@openfilz-sdk/typescript-ee 1.3.5 → 1.4.1

package/dist/esm/api/delegated-browse-grants-end-user-api.js

@@ -0,0 +1,409 @@
+/* tslint:disable */
+/* eslint-disable */
+/**
+ * openfilz-api
+ * API for Document Management System
+ *
+ * The version of the OpenAPI document: 1.0.0
+ *
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+import globalAxios from 'axios';
+// Some imports not used depending on template conditions
+// @ts-ignore
+import { DUMMY_BASE_URL, assertParamExists, setBearerAuthToObject, setSearchParams, toPathString, createRequestFunction } from '../common';
+// @ts-ignore
+import { BASE_PATH, BaseAPI, operationServerMap } from '../base';
+/**
+ * DelegatedBrowseGrantsEndUserApi - axios parameter creator
+ */
+export const DelegatedBrowseGrantsEndUserApiAxiosParamCreator = function (configuration) {
+    return {
+        /**
+         * Flip PENDING → ACCEPTED. Admin may then browse my folders for the next 2 hours. Client MUST force a step-up (prompt=login) before calling this — a valid session alone is NOT enough security to approve cross-user browsing.
+         * @summary Approve a pending grant
+         * @param {string} id
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        accept: (id_1, ...args_1) => __awaiter(this, [id_1, ...args_1], void 0, function* (id, options = {}) {
+            // verify required parameter 'id' is not null or undefined
+            assertParamExists('accept', 'id', id);
+            const localVarPath = `/api/v1/users/me/delegated/grants/{id}/accept`
+                .replace(`{${"id"}}`, encodeURIComponent(String(id)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+            const localVarRequestOptions = Object.assign(Object.assign({ method: 'POST' }, baseOptions), options);
+            const localVarHeaderParameter = {};
+            const localVarQueryParameter = {};
+            // authentication keycloak_auth required
+            // http bearer authentication required
+            yield setBearerAuthToObject(localVarHeaderParameter, configuration);
+            localVarHeaderParameter['Accept'] = 'application/json';
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = Object.assign(Object.assign(Object.assign({}, localVarHeaderParameter), headersFromBaseOptions), options.headers);
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        }),
+        /**
+         *
+         * @summary Refuse a pending grant
+         * @param {string} id
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        decline: (id_1, ...args_1) => __awaiter(this, [id_1, ...args_1], void 0, function* (id, options = {}) {
+            // verify required parameter 'id' is not null or undefined
+            assertParamExists('decline', 'id', id);
+            const localVarPath = `/api/v1/users/me/delegated/grants/{id}/decline`
+                .replace(`{${"id"}}`, encodeURIComponent(String(id)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+            const localVarRequestOptions = Object.assign(Object.assign({ method: 'POST' }, baseOptions), options);
+            const localVarHeaderParameter = {};
+            const localVarQueryParameter = {};
+            // authentication keycloak_auth required
+            // http bearer authentication required
+            yield setBearerAuthToObject(localVarHeaderParameter, configuration);
+            localVarHeaderParameter['Accept'] = 'application/json';
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = Object.assign(Object.assign(Object.assign({}, localVarHeaderParameter), headersFromBaseOptions), options.headers);
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        }),
+        /**
+         * Grantor-only consent withdrawal. Requires status = CONSUMED. Deletes the linked webhook subscription via webhooks-api; the grant row stays CONSUMED with consumedSubscriptionId preserved as an audit pointer. 409 if the grant is not CONSUMED or has no linked subscription id.
+         * @summary Disable the webhook created from this grant
+         * @param {string} id
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        disableLinkedWebhook: (id_1, ...args_1) => __awaiter(this, [id_1, ...args_1], void 0, function* (id, options = {}) {
+            // verify required parameter 'id' is not null or undefined
+            assertParamExists('disableLinkedWebhook', 'id', id);
+            const localVarPath = `/api/v1/users/me/delegated/grants/{id}/disable-webhook`
+                .replace(`{${"id"}}`, encodeURIComponent(String(id)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+            const localVarRequestOptions = Object.assign(Object.assign({ method: 'POST' }, baseOptions), options);
+            const localVarHeaderParameter = {};
+            const localVarQueryParameter = {};
+            // authentication keycloak_auth required
+            // http bearer authentication required
+            yield setBearerAuthToObject(localVarHeaderParameter, configuration);
+            localVarHeaderParameter['Accept'] = 'application/json';
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = Object.assign(Object.assign(Object.assign({}, localVarHeaderParameter), headersFromBaseOptions), options.headers);
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        }),
+        /**
+         * Optionally filter by ?status=PENDING|ACCEPTED|...
+         * @summary List grants addressed to me
+         * @param {ListIncomingStatusEnum} [status]
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        listIncoming: (status_1, ...args_1) => __awaiter(this, [status_1, ...args_1], void 0, function* (status, options = {}) {
+            const localVarPath = `/api/v1/users/me/delegated/grants`;
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+            const localVarRequestOptions = Object.assign(Object.assign({ method: 'GET' }, baseOptions), options);
+            const localVarHeaderParameter = {};
+            const localVarQueryParameter = {};
+            // authentication keycloak_auth required
+            // http bearer authentication required
+            yield setBearerAuthToObject(localVarHeaderParameter, configuration);
+            if (status !== undefined) {
+                localVarQueryParameter['status'] = status;
+            }
+            localVarHeaderParameter['Accept'] = 'application/json';
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = Object.assign(Object.assign(Object.assign({}, localVarHeaderParameter), headersFromBaseOptions), options.headers);
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        }),
+        /**
+         * Flip ACCEPTED → REVOKED. Immediate — any in-flight admin browse becomes 410 on its next call.
+         * @summary Revoke an accepted grant
+         * @param {string} id
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        revoke: (id_1, ...args_1) => __awaiter(this, [id_1, ...args_1], void 0, function* (id, options = {}) {
+            // verify required parameter 'id' is not null or undefined
+            assertParamExists('revoke', 'id', id);
+            const localVarPath = `/api/v1/users/me/delegated/grants/{id}/revoke`
+                .replace(`{${"id"}}`, encodeURIComponent(String(id)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+            const localVarRequestOptions = Object.assign(Object.assign({ method: 'POST' }, baseOptions), options);
+            const localVarHeaderParameter = {};
+            const localVarQueryParameter = {};
+            // authentication keycloak_auth required
+            // http bearer authentication required
+            yield setBearerAuthToObject(localVarHeaderParameter, configuration);
+            localVarHeaderParameter['Accept'] = 'application/json';
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = Object.assign(Object.assign(Object.assign({}, localVarHeaderParameter), headersFromBaseOptions), options.headers);
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        }),
+    };
+};
+/**
+ * DelegatedBrowseGrantsEndUserApi - functional programming interface
+ */
+export const DelegatedBrowseGrantsEndUserApiFp = function (configuration) {
+    const localVarAxiosParamCreator = DelegatedBrowseGrantsEndUserApiAxiosParamCreator(configuration);
+    return {
+        /**
+         * Flip PENDING → ACCEPTED. Admin may then browse my folders for the next 2 hours. Client MUST force a step-up (prompt=login) before calling this — a valid session alone is NOT enough security to approve cross-user browsing.
+         * @summary Approve a pending grant
+         * @param {string} id
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        accept(id, options) {
+            return __awaiter(this, void 0, void 0, function* () {
+                var _a, _b, _c;
+                const localVarAxiosArgs = yield localVarAxiosParamCreator.accept(id, options);
+                const localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
+                const localVarOperationServerBasePath = (_c = (_b = operationServerMap['DelegatedBrowseGrantsEndUserApi.accept']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
+                return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+            });
+        },
+        /**
+         *
+         * @summary Refuse a pending grant
+         * @param {string} id
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        decline(id, options) {
+            return __awaiter(this, void 0, void 0, function* () {
+                var _a, _b, _c;
+                const localVarAxiosArgs = yield localVarAxiosParamCreator.decline(id, options);
+                const localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
+                const localVarOperationServerBasePath = (_c = (_b = operationServerMap['DelegatedBrowseGrantsEndUserApi.decline']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
+                return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+            });
+        },
+        /**
+         * Grantor-only consent withdrawal. Requires status = CONSUMED. Deletes the linked webhook subscription via webhooks-api; the grant row stays CONSUMED with consumedSubscriptionId preserved as an audit pointer. 409 if the grant is not CONSUMED or has no linked subscription id.
+         * @summary Disable the webhook created from this grant
+         * @param {string} id
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        disableLinkedWebhook(id, options) {
+            return __awaiter(this, void 0, void 0, function* () {
+                var _a, _b, _c;
+                const localVarAxiosArgs = yield localVarAxiosParamCreator.disableLinkedWebhook(id, options);
+                const localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
+                const localVarOperationServerBasePath = (_c = (_b = operationServerMap['DelegatedBrowseGrantsEndUserApi.disableLinkedWebhook']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
+                return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+            });
+        },
+        /**
+         * Optionally filter by ?status=PENDING|ACCEPTED|...
+         * @summary List grants addressed to me
+         * @param {ListIncomingStatusEnum} [status]
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        listIncoming(status, options) {
+            return __awaiter(this, void 0, void 0, function* () {
+                var _a, _b, _c;
+                const localVarAxiosArgs = yield localVarAxiosParamCreator.listIncoming(status, options);
+                const localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
+                const localVarOperationServerBasePath = (_c = (_b = operationServerMap['DelegatedBrowseGrantsEndUserApi.listIncoming']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
+                return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+            });
+        },
+        /**
+         * Flip ACCEPTED → REVOKED. Immediate — any in-flight admin browse becomes 410 on its next call.
+         * @summary Revoke an accepted grant
+         * @param {string} id
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        revoke(id, options) {
+            return __awaiter(this, void 0, void 0, function* () {
+                var _a, _b, _c;
+                const localVarAxiosArgs = yield localVarAxiosParamCreator.revoke(id, options);
+                const localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
+                const localVarOperationServerBasePath = (_c = (_b = operationServerMap['DelegatedBrowseGrantsEndUserApi.revoke']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
+                return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+            });
+        },
+    };
+};
+/**
+ * DelegatedBrowseGrantsEndUserApi - factory interface
+ */
+export const DelegatedBrowseGrantsEndUserApiFactory = function (configuration, basePath, axios) {
+    const localVarFp = DelegatedBrowseGrantsEndUserApiFp(configuration);
+    return {
+        /**
+         * Flip PENDING → ACCEPTED. Admin may then browse my folders for the next 2 hours. Client MUST force a step-up (prompt=login) before calling this — a valid session alone is NOT enough security to approve cross-user browsing.
+         * @summary Approve a pending grant
+         * @param {string} id
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        accept(id, options) {
+            return localVarFp.accept(id, options).then((request) => request(axios, basePath));
+        },
+        /**
+         *
+         * @summary Refuse a pending grant
+         * @param {string} id
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        decline(id, options) {
+            return localVarFp.decline(id, options).then((request) => request(axios, basePath));
+        },
+        /**
+         * Grantor-only consent withdrawal. Requires status = CONSUMED. Deletes the linked webhook subscription via webhooks-api; the grant row stays CONSUMED with consumedSubscriptionId preserved as an audit pointer. 409 if the grant is not CONSUMED or has no linked subscription id.
+         * @summary Disable the webhook created from this grant
+         * @param {string} id
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        disableLinkedWebhook(id, options) {
+            return localVarFp.disableLinkedWebhook(id, options).then((request) => request(axios, basePath));
+        },
+        /**
+         * Optionally filter by ?status=PENDING|ACCEPTED|...
+         * @summary List grants addressed to me
+         * @param {ListIncomingStatusEnum} [status]
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        listIncoming(status, options) {
+            return localVarFp.listIncoming(status, options).then((request) => request(axios, basePath));
+        },
+        /**
+         * Flip ACCEPTED → REVOKED. Immediate — any in-flight admin browse becomes 410 on its next call.
+         * @summary Revoke an accepted grant
+         * @param {string} id
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        revoke(id, options) {
+            return localVarFp.revoke(id, options).then((request) => request(axios, basePath));
+        },
+    };
+};
+/**
+ * DelegatedBrowseGrantsEndUserApi - object-oriented interface
+ */
+export class DelegatedBrowseGrantsEndUserApi extends BaseAPI {
+    /**
+     * Flip PENDING → ACCEPTED. Admin may then browse my folders for the next 2 hours. Client MUST force a step-up (prompt=login) before calling this — a valid session alone is NOT enough security to approve cross-user browsing.
+     * @summary Approve a pending grant
+     * @param {string} id
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    accept(id, options) {
+        return DelegatedBrowseGrantsEndUserApiFp(this.configuration).accept(id, options).then((request) => request(this.axios, this.basePath));
+    }
+    /**
+     *
+     * @summary Refuse a pending grant
+     * @param {string} id
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    decline(id, options) {
+        return DelegatedBrowseGrantsEndUserApiFp(this.configuration).decline(id, options).then((request) => request(this.axios, this.basePath));
+    }
+    /**
+     * Grantor-only consent withdrawal. Requires status = CONSUMED. Deletes the linked webhook subscription via webhooks-api; the grant row stays CONSUMED with consumedSubscriptionId preserved as an audit pointer. 409 if the grant is not CONSUMED or has no linked subscription id.
+     * @summary Disable the webhook created from this grant
+     * @param {string} id
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    disableLinkedWebhook(id, options) {
+        return DelegatedBrowseGrantsEndUserApiFp(this.configuration).disableLinkedWebhook(id, options).then((request) => request(this.axios, this.basePath));
+    }
+    /**
+     * Optionally filter by ?status=PENDING|ACCEPTED|...
+     * @summary List grants addressed to me
+     * @param {ListIncomingStatusEnum} [status]
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    listIncoming(status, options) {
+        return DelegatedBrowseGrantsEndUserApiFp(this.configuration).listIncoming(status, options).then((request) => request(this.axios, this.basePath));
+    }
+    /**
+     * Flip ACCEPTED → REVOKED. Immediate — any in-flight admin browse becomes 410 on its next call.
+     * @summary Revoke an accepted grant
+     * @param {string} id
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    revoke(id, options) {
+        return DelegatedBrowseGrantsEndUserApiFp(this.configuration).revoke(id, options).then((request) => request(this.axios, this.basePath));
+    }
+}
+export const ListIncomingStatusEnum = {
+    Pending: 'PENDING',
+    Accepted: 'ACCEPTED',
+    Declined: 'DECLINED',
+    Revoked: 'REVOKED',
+    Expired: 'EXPIRED',
+    Consumed: 'CONSUMED'
+};

package/dist/esm/api/upload-token-controller-api.d.ts

@@ -0,0 +1,105 @@
+/**
+ * openfilz-api
+ * API for Document Management System
+ *
+ * The version of the OpenAPI document: 1.0.0
+ *
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+import type { Configuration } from '../configuration';
+import type { AxiosPromise, AxiosInstance, RawAxiosRequestConfig } from 'axios';
+import { type RequestArgs, BaseAPI } from '../base';
+import type { MintUploadTokenRequest } from '../models';
+import type { UploadResponse } from '../models';
+import type { UploadTokenResponse } from '../models';
+/**
+ * UploadTokenControllerApi - axios parameter creator
+ */
+export declare const UploadTokenControllerApiAxiosParamCreator: (configuration?: Configuration) => {
+    /**
+     * Issues a one-shot HS256 JWT scoped to a single upload into a single folder. Caller must hold the UPLOAD_TOKEN_ISSUER realm role.
+     * @summary Mint a scoped upload token
+     * @param {MintUploadTokenRequest} mintUploadTokenRequest
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    mintUploadToken: (mintUploadTokenRequest: MintUploadTokenRequest, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
+    /**
+     * Anonymous-callable endpoint authenticated by the scoped JWT minted via POST /api/v1/upload-tokens. Forces the target folder to the one baked into the token. One-shot — replays return 401.
+     * @summary Upload a single document with a scoped upload token
+     * @param {File} file
+     * @param {string} [metadata]
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    uploadWithToken: (file: File, metadata?: string, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
+};
+/**
+ * UploadTokenControllerApi - functional programming interface
+ */
+export declare const UploadTokenControllerApiFp: (configuration?: Configuration) => {
+    /**
+     * Issues a one-shot HS256 JWT scoped to a single upload into a single folder. Caller must hold the UPLOAD_TOKEN_ISSUER realm role.
+     * @summary Mint a scoped upload token
+     * @param {MintUploadTokenRequest} mintUploadTokenRequest
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    mintUploadToken(mintUploadTokenRequest: MintUploadTokenRequest, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<UploadTokenResponse>>;
+    /**
+     * Anonymous-callable endpoint authenticated by the scoped JWT minted via POST /api/v1/upload-tokens. Forces the target folder to the one baked into the token. One-shot — replays return 401.
+     * @summary Upload a single document with a scoped upload token
+     * @param {File} file
+     * @param {string} [metadata]
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    uploadWithToken(file: File, metadata?: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<UploadResponse>>;
+};
+/**
+ * UploadTokenControllerApi - factory interface
+ */
+export declare const UploadTokenControllerApiFactory: (configuration?: Configuration, basePath?: string, axios?: AxiosInstance) => {
+    /**
+     * Issues a one-shot HS256 JWT scoped to a single upload into a single folder. Caller must hold the UPLOAD_TOKEN_ISSUER realm role.
+     * @summary Mint a scoped upload token
+     * @param {MintUploadTokenRequest} mintUploadTokenRequest
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    mintUploadToken(mintUploadTokenRequest: MintUploadTokenRequest, options?: RawAxiosRequestConfig): AxiosPromise<UploadTokenResponse>;
+    /**
+     * Anonymous-callable endpoint authenticated by the scoped JWT minted via POST /api/v1/upload-tokens. Forces the target folder to the one baked into the token. One-shot — replays return 401.
+     * @summary Upload a single document with a scoped upload token
+     * @param {File} file
+     * @param {string} [metadata]
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    uploadWithToken(file: File, metadata?: string, options?: RawAxiosRequestConfig): AxiosPromise<UploadResponse>;
+};
+/**
+ * UploadTokenControllerApi - object-oriented interface
+ */
+export declare class UploadTokenControllerApi extends BaseAPI {
+    /**
+     * Issues a one-shot HS256 JWT scoped to a single upload into a single folder. Caller must hold the UPLOAD_TOKEN_ISSUER realm role.
+     * @summary Mint a scoped upload token
+     * @param {MintUploadTokenRequest} mintUploadTokenRequest
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    mintUploadToken(mintUploadTokenRequest: MintUploadTokenRequest, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<UploadTokenResponse, any, {}>>;
+    /**
+     * Anonymous-callable endpoint authenticated by the scoped JWT minted via POST /api/v1/upload-tokens. Forces the target folder to the one baked into the token. One-shot — replays return 401.
+     * @summary Upload a single document with a scoped upload token
+     * @param {File} file
+     * @param {string} [metadata]
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    uploadWithToken(file: File, metadata?: string, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<UploadResponse, any, {}>>;
+}