@maxim_mazurok/gapi.client.accesscontextmanager-v1 0.4.20260809 → 0.4.20260827

package/index.d.ts

@@ -9,7 +9,7 @@
 // This file was generated by https://github.com/Maxim-Mazurok/google-api-typings-generator. Please do not edit it manually.
 // In case of any problems please post issue to https://github.com/Maxim-Mazurok/google-api-typings-generator
 // Generated from: https://accesscontextmanager.googleapis.com/$discovery/rest?version=v1
-// Revision: 20260809
+// Revision: 20260827
 
 /// <reference types="gapi.client" />
 
@@ -131,7 +131,7 @@ declare namespace gapi.client {
     interface ClientScope {
       /** Optional. The application that is subject to this binding's scope. */
       restrictedClientApplication?: Application;
-      /** Optional. The GCP project that is subject to this binding's scope. */
+      /** Optional. The Google Cloud project that is subject to this binding's scope. */
       restrictedProject?: Project;
     }
     interface CommitServicePerimetersRequest {
@@ -246,9 +246,7 @@ declare namespace gapi.client {
       name?: string;
       /** Optional. Immutable. The principal that is subject to the access policies in this policy binding. */
       principal?: Principal;
-      /** Optional. Deprecated: Use `scoped_access_settings` instead. A list of applications that are subject to this binding's restrictions. If the list is empty, the binding restrictions will universally apply to all applications. */
-      restrictedClientApplications?: Application[];
-      /** Optional. A list of scoped access settings that set this binding's restrictions on a subset of applications. This field cannot be set if restricted_client_applications is set. */
+      /** Optional. A list of scoped access settings that set this binding's restrictions on a subset of applications. */
       scopedAccessSettings?: ScopedAccessSettings[];
       /** Optional. The Google Cloud session length (GCSL) policy for the group key. */
       sessionSettings?: SessionSettings;
@@ -348,6 +346,16 @@ declare namespace gapi.client {
       /** List of services supported by VPC Service Controls instances. */
       supportedServices?: SupportedService[];
     }
+    interface LookupConfiguredServicePerimeterResponse {
+      /** The resource (e.g. "projects/123", "folders/456") that directly owns/is restricted by the enforced perimeter. */
+      restrictedResource?: string;
+      /** The resource (e.g. "projects/123", "folders/456") that directly owns/is restricted by the dry-run perimeter. */
+      restrictedResourceDryRun?: string;
+      /** Fully qualified name of the configured enforced perimeter. Format: `accessPolicies/{policy_id}/servicePerimeters/{perimeter_name}` This field is empty if no enforced perimeter applies. */
+      servicePerimeter?: string;
+      /** Fully qualified name of the configured dry-run perimeter. Format: `accessPolicies/{policy_id}/servicePerimeters/{perimeter_name}` This field is empty if no dry-run perimeter configuration applies. */
+      servicePerimeterDryRun?: string;
+    }
     interface MethodSelector {
       /** A valid method name for the corresponding `service_name` in ApiOperation. If `*` is used as the value for the `method`, then ALL methods and permissions are allowed. */
       method?: string;
@@ -396,7 +404,7 @@ declare namespace gapi.client {
       version?: number;
     }
     interface Principal {
-      /** Immutable. IAM federated principal name to assign policies to workforce/workload federated identities. Can be principal set or single principal, here are some examples: Single principal: principal://iam.googleapis.com/projects/{project_number}/locations/global/workloadIdentityPools/{pool_id}/subject/{subject_attribute_value} PrincipalSet: principalSet://iam.googleapis.com/projects/{project_number}/locations/global/workloadIdentityPools/{pool_id}/* */
+      /** Immutable. The IAM principal identifier of the federated workforce or workload to assign the policy to. Examples include the following: * Single principal: `principal://iam.googleapis.com/projects/{project_number}/locations/global/workloadIdentityPools/{pool_id}/subject/{subject_attribute_value}` * All workloads in a workload identity pool: `principalSet://iam.googleapis.com/projects/{project_number}/locations/global/workloadIdentityPools/{pool_id}/*` * All Workforce Pools in a Google Cloud organization: `principalSet://cloudresourcemanager.googleapis.com/organizations/{organization_id}/type/WorkforcePool` Bindings created for all Workforce Pools in a Google Cloud organization support only `scoped_access_settings` with the `restricted_project` client scope and active `session_settings`. No other configurations are allowed. */
       federatedPrincipal?: string;
       /** Immutable. Service account email used to assign policies to a specific service account. If a service account is subject to multiple policies (e.g., if there is a policy for all service accounts in a project and a policy for the service account), the closest (i.e. the most specific) dry-run policy will be used for the dry-run functionality and the closest enforcement policy will be used for the enforcement. */
       serviceAccount?: string;
@@ -408,7 +416,7 @@ declare namespace gapi.client {
       forwardingRule?: string;
     }
     interface Project {
-      /** The GCP project resource name. Format: "projects/{project_number}" (Only the numeric project name variation is supported). Example: "projects/1234567890" */
+      /** The Google Cloud project resource name. Format: `projects/{project_number}`. Only the project number is supported. Example: `projects/1234567890` */
       name?: string;
     }
     interface ReplaceAccessLevelsRequest {
@@ -482,7 +490,7 @@ declare namespace gapi.client {
     interface SessionSettings {
       /** Optional. How long a user is allowed to take between actions before a new access token must be issued. Only set for Google Cloud apps. */
       maxInactivity?: string;
-      /** Optional. The session length. Setting this field to zero allows for sessions that are active indefinitely. Also, setting `session_length_enabled` to false disregards session limits, which means that sessions never expire. If use_oidc_max_age is true, for OIDC apps, the session length will be the minimum of this field and the OIDC max_age param. If this field is set to zero, `session_length_enabled` must be set to false or left unset. */
+      /** Optional. The session length. Setting this field to zero allows for sessions that are active indefinitely. Also, setting `session_length_enabled` to `false` disregards session limits, which means that sessions never expire. If `use_oidc_max_age` is `true`, for OIDC apps, the session length will be the minimum of this field and the OIDC `max_age` param. If this field is set to zero, `session_length_enabled` must be set to `false` or left unset. */
       sessionLength?: string;
       /** Optional. This field enables or disables Google Cloud session length. When false, all fields set above will be disregarded and the session length is basically infinite. If `session_length` is set to zero, this field must be set to false. */
       sessionLengthEnabled?: boolean;
@@ -1224,6 +1232,11 @@ declare namespace gapi.client {
         alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
+        /** Optional. If true, the response will contain the deleted principal syntax for identities that support it. */
+        deletedPrincipalSyntax?:
+          | 'DELETED_PRINCIPAL_SYNTAX_SUPPORT_UNSPECIFIED'
+          | 'DELETED_PRINCIPAL_SYNTAX_SUPPORT_DISABLED'
+          | 'DELETED_PRINCIPAL_SYNTAX_SUPPORT_ENABLED';
         /** Selector specifying which fields to include in a partial response. */
         fields?: string;
         /** API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token. */
@@ -1251,6 +1264,11 @@ declare namespace gapi.client {
         alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
+        /** Optional. If true, the response will contain the deleted principal syntax for identities that support it. */
+        deletedPrincipalSyntax?:
+          | 'DELETED_PRINCIPAL_SYNTAX_SUPPORT_UNSPECIFIED'
+          | 'DELETED_PRINCIPAL_SYNTAX_SUPPORT_DISABLED'
+          | 'DELETED_PRINCIPAL_SYNTAX_SUPPORT_ENABLED';
         /** Selector specifying which fields to include in a partial response. */
         fields?: string;
         /** API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token. */
@@ -1282,6 +1300,11 @@ declare namespace gapi.client {
         alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
+        /** Optional. If true, the response will contain the deleted principal syntax for identities that support it and the request can contain identities with deleted principal syntax. */
+        deletedPrincipalSyntax?:
+          | 'DELETED_PRINCIPAL_SYNTAX_SUPPORT_UNSPECIFIED'
+          | 'DELETED_PRINCIPAL_SYNTAX_SUPPORT_DISABLED'
+          | 'DELETED_PRINCIPAL_SYNTAX_SUPPORT_ENABLED';
         /** Selector specifying which fields to include in a partial response. */
         fields?: string;
         /** API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token. */
@@ -1313,6 +1336,11 @@ declare namespace gapi.client {
           alt?: 'json' | 'media' | 'proto';
           /** JSONP */
           callback?: string;
+          /** Optional. If true, the response will contain the deleted principal syntax for identities that support it and the request can contain identities with deleted principal syntax. */
+          deletedPrincipalSyntax?:
+            | 'DELETED_PRINCIPAL_SYNTAX_SUPPORT_UNSPECIFIED'
+            | 'DELETED_PRINCIPAL_SYNTAX_SUPPORT_DISABLED'
+            | 'DELETED_PRINCIPAL_SYNTAX_SUPPORT_ENABLED';
           /** Selector specifying which fields to include in a partial response. */
           fields?: string;
           /** API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token. */
@@ -1719,6 +1747,35 @@ declare namespace gapi.client {
       authorizedOrgsDescs: AuthorizedOrgsDescsResource;
       servicePerimeters: ServicePerimetersResource;
     }
+    interface FoldersResource {
+      /** Looks up the configured service perimeter for a given resource Format: ['projects/{projectNumber}', 'folders/{folderNumber}']. */
+      lookupConfiguredServicePerimeter(request?: {
+        /** V1 error format. */
+        '$.xgafv'?: '1' | '2';
+        /** OAuth access token. */
+        access_token?: string;
+        /** Data format for response. */
+        alt?: 'json' | 'media' | 'proto';
+        /** JSONP */
+        callback?: string;
+        /** Selector specifying which fields to include in a partial response. */
+        fields?: string;
+        /** API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token. */
+        key?: string;
+        /** OAuth 2.0 token for the current user. */
+        oauth_token?: string;
+        /** Returns response with indentations and line breaks. */
+        prettyPrint?: boolean;
+        /** Available to use for quota purposes for server-side applications. Can be any arbitrary string assigned to a user, but should not exceed 40 characters. */
+        quotaUser?: string;
+        /** Required. The Resource to resolve (e.g. "projects/123", "folders/456"). */
+        resource: string;
+        /** Upload protocol for media (e.g. "raw", "multipart"). */
+        upload_protocol?: string;
+        /** Legacy upload protocol for media (e.g. "media", "multipart"). */
+        uploadType?: string;
+      }): Request<LookupConfiguredServicePerimeterResponse>;
+    }
     interface OperationsResource {
       /** Starts asynchronous cancellation on a long-running operation. The server makes a best effort to cancel the operation, but success is not guaranteed. If the server doesn't support this method, it returns `google.rpc.Code.UNIMPLEMENTED`. Clients can use Operations.GetOperation or other methods to check whether the cancellation succeeded or whether the operation completed despite cancellation. On successful cancellation, the operation is not deleted; instead, it becomes an operation with an Operation.error value with a google.rpc.Status.code of `1`, corresponding to `Code.CANCELLED`. */
       cancel(request: {
@@ -2115,6 +2172,35 @@ declare namespace gapi.client {
         uploadType?: string;
       }): Request<ListSupportedPermissionsResponse>;
     }
+    interface ProjectsResource {
+      /** Looks up the configured service perimeter for a given resource Format: ['projects/{projectNumber}', 'folders/{folderNumber}']. */
+      lookupConfiguredServicePerimeter(request?: {
+        /** V1 error format. */
+        '$.xgafv'?: '1' | '2';
+        /** OAuth access token. */
+        access_token?: string;
+        /** Data format for response. */
+        alt?: 'json' | 'media' | 'proto';
+        /** JSONP */
+        callback?: string;
+        /** Selector specifying which fields to include in a partial response. */
+        fields?: string;
+        /** API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token. */
+        key?: string;
+        /** OAuth 2.0 token for the current user. */
+        oauth_token?: string;
+        /** Returns response with indentations and line breaks. */
+        prettyPrint?: boolean;
+        /** Available to use for quota purposes for server-side applications. Can be any arbitrary string assigned to a user, but should not exceed 40 characters. */
+        quotaUser?: string;
+        /** Required. The Resource to resolve (e.g. "projects/123", "folders/456"). */
+        resource: string;
+        /** Upload protocol for media (e.g. "raw", "multipart"). */
+        upload_protocol?: string;
+        /** Legacy upload protocol for media (e.g. "media", "multipart"). */
+        uploadType?: string;
+      }): Request<LookupConfiguredServicePerimeterResponse>;
+    }
     interface ServicesResource {
       /** Returns a VPC-SC supported service based on the service name. **IAM Permissions**: Requires the following IAM permissions to use this method: - `serviceusage.services.use` on the project. */
       get(request?: {
@@ -2176,12 +2262,16 @@ declare namespace gapi.client {
 
     const accessPolicies: AccessPoliciesResource;
 
+    const folders: FoldersResource;
+
     const operations: OperationsResource;
 
     const organizations: OrganizationsResource;
 
     const permissions: PermissionsResource;
 
+    const projects: ProjectsResource;
+
     const services: ServicesResource;
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@maxim_mazurok/gapi.client.accesscontextmanager-v1",
-  "version": "0.4.20260809",
+  "version": "0.4.20260827",
   "description": "TypeScript typings for Access Context Manager API v1",
   "repository": {
     "type": "git",

package/readme.md

@@ -132,6 +132,13 @@ await gapi.client.accesscontextmanager.accessPolicies.testIamPermissions({
   resource: 'resource',
 });
 
+/*
+Looks up the configured service perimeter for a given resource Format: ['projects/{projectNumber}', 'folders/{folderNumber}'].
+*/
+await gapi.client.accesscontextmanager.folders.lookupConfiguredServicePerimeter(
+  {resource: 'resource'},
+);
+
 /*
 Starts asynchronous cancellation on a long-running operation. The server makes a best effort to cancel the operation, but success is not guaranteed. If the server doesn't support this method, it returns `google.rpc.Code.UNIMPLEMENTED`. Clients can use Operations.GetOperation or other methods to check whether the cancellation succeeded or whether the operation completed despite cancellation. On successful cancellation, the operation is not deleted; instead, it becomes an operation with an Operation.error value with a google.rpc.Status.code of `1`, corresponding to `Code.CANCELLED`.
 */
@@ -157,6 +164,13 @@ Lists all supported permissions in VPC Service Controls ingress and egress rules
 */
 await gapi.client.accesscontextmanager.permissions.list({});
 
+/*
+Looks up the configured service perimeter for a given resource Format: ['projects/{projectNumber}', 'folders/{folderNumber}'].
+*/
+await gapi.client.accesscontextmanager.projects.lookupConfiguredServicePerimeter(
+  {resource: 'resource'},
+);
+
 /*
 Returns a VPC-SC supported service based on the service name. **IAM Permissions**: Requires the following IAM permissions to use this method: - `serviceusage.services.use` on the project.
 */