@iblai/iblai-api 4.274.1-core → 4.274.2-ai

package/src/services/AiAccountService.ts

@@ -0,0 +1,1525 @@
+/* generated using openapi-typescript-codegen -- do not edit */
+/* istanbul ignore file */
+/* tslint:disable */
+/* eslint-disable */
+import type { AdminIntegrationCredential } from '../models/AdminIntegrationCredential';
+import type { ConnectedService } from '../models/ConnectedService';
+import type { CredentialRequest } from '../models/CredentialRequest';
+import type { FallbackLLM } from '../models/FallbackLLM';
+import type { FallbackLLMCreate } from '../models/FallbackLLMCreate';
+import type { FallbackLLMUpdate } from '../models/FallbackLLMUpdate';
+import type { IntegrationCredential } from '../models/IntegrationCredential';
+import type { IntegrationCredentialSchema } from '../models/IntegrationCredentialSchema';
+import type { LLMCredentialRequest } from '../models/LLMCredentialRequest';
+import type { LLMCredentialResponse } from '../models/LLMCredentialResponse';
+import type { LLMCredentialSchema } from '../models/LLMCredentialSchema';
+import type { MaskedIntegrationCredential } from '../models/MaskedIntegrationCredential';
+import type { MaskedLLMCredential } from '../models/MaskedLLMCredential';
+import type { OAuthProvider } from '../models/OAuthProvider';
+import type { OAuthService } from '../models/OAuthService';
+import type { OAuthStartResponse } from '../models/OAuthStartResponse';
+import type { PageContentConfig } from '../models/PageContentConfig';
+import type { PatchedCredentialRequest } from '../models/PatchedCredentialRequest';
+import type { PatchedFallbackLLMUpdate } from '../models/PatchedFallbackLLMUpdate';
+import type { PatchedLLMCredentialRequest } from '../models/PatchedLLMCredentialRequest';
+import type { PatchedPageContentConfig } from '../models/PatchedPageContentConfig';
+import type { PatchedTenantChatPrivacyConfig } from '../models/PatchedTenantChatPrivacyConfig';
+import type { TenantChatPrivacyConfig } from '../models/TenantChatPrivacyConfig';
+import type { TenantSetting } from '../models/TenantSetting';
+import type { UseMainCreds } from '../models/UseMainCreds';
+import type { UserChatPrivacySettings } from '../models/UserChatPrivacySettings';
+import type { CancelablePromise } from '../core/CancelablePromise';
+import { OpenAPI } from '../core/OpenAPI';
+import { request as __request } from '../core/request';
+export class AiAccountService {
+    /**
+     * @returns ConnectedService Callback for the OAuth flow
+     * @throws ApiError
+     */
+    public static aiAccountConnectedServicesCallbackRetrieve(): CancelablePromise<ConnectedService> {
+        return __request(OpenAPI, {
+            method: 'GET',
+            url: '/api/ai-account/connected-services/callback/',
+        });
+    }
+    /**
+     * Wires RBAC into a DRF view.
+     *
+     * Two responsibilities:
+     *
+     * 1. When RBAC is enabled, replace the view's `permission_classes` with
+     * `IsEdxAuthenticated` (the gate the RBAC layer assumes).
+     *
+     * 2. Detect server-to-server (Django auth) callers via `is_service_account`.
+     * Server-to-server tokens authenticate as Django auth users with no
+     * relationship to a platform EdxUser. The convention is "we trust this
+     * caller — bypass RBAC and serve the request."
+     *
+     * Combine it with the RBAC-disabled check at the top of `initial()` so
+     * the early exit skips all RBAC prep work:
+     *
+     * if not ConfigFlags.rbac_enabled() or self.is_service_account:
+     * return
+     *
+     * Use `is_service_account` at any other touch points where caller
+     * identity matters (queryset ownership filters, owner attribution on
+     * create, serializer context, etc.).
+     * @returns ConnectedService
+     * @throws ApiError
+     */
+    public static aiAccountConnectedServicesOrgsUsersList({
+        org,
+        userId,
+        ordering,
+        provider,
+        search,
+        service,
+    }: {
+        org: string,
+        userId: string,
+        /**
+         * Which field to use when ordering the results.
+         */
+        ordering?: string,
+        provider?: string,
+        /**
+         * A search term.
+         */
+        search?: string,
+        service?: string,
+    }): CancelablePromise<Array<ConnectedService>> {
+        return __request(OpenAPI, {
+            method: 'GET',
+            url: '/api/ai-account/connected-services/orgs/{org}/users/{user_id}/',
+            path: {
+                'org': org,
+                'user_id': userId,
+            },
+            query: {
+                'ordering': ordering,
+                'provider': provider,
+                'search': search,
+                'service': service,
+            },
+        });
+    }
+    /**
+     * Wires RBAC into a DRF view.
+     *
+     * Two responsibilities:
+     *
+     * 1. When RBAC is enabled, replace the view's `permission_classes` with
+     * `IsEdxAuthenticated` (the gate the RBAC layer assumes).
+     *
+     * 2. Detect server-to-server (Django auth) callers via `is_service_account`.
+     * Server-to-server tokens authenticate as Django auth users with no
+     * relationship to a platform EdxUser. The convention is "we trust this
+     * caller — bypass RBAC and serve the request."
+     *
+     * Combine it with the RBAC-disabled check at the top of `initial()` so
+     * the early exit skips all RBAC prep work:
+     *
+     * if not ConfigFlags.rbac_enabled() or self.is_service_account:
+     * return
+     *
+     * Use `is_service_account` at any other touch points where caller
+     * identity matters (queryset ownership filters, owner attribution on
+     * create, serializer context, etc.).
+     * @returns ConnectedService
+     * @throws ApiError
+     */
+    public static aiAccountConnectedServicesOrgsUsersRetrieve({
+        id,
+        org,
+        userId,
+    }: {
+        /**
+         * A unique integer value identifying this connected service.
+         */
+        id: number,
+        org: string,
+        userId: string,
+    }): CancelablePromise<ConnectedService> {
+        return __request(OpenAPI, {
+            method: 'GET',
+            url: '/api/ai-account/connected-services/orgs/{org}/users/{user_id}/{id}/',
+            path: {
+                'id': id,
+                'org': org,
+                'user_id': userId,
+            },
+        });
+    }
+    /**
+     * Wires RBAC into a DRF view.
+     *
+     * Two responsibilities:
+     *
+     * 1. When RBAC is enabled, replace the view's `permission_classes` with
+     * `IsEdxAuthenticated` (the gate the RBAC layer assumes).
+     *
+     * 2. Detect server-to-server (Django auth) callers via `is_service_account`.
+     * Server-to-server tokens authenticate as Django auth users with no
+     * relationship to a platform EdxUser. The convention is "we trust this
+     * caller — bypass RBAC and serve the request."
+     *
+     * Combine it with the RBAC-disabled check at the top of `initial()` so
+     * the early exit skips all RBAC prep work:
+     *
+     * if not ConfigFlags.rbac_enabled() or self.is_service_account:
+     * return
+     *
+     * Use `is_service_account` at any other touch points where caller
+     * identity matters (queryset ownership filters, owner attribution on
+     * create, serializer context, etc.).
+     * @returns void
+     * @throws ApiError
+     */
+    public static aiAccountConnectedServicesOrgsUsersDestroy({
+        id,
+        org,
+        userId,
+    }: {
+        /**
+         * A unique integer value identifying this connected service.
+         */
+        id: number,
+        org: string,
+        userId: string,
+    }): CancelablePromise<void> {
+        return __request(OpenAPI, {
+            method: 'DELETE',
+            url: '/api/ai-account/connected-services/orgs/{org}/users/{user_id}/{id}/',
+            path: {
+                'id': id,
+                'org': org,
+                'user_id': userId,
+            },
+        });
+    }
+    /**
+     * Wires RBAC into a DRF view.
+     *
+     * Two responsibilities:
+     *
+     * 1. When RBAC is enabled, replace the view's `permission_classes` with
+     * `IsEdxAuthenticated` (the gate the RBAC layer assumes).
+     *
+     * 2. Detect server-to-server (Django auth) callers via `is_service_account`.
+     * Server-to-server tokens authenticate as Django auth users with no
+     * relationship to a platform EdxUser. The convention is "we trust this
+     * caller — bypass RBAC and serve the request."
+     *
+     * Combine it with the RBAC-disabled check at the top of `initial()` so
+     * the early exit skips all RBAC prep work:
+     *
+     * if not ConfigFlags.rbac_enabled() or self.is_service_account:
+     * return
+     *
+     * Use `is_service_account` at any other touch points where caller
+     * identity matters (queryset ownership filters, owner attribution on
+     * create, serializer context, etc.).
+     * @returns OAuthStartResponse Starts the OAuth flow for the given provider and service
+     * @throws ApiError
+     */
+    public static aiAccountConnectedServicesOrgsUsersRetrieve2({
+        org,
+        provider,
+        service,
+        userId,
+    }: {
+        org: string,
+        provider: string,
+        service: string,
+        userId: string,
+    }): CancelablePromise<OAuthStartResponse> {
+        return __request(OpenAPI, {
+            method: 'GET',
+            url: '/api/ai-account/connected-services/orgs/{org}/users/{user_id}/{provider}/{service}/',
+            path: {
+                'org': org,
+                'provider': provider,
+                'service': service,
+                'user_id': userId,
+            },
+        });
+    }
+    /**
+     * Retrieve LLM credentials for an organization.
+     *
+     * Query Parameters:
+     * name (optional): Filter results by LLM provider name.
+     * When name=google, returns both 'google' (service account) and
+     * 'gemini_google_api_key' credentials if they exist.
+     * unmask_sensitive_fields (optional, bool, default False):
+     * If true, returns the raw unmasked credential value. Restricted
+     * to credentials owned by the requested tenant — the
+     * ``GlobalCredential`` fallback is suppressed when unmasking,
+     * and the response is ``[]`` instead of 404 if the tenant has
+     * no own credentials.
+     *
+     * Args:
+     * request: The HTTP request
+     * org: Organization key identifier
+     *
+     * Returns:
+     * Response: List of LLM credentials for the organization. Values
+     * are masked by default; unmasked when ``unmask_sensitive_fields=true``
+     * and the credential belongs to the tenant.
+     *
+     * Raises:
+     * NotFound: When organization is not found, or (in default masked
+     * mode) when no credentials match the filters even after the
+     * global-credential fallback.
+     * ValidationError: When query parameters are invalid
+     * @returns LLMCredentialResponse
+     * @throws ApiError
+     */
+    public static aiAccountOrgsCredentialRetrieve({
+        org,
+        name,
+        unmaskSensitiveFields = false,
+    }: {
+        org: string,
+        /**
+         * Filter credentials by provider name (e.g., 'openai', 'google')
+         */
+        name?: string,
+        /**
+         * If true and the requester is a platform admin for the org, returns full unmasked credential values. Restricted to credentials owned by the requested tenant (no main-platform fallback when unmasking). Ignored for non-admins.
+         */
+        unmaskSensitiveFields?: boolean,
+    }): CancelablePromise<LLMCredentialResponse> {
+        return __request(OpenAPI, {
+            method: 'GET',
+            url: '/api/ai-account/orgs/{org}/credential/',
+            path: {
+                'org': org,
+            },
+            query: {
+                'name': name,
+                'unmask_sensitive_fields': unmaskSensitiveFields,
+            },
+        });
+    }
+    /**
+     * Create a new LLM credential for an organization.
+     *
+     * For azure_openai credentials, if credential already exists, merges the new
+     * models with existing ones instead of replacing.
+     *
+     * Args:
+     * request: The HTTP request containing credential information
+     * org: Organization key identifier
+     *
+     * Returns:
+     * Response: Created or updated LLM credential
+     *
+     * Raises:
+     * NotFound: When organization is not found
+     * ValidationError: When request data is invalid
+     * @returns LLMCredentialResponse
+     * @throws ApiError
+     */
+    public static aiAccountOrgsCredentialCreate({
+        org,
+        requestBody,
+    }: {
+        org: string,
+        requestBody: LLMCredentialRequest,
+    }): CancelablePromise<LLMCredentialResponse> {
+        return __request(OpenAPI, {
+            method: 'POST',
+            url: '/api/ai-account/orgs/{org}/credential/',
+            path: {
+                'org': org,
+            },
+            body: requestBody,
+            mediaType: 'application/json',
+        });
+    }
+    /**
+     * Update an existing LLM credential for an organization.
+     *
+     * For azure_openai credentials, supports partial model updates by deep merging
+     * the provided model fields with existing ones.
+     *
+     * Args:
+     * request: The HTTP request containing updated credential information
+     * org: Organization key identifier
+     *
+     * Returns:
+     * Response: Updated LLM credential
+     *
+     * Raises:
+     * NotFound: When organization or credential is not found
+     * ValidationError: When request data is invalid
+     * @returns LLMCredentialResponse
+     * @throws ApiError
+     */
+    public static aiAccountOrgsCredentialPartialUpdate({
+        org,
+        requestBody,
+    }: {
+        org: string,
+        requestBody?: PatchedLLMCredentialRequest,
+    }): CancelablePromise<LLMCredentialResponse> {
+        return __request(OpenAPI, {
+            method: 'PATCH',
+            url: '/api/ai-account/orgs/{org}/credential/',
+            path: {
+                'org': org,
+            },
+            body: requestBody,
+            mediaType: 'application/json',
+        });
+    }
+    /**
+     * Delete an existing LLM credential for an organization.
+     *
+     * For azure_openai credentials, supports deleting a specific model by providing
+     * the 'model_name' field. If model_name is omitted, deletes the entire credential.
+     *
+     * Args:
+     * request: The HTTP request containing credential information (must include 'name')
+     * org: Organization key identifier
+     *
+     * Returns:
+     * Response: 204
+     *
+     * Raises:
+     * NotFound: When organization or credential is not found
+     * ValidationError: When request data is invalid
+     * @returns void
+     * @throws ApiError
+     */
+    public static aiAccountOrgsCredentialDestroy({
+        org,
+    }: {
+        org: string,
+    }): CancelablePromise<void> {
+        return __request(OpenAPI, {
+            method: 'DELETE',
+            url: '/api/ai-account/orgs/{org}/credential/',
+            path: {
+                'org': org,
+            },
+        });
+    }
+    /**
+     * Retrieve LLM credentials schemas.
+     *
+     * Query Parameters:
+     * name (optional): Filter results by LLM service name
+     *
+     * Args:
+     * request: The HTTP request
+     * org: Organization key identifier
+     *
+     * Returns:
+     * Response: List of integration credentials schema available.
+     *
+     * Raises:
+     * NotFound: When  no credentials match the filters
+     * ValidationError: When query parameters are invalid
+     * @returns LLMCredentialSchema
+     * @throws ApiError
+     */
+    public static aiAccountOrgsCredentialSchemaRetrieve({
+        org,
+        name,
+        unmaskSensitiveFields = false,
+    }: {
+        org: string,
+        /**
+         * Filter credentials by provider name (e.g., 'openai', 'google')
+         */
+        name?: string,
+        /**
+         * If true and the requester is a platform admin for the org, returns full unmasked credential values. Restricted to credentials owned by the requested tenant (no main-platform fallback when unmasking). Ignored for non-admins.
+         */
+        unmaskSensitiveFields?: boolean,
+    }): CancelablePromise<LLMCredentialSchema> {
+        return __request(OpenAPI, {
+            method: 'GET',
+            url: '/api/ai-account/orgs/{org}/credential/schema/',
+            path: {
+                'org': org,
+            },
+            query: {
+                'name': name,
+                'unmask_sensitive_fields': unmaskSensitiveFields,
+            },
+        });
+    }
+    /**
+     * List fallback LLM configurations
+     * List all fallback LLM configurations for the tenant and global configs.
+     * @returns FallbackLLM
+     * @throws ApiError
+     */
+    public static aiAccountOrgsFallbackLlmList({
+        org,
+        isEnabled,
+        ordering,
+        scope,
+    }: {
+        org: string,
+        /**
+         * Filter by enabled status
+         */
+        isEnabled?: boolean,
+        /**
+         * Which field to use when ordering the results.
+         */
+        ordering?: string,
+        /**
+         * Filter by scope (model or provider)
+         */
+        scope?: string,
+    }): CancelablePromise<Array<FallbackLLM>> {
+        return __request(OpenAPI, {
+            method: 'GET',
+            url: '/api/ai-account/orgs/{org}/fallback-llm/',
+            path: {
+                'org': org,
+            },
+            query: {
+                'is_enabled': isEnabled,
+                'ordering': ordering,
+                'scope': scope,
+            },
+            errors: {
+                403: `Permission denied`,
+            },
+        });
+    }
+    /**
+     * Create fallback LLM configuration
+     *
+     * Create a new fallback LLM configuration.
+     *
+     * - For model scope: specify source_model_name
+     * - For provider scope: only source_provider_name is needed
+     * - Leave tenant_key empty for global configuration
+     *
+     * @returns FallbackLLM
+     * @throws ApiError
+     */
+    public static aiAccountOrgsFallbackLlmCreate({
+        org,
+        requestBody,
+    }: {
+        org: string,
+        requestBody: FallbackLLMCreate,
+    }): CancelablePromise<FallbackLLM> {
+        return __request(OpenAPI, {
+            method: 'POST',
+            url: '/api/ai-account/orgs/{org}/fallback-llm/',
+            path: {
+                'org': org,
+            },
+            body: requestBody,
+            mediaType: 'application/json',
+            errors: {
+                400: `Validation error`,
+                403: `Permission denied`,
+            },
+        });
+    }
+    /**
+     * Get fallback LLM configuration
+     * Retrieve a specific fallback LLM configuration.
+     * @returns FallbackLLM
+     * @throws ApiError
+     */
+    public static aiAccountOrgsFallbackLlmRetrieve({
+        id,
+        org,
+    }: {
+        id: string,
+        org: string,
+    }): CancelablePromise<FallbackLLM> {
+        return __request(OpenAPI, {
+            method: 'GET',
+            url: '/api/ai-account/orgs/{org}/fallback-llm/{id}/',
+            path: {
+                'id': id,
+                'org': org,
+            },
+            errors: {
+                403: `Permission denied`,
+                404: `Not found`,
+            },
+        });
+    }
+    /**
+     * Update fallback LLM configuration
+     * Update an existing fallback LLM configuration.
+     * @returns FallbackLLM
+     * @throws ApiError
+     */
+    public static aiAccountOrgsFallbackLlmUpdate({
+        id,
+        org,
+        requestBody,
+    }: {
+        id: string,
+        org: string,
+        requestBody: FallbackLLMUpdate,
+    }): CancelablePromise<FallbackLLM> {
+        return __request(OpenAPI, {
+            method: 'PUT',
+            url: '/api/ai-account/orgs/{org}/fallback-llm/{id}/',
+            path: {
+                'id': id,
+                'org': org,
+            },
+            body: requestBody,
+            mediaType: 'application/json',
+            errors: {
+                400: `Validation error`,
+                403: `Permission denied`,
+                404: `Not found`,
+            },
+        });
+    }
+    /**
+     * Partially update fallback LLM configuration
+     * Partially update an existing fallback LLM configuration.
+     * @returns FallbackLLM
+     * @throws ApiError
+     */
+    public static aiAccountOrgsFallbackLlmPartialUpdate({
+        id,
+        org,
+        requestBody,
+    }: {
+        id: string,
+        org: string,
+        requestBody?: PatchedFallbackLLMUpdate,
+    }): CancelablePromise<FallbackLLM> {
+        return __request(OpenAPI, {
+            method: 'PATCH',
+            url: '/api/ai-account/orgs/{org}/fallback-llm/{id}/',
+            path: {
+                'id': id,
+                'org': org,
+            },
+            body: requestBody,
+            mediaType: 'application/json',
+            errors: {
+                400: `Validation error`,
+                403: `Permission denied`,
+                404: `Not found`,
+            },
+        });
+    }
+    /**
+     * Delete fallback LLM configuration
+     * Delete a fallback LLM configuration.
+     * @returns void
+     * @throws ApiError
+     */
+    public static aiAccountOrgsFallbackLlmDestroy({
+        id,
+        org,
+    }: {
+        id: string,
+        org: string,
+    }): CancelablePromise<void> {
+        return __request(OpenAPI, {
+            method: 'DELETE',
+            url: '/api/ai-account/orgs/{org}/fallback-llm/{id}/',
+            path: {
+                'id': id,
+                'org': org,
+            },
+            errors: {
+                403: `Permission denied`,
+                404: `Not found`,
+            },
+        });
+    }
+    /**
+     * Retrieve integration credentials for an organization.
+     *
+     * Query Parameters:
+     * name (optional): Filter results by integration service name
+     * unmask_sensitive_fields (optional, bool, default False):
+     * If true and the requester is a platform admin for ``org``,
+     * returns full unmasked credential values. Restricted to
+     * credentials owned by the requested tenant — the ``main``
+     * platform fallback is suppressed when unmasking, so admins
+     * cannot read another tenant's or the global ``main``
+     * credentials unmasked. Silently ignored for non-admins;
+     * students never receive sensitive fields regardless of this
+     * flag.
+     *
+     * Args:
+     * request: The HTTP request
+     * org: Organization key identifier
+     *
+     * Returns:
+     * Response: List of integration credentials for the organization.
+     * The response shape differs by caller role:
+     * - Admins: every credential on the platform, with sensitive
+     * fields masked (``AdminIntegrationCredentialSerializer`` →
+     * ``IntegrationCredential.masked_value``).
+     * - Students: only credentials whose schema declares at least
+     * one non-sensitive field; sensitive fields are removed
+     * entirely from each value
+     * (``StudentIntegrationCredentialSerializer`` →
+     * ``IntegrationCredential.value``). Visibility is determined
+     * by ``IntegrationCredential.is_student_visible()`` — schema-
+     * driven, not a hardcoded provider list.
+     * If the tenant has no credentials of its own and
+     * ``ALLOW_TENANTS_TO_USE_MAIN_LLM_CREDENTIALS`` is enabled, the
+     * view falls back to ``platform__key="main"`` credentials,
+     * subject to the same role-based filtering.
+     *
+     * Raises:
+     * NotFound: When organization is not found or when no credentials match the filters
+     * ValidationError: When query parameters are invalid
+     * @returns AdminIntegrationCredential
+     * @throws ApiError
+     */
+    public static aiAccountOrgsIntegrationCredentialList({
+        org,
+        name,
+        unmaskSensitiveFields = false,
+    }: {
+        org: string,
+        /**
+         * Filter credentials by provider name (e.g., 'openai', 'google')
+         */
+        name?: string,
+        /**
+         * If true and the requester is a platform admin for the org, returns full unmasked credential values. Restricted to credentials owned by the requested tenant (no main-platform fallback when unmasking). Ignored for non-admins.
+         */
+        unmaskSensitiveFields?: boolean,
+    }): CancelablePromise<Array<AdminIntegrationCredential>> {
+        return __request(OpenAPI, {
+            method: 'GET',
+            url: '/api/ai-account/orgs/{org}/integration-credential/',
+            path: {
+                'org': org,
+            },
+            query: {
+                'name': name,
+                'unmask_sensitive_fields': unmaskSensitiveFields,
+            },
+        });
+    }
+    /**
+     * Create a new integration credential for an organization.
+     *
+     * Args:
+     * request: The HTTP request containing credential information
+     * org: Organization key identifier
+     *
+     * Returns:
+     * Response: Created integration credential
+     *
+     * Raises:
+     * NotFound: When organization is not found
+     * ValidationError: When request data is invalid
+     * @returns IntegrationCredential
+     * @throws ApiError
+     */
+    public static aiAccountOrgsIntegrationCredentialCreate({
+        org,
+        requestBody,
+    }: {
+        org: string,
+        requestBody: CredentialRequest,
+    }): CancelablePromise<IntegrationCredential> {
+        return __request(OpenAPI, {
+            method: 'POST',
+            url: '/api/ai-account/orgs/{org}/integration-credential/',
+            path: {
+                'org': org,
+            },
+            body: requestBody,
+            mediaType: 'application/json',
+        });
+    }
+    /**
+     * Update an existing integration credential for an organization.
+     *
+     * Args:
+     * request: The HTTP request containing updated credential information
+     * org: Organization key identifier
+     *
+     * Returns:
+     * Response: Updated integration credential
+     *
+     * Raises:
+     * NotFound: When organization or credential is not found
+     * ValidationError: When request data is invalid
+     * @returns IntegrationCredential
+     * @throws ApiError
+     */
+    public static aiAccountOrgsIntegrationCredentialPartialUpdate({
+        org,
+        requestBody,
+    }: {
+        org: string,
+        requestBody?: PatchedCredentialRequest,
+    }): CancelablePromise<IntegrationCredential> {
+        return __request(OpenAPI, {
+            method: 'PATCH',
+            url: '/api/ai-account/orgs/{org}/integration-credential/',
+            path: {
+                'org': org,
+            },
+            body: requestBody,
+            mediaType: 'application/json',
+        });
+    }
+    /**
+     * Delete an existing integration credential for an organization.
+     *
+     * Args:
+     * request: The HTTP request containing credential information (must include 'name')
+     * org: Organization key identifier
+     *
+     * Returns:
+     * Response: 204
+     *
+     * Raises:
+     * NotFound: When organization or credential is not found
+     * ValidationError: When request data is invalid
+     * @returns void
+     * @throws ApiError
+     */
+    public static aiAccountOrgsIntegrationCredentialDestroy({
+        org,
+    }: {
+        org: string,
+    }): CancelablePromise<void> {
+        return __request(OpenAPI, {
+            method: 'DELETE',
+            url: '/api/ai-account/orgs/{org}/integration-credential/',
+            path: {
+                'org': org,
+            },
+        });
+    }
+    /**
+     * @deprecated
+     * Retrieve integration credentials schema (deprecated v1 shape).
+     *
+     * Query Parameters:
+     * name (optional): Filter results by integration service name
+     *
+     * Args:
+     * request: The HTTP request
+     * org: Organization key identifier
+     *
+     * Returns:
+     * Response: List of integration credentials schema in v1 shape with
+     * ``Deprecation`` and ``Link`` headers pointing to the v2 endpoint.
+     * @returns IntegrationCredentialSchema
+     * @throws ApiError
+     */
+    public static aiAccountOrgsIntegrationCredentialSchemaRetrieve({
+        org,
+        name,
+        unmaskSensitiveFields = false,
+    }: {
+        org: string,
+        /**
+         * Filter credentials by provider name (e.g., 'openai', 'google')
+         */
+        name?: string,
+        /**
+         * If true and the requester is a platform admin for the org, returns full unmasked credential values. Restricted to credentials owned by the requested tenant (no main-platform fallback when unmasking). Ignored for non-admins.
+         */
+        unmaskSensitiveFields?: boolean,
+    }): CancelablePromise<IntegrationCredentialSchema> {
+        return __request(OpenAPI, {
+            method: 'GET',
+            url: '/api/ai-account/orgs/{org}/integration-credential/schema/',
+            path: {
+                'org': org,
+            },
+            query: {
+                'name': name,
+                'unmask_sensitive_fields': unmaskSensitiveFields,
+            },
+        });
+    }
+    /**
+     * Retrieve LLM credentials for an organization.
+     *
+     * Query Parameters:
+     * name (optional): Filter results by LLM provider name.
+     * When name=google, returns both 'google' (service account) and
+     * 'gemini_google_api_key' credentials if they exist.
+     * unmask_sensitive_fields (optional, bool, default False):
+     * If true, returns the raw unmasked credential value. Restricted
+     * to credentials owned by the requested tenant — the
+     * ``GlobalCredential`` fallback is suppressed when unmasking,
+     * and the response is ``[]`` instead of 404 if the tenant has
+     * no own credentials.
+     *
+     * Args:
+     * request: The HTTP request
+     * org: Organization key identifier
+     *
+     * Returns:
+     * Response: List of LLM credentials for the organization. Values
+     * are masked by default; unmasked when ``unmask_sensitive_fields=true``
+     * and the credential belongs to the tenant.
+     *
+     * Raises:
+     * NotFound: When organization is not found, or (in default masked
+     * mode) when no credentials match the filters even after the
+     * global-credential fallback.
+     * ValidationError: When query parameters are invalid
+     * @returns LLMCredentialResponse
+     * @throws ApiError
+     */
+    public static aiAccountOrgsLlmCredentialRetrieve({
+        org,
+        name,
+        unmaskSensitiveFields = false,
+    }: {
+        org: string,
+        /**
+         * Filter credentials by provider name (e.g., 'openai', 'google')
+         */
+        name?: string,
+        /**
+         * If true and the requester is a platform admin for the org, returns full unmasked credential values. Restricted to credentials owned by the requested tenant (no main-platform fallback when unmasking). Ignored for non-admins.
+         */
+        unmaskSensitiveFields?: boolean,
+    }): CancelablePromise<LLMCredentialResponse> {
+        return __request(OpenAPI, {
+            method: 'GET',
+            url: '/api/ai-account/orgs/{org}/llm-credential/',
+            path: {
+                'org': org,
+            },
+            query: {
+                'name': name,
+                'unmask_sensitive_fields': unmaskSensitiveFields,
+            },
+        });
+    }
+    /**
+     * Create a new LLM credential for an organization.
+     *
+     * For azure_openai credentials, if credential already exists, merges the new
+     * models with existing ones instead of replacing.
+     *
+     * Args:
+     * request: The HTTP request containing credential information
+     * org: Organization key identifier
+     *
+     * Returns:
+     * Response: Created or updated LLM credential
+     *
+     * Raises:
+     * NotFound: When organization is not found
+     * ValidationError: When request data is invalid
+     * @returns LLMCredentialResponse
+     * @throws ApiError
+     */
+    public static aiAccountOrgsLlmCredentialCreate({
+        org,
+        requestBody,
+    }: {
+        org: string,
+        requestBody: LLMCredentialRequest,
+    }): CancelablePromise<LLMCredentialResponse> {
+        return __request(OpenAPI, {
+            method: 'POST',
+            url: '/api/ai-account/orgs/{org}/llm-credential/',
+            path: {
+                'org': org,
+            },
+            body: requestBody,
+            mediaType: 'application/json',
+        });
+    }
+    /**
+     * Update an existing LLM credential for an organization.
+     *
+     * For azure_openai credentials, supports partial model updates by deep merging
+     * the provided model fields with existing ones.
+     *
+     * Args:
+     * request: The HTTP request containing updated credential information
+     * org: Organization key identifier
+     *
+     * Returns:
+     * Response: Updated LLM credential
+     *
+     * Raises:
+     * NotFound: When organization or credential is not found
+     * ValidationError: When request data is invalid
+     * @returns LLMCredentialResponse
+     * @throws ApiError
+     */
+    public static aiAccountOrgsLlmCredentialPartialUpdate({
+        org,
+        requestBody,
+    }: {
+        org: string,
+        requestBody?: PatchedLLMCredentialRequest,
+    }): CancelablePromise<LLMCredentialResponse> {
+        return __request(OpenAPI, {
+            method: 'PATCH',
+            url: '/api/ai-account/orgs/{org}/llm-credential/',
+            path: {
+                'org': org,
+            },
+            body: requestBody,
+            mediaType: 'application/json',
+        });
+    }
+    /**
+     * Delete an existing LLM credential for an organization.
+     *
+     * For azure_openai credentials, supports deleting a specific model by providing
+     * the 'model_name' field. If model_name is omitted, deletes the entire credential.
+     *
+     * Args:
+     * request: The HTTP request containing credential information (must include 'name')
+     * org: Organization key identifier
+     *
+     * Returns:
+     * Response: 204
+     *
+     * Raises:
+     * NotFound: When organization or credential is not found
+     * ValidationError: When request data is invalid
+     * @returns void
+     * @throws ApiError
+     */
+    public static aiAccountOrgsLlmCredentialDestroy({
+        org,
+    }: {
+        org: string,
+    }): CancelablePromise<void> {
+        return __request(OpenAPI, {
+            method: 'DELETE',
+            url: '/api/ai-account/orgs/{org}/llm-credential/',
+            path: {
+                'org': org,
+            },
+        });
+    }
+    /**
+     * Retrieve masked integration credentials for an organization.
+     *
+     * Query Parameters:
+     * name (optional): Filter results by integration service name
+     *
+     * Args:
+     * request: The HTTP request
+     * org: Organization key identifier
+     *
+     * Returns:
+     * Response: List of integration credentials for the organization
+     *
+     * Raises:
+     * NotFound: When organization is not found or when no credentials match the filters
+     * ValidationError: When query parameters are invalid
+     * @returns MaskedIntegrationCredential
+     * @throws ApiError
+     */
+    public static aiAccountOrgsMaskedIntegrationCredentialList({
+        org,
+        name,
+        unmaskSensitiveFields = false,
+    }: {
+        org: string,
+        /**
+         * Filter credentials by provider name (e.g., 'openai', 'google')
+         */
+        name?: string,
+        /**
+         * If true and the requester is a platform admin for the org, returns full unmasked credential values. Restricted to credentials owned by the requested tenant (no main-platform fallback when unmasking). Ignored for non-admins.
+         */
+        unmaskSensitiveFields?: boolean,
+    }): CancelablePromise<Array<MaskedIntegrationCredential>> {
+        return __request(OpenAPI, {
+            method: 'GET',
+            url: '/api/ai-account/orgs/{org}/masked-integration-credential/',
+            path: {
+                'org': org,
+            },
+            query: {
+                'name': name,
+                'unmask_sensitive_fields': unmaskSensitiveFields,
+            },
+        });
+    }
+    /**
+     * Retrieve LLM credentials for an organization with the value entries masked.
+     *
+     * Query Parameters:
+     * name (optional): Filter results by LLM provider name
+     *
+     * Args:
+     * request: The HTTP request
+     * org: Organization key identifier
+     *
+     * Returns:
+     * Response: List of LLM credentials for the organization
+     *
+     * Raises:
+     * NotFound: When organization is not found or when no credentials match the filters
+     * ValidationError: When query parameters are invalid
+     * @returns MaskedLLMCredential
+     * @throws ApiError
+     */
+    public static aiAccountOrgsMaskedLlmCredentialRetrieve({
+        org,
+        name,
+        unmaskSensitiveFields = false,
+    }: {
+        org: string,
+        /**
+         * Filter credentials by provider name (e.g., 'openai', 'google')
+         */
+        name?: string,
+        /**
+         * If true and the requester is a platform admin for the org, returns full unmasked credential values. Restricted to credentials owned by the requested tenant (no main-platform fallback when unmasking). Ignored for non-admins.
+         */
+        unmaskSensitiveFields?: boolean,
+    }): CancelablePromise<MaskedLLMCredential> {
+        return __request(OpenAPI, {
+            method: 'GET',
+            url: '/api/ai-account/orgs/{org}/masked-llm-credential/',
+            path: {
+                'org': org,
+            },
+            query: {
+                'name': name,
+                'unmask_sensitive_fields': unmaskSensitiveFields,
+            },
+        });
+    }
+    /**
+     * Return the list of OAuth services that can be used for connected services.
+     *
+     * Query Parameters:
+     * name (optional): Filter by exact service name (case-insensitive).
+     * include_disabled (optional): Set to `true` to include disabled services.
+     * @returns OAuthProvider
+     * @throws ApiError
+     */
+    public static aiAccountOrgsOauthServicesList({
+        org,
+    }: {
+        org: string,
+    }): CancelablePromise<Array<OAuthProvider>> {
+        return __request(OpenAPI, {
+            method: 'GET',
+            url: '/api/ai-account/orgs/{org}/oauth-services/',
+            path: {
+                'org': org,
+            },
+        });
+    }
+    /**
+     * Return the available scopes for the specified OAuth service.
+     *
+     * Query Parameters:
+     * include_disabled (optional): Set to `true` to include scopes from disabled services.
+     * @returns OAuthService
+     * @throws ApiError
+     */
+    public static aiAccountOrgsOauthServicesScopesList({
+        org,
+        serviceName,
+    }: {
+        org: string,
+        serviceName: string,
+    }): CancelablePromise<Array<OAuthService>> {
+        return __request(OpenAPI, {
+            method: 'GET',
+            url: '/api/ai-account/orgs/{org}/oauth-services/{service_name}/scopes/',
+            path: {
+                'org': org,
+                'service_name': serviceName,
+            },
+        });
+    }
+    /**
+     * Enable or disable the use of main LLM credentials for an organization.
+     *
+     * Request Body:
+     * enable (boolean): Set to true to enable main credentials
+     * disable (boolean): Set to true to disable main credentials
+     *
+     * Args:
+     * request: The HTTP request
+     * org: Organization key identifier
+     *
+     * Returns:
+     * Response: Confirmation message
+     *
+     * Raises:
+     * ValidationError: When neither enable nor disable is specified
+     * @returns any
+     * @throws ApiError
+     */
+    public static aiAccountOrgsUseDefaultLlmKeyCreate({
+        org,
+        requestBody,
+    }: {
+        org: string,
+        requestBody: UseMainCreds,
+    }): CancelablePromise<{
+        message?: string;
+    }> {
+        return __request(OpenAPI, {
+            method: 'POST',
+            url: '/api/ai-account/orgs/{org}/use-default-llm-key/',
+            path: {
+                'org': org,
+            },
+            body: requestBody,
+            mediaType: 'application/json',
+        });
+    }
+    /**
+     * Enable, disable, or update free trial settings for an organization.
+     *
+     * Request Body:
+     * enable (boolean): Set to true to enable free trial
+     * disable (boolean): Set to true to disable free trial
+     * metadata (object, optional): Additional metadata for the free trial
+     *
+     * Args:
+     * request: The HTTP request
+     * org: Organization key identifier
+     *
+     * Returns:
+     * Response: Confirmation message
+     * @returns any No response body
+     * @throws ApiError
+     */
+    public static aiAccountOrgsUseFreeTrialCreate({
+        org,
+    }: {
+        org: string,
+    }): CancelablePromise<any> {
+        return __request(OpenAPI, {
+            method: 'POST',
+            url: '/api/ai-account/orgs/{org}/use-free-trial/',
+            path: {
+                'org': org,
+            },
+        });
+    }
+    /**
+     * Return whether the tenant allows user-controlled chat privacy.
+     * @returns TenantChatPrivacyConfig Tenant chat-privacy configuration
+     * @throws ApiError
+     */
+    public static aiAccountOrgsUsersChatPrivacyConfigRetrieve({
+        org,
+        userId,
+    }: {
+        org: string,
+        userId: string,
+    }): CancelablePromise<TenantChatPrivacyConfig> {
+        return __request(OpenAPI, {
+            method: 'GET',
+            url: '/api/ai-account/orgs/{org}/users/{user_id}/chat-privacy-config/',
+            path: {
+                'org': org,
+                'user_id': userId,
+            },
+        });
+    }
+    /**
+     * Flip `ALLOW_USER_CHAT_PRIVACY_CONTROL` for the tenant. Admins only.
+     * @returns TenantChatPrivacyConfig Updated tenant chat-privacy configuration
+     * @throws ApiError
+     */
+    public static aiAccountOrgsUsersChatPrivacyConfigPartialUpdate({
+        org,
+        userId,
+        requestBody,
+    }: {
+        org: string,
+        userId: string,
+        requestBody?: PatchedTenantChatPrivacyConfig,
+    }): CancelablePromise<TenantChatPrivacyConfig> {
+        return __request(OpenAPI, {
+            method: 'PATCH',
+            url: '/api/ai-account/orgs/{org}/users/{user_id}/chat-privacy-config/',
+            path: {
+                'org': org,
+                'user_id': userId,
+            },
+            body: requestBody,
+            mediaType: 'application/json',
+            errors: {
+                400: `Invalid request body`,
+                403: `Caller is not a tenant admin`,
+            },
+        });
+    }
+    /**
+     * Get the effective chat-privacy mode for the given (tenant, mentor,
+     * user, session) tuple.
+     *
+     * Args:
+     * request: HTTP request. Query params: `mentor` (slug), `session` (uuid).
+     * org: Platform key.
+     * user_id: Username of the user whose effective mode is being resolved.
+     * @returns any Effective chat privacy mode and source tier
+     * @throws ApiError
+     */
+    public static aiAccountOrgsUsersChatPrivacyEffectiveRetrieve({
+        org,
+        userId,
+    }: {
+        org: string,
+        userId: string,
+    }): CancelablePromise<any> {
+        return __request(OpenAPI, {
+            method: 'GET',
+            url: '/api/ai-account/orgs/{org}/users/{user_id}/chat-privacy-effective/',
+            path: {
+                'org': org,
+                'user_id': userId,
+            },
+            errors: {
+                404: `User, mentor, or session not found`,
+            },
+        });
+    }
+    /**
+     * Get user's global chat privacy settings.
+     *
+     * Returns the user's current chat privacy mode if the feature is enabled
+     * for the platform, otherwise indicates the feature is disabled.
+     * @returns any User chat privacy settings
+     * @throws ApiError
+     */
+    public static aiAccountOrgsUsersChatPrivacySettingsRetrieve({
+        org,
+        userId,
+    }: {
+        org: string,
+        userId: string,
+    }): CancelablePromise<any> {
+        return __request(OpenAPI, {
+            method: 'GET',
+            url: '/api/ai-account/orgs/{org}/users/{user_id}/chat-privacy-settings/',
+            path: {
+                'org': org,
+                'user_id': userId,
+            },
+        });
+    }
+    /**
+     * Update user's global chat privacy settings.
+     *
+     * Allows users to set their chat privacy preference (normal, anonymized, or disabled)
+     * if the platform has enabled the ALLOW_USER_CHAT_PRIVACY_CONTROL setting.
+     * @returns any Updated chat privacy settings
+     * @throws ApiError
+     */
+    public static aiAccountOrgsUsersChatPrivacySettingsCreate({
+        org,
+        userId,
+        requestBody,
+    }: {
+        org: string,
+        userId: string,
+        requestBody?: UserChatPrivacySettings,
+    }): CancelablePromise<any> {
+        return __request(OpenAPI, {
+            method: 'POST',
+            url: '/api/ai-account/orgs/{org}/users/{user_id}/chat-privacy-settings/',
+            path: {
+                'org': org,
+                'user_id': userId,
+            },
+            body: requestBody,
+            mediaType: 'application/json',
+            errors: {
+                400: `Feature not enabled or invalid request`,
+            },
+        });
+    }
+    /**
+     * Retrieve the status of main LLM credential usage for an organization.
+     *
+     * Args:
+     * request: The HTTP request
+     * org: Organization key identifier
+     * user_id: User identifier
+     *
+     * Returns:
+     * Response: Status of main LLM credential usage
+     * @returns any No response body
+     * @throws ApiError
+     */
+    public static aiAccountOrgsUsersDefaultLlmKeyUsageRetrieve({
+        org,
+        userId,
+    }: {
+        org: string,
+        userId: string,
+    }): CancelablePromise<any> {
+        return __request(OpenAPI, {
+            method: 'GET',
+            url: '/api/ai-account/orgs/{org}/users/{user_id}/default-llm-key-usage',
+            path: {
+                'org': org,
+                'user_id': userId,
+            },
+        });
+    }
+    /**
+     * Retrieve the free trial status for an organization.
+     *
+     * Args:
+     * request: The HTTP request
+     * org: Organization key identifier
+     *
+     * Returns:
+     * Response: Free trial status (boolean)
+     *
+     * Raises:
+     * NotFound: When organization is not found
+     * @returns any
+     * @throws ApiError
+     */
+    public static aiAccountOrgsUsersFreeTrialRetrieve({
+        org,
+        userId,
+    }: {
+        org: string,
+        userId: string,
+    }): CancelablePromise<{
+        is_in_free_trial?: boolean;
+    }> {
+        return __request(OpenAPI, {
+            method: 'GET',
+            url: '/api/ai-account/orgs/{org}/users/{user_id}/free-trial',
+            path: {
+                'org': org,
+                'user_id': userId,
+            },
+        });
+    }
+    /**
+     * Return whether the tenant strips HTML from page_content.
+     * @returns PageContentConfig Tenant page-content stripping configuration
+     * @throws ApiError
+     */
+    public static aiAccountOrgsUsersPageContentConfigRetrieve({
+        org,
+        userId,
+    }: {
+        org: string,
+        userId: string,
+    }): CancelablePromise<PageContentConfig> {
+        return __request(OpenAPI, {
+            method: 'GET',
+            url: '/api/ai-account/orgs/{org}/users/{user_id}/page-content-config/',
+            path: {
+                'org': org,
+                'user_id': userId,
+            },
+        });
+    }
+    /**
+     * Flip ``STRIP_PAGE_CONTENT_HTML`` for the tenant. Admins only.
+     * @returns PageContentConfig Updated tenant page-content stripping configuration
+     * @throws ApiError
+     */
+    public static aiAccountOrgsUsersPageContentConfigPartialUpdate({
+        org,
+        userId,
+        requestBody,
+    }: {
+        org: string,
+        userId: string,
+        requestBody?: PatchedPageContentConfig,
+    }): CancelablePromise<PageContentConfig> {
+        return __request(OpenAPI, {
+            method: 'PATCH',
+            url: '/api/ai-account/orgs/{org}/users/{user_id}/page-content-config/',
+            path: {
+                'org': org,
+                'user_id': userId,
+            },
+            body: requestBody,
+            mediaType: 'application/json',
+            errors: {
+                400: `Invalid request body`,
+                403: `Caller is not a tenant admin`,
+            },
+        });
+    }
+    /**
+     * Get a platform's settings
+     *
+     * Example response:
+     * ```
+     * {"teams_bot_mentor": "f2116cf2-95c7-4c1f-b19e-666ad529439f"}
+     *
+     * ```
+     * @returns TenantSetting
+     * @throws ApiError
+     */
+    public static aiAccountOrgsUsersTenantSettingsRetrieve({
+        org,
+        userId,
+    }: {
+        org: string,
+        userId: string,
+    }): CancelablePromise<TenantSetting> {
+        return __request(OpenAPI, {
+            method: 'GET',
+            url: '/api/ai-account/orgs/{org}/users/{user_id}/tenant-settings/',
+            path: {
+                'org': org,
+                'user_id': userId,
+            },
+        });
+    }
+    /**
+     * Example Request:
+     *
+     * ```
+     * {"teams_bot_mentor": "f2116cf2-95c7-4c1f-b19e-666ad529439f"}
+     * ```
+     * The value here is the mentor's unique id
+     * @returns TenantSetting
+     * @throws ApiError
+     */
+    public static aiAccountOrgsUsersTenantSettingsCreate({
+        org,
+        userId,
+        requestBody,
+    }: {
+        org: string,
+        userId: string,
+        requestBody?: TenantSetting,
+    }): CancelablePromise<TenantSetting> {
+        return __request(OpenAPI, {
+            method: 'POST',
+            url: '/api/ai-account/orgs/{org}/users/{user_id}/tenant-settings/',
+            path: {
+                'org': org,
+                'user_id': userId,
+            },
+            body: requestBody,
+            mediaType: 'application/json',
+        });
+    }
+}