@envsync-cloud/envsync-ts-sdk 0.20.0 → 0.20.2

package/dist/index.d.mts

@@ -414,7 +414,18 @@ type WhoAmIResponse = {
         is_active: boolean;
     }>;
     active_membership_user_id: string;
-};
+    features: Array<string>;
+    install_features: Array<string>;
+    auth_type: WhoAmIResponse.auth_type;
+};
+declare namespace WhoAmIResponse {
+    enum auth_type {
+        JWT = "jwt",
+        SAML = "saml",
+        OIDC = "oidc",
+        API_KEY = "api_key"
+    }
+}
 
 declare class AuthenticationService {
     readonly httpRequest: BaseHttpRequest;
@@ -1441,6 +1452,207 @@ declare class EnterpriseService {
     listEnterpriseSyncAuditEvents(syncRunId: string): CancelablePromise<SyncAuditEventsResponse>;
 }
 
+type CreateOrgKmsCredentialRequest = {
+    key: string;
+    value: string;
+    description?: string | null;
+};
+
+type OrgKmsAppKeyInfo = {
+    app_id: string;
+    name: string;
+    key_version_id: string | null;
+    version: number | null;
+    encryption_count: number | null;
+    max_encryptions: number | null;
+    status: string;
+};
+
+type OrgKmsAppsResponse = {
+    apps: Array<OrgKmsAppKeyInfo>;
+};
+
+type OrgKmsCredentialResponse = {
+    id: string;
+    org_id: string;
+    key: string;
+    description: string | null;
+    configured: boolean;
+    created_at: string;
+    updated_at: string;
+};
+
+type OrgKmsConfigResponse = {
+    org_id: string;
+    source: OrgKmsConfigResponse.source;
+    status: OrgKmsConfigResponse.status;
+    key_ref: string | null;
+    region: string | null;
+    credential_secret_id: string | null;
+    kek_version: number;
+    last_verified_at: string | null;
+    last_error: string | null;
+    implicit: boolean;
+    credentials?: Array<OrgKmsCredentialResponse>;
+};
+declare namespace OrgKmsConfigResponse {
+    enum source {
+        MANAGED = "managed",
+        AWS_KMS = "aws-kms",
+        GCP_KMS = "gcp-kms",
+        AZURE_KV = "azure-kv"
+    }
+    enum status {
+        ACTIVE = "active",
+        PENDING = "pending",
+        ROTATING = "rotating",
+        UNAVAILABLE = "unavailable",
+        DISABLED = "disabled"
+    }
+}
+
+type OrgKmsJobResponse = {
+    id: string;
+    org_id: string;
+    app_id: string | null;
+    kind: OrgKmsJobResponse.kind;
+    status: OrgKmsJobResponse.status;
+    progress: Record<string, any>;
+    error_message: string | null;
+    created_by: string | null;
+    created_at: string;
+    updated_at: string;
+};
+declare namespace OrgKmsJobResponse {
+    enum kind {
+        KEK_REWRAP = "kek_rewrap",
+        DEK_REWRAP = "dek_rewrap",
+        DETACH_MANAGED = "detach_managed"
+    }
+    enum status {
+        PENDING = "pending",
+        RUNNING = "running",
+        SUCCEEDED = "succeeded",
+        FAILED = "failed"
+    }
+}
+
+type OrgKmsVerifyResponse = {
+    ok: boolean;
+    source: OrgKmsVerifyResponse.source;
+    status: OrgKmsVerifyResponse.status;
+    last_verified_at: string;
+};
+declare namespace OrgKmsVerifyResponse {
+    enum source {
+        MANAGED = "managed",
+        AWS_KMS = "aws-kms",
+        GCP_KMS = "gcp-kms",
+        AZURE_KV = "azure-kv"
+    }
+    enum status {
+        ACTIVE = "active",
+        PENDING = "pending",
+        ROTATING = "rotating",
+        UNAVAILABLE = "unavailable",
+        DISABLED = "disabled"
+    }
+}
+
+type UpdateOrgKmsConfigRequest = {
+    source: UpdateOrgKmsConfigRequest.source;
+    key_ref?: string | null;
+    region?: string | null;
+    credential_secret_id?: string | null;
+};
+declare namespace UpdateOrgKmsConfigRequest {
+    enum source {
+        MANAGED = "managed",
+        AWS_KMS = "aws-kms",
+        GCP_KMS = "gcp-kms",
+        AZURE_KV = "azure-kv"
+    }
+}
+
+declare class EnterpriseCmkService {
+    readonly httpRequest: BaseHttpRequest;
+    constructor(httpRequest: BaseHttpRequest);
+    /**
+     * Break-glass detach organization CMK
+     * Hosted platform API. Enqueues detach-to-managed even if the org lost the kms grant or status is unavailable. Does not call ensureTenantKek.
+     * @param xEnvSyncPlatformToken
+     * @param orgId
+     * @returns OrgKmsJobResponse Already on managed wrapping
+     * @throws ApiError
+     */
+    breakGlassDetachOrgKms(xEnvSyncPlatformToken: string, orgId: string): CancelablePromise<OrgKmsJobResponse>;
+    /**
+     * Get organization KMS config
+     * Returns implicit managed/active when no org_kms_config row exists. Never returns key material.
+     * @returns OrgKmsConfigResponse Organization KMS config
+     * @throws ApiError
+     */
+    getOrgKmsConfig(): CancelablePromise<OrgKmsConfigResponse>;
+    /**
+     * Update organization KMS config
+     * Self-host cloud sources return 403 CMK_HOSTED_ONLY. Hosted persists cloud source as pending until attach.
+     * @param requestBody
+     * @returns OrgKmsConfigResponse Organization KMS config updated
+     * @throws ApiError
+     */
+    updateOrgKmsConfig(requestBody?: UpdateOrgKmsConfigRequest): CancelablePromise<OrgKmsConfigResponse>;
+    /**
+     * Create a purpose=kms org secret
+     * Encrypts the value under scope __kms_config__ before insert. Does not require the integrations feature.
+     * @param requestBody
+     * @returns OrgKmsCredentialResponse Credential created (value redacted)
+     * @throws ApiError
+     */
+    createOrgKmsCredential(requestBody?: CreateOrgKmsCredentialRequest): CancelablePromise<OrgKmsCredentialResponse>;
+    /**
+     * Verify organization KMS
+     * Managed source succeeds immediately. Cloud verify unwraps or first-wraps the tenant KEK.
+     * @returns OrgKmsVerifyResponse Verify result
+     * @throws ApiError
+     */
+    verifyOrgKms(): CancelablePromise<OrgKmsVerifyResponse>;
+    /**
+     * Rotate organization KEK
+     * Re-wraps wrapped_kek under the current key_ref. Hosted cloud-only; does not rewrap DEKs.
+     * @returns OrgKmsConfigResponse KEK rotated
+     * @throws ApiError
+     */
+    rotateOrgKmsKek(): CancelablePromise<OrgKmsConfigResponse>;
+    /**
+     * Attach organization CMK
+     * Enqueues DEK rewrap under the tenant KEK with allow_root_unwrap during the attach window. Hosted only.
+     * @returns OrgKmsJobResponse Attach job enqueued
+     * @throws ApiError
+     */
+    attachOrgKms(): CancelablePromise<OrgKmsJobResponse>;
+    /**
+     * Detach organization CMK to managed
+     * Enqueues detach_managed. Does not call ensureTenantKek when status is unavailable.
+     * @returns OrgKmsJobResponse Detach job enqueued
+     * @throws ApiError
+     */
+    detachOrgKms(): CancelablePromise<OrgKmsJobResponse>;
+    /**
+     * Get organization KMS job
+     * @param id
+     * @returns OrgKmsJobResponse KMS job
+     * @throws ApiError
+     */
+    getOrgKmsJob(id: string): CancelablePromise<OrgKmsJobResponse>;
+    /**
+     * List per-app KMS key info
+     * Calls GetKeyInfo per app. Never returns key material.
+     * @returns OrgKmsAppsResponse Per-app key metadata
+     * @throws ApiError
+     */
+    listOrgKmsApps(): CancelablePromise<OrgKmsAppsResponse>;
+}
+
 type CreateEnvTypeRequest = {
     name: string;
     color?: string;
@@ -2730,6 +2942,62 @@ declare class OrganizationsService {
     checkIfSlugExists(slug: string): CancelablePromise<CheckSlugResponse>;
 }
 
+type OrgFeatureGrantResponse = {
+    org_id: string;
+    unrestricted: boolean;
+    features: Array<string>;
+    source: string | null;
+    updated_by: string | null;
+    created_at: string | null;
+    updated_at: string | null;
+};
+
+type PutOrgFeatureGrantRequest = {
+    features: Array<string>;
+    source?: PutOrgFeatureGrantRequest.source;
+    updated_by?: string;
+};
+declare namespace PutOrgFeatureGrantRequest {
+    enum source {
+        BILLING = "billing",
+        SUPPORT = "support",
+        SEED = "seed"
+    }
+}
+
+declare class OrgFeaturesService {
+    readonly httpRequest: BaseHttpRequest;
+    constructor(httpRequest: BaseHttpRequest);
+    /**
+     * Get Organization Feature Grant
+     * Hosted platform API. No row means unrestricted (full catalog).
+     * @param xEnvSyncPlatformToken
+     * @param orgId
+     * @returns OrgFeatureGrantResponse Organization feature grant
+     * @throws ApiError
+     */
+    getOrgFeatureGrant(xEnvSyncPlatformToken: string, orgId: string): CancelablePromise<OrgFeatureGrantResponse>;
+    /**
+     * Replace Organization Feature Grant
+     * Full replace. Empty features[] denies every EE feature. Unknown catalog keys are dropped.
+     * @param xEnvSyncPlatformToken
+     * @param orgId
+     * @param requestBody
+     * @returns OrgFeatureGrantResponse Organization feature grant replaced
+     * @throws ApiError
+     */
+    putOrgFeatureGrant(xEnvSyncPlatformToken: string, orgId: string, requestBody?: PutOrgFeatureGrantRequest): CancelablePromise<OrgFeatureGrantResponse>;
+    /**
+     * Delete Organization Feature Grant
+     * Drops the grant row so the organization is unrestricted.
+     * @param xEnvSyncPlatformToken
+     * @param orgId
+     * @returns OrgFeatureGrantResponse Grant deleted; organization unrestricted
+     * @throws ApiError
+     */
+    deleteOrgFeatureGrant(xEnvSyncPlatformToken: string, orgId: string): CancelablePromise<OrgFeatureGrantResponse>;
+}
+
 type EffectiveAccessEntry = {
     user_id: string;
     email: string;
@@ -3164,15 +3432,23 @@ type CreateSamlProviderRequest = {
     /**
      * SAML entity ID (issuer) from the IdP metadata
      */
-    entity_id: string;
+    entity_id?: string;
     /**
      * IdP SSO login URL
      */
-    sso_url: string;
+    sso_url?: string;
     /**
      * IdP X.509 certificate (PEM format) for signature validation
      */
-    certificate: string;
+    certificate?: string;
+    /**
+     * Optional IdP metadata XML. When set, entity_id, sso_url, and certificate are parsed from it.
+     */
+    idp_metadata_xml?: string;
+    /**
+     * Mark this provider as the default IdP for the organization
+     */
+    is_default?: boolean;
 };
 declare namespace CreateSamlProviderRequest {
     /**
@@ -3197,8 +3473,12 @@ type SamlProviderResponse = {
     name: string;
     entity_id: string;
     sso_url: string;
-    certificate: string;
+    certificate?: string;
+    certificate_fingerprint?: string;
+    certificate_not_after?: string | null;
     enabled: boolean;
+    is_default: boolean;
+    last_sso_at?: string | null;
     created_at: string;
     updated_at: string;
 };
@@ -3223,6 +3503,8 @@ type UpdateSamlProviderRequest = {
     sso_url?: string;
     certificate?: string;
     enabled?: boolean;
+    is_default?: boolean;
+    idp_metadata_xml?: string;
 };
 
 declare class SamlProvidersService {
@@ -3245,7 +3527,7 @@ declare class SamlProvidersService {
     getAllSamlProviders(): CancelablePromise<SamlProvidersResponse>;
     /**
      * Get SAML Provider
-     * Retrieve a specific SAML provider
+     * Retrieve a specific SAML provider. Certificate PEM is omitted unless include=certificate.
      * @param id
      * @returns SamlProviderResponse SAML provider retrieved successfully
      * @throws ApiError
@@ -3270,19 +3552,19 @@ declare class SamlProvidersService {
     deleteSamlProvider(id: string): CancelablePromise<ErrorResponse>;
     /**
      * Get SAML SP Metadata
-     * Retrieve SAML Service Provider metadata XML for the organization
+     * Redirects to the public SP metadata URL for this organization
      * @param id
-     * @returns string SP metadata XML
+     * @returns void
      * @throws ApiError
      */
-    getSamlMetadata(id: string): CancelablePromise<string>;
+    getSamlMetadata(id: string): CancelablePromise<void>;
 }
 
-type SamlSsoRequest = {
+type PublicSamlSsoRequest = {
     /**
-     * SAML provider ID to initiate SSO with
+     * Optional SAML provider ID. Must belong to the organization and be enabled.
      */
-    provider_id: string;
+    provider_id?: string;
 };
 
 type SamlSsoResponse = {
@@ -3300,21 +3582,38 @@ declare class SamlSsoService {
     readonly httpRequest: BaseHttpRequest;
     constructor(httpRequest: BaseHttpRequest);
     /**
-     * Initiate SAML SSO
-     * Start SP-initiated SAML SSO flow by generating an AuthnRequest redirect URL
-     * @param requestBody
-     * @returns SamlSsoResponse Redirect URL generated
+     * Get public SAML SP metadata
+     * Unauthenticated SP metadata XML for the organization
+     * @param orgId
+     * @returns string SP metadata XML
      * @throws ApiError
      */
-    initiateSamlSso(requestBody?: SamlSsoRequest): CancelablePromise<SamlSsoResponse>;
+    getPublicSamlMetadata(orgId: string): CancelablePromise<string>;
     /**
      * SAML Assertion Consumer Service
-     * Receive and validate SAML Response from the identity provider (ACS endpoint)
+     * Receive and validate a SAML Response from the identity provider
      * @param orgId
-     * @returns any Authentication successful
+     * @returns void
+     * @throws ApiError
+     */
+    handlePublicSamlAcs(orgId: string): CancelablePromise<void>;
+    /**
+     * Start SAML SSO
+     * Unauthenticated SP-initiated start. Returns a redirect URL for the login page or CLI.
+     * @param orgSlug
+     * @param requestBody
+     * @returns SamlSsoResponse Redirect URL generated
      * @throws ApiError
      */
-    handleSamlAcs(orgId: string): CancelablePromise<any>;
+    startPublicSamlSso(orgSlug: string, requestBody?: PublicSamlSsoRequest): CancelablePromise<SamlSsoResponse>;
+    /**
+     * Bookmark SAML SSO start
+     * Success redirects to the IdP. Any error redirects to the dashboard login page.
+     * @param orgSlug
+     * @returns void
+     * @throws ApiError
+     */
+    startPublicSamlSsoRedirect(orgSlug: string): CancelablePromise<void>;
 }
 
 type BatchCreateSecretsRequest = {
@@ -3844,6 +4143,14 @@ type SystemStatusState = {
     landing_enabled: boolean;
     first_bootstrap_completed_at?: string | null;
     org_count: number;
+    entitlement?: {
+        present: boolean;
+        source: string | null;
+        in_grace: boolean;
+        features: Array<string>;
+        max_orgs: number | null;
+        expires_at: string | null;
+    };
 };
 declare namespace SystemStatusState {
     enum edition {
@@ -4253,6 +4560,7 @@ declare class EnvSyncAPISDK {
     readonly changeRequests: ChangeRequestsService;
     readonly dynamicSecrets: DynamicSecretsService;
     readonly enterprise: EnterpriseService;
+    readonly enterpriseCmk: EnterpriseCmkService;
     readonly environmentTypes: EnvironmentTypesService;
     readonly environmentVariables: EnvironmentVariablesService;
     readonly environmentVariablesPointInTime: EnvironmentVariablesPointInTimeService;
@@ -4264,6 +4572,7 @@ declare class EnvSyncAPISDK {
     readonly oidcProviders: OidcProvidersService;
     readonly onboarding: OnboardingService;
     readonly organizations: OrganizationsService;
+    readonly orgFeatures: OrgFeaturesService;
     readonly permissions: PermissionsService;
     readonly roles: RolesService;
     readonly rotation: RotationService;
@@ -4299,6 +4608,18 @@ declare class ApiError extends Error {
     constructor(request: ApiRequestOptions, response: ApiResult, message: string);
 }
 
+type OrgFeatureGrantParam = {
+    orgId: string;
+};
+
+type OrgKmsBreakGlassParam = {
+    orgId: string;
+};
+
+type OrgKmsJobParam = {
+    id: string;
+};
+
 type UploadFileError = {
     error: string;
 };
@@ -4308,4 +4629,4 @@ type UploadFileError = {
  */
 type XEnvSyncOrgIdHeader = string;
 
-export { type AcceptOrgInviteRequest, type AcceptOrgInviteResponse, type AcceptUserInviteRequest, type AcceptUserInviteResponse, AccessService, type AddTeamMemberRequest, ApiError, type ApiKeyResponse, type ApiKeysResponse, ApiKeysService, ApplicationsService, type AssignTeamRoleRequest, AuditLogsService, AuthenticationService, type BaseCertificateResponse, BaseHttpRequest, type BatchCreateEnvsRequest, type BatchCreateSecretsRequest, type BatchDeleteEnvsRequest, type BatchDeleteSecretsRequest, type BatchEnvsResponse, type BatchSecretsResponse, type CRLResponse, type CallbackResponse, CancelError, CancelablePromise, type CertificateListResponse, CertificatesService, type ChangeRequestListResponse, ChangeRequestResponse, ChangeRequestsService, type CheckSlugResponse, type CleanupResponse, type CreateApiKeyRequest, type CreateAppRequest, type CreateAppResponse, CreateDynamicSecretEngineRequest, type CreateDynamicSecretLeaseRequest, type CreateEnvRequest, type CreateEnvTypeMappingRequest, type CreateEnvTypeRequest, CreateIntegrationBindingRequest, CreateLogForwardingRequest, CreateManualSyncRunRequest, CreateOidcProviderRequest, type CreateOrgInviteRequest, type CreateOrgInviteResponse, type CreateOrgSecretRequest, CreateProviderConnectionRequest, type CreateRoleRequest, CreateRotationPolicyRequest, CreateSamlProviderRequest, type CreateSecretRequest, type CreateServiceTokenRequest, type CreateServiceTokenResponse, type CreateSetupOrgRequest, type CreateTeamRequest, type CreateTeamResponse, type CreateUserInviteRequest, type CreateUserInviteResponse, CreateWebhookRequest, type DeleteAppResponse, type DeleteEnvRequest, type DeleteEnvTypeRequest, type DeleteOrgRequest, type DeleteOrgResponse, type DeleteSecretRequest, type DeleteUserInviteResponse, type DirectChangeRequestBody, DynamicSecretEngineResponse, type DynamicSecretEnginesResponse, type DynamicSecretLeaseResponse, type DynamicSecretLeasesResponse, DynamicSecretsService, EffectiveAccessEntry, type EffectiveAccessResponse, type EffectivePermissionsResponse, EnterpriseProviderProfile, type EnterpriseProvidersResponse, EnterpriseService, type EnvDiffRequest, type EnvDiffResponse, type EnvHistoryRequest, type EnvHistoryResponse, type EnvPitRequest, type EnvPitStateResponse, type EnvResponse, EnvSyncAPISDK, type EnvTimestampRangeDiffRequest, type EnvTimestampRequest, type EnvTypeMapping, type EnvTypeMappingsResponse, type EnvTypeResponse, type EnvTypesResponse, EnvironmentTypesService, EnvironmentVariablesPointInTimeService, EnvironmentVariablesRollbackService, EnvironmentVariablesService, type EnvsResponse, type ErrorResponse, ExportEnvRequest, type ExportEnvResponse, type ExportKeyResponse, type ExtendGpgKeyExpiryRequest, FileUploadService, GenerateGpgKeyRequest, type GetAppResponse, type GetAppsResponse, type GetAuditLogsResponse, type GetAuditLogsResponseWrapper, type GetEnvRequest, type GetOrgInviteByCodeResponse, type GetSecretRequest, type GetTeamResponse, type GetTeamsResponse, type GetUserInviteByTokenResponse, type GpgKeyDetailResponse, type GpgKeyResponse, type GpgKeysResponse, GpgKeysService, GrantAccessRequest, GrantEntry, type GrantsListResponse, type ImportGpgKeyRequest, type InitOrgCARequest, IntegrationBinding, type IntegrationBindingsResponse, type IssueMemberCertRequest, type LicenseActionResponse, LicenseService, LicenseState, type LicenseStatusResponse, LogForwardingResponse, LogForwardingService, type LogForwardingsResponse, type LoginUrlResponse, type LogoutUrlResponse, type MemberCertResponse, type MyCertificateBundleResponse, type OCSPResponse, OidcProviderResponse, type OidcProvidersResponse, OidcProvidersService, OnboardingService, OpenAPI, type OpenAPIConfig, type OrgCAResponse, type OrgResponse, type OrgSecret, type OrgSecretModelResponse, type OrgSecretsResponse, OrganizationsService, type PermissionMessageResponse, PermissionsService, type PromotionChangeRequestBody, ProviderConnection, type ProviderConnectionsResponse, type RegenerateApiKeyResponse, type RejectChangeRequestBody, type RenewCertRequest, type RevealSecretsRequest, type RevealSecretsResponse, RevokeAccessRequest, type RevokeCertRequest, type RevokeCertResponse, type RevokeGpgKeyRequest, type RevokeLeaseResponse, type RevokeOldCredentialResponse, type RoleResponse, type RoleStatsResponse, type RolesResponse, RolesService, type RollbackResponse, type RollbackSecretsResponse, type RollbackSecretsToPitRequest, type RollbackSecretsToTimestampRequest, type RollbackToPitRequest, type RollbackToTimestampRequest, type RootCAResponse, type RotateCertRequest, RotateGpgKeyRequest, type RotationPoliciesResponse, RotationPolicyResponse, RotationService, type RotationStateResponse, type RotationStatesResponse, SamlProviderResponse, type SamlProvidersResponse, SamlProvidersService, type SamlSsoRequest, type SamlSsoResponse, SamlSsoService, type SecretDiffRequest, type SecretDiffResponse, type SecretHistoryRequest, type SecretHistoryResponse, type SecretPitRequest, type SecretPitStateResponse, type SecretResponse, type SecretTimestampRangeDiffRequest, type SecretTimestampRequest, SecretVariableRollbackResponse, type SecretVariableRollbackToPitRequest, type SecretVariableRollbackToTimestampRequest, type SecretVariableTimelineRequest, type SecretVariableTimelineResponse, SecretsPointInTimeService, type SecretsResponse, SecretsRollbackService, SecretsService, type ServiceTokenPermissions, type ServiceTokenResponse, type ServiceTokensResponse, ServiceTokensService, SetupService, SetupStatusResponse, SignDataRequest, type SignatureResponse, SyncAuditEvent, type SyncAuditEventsResponse, SyncRun, type SyncRunsResponse, SystemService, type SystemStatusResponse, SystemStatusState, type TeamMessageResponse, TeamsService, type TriggerRotationResponse, type UpdateApiKeyRequest, type UpdateAppRequest, type UpdateAppResponse, type UpdateDynamicSecretEngineRequest, type UpdateEnvRequest, type UpdateEnvTypeMappingRequest, type UpdateEnvTypeRequest, type UpdateIntegrationBindingRequest, type UpdateOidcProviderRequest, type UpdateOrgRequest, type UpdateOrgSecretRequest, UpdateProviderConnectionRequest, type UpdateRoleRequest, type UpdateRotationPolicyRequest, type UpdateSamlProviderRequest, type UpdateSecretRequest, type UpdateTeamRequest, UpdateTrustLevelRequest, type UpdateUserInviteRequest, type UpdateUserInviteResponse, type UpdateUserRequest, UpdateWebhookRequest, type UploadFileError, type UploadFileResponse, type UserResponse, type UsersResponse, UsersService, VariableRollbackResponse, type VariableRollbackToPitRequest, type VariableRollbackToTimestampRequest, type VariableTimelineRequest, type VariableTimelineResponse, type VerifyResponse, type VerifySignatureRequest, WebhookResponse, type WebhooksResponse, WebhooksService, type WhoAmIResponse, type XEnvSyncOrgIdHeader };
+export { type AcceptOrgInviteRequest, type AcceptOrgInviteResponse, type AcceptUserInviteRequest, type AcceptUserInviteResponse, AccessService, type AddTeamMemberRequest, ApiError, type ApiKeyResponse, type ApiKeysResponse, ApiKeysService, ApplicationsService, type AssignTeamRoleRequest, AuditLogsService, AuthenticationService, type BaseCertificateResponse, BaseHttpRequest, type BatchCreateEnvsRequest, type BatchCreateSecretsRequest, type BatchDeleteEnvsRequest, type BatchDeleteSecretsRequest, type BatchEnvsResponse, type BatchSecretsResponse, type CRLResponse, type CallbackResponse, CancelError, CancelablePromise, type CertificateListResponse, CertificatesService, type ChangeRequestListResponse, ChangeRequestResponse, ChangeRequestsService, type CheckSlugResponse, type CleanupResponse, type CreateApiKeyRequest, type CreateAppRequest, type CreateAppResponse, CreateDynamicSecretEngineRequest, type CreateDynamicSecretLeaseRequest, type CreateEnvRequest, type CreateEnvTypeMappingRequest, type CreateEnvTypeRequest, CreateIntegrationBindingRequest, CreateLogForwardingRequest, CreateManualSyncRunRequest, CreateOidcProviderRequest, type CreateOrgInviteRequest, type CreateOrgInviteResponse, type CreateOrgKmsCredentialRequest, type CreateOrgSecretRequest, CreateProviderConnectionRequest, type CreateRoleRequest, CreateRotationPolicyRequest, CreateSamlProviderRequest, type CreateSecretRequest, type CreateServiceTokenRequest, type CreateServiceTokenResponse, type CreateSetupOrgRequest, type CreateTeamRequest, type CreateTeamResponse, type CreateUserInviteRequest, type CreateUserInviteResponse, CreateWebhookRequest, type DeleteAppResponse, type DeleteEnvRequest, type DeleteEnvTypeRequest, type DeleteOrgRequest, type DeleteOrgResponse, type DeleteSecretRequest, type DeleteUserInviteResponse, type DirectChangeRequestBody, DynamicSecretEngineResponse, type DynamicSecretEnginesResponse, type DynamicSecretLeaseResponse, type DynamicSecretLeasesResponse, DynamicSecretsService, EffectiveAccessEntry, type EffectiveAccessResponse, type EffectivePermissionsResponse, EnterpriseCmkService, EnterpriseProviderProfile, type EnterpriseProvidersResponse, EnterpriseService, type EnvDiffRequest, type EnvDiffResponse, type EnvHistoryRequest, type EnvHistoryResponse, type EnvPitRequest, type EnvPitStateResponse, type EnvResponse, EnvSyncAPISDK, type EnvTimestampRangeDiffRequest, type EnvTimestampRequest, type EnvTypeMapping, type EnvTypeMappingsResponse, type EnvTypeResponse, type EnvTypesResponse, EnvironmentTypesService, EnvironmentVariablesPointInTimeService, EnvironmentVariablesRollbackService, EnvironmentVariablesService, type EnvsResponse, type ErrorResponse, ExportEnvRequest, type ExportEnvResponse, type ExportKeyResponse, type ExtendGpgKeyExpiryRequest, FileUploadService, GenerateGpgKeyRequest, type GetAppResponse, type GetAppsResponse, type GetAuditLogsResponse, type GetAuditLogsResponseWrapper, type GetEnvRequest, type GetOrgInviteByCodeResponse, type GetSecretRequest, type GetTeamResponse, type GetTeamsResponse, type GetUserInviteByTokenResponse, type GpgKeyDetailResponse, type GpgKeyResponse, type GpgKeysResponse, GpgKeysService, GrantAccessRequest, GrantEntry, type GrantsListResponse, type ImportGpgKeyRequest, type InitOrgCARequest, IntegrationBinding, type IntegrationBindingsResponse, type IssueMemberCertRequest, type LicenseActionResponse, LicenseService, LicenseState, type LicenseStatusResponse, LogForwardingResponse, LogForwardingService, type LogForwardingsResponse, type LoginUrlResponse, type LogoutUrlResponse, type MemberCertResponse, type MyCertificateBundleResponse, type OCSPResponse, OidcProviderResponse, type OidcProvidersResponse, OidcProvidersService, OnboardingService, OpenAPI, type OpenAPIConfig, type OrgCAResponse, type OrgFeatureGrantParam, type OrgFeatureGrantResponse, OrgFeaturesService, type OrgKmsAppKeyInfo, type OrgKmsAppsResponse, type OrgKmsBreakGlassParam, OrgKmsConfigResponse, type OrgKmsCredentialResponse, type OrgKmsJobParam, OrgKmsJobResponse, OrgKmsVerifyResponse, type OrgResponse, type OrgSecret, type OrgSecretModelResponse, type OrgSecretsResponse, OrganizationsService, type PermissionMessageResponse, PermissionsService, type PromotionChangeRequestBody, ProviderConnection, type ProviderConnectionsResponse, type PublicSamlSsoRequest, PutOrgFeatureGrantRequest, type RegenerateApiKeyResponse, type RejectChangeRequestBody, type RenewCertRequest, type RevealSecretsRequest, type RevealSecretsResponse, RevokeAccessRequest, type RevokeCertRequest, type RevokeCertResponse, type RevokeGpgKeyRequest, type RevokeLeaseResponse, type RevokeOldCredentialResponse, type RoleResponse, type RoleStatsResponse, type RolesResponse, RolesService, type RollbackResponse, type RollbackSecretsResponse, type RollbackSecretsToPitRequest, type RollbackSecretsToTimestampRequest, type RollbackToPitRequest, type RollbackToTimestampRequest, type RootCAResponse, type RotateCertRequest, RotateGpgKeyRequest, type RotationPoliciesResponse, RotationPolicyResponse, RotationService, type RotationStateResponse, type RotationStatesResponse, SamlProviderResponse, type SamlProvidersResponse, SamlProvidersService, type SamlSsoResponse, SamlSsoService, type SecretDiffRequest, type SecretDiffResponse, type SecretHistoryRequest, type SecretHistoryResponse, type SecretPitRequest, type SecretPitStateResponse, type SecretResponse, type SecretTimestampRangeDiffRequest, type SecretTimestampRequest, SecretVariableRollbackResponse, type SecretVariableRollbackToPitRequest, type SecretVariableRollbackToTimestampRequest, type SecretVariableTimelineRequest, type SecretVariableTimelineResponse, SecretsPointInTimeService, type SecretsResponse, SecretsRollbackService, SecretsService, type ServiceTokenPermissions, type ServiceTokenResponse, type ServiceTokensResponse, ServiceTokensService, SetupService, SetupStatusResponse, SignDataRequest, type SignatureResponse, SyncAuditEvent, type SyncAuditEventsResponse, SyncRun, type SyncRunsResponse, SystemService, type SystemStatusResponse, SystemStatusState, type TeamMessageResponse, TeamsService, type TriggerRotationResponse, type UpdateApiKeyRequest, type UpdateAppRequest, type UpdateAppResponse, type UpdateDynamicSecretEngineRequest, type UpdateEnvRequest, type UpdateEnvTypeMappingRequest, type UpdateEnvTypeRequest, type UpdateIntegrationBindingRequest, type UpdateOidcProviderRequest, UpdateOrgKmsConfigRequest, type UpdateOrgRequest, type UpdateOrgSecretRequest, UpdateProviderConnectionRequest, type UpdateRoleRequest, type UpdateRotationPolicyRequest, type UpdateSamlProviderRequest, type UpdateSecretRequest, type UpdateTeamRequest, UpdateTrustLevelRequest, type UpdateUserInviteRequest, type UpdateUserInviteResponse, type UpdateUserRequest, UpdateWebhookRequest, type UploadFileError, type UploadFileResponse, type UserResponse, type UsersResponse, UsersService, VariableRollbackResponse, type VariableRollbackToPitRequest, type VariableRollbackToTimestampRequest, type VariableTimelineRequest, type VariableTimelineResponse, type VerifyResponse, type VerifySignatureRequest, WebhookResponse, type WebhooksResponse, WebhooksService, WhoAmIResponse, type XEnvSyncOrgIdHeader };