@envsync-cloud/envsync-ts-sdk 0.11.0 → 0.20.2

package/dist/index.d.mts

@@ -414,7 +414,18 @@ type WhoAmIResponse = {
         is_active: boolean;
     }>;
     active_membership_user_id: string;
-};
+    features: Array<string>;
+    install_features: Array<string>;
+    auth_type: WhoAmIResponse.auth_type;
+};
+declare namespace WhoAmIResponse {
+    enum auth_type {
+        JWT = "jwt",
+        SAML = "saml",
+        OIDC = "oidc",
+        API_KEY = "api_key"
+    }
+}
 
 declare class AuthenticationService {
     readonly httpRequest: BaseHttpRequest;
@@ -427,13 +438,13 @@ declare class AuthenticationService {
      */
     whoami(): CancelablePromise<WhoAmIResponse>;
     /**
-     * Create Workspace
-     * Create a new workspace for the current enterprise web session and switch into it
+     * Create Organization
+     * Create a new organization for the current hosted web session and switch into it. Hosted only; self-host always 403.
      * @param requestBody
-     * @returns WhoAmIResponse Workspace created successfully
+     * @returns WhoAmIResponse Organization created successfully
      * @throws ApiError
      */
-    createWorkspace(requestBody?: {
+    createOrganization(requestBody?: {
         name: string;
     }): CancelablePromise<WhoAmIResponse>;
     /**
@@ -766,65 +777,880 @@ type RejectChangeRequestBody = {
     rejection_reason: string;
 };
 
-declare class ChangeRequestsService {
+declare class ChangeRequestsService {
+    readonly httpRequest: BaseHttpRequest;
+    constructor(httpRequest: BaseHttpRequest);
+    /**
+     * Create Direct Change Request
+     * Create a protected-environment change request with explicit env and secret changes.
+     * @param requestBody
+     * @returns ChangeRequestResponse Direct change request created
+     * @throws ApiError
+     */
+    createDirectChangeRequest(requestBody?: DirectChangeRequestBody): CancelablePromise<ChangeRequestResponse>;
+    /**
+     * Create Promotion Change Request
+     * Create a promotion request from one app environment to another protected environment.
+     * @param requestBody
+     * @returns ChangeRequestResponse Promotion change request created
+     * @throws ApiError
+     */
+    createPromotionChangeRequest(requestBody?: PromotionChangeRequestBody): CancelablePromise<ChangeRequestResponse>;
+    /**
+     * List Change Requests
+     * List change requests for the current organization.
+     * @returns ChangeRequestListResponse Change requests listed
+     * @throws ApiError
+     */
+    listChangeRequests(): CancelablePromise<ChangeRequestListResponse>;
+    /**
+     * Get Change Request
+     * Fetch a single change request including env and secret item diffs.
+     * @param id
+     * @returns ChangeRequestResponse Change request fetched
+     * @throws ApiError
+     */
+    getChangeRequest(id: string): CancelablePromise<ChangeRequestResponse>;
+    /**
+     * Approve Change Request
+     * Approve a pending change request and apply it atomically to the target environment.
+     * @param id
+     * @returns ChangeRequestResponse Change request approved and applied
+     * @throws ApiError
+     */
+    approveChangeRequest(id: string): CancelablePromise<ChangeRequestResponse>;
+    /**
+     * Reject Change Request
+     * Reject a pending change request without mutating the target environment.
+     * @param id
+     * @param requestBody
+     * @returns ChangeRequestResponse Change request rejected
+     * @throws ApiError
+     */
+    rejectChangeRequest(id: string, requestBody?: RejectChangeRequestBody): CancelablePromise<ChangeRequestResponse>;
+    /**
+     * Cancel Change Request
+     * Cancel a pending change request created by the current user.
+     * @param id
+     * @returns ChangeRequestResponse Change request cancelled
+     * @throws ApiError
+     */
+    cancelChangeRequest(id: string): CancelablePromise<ChangeRequestResponse>;
+}
+
+type CleanupResponse = {
+    cleaned: number;
+};
+
+type CreateDynamicSecretEngineRequest = {
+    engine_type: CreateDynamicSecretEngineRequest.engine_type;
+    name: string;
+    config: ({
+        host: string;
+        port?: number;
+        database: string;
+        superuser: {
+            username: string;
+            password: string;
+        };
+        creation_statements?: Array<string>;
+        default_ttl_seconds?: number;
+        max_ttl_seconds?: number;
+    } | {
+        access_key_id: string;
+        secret_access_key: string;
+        region?: string;
+        iam_policy: string;
+        default_ttl_seconds?: number;
+        max_ttl_seconds?: number;
+    } | {
+        tenant_id: string;
+        client_id: string;
+        client_secret: string;
+        subscription_id: string;
+        roles?: Array<string>;
+        default_ttl_seconds?: number;
+        max_ttl_seconds?: number;
+    });
+    enabled?: boolean;
+};
+declare namespace CreateDynamicSecretEngineRequest {
+    enum engine_type {
+        POSTGRES = "postgres",
+        MYSQL = "mysql",
+        AWS_IAM = "aws-iam",
+        AZURE_SP = "azure-sp"
+    }
+}
+
+type CreateDynamicSecretLeaseRequest = {
+    app_id: string;
+    env_type_id: string;
+    variable_key: string;
+    ttl_seconds?: number;
+};
+
+type DynamicSecretEngineResponse = {
+    id: string;
+    org_id: string;
+    engine_type: DynamicSecretEngineResponse.engine_type;
+    name: string;
+    config: Record<string, any>;
+    enabled: boolean;
+    created_at: string;
+    updated_at: string;
+};
+declare namespace DynamicSecretEngineResponse {
+    enum engine_type {
+        POSTGRES = "postgres",
+        MYSQL = "mysql",
+        AWS_IAM = "aws-iam",
+        AZURE_SP = "azure-sp"
+    }
+}
+
+type DynamicSecretEnginesResponse = Array<DynamicSecretEngineResponse>;
+
+type DynamicSecretLeaseResponse = {
+    id: string;
+    engine_id: string;
+    app_id: string;
+    env_type_id: string;
+    variable_key: string;
+    credential_data: Record<string, any>;
+    expires_at: string;
+    revoked_at: string | null;
+    created_at: string;
+    updated_at: string;
+};
+
+type DynamicSecretLeasesResponse = Array<DynamicSecretLeaseResponse>;
+
+type ErrorResponse = {
+    error: string;
+};
+
+type RevokeLeaseResponse = {
+    message: string;
+    id: string;
+};
+
+type UpdateDynamicSecretEngineRequest = {
+    name?: string;
+    config?: ({
+        host: string;
+        port?: number;
+        database: string;
+        superuser: {
+            username: string;
+            password: string;
+        };
+        creation_statements?: Array<string>;
+        default_ttl_seconds?: number;
+        max_ttl_seconds?: number;
+    } | {
+        access_key_id: string;
+        secret_access_key: string;
+        region?: string;
+        iam_policy: string;
+        default_ttl_seconds?: number;
+        max_ttl_seconds?: number;
+    } | {
+        tenant_id: string;
+        client_id: string;
+        client_secret: string;
+        subscription_id: string;
+        roles?: Array<string>;
+        default_ttl_seconds?: number;
+        max_ttl_seconds?: number;
+    });
+    enabled?: boolean;
+};
+
+declare class DynamicSecretsService {
+    readonly httpRequest: BaseHttpRequest;
+    constructor(httpRequest: BaseHttpRequest);
+    /**
+     * Create Dynamic Secret Engine
+     * Create a new dynamic secret engine for short-lived credential generation
+     * @param requestBody
+     * @returns DynamicSecretEngineResponse Engine created successfully
+     * @throws ApiError
+     */
+    createDynamicSecretEngine(requestBody?: CreateDynamicSecretEngineRequest): CancelablePromise<DynamicSecretEngineResponse>;
+    /**
+     * Get All Dynamic Secret Engines
+     * Retrieve all dynamic secret engines for the organization
+     * @returns DynamicSecretEnginesResponse Engines retrieved successfully
+     * @throws ApiError
+     */
+    getAllDynamicSecretEngines(): CancelablePromise<DynamicSecretEnginesResponse>;
+    /**
+     * Get Dynamic Secret Engine
+     * Retrieve a specific dynamic secret engine by ID
+     * @param id
+     * @returns DynamicSecretEngineResponse Engine retrieved successfully
+     * @throws ApiError
+     */
+    getDynamicSecretEngine(id: string): CancelablePromise<DynamicSecretEngineResponse>;
+    /**
+     * Update Dynamic Secret Engine
+     * Update an existing dynamic secret engine
+     * @param id
+     * @param requestBody
+     * @returns DynamicSecretEngineResponse Engine updated successfully
+     * @throws ApiError
+     */
+    updateDynamicSecretEngine(id: string, requestBody?: UpdateDynamicSecretEngineRequest): CancelablePromise<DynamicSecretEngineResponse>;
+    /**
+     * Delete Dynamic Secret Engine
+     * Delete a dynamic secret engine (must have no active leases)
+     * @param id
+     * @returns ErrorResponse Engine deleted successfully
+     * @throws ApiError
+     */
+    deleteDynamicSecretEngine(id: string): CancelablePromise<ErrorResponse>;
+    /**
+     * Create Dynamic Secret Lease
+     * Generate short-lived credentials by creating a lease on an engine
+     * @param id
+     * @param requestBody
+     * @returns DynamicSecretLeaseResponse Lease created successfully
+     * @throws ApiError
+     */
+    createDynamicSecretLease(id: string, requestBody?: CreateDynamicSecretLeaseRequest): CancelablePromise<DynamicSecretLeaseResponse>;
+    /**
+     * Get Leases for Engine
+     * Retrieve all leases for a specific dynamic secret engine
+     * @param id
+     * @returns DynamicSecretLeasesResponse Leases retrieved successfully
+     * @throws ApiError
+     */
+    getDynamicSecretLeases(id: string): CancelablePromise<DynamicSecretLeasesResponse>;
+    /**
+     * Get Dynamic Secret Lease
+     * Retrieve a specific lease by ID
+     * @param leaseId
+     * @returns DynamicSecretLeaseResponse Lease retrieved successfully
+     * @throws ApiError
+     */
+    getDynamicSecretLease(leaseId: string): CancelablePromise<DynamicSecretLeaseResponse>;
+    /**
+     * Revoke Dynamic Secret Lease
+     * Revoke a lease and its associated credentials
+     * @param leaseId
+     * @returns RevokeLeaseResponse Lease revoked successfully
+     * @throws ApiError
+     */
+    revokeDynamicSecretLease(leaseId: string): CancelablePromise<RevokeLeaseResponse>;
+    /**
+     * Cleanup Expired Leases
+     * Mark all expired leases as revoked (admin operation)
+     * @returns CleanupResponse Cleanup completed
+     * @throws ApiError
+     */
+    cleanupExpiredLeases(): CancelablePromise<CleanupResponse>;
+}
+
+type CreateEnvTypeMappingRequest = {
+    env_type_id: string;
+    integration_binding_id: string;
+    target_identifier: string;
+    branch_ref?: string | null;
+    path_prefix?: string | null;
+    metadata?: Record<string, any>;
+};
+
+type CreateIntegrationBindingRequest = {
+    provider_connection_id: string;
+    provider_type: CreateIntegrationBindingRequest.provider_type;
+    is_enabled?: boolean;
+    metadata?: Record<string, any>;
+};
+declare namespace CreateIntegrationBindingRequest {
+    enum provider_type {
+        GITHUB = "github",
+        GITLAB = "gitlab",
+        AWS_SSM = "aws-ssm",
+        VERCEL = "vercel",
+        GOOGLE_SECRET_MANAGER = "google-secret-manager"
+    }
+}
+
+type CreateManualSyncRunRequest = {
+    app_id?: string | null;
+    provider_type: CreateManualSyncRunRequest.provider_type;
+    metadata?: Record<string, any>;
+};
+declare namespace CreateManualSyncRunRequest {
+    enum provider_type {
+        GITHUB = "github",
+        GITLAB = "gitlab",
+        AWS_SSM = "aws-ssm",
+        VERCEL = "vercel",
+        GOOGLE_SECRET_MANAGER = "google-secret-manager"
+    }
+}
+
+type CreateOrgSecretRequest = {
+    key: string;
+    value: string;
+    description?: string | null;
+    metadata?: Record<string, any>;
+};
+
+type CreateProviderConnectionRequest = {
+    provider_type: CreateProviderConnectionRequest.provider_type;
+    name: string;
+    status?: CreateProviderConnectionRequest.status;
+    auth_config?: Record<string, any>;
+    metadata?: Record<string, any>;
+};
+declare namespace CreateProviderConnectionRequest {
+    enum provider_type {
+        GITHUB = "github",
+        GITLAB = "gitlab",
+        AWS_SSM = "aws-ssm",
+        VERCEL = "vercel",
+        GOOGLE_SECRET_MANAGER = "google-secret-manager"
+    }
+    enum status {
+        ACTIVE = "active",
+        INACTIVE = "inactive",
+        ERROR = "error"
+    }
+}
+
+type EnterpriseProviderProfile = {
+    id: EnterpriseProviderProfile.id;
+    name: string;
+    scope: string;
+    description: string;
+    connection_requirements: Array<string>;
+    binding_metadata_fields: Array<string>;
+    mapping_requirements: Array<string>;
+};
+declare namespace EnterpriseProviderProfile {
+    enum id {
+        GITHUB = "github",
+        GITLAB = "gitlab",
+        AWS_SSM = "aws-ssm",
+        VERCEL = "vercel",
+        GOOGLE_SECRET_MANAGER = "google-secret-manager"
+    }
+}
+
+type EnterpriseProvidersResponse = {
+    providers: Array<EnterpriseProviderProfile>;
+};
+
+type EnvTypeMapping = {
+    id: string;
+    org_id: string;
+    app_id: string;
+    env_type_id: string;
+    integration_binding_id: string;
+    target_identifier: string;
+    branch_ref?: string | null;
+    path_prefix?: string | null;
+    metadata: Record<string, any>;
+    created_at: string;
+    updated_at: string;
+};
+
+type EnvTypeMappingsResponse = Array<EnvTypeMapping>;
+
+type IntegrationBinding = {
+    id: string;
+    org_id: string;
+    app_id: string;
+    provider_connection_id: string;
+    provider_type: IntegrationBinding.provider_type;
+    is_enabled: boolean;
+    metadata: Record<string, any>;
+    created_at: string;
+    updated_at: string;
+};
+declare namespace IntegrationBinding {
+    enum provider_type {
+        GITHUB = "github",
+        GITLAB = "gitlab",
+        AWS_SSM = "aws-ssm",
+        VERCEL = "vercel",
+        GOOGLE_SECRET_MANAGER = "google-secret-manager"
+    }
+}
+
+type IntegrationBindingsResponse = Array<IntegrationBinding>;
+
+type OrgSecret = {
+    id: string;
+    org_id: string;
+    key: string;
+    value: string;
+    description?: string | null;
+    metadata: Record<string, any>;
+    created_at: string;
+    updated_at: string;
+};
+
+type OrgSecretModelResponse = {
+    resource: string;
+    description: string;
+    fields: Array<string>;
+};
+
+type OrgSecretsResponse = Array<OrgSecret>;
+
+type ProviderConnection = {
+    id: string;
+    org_id: string;
+    provider_type: ProviderConnection.provider_type;
+    name: string;
+    status: ProviderConnection.status;
+    auth_config: Record<string, any>;
+    metadata: Record<string, any>;
+    created_at: string;
+    updated_at: string;
+};
+declare namespace ProviderConnection {
+    enum provider_type {
+        GITHUB = "github",
+        GITLAB = "gitlab",
+        AWS_SSM = "aws-ssm",
+        VERCEL = "vercel",
+        GOOGLE_SECRET_MANAGER = "google-secret-manager"
+    }
+    enum status {
+        ACTIVE = "active",
+        INACTIVE = "inactive",
+        ERROR = "error"
+    }
+}
+
+type ProviderConnectionsResponse = Array<ProviderConnection>;
+
+type SyncAuditEvent = {
+    id: string;
+    org_id: string;
+    sync_run_id?: string | null;
+    app_id?: string | null;
+    env_type_id?: string | null;
+    provider_type: SyncAuditEvent.provider_type;
+    action: string;
+    result: SyncAuditEvent.result;
+    actor_user_id?: string | null;
+    details: Record<string, any>;
+    created_at: string;
+    updated_at: string;
+};
+declare namespace SyncAuditEvent {
+    enum provider_type {
+        GITHUB = "github",
+        GITLAB = "gitlab",
+        AWS_SSM = "aws-ssm",
+        VERCEL = "vercel",
+        GOOGLE_SECRET_MANAGER = "google-secret-manager"
+    }
+    enum result {
+        INFO = "info",
+        SUCCESS = "success",
+        ERROR = "error"
+    }
+}
+
+type SyncAuditEventsResponse = Array<SyncAuditEvent>;
+
+type SyncRun = {
+    id: string;
+    org_id: string;
+    app_id?: string | null;
+    provider_type: SyncRun.provider_type;
+    status: SyncRun.status;
+    actor_user_id?: string | null;
+    started_at: string;
+    completed_at?: string | null;
+    error_message?: string | null;
+    metadata: Record<string, any>;
+    created_at: string;
+    updated_at: string;
+};
+declare namespace SyncRun {
+    enum provider_type {
+        GITHUB = "github",
+        GITLAB = "gitlab",
+        AWS_SSM = "aws-ssm",
+        VERCEL = "vercel",
+        GOOGLE_SECRET_MANAGER = "google-secret-manager"
+    }
+    enum status {
+        PENDING = "pending",
+        RUNNING = "running",
+        SUCCEEDED = "succeeded",
+        FAILED = "failed"
+    }
+}
+
+type SyncRunsResponse = Array<SyncRun>;
+
+type UpdateEnvTypeMappingRequest = {
+    target_identifier?: string;
+    branch_ref?: string | null;
+    path_prefix?: string | null;
+    metadata?: Record<string, any>;
+};
+
+type UpdateIntegrationBindingRequest = {
+    is_enabled?: boolean;
+    metadata?: Record<string, any>;
+};
+
+type UpdateOrgSecretRequest = {
+    value?: string;
+    description?: string | null;
+    metadata?: Record<string, any>;
+};
+
+type UpdateProviderConnectionRequest = {
+    name?: string;
+    status?: UpdateProviderConnectionRequest.status;
+    auth_config?: Record<string, any>;
+    metadata?: Record<string, any>;
+};
+declare namespace UpdateProviderConnectionRequest {
+    enum status {
+        ACTIVE = "active",
+        INACTIVE = "inactive",
+        ERROR = "error"
+    }
+}
+
+declare class EnterpriseService {
+    readonly httpRequest: BaseHttpRequest;
+    constructor(httpRequest: BaseHttpRequest);
+    /**
+     * List Enterprise Providers
+     * @returns EnterpriseProvidersResponse Enterprise provider catalog
+     * @throws ApiError
+     */
+    listEnterpriseProviders(): CancelablePromise<EnterpriseProvidersResponse>;
+    /**
+     * Get Enterprise Org Secret Model
+     * @returns OrgSecretModelResponse Org secret model
+     * @throws ApiError
+     */
+    getEnterpriseOrgSecretModel(): CancelablePromise<OrgSecretModelResponse>;
+    /**
+     * List Enterprise Provider Connections
+     * @returns ProviderConnectionsResponse Provider connections
+     * @throws ApiError
+     */
+    listEnterpriseProviderConnections(): CancelablePromise<ProviderConnectionsResponse>;
+    /**
+     * Create Enterprise Provider Connection
+     * @param requestBody
+     * @returns ProviderConnection Provider connection created
+     * @throws ApiError
+     */
+    createEnterpriseProviderConnection(requestBody?: CreateProviderConnectionRequest): CancelablePromise<ProviderConnection>;
+    /**
+     * Update Enterprise Provider Connection
+     * @param id
+     * @param requestBody
+     * @returns ProviderConnection Provider connection updated
+     * @throws ApiError
+     */
+    updateEnterpriseProviderConnection(id: string, requestBody?: UpdateProviderConnectionRequest): CancelablePromise<ProviderConnection>;
+    /**
+     * List Enterprise Org Secrets
+     * @returns OrgSecretsResponse Org secrets
+     * @throws ApiError
+     */
+    listEnterpriseOrgSecrets(): CancelablePromise<OrgSecretsResponse>;
+    /**
+     * Create Enterprise Org Secret
+     * @param requestBody
+     * @returns OrgSecret Org secret created
+     * @throws ApiError
+     */
+    createEnterpriseOrgSecret(requestBody?: CreateOrgSecretRequest): CancelablePromise<OrgSecret>;
+    /**
+     * Update Enterprise Org Secret
+     * @param id
+     * @param requestBody
+     * @returns OrgSecret Org secret updated
+     * @throws ApiError
+     */
+    updateEnterpriseOrgSecret(id: string, requestBody?: UpdateOrgSecretRequest): CancelablePromise<OrgSecret>;
+    /**
+     * List Enterprise Integration Bindings
+     * @param appId
+     * @returns IntegrationBindingsResponse Integration bindings
+     * @throws ApiError
+     */
+    listEnterpriseIntegrationBindings(appId: string): CancelablePromise<IntegrationBindingsResponse>;
+    /**
+     * Create Enterprise Integration Binding
+     * @param appId
+     * @param requestBody
+     * @returns IntegrationBinding Integration binding created
+     * @throws ApiError
+     */
+    createEnterpriseIntegrationBinding(appId: string, requestBody?: CreateIntegrationBindingRequest): CancelablePromise<IntegrationBinding>;
+    /**
+     * Update Enterprise Integration Binding
+     * @param appId
+     * @param id
+     * @param requestBody
+     * @returns IntegrationBinding Integration binding updated
+     * @throws ApiError
+     */
+    updateEnterpriseIntegrationBinding(appId: string, id: string, requestBody?: UpdateIntegrationBindingRequest): CancelablePromise<IntegrationBinding>;
+    /**
+     * List Enterprise Env-Type Mappings
+     * @param appId
+     * @returns EnvTypeMappingsResponse Env-type mappings
+     * @throws ApiError
+     */
+    listEnterpriseEnvTypeMappings(appId: string): CancelablePromise<EnvTypeMappingsResponse>;
+    /**
+     * Create Enterprise Env-Type Mapping
+     * @param appId
+     * @param requestBody
+     * @returns EnvTypeMapping Env-type mapping created
+     * @throws ApiError
+     */
+    createEnterpriseEnvTypeMapping(appId: string, requestBody?: CreateEnvTypeMappingRequest): CancelablePromise<EnvTypeMapping>;
+    /**
+     * Update Enterprise Env-Type Mapping
+     * @param appId
+     * @param id
+     * @param requestBody
+     * @returns EnvTypeMapping Env-type mapping updated
+     * @throws ApiError
+     */
+    updateEnterpriseEnvTypeMapping(appId: string, id: string, requestBody?: UpdateEnvTypeMappingRequest): CancelablePromise<EnvTypeMapping>;
+    /**
+     * List Enterprise Sync Runs
+     * @returns SyncRunsResponse Sync runs
+     * @throws ApiError
+     */
+    listEnterpriseSyncRuns(): CancelablePromise<SyncRunsResponse>;
+    /**
+     * Create Enterprise Manual Sync Run
+     * @param requestBody
+     * @returns SyncRun Sync run created
+     * @throws ApiError
+     */
+    createEnterpriseManualSyncRun(requestBody?: CreateManualSyncRunRequest): CancelablePromise<SyncRun>;
+    /**
+     * List Enterprise Sync Audit Events
+     * @param syncRunId
+     * @returns SyncAuditEventsResponse Sync audit events
+     * @throws ApiError
+     */
+    listEnterpriseSyncAuditEvents(syncRunId: string): CancelablePromise<SyncAuditEventsResponse>;
+}
+
+type CreateOrgKmsCredentialRequest = {
+    key: string;
+    value: string;
+    description?: string | null;
+};
+
+type OrgKmsAppKeyInfo = {
+    app_id: string;
+    name: string;
+    key_version_id: string | null;
+    version: number | null;
+    encryption_count: number | null;
+    max_encryptions: number | null;
+    status: string;
+};
+
+type OrgKmsAppsResponse = {
+    apps: Array<OrgKmsAppKeyInfo>;
+};
+
+type OrgKmsCredentialResponse = {
+    id: string;
+    org_id: string;
+    key: string;
+    description: string | null;
+    configured: boolean;
+    created_at: string;
+    updated_at: string;
+};
+
+type OrgKmsConfigResponse = {
+    org_id: string;
+    source: OrgKmsConfigResponse.source;
+    status: OrgKmsConfigResponse.status;
+    key_ref: string | null;
+    region: string | null;
+    credential_secret_id: string | null;
+    kek_version: number;
+    last_verified_at: string | null;
+    last_error: string | null;
+    implicit: boolean;
+    credentials?: Array<OrgKmsCredentialResponse>;
+};
+declare namespace OrgKmsConfigResponse {
+    enum source {
+        MANAGED = "managed",
+        AWS_KMS = "aws-kms",
+        GCP_KMS = "gcp-kms",
+        AZURE_KV = "azure-kv"
+    }
+    enum status {
+        ACTIVE = "active",
+        PENDING = "pending",
+        ROTATING = "rotating",
+        UNAVAILABLE = "unavailable",
+        DISABLED = "disabled"
+    }
+}
+
+type OrgKmsJobResponse = {
+    id: string;
+    org_id: string;
+    app_id: string | null;
+    kind: OrgKmsJobResponse.kind;
+    status: OrgKmsJobResponse.status;
+    progress: Record<string, any>;
+    error_message: string | null;
+    created_by: string | null;
+    created_at: string;
+    updated_at: string;
+};
+declare namespace OrgKmsJobResponse {
+    enum kind {
+        KEK_REWRAP = "kek_rewrap",
+        DEK_REWRAP = "dek_rewrap",
+        DETACH_MANAGED = "detach_managed"
+    }
+    enum status {
+        PENDING = "pending",
+        RUNNING = "running",
+        SUCCEEDED = "succeeded",
+        FAILED = "failed"
+    }
+}
+
+type OrgKmsVerifyResponse = {
+    ok: boolean;
+    source: OrgKmsVerifyResponse.source;
+    status: OrgKmsVerifyResponse.status;
+    last_verified_at: string;
+};
+declare namespace OrgKmsVerifyResponse {
+    enum source {
+        MANAGED = "managed",
+        AWS_KMS = "aws-kms",
+        GCP_KMS = "gcp-kms",
+        AZURE_KV = "azure-kv"
+    }
+    enum status {
+        ACTIVE = "active",
+        PENDING = "pending",
+        ROTATING = "rotating",
+        UNAVAILABLE = "unavailable",
+        DISABLED = "disabled"
+    }
+}
+
+type UpdateOrgKmsConfigRequest = {
+    source: UpdateOrgKmsConfigRequest.source;
+    key_ref?: string | null;
+    region?: string | null;
+    credential_secret_id?: string | null;
+};
+declare namespace UpdateOrgKmsConfigRequest {
+    enum source {
+        MANAGED = "managed",
+        AWS_KMS = "aws-kms",
+        GCP_KMS = "gcp-kms",
+        AZURE_KV = "azure-kv"
+    }
+}
+
+declare class EnterpriseCmkService {
     readonly httpRequest: BaseHttpRequest;
     constructor(httpRequest: BaseHttpRequest);
     /**
-     * Create Direct Change Request
-     * Create a protected-environment change request with explicit env and secret changes.
+     * Break-glass detach organization CMK
+     * Hosted platform API. Enqueues detach-to-managed even if the org lost the kms grant or status is unavailable. Does not call ensureTenantKek.
+     * @param xEnvSyncPlatformToken
+     * @param orgId
+     * @returns OrgKmsJobResponse Already on managed wrapping
+     * @throws ApiError
+     */
+    breakGlassDetachOrgKms(xEnvSyncPlatformToken: string, orgId: string): CancelablePromise<OrgKmsJobResponse>;
+    /**
+     * Get organization KMS config
+     * Returns implicit managed/active when no org_kms_config row exists. Never returns key material.
+     * @returns OrgKmsConfigResponse Organization KMS config
+     * @throws ApiError
+     */
+    getOrgKmsConfig(): CancelablePromise<OrgKmsConfigResponse>;
+    /**
+     * Update organization KMS config
+     * Self-host cloud sources return 403 CMK_HOSTED_ONLY. Hosted persists cloud source as pending until attach.
      * @param requestBody
-     * @returns ChangeRequestResponse Direct change request created
+     * @returns OrgKmsConfigResponse Organization KMS config updated
      * @throws ApiError
      */
-    createDirectChangeRequest(requestBody?: DirectChangeRequestBody): CancelablePromise<ChangeRequestResponse>;
+    updateOrgKmsConfig(requestBody?: UpdateOrgKmsConfigRequest): CancelablePromise<OrgKmsConfigResponse>;
     /**
-     * Create Promotion Change Request
-     * Create a promotion request from one app environment to another protected environment.
+     * Create a purpose=kms org secret
+     * Encrypts the value under scope __kms_config__ before insert. Does not require the integrations feature.
      * @param requestBody
-     * @returns ChangeRequestResponse Promotion change request created
+     * @returns OrgKmsCredentialResponse Credential created (value redacted)
      * @throws ApiError
      */
-    createPromotionChangeRequest(requestBody?: PromotionChangeRequestBody): CancelablePromise<ChangeRequestResponse>;
+    createOrgKmsCredential(requestBody?: CreateOrgKmsCredentialRequest): CancelablePromise<OrgKmsCredentialResponse>;
     /**
-     * List Change Requests
-     * List change requests for the current organization.
-     * @returns ChangeRequestListResponse Change requests listed
+     * Verify organization KMS
+     * Managed source succeeds immediately. Cloud verify unwraps or first-wraps the tenant KEK.
+     * @returns OrgKmsVerifyResponse Verify result
      * @throws ApiError
      */
-    listChangeRequests(): CancelablePromise<ChangeRequestListResponse>;
+    verifyOrgKms(): CancelablePromise<OrgKmsVerifyResponse>;
     /**
-     * Get Change Request
-     * Fetch a single change request including env and secret item diffs.
-     * @param id
-     * @returns ChangeRequestResponse Change request fetched
+     * Rotate organization KEK
+     * Re-wraps wrapped_kek under the current key_ref. Hosted cloud-only; does not rewrap DEKs.
+     * @returns OrgKmsConfigResponse KEK rotated
      * @throws ApiError
      */
-    getChangeRequest(id: string): CancelablePromise<ChangeRequestResponse>;
+    rotateOrgKmsKek(): CancelablePromise<OrgKmsConfigResponse>;
     /**
-     * Approve Change Request
-     * Approve a pending change request and apply it atomically to the target environment.
-     * @param id
-     * @returns ChangeRequestResponse Change request approved and applied
+     * Attach organization CMK
+     * Enqueues DEK rewrap under the tenant KEK with allow_root_unwrap during the attach window. Hosted only.
+     * @returns OrgKmsJobResponse Attach job enqueued
      * @throws ApiError
      */
-    approveChangeRequest(id: string): CancelablePromise<ChangeRequestResponse>;
+    attachOrgKms(): CancelablePromise<OrgKmsJobResponse>;
     /**
-     * Reject Change Request
-     * Reject a pending change request without mutating the target environment.
-     * @param id
-     * @param requestBody
-     * @returns ChangeRequestResponse Change request rejected
+     * Detach organization CMK to managed
+     * Enqueues detach_managed. Does not call ensureTenantKek when status is unavailable.
+     * @returns OrgKmsJobResponse Detach job enqueued
      * @throws ApiError
      */
-    rejectChangeRequest(id: string, requestBody?: RejectChangeRequestBody): CancelablePromise<ChangeRequestResponse>;
+    detachOrgKms(): CancelablePromise<OrgKmsJobResponse>;
     /**
-     * Cancel Change Request
-     * Cancel a pending change request created by the current user.
+     * Get organization KMS job
      * @param id
-     * @returns ChangeRequestResponse Change request cancelled
+     * @returns OrgKmsJobResponse KMS job
      * @throws ApiError
      */
-    cancelChangeRequest(id: string): CancelablePromise<ChangeRequestResponse>;
+    getOrgKmsJob(id: string): CancelablePromise<OrgKmsJobResponse>;
+    /**
+     * List per-app KMS key info
+     * Calls GetKeyInfo per app. Never returns key material.
+     * @returns OrgKmsAppsResponse Per-app key metadata
+     * @throws ApiError
+     */
+    listOrgKmsApps(): CancelablePromise<OrgKmsAppsResponse>;
 }
 
 type CreateEnvTypeRequest = {
@@ -1561,6 +2387,246 @@ declare class GpgKeysService {
     updateGpgKeyTrustLevel(id: string, requestBody?: UpdateTrustLevelRequest): CancelablePromise<GpgKeyDetailResponse>;
 }
 
+type LicenseState = {
+    status: LicenseState.status;
+    lease_expires_at?: string | null;
+    last_verified_at?: string | null;
+    last_error_code?: string | null;
+    last_error_message?: string | null;
+    validation_mode?: LicenseState.validation_mode;
+    certificate_serial_hex?: string | null;
+    certificate_fingerprint_sha256?: string | null;
+    certificate_subject?: string | null;
+    certificate_issuer?: string | null;
+    certificate_expires_at?: string | null;
+    root_ca_fingerprint_sha256?: string | null;
+    validated_at?: string | null;
+};
+declare namespace LicenseState {
+    enum status {
+        UNKNOWN = "unknown",
+        ACTIVE = "active",
+        INACTIVE = "inactive",
+        EXPIRED = "expired",
+        ERROR = "error",
+        LOCKED = "locked"
+    }
+    enum validation_mode {
+        NONE = "none",
+        LEASE = "lease",
+        CERTIFICATE = "certificate"
+    }
+}
+
+type LicenseActionResponse = {
+    message: string;
+    state: LicenseState;
+};
+
+type LicenseStatusResponse = {
+    required: boolean;
+    locked: boolean;
+    reason?: string | null;
+    state: LicenseState;
+};
+
+declare class LicenseService {
+    readonly httpRequest: BaseHttpRequest;
+    constructor(httpRequest: BaseHttpRequest);
+    /**
+     * Get Management License Status
+     * @returns LicenseStatusResponse Current license status
+     * @throws ApiError
+     */
+    getManagementLicenseStatus(): CancelablePromise<LicenseStatusResponse>;
+    /**
+     * Activate Management License
+     * @returns LicenseActionResponse License activated
+     * @throws ApiError
+     */
+    activateManagementLicense(): CancelablePromise<LicenseActionResponse>;
+    /**
+     * Verify Management License
+     * @returns LicenseActionResponse License verified
+     * @throws ApiError
+     */
+    verifyManagementLicense(): CancelablePromise<LicenseActionResponse>;
+}
+
+type CreateLogForwardingRequest = {
+    name: string;
+    provider_type: CreateLogForwardingRequest.provider_type;
+    config: Record<string, any>;
+    enabled?: boolean;
+};
+declare namespace CreateLogForwardingRequest {
+    enum provider_type {
+        DATADOG = "datadog",
+        SPLUNK = "splunk",
+        SUMO_LOGIC = "sumo-logic"
+    }
+}
+
+type LogForwardingResponse = {
+    id: string;
+    org_id: string;
+    name: string;
+    provider_type: LogForwardingResponse.provider_type;
+    config: Record<string, any>;
+    enabled: boolean;
+    created_at: string;
+    updated_at: string;
+};
+declare namespace LogForwardingResponse {
+    enum provider_type {
+        DATADOG = "datadog",
+        SPLUNK = "splunk",
+        SUMO_LOGIC = "sumo-logic"
+    }
+}
+
+type LogForwardingsResponse = Array<LogForwardingResponse>;
+
+declare class LogForwardingService {
+    readonly httpRequest: BaseHttpRequest;
+    constructor(httpRequest: BaseHttpRequest);
+    /**
+     * Create Log Forwarding Config
+     * Create a new log forwarding configuration for the organization
+     * @param requestBody
+     * @returns LogForwardingResponse Log forwarding config created successfully
+     * @throws ApiError
+     */
+    createLogForwardingConfig(requestBody?: CreateLogForwardingRequest): CancelablePromise<LogForwardingResponse>;
+    /**
+     * Get All Log Forwarding Configs
+     * Retrieve all log forwarding configurations for the organization
+     * @returns LogForwardingsResponse Log forwarding configs retrieved successfully
+     * @throws ApiError
+     */
+    getLogForwardingConfigs(): CancelablePromise<LogForwardingsResponse>;
+    /**
+     * Get Log Forwarding Config
+     * Retrieve a specific log forwarding configuration
+     * @param id
+     * @returns LogForwardingResponse Log forwarding config retrieved successfully
+     * @throws ApiError
+     */
+    getLogForwardingConfig(id: string): CancelablePromise<LogForwardingResponse>;
+    /**
+     * Delete Log Forwarding Config
+     * Delete a log forwarding configuration
+     * @param id
+     * @returns ErrorResponse Log forwarding config deleted successfully
+     * @throws ApiError
+     */
+    deleteLogForwardingConfig(id: string): CancelablePromise<ErrorResponse>;
+}
+
+type CreateOidcProviderRequest = {
+    /**
+     * CI/CD platform type
+     */
+    provider_type: CreateOidcProviderRequest.provider_type;
+    /**
+     * OIDC issuer URL
+     */
+    issuer_url: string;
+    /**
+     * Expected audience claim value
+     */
+    audience: string;
+    /**
+     * Subject patterns to allow (glob matching). Empty = allow all subjects from this issuer.
+     */
+    allowed_subjects?: Array<string>;
+};
+declare namespace CreateOidcProviderRequest {
+    /**
+     * CI/CD platform type
+     */
+    enum provider_type {
+        GITHUB_ACTIONS = "github_actions",
+        GITLAB_CI = "gitlab_ci",
+        KUBERNETES = "kubernetes",
+        GENERIC = "generic"
+    }
+}
+
+type OidcProviderResponse = {
+    id: string;
+    org_id: string;
+    provider_type: OidcProviderResponse.provider_type;
+    issuer_url: string;
+    audience: string;
+    enabled: boolean;
+    allowed_subjects: Array<string>;
+    machine_user_id: string | null;
+    created_at: string;
+    updated_at: string;
+};
+declare namespace OidcProviderResponse {
+    enum provider_type {
+        GITHUB_ACTIONS = "github_actions",
+        GITLAB_CI = "gitlab_ci",
+        KUBERNETES = "kubernetes",
+        GENERIC = "generic"
+    }
+}
+
+type OidcProvidersResponse = Array<OidcProviderResponse>;
+
+type UpdateOidcProviderRequest = {
+    audience?: string;
+    enabled?: boolean;
+    allowed_subjects?: Array<string>;
+};
+
+declare class OidcProvidersService {
+    readonly httpRequest: BaseHttpRequest;
+    constructor(httpRequest: BaseHttpRequest);
+    /**
+     * Register OIDC Provider
+     * Register a new OIDC provider for CI/CD machine authentication
+     * @param requestBody
+     * @returns OidcProviderResponse OIDC provider created successfully
+     * @throws ApiError
+     */
+    createOidcProvider(requestBody?: CreateOidcProviderRequest): CancelablePromise<OidcProviderResponse>;
+    /**
+     * Get All OIDC Providers
+     * Retrieve all OIDC providers for the organization
+     * @returns OidcProvidersResponse OIDC providers retrieved successfully
+     * @throws ApiError
+     */
+    getAllOidcProviders(): CancelablePromise<OidcProvidersResponse>;
+    /**
+     * Get OIDC Provider
+     * Retrieve a specific OIDC provider
+     * @param id
+     * @returns OidcProviderResponse OIDC provider retrieved successfully
+     * @throws ApiError
+     */
+    getOidcProvider(id: string): CancelablePromise<OidcProviderResponse>;
+    /**
+     * Update OIDC Provider
+     * Update an existing OIDC provider
+     * @param id
+     * @param requestBody
+     * @returns ErrorResponse OIDC provider updated successfully
+     * @throws ApiError
+     */
+    updateOidcProvider(id: string, requestBody?: UpdateOidcProviderRequest): CancelablePromise<ErrorResponse>;
+    /**
+     * Delete OIDC Provider
+     * Delete an existing OIDC provider
+     * @param id
+     * @returns ErrorResponse OIDC provider deleted successfully
+     * @throws ApiError
+     */
+    deleteOidcProvider(id: string): CancelablePromise<ErrorResponse>;
+}
+
 type AcceptOrgInviteRequest = {
     org_data: {
         name: string;
@@ -1665,7 +2731,81 @@ declare class OnboardingService {
      * @returns CreateOrgInviteResponse Successful greeting response
      * @throws ApiError
      */
-    createOrgInvite(requestBody?: CreateOrgInviteRequest): CancelablePromise<CreateOrgInviteResponse>;
+    createOrgInvite(requestBody?: CreateOrgInviteRequest): CancelablePromise<CreateOrgInviteResponse>;
+    /**
+     * Get Organization Invite by Code
+     * Get organization invite by code
+     * @param inviteCode
+     * @returns GetOrgInviteByCodeResponse Organization invite retrieved successfully
+     * @throws ApiError
+     */
+    getOrgInviteByCode(inviteCode: string): CancelablePromise<GetOrgInviteByCodeResponse>;
+    /**
+     * Accept Organization Invite
+     * Accept organization invite
+     * @param inviteCode
+     * @param requestBody
+     * @returns AcceptOrgInviteResponse Organization invite accepted successfully
+     * @throws ApiError
+     */
+    acceptOrgInvite(inviteCode: string, requestBody?: AcceptOrgInviteRequest): CancelablePromise<AcceptOrgInviteResponse>;
+    /**
+     * Get User Invite by Code
+     * Get user invite by code
+     * @param inviteCode
+     * @returns GetUserInviteByTokenResponse User invite retrieved successfully
+     * @throws ApiError
+     */
+    getUserInviteByCode(inviteCode: string): CancelablePromise<GetUserInviteByTokenResponse>;
+    /**
+     * Update User Invite
+     * Update user invite
+     * @param inviteCode
+     * @param requestBody
+     * @returns UpdateUserInviteResponse User invite updated successfully
+     * @throws ApiError
+     */
+    updateUserInvite(inviteCode: string, requestBody?: UpdateUserInviteRequest): CancelablePromise<UpdateUserInviteResponse>;
+    /**
+     * Accept User Invite
+     * Accept user invite
+     * @param inviteCode
+     * @param requestBody
+     * @returns AcceptUserInviteResponse User invite accepted successfully
+     * @throws ApiError
+     */
+    acceptUserInvite(inviteCode: string, requestBody?: AcceptUserInviteRequest): CancelablePromise<AcceptUserInviteResponse>;
+    /**
+     * Create User Invite
+     * Create a user invite
+     * @param requestBody
+     * @returns CreateUserInviteResponse User invite created successfully
+     * @throws ApiError
+     */
+    createUserInvite(requestBody?: CreateUserInviteRequest): CancelablePromise<CreateUserInviteResponse>;
+    /**
+     * Get All User Invites
+     * Get all user invites
+     * @returns GetUserInviteByTokenResponse User invites retrieved successfully
+     * @throws ApiError
+     */
+    getAllUserInvites(): CancelablePromise<GetUserInviteByTokenResponse>;
+    /**
+     * Delete User Invite
+     * Delete user invite
+     * @param inviteId
+     * @returns DeleteUserInviteResponse User invite deleted successfully
+     * @throws ApiError
+     */
+    deleteUserInvite(inviteId: string): CancelablePromise<DeleteUserInviteResponse>;
+    /**
+     * Create Organization Invite
+     * Create an organization invite
+     * @param requestBody
+     * @returns CreateOrgInviteResponse Successful greeting response
+     * @throws ApiError
+     */
+    manageCreateOrgInvite(requestBody?: CreateOrgInviteRequest): CancelablePromise<CreateOrgInviteResponse>;
     /**
      * Get Organization Invite by Code
      * Get organization invite by code
@@ -1673,7 +2813,7 @@ declare class OnboardingService {
      * @returns GetOrgInviteByCodeResponse Organization invite retrieved successfully
      * @throws ApiError
      */
-    getOrgInviteByCode(inviteCode: string): CancelablePromise<GetOrgInviteByCodeResponse>;
+    manageGetOrgInviteByCode(inviteCode: string): CancelablePromise<GetOrgInviteByCodeResponse>;
     /**
      * Accept Organization Invite
      * Accept organization invite
@@ -1682,7 +2822,7 @@ declare class OnboardingService {
      * @returns AcceptOrgInviteResponse Organization invite accepted successfully
      * @throws ApiError
      */
-    acceptOrgInvite(inviteCode: string, requestBody?: AcceptOrgInviteRequest): CancelablePromise<AcceptOrgInviteResponse>;
+    manageAcceptOrgInvite(inviteCode: string, requestBody?: AcceptOrgInviteRequest): CancelablePromise<AcceptOrgInviteResponse>;
     /**
      * Get User Invite by Code
      * Get user invite by code
@@ -1690,7 +2830,7 @@ declare class OnboardingService {
      * @returns GetUserInviteByTokenResponse User invite retrieved successfully
      * @throws ApiError
      */
-    getUserInviteByCode(inviteCode: string): CancelablePromise<GetUserInviteByTokenResponse>;
+    manageGetUserInviteByCode(inviteCode: string): CancelablePromise<GetUserInviteByTokenResponse>;
     /**
      * Update User Invite
      * Update user invite
@@ -1699,7 +2839,7 @@ declare class OnboardingService {
      * @returns UpdateUserInviteResponse User invite updated successfully
      * @throws ApiError
      */
-    updateUserInvite(inviteCode: string, requestBody?: UpdateUserInviteRequest): CancelablePromise<UpdateUserInviteResponse>;
+    manageUpdateUserInvite(inviteCode: string, requestBody?: UpdateUserInviteRequest): CancelablePromise<UpdateUserInviteResponse>;
     /**
      * Accept User Invite
      * Accept user invite
@@ -1708,7 +2848,7 @@ declare class OnboardingService {
      * @returns AcceptUserInviteResponse User invite accepted successfully
      * @throws ApiError
      */
-    acceptUserInvite(inviteCode: string, requestBody?: AcceptUserInviteRequest): CancelablePromise<AcceptUserInviteResponse>;
+    manageAcceptUserInvite(inviteCode: string, requestBody?: AcceptUserInviteRequest): CancelablePromise<AcceptUserInviteResponse>;
     /**
      * Create User Invite
      * Create a user invite
@@ -1716,14 +2856,14 @@ declare class OnboardingService {
      * @returns CreateUserInviteResponse User invite created successfully
      * @throws ApiError
      */
-    createUserInvite(requestBody?: CreateUserInviteRequest): CancelablePromise<CreateUserInviteResponse>;
+    manageCreateUserInvite(requestBody?: CreateUserInviteRequest): CancelablePromise<CreateUserInviteResponse>;
     /**
      * Get All User Invites
      * Get all user invites
      * @returns GetUserInviteByTokenResponse User invites retrieved successfully
      * @throws ApiError
      */
-    getAllUserInvites(): CancelablePromise<GetUserInviteByTokenResponse>;
+    manageGetAllUserInvites(): CancelablePromise<GetUserInviteByTokenResponse>;
     /**
      * Delete User Invite
      * Delete user invite
@@ -1731,7 +2871,7 @@ declare class OnboardingService {
      * @returns DeleteUserInviteResponse User invite deleted successfully
      * @throws ApiError
      */
-    deleteUserInvite(inviteId: string): CancelablePromise<DeleteUserInviteResponse>;
+    manageDeleteUserInvite(inviteId: string): CancelablePromise<DeleteUserInviteResponse>;
 }
 
 type CheckSlugResponse = {
@@ -1802,6 +2942,62 @@ declare class OrganizationsService {
     checkIfSlugExists(slug: string): CancelablePromise<CheckSlugResponse>;
 }
 
+type OrgFeatureGrantResponse = {
+    org_id: string;
+    unrestricted: boolean;
+    features: Array<string>;
+    source: string | null;
+    updated_by: string | null;
+    created_at: string | null;
+    updated_at: string | null;
+};
+
+type PutOrgFeatureGrantRequest = {
+    features: Array<string>;
+    source?: PutOrgFeatureGrantRequest.source;
+    updated_by?: string;
+};
+declare namespace PutOrgFeatureGrantRequest {
+    enum source {
+        BILLING = "billing",
+        SUPPORT = "support",
+        SEED = "seed"
+    }
+}
+
+declare class OrgFeaturesService {
+    readonly httpRequest: BaseHttpRequest;
+    constructor(httpRequest: BaseHttpRequest);
+    /**
+     * Get Organization Feature Grant
+     * Hosted platform API. No row means unrestricted (full catalog).
+     * @param xEnvSyncPlatformToken
+     * @param orgId
+     * @returns OrgFeatureGrantResponse Organization feature grant
+     * @throws ApiError
+     */
+    getOrgFeatureGrant(xEnvSyncPlatformToken: string, orgId: string): CancelablePromise<OrgFeatureGrantResponse>;
+    /**
+     * Replace Organization Feature Grant
+     * Full replace. Empty features[] denies every EE feature. Unknown catalog keys are dropped.
+     * @param xEnvSyncPlatformToken
+     * @param orgId
+     * @param requestBody
+     * @returns OrgFeatureGrantResponse Organization feature grant replaced
+     * @throws ApiError
+     */
+    putOrgFeatureGrant(xEnvSyncPlatformToken: string, orgId: string, requestBody?: PutOrgFeatureGrantRequest): CancelablePromise<OrgFeatureGrantResponse>;
+    /**
+     * Delete Organization Feature Grant
+     * Drops the grant row so the organization is unrestricted.
+     * @param xEnvSyncPlatformToken
+     * @param orgId
+     * @returns OrgFeatureGrantResponse Grant deleted; organization unrestricted
+     * @throws ApiError
+     */
+    deleteOrgFeatureGrant(xEnvSyncPlatformToken: string, orgId: string): CancelablePromise<OrgFeatureGrantResponse>;
+}
+
 type EffectiveAccessEntry = {
     user_id: string;
     email: string;
@@ -2069,6 +3265,357 @@ declare class RolesService {
     deleteRole(id: string): CancelablePromise<RoleResponse>;
 }
 
+type CreateRotationPolicyRequest = {
+    app_id: string;
+    env_type_id: string;
+    variable_key: string;
+    engine_type: CreateRotationPolicyRequest.engine_type;
+    schedule_cron: string;
+    dual_window_minutes?: number;
+    enabled?: boolean;
+    connection_config: Record<string, any>;
+};
+declare namespace CreateRotationPolicyRequest {
+    enum engine_type {
+        POSTGRES = "postgres",
+        MYSQL = "mysql",
+        AWS_IAM = "aws-iam",
+        AZURE_SP = "azure-sp",
+        GCP_SERVICE_ACCOUNT = "gcp-service-account",
+        CLOUDFLARE_PAGES = "cloudflare-pages",
+        SENDGRID = "sendgrid",
+        TWILIO = "twilio"
+    }
+}
+
+type RevokeOldCredentialResponse = {
+    message: string;
+    revoked_at: string;
+};
+
+type RotationPolicyResponse = {
+    id: string;
+    org_id: string;
+    app_id: string;
+    env_type_id: string;
+    variable_key: string;
+    engine_type: RotationPolicyResponse.engine_type;
+    schedule_cron: string;
+    dual_window_minutes: number;
+    enabled: boolean;
+    last_rotated_at: string | null;
+    next_rotation_at: string | null;
+    created_at: string;
+    updated_at: string;
+};
+declare namespace RotationPolicyResponse {
+    enum engine_type {
+        POSTGRES = "postgres",
+        MYSQL = "mysql",
+        AWS_IAM = "aws-iam",
+        AZURE_SP = "azure-sp",
+        GCP_SERVICE_ACCOUNT = "gcp-service-account",
+        CLOUDFLARE_PAGES = "cloudflare-pages",
+        SENDGRID = "sendgrid",
+        TWILIO = "twilio"
+    }
+}
+
+type RotationPoliciesResponse = Array<RotationPolicyResponse>;
+
+type RotationStateResponse = {
+    id: string;
+    rotation_policy_id: string;
+    rotated_at: string;
+    old_credential_expires_at: string;
+    old_credential_revoked: boolean;
+    revoked_at: string | null;
+    created_at: string;
+};
+
+type RotationStatesResponse = Array<RotationStateResponse>;
+
+type TriggerRotationResponse = {
+    message: string;
+    rotation_state_id: string;
+    new_credential_stored: boolean;
+    old_credential_expires_at: string;
+};
+
+type UpdateRotationPolicyRequest = {
+    schedule_cron?: string;
+    dual_window_minutes?: number;
+    enabled?: boolean;
+    connection_config?: Record<string, any>;
+};
+
+declare class RotationService {
+    readonly httpRequest: BaseHttpRequest;
+    constructor(httpRequest: BaseHttpRequest);
+    /**
+     * Create Rotation Policy
+     * Create a new secret rotation policy for a variable
+     * @param requestBody
+     * @returns RotationPolicyResponse Rotation policy created successfully
+     * @throws ApiError
+     */
+    createRotationPolicy(requestBody?: CreateRotationPolicyRequest): CancelablePromise<RotationPolicyResponse>;
+    /**
+     * Get Rotation Policies
+     * List all rotation policies for the organization
+     * @param appId
+     * @param envTypeId
+     * @param enabled
+     * @returns RotationPoliciesResponse Rotation policies retrieved successfully
+     * @throws ApiError
+     */
+    getRotationPolicies(appId?: string, envTypeId?: string, enabled?: 'true' | 'false'): CancelablePromise<RotationPoliciesResponse>;
+    /**
+     * Get Rotation Policy
+     * Get a specific rotation policy by ID
+     * @param id
+     * @returns RotationPolicyResponse Rotation policy retrieved successfully
+     * @throws ApiError
+     */
+    getRotationPolicy(id: string): CancelablePromise<RotationPolicyResponse>;
+    /**
+     * Update Rotation Policy
+     * Update an existing rotation policy
+     * @param id
+     * @param requestBody
+     * @returns RotationPolicyResponse Rotation policy updated successfully
+     * @throws ApiError
+     */
+    updateRotationPolicy(id: string, requestBody?: UpdateRotationPolicyRequest): CancelablePromise<RotationPolicyResponse>;
+    /**
+     * Delete Rotation Policy
+     * Delete a rotation policy
+     * @param id
+     * @returns ErrorResponse Rotation policy deleted successfully
+     * @throws ApiError
+     */
+    deleteRotationPolicy(id: string): CancelablePromise<ErrorResponse>;
+    /**
+     * Trigger Rotation
+     * Manually trigger a secret rotation for a policy
+     * @param id
+     * @returns TriggerRotationResponse Rotation executed successfully
+     * @throws ApiError
+     */
+    triggerRotation(id: string): CancelablePromise<TriggerRotationResponse>;
+    /**
+     * Get Rotation States
+     * Get the rotation state history for a policy
+     * @param id
+     * @returns RotationStatesResponse Rotation states retrieved successfully
+     * @throws ApiError
+     */
+    getRotationStates(id: string): CancelablePromise<RotationStatesResponse>;
+    /**
+     * Revoke Expired Credentials
+     * Revoke old credentials that have passed their dual-credential window
+     * @returns RevokeOldCredentialResponse Expired credentials revoked successfully
+     * @throws ApiError
+     */
+    revokeExpiredCredentials(): CancelablePromise<RevokeOldCredentialResponse>;
+}
+
+type CreateSamlProviderRequest = {
+    /**
+     * SAML identity provider type
+     */
+    provider_type: CreateSamlProviderRequest.provider_type;
+    /**
+     * Human-readable name for this provider
+     */
+    name: string;
+    /**
+     * SAML entity ID (issuer) from the IdP metadata
+     */
+    entity_id?: string;
+    /**
+     * IdP SSO login URL
+     */
+    sso_url?: string;
+    /**
+     * IdP X.509 certificate (PEM format) for signature validation
+     */
+    certificate?: string;
+    /**
+     * Optional IdP metadata XML. When set, entity_id, sso_url, and certificate are parsed from it.
+     */
+    idp_metadata_xml?: string;
+    /**
+     * Mark this provider as the default IdP for the organization
+     */
+    is_default?: boolean;
+};
+declare namespace CreateSamlProviderRequest {
+    /**
+     * SAML identity provider type
+     */
+    enum provider_type {
+        OKTA = "okta",
+        ONELOGIN = "onelogin",
+        AZURE_AD = "azure-ad",
+        GOOGLE_WORKSPACE = "google-workspace",
+        DUO = "duo",
+        RIPPLING = "rippling",
+        ORACLE = "oracle",
+        PING_IDENTITY = "ping-identity"
+    }
+}
+
+type SamlProviderResponse = {
+    id: string;
+    org_id: string;
+    provider_type: SamlProviderResponse.provider_type;
+    name: string;
+    entity_id: string;
+    sso_url: string;
+    certificate?: string;
+    certificate_fingerprint?: string;
+    certificate_not_after?: string | null;
+    enabled: boolean;
+    is_default: boolean;
+    last_sso_at?: string | null;
+    created_at: string;
+    updated_at: string;
+};
+declare namespace SamlProviderResponse {
+    enum provider_type {
+        OKTA = "okta",
+        ONELOGIN = "onelogin",
+        AZURE_AD = "azure-ad",
+        GOOGLE_WORKSPACE = "google-workspace",
+        DUO = "duo",
+        RIPPLING = "rippling",
+        ORACLE = "oracle",
+        PING_IDENTITY = "ping-identity"
+    }
+}
+
+type SamlProvidersResponse = Array<SamlProviderResponse>;
+
+type UpdateSamlProviderRequest = {
+    name?: string;
+    entity_id?: string;
+    sso_url?: string;
+    certificate?: string;
+    enabled?: boolean;
+    is_default?: boolean;
+    idp_metadata_xml?: string;
+};
+
+declare class SamlProvidersService {
+    readonly httpRequest: BaseHttpRequest;
+    constructor(httpRequest: BaseHttpRequest);
+    /**
+     * Register SAML Provider
+     * Register a new SAML identity provider for SSO authentication
+     * @param requestBody
+     * @returns SamlProviderResponse SAML provider created successfully
+     * @throws ApiError
+     */
+    createSamlProvider(requestBody?: CreateSamlProviderRequest): CancelablePromise<SamlProviderResponse>;
+    /**
+     * Get All SAML Providers
+     * Retrieve all SAML providers for the organization
+     * @returns SamlProvidersResponse SAML providers retrieved successfully
+     * @throws ApiError
+     */
+    getAllSamlProviders(): CancelablePromise<SamlProvidersResponse>;
+    /**
+     * Get SAML Provider
+     * Retrieve a specific SAML provider. Certificate PEM is omitted unless include=certificate.
+     * @param id
+     * @returns SamlProviderResponse SAML provider retrieved successfully
+     * @throws ApiError
+     */
+    getSamlProvider(id: string): CancelablePromise<SamlProviderResponse>;
+    /**
+     * Update SAML Provider
+     * Update an existing SAML provider
+     * @param id
+     * @param requestBody
+     * @returns ErrorResponse SAML provider updated successfully
+     * @throws ApiError
+     */
+    updateSamlProvider(id: string, requestBody?: UpdateSamlProviderRequest): CancelablePromise<ErrorResponse>;
+    /**
+     * Delete SAML Provider
+     * Delete an existing SAML provider
+     * @param id
+     * @returns ErrorResponse SAML provider deleted successfully
+     * @throws ApiError
+     */
+    deleteSamlProvider(id: string): CancelablePromise<ErrorResponse>;
+    /**
+     * Get SAML SP Metadata
+     * Redirects to the public SP metadata URL for this organization
+     * @param id
+     * @returns void
+     * @throws ApiError
+     */
+    getSamlMetadata(id: string): CancelablePromise<void>;
+}
+
+type PublicSamlSsoRequest = {
+    /**
+     * Optional SAML provider ID. Must belong to the organization and be enabled.
+     */
+    provider_id?: string;
+};
+
+type SamlSsoResponse = {
+    /**
+     * URL to redirect the user to for IdP authentication
+     */
+    redirect_url: string;
+    /**
+     * AuthnRequest ID for tracking
+     */
+    request_id: string;
+};
+
+declare class SamlSsoService {
+    readonly httpRequest: BaseHttpRequest;
+    constructor(httpRequest: BaseHttpRequest);
+    /**
+     * Get public SAML SP metadata
+     * Unauthenticated SP metadata XML for the organization
+     * @param orgId
+     * @returns string SP metadata XML
+     * @throws ApiError
+     */
+    getPublicSamlMetadata(orgId: string): CancelablePromise<string>;
+    /**
+     * SAML Assertion Consumer Service
+     * Receive and validate a SAML Response from the identity provider
+     * @param orgId
+     * @returns void
+     * @throws ApiError
+     */
+    handlePublicSamlAcs(orgId: string): CancelablePromise<void>;
+    /**
+     * Start SAML SSO
+     * Unauthenticated SP-initiated start. Returns a redirect URL for the login page or CLI.
+     * @param orgSlug
+     * @param requestBody
+     * @returns SamlSsoResponse Redirect URL generated
+     * @throws ApiError
+     */
+    startPublicSamlSso(orgSlug: string, requestBody?: PublicSamlSsoRequest): CancelablePromise<SamlSsoResponse>;
+    /**
+     * Bookmark SAML SSO start
+     * Success redirects to the IdP. Any error redirects to the dashboard login page.
+     * @param orgSlug
+     * @returns void
+     * @throws ApiError
+     */
+    startPublicSamlSsoRedirect(orgSlug: string): CancelablePromise<void>;
+}
+
 type BatchCreateSecretsRequest = {
     app_id: string;
     env_type_id: string;
@@ -2482,10 +4029,6 @@ type CreateServiceTokenResponse = {
     created_at: string;
 };
 
-type ErrorResponse = {
-    error: string;
-};
-
 type ServiceTokenResponse = {
     id: string;
     name: string;
@@ -2535,59 +4078,89 @@ declare class ServiceTokensService {
     deleteServiceToken(id: string): CancelablePromise<ErrorResponse>;
 }
 
-type LicenseState = {
-    status: LicenseState.status;
-    lease_expires_at?: string | null;
-    last_verified_at?: string | null;
-    last_error_code?: string | null;
-    last_error_message?: string | null;
-    validation_mode?: LicenseState.validation_mode;
-    certificate_serial_hex?: string | null;
-    certificate_fingerprint_sha256?: string | null;
-    certificate_subject?: string | null;
-    certificate_issuer?: string | null;
-    certificate_expires_at?: string | null;
-    root_ca_fingerprint_sha256?: string | null;
-    validated_at?: string | null;
+type CreateSetupOrgRequest = {
+    org_name: string;
+    org_slug?: string;
+    admin_email: string;
+    admin_full_name?: string;
+    admin_password: string;
 };
-declare namespace LicenseState {
-    enum status {
-        UNKNOWN = "unknown",
-        ACTIVE = "active",
-        INACTIVE = "inactive",
-        EXPIRED = "expired",
-        ERROR = "error",
-        LOCKED = "locked"
+
+type SetupStatusResponse = {
+    deployment_mode: SetupStatusResponse.deployment_mode;
+    edition: SetupStatusResponse.edition;
+    org_count: number;
+    max_orgs: number | null;
+    can_create_organization: boolean;
+    first_org_ready: boolean;
+    channel: string;
+};
+declare namespace SetupStatusResponse {
+    enum deployment_mode {
+        HOSTED = "hosted",
+        SELFHOSTED = "selfhosted"
     }
-    enum validation_mode {
-        NONE = "none",
-        LEASE = "lease",
-        CERTIFICATE = "certificate"
+    enum edition {
+        OSS = "oss",
+        ENTERPRISE = "enterprise"
     }
 }
 
-type LicenseStatusResponse = {
-    required: boolean;
-    locked: boolean;
-    reason?: string | null;
-    state: LicenseState;
-};
+declare class SetupService {
+    readonly httpRequest: BaseHttpRequest;
+    constructor(httpRequest: BaseHttpRequest);
+    /**
+     * Operator setup status (self-host)
+     * @returns SetupStatusResponse Setup status
+     * @throws ApiError
+     */
+    getSetupStatus(): CancelablePromise<SetupStatusResponse>;
+    /**
+     * Create organization via operator setup token (self-host only)
+     * @param requestBody
+     * @returns any Organization created
+     * @throws ApiError
+     */
+    createSetupOrganization(requestBody?: CreateSetupOrgRequest): CancelablePromise<{
+        message: string;
+        org_id: string;
+        admin_user_id: string;
+        source: string;
+        first_org: boolean;
+    }>;
+}
 
 type SystemStatusState = {
     edition: SystemStatusState.edition;
+    deployment_mode?: SystemStatusState.deployment_mode;
     single_org_mode: boolean;
+    max_orgs?: number | null;
+    public_signup_enabled?: boolean;
+    can_create_organization?: boolean;
     management_enabled: boolean;
     observability_enabled: boolean;
     management_web_enabled: boolean;
     landing_enabled: boolean;
     first_bootstrap_completed_at?: string | null;
     org_count: number;
+    entitlement?: {
+        present: boolean;
+        source: string | null;
+        in_grace: boolean;
+        features: Array<string>;
+        max_orgs: number | null;
+        expires_at: string | null;
+    };
 };
 declare namespace SystemStatusState {
     enum edition {
         OSS = "oss",
         ENTERPRISE = "enterprise"
     }
+    enum deployment_mode {
+        HOSTED = "hosted",
+        SELFHOSTED = "selfhosted"
+    }
 }
 
 type SystemStatusResponse = {
@@ -2604,6 +4177,12 @@ declare class SystemService {
      * @throws ApiError
      */
     getManagementSystemStatus(): CancelablePromise<SystemStatusResponse>;
+    /**
+     * Get Management System Status
+     * @returns SystemStatusResponse Management system status
+     * @throws ApiError
+     */
+    manageGetManagementSystemStatus(): CancelablePromise<SystemStatusResponse>;
 }
 
 type AddTeamMemberRequest = {
@@ -2823,7 +4402,7 @@ declare class UsersService {
      * @returns UserResponse User role updated successfully
      * @throws ApiError
      */
-    updateRole(id: string, requestBody?: UpdateRoleRequest): CancelablePromise<UserResponse>;
+    updateUserRole(id: string, requestBody?: UpdateRoleRequest): CancelablePromise<UserResponse>;
     /**
      * Update User Password
      * Update a user's password (Admin only)
@@ -2979,20 +4558,31 @@ declare class EnvSyncAPISDK {
     readonly authentication: AuthenticationService;
     readonly certificates: CertificatesService;
     readonly changeRequests: ChangeRequestsService;
+    readonly dynamicSecrets: DynamicSecretsService;
+    readonly enterprise: EnterpriseService;
+    readonly enterpriseCmk: EnterpriseCmkService;
     readonly environmentTypes: EnvironmentTypesService;
     readonly environmentVariables: EnvironmentVariablesService;
     readonly environmentVariablesPointInTime: EnvironmentVariablesPointInTimeService;
     readonly environmentVariablesRollback: EnvironmentVariablesRollbackService;
     readonly fileUpload: FileUploadService;
     readonly gpgKeys: GpgKeysService;
+    readonly license: LicenseService;
+    readonly logForwarding: LogForwardingService;
+    readonly oidcProviders: OidcProvidersService;
     readonly onboarding: OnboardingService;
     readonly organizations: OrganizationsService;
+    readonly orgFeatures: OrgFeaturesService;
     readonly permissions: PermissionsService;
     readonly roles: RolesService;
+    readonly rotation: RotationService;
+    readonly samlProviders: SamlProvidersService;
+    readonly samlSso: SamlSsoService;
     readonly secrets: SecretsService;
     readonly secretsPointInTime: SecretsPointInTimeService;
     readonly secretsRollback: SecretsRollbackService;
     readonly serviceTokens: ServiceTokensService;
+    readonly setup: SetupService;
     readonly system: SystemService;
     readonly teams: TeamsService;
     readonly users: UsersService;
@@ -3018,6 +4608,18 @@ declare class ApiError extends Error {
     constructor(request: ApiRequestOptions, response: ApiResult, message: string);
 }
 
+type OrgFeatureGrantParam = {
+    orgId: string;
+};
+
+type OrgKmsBreakGlassParam = {
+    orgId: string;
+};
+
+type OrgKmsJobParam = {
+    id: string;
+};
+
 type UploadFileError = {
     error: string;
 };
@@ -3027,4 +4629,4 @@ type UploadFileError = {
  */
 type XEnvSyncOrgIdHeader = string;
 
-export { type AcceptOrgInviteRequest, type AcceptOrgInviteResponse, type AcceptUserInviteRequest, type AcceptUserInviteResponse, AccessService, type AddTeamMemberRequest, ApiError, type ApiKeyResponse, type ApiKeysResponse, ApiKeysService, ApplicationsService, type AssignTeamRoleRequest, AuditLogsService, AuthenticationService, type BaseCertificateResponse, BaseHttpRequest, type BatchCreateEnvsRequest, type BatchCreateSecretsRequest, type BatchDeleteEnvsRequest, type BatchDeleteSecretsRequest, type BatchEnvsResponse, type BatchSecretsResponse, type CRLResponse, type CallbackResponse, CancelError, CancelablePromise, type CertificateListResponse, CertificatesService, type ChangeRequestListResponse, ChangeRequestResponse, ChangeRequestsService, type CheckSlugResponse, type CreateApiKeyRequest, type CreateAppRequest, type CreateAppResponse, type CreateEnvRequest, type CreateEnvTypeRequest, type CreateOrgInviteRequest, type CreateOrgInviteResponse, type CreateRoleRequest, type CreateSecretRequest, type CreateServiceTokenRequest, type CreateServiceTokenResponse, type CreateTeamRequest, type CreateTeamResponse, type CreateUserInviteRequest, type CreateUserInviteResponse, CreateWebhookRequest, type DeleteAppResponse, type DeleteEnvRequest, type DeleteEnvTypeRequest, type DeleteOrgRequest, type DeleteOrgResponse, type DeleteSecretRequest, type DeleteUserInviteResponse, type DirectChangeRequestBody, EffectiveAccessEntry, type EffectiveAccessResponse, type EffectivePermissionsResponse, type EnvDiffRequest, type EnvDiffResponse, type EnvHistoryRequest, type EnvHistoryResponse, type EnvPitRequest, type EnvPitStateResponse, type EnvResponse, EnvSyncAPISDK, type EnvTimestampRangeDiffRequest, type EnvTimestampRequest, type EnvTypeResponse, type EnvTypesResponse, EnvironmentTypesService, EnvironmentVariablesPointInTimeService, EnvironmentVariablesRollbackService, EnvironmentVariablesService, type EnvsResponse, type ErrorResponse, ExportEnvRequest, type ExportEnvResponse, type ExportKeyResponse, type ExtendGpgKeyExpiryRequest, FileUploadService, GenerateGpgKeyRequest, type GetAppResponse, type GetAppsResponse, type GetAuditLogsResponse, type GetAuditLogsResponseWrapper, type GetEnvRequest, type GetOrgInviteByCodeResponse, type GetSecretRequest, type GetTeamResponse, type GetTeamsResponse, type GetUserInviteByTokenResponse, type GpgKeyDetailResponse, type GpgKeyResponse, type GpgKeysResponse, GpgKeysService, GrantAccessRequest, GrantEntry, type GrantsListResponse, type ImportGpgKeyRequest, type InitOrgCARequest, type IssueMemberCertRequest, LicenseState, type LicenseStatusResponse, type LoginUrlResponse, type LogoutUrlResponse, type MemberCertResponse, type MyCertificateBundleResponse, type OCSPResponse, OnboardingService, OpenAPI, type OpenAPIConfig, type OrgCAResponse, type OrgResponse, OrganizationsService, type PermissionMessageResponse, PermissionsService, type PromotionChangeRequestBody, type RegenerateApiKeyResponse, type RejectChangeRequestBody, type RenewCertRequest, type RevealSecretsRequest, type RevealSecretsResponse, RevokeAccessRequest, type RevokeCertRequest, type RevokeCertResponse, type RevokeGpgKeyRequest, type RoleResponse, type RoleStatsResponse, type RolesResponse, RolesService, type RollbackResponse, type RollbackSecretsResponse, type RollbackSecretsToPitRequest, type RollbackSecretsToTimestampRequest, type RollbackToPitRequest, type RollbackToTimestampRequest, type RootCAResponse, type RotateCertRequest, RotateGpgKeyRequest, type SecretDiffRequest, type SecretDiffResponse, type SecretHistoryRequest, type SecretHistoryResponse, type SecretPitRequest, type SecretPitStateResponse, type SecretResponse, type SecretTimestampRangeDiffRequest, type SecretTimestampRequest, SecretVariableRollbackResponse, type SecretVariableRollbackToPitRequest, type SecretVariableRollbackToTimestampRequest, type SecretVariableTimelineRequest, type SecretVariableTimelineResponse, SecretsPointInTimeService, type SecretsResponse, SecretsRollbackService, SecretsService, type ServiceTokenPermissions, type ServiceTokenResponse, type ServiceTokensResponse, ServiceTokensService, SignDataRequest, type SignatureResponse, SystemService, type SystemStatusResponse, SystemStatusState, type TeamMessageResponse, TeamsService, type UpdateApiKeyRequest, type UpdateAppRequest, type UpdateAppResponse, type UpdateEnvRequest, type UpdateEnvTypeRequest, type UpdateOrgRequest, type UpdateRoleRequest, type UpdateSecretRequest, type UpdateTeamRequest, UpdateTrustLevelRequest, type UpdateUserInviteRequest, type UpdateUserInviteResponse, type UpdateUserRequest, UpdateWebhookRequest, type UploadFileError, type UploadFileResponse, type UserResponse, type UsersResponse, UsersService, VariableRollbackResponse, type VariableRollbackToPitRequest, type VariableRollbackToTimestampRequest, type VariableTimelineRequest, type VariableTimelineResponse, type VerifyResponse, type VerifySignatureRequest, WebhookResponse, type WebhooksResponse, WebhooksService, type WhoAmIResponse, type XEnvSyncOrgIdHeader };
+export { type AcceptOrgInviteRequest, type AcceptOrgInviteResponse, type AcceptUserInviteRequest, type AcceptUserInviteResponse, AccessService, type AddTeamMemberRequest, ApiError, type ApiKeyResponse, type ApiKeysResponse, ApiKeysService, ApplicationsService, type AssignTeamRoleRequest, AuditLogsService, AuthenticationService, type BaseCertificateResponse, BaseHttpRequest, type BatchCreateEnvsRequest, type BatchCreateSecretsRequest, type BatchDeleteEnvsRequest, type BatchDeleteSecretsRequest, type BatchEnvsResponse, type BatchSecretsResponse, type CRLResponse, type CallbackResponse, CancelError, CancelablePromise, type CertificateListResponse, CertificatesService, type ChangeRequestListResponse, ChangeRequestResponse, ChangeRequestsService, type CheckSlugResponse, type CleanupResponse, type CreateApiKeyRequest, type CreateAppRequest, type CreateAppResponse, CreateDynamicSecretEngineRequest, type CreateDynamicSecretLeaseRequest, type CreateEnvRequest, type CreateEnvTypeMappingRequest, type CreateEnvTypeRequest, CreateIntegrationBindingRequest, CreateLogForwardingRequest, CreateManualSyncRunRequest, CreateOidcProviderRequest, type CreateOrgInviteRequest, type CreateOrgInviteResponse, type CreateOrgKmsCredentialRequest, type CreateOrgSecretRequest, CreateProviderConnectionRequest, type CreateRoleRequest, CreateRotationPolicyRequest, CreateSamlProviderRequest, type CreateSecretRequest, type CreateServiceTokenRequest, type CreateServiceTokenResponse, type CreateSetupOrgRequest, type CreateTeamRequest, type CreateTeamResponse, type CreateUserInviteRequest, type CreateUserInviteResponse, CreateWebhookRequest, type DeleteAppResponse, type DeleteEnvRequest, type DeleteEnvTypeRequest, type DeleteOrgRequest, type DeleteOrgResponse, type DeleteSecretRequest, type DeleteUserInviteResponse, type DirectChangeRequestBody, DynamicSecretEngineResponse, type DynamicSecretEnginesResponse, type DynamicSecretLeaseResponse, type DynamicSecretLeasesResponse, DynamicSecretsService, EffectiveAccessEntry, type EffectiveAccessResponse, type EffectivePermissionsResponse, EnterpriseCmkService, EnterpriseProviderProfile, type EnterpriseProvidersResponse, EnterpriseService, type EnvDiffRequest, type EnvDiffResponse, type EnvHistoryRequest, type EnvHistoryResponse, type EnvPitRequest, type EnvPitStateResponse, type EnvResponse, EnvSyncAPISDK, type EnvTimestampRangeDiffRequest, type EnvTimestampRequest, type EnvTypeMapping, type EnvTypeMappingsResponse, type EnvTypeResponse, type EnvTypesResponse, EnvironmentTypesService, EnvironmentVariablesPointInTimeService, EnvironmentVariablesRollbackService, EnvironmentVariablesService, type EnvsResponse, type ErrorResponse, ExportEnvRequest, type ExportEnvResponse, type ExportKeyResponse, type ExtendGpgKeyExpiryRequest, FileUploadService, GenerateGpgKeyRequest, type GetAppResponse, type GetAppsResponse, type GetAuditLogsResponse, type GetAuditLogsResponseWrapper, type GetEnvRequest, type GetOrgInviteByCodeResponse, type GetSecretRequest, type GetTeamResponse, type GetTeamsResponse, type GetUserInviteByTokenResponse, type GpgKeyDetailResponse, type GpgKeyResponse, type GpgKeysResponse, GpgKeysService, GrantAccessRequest, GrantEntry, type GrantsListResponse, type ImportGpgKeyRequest, type InitOrgCARequest, IntegrationBinding, type IntegrationBindingsResponse, type IssueMemberCertRequest, type LicenseActionResponse, LicenseService, LicenseState, type LicenseStatusResponse, LogForwardingResponse, LogForwardingService, type LogForwardingsResponse, type LoginUrlResponse, type LogoutUrlResponse, type MemberCertResponse, type MyCertificateBundleResponse, type OCSPResponse, OidcProviderResponse, type OidcProvidersResponse, OidcProvidersService, OnboardingService, OpenAPI, type OpenAPIConfig, type OrgCAResponse, type OrgFeatureGrantParam, type OrgFeatureGrantResponse, OrgFeaturesService, type OrgKmsAppKeyInfo, type OrgKmsAppsResponse, type OrgKmsBreakGlassParam, OrgKmsConfigResponse, type OrgKmsCredentialResponse, type OrgKmsJobParam, OrgKmsJobResponse, OrgKmsVerifyResponse, type OrgResponse, type OrgSecret, type OrgSecretModelResponse, type OrgSecretsResponse, OrganizationsService, type PermissionMessageResponse, PermissionsService, type PromotionChangeRequestBody, ProviderConnection, type ProviderConnectionsResponse, type PublicSamlSsoRequest, PutOrgFeatureGrantRequest, type RegenerateApiKeyResponse, type RejectChangeRequestBody, type RenewCertRequest, type RevealSecretsRequest, type RevealSecretsResponse, RevokeAccessRequest, type RevokeCertRequest, type RevokeCertResponse, type RevokeGpgKeyRequest, type RevokeLeaseResponse, type RevokeOldCredentialResponse, type RoleResponse, type RoleStatsResponse, type RolesResponse, RolesService, type RollbackResponse, type RollbackSecretsResponse, type RollbackSecretsToPitRequest, type RollbackSecretsToTimestampRequest, type RollbackToPitRequest, type RollbackToTimestampRequest, type RootCAResponse, type RotateCertRequest, RotateGpgKeyRequest, type RotationPoliciesResponse, RotationPolicyResponse, RotationService, type RotationStateResponse, type RotationStatesResponse, SamlProviderResponse, type SamlProvidersResponse, SamlProvidersService, type SamlSsoResponse, SamlSsoService, type SecretDiffRequest, type SecretDiffResponse, type SecretHistoryRequest, type SecretHistoryResponse, type SecretPitRequest, type SecretPitStateResponse, type SecretResponse, type SecretTimestampRangeDiffRequest, type SecretTimestampRequest, SecretVariableRollbackResponse, type SecretVariableRollbackToPitRequest, type SecretVariableRollbackToTimestampRequest, type SecretVariableTimelineRequest, type SecretVariableTimelineResponse, SecretsPointInTimeService, type SecretsResponse, SecretsRollbackService, SecretsService, type ServiceTokenPermissions, type ServiceTokenResponse, type ServiceTokensResponse, ServiceTokensService, SetupService, SetupStatusResponse, SignDataRequest, type SignatureResponse, SyncAuditEvent, type SyncAuditEventsResponse, SyncRun, type SyncRunsResponse, SystemService, type SystemStatusResponse, SystemStatusState, type TeamMessageResponse, TeamsService, type TriggerRotationResponse, type UpdateApiKeyRequest, type UpdateAppRequest, type UpdateAppResponse, type UpdateDynamicSecretEngineRequest, type UpdateEnvRequest, type UpdateEnvTypeMappingRequest, type UpdateEnvTypeRequest, type UpdateIntegrationBindingRequest, type UpdateOidcProviderRequest, UpdateOrgKmsConfigRequest, type UpdateOrgRequest, type UpdateOrgSecretRequest, UpdateProviderConnectionRequest, type UpdateRoleRequest, type UpdateRotationPolicyRequest, type UpdateSamlProviderRequest, type UpdateSecretRequest, type UpdateTeamRequest, UpdateTrustLevelRequest, type UpdateUserInviteRequest, type UpdateUserInviteResponse, type UpdateUserRequest, UpdateWebhookRequest, type UploadFileError, type UploadFileResponse, type UserResponse, type UsersResponse, UsersService, VariableRollbackResponse, type VariableRollbackToPitRequest, type VariableRollbackToTimestampRequest, type VariableTimelineRequest, type VariableTimelineResponse, type VerifyResponse, type VerifySignatureRequest, WebhookResponse, type WebhooksResponse, WebhooksService, WhoAmIResponse, type XEnvSyncOrgIdHeader };