@openfilz-sdk/typescript-ee 1.10.5 → 1.11.0

package/.openapi-generator/FILES

@@ -44,6 +44,7 @@ api/scanner-proxy-api.ts
 api/search-administration-api.ts
 api/settings-api.ts
 api/smart-filing-api.ts
+api/storage-encryption-administration-api.ts
 api/tus-controller-api.ts
 api/upload-token-controller-api.ts
 api/user-privacy-api.ts
@@ -179,6 +180,7 @@ docs/Insights.md
 docs/InstantiateTemplateRequest.md
 docs/Item.md
 docs/ItemResult.md
+docs/JobStatus.md
 docs/KeyCount.md
 docs/LicenseInfo.md
 docs/ListAiModelsRequest.md
@@ -208,6 +210,7 @@ docs/PdfTransformAudit.md
 docs/PerDefinition.md
 docs/PublicSignatureView.md
 docs/ReassignTaskRequest.md
+docs/ReencryptRequest.md
 docs/RenameAudit.md
 docs/RenameRequest.md
 docs/ReorganizationApplyRequest.md
@@ -257,6 +260,8 @@ docs/SplitOutput.md
 docs/SplitRequest.md
 docs/StartWorkflowRequest.md
 docs/StorageBreakdown.md
+docs/StorageEncryptionAdministrationApi.md
+docs/StorageEncryptionStatus.md
 docs/Suggest.md
 docs/SyncBackfillStatus.md
 docs/SyncChangesResponse.md
@@ -408,6 +413,7 @@ models/insights.ts
 models/instantiate-template-request.ts
 models/item-result.ts
 models/item.ts
+models/job-status.ts
 models/key-count.ts
 models/license-info.ts
 models/list-ai-models-request.ts
@@ -433,6 +439,7 @@ models/pdf-transform-audit.ts
 models/per-definition.ts
 models/public-signature-view.ts
 models/reassign-task-request.ts
+models/reencrypt-request.ts
 models/rename-audit.ts
 models/rename-request.ts
 models/reorganization-apply-request.ts
@@ -477,6 +484,7 @@ models/split-output.ts
 models/split-request.ts
 models/start-workflow-request.ts
 models/storage-breakdown.ts
+models/storage-encryption-status.ts
 models/suggest.ts
 models/sync-backfill-status.ts
 models/sync-changes-response.ts

package/.openapi-generator/openfilz-api-generate-typescript-sdk.sha256

@@ -1 +1 @@
-c9f45289588f38a21ebda595b05e52475deedab330696fc785210b01d60d67f0
+74e4f35c94ee72e15821816d856c91ca99619adb606fbbdab2d992bf9d086915

package/README.md

@@ -1,4 +1,4 @@
-## @openfilz-sdk/typescript-ee@1.10.5
+## @openfilz-sdk/typescript-ee@1.11.0
 
 This generator creates TypeScript/JavaScript client that utilizes [axios](https://github.com/axios/axios). The generated Node module can be used in the following environments:
 
@@ -36,7 +36,7 @@ navigate to the folder of your consuming project and run one of the following co
 _published:_
 
 ```
-npm install @openfilz-sdk/typescript-ee@1.10.5 --save
+npm install @openfilz-sdk/typescript-ee@1.11.0 --save
 ```
 
 _unPublished (not recommended):_
@@ -248,6 +248,11 @@ Class | Method | HTTP request | Description
 *SmartFilingApi* | [**lastFiling**](docs/SmartFilingApi.md#lastfiling) | **GET** /api/v1/ai/auto-file/document/{documentId} | The latest filing record of a document (the \"Filed by OpenFilz\" chip)
 *SmartFilingApi* | [**undo**](docs/SmartFilingApi.md#undo) | **POST** /api/v1/ai/auto-file/{jobId}/undo | Move every document the job filed back where it came from
 *SmartFilingApi* | [**undoFiling**](docs/SmartFilingApi.md#undofiling) | **POST** /api/v1/ai/auto-file/filing/{planId}/undo | Move one filed document back (the chip\'s \"Move back\")
+*StorageEncryptionAdministrationApi* | [**attest**](docs/StorageEncryptionAdministrationApi.md#attest) | **POST** /api/v1/admin/storage/encryption/attest | Prove the customer\'s KEK is usable right now
+*StorageEncryptionAdministrationApi* | [**reencrypt**](docs/StorageEncryptionAdministrationApi.md#reencrypt) | **POST** /api/v1/admin/storage/encryption/reencrypt | Run the re-encryption pass in the background
+*StorageEncryptionAdministrationApi* | [**rewrap**](docs/StorageEncryptionAdministrationApi.md#rewrap) | **POST** /api/v1/admin/storage/encryption/rewrap | Re-wrap every master key under the provider\'s current KEK
+*StorageEncryptionAdministrationApi* | [**rotateMasterKey**](docs/StorageEncryptionAdministrationApi.md#rotatemasterkey) | **POST** /api/v1/admin/storage/encryption/rotate-master-key | Create a new active master key
+*StorageEncryptionAdministrationApi* | [**status1**](docs/StorageEncryptionAdministrationApi.md#status1) | **GET** /api/v1/admin/storage/encryption/status | Configuration, master key ring state and re-encryption pass progress
 *TusControllerApi* | [**_options**](docs/TusControllerApi.md#_options) | **OPTIONS** /api/v1/tus | TUS capability discovery
 *TusControllerApi* | [**cancelUpload**](docs/TusControllerApi.md#cancelupload) | **DELETE** /api/v1/tus/{uploadId} | Cancel upload
 *TusControllerApi* | [**createUpload**](docs/TusControllerApi.md#createupload) | **POST** /api/v1/tus | Create new TUS upload
@@ -274,13 +279,14 @@ Class | Method | HTTP request | Description
 *WorkflowsApi* | [**deleteDefinition**](docs/WorkflowsApi.md#deletedefinition) | **DELETE** /api/v1/workflows/definitions/{id} | Delete a workflow definition (409 while instances are running)
 *WorkflowsApi* | [**getDefinition**](docs/WorkflowsApi.md#getdefinition) | **GET** /api/v1/workflows/definitions/{id} | Get a workflow definition
 *WorkflowsApi* | [**getInstance**](docs/WorkflowsApi.md#getinstance) | **GET** /api/v1/workflows/instances/{id} | One instance with its snapshot spec, open task and history
-*WorkflowsApi* | [**listDefinitions**](docs/WorkflowsApi.md#listdefinitions) | **GET** /api/v1/workflows/definitions | List workflow definitions
+*WorkflowsApi* | [**listDefinitions**](docs/WorkflowsApi.md#listdefinitions) | **GET** /api/v1/workflows/definitions | List the workflow definitions the caller may see (mine = created by the caller)
 *WorkflowsApi* | [**listInstances**](docs/WorkflowsApi.md#listinstances) | **GET** /api/v1/workflows/instances | List instances (monitor), newest first
 *WorkflowsApi* | [**myTasks**](docs/WorkflowsApi.md#mytasks) | **GET** /api/v1/workflows/tasks/mine | Open tasks I can act on (by e-mail or role)
 *WorkflowsApi* | [**myTasksCount**](docs/WorkflowsApi.md#mytaskscount) | **GET** /api/v1/workflows/tasks/mine/count | Number of open tasks I can act on (sidebar badge)
 *WorkflowsApi* | [**reassign**](docs/WorkflowsApi.md#reassign) | **POST** /api/v1/workflows/tasks/{id}/reassign | Hand a task to other people (initiator or current candidate)
 *WorkflowsApi* | [**start**](docs/WorkflowsApi.md#start) | **POST** /api/v1/workflows/instances | Start a workflow on a document (409 when one is already running)
 *WorkflowsApi* | [**summary**](docs/WorkflowsApi.md#summary) | **GET** /api/v1/workflows/instances/summary | Counts for the monitor header
+*WorkflowsApi* | [**teamDefinitions**](docs/WorkflowsApi.md#teamdefinitions) | **GET** /api/v1/workflows/team-definitions | Workflow definitions authored by the caller\'s teammates
 *WorkflowsApi* | [**updateDefinition**](docs/WorkflowsApi.md#updatedefinition) | **PUT** /api/v1/workflows/definitions/{id} | Update a workflow definition (running instances keep their snapshot)
 *WorkflowsApi* | [**validateDefinition**](docs/WorkflowsApi.md#validatedefinition) | **POST** /api/v1/workflows/definitions/validate | Validate a definition without saving it
 
@@ -382,6 +388,7 @@ Class | Method | HTTP request | Description
  - [InstantiateTemplateRequest](docs/InstantiateTemplateRequest.md)
  - [Item](docs/Item.md)
  - [ItemResult](docs/ItemResult.md)
+ - [JobStatus](docs/JobStatus.md)
  - [KeyCount](docs/KeyCount.md)
  - [LicenseInfo](docs/LicenseInfo.md)
  - [ListAiModelsRequest](docs/ListAiModelsRequest.md)
@@ -407,6 +414,7 @@ Class | Method | HTTP request | Description
  - [PerDefinition](docs/PerDefinition.md)
  - [PublicSignatureView](docs/PublicSignatureView.md)
  - [ReassignTaskRequest](docs/ReassignTaskRequest.md)
+ - [ReencryptRequest](docs/ReencryptRequest.md)
  - [RenameAudit](docs/RenameAudit.md)
  - [RenameRequest](docs/RenameRequest.md)
  - [ReorganizationApplyRequest](docs/ReorganizationApplyRequest.md)
@@ -451,6 +459,7 @@ Class | Method | HTTP request | Description
  - [SplitRequest](docs/SplitRequest.md)
  - [StartWorkflowRequest](docs/StartWorkflowRequest.md)
  - [StorageBreakdown](docs/StorageBreakdown.md)
+ - [StorageEncryptionStatus](docs/StorageEncryptionStatus.md)
  - [Suggest](docs/Suggest.md)
  - [SyncBackfillStatus](docs/SyncBackfillStatus.md)
  - [SyncChangesResponse](docs/SyncChangesResponse.md)

package/api/storage-encryption-administration-api.ts

@@ -0,0 +1,391 @@
+/* tslint:disable */
+/* eslint-disable */
+/**
+ * openfilz-api
+ * API for Document Management System
+ *
+ * The version of the OpenAPI document: 1.0.0
+ * 
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+
+
+import type { Configuration } from '../configuration';
+import type { AxiosPromise, AxiosInstance, RawAxiosRequestConfig } from 'axios';
+import globalAxios from 'axios';
+// Some imports not used depending on template conditions
+// @ts-ignore
+import { DUMMY_BASE_URL, assertParamExists, setApiKeyToObject, setBasicAuthToObject, setBearerAuthToObject, setOAuthToObject, setSearchParams, serializeDataIfNeeded, toPathString, createRequestFunction, replaceWithSerializableTypeIfNeeded } from '../common';
+// @ts-ignore
+import { BASE_PATH, COLLECTION_FORMATS, type RequestArgs, BaseAPI, RequiredError, operationServerMap } from '../base';
+// @ts-ignore
+import type { ReencryptRequest } from '../models';
+// @ts-ignore
+import type { StorageEncryptionStatus } from '../models';
+/**
+ * StorageEncryptionAdministrationApi - axios parameter creator
+ */
+export const StorageEncryptionAdministrationApiAxiosParamCreator = function (configuration?: Configuration) {
+    return {
+        /**
+         * One unwrap through the provider. Unlocks a locked ring when it succeeds; locks it when the provider refuses.
+         * @summary Prove the customer\'s KEK is usable right now
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        attest: async (options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            const localVarPath = `/api/v1/admin/storage/encryption/attest`;
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'POST', ...baseOptions, ...options};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication keycloak_auth required
+            // http bearer authentication required
+            await setBearerAuthToObject(localVarHeaderParameter, configuration)
+
+            localVarHeaderParameter['Accept'] = '*/*';
+
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
+
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         * 202 with the status once started; 409 while a pass is in progress (or nothing to resume).
+         * @summary Run the re-encryption pass in the background
+         * @param {ReencryptRequest} reencryptRequest 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        reencrypt: async (reencryptRequest: ReencryptRequest, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            // verify required parameter 'reencryptRequest' is not null or undefined
+            assertParamExists('reencrypt', 'reencryptRequest', reencryptRequest)
+            const localVarPath = `/api/v1/admin/storage/encryption/reencrypt`;
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'POST', ...baseOptions, ...options};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication keycloak_auth required
+            // http bearer authentication required
+            await setBearerAuthToObject(localVarHeaderParameter, configuration)
+
+            localVarHeaderParameter['Content-Type'] = 'application/json';
+            localVarHeaderParameter['Accept'] = '*/*';
+
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
+            localVarRequestOptions.data = serializeDataIfNeeded(reencryptRequest, localVarRequestOptions, configuration)
+
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         * After the customer rotated the KEK in their KMS. One wrap per master key; no object is touched.
+         * @summary Re-wrap every master key under the provider\'s current KEK
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        rewrap: async (options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            const localVarPath = `/api/v1/admin/storage/encryption/rewrap`;
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'POST', ...baseOptions, ...options};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication keycloak_auth required
+            // http bearer authentication required
+            await setBearerAuthToObject(localVarHeaderParameter, configuration)
+
+            localVarHeaderParameter['Accept'] = '*/*';
+
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
+
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         * New objects are wrapped with it; every older key stays readable. No object is rewritten.
+         * @summary Create a new active master key
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        rotateMasterKey: async (options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            const localVarPath = `/api/v1/admin/storage/encryption/rotate-master-key`;
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'POST', ...baseOptions, ...options};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication keycloak_auth required
+            // http bearer authentication required
+            await setBearerAuthToObject(localVarHeaderParameter, configuration)
+
+            localVarHeaderParameter['Accept'] = '*/*';
+
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
+
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         * 
+         * @summary Configuration, master key ring state and re-encryption pass progress
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        status1: async (options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            const localVarPath = `/api/v1/admin/storage/encryption/status`;
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'GET', ...baseOptions, ...options};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication keycloak_auth required
+            // http bearer authentication required
+            await setBearerAuthToObject(localVarHeaderParameter, configuration)
+
+            localVarHeaderParameter['Accept'] = '*/*';
+
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
+
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+    }
+};
+
+/**
+ * StorageEncryptionAdministrationApi - functional programming interface
+ */
+export const StorageEncryptionAdministrationApiFp = function(configuration?: Configuration) {
+    const localVarAxiosParamCreator = StorageEncryptionAdministrationApiAxiosParamCreator(configuration)
+    return {
+        /**
+         * One unwrap through the provider. Unlocks a locked ring when it succeeds; locks it when the provider refuses.
+         * @summary Prove the customer\'s KEK is usable right now
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async attest(options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<{ [key: string]: any; }>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.attest(options);
+            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+            const localVarOperationServerBasePath = operationServerMap['StorageEncryptionAdministrationApi.attest']?.[localVarOperationServerIndex]?.url;
+            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
+        /**
+         * 202 with the status once started; 409 while a pass is in progress (or nothing to resume).
+         * @summary Run the re-encryption pass in the background
+         * @param {ReencryptRequest} reencryptRequest 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async reencrypt(reencryptRequest: ReencryptRequest, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<StorageEncryptionStatus>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.reencrypt(reencryptRequest, options);
+            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+            const localVarOperationServerBasePath = operationServerMap['StorageEncryptionAdministrationApi.reencrypt']?.[localVarOperationServerIndex]?.url;
+            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
+        /**
+         * After the customer rotated the KEK in their KMS. One wrap per master key; no object is touched.
+         * @summary Re-wrap every master key under the provider\'s current KEK
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async rewrap(options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<{ [key: string]: number; }>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.rewrap(options);
+            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+            const localVarOperationServerBasePath = operationServerMap['StorageEncryptionAdministrationApi.rewrap']?.[localVarOperationServerIndex]?.url;
+            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
+        /**
+         * New objects are wrapped with it; every older key stays readable. No object is rewritten.
+         * @summary Create a new active master key
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async rotateMasterKey(options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<{ [key: string]: string; }>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.rotateMasterKey(options);
+            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+            const localVarOperationServerBasePath = operationServerMap['StorageEncryptionAdministrationApi.rotateMasterKey']?.[localVarOperationServerIndex]?.url;
+            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
+        /**
+         * 
+         * @summary Configuration, master key ring state and re-encryption pass progress
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async status1(options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<StorageEncryptionStatus>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.status1(options);
+            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+            const localVarOperationServerBasePath = operationServerMap['StorageEncryptionAdministrationApi.status1']?.[localVarOperationServerIndex]?.url;
+            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
+    }
+};
+
+/**
+ * StorageEncryptionAdministrationApi - factory interface
+ */
+export const StorageEncryptionAdministrationApiFactory = function (configuration?: Configuration, basePath?: string, axios?: AxiosInstance) {
+    const localVarFp = StorageEncryptionAdministrationApiFp(configuration)
+    return {
+        /**
+         * One unwrap through the provider. Unlocks a locked ring when it succeeds; locks it when the provider refuses.
+         * @summary Prove the customer\'s KEK is usable right now
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        attest(options?: RawAxiosRequestConfig): AxiosPromise<{ [key: string]: any; }> {
+            return localVarFp.attest(options).then((request) => request(axios, basePath));
+        },
+        /**
+         * 202 with the status once started; 409 while a pass is in progress (or nothing to resume).
+         * @summary Run the re-encryption pass in the background
+         * @param {ReencryptRequest} reencryptRequest 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        reencrypt(reencryptRequest: ReencryptRequest, options?: RawAxiosRequestConfig): AxiosPromise<StorageEncryptionStatus> {
+            return localVarFp.reencrypt(reencryptRequest, options).then((request) => request(axios, basePath));
+        },
+        /**
+         * After the customer rotated the KEK in their KMS. One wrap per master key; no object is touched.
+         * @summary Re-wrap every master key under the provider\'s current KEK
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        rewrap(options?: RawAxiosRequestConfig): AxiosPromise<{ [key: string]: number; }> {
+            return localVarFp.rewrap(options).then((request) => request(axios, basePath));
+        },
+        /**
+         * New objects are wrapped with it; every older key stays readable. No object is rewritten.
+         * @summary Create a new active master key
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        rotateMasterKey(options?: RawAxiosRequestConfig): AxiosPromise<{ [key: string]: string; }> {
+            return localVarFp.rotateMasterKey(options).then((request) => request(axios, basePath));
+        },
+        /**
+         * 
+         * @summary Configuration, master key ring state and re-encryption pass progress
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        status1(options?: RawAxiosRequestConfig): AxiosPromise<StorageEncryptionStatus> {
+            return localVarFp.status1(options).then((request) => request(axios, basePath));
+        },
+    };
+};
+
+/**
+ * StorageEncryptionAdministrationApi - object-oriented interface
+ */
+export class StorageEncryptionAdministrationApi extends BaseAPI {
+    /**
+     * One unwrap through the provider. Unlocks a locked ring when it succeeds; locks it when the provider refuses.
+     * @summary Prove the customer\'s KEK is usable right now
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    public attest(options?: RawAxiosRequestConfig) {
+        return StorageEncryptionAdministrationApiFp(this.configuration).attest(options).then((request) => request(this.axios, this.basePath));
+    }
+
+    /**
+     * 202 with the status once started; 409 while a pass is in progress (or nothing to resume).
+     * @summary Run the re-encryption pass in the background
+     * @param {ReencryptRequest} reencryptRequest 
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    public reencrypt(reencryptRequest: ReencryptRequest, options?: RawAxiosRequestConfig) {
+        return StorageEncryptionAdministrationApiFp(this.configuration).reencrypt(reencryptRequest, options).then((request) => request(this.axios, this.basePath));
+    }
+
+    /**
+     * After the customer rotated the KEK in their KMS. One wrap per master key; no object is touched.
+     * @summary Re-wrap every master key under the provider\'s current KEK
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    public rewrap(options?: RawAxiosRequestConfig) {
+        return StorageEncryptionAdministrationApiFp(this.configuration).rewrap(options).then((request) => request(this.axios, this.basePath));
+    }
+
+    /**
+     * New objects are wrapped with it; every older key stays readable. No object is rewritten.
+     * @summary Create a new active master key
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    public rotateMasterKey(options?: RawAxiosRequestConfig) {
+        return StorageEncryptionAdministrationApiFp(this.configuration).rotateMasterKey(options).then((request) => request(this.axios, this.basePath));
+    }
+
+    /**
+     * 
+     * @summary Configuration, master key ring state and re-encryption pass progress
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    public status1(options?: RawAxiosRequestConfig) {
+        return StorageEncryptionAdministrationApiFp(this.configuration).status1(options).then((request) => request(this.axios, this.basePath));
+    }
+}
+