@orq-ai/node 4.16.0-rc.20 → 4.16.0-rc.22

package/src/models/components/index.ts

@@ -33,6 +33,7 @@ export * from "./alertquery.js";
 export * from "./alertrun.js";
 export * from "./alerttrigger.js";
 export * from "./alerttriggerevent.js";
+export * from "./allprojects.js";
 export * from "./annotationqueue.js";
 export * from "./annotationqueueitem.js";
 export * from "./annotationqueueitemref.js";
@@ -40,8 +41,15 @@ export * from "./annotationqueuemetadata.js";
 export * from "./apierror.js";
 export * from "./apikeybudgetscope.js";
 export * from "./apikeybudgetscoperestresponse.js";
+export * from "./apikeyowner.js";
 export * from "./apikeyrestresponse.js";
+export * from "./apikeystatus.js";
 export * from "./audiocontentpartschema.js";
+export * from "./auditlog.js";
+export * from "./auditlogfilter.js";
+export * from "./auditlogfilterquery.js";
+export * from "./auditlogpagination.js";
+export * from "./auditlogsort.js";
 export * from "./autorouterconfig.js";
 export * from "./autorouterv2config.js";
 export * from "./autorouterv2creatorconfig.js";
@@ -62,7 +70,6 @@ export * from "./budgetscopekind.js";
 export * from "./budgetscoperestresponse.js";
 export * from "./budgetsortfield.js";
 export * from "./budgetusage.js";
-export * from "./bulkcreatedatapointsrequest.js";
 export * from "./cacheconfig.js";
 export * from "./callsubagenttoolinput.js";
 export * from "./capabilitiesresponse.js";
@@ -87,7 +94,6 @@ export * from "./classifyretryconfig.js";
 export * from "./classifyusage.js";
 export * from "./codeinterpretertoolinput.js";
 export * from "./codetoolinput.js";
-export * from "./constraints.js";
 export * from "./conversationparam.js";
 export * from "./countmetadata.js";
 export * from "./countwebhooksresponse.js";
@@ -95,13 +101,11 @@ export * from "./createagentresponse.js";
 export * from "./createalertrequest.js";
 export * from "./createalertresponse.js";
 export * from "./createannotationqueuerequest.js";
+export * from "./createapikeyrequest.js";
 export * from "./createbudgetrequest.js";
 export * from "./createbudgetresponse.js";
-export * from "./createdatasetrequest.js";
 export * from "./createdomainrequest.js";
 export * from "./createdomainresponse.js";
-export * from "./createenvironmentrequest.js";
-export * from "./createenvironmentresponse.js";
 export * from "./createfilerequest.js";
 export * from "./createfileresponse.js";
 export * from "./createfilesystemfolderrequest.js";
@@ -132,15 +136,9 @@ export * from "./createsmartrouterrequest.js";
 export * from "./createsmartrouterresponse.js";
 export * from "./createthreadrequest.js";
 export * from "./createwebhookrequest.js";
-export * from "./createwikirequest.js";
-export * from "./createwikiresponse.js";
 export * from "./currentdatetoolinput.js";
 export * from "./datapart.js";
 export * from "./datapoint.js";
-export * from "./datapoint1.js";
-export * from "./datapointinput.js";
-export * from "./dataset.js";
-export * from "./datasetmetadata.js";
 export * from "./datasource.js";
 export * from "./datasourceattachment.js";
 export * from "./datasourcechunkingoptions.js";
@@ -152,8 +150,6 @@ export * from "./datasourcesservicepreviewchunksresponse.js";
 export * from "./datasourcesserviceupdaterequest.js";
 export * from "./deletealertresponse.js";
 export * from "./deletebudgetresponse.js";
-export * from "./deletedatapointsrequest.js";
-export * from "./deleteenvironmentresponse.js";
 export * from "./deletefileresponse.js";
 export * from "./deletefilesystemfileresponse.js";
 export * from "./deletefilesystemresponse.js";
@@ -168,10 +164,10 @@ export * from "./deleteprojectresponse.js";
 export * from "./deleteskillresponse.js";
 export * from "./deletesmartrouterresponse.js";
 export * from "./deletewebhookresponse.js";
-export * from "./deletewikiresponse.js";
 export * from "./detectrequest.js";
 export * from "./detectresponse.js";
 export * from "./domain.js";
+export * from "./domaingroup.js";
 export * from "./domainverification.js";
 export * from "./domainverificationstatus.js";
 export * from "./embeddingcacheconfig.js";
@@ -185,7 +181,6 @@ export * from "./embeddingsconfig.js";
 export * from "./embeddingsmodelparameters.js";
 export * from "./embeddingtimeoutconfig.js";
 export * from "./entitylist.js";
-export * from "./environment.js";
 export * from "./errorpart.js";
 export * from "./errorstreamingevent.js";
 export * from "./evaluationcontext.js";
@@ -224,7 +219,6 @@ export * from "./generatewebhooksecretresponse.js";
 export * from "./getagentresponse.js";
 export * from "./getalertresponse.js";
 export * from "./getbudgetresponse.js";
-export * from "./getenvironmentresponse.js";
 export * from "./getfilecontentresponse.js";
 export * from "./getfileresponse.js";
 export * from "./getguardrailruleresponse.js";
@@ -246,9 +240,6 @@ export * from "./getthreadcountresponse.js";
 export * from "./gettraceresponse.js";
 export * from "./gettracespanresponse.js";
 export * from "./getuploadfileurlresponse.js";
-export * from "./getwikipageresponse.js";
-export * from "./getwikiresponse.js";
-export * from "./getwikitreeresponse.js";
 export * from "./getworkspaceresponse.js";
 export * from "./getworkspacesettingsresponse.js";
 export * from "./googlesearchtoolinput.js";
@@ -268,8 +259,6 @@ export * from "./identitysortfield.js";
 export * from "./imagecontentpartschema.js";
 export * from "./incompletedetails.js";
 export * from "./inputtokensdetails.js";
-export * from "./inspectrepositorywikirequest.js";
-export * from "./inspectrepositorywikiresponse.js";
 export * from "./internalretrievalconfig.js";
 export * from "./invokedeploymentrequest.js";
 export * from "./invokeevaluatorrequest.js";
@@ -291,10 +280,8 @@ export * from "./listalerttriggersresponse.js";
 export * from "./listannotationqueueitemsresponse.js";
 export * from "./listannotationqueuesresponse.js";
 export * from "./listbudgetsresponse.js";
-export * from "./listdatapointsresponse.js";
-export * from "./listdatasetsresponse.js";
+export * from "./listcapabilitiesresponse.js";
 export * from "./listdomainsresponse.js";
-export * from "./listenvironmentsresponse.js";
 export * from "./listevaluatorversionsresponse.js";
 export * from "./listfilesresponse.js";
 export * from "./listfilesystemfilesresponse.js";
@@ -322,9 +309,6 @@ export * from "./listroutingrulesresponse.js";
 export * from "./listroutingruleusedmodelsresponse.js";
 export * from "./listskillsresponse.js";
 export * from "./listsmartroutersresponse.js";
-export * from "./listtelemetrycapabilitiesresponse.js";
-export * from "./listtelemetryfacetvaluesrequest.js";
-export * from "./listtelemetryfacetvaluesresponse.js";
 export * from "./listthreadsrequest.js";
 export * from "./listthreadsresponse.js";
 export * from "./listtracefacetsresponse.js";
@@ -333,8 +317,6 @@ export * from "./listtracefieldsresponse.js";
 export * from "./listtracelogsresponse.js";
 export * from "./listtracespansresponse.js";
 export * from "./listwebhooksresponse.js";
-export * from "./listwikirunsresponse.js";
-export * from "./listwikisresponse.js";
 export * from "./listworkspacesresponse.js";
 export * from "./litellmmodel.js";
 export * from "./litellmmodelinfo.js";
@@ -348,6 +330,7 @@ export * from "./managementdomaingroup.js";
 export * from "./managementkey.js";
 export * from "./managementkeystatus.js";
 export * from "./managementpermissionmode.js";
+export * from "./mcpaccess.js";
 export * from "./mcpauthconfig.js";
 export * from "./mcpauthconfigoutput.js";
 export * from "./mcpauthtype.js";
@@ -398,11 +381,12 @@ export * from "./openaipromptcacheoptions.js";
 export * from "./orqadvisortool.js";
 export * from "./orqsidekicktool.js";
 export * from "./outputtokensdetails.js";
-export * from "./owner.js";
+export * from "./ownertype.js";
 export * from "./parseresponse.js";
 export * from "./partdelta.js";
 export * from "./partdeltaevent.js";
 export * from "./partdoneevent.js";
+export * from "./permissionmode.js";
 export * from "./piiredaction.js";
 export * from "./piiredactionconfig.js";
 export * from "./piiredactionplugin.js";
@@ -421,7 +405,6 @@ export * from "./projectbudgetscoperestresponse.js";
 export * from "./projectscope.js";
 export * from "./providerbudgetscope.js";
 export * from "./providertoolinput.js";
-export * from "./publiccompactionitem.js";
 export * from "./publiccontact.js";
 export * from "./publicembeddingdata.js";
 export * from "./publicembeddingusage.js";
@@ -433,6 +416,8 @@ export * from "./publicschedule.js";
 export * from "./publicscheduleerrordetail.js";
 export * from "./publicschedulepayload.js";
 export * from "./publicusage.js";
+export * from "./queryauditlogsrequest.js";
+export * from "./queryauditlogsresponse.js";
 export * from "./queryknowledgebasetoolinput.js";
 export * from "./querylogsrequest.js";
 export * from "./querylogsresponse.js";
@@ -441,9 +426,6 @@ export * from "./queryparamspagination.js";
 export * from "./queryparamssort.js";
 export * from "./queryreportrequest.js";
 export * from "./queryreportresponse.js";
-export * from "./querytelemetrymeta.js";
-export * from "./querytelemetryrequest.js";
-export * from "./querytelemetryresponse.js";
 export * from "./querytracesrequest.js";
 export * from "./querytracesresponse.js";
 export * from "./querywebhooksrequest.js";
@@ -457,8 +439,6 @@ export * from "./reasoningpartschema.js";
 export * from "./redactedreasoningpartschema.js";
 export * from "./redactrequest.js";
 export * from "./redactresponse.js";
-export * from "./refreshwikirequest.js";
-export * from "./refreshwikiresponse.js";
 export * from "./refusalpartschema.js";
 export * from "./removeannotationqueueitemsrequest.js";
 export * from "./requestlimit.js";
@@ -543,6 +523,7 @@ export * from "./routingruleexpression.js";
 export * from "./routingrulemodel.js";
 export * from "./routingrulemodelsconfig.js";
 export * from "./routingruleplugin.js";
+export * from "./scopemode.js";
 export * from "./searchhubitemsresponse.js";
 export * from "./searchknowledgematch.js";
 export * from "./searchknowledgerequest.js";
@@ -556,15 +537,16 @@ export * from "./searchretrievalconfig.js";
 export * from "./searchtracesrequest.js";
 export * from "./searchtracesresponse.js";
 export * from "./searchtype.js";
-export * from "./searchwikiresponse.js";
 export * from "./security.js";
 export * from "./securityconfig.js";
 export * from "./servertoolusedetails.js";
+export * from "./serviceaccountowner.js";
 export * from "./sessioninterval.js";
 export * from "./sharing.js";
 export * from "./sharingallprojects.js";
 export * from "./sharingselectedprojects.js";
 export * from "./sidekicktoolinput.js";
+export * from "./singleproject.js";
 export * from "./skill.js";
 export * from "./smartrouter.js";
 export * from "./smartrouterprofile.js";
@@ -575,19 +557,12 @@ export * from "./streamoptions.js";
 export * from "./structuredinput.js";
 export * from "./structuredoutput.js";
 export * from "./structuredtoolcall.js";
+export * from "./submitfeedbackrequest.js";
+export * from "./submitfeedbackresponse.js";
 export * from "./syncmcpserverrequest.js";
 export * from "./syncmcpserverresponse.js";
 export * from "./syncstatus.js";
 export * from "./telemetry.js";
-export * from "./telemetrydimensioncapability.js";
-export * from "./telemetrydimensionsetcapability.js";
-export * from "./telemetrymetriccapability.js";
-export * from "./telemetryquerymode.js";
-export * from "./telemetryresultkind.js";
-export * from "./telemetryrow.js";
-export * from "./telemetrysource.js";
-export * from "./telemetrysourcecapability.js";
-export * from "./telemetryvaluecardinality.js";
 export * from "./testmcpservertoolrequest.js";
 export * from "./testmcpservertoolresponse.js";
 export * from "./textcontentpartschema.js";
@@ -631,12 +606,9 @@ export * from "./traceusage.js";
 export * from "./updatealertrequest.js";
 export * from "./updatealertresponse.js";
 export * from "./updateannotationqueuerequest.js";
+export * from "./updateapikeyrequest.js";
 export * from "./updatebudgetrequest.js";
 export * from "./updatebudgetresponse.js";
-export * from "./updatedatapointrequest.js";
-export * from "./updatedatasetrequest.js";
-export * from "./updateenvironmentrequest.js";
-export * from "./updateenvironmentresponse.js";
 export * from "./updatefilerequest.js";
 export * from "./updatefileresponse.js";
 export * from "./updatefilesystemrequest.js";
@@ -666,16 +638,14 @@ export * from "./updateskillresponse.js";
 export * from "./updatesmartrouterrequest.js";
 export * from "./updatesmartrouterresponse.js";
 export * from "./updatethreadrequest.js";
-export * from "./updatewikipagerequest.js";
-export * from "./updatewikipageresponse.js";
-export * from "./updatewikirequest.js";
-export * from "./updatewikiresponse.js";
 export * from "./updateworkspacerequest.js";
 export * from "./updateworkspaceresponse.js";
 export * from "./updateworkspacesettingsrequest.js";
 export * from "./updateworkspacesettingsresponse.js";
 export * from "./uploadpostpolicy.js";
 export * from "./upsertchunk.js";
+export * from "./userowner.js";
+export * from "./value.js";
 export * from "./verifydomainresponse.js";
 export * from "./vertexcapabilities.js";
 export * from "./vertexconfiguration.js";
@@ -685,14 +655,6 @@ export * from "./vertexparamrange.js";
 export * from "./vertexparamrangeint.js";
 export * from "./webhook.js";
 export * from "./webscrapertoolinput.js";
-export * from "./wiki.js";
-export * from "./wikipage.js";
-export * from "./wikirepository.js";
-export * from "./wikirun.js";
-export * from "./wikirunstats.js";
-export * from "./wikisearchhit.js";
-export * from "./wikisettings.js";
-export * from "./wikitreepage.js";
 export * from "./workspace.js";
 export * from "./workspacebudgetscope.js";
 export * from "./workspacecapabilities.js";

package/src/models/components/invokedeploymentrequest.ts

@@ -178,20 +178,6 @@ export type PrefixMessagesFunction = {
   arguments?: string | undefined;
 };
 
-export type Google = {
-  /**
-   * Encrypted representation of the model internal reasoning state during function calling. Required by Gemini 3 models when continuing a conversation after a tool call. Takes precedence over the top-level `thought_signature` when both are set.
-   */
-  thoughtSignature?: string | undefined;
-};
-
-/**
- * Provider-specific extra content for the tool call.
- */
-export type ExtraContent = {
-  google?: Google | undefined;
-};
-
 export type ToolCalls = {
   /**
    * The ID of the tool call.
@@ -206,10 +192,6 @@ export type ToolCalls = {
    * Encrypted representation of the model internal reasoning state during function calling. Required by Gemini 3 models when continuing a conversation after a tool call.
    */
   thoughtSignature?: string | undefined;
-  /**
-   * Provider-specific extra content for the tool call.
-   */
-  extraContent?: ExtraContent | undefined;
 };
 
 export type AssistantMessage = {
@@ -543,20 +525,6 @@ export type MessagesFunction = {
   arguments?: string | undefined;
 };
 
-export type MessagesGoogle = {
-  /**
-   * Encrypted representation of the model internal reasoning state during function calling. Required by Gemini 3 models when continuing a conversation after a tool call. Takes precedence over the top-level `thought_signature` when both are set.
-   */
-  thoughtSignature?: string | undefined;
-};
-
-/**
- * Provider-specific extra content for the tool call.
- */
-export type MessagesExtraContent = {
-  google?: MessagesGoogle | undefined;
-};
-
 export type MessagesToolCalls = {
   /**
    * The ID of the tool call.
@@ -571,10 +539,6 @@ export type MessagesToolCalls = {
    * Encrypted representation of the model internal reasoning state during function calling. Required by Gemini 3 models when continuing a conversation after a tool call.
    */
   thoughtSignature?: string | undefined;
-  /**
-   * Provider-specific extra content for the tool call.
-   */
-  extraContent?: MessagesExtraContent | undefined;
 };
 
 export type MessagesAssistantMessage = {
@@ -1414,53 +1378,12 @@ export function prefixMessagesFunctionToJSON(
   );
 }
 
-/** @internal */
-export type Google$Outbound = {
-  thought_signature?: string | undefined;
-};
-
-/** @internal */
-export const Google$outboundSchema: z.ZodType<
-  Google$Outbound,
-  z.ZodTypeDef,
-  Google
-> = z.object({
-  thoughtSignature: z.string().optional(),
-}).transform((v) => {
-  return remap$(v, {
-    thoughtSignature: "thought_signature",
-  });
-});
-
-export function googleToJSON(google: Google): string {
-  return JSON.stringify(Google$outboundSchema.parse(google));
-}
-
-/** @internal */
-export type ExtraContent$Outbound = {
-  google?: Google$Outbound | undefined;
-};
-
-/** @internal */
-export const ExtraContent$outboundSchema: z.ZodType<
-  ExtraContent$Outbound,
-  z.ZodTypeDef,
-  ExtraContent
-> = z.object({
-  google: z.lazy(() => Google$outboundSchema).optional(),
-});
-
-export function extraContentToJSON(extraContent: ExtraContent): string {
-  return JSON.stringify(ExtraContent$outboundSchema.parse(extraContent));
-}
-
 /** @internal */
 export type ToolCalls$Outbound = {
   id: string;
   type: string;
   function: PrefixMessagesFunction$Outbound;
   thought_signature?: string | undefined;
-  extra_content?: ExtraContent$Outbound | undefined;
 };
 
 /** @internal */
@@ -1473,11 +1396,9 @@ export const ToolCalls$outboundSchema: z.ZodType<
   type: PrefixMessagesType$outboundSchema,
   function: z.lazy(() => PrefixMessagesFunction$outboundSchema),
   thoughtSignature: z.string().optional(),
-  extraContent: z.lazy(() => ExtraContent$outboundSchema).optional(),
 }).transform((v) => {
   return remap$(v, {
     thoughtSignature: "thought_signature",
-    extraContent: "extra_content",
   });
 });
 
@@ -2060,57 +1981,12 @@ export function messagesFunctionToJSON(
   );
 }
 
-/** @internal */
-export type MessagesGoogle$Outbound = {
-  thought_signature?: string | undefined;
-};
-
-/** @internal */
-export const MessagesGoogle$outboundSchema: z.ZodType<
-  MessagesGoogle$Outbound,
-  z.ZodTypeDef,
-  MessagesGoogle
-> = z.object({
-  thoughtSignature: z.string().optional(),
-}).transform((v) => {
-  return remap$(v, {
-    thoughtSignature: "thought_signature",
-  });
-});
-
-export function messagesGoogleToJSON(messagesGoogle: MessagesGoogle): string {
-  return JSON.stringify(MessagesGoogle$outboundSchema.parse(messagesGoogle));
-}
-
-/** @internal */
-export type MessagesExtraContent$Outbound = {
-  google?: MessagesGoogle$Outbound | undefined;
-};
-
-/** @internal */
-export const MessagesExtraContent$outboundSchema: z.ZodType<
-  MessagesExtraContent$Outbound,
-  z.ZodTypeDef,
-  MessagesExtraContent
-> = z.object({
-  google: z.lazy(() => MessagesGoogle$outboundSchema).optional(),
-});
-
-export function messagesExtraContentToJSON(
-  messagesExtraContent: MessagesExtraContent,
-): string {
-  return JSON.stringify(
-    MessagesExtraContent$outboundSchema.parse(messagesExtraContent),
-  );
-}
-
 /** @internal */
 export type MessagesToolCalls$Outbound = {
   id: string;
   type: string;
   function: MessagesFunction$Outbound;
   thought_signature?: string | undefined;
-  extra_content?: MessagesExtraContent$Outbound | undefined;
 };
 
 /** @internal */
@@ -2123,11 +1999,9 @@ export const MessagesToolCalls$outboundSchema: z.ZodType<
   type: MessagesType$outboundSchema,
   function: z.lazy(() => MessagesFunction$outboundSchema),
   thoughtSignature: z.string().optional(),
-  extraContent: z.lazy(() => MessagesExtraContent$outboundSchema).optional(),
 }).transform((v) => {
   return remap$(v, {
     thoughtSignature: "thought_signature",
-    extraContent: "extra_content",
   });
 });
 

package/src/models/components/knowledge.ts

@@ -127,7 +127,7 @@ export type Knowledge2 = {
   retrievalSettings?: KnowledgeRetrievalSettings | undefined;
   externalConfig: ExternalConfig;
   /**
-   * Settings for the knowledge base: embedding model, retrieval configuration, and agentic RAG configuration.
+   * Additive compatibility fields formerly available only from private internal endpoints.
    */
   settings?: KnowledgeSettings | undefined;
   metadata?: KnowledgeMetadata | undefined;
@@ -252,7 +252,7 @@ export type Knowledge1 = {
    */
   model: string;
   /**
-   * Settings for the knowledge base: embedding model, retrieval configuration, and agentic RAG configuration.
+   * Additive compatibility fields formerly available only from private internal endpoints.
    */
   settings?: KnowledgeSettings | undefined;
   metadata?: KnowledgeMetadata | undefined;

package/src/models/components/knowledgechunk.ts

@@ -53,7 +53,7 @@ export type KnowledgeChunk = {
    */
   updateById?: string | null | undefined;
   /**
-   * Processing attempts recorded for the chunk.
+   * Additive compatibility fields from the database document.
    */
   processingAttempts?: Array<ProcessingAttempt> | undefined;
   countMetadata?: CountMetadata | undefined;

package/src/models/components/listcapabilitiesresponse.ts

@@ -0,0 +1,38 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import * as z from "zod/v3";
+import { safeParse } from "../../lib/schemas.js";
+import { Result as SafeParseResult } from "../../types/fp.js";
+import { SDKValidationError } from "../errors/sdkvalidationerror.js";
+import { Domain, Domain$inboundSchema } from "./domain.js";
+
+export type ListCapabilitiesResponse = {
+  /**
+   * Full capability catalog. Order is stable: workspace-admin first,
+   *
+   * @remarks
+   *  then platform, then gateway.
+   */
+  domains: Array<Domain>;
+};
+
+/** @internal */
+export const ListCapabilitiesResponse$inboundSchema: z.ZodType<
+  ListCapabilitiesResponse,
+  z.ZodTypeDef,
+  unknown
+> = z.object({
+  domains: z.array(Domain$inboundSchema),
+});
+
+export function listCapabilitiesResponseFromJSON(
+  jsonString: string,
+): SafeParseResult<ListCapabilitiesResponse, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => ListCapabilitiesResponse$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'ListCapabilitiesResponse' from JSON`,
+  );
+}

package/src/models/components/mcpaccess.ts

@@ -0,0 +1,93 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import * as z from "zod/v3";
+import { remap as remap$ } from "../../lib/primitives.js";
+
+/**
+ * McpAccess optionally restricts which MCP gateways an API key may
+ *
+ * @remarks
+ *  reach at the data plane. It is orthogonal to permission_mode /
+ *  access: the key must still hold the `mcp_gateway.execute` verb and
+ *  project membership; McpAccess only narrows the reachable gateway set
+ *  within that grant. Human sessions and keys without an McpAccess are
+ *  unaffected.
+ *
+ *  Semantics:
+ *    - absent, or deny_all=false with an empty allowed_mcp_gateway_ids:
+ *      no restriction — every gateway in the key's project scope is
+ *      reachable.
+ *    - deny_all=true: zero gateways are reachable. Wins over
+ *      allowed_mcp_gateway_ids.
+ *    - non-empty allowed_mcp_gateway_ids: only the listed gateway ids
+ *      are reachable. Each id must look like `mcp_gateway_<ULID>`.
+ */
+export type McpAccess = {
+  /**
+   * When true, the key is denied every MCP gateway regardless of
+   *
+   * @remarks
+   *  allowed_mcp_gateway_ids.
+   */
+  denyAll?: boolean | undefined;
+  /**
+   * Allow-list of MCP gateway ids (`mcp_gateway_<ULID>`) the key may
+   *
+   * @remarks
+   *  reach. Ignored when deny_all is true. Empty (with deny_all=false)
+   *  means no restriction.
+   */
+  allowedMcpGatewayIds?: Array<string> | undefined;
+  /**
+   * Allow-list of MCP toolset ids (`mcp_toolset_<ULID>`) the key is
+   *
+   * @remarks
+   *  bound to. When non-empty, the key sees and may call only the tools
+   *  that are both exposed by the target gateway and members of the
+   *  union of these toolsets. Empty means no toolset restriction.
+   */
+  toolsetIds?: Array<string> | undefined;
+  /**
+   * Allow-list of file system ids (`fsys_<ULID>`) the key may reach over
+   *
+   * @remarks
+   *  the file system MCP endpoint. Ignored when deny_all is true. Empty
+   *  (with deny_all=false) means no restriction. The access mode a key
+   *  gets on a reachable file system is the file system's own
+   *  external_access, never something the key carries.
+   */
+  allowedFilesystemIds?: Array<string> | undefined;
+};
+
+/** @internal */
+export type McpAccess$Outbound = {
+  deny_all?: boolean | undefined;
+  allowed_mcp_gateway_ids?: Array<string> | undefined;
+  toolset_ids?: Array<string> | undefined;
+  allowed_filesystem_ids?: Array<string> | undefined;
+};
+
+/** @internal */
+export const McpAccess$outboundSchema: z.ZodType<
+  McpAccess$Outbound,
+  z.ZodTypeDef,
+  McpAccess
+> = z.object({
+  denyAll: z.boolean().optional(),
+  allowedMcpGatewayIds: z.array(z.string()).optional(),
+  toolsetIds: z.array(z.string()).optional(),
+  allowedFilesystemIds: z.array(z.string()).optional(),
+}).transform((v) => {
+  return remap$(v, {
+    denyAll: "deny_all",
+    allowedMcpGatewayIds: "allowed_mcp_gateway_ids",
+    toolsetIds: "toolset_ids",
+    allowedFilesystemIds: "allowed_filesystem_ids",
+  });
+});
+
+export function mcpAccessToJSON(mcpAccess: McpAccess): string {
+  return JSON.stringify(McpAccess$outboundSchema.parse(mcpAccess));
+}

package/src/models/components/mcpauthconfig.ts

@@ -23,7 +23,7 @@ export type McpAuthConfig = {
    */
   staticHeaders?: Array<McpHeaderSecret> | undefined;
   /**
-   * OAuth client credentials the gateway presents to the upstream authorization server; set when type is OAUTH_CLIENT_CREDENTIALS.
+   * Not settable through these endpoints.
    */
   oauth?: McpOAuthConfig | undefined;
 };

package/src/models/components/mcpauthconfigoutput.ts

@@ -24,7 +24,7 @@ export type McpAuthConfigOutput = {
    */
   staticHeaders?: Array<McpHeaderSecretOutput> | undefined;
   /**
-   * OAuth client credentials the gateway presents to the upstream authorization server; set when type is OAUTH_CLIENT_CREDENTIALS.
+   * Not settable through these endpoints.
    */
   oauth?: McpOAuthConfigOutput | undefined;
 };