string;
+        client_id: string;
+        client_secret: string;
+        subscription_id: string;
+        roles?: Array<string>;
+        default_ttl_seconds?: number;
+        max_ttl_seconds?: number;
+    });
+    enabled?: boolean;
+};
+
+declare class DynamicSecretsService {
+    readonly httpRequest: BaseHttpRequest;
+    constructor(httpRequest: BaseHttpRequest);
+    /**
+     * Create Dynamic Secret Engine
+     * Create a new dynamic secret engine for short-lived credential generation
+     * @param requestBody
+     * @returns DynamicSecretEngineResponse Engine created successfully
+     * @throws ApiError
+     */
+    createDynamicSecretEngine(requestBody?: CreateDynamicSecretEngineRequest): CancelablePromise<DynamicSecretEngineResponse>;
+    /**
+     * Get All Dynamic Secret Engines
+     * Retrieve all dynamic secret engines for the organization
+     * @returns DynamicSecretEnginesResponse Engines retrieved successfully
+     * @throws ApiError
+     */
+    getAllDynamicSecretEngines(): CancelablePromise<DynamicSecretEnginesResponse>;
+    /**
+     * Get Dynamic Secret Engine
+     * Retrieve a specific dynamic secret engine by ID
+     * @param id
+     * @returns DynamicSecretEngineResponse Engine retrieved successfully
+     * @throws ApiError
+     */
+    getDynamicSecretEngine(id: string): CancelablePromise<DynamicSecretEngineResponse>;
+    /**
+     * Update Dynamic Secret Engine
+     * Update an existing dynamic secret engine
+     * @param id
+     * @param requestBody
+     * @returns DynamicSecretEngineResponse Engine updated successfully
+     * @throws ApiError
+     */
+    updateDynamicSecretEngine(id: string, requestBody?: UpdateDynamicSecretEngineRequest): CancelablePromise<DynamicSecretEngineResponse>;
+    /**
+     * Delete Dynamic Secret Engine
+     * Delete a dynamic secret engine (must have no active leases)
+     * @param id
+     * @returns ErrorResponse Engine deleted successfully
+     * @throws ApiError
+     */
+    deleteDynamicSecretEngine(id: string): CancelablePromise<ErrorResponse>;
+    /**
+     * Create Dynamic Secret Lease
+     * Generate short-lived credentials by creating a lease on an engine
+     * @param id
+     * @param requestBody
+     * @returns DynamicSecretLeaseResponse Lease created successfully
+     * @throws ApiError
+     */
+    createDynamicSecretLease(id: string, requestBody?: CreateDynamicSecretLeaseRequest): CancelablePromise<DynamicSecretLeaseResponse>;
+    /**
+     * Get Leases for Engine
+     * Retrieve all leases for a specific dynamic secret engine
+     * @param id
+     * @returns DynamicSecretLeasesResponse Leases retrieved successfully
+     * @throws ApiError
+     */
+    getDynamicSecretLeases(id: string): CancelablePromise<DynamicSecretLeasesResponse>;
+    /**
+     * Get Dynamic Secret Lease
+     * Retrieve a specific lease by ID
+     * @param leaseId
+     * @returns DynamicSecretLeaseResponse Lease retrieved successfully
+     * @throws ApiError
+     */
+    getDynamicSecretLease(leaseId: string): CancelablePromise<DynamicSecretLeaseResponse>;
+    /**
+     * Revoke Dynamic Secret Lease
+     * Revoke a lease and its associated credentials
+     * @param leaseId
+     * @returns RevokeLeaseResponse Lease revoked successfully
+     * @throws ApiError
+     */
+    revokeDynamicSecretLease(leaseId: string): CancelablePromise<RevokeLeaseResponse>;
+    /**
+     * Cleanup Expired Leases
+     * Mark all expired leases as revoked (admin operation)
+     * @returns CleanupResponse Cleanup completed
+     * @throws ApiError
+     */
+    cleanupExpiredLeases(): CancelablePromise<CleanupResponse>;
+}
+
 type CreateEnvTypeMappingRequest = {
     env_type_id: string;
     integration_binding_id: string;
@@ -460,6 +674,14 @@ type LicenseState = {
     last_verified_at?: string | null;
     last_error_code?: string | null;
     last_error_message?: string | null;
+    validation_mode?: LicenseState.validation_mode;
+    certificate_serial_hex?: string | null;
+    certificate_fingerprint_sha256?: string | null;
+    certificate_subject?: string | null;
+    certificate_issuer?: string | null;
+    certificate_expires_at?: string | null;
+    root_ca_fingerprint_sha256?: string | null;
+    validated_at?: string | null;
 };
 declare namespace LicenseState {
     enum status {
@@ -470,6 +692,11 @@ declare namespace LicenseState {
         ERROR = "error",
         LOCKED = "locked"
     }
+    enum validation_mode {
+        NONE = "none",
+        LEASE = "lease",
+        CERTIFICATE = "certificate"
+    }
 }
 
 type LicenseActionResponse = {
@@ -507,6 +734,180 @@ declare class LicenseService {
     verifyManagementLicense(): CancelablePromise<LicenseActionResponse>;
 }
 
+type CreateLogForwardingRequest = {
+    name: string;
+    provider_type: CreateLogForwardingRequest.provider_type;
+    config: Record<string, any>;
+    enabled?: boolean;
+};
+declare namespace CreateLogForwardingRequest {
+    enum provider_type {
+        DATADOG = "datadog",
+        SPLUNK = "splunk",
+        SUMO_LOGIC = "sumo-logic"
+    }
+}
+
+type LogForwardingResponse = {
+    id: string;
+    org_id: string;
+    name: string;
+    provider_type: LogForwardingResponse.provider_type;
+    config: Record<string, any>;
+    enabled: boolean;
+    created_at: string;
+    updated_at: string;
+};
+declare namespace LogForwardingResponse {
+    enum provider_type {
+        DATADOG = "datadog",
+        SPLUNK = "splunk",
+        SUMO_LOGIC = "sumo-logic"
+    }
+}
+
+type LogForwardingsResponse = Array<LogForwardingResponse>;
+
+declare class LogForwardingService {
+    readonly httpRequest: BaseHttpRequest;
+    constructor(httpRequest: BaseHttpRequest);
+    /**
+     * Create Log Forwarding Config
+     * Create a new log forwarding configuration for the organization
+     * @param requestBody
+     * @returns LogForwardingResponse Log forwarding config created successfully
+     * @throws ApiError
+     */
+    createLogForwardingConfig(requestBody?: CreateLogForwardingRequest): CancelablePromise<LogForwardingResponse>;
+    /**
+     * Get All Log Forwarding Configs
+     * Retrieve all log forwarding configurations for the organization
+     * @returns LogForwardingsResponse Log forwarding configs retrieved successfully
+     * @throws ApiError
+     */
+    getLogForwardingConfigs(): CancelablePromise<LogForwardingsResponse>;
+    /**
+     * Get Log Forwarding Config
+     * Retrieve a specific log forwarding configuration
+     * @param id
+     * @returns LogForwardingResponse Log forwarding config retrieved successfully
+     * @throws ApiError
+     */
+    getLogForwardingConfig(id: string): CancelablePromise<LogForwardingResponse>;
+    /**
+     * Delete Log Forwarding Config
+     * Delete a log forwarding configuration
+     * @param id
+     * @returns ErrorResponse Log forwarding config deleted successfully
+     * @throws ApiError
+     */
+    deleteLogForwardingConfig(id: string): CancelablePromise<ErrorResponse>;
+}
+
+type CreateOidcProviderRequest = {
+    /**
+     * CI/CD platform type
+     */
+    provider_type: CreateOidcProviderRequest.provider_type;
+    /**
+     * OIDC issuer URL
+     */
+    issuer_url: string;
+    /**
+     * Expected audience claim value
+     */
+    audience: string;
+    /**
+     * Subject patterns to allow (glob matching). Empty = allow all subjects from this issuer.
+     */
+    allowed_subjects?: Array<string>;
+};
+declare namespace CreateOidcProviderRequest {
+    /**
+     * CI/CD platform type
+     */
+    enum provider_type {
+        GITHUB_ACTIONS = "github_actions",
+        GITLAB_CI = "gitlab_ci",
+        KUBERNETES = "kubernetes",
+        GENERIC = "generic"
+    }
+}
+
+type OidcProviderResponse = {
+    id: string;
+    org_id: string;
+    provider_type: OidcProviderResponse.provider_type;
+    issuer_url: string;
+    audience: string;
+    enabled: boolean;
+    allowed_subjects: Array<string>;
+    machine_user_id: string | null;
+    created_at: string;
+    updated_at: string;
+};
+declare namespace OidcProviderResponse {
+    enum provider_type {
+        GITHUB_ACTIONS = "github_actions",
+        GITLAB_CI = "gitlab_ci",
+        KUBERNETES = "kubernetes",
+        GENERIC = "generic"
+    }
+}
+
+type OidcProvidersResponse = Array<OidcProviderResponse>;
+
+type UpdateOidcProviderRequest = {
+    audience?: string;
+    enabled?: boolean;
+    allowed_subjects?: Array<string>;
+};
+
+declare class OidcProvidersService {
+    readonly httpRequest: BaseHttpRequest;
+    constructor(httpRequest: BaseHttpRequest);
+    /**
+     * Register OIDC Provider
+     * Register a new OIDC provider for CI/CD machine authentication
+     * @param requestBody
+     * @returns OidcProviderResponse OIDC provider created successfully
+     * @throws ApiError
+     */
+    createOidcProvider(requestBody?: CreateOidcProviderRequest): CancelablePromise<OidcProviderResponse>;
+    /**
+     * Get All OIDC Providers
+     * Retrieve all OIDC providers for the organization
+     * @returns OidcProvidersResponse OIDC providers retrieved successfully
+     * @throws ApiError
+     */
+    getAllOidcProviders(): CancelablePromise<OidcProvidersResponse>;
+    /**
+     * Get OIDC Provider
+     * Retrieve a specific OIDC provider
+     * @param id
+     * @returns OidcProviderResponse OIDC provider retrieved successfully
+     * @throws ApiError
+     */
+    getOidcProvider(id: string): CancelablePromise<OidcProviderResponse>;
+    /**
+     * Update OIDC Provider
+     * Update an existing OIDC provider
+     * @param id
+     * @param requestBody
+     * @returns ErrorResponse OIDC provider updated successfully
+     * @throws ApiError
+     */
+    updateOidcProvider(id: string, requestBody?: UpdateOidcProviderRequest): CancelablePromise<ErrorResponse>;
+    /**
+     * Delete OIDC Provider
+     * Delete an existing OIDC provider
+     * @param id
+     * @returns ErrorResponse OIDC provider deleted successfully
+     * @throws ApiError
+     */
+    deleteOidcProvider(id: string): CancelablePromise<ErrorResponse>;
+}
+
 type AcceptOrgInviteRequest = {
     org_data: {
         name: string;
@@ -680,6 +1081,326 @@ declare class OnboardingService {
     deleteUserInvite(inviteId: string): CancelablePromise<DeleteUserInviteResponse>;
 }
 
+type CreateRotationPolicyRequest = {
+    app_id: string;
+    env_type_id: string;
+    variable_key: string;
+    engine_type: CreateRotationPolicyRequest.engine_type;
+    schedule_cron: string;
+    dual_window_minutes?: number;
+    enabled?: boolean;
+    connection_config: Record<string, any>;
+};
+declare namespace CreateRotationPolicyRequest {
+    enum engine_type {
+        POSTGRES = "postgres",
+        MYSQL = "mysql",
+        AWS_IAM = "aws-iam",
+        AZURE_SP = "azure-sp",
+        GCP_SERVICE_ACCOUNT = "gcp-service-account",
+        CLOUDFLARE_PAGES = "cloudflare-pages",
+        SENDGRID = "sendgrid",
+        TWILIO = "twilio"
+    }
+}
+
+type RevokeOldCredentialResponse = {
+    message: string;
+    revoked_at: string;
+};
+
+type RotationPolicyResponse = {
+    id: string;
+    org_id: string;
+    app_id: string;
+    env_type_id: string;
+    variable_key: string;
+    engine_type: RotationPolicyResponse.engine_type;
+    schedule_cron: string;
+    dual_window_minutes: number;
+    enabled: boolean;
+    last_rotated_at: string | null;
+    next_rotation_at: string | null;
+    created_at: string;
+    updated_at: string;
+};
+declare namespace RotationPolicyResponse {
+    enum engine_type {
+        POSTGRES = "postgres",
+        MYSQL = "mysql",
+        AWS_IAM = "aws-iam",
+        AZURE_SP = "azure-sp",
+        GCP_SERVICE_ACCOUNT = "gcp-service-account",
+        CLOUDFLARE_PAGES = "cloudflare-pages",
+        SENDGRID = "sendgrid",
+        TWILIO = "twilio"
+    }
+}
+
+type RotationPoliciesResponse = Array<RotationPolicyResponse>;
+
+type RotationStateResponse = {
+    id: string;
+    rotation_policy_id: string;
+    rotated_at: string;
+    old_credential_expires_at: string;
+    old_credential_revoked: boolean;
+    revoked_at: string | null;
+    created_at: string;
+};
+
+type RotationStatesResponse = Array<RotationStateResponse>;
+
+type TriggerRotationResponse = {
+    message: string;
+    rotation_state_id: string;
+    new_credential_stored: boolean;
+    old_credential_expires_at: string;
+};
+
+type UpdateRotationPolicyRequest = {
+    schedule_cron?: string;
+    dual_window_minutes?: number;
+    enabled?: boolean;
+    connection_config?: Record<string, any>;
+};
+
+declare class RotationService {
+    readonly httpRequest: BaseHttpRequest;
+    constructor(httpRequest: BaseHttpRequest);
+    /**
+     * Create Rotation Policy
+     * Create a new secret rotation policy for a variable
+     * @param requestBody
+     * @returns RotationPolicyResponse Rotation policy created successfully
+     * @throws ApiError
+     */
+    createRotationPolicy(requestBody?: CreateRotationPolicyRequest): CancelablePromise<RotationPolicyResponse>;
+    /**
+     * Get Rotation Policies
+     * List all rotation policies for the organization
+     * @param appId
+     * @param envTypeId
+     * @param enabled
+     * @returns RotationPoliciesResponse Rotation policies retrieved successfully
+     * @throws ApiError
+     */
+    getRotationPolicies(appId?: string, envTypeId?: string, enabled?: 'true' | 'false'): CancelablePromise<RotationPoliciesResponse>;
+    /**
+     * Get Rotation Policy
+     * Get a specific rotation policy by ID
+     * @param id
+     * @returns RotationPolicyResponse Rotation policy retrieved successfully
+     * @throws ApiError
+     */
+    getRotationPolicy(id: string): CancelablePromise<RotationPolicyResponse>;
+    /**
+     * Update Rotation Policy
+     * Update an existing rotation policy
+     * @param id
+     * @param requestBody
+     * @returns RotationPolicyResponse Rotation policy updated successfully
+     * @throws ApiError
+     */
+    updateRotationPolicy(id: string, requestBody?: UpdateRotationPolicyRequest): CancelablePromise<RotationPolicyResponse>;
+    /**
+     * Delete Rotation Policy
+     * Delete a rotation policy
+     * @param id
+     * @returns ErrorResponse Rotation policy deleted successfully
+     * @throws ApiError
+     */
+    deleteRotationPolicy(id: string): CancelablePromise<ErrorResponse>;
+    /**
+     * Trigger Rotation
+     * Manually trigger a secret rotation for a policy
+     * @param id
+     * @returns TriggerRotationResponse Rotation executed successfully
+     * @throws ApiError
+     */
+    triggerRotation(id: string): CancelablePromise<TriggerRotationResponse>;
+    /**
+     * Get Rotation States
+     * Get the rotation state history for a policy
+     * @param id
+     * @returns RotationStatesResponse Rotation states retrieved successfully
+     * @throws ApiError
+     */
+    getRotationStates(id: string): CancelablePromise<RotationStatesResponse>;
+    /**
+     * Revoke Expired Credentials
+     * Revoke old credentials that have passed their dual-credential window
+     * @returns RevokeOldCredentialResponse Expired credentials revoked successfully
+     * @throws ApiError
+     */
+    revokeExpiredCredentials(): CancelablePromise<RevokeOldCredentialResponse>;
+}
+
+type CreateSamlProviderRequest = {
+    /**
+     * SAML identity provider type
+     */
+    provider_type: CreateSamlProviderRequest.provider_type;
+    /**
+     * Human-readable name for this provider
+     */
+    name: string;
+    /**
+     * SAML entity ID (issuer) from the IdP metadata
+     */
+    entity_id: string;
+    /**
+     * IdP SSO login URL
+     */
+    sso_url: string;
+    /**
+     * IdP X.509 certificate (PEM format) for signature validation
+     */
+    certificate: string;
+};
+declare namespace CreateSamlProviderRequest {
+    /**
+     * SAML identity provider type
+     */
+    enum provider_type {
+        OKTA = "okta",
+        ONELOGIN = "onelogin",
+        AZURE_AD = "azure-ad",
+        GOOGLE_WORKSPACE = "google-workspace",
+        DUO = "duo",
+        RIPPLING = "rippling",
+        ORACLE = "oracle",
+        PING_IDENTITY = "ping-identity"
+    }
+}
+
+type SamlProviderResponse = {
+    id: string;
+    org_id: string;
+    provider_type: SamlProviderResponse.provider_type;
+    name: string;
+    entity_id: string;
+    sso_url: string;
+    certificate: string;
+    enabled: boolean;
+    created_at: string;
+    updated_at: string;
+};
+declare namespace SamlProviderResponse {
+    enum provider_type {
+        OKTA = "okta",
+        ONELOGIN = "onelogin",
+        AZURE_AD = "azure-ad",
+        GOOGLE_WORKSPACE = "google-workspace",
+        DUO = "duo",
+        RIPPLING = "rippling",
+        ORACLE = "oracle",
+        PING_IDENTITY = "ping-identity"
+    }
+}
+
+type SamlProvidersResponse = Array<SamlProviderResponse>;
+
+type UpdateSamlProviderRequest = {
+    name?: string;
+    entity_id?: string;
+    sso_url?: string;
+    certificate?: string;
+    enabled?: boolean;
+};
+
+declare class SamlProvidersService {
+    readonly httpRequest: BaseHttpRequest;
+    constructor(httpRequest: BaseHttpRequest);
+    /**
+     * Register SAML Provider
+     * Register a new SAML identity provider for SSO authentication
+     * @param requestBody
+     * @returns SamlProviderResponse SAML provider created successfully
+     * @throws ApiError
+     */
+    createSamlProvider(requestBody?: CreateSamlProviderRequest): CancelablePromise<SamlProviderResponse>;
+    /**
+     * Get All SAML Providers
+     * Retrieve all SAML providers for the organization
+     * @returns SamlProvidersResponse SAML providers retrieved successfully
+     * @throws ApiError
+     */
+    getAllSamlProviders(): CancelablePromise<SamlProvidersResponse>;
+    /**
+     * Get SAML Provider
+     * Retrieve a specific SAML provider
+     * @param id
+     * @returns SamlProviderResponse SAML provider retrieved successfully
+     * @throws ApiError
+     */
+    getSamlProvider(id: string): CancelablePromise<SamlProviderResponse>;
+    /**
+     * Update SAML Provider
+     * Update an existing SAML provider
+     * @param id
+     * @param requestBody
+     * @returns ErrorResponse SAML provider updated successfully
+     * @throws ApiError
+     */
+    updateSamlProvider(id: string, requestBody?: UpdateSamlProviderRequest): CancelablePromise<ErrorResponse>;
+    /**
+     * Delete SAML Provider
+     * Delete an existing SAML provider
+     * @param id
+     * @returns ErrorResponse SAML provider deleted successfully
+     * @throws ApiError
+     */
+    deleteSamlProvider(id: string): CancelablePromise<ErrorResponse>;
+    /**
+     * Get SAML SP Metadata
+     * Retrieve SAML Service Provider metadata XML for the organization
+     * @param id
+     * @returns string SP metadata XML
+     * @throws ApiError
+     */
+    getSamlMetadata(id: string): CancelablePromise<string>;
+}
+
+type SamlSsoRequest = {
+    /**
+     * SAML provider ID to initiate SSO with
+     */
+    provider_id: string;
+};
+
+type SamlSsoResponse = {
+    /**
+     * URL to redirect the user to for IdP authentication
+     */
+    redirect_url: string;
+    /**
+     * AuthnRequest ID for tracking
+     */
+    request_id: string;
+};
+
+declare class SamlSsoService {
+    readonly httpRequest: BaseHttpRequest;
+    constructor(httpRequest: BaseHttpRequest);
+    /**
+     * Initiate SAML SSO
+     * Start SP-initiated SAML SSO flow by generating an AuthnRequest redirect URL
+     * @param requestBody
+     * @returns SamlSsoResponse Redirect URL generated
+     * @throws ApiError
+     */
+    initiateSamlSso(requestBody?: SamlSsoRequest): CancelablePromise<SamlSsoResponse>;
+    /**
+     * SAML Assertion Consumer Service
+     * Receive and validate SAML Response from the identity provider (ACS endpoint)
+     * @param orgId
+     * @returns any Authentication successful
+     * @throws ApiError
+     */
+    handleSamlAcs(orgId: string): CancelablePromise<any>;
+}
+
 type SystemStatusState = {
     edition: SystemStatusState.edition;
     single_org_mode: boolean;
@@ -715,9 +1436,15 @@ declare class SystemService {
 
 type HttpRequestConstructor = new (config: OpenAPIConfig) => BaseHttpRequest;
 declare class EnvSyncManagementAPISDK {
+    readonly dynamicSecrets: DynamicSecretsService;
     readonly enterprise: EnterpriseService;
     readonly license: LicenseService;
+    readonly logForwarding: LogForwardingService;
+    readonly oidcProviders: OidcProvidersService;
     readonly onboarding: OnboardingService;
+    readonly rotation: RotationService;
+    readonly samlProviders: SamlProvidersService;
+    readonly samlSso: SamlSsoService;
     readonly system: SystemService;
     readonly request: BaseHttpRequest;
     constructor(config?: Partial<OpenAPIConfig>, HttpRequest?: HttpRequestConstructor);
@@ -740,8 +1467,9 @@ declare class ApiError extends Error {
     constructor(request: ApiRequestOptions, response: ApiResult, message: string);
 }
 
-type ErrorResponse = {
-    error: string;
-};
+/**
+ * Optional. Bearer-token clients can use this to select the active organization for the request. Ignored for cookie sessions and API keys.
+ */
+type XEnvSyncOrgIdHeader = string;
 
-export { type AcceptOrgInviteRequest, type AcceptOrgInviteResponse, type AcceptUserInviteRequest, type AcceptUserInviteResponse, ApiError, BaseHttpRequest, CancelError, CancelablePromise, type CreateEnvTypeMappingRequest, CreateIntegrationBindingRequest, CreateManualSyncRunRequest, type CreateOrgInviteRequest, type CreateOrgInviteResponse, type CreateOrgSecretRequest, CreateProviderConnectionRequest, type CreateUserInviteRequest, type CreateUserInviteResponse, type DeleteUserInviteResponse, EnterpriseProviderProfile, type EnterpriseProvidersResponse, EnterpriseService, EnvSyncManagementAPISDK, type EnvTypeMapping, type EnvTypeMappingsResponse, type ErrorResponse, type GetOrgInviteByCodeResponse, type GetUserInviteByTokenResponse, IntegrationBinding, type IntegrationBindingsResponse, type LicenseActionResponse, LicenseService, LicenseState, type LicenseStatusResponse, OnboardingService, OpenAPI, type OpenAPIConfig, type OrgSecret, type OrgSecretModelResponse, type OrgSecretsResponse, ProviderConnection, type ProviderConnectionsResponse, SyncAuditEvent, type SyncAuditEventsResponse, SyncRun, type SyncRunsResponse, SystemService, type SystemStatusResponse, SystemStatusState, type UpdateEnvTypeMappingRequest, type UpdateIntegrationBindingRequest, type UpdateOrgSecretRequest, UpdateProviderConnectionRequest, type UpdateUserInviteRequest, type UpdateUserInviteResponse };
+export { type AcceptOrgInviteRequest, type AcceptOrgInviteResponse, type AcceptUserInviteRequest, type AcceptUserInviteResponse, ApiError, BaseHttpRequest, CancelError, CancelablePromise, type CleanupResponse, CreateDynamicSecretEngineRequest, type CreateDynamicSecretLeaseRequest, type CreateEnvTypeMappingRequest, CreateIntegrationBindingRequest, CreateLogForwardingRequest, CreateManualSyncRunRequest, CreateOidcProviderRequest, type CreateOrgInviteRequest, type CreateOrgInviteResponse, type CreateOrgSecretRequest, CreateProviderConnectionRequest, CreateRotationPolicyRequest, CreateSamlProviderRequest, type CreateUserInviteRequest, type CreateUserInviteResponse, type DeleteUserInviteResponse, DynamicSecretEngineResponse, type DynamicSecretEnginesResponse, type DynamicSecretLeaseResponse, type DynamicSecretLeasesResponse, DynamicSecretsService, EnterpriseProviderProfile, type EnterpriseProvidersResponse, EnterpriseService, EnvSyncManagementAPISDK, type EnvTypeMapping, type EnvTypeMappingsResponse, type ErrorResponse, type GetOrgInviteByCodeResponse, type GetUserInviteByTokenResponse, IntegrationBinding, type IntegrationBindingsResponse, type LicenseActionResponse, LicenseService, LicenseState, type LicenseStatusResponse, LogForwardingResponse, LogForwardingService, type LogForwardingsResponse, OidcProviderResponse, type OidcProvidersResponse, OidcProvidersService, OnboardingService, OpenAPI, type OpenAPIConfig, type OrgSecret, type OrgSecretModelResponse, type OrgSecretsResponse, ProviderConnection, type ProviderConnectionsResponse, type RevokeLeaseResponse, type RevokeOldCredentialResponse, type RotationPoliciesResponse, RotationPolicyResponse, RotationService, type RotationStateResponse, type RotationStatesResponse, SamlProviderResponse, type SamlProvidersResponse, SamlProvidersService, type SamlSsoRequest, type SamlSsoResponse, SamlSsoService, SyncAuditEvent, type SyncAuditEventsResponse, SyncRun, type SyncRunsResponse, SystemService, type SystemStatusResponse, SystemStatusState, type TriggerRotationResponse, type UpdateDynamicSecretEngineRequest, type UpdateEnvTypeMappingRequest, type UpdateIntegrationBindingRequest, type UpdateOidcProviderRequest, type UpdateOrgSecretRequest, UpdateProviderConnectionRequest, type UpdateRotationPolicyRequest, type UpdateSamlProviderRequest, type UpdateUserInviteRequest, type UpdateUserInviteResponse, type XEnvSyncOrgIdHeader };