@knowledge-stack/ksapi 1.153.0 → 1.155.0

package/src/models/BulkGrantItem.ts

@@ -0,0 +1,119 @@
+/* tslint:disable */
+/* eslint-disable */
+/**
+ * Knowledge Stack API
+ * Knowledge Stack backend API for authentication and knowledge management.  ## Integrating (RPA / machine clients)  **Base URL.** Knowledge Stack is self-hosted — point at your own deployment host (see `servers`). The `localhost` entry is for local development only.  **Authentication.** Send `Authorization: Bearer <api-key>` on every request. Mint an API key once via `POST /v1/api-keys` from a signed-in browser session; the raw `sk-user-...` secret is returned **only** at creation, so store it then. A key inherits its owning user\'s live tenant role and path permissions — create RPA keys from a least-privilege user, and set `expires_at` for rotation. The `ks_uat` cookie scheme is browser-only and cannot be used by headless clients.  **Async work is polled, not pushed.** There are no outbound webhooks. - `POST /v1/documents/ingest` returns `201` immediately with a `workflow_id`;   poll `GET /v1/system-jobs/document_versions/{workflow_id}` until `status` is   terminal (anything other than `pending`/`processing`). The `Location` response   header points at this poll resource. - `POST /v1/workflow-runs/{run_id}/start` returns `202`; poll   `GET /v1/workflow-runs/{run_id}` until `execution_state` is `COMPLETED` or   `FAILED`. The `Location` header points at the run resource. - `POST /v1/agent/ask` is **synchronous** — it blocks until the agent finishes   and returns the answer inline. Use a generous HTTP timeout.  **Pagination.** List endpoints accept `limit`/`offset` and return `{items, total, limit, offset}`.  **Errors.** Every non-2xx body is `{detail, code, request_id}`. `code` is a stable value from a closed set (see the `ErrorResponse` schema\'s `code` enum) — branch on it rather than parsing `detail`. Quota rejections return `429` with a `Retry-After` header; transient lock contention returns a retryable `503`. Quote `request_id` (also the `x-request-id` response header) to support.  **Idempotency.** `POST /v1/workflow-runs` accepts an `idempotency_key` to dedupe retried run creation. `agent/ask` charges one message *before* running and does not refund a client-cancelled call. 
+ *
+ * The version of the OpenAPI document: 0.1.0
+ * 
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+
+import { mapValues } from '../runtime';
+import type { PermissionCapability } from './PermissionCapability';
+import {
+    PermissionCapabilityFromJSON,
+    PermissionCapabilityFromJSONTyped,
+    PermissionCapabilityToJSON,
+    PermissionCapabilityToJSONTyped,
+} from './PermissionCapability';
+
+/**
+ * One requested grant: a capability on an object (PDO id) for a user.
+ * @export
+ * @interface BulkGrantItem
+ */
+export interface BulkGrantItem {
+    /**
+     * 
+     * @type {string}
+     * @memberof BulkGrantItem
+     */
+    userId: string;
+    /**
+     * 
+     * @type {string}
+     * @memberof BulkGrantItem
+     */
+    objectId: string;
+    /**
+     * 
+     * @type {PermissionCapability}
+     * @memberof BulkGrantItem
+     */
+    capability: PermissionCapability;
+    /**
+     * 
+     * @type {boolean}
+     * @memberof BulkGrantItem
+     */
+    canApprove?: boolean;
+}
+
+
+export const BulkGrantItemPropertyValidationAttributesMap: {
+    [property: string]: {
+        maxLength?: number,
+        minLength?: number,
+        pattern?: string,
+        maximum?: number,
+        exclusiveMaximum?: boolean,
+        minimum?: number,
+        exclusiveMinimum?: boolean,
+        multipleOf?: number,
+        maxItems?: number,
+        minItems?: number,
+        uniqueItems?: boolean
+    }
+} = {
+}
+
+
+/**
+ * Check if a given object implements the BulkGrantItem interface.
+ */
+export function instanceOfBulkGrantItem(value: object): value is BulkGrantItem {
+    if (!('userId' in value) || value['userId'] === undefined) return false;
+    if (!('objectId' in value) || value['objectId'] === undefined) return false;
+    if (!('capability' in value) || value['capability'] === undefined) return false;
+    return true;
+}
+
+export function BulkGrantItemFromJSON(json: any): BulkGrantItem {
+    return BulkGrantItemFromJSONTyped(json, false);
+}
+
+export function BulkGrantItemFromJSONTyped(json: any, ignoreDiscriminator: boolean): BulkGrantItem {
+    if (json == null) {
+        return json;
+    }
+    return {
+        
+        'userId': json['user_id'],
+        'objectId': json['object_id'],
+        'capability': PermissionCapabilityFromJSON(json['capability']),
+        'canApprove': json['can_approve'] == null ? undefined : json['can_approve'],
+    };
+}
+
+export function BulkGrantItemToJSON(json: any): BulkGrantItem {
+    return BulkGrantItemToJSONTyped(json, false);
+}
+
+export function BulkGrantItemToJSONTyped(value?: BulkGrantItem | null, ignoreDiscriminator: boolean = false): any {
+    if (value == null) {
+        return value;
+    }
+
+    return {
+        
+        'user_id': value['userId'],
+        'object_id': value['objectId'],
+        'capability': PermissionCapabilityToJSON(value['capability']),
+        'can_approve': value['canApprove'],
+    };
+}
+

package/src/models/BulkGrantItemFailure.ts

@@ -0,0 +1,111 @@
+/* tslint:disable */
+/* eslint-disable */
+/**
+ * Knowledge Stack API
+ * Knowledge Stack backend API for authentication and knowledge management.  ## Integrating (RPA / machine clients)  **Base URL.** Knowledge Stack is self-hosted — point at your own deployment host (see `servers`). The `localhost` entry is for local development only.  **Authentication.** Send `Authorization: Bearer <api-key>` on every request. Mint an API key once via `POST /v1/api-keys` from a signed-in browser session; the raw `sk-user-...` secret is returned **only** at creation, so store it then. A key inherits its owning user\'s live tenant role and path permissions — create RPA keys from a least-privilege user, and set `expires_at` for rotation. The `ks_uat` cookie scheme is browser-only and cannot be used by headless clients.  **Async work is polled, not pushed.** There are no outbound webhooks. - `POST /v1/documents/ingest` returns `201` immediately with a `workflow_id`;   poll `GET /v1/system-jobs/document_versions/{workflow_id}` until `status` is   terminal (anything other than `pending`/`processing`). The `Location` response   header points at this poll resource. - `POST /v1/workflow-runs/{run_id}/start` returns `202`; poll   `GET /v1/workflow-runs/{run_id}` until `execution_state` is `COMPLETED` or   `FAILED`. The `Location` header points at the run resource. - `POST /v1/agent/ask` is **synchronous** — it blocks until the agent finishes   and returns the answer inline. Use a generous HTTP timeout.  **Pagination.** List endpoints accept `limit`/`offset` and return `{items, total, limit, offset}`.  **Errors.** Every non-2xx body is `{detail, code, request_id}`. `code` is a stable value from a closed set (see the `ErrorResponse` schema\'s `code` enum) — branch on it rather than parsing `detail`. Quota rejections return `429` with a `Retry-After` header; transient lock contention returns a retryable `503`. Quote `request_id` (also the `x-request-id` response header) to support.  **Idempotency.** `POST /v1/workflow-runs` accepts an `idempotency_key` to dedupe retried run creation. `agent/ask` charges one message *before* running and does not refund a client-cancelled call. 
+ *
+ * The version of the OpenAPI document: 0.1.0
+ * 
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+
+import { mapValues } from '../runtime';
+import type { BulkFailureReason } from './BulkFailureReason';
+import {
+    BulkFailureReasonFromJSON,
+    BulkFailureReasonFromJSONTyped,
+    BulkFailureReasonToJSON,
+    BulkFailureReasonToJSONTyped,
+} from './BulkFailureReason';
+
+/**
+ * A grant that could not be created, keyed on its (user, object) pair.
+ * @export
+ * @interface BulkGrantItemFailure
+ */
+export interface BulkGrantItemFailure {
+    /**
+     * 
+     * @type {string}
+     * @memberof BulkGrantItemFailure
+     */
+    userId: string;
+    /**
+     * 
+     * @type {string}
+     * @memberof BulkGrantItemFailure
+     */
+    objectId: string;
+    /**
+     * 
+     * @type {BulkFailureReason}
+     * @memberof BulkGrantItemFailure
+     */
+    reason: BulkFailureReason;
+}
+
+
+export const BulkGrantItemFailurePropertyValidationAttributesMap: {
+    [property: string]: {
+        maxLength?: number,
+        minLength?: number,
+        pattern?: string,
+        maximum?: number,
+        exclusiveMaximum?: boolean,
+        minimum?: number,
+        exclusiveMinimum?: boolean,
+        multipleOf?: number,
+        maxItems?: number,
+        minItems?: number,
+        uniqueItems?: boolean
+    }
+} = {
+}
+
+
+/**
+ * Check if a given object implements the BulkGrantItemFailure interface.
+ */
+export function instanceOfBulkGrantItemFailure(value: object): value is BulkGrantItemFailure {
+    if (!('userId' in value) || value['userId'] === undefined) return false;
+    if (!('objectId' in value) || value['objectId'] === undefined) return false;
+    if (!('reason' in value) || value['reason'] === undefined) return false;
+    return true;
+}
+
+export function BulkGrantItemFailureFromJSON(json: any): BulkGrantItemFailure {
+    return BulkGrantItemFailureFromJSONTyped(json, false);
+}
+
+export function BulkGrantItemFailureFromJSONTyped(json: any, ignoreDiscriminator: boolean): BulkGrantItemFailure {
+    if (json == null) {
+        return json;
+    }
+    return {
+        
+        'userId': json['user_id'],
+        'objectId': json['object_id'],
+        'reason': BulkFailureReasonFromJSON(json['reason']),
+    };
+}
+
+export function BulkGrantItemFailureToJSON(json: any): BulkGrantItemFailure {
+    return BulkGrantItemFailureToJSONTyped(json, false);
+}
+
+export function BulkGrantItemFailureToJSONTyped(value?: BulkGrantItemFailure | null, ignoreDiscriminator: boolean = false): any {
+    if (value == null) {
+        return value;
+    }
+
+    return {
+        
+        'user_id': value['userId'],
+        'object_id': value['objectId'],
+        'reason': BulkFailureReasonToJSON(value['reason']),
+    };
+}
+

package/src/models/BulkGrantRequest.ts

@@ -0,0 +1,99 @@
+/* tslint:disable */
+/* eslint-disable */
+/**
+ * Knowledge Stack API
+ * Knowledge Stack backend API for authentication and knowledge management.  ## Integrating (RPA / machine clients)  **Base URL.** Knowledge Stack is self-hosted — point at your own deployment host (see `servers`). The `localhost` entry is for local development only.  **Authentication.** Send `Authorization: Bearer <api-key>` on every request. Mint an API key once via `POST /v1/api-keys` from a signed-in browser session; the raw `sk-user-...` secret is returned **only** at creation, so store it then. A key inherits its owning user\'s live tenant role and path permissions — create RPA keys from a least-privilege user, and set `expires_at` for rotation. The `ks_uat` cookie scheme is browser-only and cannot be used by headless clients.  **Async work is polled, not pushed.** There are no outbound webhooks. - `POST /v1/documents/ingest` returns `201` immediately with a `workflow_id`;   poll `GET /v1/system-jobs/document_versions/{workflow_id}` until `status` is   terminal (anything other than `pending`/`processing`). The `Location` response   header points at this poll resource. - `POST /v1/workflow-runs/{run_id}/start` returns `202`; poll   `GET /v1/workflow-runs/{run_id}` until `execution_state` is `COMPLETED` or   `FAILED`. The `Location` header points at the run resource. - `POST /v1/agent/ask` is **synchronous** — it blocks until the agent finishes   and returns the answer inline. Use a generous HTTP timeout.  **Pagination.** List endpoints accept `limit`/`offset` and return `{items, total, limit, offset}`.  **Errors.** Every non-2xx body is `{detail, code, request_id}`. `code` is a stable value from a closed set (see the `ErrorResponse` schema\'s `code` enum) — branch on it rather than parsing `detail`. Quota rejections return `429` with a `Retry-After` header; transient lock contention returns a retryable `503`. Quote `request_id` (also the `x-request-id` response header) to support.  **Idempotency.** `POST /v1/workflow-runs` accepts an `idempotency_key` to dedupe retried run creation. `agent/ask` charges one message *before* running and does not refund a client-cancelled call. 
+ *
+ * The version of the OpenAPI document: 0.1.0
+ * 
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+
+import { mapValues } from '../runtime';
+import type { BulkGrantItem } from './BulkGrantItem';
+import {
+    BulkGrantItemFromJSON,
+    BulkGrantItemFromJSONTyped,
+    BulkGrantItemToJSON,
+    BulkGrantItemToJSONTyped,
+} from './BulkGrantItem';
+
+/**
+ * Grant many (user, object, capability) permissions in one request.
+ * @export
+ * @interface BulkGrantRequest
+ */
+export interface BulkGrantRequest {
+    /**
+     * 
+     * @type {string}
+     * @memberof BulkGrantRequest
+     */
+    tenantId: string;
+    /**
+     * 
+     * @type {Array<BulkGrantItem>}
+     * @memberof BulkGrantRequest
+     */
+    grants?: Array<BulkGrantItem>;
+}
+export const BulkGrantRequestPropertyValidationAttributesMap: {
+    [property: string]: {
+        maxLength?: number,
+        minLength?: number,
+        pattern?: string,
+        maximum?: number,
+        exclusiveMaximum?: boolean,
+        minimum?: number,
+        exclusiveMinimum?: boolean,
+        multipleOf?: number,
+        maxItems?: number,
+        minItems?: number,
+        uniqueItems?: boolean
+    }
+} = {
+}
+
+
+/**
+ * Check if a given object implements the BulkGrantRequest interface.
+ */
+export function instanceOfBulkGrantRequest(value: object): value is BulkGrantRequest {
+    if (!('tenantId' in value) || value['tenantId'] === undefined) return false;
+    return true;
+}
+
+export function BulkGrantRequestFromJSON(json: any): BulkGrantRequest {
+    return BulkGrantRequestFromJSONTyped(json, false);
+}
+
+export function BulkGrantRequestFromJSONTyped(json: any, ignoreDiscriminator: boolean): BulkGrantRequest {
+    if (json == null) {
+        return json;
+    }
+    return {
+        
+        'tenantId': json['tenant_id'],
+        'grants': json['grants'] == null ? undefined : ((json['grants'] as Array<any>).map(BulkGrantItemFromJSON)),
+    };
+}
+
+export function BulkGrantRequestToJSON(json: any): BulkGrantRequest {
+    return BulkGrantRequestToJSONTyped(json, false);
+}
+
+export function BulkGrantRequestToJSONTyped(value?: BulkGrantRequest | null, ignoreDiscriminator: boolean = false): any {
+    if (value == null) {
+        return value;
+    }
+
+    return {
+        
+        'tenant_id': value['tenantId'],
+        'grants': value['grants'] == null ? undefined : ((value['grants'] as Array<any>).map(BulkGrantItemToJSON)),
+    };
+}
+

package/src/models/BulkGrantResponse.ts

@@ -0,0 +1,105 @@
+/* tslint:disable */
+/* eslint-disable */
+/**
+ * Knowledge Stack API
+ * Knowledge Stack backend API for authentication and knowledge management.  ## Integrating (RPA / machine clients)  **Base URL.** Knowledge Stack is self-hosted — point at your own deployment host (see `servers`). The `localhost` entry is for local development only.  **Authentication.** Send `Authorization: Bearer <api-key>` on every request. Mint an API key once via `POST /v1/api-keys` from a signed-in browser session; the raw `sk-user-...` secret is returned **only** at creation, so store it then. A key inherits its owning user\'s live tenant role and path permissions — create RPA keys from a least-privilege user, and set `expires_at` for rotation. The `ks_uat` cookie scheme is browser-only and cannot be used by headless clients.  **Async work is polled, not pushed.** There are no outbound webhooks. - `POST /v1/documents/ingest` returns `201` immediately with a `workflow_id`;   poll `GET /v1/system-jobs/document_versions/{workflow_id}` until `status` is   terminal (anything other than `pending`/`processing`). The `Location` response   header points at this poll resource. - `POST /v1/workflow-runs/{run_id}/start` returns `202`; poll   `GET /v1/workflow-runs/{run_id}` until `execution_state` is `COMPLETED` or   `FAILED`. The `Location` header points at the run resource. - `POST /v1/agent/ask` is **synchronous** — it blocks until the agent finishes   and returns the answer inline. Use a generous HTTP timeout.  **Pagination.** List endpoints accept `limit`/`offset` and return `{items, total, limit, offset}`.  **Errors.** Every non-2xx body is `{detail, code, request_id}`. `code` is a stable value from a closed set (see the `ErrorResponse` schema\'s `code` enum) — branch on it rather than parsing `detail`. Quota rejections return `429` with a `Retry-After` header; transient lock contention returns a retryable `503`. Quote `request_id` (also the `x-request-id` response header) to support.  **Idempotency.** `POST /v1/workflow-runs` accepts an `idempotency_key` to dedupe retried run creation. `agent/ask` charges one message *before* running and does not refund a client-cancelled call. 
+ *
+ * The version of the OpenAPI document: 0.1.0
+ * 
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+
+import { mapValues } from '../runtime';
+import type { BulkGrantItemFailure } from './BulkGrantItemFailure';
+import {
+    BulkGrantItemFailureFromJSON,
+    BulkGrantItemFailureFromJSONTyped,
+    BulkGrantItemFailureToJSON,
+    BulkGrantItemFailureToJSONTyped,
+} from './BulkGrantItemFailure';
+import type { BulkGrantSuccess } from './BulkGrantSuccess';
+import {
+    BulkGrantSuccessFromJSON,
+    BulkGrantSuccessFromJSONTyped,
+    BulkGrantSuccessToJSON,
+    BulkGrantSuccessToJSONTyped,
+} from './BulkGrantSuccess';
+
+/**
+ * Per-item outcome of a bulk grant (composite-keyed, unlike other bulks).
+ * @export
+ * @interface BulkGrantResponse
+ */
+export interface BulkGrantResponse {
+    /**
+     * 
+     * @type {Array<BulkGrantSuccess>}
+     * @memberof BulkGrantResponse
+     */
+    succeeded?: Array<BulkGrantSuccess>;
+    /**
+     * 
+     * @type {Array<BulkGrantItemFailure>}
+     * @memberof BulkGrantResponse
+     */
+    failed?: Array<BulkGrantItemFailure>;
+}
+export const BulkGrantResponsePropertyValidationAttributesMap: {
+    [property: string]: {
+        maxLength?: number,
+        minLength?: number,
+        pattern?: string,
+        maximum?: number,
+        exclusiveMaximum?: boolean,
+        minimum?: number,
+        exclusiveMinimum?: boolean,
+        multipleOf?: number,
+        maxItems?: number,
+        minItems?: number,
+        uniqueItems?: boolean
+    }
+} = {
+}
+
+
+/**
+ * Check if a given object implements the BulkGrantResponse interface.
+ */
+export function instanceOfBulkGrantResponse(value: object): value is BulkGrantResponse {
+    return true;
+}
+
+export function BulkGrantResponseFromJSON(json: any): BulkGrantResponse {
+    return BulkGrantResponseFromJSONTyped(json, false);
+}
+
+export function BulkGrantResponseFromJSONTyped(json: any, ignoreDiscriminator: boolean): BulkGrantResponse {
+    if (json == null) {
+        return json;
+    }
+    return {
+        
+        'succeeded': json['succeeded'] == null ? undefined : ((json['succeeded'] as Array<any>).map(BulkGrantSuccessFromJSON)),
+        'failed': json['failed'] == null ? undefined : ((json['failed'] as Array<any>).map(BulkGrantItemFailureFromJSON)),
+    };
+}
+
+export function BulkGrantResponseToJSON(json: any): BulkGrantResponse {
+    return BulkGrantResponseToJSONTyped(json, false);
+}
+
+export function BulkGrantResponseToJSONTyped(value?: BulkGrantResponse | null, ignoreDiscriminator: boolean = false): any {
+    if (value == null) {
+        return value;
+    }
+
+    return {
+        
+        'succeeded': value['succeeded'] == null ? undefined : ((value['succeeded'] as Array<any>).map(BulkGrantSuccessToJSON)),
+        'failed': value['failed'] == null ? undefined : ((value['failed'] as Array<any>).map(BulkGrantItemFailureToJSON)),
+    };
+}
+

package/src/models/BulkGrantSuccess.ts

@@ -0,0 +1,129 @@
+/* tslint:disable */
+/* eslint-disable */
+/**
+ * Knowledge Stack API
+ * Knowledge Stack backend API for authentication and knowledge management.  ## Integrating (RPA / machine clients)  **Base URL.** Knowledge Stack is self-hosted — point at your own deployment host (see `servers`). The `localhost` entry is for local development only.  **Authentication.** Send `Authorization: Bearer <api-key>` on every request. Mint an API key once via `POST /v1/api-keys` from a signed-in browser session; the raw `sk-user-...` secret is returned **only** at creation, so store it then. A key inherits its owning user\'s live tenant role and path permissions — create RPA keys from a least-privilege user, and set `expires_at` for rotation. The `ks_uat` cookie scheme is browser-only and cannot be used by headless clients.  **Async work is polled, not pushed.** There are no outbound webhooks. - `POST /v1/documents/ingest` returns `201` immediately with a `workflow_id`;   poll `GET /v1/system-jobs/document_versions/{workflow_id}` until `status` is   terminal (anything other than `pending`/`processing`). The `Location` response   header points at this poll resource. - `POST /v1/workflow-runs/{run_id}/start` returns `202`; poll   `GET /v1/workflow-runs/{run_id}` until `execution_state` is `COMPLETED` or   `FAILED`. The `Location` header points at the run resource. - `POST /v1/agent/ask` is **synchronous** — it blocks until the agent finishes   and returns the answer inline. Use a generous HTTP timeout.  **Pagination.** List endpoints accept `limit`/`offset` and return `{items, total, limit, offset}`.  **Errors.** Every non-2xx body is `{detail, code, request_id}`. `code` is a stable value from a closed set (see the `ErrorResponse` schema\'s `code` enum) — branch on it rather than parsing `detail`. Quota rejections return `429` with a `Retry-After` header; transient lock contention returns a retryable `503`. Quote `request_id` (also the `x-request-id` response header) to support.  **Idempotency.** `POST /v1/workflow-runs` accepts an `idempotency_key` to dedupe retried run creation. `agent/ask` charges one message *before* running and does not refund a client-cancelled call. 
+ *
+ * The version of the OpenAPI document: 0.1.0
+ * 
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+
+import { mapValues } from '../runtime';
+import type { PermissionCapability } from './PermissionCapability';
+import {
+    PermissionCapabilityFromJSON,
+    PermissionCapabilityFromJSONTyped,
+    PermissionCapabilityToJSON,
+    PermissionCapabilityToJSONTyped,
+} from './PermissionCapability';
+
+/**
+ * A grant that was created, keyed on its (user, object) pair plus new id.
+ * @export
+ * @interface BulkGrantSuccess
+ */
+export interface BulkGrantSuccess {
+    /**
+     * 
+     * @type {string}
+     * @memberof BulkGrantSuccess
+     */
+    userId: string;
+    /**
+     * 
+     * @type {string}
+     * @memberof BulkGrantSuccess
+     */
+    objectId: string;
+    /**
+     * 
+     * @type {string}
+     * @memberof BulkGrantSuccess
+     */
+    permissionId: string;
+    /**
+     * 
+     * @type {PermissionCapability}
+     * @memberof BulkGrantSuccess
+     */
+    capability: PermissionCapability;
+    /**
+     * 
+     * @type {boolean}
+     * @memberof BulkGrantSuccess
+     */
+    canApprove: boolean;
+}
+
+
+export const BulkGrantSuccessPropertyValidationAttributesMap: {
+    [property: string]: {
+        maxLength?: number,
+        minLength?: number,
+        pattern?: string,
+        maximum?: number,
+        exclusiveMaximum?: boolean,
+        minimum?: number,
+        exclusiveMinimum?: boolean,
+        multipleOf?: number,
+        maxItems?: number,
+        minItems?: number,
+        uniqueItems?: boolean
+    }
+} = {
+}
+
+
+/**
+ * Check if a given object implements the BulkGrantSuccess interface.
+ */
+export function instanceOfBulkGrantSuccess(value: object): value is BulkGrantSuccess {
+    if (!('userId' in value) || value['userId'] === undefined) return false;
+    if (!('objectId' in value) || value['objectId'] === undefined) return false;
+    if (!('permissionId' in value) || value['permissionId'] === undefined) return false;
+    if (!('capability' in value) || value['capability'] === undefined) return false;
+    if (!('canApprove' in value) || value['canApprove'] === undefined) return false;
+    return true;
+}
+
+export function BulkGrantSuccessFromJSON(json: any): BulkGrantSuccess {
+    return BulkGrantSuccessFromJSONTyped(json, false);
+}
+
+export function BulkGrantSuccessFromJSONTyped(json: any, ignoreDiscriminator: boolean): BulkGrantSuccess {
+    if (json == null) {
+        return json;
+    }
+    return {
+        
+        'userId': json['user_id'],
+        'objectId': json['object_id'],
+        'permissionId': json['permission_id'],
+        'capability': PermissionCapabilityFromJSON(json['capability']),
+        'canApprove': json['can_approve'],
+    };
+}
+
+export function BulkGrantSuccessToJSON(json: any): BulkGrantSuccess {
+    return BulkGrantSuccessToJSONTyped(json, false);
+}
+
+export function BulkGrantSuccessToJSONTyped(value?: BulkGrantSuccess | null, ignoreDiscriminator: boolean = false): any {
+    if (value == null) {
+        return value;
+    }
+
+    return {
+        
+        'user_id': value['userId'],
+        'object_id': value['objectId'],
+        'permission_id': value['permissionId'],
+        'capability': PermissionCapabilityToJSON(value['capability']),
+        'can_approve': value['canApprove'],
+    };
+}
+

package/src/models/BulkItemFailure.ts

@@ -0,0 +1,102 @@
+/* tslint:disable */
+/* eslint-disable */
+/**
+ * Knowledge Stack API
+ * Knowledge Stack backend API for authentication and knowledge management.  ## Integrating (RPA / machine clients)  **Base URL.** Knowledge Stack is self-hosted — point at your own deployment host (see `servers`). The `localhost` entry is for local development only.  **Authentication.** Send `Authorization: Bearer <api-key>` on every request. Mint an API key once via `POST /v1/api-keys` from a signed-in browser session; the raw `sk-user-...` secret is returned **only** at creation, so store it then. A key inherits its owning user\'s live tenant role and path permissions — create RPA keys from a least-privilege user, and set `expires_at` for rotation. The `ks_uat` cookie scheme is browser-only and cannot be used by headless clients.  **Async work is polled, not pushed.** There are no outbound webhooks. - `POST /v1/documents/ingest` returns `201` immediately with a `workflow_id`;   poll `GET /v1/system-jobs/document_versions/{workflow_id}` until `status` is   terminal (anything other than `pending`/`processing`). The `Location` response   header points at this poll resource. - `POST /v1/workflow-runs/{run_id}/start` returns `202`; poll   `GET /v1/workflow-runs/{run_id}` until `execution_state` is `COMPLETED` or   `FAILED`. The `Location` header points at the run resource. - `POST /v1/agent/ask` is **synchronous** — it blocks until the agent finishes   and returns the answer inline. Use a generous HTTP timeout.  **Pagination.** List endpoints accept `limit`/`offset` and return `{items, total, limit, offset}`.  **Errors.** Every non-2xx body is `{detail, code, request_id}`. `code` is a stable value from a closed set (see the `ErrorResponse` schema\'s `code` enum) — branch on it rather than parsing `detail`. Quota rejections return `429` with a `Retry-After` header; transient lock contention returns a retryable `503`. Quote `request_id` (also the `x-request-id` response header) to support.  **Idempotency.** `POST /v1/workflow-runs` accepts an `idempotency_key` to dedupe retried run creation. `agent/ask` charges one message *before* running and does not refund a client-cancelled call. 
+ *
+ * The version of the OpenAPI document: 0.1.0
+ * 
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+
+import { mapValues } from '../runtime';
+import type { BulkFailureReason } from './BulkFailureReason';
+import {
+    BulkFailureReasonFromJSON,
+    BulkFailureReasonFromJSONTyped,
+    BulkFailureReasonToJSON,
+    BulkFailureReasonToJSONTyped,
+} from './BulkFailureReason';
+
+/**
+ * A single id that could not be applied, and why.
+ * @export
+ * @interface BulkItemFailure
+ */
+export interface BulkItemFailure {
+    /**
+     * 
+     * @type {string}
+     * @memberof BulkItemFailure
+     */
+    id: string;
+    /**
+     * 
+     * @type {BulkFailureReason}
+     * @memberof BulkItemFailure
+     */
+    reason: BulkFailureReason;
+}
+
+
+export const BulkItemFailurePropertyValidationAttributesMap: {
+    [property: string]: {
+        maxLength?: number,
+        minLength?: number,
+        pattern?: string,
+        maximum?: number,
+        exclusiveMaximum?: boolean,
+        minimum?: number,
+        exclusiveMinimum?: boolean,
+        multipleOf?: number,
+        maxItems?: number,
+        minItems?: number,
+        uniqueItems?: boolean
+    }
+} = {
+}
+
+
+/**
+ * Check if a given object implements the BulkItemFailure interface.
+ */
+export function instanceOfBulkItemFailure(value: object): value is BulkItemFailure {
+    if (!('id' in value) || value['id'] === undefined) return false;
+    if (!('reason' in value) || value['reason'] === undefined) return false;
+    return true;
+}
+
+export function BulkItemFailureFromJSON(json: any): BulkItemFailure {
+    return BulkItemFailureFromJSONTyped(json, false);
+}
+
+export function BulkItemFailureFromJSONTyped(json: any, ignoreDiscriminator: boolean): BulkItemFailure {
+    if (json == null) {
+        return json;
+    }
+    return {
+        
+        'id': json['id'],
+        'reason': BulkFailureReasonFromJSON(json['reason']),
+    };
+}
+
+export function BulkItemFailureToJSON(json: any): BulkItemFailure {
+    return BulkItemFailureToJSONTyped(json, false);
+}
+
+export function BulkItemFailureToJSONTyped(value?: BulkItemFailure | null, ignoreDiscriminator: boolean = false): any {
+    if (value == null) {
+        return value;
+    }
+
+    return {
+        
+        'id': value['id'],
+        'reason': BulkFailureReasonToJSON(value['reason']),
+    };
+}
+