@iblai/iblai-api 4.305.0-core → 4.306.0-core

package/dist/types/services/CatalogService.d.ts

@@ -68,6 +68,10 @@ import type { PaginatedSkill } from '../models/PaginatedSkill';
 import type { PaginatedUserLicense } from '../models/PaginatedUserLicense';
 import type { PaginatedUserLicenseAssignment } from '../models/PaginatedUserLicenseAssignment';
 import type { PaginatedUserLicenseGroupAssignment } from '../models/PaginatedUserLicenseGroupAssignment';
+import type { PatchedPlatformApplicationFormUpdate } from '../models/PatchedPlatformApplicationFormUpdate';
+import type { PatchedPlatformApplicationNote } from '../models/PatchedPlatformApplicationNote';
+import type { PatchedPlatformApplicationPlacementUpdate } from '../models/PatchedPlatformApplicationPlacementUpdate';
+import type { PatchedPlatformApplicationUpdate } from '../models/PatchedPlatformApplicationUpdate';
 import type { Pathway } from '../models/Pathway';
 import type { PathwayCompletionResponse } from '../models/PathwayCompletionResponse';
 import type { PathwayCreateUpdateRequest } from '../models/PathwayCreateUpdateRequest';
@@ -81,6 +85,20 @@ import type { PathwaySelfEnrollmentRequest } from '../models/PathwaySelfEnrollme
 import type { PathwaySuggestionBulkCreate } from '../models/PathwaySuggestionBulkCreate';
 import type { PathwaySuggestionCreate } from '../models/PathwaySuggestionCreate';
 import type { PathwaySuggestionDetail } from '../models/PathwaySuggestionDetail';
+import type { PlatformApplicationAdminSubmit } from '../models/PlatformApplicationAdminSubmit';
+import type { PlatformApplicationAttachmentUpload } from '../models/PlatformApplicationAttachmentUpload';
+import type { PlatformApplicationCandidateLink } from '../models/PlatformApplicationCandidateLink';
+import type { PlatformApplicationCourseAssignment } from '../models/PlatformApplicationCourseAssignment';
+import type { PlatformApplicationCreate } from '../models/PlatformApplicationCreate';
+import type { PlatformApplicationDetail } from '../models/PlatformApplicationDetail';
+import type { PlatformApplicationFeeAction } from '../models/PlatformApplicationFeeAction';
+import type { PlatformApplicationFormCreate } from '../models/PlatformApplicationFormCreate';
+import type { PlatformApplicationFormDetail } from '../models/PlatformApplicationFormDetail';
+import type { PlatformApplicationNote } from '../models/PlatformApplicationNote';
+import type { PlatformApplicationPlacementCreate } from '../models/PlatformApplicationPlacementCreate';
+import type { PlatformApplicationSubmit } from '../models/PlatformApplicationSubmit';
+import type { PlatformApplicationTransition } from '../models/PlatformApplicationTransition';
+import type { PlatformApplicationWaiver } from '../models/PlatformApplicationWaiver';
 import type { PlatformInvitationCreate } from '../models/PlatformInvitationCreate';
 import type { PlatformInvitationDetail } from '../models/PlatformInvitationDetail';
 import type { PlatformInvitationRedemption } from '../models/PlatformInvitationRedemption';
@@ -245,6 +263,636 @@ export declare class CatalogService {
          */
         platformOrg?: string;
     }): CancelablePromise<CourseAccessRequestDetail>;
+    /**
+     * Authenticated applicants, including learners on AXD student tokens.
+     *
+     * Prepends StudentTokenAuthentication like core UserPlatformSelfLinkView (it is
+     * not in the DRF defaults, but learners self-applying use it). An anonymous
+     * request returns 401, not 403: DRF's ``permission_denied`` raises
+     * ``NotAuthenticated`` whenever no authenticator succeeded.
+     * @returns any Own submissions
+     * @throws ApiError
+     */
+    static catalogApplicationsPlatformRetrieve({ formId, platformKey, platformOrg, }: {
+        formId?: number;
+        platformKey?: string;
+        platformOrg?: string;
+    }): CancelablePromise<any>;
+    /**
+     * Authenticated applicants, including learners on AXD student tokens.
+     *
+     * Prepends StudentTokenAuthentication like core UserPlatformSelfLinkView (it is
+     * not in the DRF defaults, but learners self-applying use it). An anonymous
+     * request returns 401, not 403: DRF's ``permission_denied`` raises
+     * ``NotAuthenticated`` whenever no authenticator succeeded.
+     * @returns PlatformApplicationDetail
+     * @throws ApiError
+     */
+    static catalogApplicationsPlatformCreate({ requestBody, }: {
+        requestBody: PlatformApplicationCreate;
+    }): CancelablePromise<PlatformApplicationDetail>;
+    /**
+     * Authenticated applicants, including learners on AXD student tokens.
+     *
+     * Prepends StudentTokenAuthentication like core UserPlatformSelfLinkView (it is
+     * not in the DRF defaults, but learners self-applying use it). An anonymous
+     * request returns 401, not 403: DRF's ``permission_denied`` raises
+     * ``NotAuthenticated`` whenever no authenticator succeeded.
+     * @returns PlatformApplicationDetail
+     * @throws ApiError
+     */
+    static catalogApplicationsPlatformRetrieve2({ submissionId, }: {
+        submissionId: string;
+    }): CancelablePromise<PlatformApplicationDetail>;
+    /**
+     * Authenticated applicants, including learners on AXD student tokens.
+     *
+     * Prepends StudentTokenAuthentication like core UserPlatformSelfLinkView (it is
+     * not in the DRF defaults, but learners self-applying use it). An anonymous
+     * request returns 401, not 403: DRF's ``permission_denied`` raises
+     * ``NotAuthenticated`` whenever no authenticator succeeded.
+     * @returns PlatformApplicationDetail
+     * @throws ApiError
+     */
+    static catalogApplicationsPlatformPartialUpdate({ submissionId, requestBody, }: {
+        submissionId: string;
+        requestBody?: PatchedPlatformApplicationUpdate;
+    }): CancelablePromise<PlatformApplicationDetail>;
+    /**
+     * Authenticated applicants, including learners on AXD student tokens.
+     *
+     * Prepends StudentTokenAuthentication like core UserPlatformSelfLinkView (it is
+     * not in the DRF defaults, but learners self-applying use it). An anonymous
+     * request returns 401, not 403: DRF's ``permission_denied`` raises
+     * ``NotAuthenticated`` whenever no authenticator succeeded.
+     * @returns any Attachment stored
+     * @throws ApiError
+     */
+    static catalogApplicationsPlatformAttachmentsCreate({ submissionId, formData, }: {
+        submissionId: string;
+        formData: PlatformApplicationAttachmentUpload;
+    }): CancelablePromise<any>;
+    /**
+     * Authenticated applicants, including learners on AXD student tokens.
+     *
+     * Prepends StudentTokenAuthentication like core UserPlatformSelfLinkView (it is
+     * not in the DRF defaults, but learners self-applying use it). An anonymous
+     * request returns 401, not 403: DRF's ``permission_denied`` raises
+     * ``NotAuthenticated`` whenever no authenticator succeeded.
+     * @returns void
+     * @throws ApiError
+     */
+    static catalogApplicationsPlatformAttachmentsDestroy({ attachmentId, submissionId, }: {
+        attachmentId: string;
+        submissionId: string;
+    }): CancelablePromise<void>;
+    /**
+     * Authenticated applicants, including learners on AXD student tokens.
+     *
+     * Prepends StudentTokenAuthentication like core UserPlatformSelfLinkView (it is
+     * not in the DRF defaults, but learners self-applying use it). An anonymous
+     * request returns 401, not 403: DRF's ``permission_denied`` raises
+     * ``NotAuthenticated`` whenever no authenticator succeeded.
+     * @returns PlatformApplicationDetail
+     * @throws ApiError
+     */
+    static catalogApplicationsPlatformSubmitCreate({ submissionId, requestBody, }: {
+        submissionId: string;
+        requestBody?: PlatformApplicationSubmit;
+    }): CancelablePromise<PlatformApplicationDetail>;
+    /**
+     * Authenticated applicants, including learners on AXD student tokens.
+     *
+     * Prepends StudentTokenAuthentication like core UserPlatformSelfLinkView (it is
+     * not in the DRF defaults, but learners self-applying use it). An anonymous
+     * request returns 401, not 403: DRF's ``permission_denied`` raises
+     * ``NotAuthenticated`` whenever no authenticator succeeded.
+     * @returns PlatformApplicationDetail
+     * @throws ApiError
+     */
+    static catalogApplicationsPlatformWithdrawCreate({ submissionId, }: {
+        submissionId: string;
+    }): CancelablePromise<PlatformApplicationDetail>;
+    /**
+     * Authenticated applicants, including learners on AXD student tokens.
+     *
+     * Prepends StudentTokenAuthentication like core UserPlatformSelfLinkView (it is
+     * not in the DRF defaults, but learners self-applying use it). An anonymous
+     * request returns 401, not 403: DRF's ``permission_denied`` raises
+     * ``NotAuthenticated`` whenever no authenticator succeeded.
+     * @returns any Active form
+     * @throws ApiError
+     */
+    static catalogApplicationsPlatformFormRetrieve({ formId, platformKey, platformOrg, }: {
+        formId?: number;
+        platformKey?: string;
+        platformOrg?: string;
+    }): CancelablePromise<any>;
+    /**
+     * Wires RBAC into a DRF view.
+     *
+     * Two responsibilities:
+     *
+     * 1. When RBAC is enabled, replace the view's `permission_classes` with
+     * `RbacAuthGate` (the gate the RBAC layer assumes — `IsEdxAuthenticated`
+     * semantics, plus opt-in acceptance of token-policies PlatformApiKeys for
+     * views that set `token_policies_enabled = True`).
+     *
+     * 2. Detect server-to-server (Django auth) callers via `is_service_account`.
+     * Server-to-server tokens authenticate as Django auth users with no
+     * relationship to a platform EdxUser. The convention is "we trust this
+     * caller — bypass RBAC and serve the request."
+     *
+     * Combine it with the RBAC-disabled check at the top of `initial()` so
+     * the early exit skips all RBAC prep work:
+     *
+     * if not ConfigFlags.rbac_enabled() or self.is_service_account:
+     * return
+     *
+     * Use `is_service_account` at any other touch points where caller
+     * identity matters (queryset ownership filters, owner attribution on
+     * create, serializer context, etc.).
+     * @returns any Forms for the platform
+     * @throws ApiError
+     */
+    static catalogApplicationsPlatformFormsManageRetrieve({ platformKey, platformOrg, sort, }: {
+        platformKey?: string;
+        platformOrg?: string;
+        sort?: string;
+    }): CancelablePromise<any>;
+    /**
+     * Wires RBAC into a DRF view.
+     *
+     * Two responsibilities:
+     *
+     * 1. When RBAC is enabled, replace the view's `permission_classes` with
+     * `RbacAuthGate` (the gate the RBAC layer assumes — `IsEdxAuthenticated`
+     * semantics, plus opt-in acceptance of token-policies PlatformApiKeys for
+     * views that set `token_policies_enabled = True`).
+     *
+     * 2. Detect server-to-server (Django auth) callers via `is_service_account`.
+     * Server-to-server tokens authenticate as Django auth users with no
+     * relationship to a platform EdxUser. The convention is "we trust this
+     * caller — bypass RBAC and serve the request."
+     *
+     * Combine it with the RBAC-disabled check at the top of `initial()` so
+     * the early exit skips all RBAC prep work:
+     *
+     * if not ConfigFlags.rbac_enabled() or self.is_service_account:
+     * return
+     *
+     * Use `is_service_account` at any other touch points where caller
+     * identity matters (queryset ownership filters, owner attribution on
+     * create, serializer context, etc.).
+     * @returns PlatformApplicationFormDetail
+     * @throws ApiError
+     */
+    static catalogApplicationsPlatformFormsManageCreate({ requestBody, platformKey, platformOrg, sort, }: {
+        requestBody: PlatformApplicationFormCreate;
+        platformKey?: string;
+        platformOrg?: string;
+        sort?: string;
+    }): CancelablePromise<PlatformApplicationFormDetail>;
+    /**
+     * Wires RBAC into a DRF view.
+     *
+     * Two responsibilities:
+     *
+     * 1. When RBAC is enabled, replace the view's `permission_classes` with
+     * `RbacAuthGate` (the gate the RBAC layer assumes — `IsEdxAuthenticated`
+     * semantics, plus opt-in acceptance of token-policies PlatformApiKeys for
+     * views that set `token_policies_enabled = True`).
+     *
+     * 2. Detect server-to-server (Django auth) callers via `is_service_account`.
+     * Server-to-server tokens authenticate as Django auth users with no
+     * relationship to a platform EdxUser. The convention is "we trust this
+     * caller — bypass RBAC and serve the request."
+     *
+     * Combine it with the RBAC-disabled check at the top of `initial()` so
+     * the early exit skips all RBAC prep work:
+     *
+     * if not ConfigFlags.rbac_enabled() or self.is_service_account:
+     * return
+     *
+     * Use `is_service_account` at any other touch points where caller
+     * identity matters (queryset ownership filters, owner attribution on
+     * create, serializer context, etc.).
+     * @returns PlatformApplicationFormDetail
+     * @throws ApiError
+     */
+    static catalogApplicationsPlatformFormsManageRetrieve2({ formId, platformKey, platformOrg, sort, }: {
+        formId: string;
+        platformKey?: string;
+        platformOrg?: string;
+        sort?: string;
+    }): CancelablePromise<PlatformApplicationFormDetail>;
+    /**
+     * Wires RBAC into a DRF view.
+     *
+     * Two responsibilities:
+     *
+     * 1. When RBAC is enabled, replace the view's `permission_classes` with
+     * `RbacAuthGate` (the gate the RBAC layer assumes — `IsEdxAuthenticated`
+     * semantics, plus opt-in acceptance of token-policies PlatformApiKeys for
+     * views that set `token_policies_enabled = True`).
+     *
+     * 2. Detect server-to-server (Django auth) callers via `is_service_account`.
+     * Server-to-server tokens authenticate as Django auth users with no
+     * relationship to a platform EdxUser. The convention is "we trust this
+     * caller — bypass RBAC and serve the request."
+     *
+     * Combine it with the RBAC-disabled check at the top of `initial()` so
+     * the early exit skips all RBAC prep work:
+     *
+     * if not ConfigFlags.rbac_enabled() or self.is_service_account:
+     * return
+     *
+     * Use `is_service_account` at any other touch points where caller
+     * identity matters (queryset ownership filters, owner attribution on
+     * create, serializer context, etc.).
+     * @returns PlatformApplicationFormDetail
+     * @throws ApiError
+     */
+    static catalogApplicationsPlatformFormsManagePartialUpdate({ formId, platformKey, platformOrg, sort, requestBody, }: {
+        formId: string;
+        platformKey?: string;
+        platformOrg?: string;
+        sort?: string;
+        requestBody?: PatchedPlatformApplicationFormUpdate;
+    }): CancelablePromise<PlatformApplicationFormDetail>;
+    /**
+     * Wires RBAC into a DRF view.
+     *
+     * Two responsibilities:
+     *
+     * 1. When RBAC is enabled, replace the view's `permission_classes` with
+     * `RbacAuthGate` (the gate the RBAC layer assumes — `IsEdxAuthenticated`
+     * semantics, plus opt-in acceptance of token-policies PlatformApiKeys for
+     * views that set `token_policies_enabled = True`).
+     *
+     * 2. Detect server-to-server (Django auth) callers via `is_service_account`.
+     * Server-to-server tokens authenticate as Django auth users with no
+     * relationship to a platform EdxUser. The convention is "we trust this
+     * caller — bypass RBAC and serve the request."
+     *
+     * Combine it with the RBAC-disabled check at the top of `initial()` so
+     * the early exit skips all RBAC prep work:
+     *
+     * if not ConfigFlags.rbac_enabled() or self.is_service_account:
+     * return
+     *
+     * Use `is_service_account` at any other touch points where caller
+     * identity matters (queryset ownership filters, owner attribution on
+     * create, serializer context, etc.).
+     * @returns any Submissions for the platform
+     * @throws ApiError
+     */
+    static catalogApplicationsPlatformManageRetrieve({ platformKey, platformOrg, search, sort, status, }: {
+        platformKey?: string;
+        platformOrg?: string;
+        search?: string;
+        sort?: string;
+        status?: string;
+    }): CancelablePromise<any>;
+    /**
+     * Wires RBAC into a DRF view.
+     *
+     * Two responsibilities:
+     *
+     * 1. When RBAC is enabled, replace the view's `permission_classes` with
+     * `RbacAuthGate` (the gate the RBAC layer assumes — `IsEdxAuthenticated`
+     * semantics, plus opt-in acceptance of token-policies PlatformApiKeys for
+     * views that set `token_policies_enabled = True`).
+     *
+     * 2. Detect server-to-server (Django auth) callers via `is_service_account`.
+     * Server-to-server tokens authenticate as Django auth users with no
+     * relationship to a platform EdxUser. The convention is "we trust this
+     * caller — bypass RBAC and serve the request."
+     *
+     * Combine it with the RBAC-disabled check at the top of `initial()` so
+     * the early exit skips all RBAC prep work:
+     *
+     * if not ConfigFlags.rbac_enabled() or self.is_service_account:
+     * return
+     *
+     * Use `is_service_account` at any other touch points where caller
+     * identity matters (queryset ownership filters, owner attribution on
+     * create, serializer context, etc.).
+     * @returns any Full submission detail
+     * @throws ApiError
+     */
+    static catalogApplicationsPlatformManageRetrieve2({ submissionId, platformKey, platformOrg, search, sort, status, }: {
+        submissionId: string;
+        platformKey?: string;
+        platformOrg?: string;
+        search?: string;
+        sort?: string;
+        status?: string;
+    }): CancelablePromise<any>;
+    /**
+     * Reviewer download: redirect to the storage's (signed, on S3) file URL.
+     *
+     * Gated by ``IsDMAdmin | IsPlatformAdmin`` plus the RBAC verb check on the
+     * attachment's own platform when RBAC is enabled.
+     * @returns void
+     * @throws ApiError
+     */
+    static catalogApplicationsPlatformManageAttachmentsDownloadRetrieve({ attachmentId, submissionId, }: {
+        attachmentId: string;
+        submissionId: string;
+    }): CancelablePromise<void>;
+    /**
+     * Re-run settlement provisioning for one accepted candidate: links them
+     * if an account with their designated email now exists, or re-issues the
+     * platform invitation if none is active. Covers the invite-missing state.
+     * @returns any Candidate after provisioning
+     * @throws ApiError
+     */
+    static catalogApplicationsPlatformManageCandidatesInviteCreate({ candidateId, submissionId, }: {
+        candidateId: string;
+        submissionId: string;
+    }): CancelablePromise<any>;
+    /**
+     * Manually link an accepted candidate to an existing account (the
+     * account-unlinked state: the family signed up outside invitation
+     * redemption, or under a different email than designated).
+     * @returns any Candidate linked
+     * @throws ApiError
+     */
+    static catalogApplicationsPlatformManageCandidatesLinkCreate({ candidateId, submissionId, requestBody, }: {
+        candidateId: string;
+        submissionId: string;
+        requestBody?: PlatformApplicationCandidateLink;
+    }): CancelablePromise<any>;
+    /**
+     * Course assignments for a submission (#2134): list, and assign courses to
+     * accepted candidates individually or in bulk. Each successful item issues a
+     * CourseInvitation that the existing pipeline enrolls.
+     * @returns any Assignments for the submission
+     * @throws ApiError
+     */
+    static catalogApplicationsPlatformManageCourseAssignmentsRetrieve({ submissionId, }: {
+        submissionId: string;
+    }): CancelablePromise<any>;
+    /**
+     * Course assignments for a submission (#2134): list, and assign courses to
+     * accepted candidates individually or in bulk. Each successful item issues a
+     * CourseInvitation that the existing pipeline enrolls.
+     * @returns any Per-item assignment results
+     * @throws ApiError
+     */
+    static catalogApplicationsPlatformManageCourseAssignmentsCreate({ submissionId, requestBody, }: {
+        submissionId: string;
+        requestBody: PlatformApplicationCourseAssignment;
+    }): CancelablePromise<any>;
+    /**
+     * Remove one course assignment (§9.2 "enrollment changes after the school
+     * year begins" — the record side).
+     *
+     * Deactivates the assignment and cancels its invitation when the student has
+     * not yet been enrolled through it. It never unenrolls an already-enrolled
+     * student: platform admins un-enroll deliberately through the catalog
+     * enrollment endpoints, not from an admissions record.
+     * @returns void
+     * @throws ApiError
+     */
+    static catalogApplicationsPlatformManageCourseAssignmentsDestroy({ assignmentId, submissionId, }: {
+        assignmentId: string;
+        submissionId: string;
+    }): CancelablePromise<void>;
+    /**
+     * Reviewer/admin view of a submission's application fee (#2132, §5).
+     *
+     * GET returns the charge and its event history; POST records an out-of-band
+     * payment or a waiver/refund/credit. Money collection through Stripe is a
+     * later segment; this is the domain side.
+     * @returns any Charge + events
+     * @throws ApiError
+     */
+    static catalogApplicationsPlatformManageFeeRetrieve({ submissionId, }: {
+        submissionId: string;
+    }): CancelablePromise<any>;
+    /**
+     * Reviewer/admin view of a submission's application fee (#2132, §5).
+     *
+     * GET returns the charge and its event history; POST records an out-of-band
+     * payment or a waiver/refund/credit. Money collection through Stripe is a
+     * later segment; this is the domain side.
+     * @returns any Charge updated
+     * @throws ApiError
+     */
+    static catalogApplicationsPlatformManageFeeCreate({ submissionId, requestBody, }: {
+        submissionId: string;
+        requestBody: PlatformApplicationFeeAction;
+    }): CancelablePromise<any>;
+    /**
+     * Internal reviewer notes on a submission (#2089, §6). Never surfaced on
+     * applicant endpoints. GET lists (optional ``kind`` filter); POST adds one.
+     * @returns any Notes for the submission
+     * @throws ApiError
+     */
+    static catalogApplicationsPlatformManageNotesRetrieve({ submissionId, platformKey, platformOrg, search, sort, status, }: {
+        submissionId: string;
+        platformKey?: string;
+        platformOrg?: string;
+        search?: string;
+        sort?: string;
+        status?: string;
+    }): CancelablePromise<any>;
+    /**
+     * Internal reviewer notes on a submission (#2089, §6). Never surfaced on
+     * applicant endpoints. GET lists (optional ``kind`` filter); POST adds one.
+     * @returns any Note created
+     * @throws ApiError
+     */
+    static catalogApplicationsPlatformManageNotesCreate({ submissionId, requestBody, }: {
+        submissionId: string;
+        requestBody: PlatformApplicationNote;
+    }): CancelablePromise<any>;
+    /**
+     * Edit or remove a single internal reviewer note.
+     * @returns any Note updated
+     * @throws ApiError
+     */
+    static catalogApplicationsPlatformManageNotesPartialUpdate({ noteId, submissionId, requestBody, }: {
+        noteId: string;
+        submissionId: string;
+        requestBody?: PatchedPlatformApplicationNote;
+    }): CancelablePromise<any>;
+    /**
+     * Edit or remove a single internal reviewer note.
+     * @returns void
+     * @throws ApiError
+     */
+    static catalogApplicationsPlatformManageNotesDestroy({ noteId, submissionId, }: {
+        noteId: string;
+        submissionId: string;
+    }): CancelablePromise<void>;
+    /**
+     * Placements for a submission (#2133): list, and assign a new placement
+     * linking an accepted candidate to the placement mentor.
+     * @returns any Placements for the submission
+     * @throws ApiError
+     */
+    static catalogApplicationsPlatformManagePlacementsRetrieve({ submissionId, }: {
+        submissionId: string;
+    }): CancelablePromise<any>;
+    /**
+     * Placements for a submission (#2133): list, and assign a new placement
+     * linking an accepted candidate to the placement mentor.
+     * @returns any Per-item placement results
+     * @throws ApiError
+     */
+    static catalogApplicationsPlatformManagePlacementsCreate({ submissionId, requestBody, }: {
+        submissionId: string;
+        requestBody: PlatformApplicationPlacementCreate;
+    }): CancelablePromise<any>;
+    /**
+     * Advance a single placement: status, the agent's result, admin override.
+     * @returns any Placement updated
+     * @throws ApiError
+     */
+    static catalogApplicationsPlatformManagePlacementsPartialUpdate({ placementId, submissionId, requestBody, }: {
+        placementId: string;
+        submissionId: string;
+        requestBody?: PatchedPlatformApplicationPlacementUpdate;
+    }): CancelablePromise<any>;
+    /**
+     * Admin submit-with-exceptions (§2.1 "administratively waived"): push a
+     * family's editable application to Submitted, recording a waiver for every
+     * required item still missing and bypassing an unpaid fee gate (the charge
+     * stays payable/waivable). Present-but-invalid answers still block (400).
+     * @returns any Application submitted
+     * @throws ApiError
+     */
+    static catalogApplicationsPlatformManageSubmitCreate({ submissionId, requestBody, }: {
+        submissionId: string;
+        requestBody?: PlatformApplicationAdminSubmit;
+    }): CancelablePromise<any>;
+    /**
+     * Advance a submission or a single candidate through the review pipeline
+     * (#2089, §5-6). A ``candidate_id`` scopes the action to one person; without
+     * it the action applies to every candidate that can legally accept it. When
+     * ``action`` is ``decline`` and ``block`` is set, the applicant is also added
+     * to the platform ban-list (deny-with-block).
+     * @returns any Updated submission detail
+     * @throws ApiError
+     */
+    static catalogApplicationsPlatformManageTransitionCreate({ submissionId, requestBody, }: {
+        submissionId: string;
+        requestBody: PlatformApplicationTransition;
+    }): CancelablePromise<any>;
+    /**
+     * Waive a required item on one application (§2.1 "administratively
+     * waived"): POST excuses a missing required field so it no longer blocks
+     * submission; DELETE reinstates it. Waivers excuse absence only — a
+     * present-but-invalid answer still blocks. The fee is waived through its own
+     * fee endpoint action, which also settles the money record.
+     * @returns any Waiver recorded
+     * @throws ApiError
+     */
+    static catalogApplicationsPlatformManageWaiversCreate({ submissionId, requestBody, }: {
+        submissionId: string;
+        requestBody: PlatformApplicationWaiver;
+    }): CancelablePromise<any>;
+    /**
+     * Waive a required item on one application (§2.1 "administratively
+     * waived"): POST excuses a missing required field so it no longer blocks
+     * submission; DELETE reinstates it. Waivers excuse absence only — a
+     * present-but-invalid answer still blocks. The fee is waived through its own
+     * fee endpoint action, which also settles the money record.
+     * @returns void
+     * @throws ApiError
+     */
+    static catalogApplicationsPlatformManageWaiversDestroy({ submissionId, }: {
+        submissionId: string;
+    }): CancelablePromise<void>;
+    /**
+     * List the active application blocks (ban-list) for a platform.
+     * @returns any Active blocks
+     * @throws ApiError
+     */
+    static catalogApplicationsPlatformManageBlocksRetrieve({ platformKey, platformOrg, search, sort, status, }: {
+        platformKey?: string;
+        platformOrg?: string;
+        search?: string;
+        sort?: string;
+        status?: string;
+    }): CancelablePromise<any>;
+    /**
+     * Lift a single active application block (unblock).
+     * @returns void
+     * @throws ApiError
+     */
+    static catalogApplicationsPlatformManageBlocksDestroy({ blockId, platformKey, platformOrg, search, sort, status, }: {
+        blockId: string;
+        platformKey?: string;
+        platformOrg?: string;
+        search?: string;
+        sort?: string;
+        status?: string;
+    }): CancelablePromise<void>;
+    /**
+     * Wires RBAC into a DRF view.
+     *
+     * Two responsibilities:
+     *
+     * 1. When RBAC is enabled, replace the view's `permission_classes` with
+     * `RbacAuthGate` (the gate the RBAC layer assumes — `IsEdxAuthenticated`
+     * semantics, plus opt-in acceptance of token-policies PlatformApiKeys for
+     * views that set `token_policies_enabled = True`).
+     *
+     * 2. Detect server-to-server (Django auth) callers via `is_service_account`.
+     * Server-to-server tokens authenticate as Django auth users with no
+     * relationship to a platform EdxUser. The convention is "we trust this
+     * caller — bypass RBAC and serve the request."
+     *
+     * Combine it with the RBAC-disabled check at the top of `initial()` so
+     * the early exit skips all RBAC prep work:
+     *
+     * if not ConfigFlags.rbac_enabled() or self.is_service_account:
+     * return
+     *
+     * Use `is_service_account` at any other touch points where caller
+     * identity matters (queryset ownership filters, owner attribution on
+     * create, serializer context, etc.).
+     * @returns any Per-status counts
+     * @throws ApiError
+     */
+    static catalogApplicationsPlatformManageStatsRetrieve({ platformKey, platformOrg, search, sort, status, }: {
+        platformKey?: string;
+        platformOrg?: string;
+        search?: string;
+        sort?: string;
+        status?: string;
+    }): CancelablePromise<any>;
+    /**
+     * Start an annual re-enrollment (#2135): a normal draft create whose
+     * responses are pre-filled from the caller's most recent approved submission
+     * (current-schema fields only; signatures, consents, files, and fields the
+     * form flags fresh are re-asked), linked to that prior submission. With no
+     * prior approved submission this behaves as a plain create.
+     * @returns PlatformApplicationDetail
+     * @throws ApiError
+     */
+    static catalogApplicationsPlatformRenewCreate({ requestBody, }: {
+        requestBody: PlatformApplicationCreate;
+    }): CancelablePromise<PlatformApplicationDetail>;
+    /**
+     * Authenticated applicants, including learners on AXD student tokens.
+     *
+     * Prepends StudentTokenAuthentication like core UserPlatformSelfLinkView (it is
+     * not in the DRF defaults, but learners self-applying use it). An anonymous
+     * request returns 401, not 403: DRF's ``permission_denied`` raises
+     * ``NotAuthenticated`` whenever no authenticator succeeded.
+     * @returns any Gate state
+     * @throws ApiError
+     */
+    static catalogApplicationsPlatformStatusRetrieve({ formId, platformKey, platformOrg, }: {
+        formId?: number;
+        platformKey?: string;
+        platformOrg?: string;
+    }): CancelablePromise<any>;
     /**
      * GET
      * Retrieve prerequisite eligibility info for user/course

package/dist/types/services/CoreService.d.ts

@@ -1277,6 +1277,20 @@ export declare class CoreService {
          */
         platformKey: string;
     }): CancelablePromise<void>;
+    /**
+     * Discover resources for policy building
+     * GET the resource tree node at `path`.
+     *
+     * Platform comes from the request token (service accounts pass platform_key).
+     * @returns any An entity node (child collections) or a collection node (list_url + search_qps + result_fields).
+     * @throws ApiError
+     */
+    static coreRbacResourcesRetrieve({ path, }: {
+        /**
+         * Discovery path, e.g. '/', '/mentors/', '/mentors/5/'.
+         */
+        path?: string;
+    }): CancelablePromise<any>;
     /**
      * List RBAC roles
      * Retrieve a list of RBAC roles. Can be filtered by platform_key and name.