@envsync-cloud/envsync-ts-sdk 0.10.4 → 0.20.0

package/dist/index.d.ts

@@ -427,13 +427,13 @@ declare class AuthenticationService {
      */
     whoami(): CancelablePromise<WhoAmIResponse>;
     /**
-     * Create Workspace
-     * Create a new workspace for the current enterprise web session and switch into it
+     * Create Organization
+     * Create a new organization for the current hosted web session and switch into it. Hosted only; self-host always 403.
      * @param requestBody
-     * @returns WhoAmIResponse Workspace created successfully
+     * @returns WhoAmIResponse Organization created successfully
      * @throws ApiError
      */
-    createWorkspace(requestBody?: {
+    createOrganization(requestBody?: {
         name: string;
     }): CancelablePromise<WhoAmIResponse>;
     /**
@@ -827,6 +827,620 @@ declare class ChangeRequestsService {
     cancelChangeRequest(id: string): CancelablePromise<ChangeRequestResponse>;
 }
 
+type CleanupResponse = {
+    cleaned: number;
+};
+
+type CreateDynamicSecretEngineRequest = {
+    engine_type: CreateDynamicSecretEngineRequest.engine_type;
+    name: string;
+    config: ({
+        host: string;
+        port?: number;
+        database: string;
+        superuser: {
+            username: string;
+            password: string;
+        };
+        creation_statements?: Array<string>;
+        default_ttl_seconds?: number;
+        max_ttl_seconds?: number;
+    } | {
+        access_key_id: string;
+        secret_access_key: string;
+        region?: string;
+        iam_policy: string;
+        default_ttl_seconds?: number;
+        max_ttl_seconds?: number;
+    } | {
+        tenant_id: string;
+        client_id: string;
+        client_secret: string;
+        subscription_id: string;
+        roles?: Array<string>;
+        default_ttl_seconds?: number;
+        max_ttl_seconds?: number;
+    });
+    enabled?: boolean;
+};
+declare namespace CreateDynamicSecretEngineRequest {
+    enum engine_type {
+        POSTGRES = "postgres",
+        MYSQL = "mysql",
+        AWS_IAM = "aws-iam",
+        AZURE_SP = "azure-sp"
+    }
+}
+
+type CreateDynamicSecretLeaseRequest = {
+    app_id: string;
+    env_type_id: string;
+    variable_key: string;
+    ttl_seconds?: number;
+};
+
+type DynamicSecretEngineResponse = {
+    id: string;
+    org_id: string;
+    engine_type: DynamicSecretEngineResponse.engine_type;
+    name: string;
+    config: Record<string, any>;
+    enabled: boolean;
+    created_at: string;
+    updated_at: string;
+};
+declare namespace DynamicSecretEngineResponse {
+    enum engine_type {
+        POSTGRES = "postgres",
+        MYSQL = "mysql",
+        AWS_IAM = "aws-iam",
+        AZURE_SP = "azure-sp"
+    }
+}
+
+type DynamicSecretEnginesResponse = Array<DynamicSecretEngineResponse>;
+
+type DynamicSecretLeaseResponse = {
+    id: string;
+    engine_id: string;
+    app_id: string;
+    env_type_id: string;
+    variable_key: string;
+    credential_data: Record<string, any>;
+    expires_at: string;
+    revoked_at: string | null;
+    created_at: string;
+    updated_at: string;
+};
+
+type DynamicSecretLeasesResponse = Array<DynamicSecretLeaseResponse>;
+
+type ErrorResponse = {
+    error: string;
+};
+
+type RevokeLeaseResponse = {
+    message: string;
+    id: string;
+};
+
+type UpdateDynamicSecretEngineRequest = {
+    name?: string;
+    config?: ({
+        host: string;
+        port?: number;
+        database: string;
+        superuser: {
+            username: string;
+            password: string;
+        };
+        creation_statements?: Array<string>;
+        default_ttl_seconds?: number;
+        max_ttl_seconds?: number;
+    } | {
+        access_key_id: string;
+        secret_access_key: string;
+        region?: string;
+        iam_policy: string;
+        default_ttl_seconds?: number;
+        max_ttl_seconds?: number;
+    } | {
+        tenant_id: string;
+        client_id: string;
+        client_secret: string;
+        subscription_id: string;
+        roles?: Array<string>;
+        default_ttl_seconds?: number;
+        max_ttl_seconds?: number;
+    });
+    enabled?: boolean;
+};
+
+declare class DynamicSecretsService {
+    readonly httpRequest: BaseHttpRequest;
+    constructor(httpRequest: BaseHttpRequest);
+    /**
+     * Create Dynamic Secret Engine
+     * Create a new dynamic secret engine for short-lived credential generation
+     * @param requestBody
+     * @returns DynamicSecretEngineResponse Engine created successfully
+     * @throws ApiError
+     */
+    createDynamicSecretEngine(requestBody?: CreateDynamicSecretEngineRequest): CancelablePromise<DynamicSecretEngineResponse>;
+    /**
+     * Get All Dynamic Secret Engines
+     * Retrieve all dynamic secret engines for the organization
+     * @returns DynamicSecretEnginesResponse Engines retrieved successfully
+     * @throws ApiError
+     */
+    getAllDynamicSecretEngines(): CancelablePromise<DynamicSecretEnginesResponse>;
+    /**
+     * Get Dynamic Secret Engine
+     * Retrieve a specific dynamic secret engine by ID
+     * @param id
+     * @returns DynamicSecretEngineResponse Engine retrieved successfully
+     * @throws ApiError
+     */
+    getDynamicSecretEngine(id: string): CancelablePromise<DynamicSecretEngineResponse>;
+    /**
+     * Update Dynamic Secret Engine
+     * Update an existing dynamic secret engine
+     * @param id
+     * @param requestBody
+     * @returns DynamicSecretEngineResponse Engine updated successfully
+     * @throws ApiError
+     */
+    updateDynamicSecretEngine(id: string, requestBody?: UpdateDynamicSecretEngineRequest): CancelablePromise<DynamicSecretEngineResponse>;
+    /**
+     * Delete Dynamic Secret Engine
+     * Delete a dynamic secret engine (must have no active leases)
+     * @param id
+     * @returns ErrorResponse Engine deleted successfully
+     * @throws ApiError
+     */
+    deleteDynamicSecretEngine(id: string): CancelablePromise<ErrorResponse>;
+    /**
+     * Create Dynamic Secret Lease
+     * Generate short-lived credentials by creating a lease on an engine
+     * @param id
+     * @param requestBody
+     * @returns DynamicSecretLeaseResponse Lease created successfully
+     * @throws ApiError
+     */
+    createDynamicSecretLease(id: string, requestBody?: CreateDynamicSecretLeaseRequest): CancelablePromise<DynamicSecretLeaseResponse>;
+    /**
+     * Get Leases for Engine
+     * Retrieve all leases for a specific dynamic secret engine
+     * @param id
+     * @returns DynamicSecretLeasesResponse Leases retrieved successfully
+     * @throws ApiError
+     */
+    getDynamicSecretLeases(id: string): CancelablePromise<DynamicSecretLeasesResponse>;
+    /**
+     * Get Dynamic Secret Lease
+     * Retrieve a specific lease by ID
+     * @param leaseId
+     * @returns DynamicSecretLeaseResponse Lease retrieved successfully
+     * @throws ApiError
+     */
+    getDynamicSecretLease(leaseId: string): CancelablePromise<DynamicSecretLeaseResponse>;
+    /**
+     * Revoke Dynamic Secret Lease
+     * Revoke a lease and its associated credentials
+     * @param leaseId
+     * @returns RevokeLeaseResponse Lease revoked successfully
+     * @throws ApiError
+     */
+    revokeDynamicSecretLease(leaseId: string): CancelablePromise<RevokeLeaseResponse>;
+    /**
+     * Cleanup Expired Leases
+     * Mark all expired leases as revoked (admin operation)
+     * @returns CleanupResponse Cleanup completed
+     * @throws ApiError
+     */
+    cleanupExpiredLeases(): CancelablePromise<CleanupResponse>;
+}
+
+type CreateEnvTypeMappingRequest = {
+    env_type_id: string;
+    integration_binding_id: string;
+    target_identifier: string;
+    branch_ref?: string | null;
+    path_prefix?: string | null;
+    metadata?: Record<string, any>;
+};
+
+type CreateIntegrationBindingRequest = {
+    provider_connection_id: string;
+    provider_type: CreateIntegrationBindingRequest.provider_type;
+    is_enabled?: boolean;
+    metadata?: Record<string, any>;
+};
+declare namespace CreateIntegrationBindingRequest {
+    enum provider_type {
+        GITHUB = "github",
+        GITLAB = "gitlab",
+        AWS_SSM = "aws-ssm",
+        VERCEL = "vercel",
+        GOOGLE_SECRET_MANAGER = "google-secret-manager"
+    }
+}
+
+type CreateManualSyncRunRequest = {
+    app_id?: string | null;
+    provider_type: CreateManualSyncRunRequest.provider_type;
+    metadata?: Record<string, any>;
+};
+declare namespace CreateManualSyncRunRequest {
+    enum provider_type {
+        GITHUB = "github",
+        GITLAB = "gitlab",
+        AWS_SSM = "aws-ssm",
+        VERCEL = "vercel",
+        GOOGLE_SECRET_MANAGER = "google-secret-manager"
+    }
+}
+
+type CreateOrgSecretRequest = {
+    key: string;
+    value: string;
+    description?: string | null;
+    metadata?: Record<string, any>;
+};
+
+type CreateProviderConnectionRequest = {
+    provider_type: CreateProviderConnectionRequest.provider_type;
+    name: string;
+    status?: CreateProviderConnectionRequest.status;
+    auth_config?: Record<string, any>;
+    metadata?: Record<string, any>;
+};
+declare namespace CreateProviderConnectionRequest {
+    enum provider_type {
+        GITHUB = "github",
+        GITLAB = "gitlab",
+        AWS_SSM = "aws-ssm",
+        VERCEL = "vercel",
+        GOOGLE_SECRET_MANAGER = "google-secret-manager"
+    }
+    enum status {
+        ACTIVE = "active",
+        INACTIVE = "inactive",
+        ERROR = "error"
+    }
+}
+
+type EnterpriseProviderProfile = {
+    id: EnterpriseProviderProfile.id;
+    name: string;
+    scope: string;
+    description: string;
+    connection_requirements: Array<string>;
+    binding_metadata_fields: Array<string>;
+    mapping_requirements: Array<string>;
+};
+declare namespace EnterpriseProviderProfile {
+    enum id {
+        GITHUB = "github",
+        GITLAB = "gitlab",
+        AWS_SSM = "aws-ssm",
+        VERCEL = "vercel",
+        GOOGLE_SECRET_MANAGER = "google-secret-manager"
+    }
+}
+
+type EnterpriseProvidersResponse = {
+    providers: Array<EnterpriseProviderProfile>;
+};
+
+type EnvTypeMapping = {
+    id: string;
+    org_id: string;
+    app_id: string;
+    env_type_id: string;
+    integration_binding_id: string;
+    target_identifier: string;
+    branch_ref?: string | null;
+    path_prefix?: string | null;
+    metadata: Record<string, any>;
+    created_at: string;
+    updated_at: string;
+};
+
+type EnvTypeMappingsResponse = Array<EnvTypeMapping>;
+
+type IntegrationBinding = {
+    id: string;
+    org_id: string;
+    app_id: string;
+    provider_connection_id: string;
+    provider_type: IntegrationBinding.provider_type;
+    is_enabled: boolean;
+    metadata: Record<string, any>;
+    created_at: string;
+    updated_at: string;
+};
+declare namespace IntegrationBinding {
+    enum provider_type {
+        GITHUB = "github",
+        GITLAB = "gitlab",
+        AWS_SSM = "aws-ssm",
+        VERCEL = "vercel",
+        GOOGLE_SECRET_MANAGER = "google-secret-manager"
+    }
+}
+
+type IntegrationBindingsResponse = Array<IntegrationBinding>;
+
+type OrgSecret = {
+    id: string;
+    org_id: string;
+    key: string;
+    value: string;
+    description?: string | null;
+    metadata: Record<string, any>;
+    created_at: string;
+    updated_at: string;
+};
+
+type OrgSecretModelResponse = {
+    resource: string;
+    description: string;
+    fields: Array<string>;
+};
+
+type OrgSecretsResponse = Array<OrgSecret>;
+
+type ProviderConnection = {
+    id: string;
+    org_id: string;
+    provider_type: ProviderConnection.provider_type;
+    name: string;
+    status: ProviderConnection.status;
+    auth_config: Record<string, any>;
+    metadata: Record<string, any>;
+    created_at: string;
+    updated_at: string;
+};
+declare namespace ProviderConnection {
+    enum provider_type {
+        GITHUB = "github",
+        GITLAB = "gitlab",
+        AWS_SSM = "aws-ssm",
+        VERCEL = "vercel",
+        GOOGLE_SECRET_MANAGER = "google-secret-manager"
+    }
+    enum status {
+        ACTIVE = "active",
+        INACTIVE = "inactive",
+        ERROR = "error"
+    }
+}
+
+type ProviderConnectionsResponse = Array<ProviderConnection>;
+
+type SyncAuditEvent = {
+    id: string;
+    org_id: string;
+    sync_run_id?: string | null;
+    app_id?: string | null;
+    env_type_id?: string | null;
+    provider_type: SyncAuditEvent.provider_type;
+    action: string;
+    result: SyncAuditEvent.result;
+    actor_user_id?: string | null;
+    details: Record<string, any>;
+    created_at: string;
+    updated_at: string;
+};
+declare namespace SyncAuditEvent {
+    enum provider_type {
+        GITHUB = "github",
+        GITLAB = "gitlab",
+        AWS_SSM = "aws-ssm",
+        VERCEL = "vercel",
+        GOOGLE_SECRET_MANAGER = "google-secret-manager"
+    }
+    enum result {
+        INFO = "info",
+        SUCCESS = "success",
+        ERROR = "error"
+    }
+}
+
+type SyncAuditEventsResponse = Array<SyncAuditEvent>;
+
+type SyncRun = {
+    id: string;
+    org_id: string;
+    app_id?: string | null;
+    provider_type: SyncRun.provider_type;
+    status: SyncRun.status;
+    actor_user_id?: string | null;
+    started_at: string;
+    completed_at?: string | null;
+    error_message?: string | null;
+    metadata: Record<string, any>;
+    created_at: string;
+    updated_at: string;
+};
+declare namespace SyncRun {
+    enum provider_type {
+        GITHUB = "github",
+        GITLAB = "gitlab",
+        AWS_SSM = "aws-ssm",
+        VERCEL = "vercel",
+        GOOGLE_SECRET_MANAGER = "google-secret-manager"
+    }
+    enum status {
+        PENDING = "pending",
+        RUNNING = "running",
+        SUCCEEDED = "succeeded",
+        FAILED = "failed"
+    }
+}
+
+type SyncRunsResponse = Array<SyncRun>;
+
+type UpdateEnvTypeMappingRequest = {
+    target_identifier?: string;
+    branch_ref?: string | null;
+    path_prefix?: string | null;
+    metadata?: Record<string, any>;
+};
+
+type UpdateIntegrationBindingRequest = {
+    is_enabled?: boolean;
+    metadata?: Record<string, any>;
+};
+
+type UpdateOrgSecretRequest = {
+    value?: string;
+    description?: string | null;
+    metadata?: Record<string, any>;
+};
+
+type UpdateProviderConnectionRequest = {
+    name?: string;
+    status?: UpdateProviderConnectionRequest.status;
+    auth_config?: Record<string, any>;
+    metadata?: Record<string, any>;
+};
+declare namespace UpdateProviderConnectionRequest {
+    enum status {
+        ACTIVE = "active",
+        INACTIVE = "inactive",
+        ERROR = "error"
+    }
+}
+
+declare class EnterpriseService {
+    readonly httpRequest: BaseHttpRequest;
+    constructor(httpRequest: BaseHttpRequest);
+    /**
+     * List Enterprise Providers
+     * @returns EnterpriseProvidersResponse Enterprise provider catalog
+     * @throws ApiError
+     */
+    listEnterpriseProviders(): CancelablePromise<EnterpriseProvidersResponse>;
+    /**
+     * Get Enterprise Org Secret Model
+     * @returns OrgSecretModelResponse Org secret model
+     * @throws ApiError
+     */
+    getEnterpriseOrgSecretModel(): CancelablePromise<OrgSecretModelResponse>;
+    /**
+     * List Enterprise Provider Connections
+     * @returns ProviderConnectionsResponse Provider connections
+     * @throws ApiError
+     */
+    listEnterpriseProviderConnections(): CancelablePromise<ProviderConnectionsResponse>;
+    /**
+     * Create Enterprise Provider Connection
+     * @param requestBody
+     * @returns ProviderConnection Provider connection created
+     * @throws ApiError
+     */
+    createEnterpriseProviderConnection(requestBody?: CreateProviderConnectionRequest): CancelablePromise<ProviderConnection>;
+    /**
+     * Update Enterprise Provider Connection
+     * @param id
+     * @param requestBody
+     * @returns ProviderConnection Provider connection updated
+     * @throws ApiError
+     */
+    updateEnterpriseProviderConnection(id: string, requestBody?: UpdateProviderConnectionRequest): CancelablePromise<ProviderConnection>;
+    /**
+     * List Enterprise Org Secrets
+     * @returns OrgSecretsResponse Org secrets
+     * @throws ApiError
+     */
+    listEnterpriseOrgSecrets(): CancelablePromise<OrgSecretsResponse>;
+    /**
+     * Create Enterprise Org Secret
+     * @param requestBody
+     * @returns OrgSecret Org secret created
+     * @throws ApiError
+     */
+    createEnterpriseOrgSecret(requestBody?: CreateOrgSecretRequest): CancelablePromise<OrgSecret>;
+    /**
+     * Update Enterprise Org Secret
+     * @param id
+     * @param requestBody
+     * @returns OrgSecret Org secret updated
+     * @throws ApiError
+     */
+    updateEnterpriseOrgSecret(id: string, requestBody?: UpdateOrgSecretRequest): CancelablePromise<OrgSecret>;
+    /**
+     * List Enterprise Integration Bindings
+     * @param appId
+     * @returns IntegrationBindingsResponse Integration bindings
+     * @throws ApiError
+     */
+    listEnterpriseIntegrationBindings(appId: string): CancelablePromise<IntegrationBindingsResponse>;
+    /**
+     * Create Enterprise Integration Binding
+     * @param appId
+     * @param requestBody
+     * @returns IntegrationBinding Integration binding created
+     * @throws ApiError
+     */
+    createEnterpriseIntegrationBinding(appId: string, requestBody?: CreateIntegrationBindingRequest): CancelablePromise<IntegrationBinding>;
+    /**
+     * Update Enterprise Integration Binding
+     * @param appId
+     * @param id
+     * @param requestBody
+     * @returns IntegrationBinding Integration binding updated
+     * @throws ApiError
+     */
+    updateEnterpriseIntegrationBinding(appId: string, id: string, requestBody?: UpdateIntegrationBindingRequest): CancelablePromise<IntegrationBinding>;
+    /**
+     * List Enterprise Env-Type Mappings
+     * @param appId
+     * @returns EnvTypeMappingsResponse Env-type mappings
+     * @throws ApiError
+     */
+    listEnterpriseEnvTypeMappings(appId: string): CancelablePromise<EnvTypeMappingsResponse>;
+    /**
+     * Create Enterprise Env-Type Mapping
+     * @param appId
+     * @param requestBody
+     * @returns EnvTypeMapping Env-type mapping created
+     * @throws ApiError
+     */
+    createEnterpriseEnvTypeMapping(appId: string, requestBody?: CreateEnvTypeMappingRequest): CancelablePromise<EnvTypeMapping>;
+    /**
+     * Update Enterprise Env-Type Mapping
+     * @param appId
+     * @param id
+     * @param requestBody
+     * @returns EnvTypeMapping Env-type mapping updated
+     * @throws ApiError
+     */
+    updateEnterpriseEnvTypeMapping(appId: string, id: string, requestBody?: UpdateEnvTypeMappingRequest): CancelablePromise<EnvTypeMapping>;
+    /**
+     * List Enterprise Sync Runs
+     * @returns SyncRunsResponse Sync runs
+     * @throws ApiError
+     */
+    listEnterpriseSyncRuns(): CancelablePromise<SyncRunsResponse>;
+    /**
+     * Create Enterprise Manual Sync Run
+     * @param requestBody
+     * @returns SyncRun Sync run created
+     * @throws ApiError
+     */
+    createEnterpriseManualSyncRun(requestBody?: CreateManualSyncRunRequest): CancelablePromise<SyncRun>;
+    /**
+     * List Enterprise Sync Audit Events
+     * @param syncRunId
+     * @returns SyncAuditEventsResponse Sync audit events
+     * @throws ApiError
+     */
+    listEnterpriseSyncAuditEvents(syncRunId: string): CancelablePromise<SyncAuditEventsResponse>;
+}
+
 type CreateEnvTypeRequest = {
     name: string;
     color?: string;
@@ -1561,6 +2175,246 @@ declare class GpgKeysService {
     updateGpgKeyTrustLevel(id: string, requestBody?: UpdateTrustLevelRequest): CancelablePromise<GpgKeyDetailResponse>;
 }
 
+type LicenseState = {
+    status: LicenseState.status;
+    lease_expires_at?: string | null;
+    last_verified_at?: string | null;
+    last_error_code?: string | null;
+    last_error_message?: string | null;
+    validation_mode?: LicenseState.validation_mode;
+    certificate_serial_hex?: string | null;
+    certificate_fingerprint_sha256?: string | null;
+    certificate_subject?: string | null;
+    certificate_issuer?: string | null;
+    certificate_expires_at?: string | null;
+    root_ca_fingerprint_sha256?: string | null;
+    validated_at?: string | null;
+};
+declare namespace LicenseState {
+    enum status {
+        UNKNOWN = "unknown",
+        ACTIVE = "active",
+        INACTIVE = "inactive",
+        EXPIRED = "expired",
+        ERROR = "error",
+        LOCKED = "locked"
+    }
+    enum validation_mode {
+        NONE = "none",
+        LEASE = "lease",
+        CERTIFICATE = "certificate"
+    }
+}
+
+type LicenseActionResponse = {
+    message: string;
+    state: LicenseState;
+};
+
+type LicenseStatusResponse = {
+    required: boolean;
+    locked: boolean;
+    reason?: string | null;
+    state: LicenseState;
+};
+
+declare class LicenseService {
+    readonly httpRequest: BaseHttpRequest;
+    constructor(httpRequest: BaseHttpRequest);
+    /**
+     * Get Management License Status
+     * @returns LicenseStatusResponse Current license status
+     * @throws ApiError
+     */
+    getManagementLicenseStatus(): CancelablePromise<LicenseStatusResponse>;
+    /**
+     * Activate Management License
+     * @returns LicenseActionResponse License activated
+     * @throws ApiError
+     */
+    activateManagementLicense(): CancelablePromise<LicenseActionResponse>;
+    /**
+     * Verify Management License
+     * @returns LicenseActionResponse License verified
+     * @throws ApiError
+     */
+    verifyManagementLicense(): CancelablePromise<LicenseActionResponse>;
+}
+
+type CreateLogForwardingRequest = {
+    name: string;
+    provider_type: CreateLogForwardingRequest.provider_type;
+    config: Record<string, any>;
+    enabled?: boolean;
+};
+declare namespace CreateLogForwardingRequest {
+    enum provider_type {
+        DATADOG = "datadog",
+        SPLUNK = "splunk",
+        SUMO_LOGIC = "sumo-logic"
+    }
+}
+
+type LogForwardingResponse = {
+    id: string;
+    org_id: string;
+    name: string;
+    provider_type: LogForwardingResponse.provider_type;
+    config: Record<string, any>;
+    enabled: boolean;
+    created_at: string;
+    updated_at: string;
+};
+declare namespace LogForwardingResponse {
+    enum provider_type {
+        DATADOG = "datadog",
+        SPLUNK = "splunk",
+        SUMO_LOGIC = "sumo-logic"
+    }
+}
+
+type LogForwardingsResponse = Array<LogForwardingResponse>;
+
+declare class LogForwardingService {
+    readonly httpRequest: BaseHttpRequest;
+    constructor(httpRequest: BaseHttpRequest);
+    /**
+     * Create Log Forwarding Config
+     * Create a new log forwarding configuration for the organization
+     * @param requestBody
+     * @returns LogForwardingResponse Log forwarding config created successfully
+     * @throws ApiError
+     */
+    createLogForwardingConfig(requestBody?: CreateLogForwardingRequest): CancelablePromise<LogForwardingResponse>;
+    /**
+     * Get All Log Forwarding Configs
+     * Retrieve all log forwarding configurations for the organization
+     * @returns LogForwardingsResponse Log forwarding configs retrieved successfully
+     * @throws ApiError
+     */
+    getLogForwardingConfigs(): CancelablePromise<LogForwardingsResponse>;
+    /**
+     * Get Log Forwarding Config
+     * Retrieve a specific log forwarding configuration
+     * @param id
+     * @returns LogForwardingResponse Log forwarding config retrieved successfully
+     * @throws ApiError
+     */
+    getLogForwardingConfig(id: string): CancelablePromise<LogForwardingResponse>;
+    /**
+     * Delete Log Forwarding Config
+     * Delete a log forwarding configuration
+     * @param id
+     * @returns ErrorResponse Log forwarding config deleted successfully
+     * @throws ApiError
+     */
+    deleteLogForwardingConfig(id: string): CancelablePromise<ErrorResponse>;
+}
+
+type CreateOidcProviderRequest = {
+    /**
+     * CI/CD platform type
+     */
+    provider_type: CreateOidcProviderRequest.provider_type;
+    /**
+     * OIDC issuer URL
+     */
+    issuer_url: string;
+    /**
+     * Expected audience claim value
+     */
+    audience: string;
+    /**
+     * Subject patterns to allow (glob matching). Empty = allow all subjects from this issuer.
+     */
+    allowed_subjects?: Array<string>;
+};
+declare namespace CreateOidcProviderRequest {
+    /**
+     * CI/CD platform type
+     */
+    enum provider_type {
+        GITHUB_ACTIONS = "github_actions",
+        GITLAB_CI = "gitlab_ci",
+        KUBERNETES = "kubernetes",
+        GENERIC = "generic"
+    }
+}
+
+type OidcProviderResponse = {
+    id: string;
+    org_id: string;
+    provider_type: OidcProviderResponse.provider_type;
+    issuer_url: string;
+    audience: string;
+    enabled: boolean;
+    allowed_subjects: Array<string>;
+    machine_user_id: string | null;
+    created_at: string;
+    updated_at: string;
+};
+declare namespace OidcProviderResponse {
+    enum provider_type {
+        GITHUB_ACTIONS = "github_actions",
+        GITLAB_CI = "gitlab_ci",
+        KUBERNETES = "kubernetes",
+        GENERIC = "generic"
+    }
+}
+
+type OidcProvidersResponse = Array<OidcProviderResponse>;
+
+type UpdateOidcProviderRequest = {
+    audience?: string;
+    enabled?: boolean;
+    allowed_subjects?: Array<string>;
+};
+
+declare class OidcProvidersService {
+    readonly httpRequest: BaseHttpRequest;
+    constructor(httpRequest: BaseHttpRequest);
+    /**
+     * Register OIDC Provider
+     * Register a new OIDC provider for CI/CD machine authentication
+     * @param requestBody
+     * @returns OidcProviderResponse OIDC provider created successfully
+     * @throws ApiError
+     */
+    createOidcProvider(requestBody?: CreateOidcProviderRequest): CancelablePromise<OidcProviderResponse>;
+    /**
+     * Get All OIDC Providers
+     * Retrieve all OIDC providers for the organization
+     * @returns OidcProvidersResponse OIDC providers retrieved successfully
+     * @throws ApiError
+     */
+    getAllOidcProviders(): CancelablePromise<OidcProvidersResponse>;
+    /**
+     * Get OIDC Provider
+     * Retrieve a specific OIDC provider
+     * @param id
+     * @returns OidcProviderResponse OIDC provider retrieved successfully
+     * @throws ApiError
+     */
+    getOidcProvider(id: string): CancelablePromise<OidcProviderResponse>;
+    /**
+     * Update OIDC Provider
+     * Update an existing OIDC provider
+     * @param id
+     * @param requestBody
+     * @returns ErrorResponse OIDC provider updated successfully
+     * @throws ApiError
+     */
+    updateOidcProvider(id: string, requestBody?: UpdateOidcProviderRequest): CancelablePromise<ErrorResponse>;
+    /**
+     * Delete OIDC Provider
+     * Delete an existing OIDC provider
+     * @param id
+     * @returns ErrorResponse OIDC provider deleted successfully
+     * @throws ApiError
+     */
+    deleteOidcProvider(id: string): CancelablePromise<ErrorResponse>;
+}
+
 type AcceptOrgInviteRequest = {
     org_data: {
         name: string;
@@ -1665,7 +2519,81 @@ declare class OnboardingService {
      * @returns CreateOrgInviteResponse Successful greeting response
      * @throws ApiError
      */
-    createOrgInvite(requestBody?: CreateOrgInviteRequest): CancelablePromise<CreateOrgInviteResponse>;
+    createOrgInvite(requestBody?: CreateOrgInviteRequest): CancelablePromise<CreateOrgInviteResponse>;
+    /**
+     * Get Organization Invite by Code
+     * Get organization invite by code
+     * @param inviteCode
+     * @returns GetOrgInviteByCodeResponse Organization invite retrieved successfully
+     * @throws ApiError
+     */
+    getOrgInviteByCode(inviteCode: string): CancelablePromise<GetOrgInviteByCodeResponse>;
+    /**
+     * Accept Organization Invite
+     * Accept organization invite
+     * @param inviteCode
+     * @param requestBody
+     * @returns AcceptOrgInviteResponse Organization invite accepted successfully
+     * @throws ApiError
+     */
+    acceptOrgInvite(inviteCode: string, requestBody?: AcceptOrgInviteRequest): CancelablePromise<AcceptOrgInviteResponse>;
+    /**
+     * Get User Invite by Code
+     * Get user invite by code
+     * @param inviteCode
+     * @returns GetUserInviteByTokenResponse User invite retrieved successfully
+     * @throws ApiError
+     */
+    getUserInviteByCode(inviteCode: string): CancelablePromise<GetUserInviteByTokenResponse>;
+    /**
+     * Update User Invite
+     * Update user invite
+     * @param inviteCode
+     * @param requestBody
+     * @returns UpdateUserInviteResponse User invite updated successfully
+     * @throws ApiError
+     */
+    updateUserInvite(inviteCode: string, requestBody?: UpdateUserInviteRequest): CancelablePromise<UpdateUserInviteResponse>;
+    /**
+     * Accept User Invite
+     * Accept user invite
+     * @param inviteCode
+     * @param requestBody
+     * @returns AcceptUserInviteResponse User invite accepted successfully
+     * @throws ApiError
+     */
+    acceptUserInvite(inviteCode: string, requestBody?: AcceptUserInviteRequest): CancelablePromise<AcceptUserInviteResponse>;
+    /**
+     * Create User Invite
+     * Create a user invite
+     * @param requestBody
+     * @returns CreateUserInviteResponse User invite created successfully
+     * @throws ApiError
+     */
+    createUserInvite(requestBody?: CreateUserInviteRequest): CancelablePromise<CreateUserInviteResponse>;
+    /**
+     * Get All User Invites
+     * Get all user invites
+     * @returns GetUserInviteByTokenResponse User invites retrieved successfully
+     * @throws ApiError
+     */
+    getAllUserInvites(): CancelablePromise<GetUserInviteByTokenResponse>;
+    /**
+     * Delete User Invite
+     * Delete user invite
+     * @param inviteId
+     * @returns DeleteUserInviteResponse User invite deleted successfully
+     * @throws ApiError
+     */
+    deleteUserInvite(inviteId: string): CancelablePromise<DeleteUserInviteResponse>;
+    /**
+     * Create Organization Invite
+     * Create an organization invite
+     * @param requestBody
+     * @returns CreateOrgInviteResponse Successful greeting response
+     * @throws ApiError
+     */
+    manageCreateOrgInvite(requestBody?: CreateOrgInviteRequest): CancelablePromise<CreateOrgInviteResponse>;
     /**
      * Get Organization Invite by Code
      * Get organization invite by code
@@ -1673,7 +2601,7 @@ declare class OnboardingService {
      * @returns GetOrgInviteByCodeResponse Organization invite retrieved successfully
      * @throws ApiError
      */
-    getOrgInviteByCode(inviteCode: string): CancelablePromise<GetOrgInviteByCodeResponse>;
+    manageGetOrgInviteByCode(inviteCode: string): CancelablePromise<GetOrgInviteByCodeResponse>;
     /**
      * Accept Organization Invite
      * Accept organization invite
@@ -1682,7 +2610,7 @@ declare class OnboardingService {
      * @returns AcceptOrgInviteResponse Organization invite accepted successfully
      * @throws ApiError
      */
-    acceptOrgInvite(inviteCode: string, requestBody?: AcceptOrgInviteRequest): CancelablePromise<AcceptOrgInviteResponse>;
+    manageAcceptOrgInvite(inviteCode: string, requestBody?: AcceptOrgInviteRequest): CancelablePromise<AcceptOrgInviteResponse>;
     /**
      * Get User Invite by Code
      * Get user invite by code
@@ -1690,7 +2618,7 @@ declare class OnboardingService {
      * @returns GetUserInviteByTokenResponse User invite retrieved successfully
      * @throws ApiError
      */
-    getUserInviteByCode(inviteCode: string): CancelablePromise<GetUserInviteByTokenResponse>;
+    manageGetUserInviteByCode(inviteCode: string): CancelablePromise<GetUserInviteByTokenResponse>;
     /**
      * Update User Invite
      * Update user invite
@@ -1699,7 +2627,7 @@ declare class OnboardingService {
      * @returns UpdateUserInviteResponse User invite updated successfully
      * @throws ApiError
      */
-    updateUserInvite(inviteCode: string, requestBody?: UpdateUserInviteRequest): CancelablePromise<UpdateUserInviteResponse>;
+    manageUpdateUserInvite(inviteCode: string, requestBody?: UpdateUserInviteRequest): CancelablePromise<UpdateUserInviteResponse>;
     /**
      * Accept User Invite
      * Accept user invite
@@ -1708,7 +2636,7 @@ declare class OnboardingService {
      * @returns AcceptUserInviteResponse User invite accepted successfully
      * @throws ApiError
      */
-    acceptUserInvite(inviteCode: string, requestBody?: AcceptUserInviteRequest): CancelablePromise<AcceptUserInviteResponse>;
+    manageAcceptUserInvite(inviteCode: string, requestBody?: AcceptUserInviteRequest): CancelablePromise<AcceptUserInviteResponse>;
     /**
      * Create User Invite
      * Create a user invite
@@ -1716,14 +2644,14 @@ declare class OnboardingService {
      * @returns CreateUserInviteResponse User invite created successfully
      * @throws ApiError
      */
-    createUserInvite(requestBody?: CreateUserInviteRequest): CancelablePromise<CreateUserInviteResponse>;
+    manageCreateUserInvite(requestBody?: CreateUserInviteRequest): CancelablePromise<CreateUserInviteResponse>;
     /**
      * Get All User Invites
      * Get all user invites
      * @returns GetUserInviteByTokenResponse User invites retrieved successfully
      * @throws ApiError
      */
-    getAllUserInvites(): CancelablePromise<GetUserInviteByTokenResponse>;
+    manageGetAllUserInvites(): CancelablePromise<GetUserInviteByTokenResponse>;
     /**
      * Delete User Invite
      * Delete user invite
@@ -1731,7 +2659,7 @@ declare class OnboardingService {
      * @returns DeleteUserInviteResponse User invite deleted successfully
      * @throws ApiError
      */
-    deleteUserInvite(inviteId: string): CancelablePromise<DeleteUserInviteResponse>;
+    manageDeleteUserInvite(inviteId: string): CancelablePromise<DeleteUserInviteResponse>;
 }
 
 type CheckSlugResponse = {
@@ -2069,6 +2997,326 @@ declare class RolesService {
     deleteRole(id: string): CancelablePromise<RoleResponse>;
 }
 
+type CreateRotationPolicyRequest = {
+    app_id: string;
+    env_type_id: string;
+    variable_key: string;
+    engine_type: CreateRotationPolicyRequest.engine_type;
+    schedule_cron: string;
+    dual_window_minutes?: number;
+    enabled?: boolean;
+    connection_config: Record<string, any>;
+};
+declare namespace CreateRotationPolicyRequest {
+    enum engine_type {
+        POSTGRES = "postgres",
+        MYSQL = "mysql",
+        AWS_IAM = "aws-iam",
+        AZURE_SP = "azure-sp",
+        GCP_SERVICE_ACCOUNT = "gcp-service-account",
+        CLOUDFLARE_PAGES = "cloudflare-pages",
+        SENDGRID = "sendgrid",
+        TWILIO = "twilio"
+    }
+}
+
+type RevokeOldCredentialResponse = {
+    message: string;
+    revoked_at: string;
+};
+
+type RotationPolicyResponse = {
+    id: string;
+    org_id: string;
+    app_id: string;
+    env_type_id: string;
+    variable_key: string;
+    engine_type: RotationPolicyResponse.engine_type;
+    schedule_cron: string;
+    dual_window_minutes: number;
+    enabled: boolean;
+    last_rotated_at: string | null;
+    next_rotation_at: string | null;
+    created_at: string;
+    updated_at: string;
+};
+declare namespace RotationPolicyResponse {
+    enum engine_type {
+        POSTGRES = "postgres",
+        MYSQL = "mysql",
+        AWS_IAM = "aws-iam",
+        AZURE_SP = "azure-sp",
+        GCP_SERVICE_ACCOUNT = "gcp-service-account",
+        CLOUDFLARE_PAGES = "cloudflare-pages",
+        SENDGRID = "sendgrid",
+        TWILIO = "twilio"
+    }
+}
+
+type RotationPoliciesResponse = Array<RotationPolicyResponse>;
+
+type RotationStateResponse = {
+    id: string;
+    rotation_policy_id: string;
+    rotated_at: string;
+    old_credential_expires_at: string;
+    old_credential_revoked: boolean;
+    revoked_at: string | null;
+    created_at: string;
+};
+
+type RotationStatesResponse = Array<RotationStateResponse>;
+
+type TriggerRotationResponse = {
+    message: string;
+    rotation_state_id: string;
+    new_credential_stored: boolean;
+    old_credential_expires_at: string;
+};
+
+type UpdateRotationPolicyRequest = {
+    schedule_cron?: string;
+    dual_window_minutes?: number;
+    enabled?: boolean;
+    connection_config?: Record<string, any>;
+};
+
+declare class RotationService {
+    readonly httpRequest: BaseHttpRequest;
+    constructor(httpRequest: BaseHttpRequest);
+    /**
+     * Create Rotation Policy
+     * Create a new secret rotation policy for a variable
+     * @param requestBody
+     * @returns RotationPolicyResponse Rotation policy created successfully
+     * @throws ApiError
+     */
+    createRotationPolicy(requestBody?: CreateRotationPolicyRequest): CancelablePromise<RotationPolicyResponse>;
+    /**
+     * Get Rotation Policies
+     * List all rotation policies for the organization
+     * @param appId
+     * @param envTypeId
+     * @param enabled
+     * @returns RotationPoliciesResponse Rotation policies retrieved successfully
+     * @throws ApiError
+     */
+    getRotationPolicies(appId?: string, envTypeId?: string, enabled?: 'true' | 'false'): CancelablePromise<RotationPoliciesResponse>;
+    /**
+     * Get Rotation Policy
+     * Get a specific rotation policy by ID
+     * @param id
+     * @returns RotationPolicyResponse Rotation policy retrieved successfully
+     * @throws ApiError
+     */
+    getRotationPolicy(id: string): CancelablePromise<RotationPolicyResponse>;
+    /**
+     * Update Rotation Policy
+     * Update an existing rotation policy
+     * @param id
+     * @param requestBody
+     * @returns RotationPolicyResponse Rotation policy updated successfully
+     * @throws ApiError
+     */
+    updateRotationPolicy(id: string, requestBody?: UpdateRotationPolicyRequest): CancelablePromise<RotationPolicyResponse>;
+    /**
+     * Delete Rotation Policy
+     * Delete a rotation policy
+     * @param id
+     * @returns ErrorResponse Rotation policy deleted successfully
+     * @throws ApiError
+     */
+    deleteRotationPolicy(id: string): CancelablePromise<ErrorResponse>;
+    /**
+     * Trigger Rotation
+     * Manually trigger a secret rotation for a policy
+     * @param id
+     * @returns TriggerRotationResponse Rotation executed successfully
+     * @throws ApiError
+     */
+    triggerRotation(id: string): CancelablePromise<TriggerRotationResponse>;
+    /**
+     * Get Rotation States
+     * Get the rotation state history for a policy
+     * @param id
+     * @returns RotationStatesResponse Rotation states retrieved successfully
+     * @throws ApiError
+     */
+    getRotationStates(id: string): CancelablePromise<RotationStatesResponse>;
+    /**
+     * Revoke Expired Credentials
+     * Revoke old credentials that have passed their dual-credential window
+     * @returns RevokeOldCredentialResponse Expired credentials revoked successfully
+     * @throws ApiError
+     */
+    revokeExpiredCredentials(): CancelablePromise<RevokeOldCredentialResponse>;
+}
+
+type CreateSamlProviderRequest = {
+    /**
+     * SAML identity provider type
+     */
+    provider_type: CreateSamlProviderRequest.provider_type;
+    /**
+     * Human-readable name for this provider
+     */
+    name: string;
+    /**
+     * SAML entity ID (issuer) from the IdP metadata
+     */
+    entity_id: string;
+    /**
+     * IdP SSO login URL
+     */
+    sso_url: string;
+    /**
+     * IdP X.509 certificate (PEM format) for signature validation
+     */
+    certificate: string;
+};
+declare namespace CreateSamlProviderRequest {
+    /**
+     * SAML identity provider type
+     */
+    enum provider_type {
+        OKTA = "okta",
+        ONELOGIN = "onelogin",
+        AZURE_AD = "azure-ad",
+        GOOGLE_WORKSPACE = "google-workspace",
+        DUO = "duo",
+        RIPPLING = "rippling",
+        ORACLE = "oracle",
+        PING_IDENTITY = "ping-identity"
+    }
+}
+
+type SamlProviderResponse = {
+    id: string;
+    org_id: string;
+    provider_type: SamlProviderResponse.provider_type;
+    name: string;
+    entity_id: string;
+    sso_url: string;
+    certificate: string;
+    enabled: boolean;
+    created_at: string;
+    updated_at: string;
+};
+declare namespace SamlProviderResponse {
+    enum provider_type {
+        OKTA = "okta",
+        ONELOGIN = "onelogin",
+        AZURE_AD = "azure-ad",
+        GOOGLE_WORKSPACE = "google-workspace",
+        DUO = "duo",
+        RIPPLING = "rippling",
+        ORACLE = "oracle",
+        PING_IDENTITY = "ping-identity"
+    }
+}
+
+type SamlProvidersResponse = Array<SamlProviderResponse>;
+
+type UpdateSamlProviderRequest = {
+    name?: string;
+    entity_id?: string;
+    sso_url?: string;
+    certificate?: string;
+    enabled?: boolean;
+};
+
+declare class SamlProvidersService {
+    readonly httpRequest: BaseHttpRequest;
+    constructor(httpRequest: BaseHttpRequest);
+    /**
+     * Register SAML Provider
+     * Register a new SAML identity provider for SSO authentication
+     * @param requestBody
+     * @returns SamlProviderResponse SAML provider created successfully
+     * @throws ApiError
+     */
+    createSamlProvider(requestBody?: CreateSamlProviderRequest): CancelablePromise<SamlProviderResponse>;
+    /**
+     * Get All SAML Providers
+     * Retrieve all SAML providers for the organization
+     * @returns SamlProvidersResponse SAML providers retrieved successfully
+     * @throws ApiError
+     */
+    getAllSamlProviders(): CancelablePromise<SamlProvidersResponse>;
+    /**
+     * Get SAML Provider
+     * Retrieve a specific SAML provider
+     * @param id
+     * @returns SamlProviderResponse SAML provider retrieved successfully
+     * @throws ApiError
+     */
+    getSamlProvider(id: string): CancelablePromise<SamlProviderResponse>;
+    /**
+     * Update SAML Provider
+     * Update an existing SAML provider
+     * @param id
+     * @param requestBody
+     * @returns ErrorResponse SAML provider updated successfully
+     * @throws ApiError
+     */
+    updateSamlProvider(id: string, requestBody?: UpdateSamlProviderRequest): CancelablePromise<ErrorResponse>;
+    /**
+     * Delete SAML Provider
+     * Delete an existing SAML provider
+     * @param id
+     * @returns ErrorResponse SAML provider deleted successfully
+     * @throws ApiError
+     */
+    deleteSamlProvider(id: string): CancelablePromise<ErrorResponse>;
+    /**
+     * Get SAML SP Metadata
+     * Retrieve SAML Service Provider metadata XML for the organization
+     * @param id
+     * @returns string SP metadata XML
+     * @throws ApiError
+     */
+    getSamlMetadata(id: string): CancelablePromise<string>;
+}
+
+type SamlSsoRequest = {
+    /**
+     * SAML provider ID to initiate SSO with
+     */
+    provider_id: string;
+};
+
+type SamlSsoResponse = {
+    /**
+     * URL to redirect the user to for IdP authentication
+     */
+    redirect_url: string;
+    /**
+     * AuthnRequest ID for tracking
+     */
+    request_id: string;
+};
+
+declare class SamlSsoService {
+    readonly httpRequest: BaseHttpRequest;
+    constructor(httpRequest: BaseHttpRequest);
+    /**
+     * Initiate SAML SSO
+     * Start SP-initiated SAML SSO flow by generating an AuthnRequest redirect URL
+     * @param requestBody
+     * @returns SamlSsoResponse Redirect URL generated
+     * @throws ApiError
+     */
+    initiateSamlSso(requestBody?: SamlSsoRequest): CancelablePromise<SamlSsoResponse>;
+    /**
+     * SAML Assertion Consumer Service
+     * Receive and validate SAML Response from the identity provider (ACS endpoint)
+     * @param orgId
+     * @returns any Authentication successful
+     * @throws ApiError
+     */
+    handleSamlAcs(orgId: string): CancelablePromise<any>;
+}
+
 type BatchCreateSecretsRequest = {
     app_id: string;
     env_type_id: string;
@@ -2482,10 +3730,6 @@ type CreateServiceTokenResponse = {
     created_at: string;
 };
 
-type ErrorResponse = {
-    error: string;
-};
-
 type ServiceTokenResponse = {
     id: string;
     name: string;
@@ -2535,47 +3779,65 @@ declare class ServiceTokensService {
     deleteServiceToken(id: string): CancelablePromise<ErrorResponse>;
 }
 
-type LicenseState = {
-    status: LicenseState.status;
-    lease_expires_at?: string | null;
-    last_verified_at?: string | null;
-    last_error_code?: string | null;
-    last_error_message?: string | null;
-    validation_mode?: LicenseState.validation_mode;
-    certificate_serial_hex?: string | null;
-    certificate_fingerprint_sha256?: string | null;
-    certificate_subject?: string | null;
-    certificate_issuer?: string | null;
-    certificate_expires_at?: string | null;
-    root_ca_fingerprint_sha256?: string | null;
-    validated_at?: string | null;
+type CreateSetupOrgRequest = {
+    org_name: string;
+    org_slug?: string;
+    admin_email: string;
+    admin_full_name?: string;
+    admin_password: string;
 };
-declare namespace LicenseState {
-    enum status {
-        UNKNOWN = "unknown",
-        ACTIVE = "active",
-        INACTIVE = "inactive",
-        EXPIRED = "expired",
-        ERROR = "error",
-        LOCKED = "locked"
+
+type SetupStatusResponse = {
+    deployment_mode: SetupStatusResponse.deployment_mode;
+    edition: SetupStatusResponse.edition;
+    org_count: number;
+    max_orgs: number | null;
+    can_create_organization: boolean;
+    first_org_ready: boolean;
+    channel: string;
+};
+declare namespace SetupStatusResponse {
+    enum deployment_mode {
+        HOSTED = "hosted",
+        SELFHOSTED = "selfhosted"
     }
-    enum validation_mode {
-        NONE = "none",
-        LEASE = "lease",
-        CERTIFICATE = "certificate"
+    enum edition {
+        OSS = "oss",
+        ENTERPRISE = "enterprise"
     }
 }
 
-type LicenseStatusResponse = {
-    required: boolean;
-    locked: boolean;
-    reason?: string | null;
-    state: LicenseState;
-};
+declare class SetupService {
+    readonly httpRequest: BaseHttpRequest;
+    constructor(httpRequest: BaseHttpRequest);
+    /**
+     * Operator setup status (self-host)
+     * @returns SetupStatusResponse Setup status
+     * @throws ApiError
+     */
+    getSetupStatus(): CancelablePromise<SetupStatusResponse>;
+    /**
+     * Create organization via operator setup token (self-host only)
+     * @param requestBody
+     * @returns any Organization created
+     * @throws ApiError
+     */
+    createSetupOrganization(requestBody?: CreateSetupOrgRequest): CancelablePromise<{
+        message: string;
+        org_id: string;
+        admin_user_id: string;
+        source: string;
+        first_org: boolean;
+    }>;
+}
 
 type SystemStatusState = {
     edition: SystemStatusState.edition;
+    deployment_mode?: SystemStatusState.deployment_mode;
     single_org_mode: boolean;
+    max_orgs?: number | null;
+    public_signup_enabled?: boolean;
+    can_create_organization?: boolean;
     management_enabled: boolean;
     observability_enabled: boolean;
     management_web_enabled: boolean;
@@ -2588,6 +3850,10 @@ declare namespace SystemStatusState {
         OSS = "oss",
         ENTERPRISE = "enterprise"
     }
+    enum deployment_mode {
+        HOSTED = "hosted",
+        SELFHOSTED = "selfhosted"
+    }
 }
 
 type SystemStatusResponse = {
@@ -2604,6 +3870,12 @@ declare class SystemService {
      * @throws ApiError
      */
     getManagementSystemStatus(): CancelablePromise<SystemStatusResponse>;
+    /**
+     * Get Management System Status
+     * @returns SystemStatusResponse Management system status
+     * @throws ApiError
+     */
+    manageGetManagementSystemStatus(): CancelablePromise<SystemStatusResponse>;
 }
 
 type AddTeamMemberRequest = {
@@ -2823,7 +4095,7 @@ declare class UsersService {
      * @returns UserResponse User role updated successfully
      * @throws ApiError
      */
-    updateRole(id: string, requestBody?: UpdateRoleRequest): CancelablePromise<UserResponse>;
+    updateUserRole(id: string, requestBody?: UpdateRoleRequest): CancelablePromise<UserResponse>;
     /**
      * Update User Password
      * Update a user's password (Admin only)
@@ -2979,20 +4251,29 @@ declare class EnvSyncAPISDK {
     readonly authentication: AuthenticationService;
     readonly certificates: CertificatesService;
     readonly changeRequests: ChangeRequestsService;
+    readonly dynamicSecrets: DynamicSecretsService;
+    readonly enterprise: EnterpriseService;
     readonly environmentTypes: EnvironmentTypesService;
     readonly environmentVariables: EnvironmentVariablesService;
     readonly environmentVariablesPointInTime: EnvironmentVariablesPointInTimeService;
     readonly environmentVariablesRollback: EnvironmentVariablesRollbackService;
     readonly fileUpload: FileUploadService;
     readonly gpgKeys: GpgKeysService;
+    readonly license: LicenseService;
+    readonly logForwarding: LogForwardingService;
+    readonly oidcProviders: OidcProvidersService;
     readonly onboarding: OnboardingService;
     readonly organizations: OrganizationsService;
     readonly permissions: PermissionsService;
     readonly roles: RolesService;
+    readonly rotation: RotationService;
+    readonly samlProviders: SamlProvidersService;
+    readonly samlSso: SamlSsoService;
     readonly secrets: SecretsService;
     readonly secretsPointInTime: SecretsPointInTimeService;
     readonly secretsRollback: SecretsRollbackService;
     readonly serviceTokens: ServiceTokensService;
+    readonly setup: SetupService;
     readonly system: SystemService;
     readonly teams: TeamsService;
     readonly users: UsersService;
@@ -3027,4 +4308,4 @@ type UploadFileError = {
  */
 type XEnvSyncOrgIdHeader = string;
 
-export { type AcceptOrgInviteRequest, type AcceptOrgInviteResponse, type AcceptUserInviteRequest, type AcceptUserInviteResponse, AccessService, type AddTeamMemberRequest, ApiError, type ApiKeyResponse, type ApiKeysResponse, ApiKeysService, ApplicationsService, type AssignTeamRoleRequest, AuditLogsService, AuthenticationService, type BaseCertificateResponse, BaseHttpRequest, type BatchCreateEnvsRequest, type BatchCreateSecretsRequest, type BatchDeleteEnvsRequest, type BatchDeleteSecretsRequest, type BatchEnvsResponse, type BatchSecretsResponse, type CRLResponse, type CallbackResponse, CancelError, CancelablePromise, type CertificateListResponse, CertificatesService, type ChangeRequestListResponse, ChangeRequestResponse, ChangeRequestsService, type CheckSlugResponse, type CreateApiKeyRequest, type CreateAppRequest, type CreateAppResponse, type CreateEnvRequest, type CreateEnvTypeRequest, type CreateOrgInviteRequest, type CreateOrgInviteResponse, type CreateRoleRequest, type CreateSecretRequest, type CreateServiceTokenRequest, type CreateServiceTokenResponse, type CreateTeamRequest, type CreateTeamResponse, type CreateUserInviteRequest, type CreateUserInviteResponse, CreateWebhookRequest, type DeleteAppResponse, type DeleteEnvRequest, type DeleteEnvTypeRequest, type DeleteOrgRequest, type DeleteOrgResponse, type DeleteSecretRequest, type DeleteUserInviteResponse, type DirectChangeRequestBody, EffectiveAccessEntry, type EffectiveAccessResponse, type EffectivePermissionsResponse, type EnvDiffRequest, type EnvDiffResponse, type EnvHistoryRequest, type EnvHistoryResponse, type EnvPitRequest, type EnvPitStateResponse, type EnvResponse, EnvSyncAPISDK, type EnvTimestampRangeDiffRequest, type EnvTimestampRequest, type EnvTypeResponse, type EnvTypesResponse, EnvironmentTypesService, EnvironmentVariablesPointInTimeService, EnvironmentVariablesRollbackService, EnvironmentVariablesService, type EnvsResponse, type ErrorResponse, ExportEnvRequest, type ExportEnvResponse, type ExportKeyResponse, type ExtendGpgKeyExpiryRequest, FileUploadService, GenerateGpgKeyRequest, type GetAppResponse, type GetAppsResponse, type GetAuditLogsResponse, type GetAuditLogsResponseWrapper, type GetEnvRequest, type GetOrgInviteByCodeResponse, type GetSecretRequest, type GetTeamResponse, type GetTeamsResponse, type GetUserInviteByTokenResponse, type GpgKeyDetailResponse, type GpgKeyResponse, type GpgKeysResponse, GpgKeysService, GrantAccessRequest, GrantEntry, type GrantsListResponse, type ImportGpgKeyRequest, type InitOrgCARequest, type IssueMemberCertRequest, LicenseState, type LicenseStatusResponse, type LoginUrlResponse, type LogoutUrlResponse, type MemberCertResponse, type MyCertificateBundleResponse, type OCSPResponse, OnboardingService, OpenAPI, type OpenAPIConfig, type OrgCAResponse, type OrgResponse, OrganizationsService, type PermissionMessageResponse, PermissionsService, type PromotionChangeRequestBody, type RegenerateApiKeyResponse, type RejectChangeRequestBody, type RenewCertRequest, type RevealSecretsRequest, type RevealSecretsResponse, RevokeAccessRequest, type RevokeCertRequest, type RevokeCertResponse, type RevokeGpgKeyRequest, type RoleResponse, type RoleStatsResponse, type RolesResponse, RolesService, type RollbackResponse, type RollbackSecretsResponse, type RollbackSecretsToPitRequest, type RollbackSecretsToTimestampRequest, type RollbackToPitRequest, type RollbackToTimestampRequest, type RootCAResponse, type RotateCertRequest, RotateGpgKeyRequest, type SecretDiffRequest, type SecretDiffResponse, type SecretHistoryRequest, type SecretHistoryResponse, type SecretPitRequest, type SecretPitStateResponse, type SecretResponse, type SecretTimestampRangeDiffRequest, type SecretTimestampRequest, SecretVariableRollbackResponse, type SecretVariableRollbackToPitRequest, type SecretVariableRollbackToTimestampRequest, type SecretVariableTimelineRequest, type SecretVariableTimelineResponse, SecretsPointInTimeService, type SecretsResponse, SecretsRollbackService, SecretsService, type ServiceTokenPermissions, type ServiceTokenResponse, type ServiceTokensResponse, ServiceTokensService, SignDataRequest, type SignatureResponse, SystemService, type SystemStatusResponse, SystemStatusState, type TeamMessageResponse, TeamsService, type UpdateApiKeyRequest, type UpdateAppRequest, type UpdateAppResponse, type UpdateEnvRequest, type UpdateEnvTypeRequest, type UpdateOrgRequest, type UpdateRoleRequest, type UpdateSecretRequest, type UpdateTeamRequest, UpdateTrustLevelRequest, type UpdateUserInviteRequest, type UpdateUserInviteResponse, type UpdateUserRequest, UpdateWebhookRequest, type UploadFileError, type UploadFileResponse, type UserResponse, type UsersResponse, UsersService, VariableRollbackResponse, type VariableRollbackToPitRequest, type VariableRollbackToTimestampRequest, type VariableTimelineRequest, type VariableTimelineResponse, type VerifyResponse, type VerifySignatureRequest, WebhookResponse, type WebhooksResponse, WebhooksService, type WhoAmIResponse, type XEnvSyncOrgIdHeader };
+export { type AcceptOrgInviteRequest, type AcceptOrgInviteResponse, type AcceptUserInviteRequest, type AcceptUserInviteResponse, AccessService, type AddTeamMemberRequest, ApiError, type ApiKeyResponse, type ApiKeysResponse, ApiKeysService, ApplicationsService, type AssignTeamRoleRequest, AuditLogsService, AuthenticationService, type BaseCertificateResponse, BaseHttpRequest, type BatchCreateEnvsRequest, type BatchCreateSecretsRequest, type BatchDeleteEnvsRequest, type BatchDeleteSecretsRequest, type BatchEnvsResponse, type BatchSecretsResponse, type CRLResponse, type CallbackResponse, CancelError, CancelablePromise, type CertificateListResponse, CertificatesService, type ChangeRequestListResponse, ChangeRequestResponse, ChangeRequestsService, type CheckSlugResponse, type CleanupResponse, type CreateApiKeyRequest, type CreateAppRequest, type CreateAppResponse, CreateDynamicSecretEngineRequest, type CreateDynamicSecretLeaseRequest, type CreateEnvRequest, type CreateEnvTypeMappingRequest, type CreateEnvTypeRequest, CreateIntegrationBindingRequest, CreateLogForwardingRequest, CreateManualSyncRunRequest, CreateOidcProviderRequest, type CreateOrgInviteRequest, type CreateOrgInviteResponse, type CreateOrgSecretRequest, CreateProviderConnectionRequest, type CreateRoleRequest, CreateRotationPolicyRequest, CreateSamlProviderRequest, type CreateSecretRequest, type CreateServiceTokenRequest, type CreateServiceTokenResponse, type CreateSetupOrgRequest, type CreateTeamRequest, type CreateTeamResponse, type CreateUserInviteRequest, type CreateUserInviteResponse, CreateWebhookRequest, type DeleteAppResponse, type DeleteEnvRequest, type DeleteEnvTypeRequest, type DeleteOrgRequest, type DeleteOrgResponse, type DeleteSecretRequest, type DeleteUserInviteResponse, type DirectChangeRequestBody, DynamicSecretEngineResponse, type DynamicSecretEnginesResponse, type DynamicSecretLeaseResponse, type DynamicSecretLeasesResponse, DynamicSecretsService, EffectiveAccessEntry, type EffectiveAccessResponse, type EffectivePermissionsResponse, EnterpriseProviderProfile, type EnterpriseProvidersResponse, EnterpriseService, type EnvDiffRequest, type EnvDiffResponse, type EnvHistoryRequest, type EnvHistoryResponse, type EnvPitRequest, type EnvPitStateResponse, type EnvResponse, EnvSyncAPISDK, type EnvTimestampRangeDiffRequest, type EnvTimestampRequest, type EnvTypeMapping, type EnvTypeMappingsResponse, type EnvTypeResponse, type EnvTypesResponse, EnvironmentTypesService, EnvironmentVariablesPointInTimeService, EnvironmentVariablesRollbackService, EnvironmentVariablesService, type EnvsResponse, type ErrorResponse, ExportEnvRequest, type ExportEnvResponse, type ExportKeyResponse, type ExtendGpgKeyExpiryRequest, FileUploadService, GenerateGpgKeyRequest, type GetAppResponse, type GetAppsResponse, type GetAuditLogsResponse, type GetAuditLogsResponseWrapper, type GetEnvRequest, type GetOrgInviteByCodeResponse, type GetSecretRequest, type GetTeamResponse, type GetTeamsResponse, type GetUserInviteByTokenResponse, type GpgKeyDetailResponse, type GpgKeyResponse, type GpgKeysResponse, GpgKeysService, GrantAccessRequest, GrantEntry, type GrantsListResponse, type ImportGpgKeyRequest, type InitOrgCARequest, IntegrationBinding, type IntegrationBindingsResponse, type IssueMemberCertRequest, type LicenseActionResponse, LicenseService, LicenseState, type LicenseStatusResponse, LogForwardingResponse, LogForwardingService, type LogForwardingsResponse, type LoginUrlResponse, type LogoutUrlResponse, type MemberCertResponse, type MyCertificateBundleResponse, type OCSPResponse, OidcProviderResponse, type OidcProvidersResponse, OidcProvidersService, OnboardingService, OpenAPI, type OpenAPIConfig, type OrgCAResponse, type OrgResponse, type OrgSecret, type OrgSecretModelResponse, type OrgSecretsResponse, OrganizationsService, type PermissionMessageResponse, PermissionsService, type PromotionChangeRequestBody, ProviderConnection, type ProviderConnectionsResponse, type RegenerateApiKeyResponse, type RejectChangeRequestBody, type RenewCertRequest, type RevealSecretsRequest, type RevealSecretsResponse, RevokeAccessRequest, type RevokeCertRequest, type RevokeCertResponse, type RevokeGpgKeyRequest, type RevokeLeaseResponse, type RevokeOldCredentialResponse, type RoleResponse, type RoleStatsResponse, type RolesResponse, RolesService, type RollbackResponse, type RollbackSecretsResponse, type RollbackSecretsToPitRequest, type RollbackSecretsToTimestampRequest, type RollbackToPitRequest, type RollbackToTimestampRequest, type RootCAResponse, type RotateCertRequest, RotateGpgKeyRequest, type RotationPoliciesResponse, RotationPolicyResponse, RotationService, type RotationStateResponse, type RotationStatesResponse, SamlProviderResponse, type SamlProvidersResponse, SamlProvidersService, type SamlSsoRequest, type SamlSsoResponse, SamlSsoService, type SecretDiffRequest, type SecretDiffResponse, type SecretHistoryRequest, type SecretHistoryResponse, type SecretPitRequest, type SecretPitStateResponse, type SecretResponse, type SecretTimestampRangeDiffRequest, type SecretTimestampRequest, SecretVariableRollbackResponse, type SecretVariableRollbackToPitRequest, type SecretVariableRollbackToTimestampRequest, type SecretVariableTimelineRequest, type SecretVariableTimelineResponse, SecretsPointInTimeService, type SecretsResponse, SecretsRollbackService, SecretsService, type ServiceTokenPermissions, type ServiceTokenResponse, type ServiceTokensResponse, ServiceTokensService, SetupService, SetupStatusResponse, SignDataRequest, type SignatureResponse, SyncAuditEvent, type SyncAuditEventsResponse, SyncRun, type SyncRunsResponse, SystemService, type SystemStatusResponse, SystemStatusState, type TeamMessageResponse, TeamsService, type TriggerRotationResponse, type UpdateApiKeyRequest, type UpdateAppRequest, type UpdateAppResponse, type UpdateDynamicSecretEngineRequest, type UpdateEnvRequest, type UpdateEnvTypeMappingRequest, type UpdateEnvTypeRequest, type UpdateIntegrationBindingRequest, type UpdateOidcProviderRequest, type UpdateOrgRequest, type UpdateOrgSecretRequest, UpdateProviderConnectionRequest, type UpdateRoleRequest, type UpdateRotationPolicyRequest, type UpdateSamlProviderRequest, type UpdateSecretRequest, type UpdateTeamRequest, UpdateTrustLevelRequest, type UpdateUserInviteRequest, type UpdateUserInviteResponse, type UpdateUserRequest, UpdateWebhookRequest, type UploadFileError, type UploadFileResponse, type UserResponse, type UsersResponse, UsersService, VariableRollbackResponse, type VariableRollbackToPitRequest, type VariableRollbackToTimestampRequest, type VariableTimelineRequest, type VariableTimelineResponse, type VerifyResponse, type VerifySignatureRequest, WebhookResponse, type WebhooksResponse, WebhooksService, type WhoAmIResponse, type XEnvSyncOrgIdHeader };