@parallelworks/client 7.93.0 → 7.94.0

package/dist/types/api.d.ts

@@ -926,6 +926,30 @@ export interface paths {
         patch: operations["set-ai-integration-icon"];
         trace?: never;
     };
+    "/api/admin/products/ai/catalog/{catalogEntryId}/models": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * List models reported for an AI integration
+         * @description > This is a system-level route, so the response will be independent of the currently authenticated user.
+         *
+         *     > This is a platform-admin only route.
+         *
+         *     Aggregates the model IDs existing connections report live for this integration, as a picking aid for the allowed-models list.
+         */
+        get: operations["list-ai-integration-catalog-models"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/api/admin/products/ai/connections/{connectionId}": {
         parameters: {
             query?: never;
@@ -5261,7 +5285,7 @@ export interface paths {
          * Set organization bootstrap script
          * @description > This is a system-level route, so the response will be independent of the currently authenticated user.
          *
-         *     Sets the organization's bootstrap script of the given type, replacing any existing script of that type. Cloud cluster bootstrap scripts run on every cloud cluster before any user bootstrap or health check scripts.
+         *     Sets the organization's bootstrap script of the given type, replacing any existing script of that type. Cloud cluster bootstrap scripts run on every cloud cluster before any user bootstrap or health check scripts. User workspace bootstrap scripts run as root in every user workspace in the organization at startup, before the home directory is prepared, receive the username as the first argument, and stop the workspace from starting when they exit non-zero. Every user can read the workspace script from inside their workspace, so it must not contain secrets.
          */
         put: operations["put-organization-bootstrap-script"];
         post?: never;
@@ -7739,6 +7763,28 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/api/organizations/{organization}/policies/disable-password-login": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Set organization policy: disable-password-login
+         * @description > This is a system-level route, so the response will be independent of the currently authenticated user.
+         *
+         *     Sets disable-password-login policy for the organization.
+         */
+        post: operations["set-organization-disable-password-login-policy"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/api/organizations/{organization}/policies/enforce-mfa": {
         parameters: {
             query?: never;
@@ -11694,6 +11740,34 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/api/organizations/{organization}/users/{user}/storage/{name}/permissions": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Get storage permissions
+         * @description > This is a system-level route, so the response will be independent of the currently authenticated user.
+         *
+         *     Returns the set of permissions granted on a storage.
+         */
+        get: operations["get-storage-permissions"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        /**
+         * Update storage permissions
+         * @description > This is a system-level route, so the response will be independent of the currently authenticated user.
+         *
+         *     Replaces the set of permissions granted on a storage.
+         */
+        patch: operations["update-storage-permissions"];
+        trace?: never;
+    };
     "/api/organizations/{organization}/users/{user}/user-workspace": {
         parameters: {
             query?: never;
@@ -12568,6 +12642,28 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/api/platform/policies/disable-password-login": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Set platform policy: disable-password-login
+         * @description > This is a system-level route, so the response will be independent of the currently authenticated user.
+         *
+         *     Sets the disable-password-login policy for the platform.
+         */
+        post: operations["set-platform-disable-password-login-policy"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/api/platform/policies/enforce-webauthn-mfa": {
         parameters: {
             query?: never;
@@ -13855,6 +13951,28 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/api/user-workspace/bootstrap-script": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Get user workspace bootstrap script
+         * @description > This is a system-level route, so the response will be independent of the currently authenticated user.
+         *
+         *     Returns the bootstrap script the currently authenticated user's organization runs in every user workspace at startup, or an empty script when none is set.
+         */
+        get: operations["get-user-workspace-bootstrap-script"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/api/user-workspace/status": {
         parameters: {
             query?: never;
@@ -14852,14 +14970,14 @@ export interface components {
             termsAcceptedAt: string;
         };
         AccessManagementBody: {
-            /** @description Enable pam_mkhomedir for automatic home directory creation */
-            homeDirectories: boolean;
-            /** @description Enable AuthorizedKeysCommand for SSH key lookup */
-            sshKeys: boolean;
-            /** @description Enable sudoers.d for pwsudo group */
-            sudoAccess: boolean;
-            /** @description Enable libnss_cache, nsswitch, and user/group cache file sync */
-            userPopulation: boolean;
+            /** @description Enable pam_mkhomedir for automatic home directory creation; absent means unmanaged */
+            homeDirectories?: boolean;
+            /** @description Enable AuthorizedKeysCommand for SSH key lookup; absent means unmanaged */
+            sshKeys?: boolean;
+            /** @description Enable sudoers.d for pwsudo group; absent means unmanaged */
+            sudoAccess?: boolean;
+            /** @description Enable libnss_cache, nsswitch, and user/group cache file sync; absent means unmanaged */
+            userPopulation?: boolean;
         };
         AccessibleAIProviderResponse: {
             /** @description Friendly display name */
@@ -15347,6 +15465,8 @@ export interface components {
             accountEmail?: string;
             /** @description Login of the connected GitHub account (copilot provider) */
             accountLogin?: string;
+            /** @description Admin allowlist from the catalog entry; empty allows every model the provider reports */
+            allowedModels?: string[] | null;
             /** @description Attached storage bucket infrastructure ID */
             bucketId?: string;
             /** @description Attached storage bucket name */
@@ -15367,8 +15487,6 @@ export interface components {
             endpoint?: string;
             /** @description Billing group the provider is provisioned under (managed providers) */
             group?: string;
-            /** @description Whether a custom CA certificate is configured */
-            hasCaCertificate?: boolean;
             /** @description Unique identifier for the resource */
             id: string;
             /** @description Current icon configured on the provider's catalog entry */
@@ -15391,6 +15509,11 @@ export interface components {
             supportsResponses?: boolean;
             /** @description Whether the provider reports usage information */
             supportsUsage?: boolean;
+            /**
+             * @description How the integration's TLS certificate is verified
+             * @enum {string}
+             */
+            tlsVerification?: "public" | "ca-certificate" | "skip";
             /** @description The username of the user that owns this resource */
             user: string;
         };
@@ -17066,7 +17189,7 @@ export interface components {
              * @example cloudclusters
              * @enum {string}
              */
-            type: "cloudclusters";
+            type: "cloudclusters" | "userworkspaces";
             /**
              * Format: date-time
              * @description The last update timestamp of the bootstrap script.
@@ -17284,6 +17407,8 @@ export interface components {
             workspaceType: string;
         };
         BuiltinProviderResponse: {
+            /** @description Model IDs users may see and enable; empty allows every model the provider reports */
+            allowedModels?: string[] | null;
             caCertificate?: string;
             /** Format: int64 */
             connectionCount: number;
@@ -17308,9 +17433,13 @@ export interface components {
             /** @description Connections carry a credential */
             requiresApiKey: boolean;
             /** @enum {string} */
+            tlsVerification?: "public" | "ca-certificate" | "skip";
+            /** @enum {string} */
             toolCallingMode?: "native" | "emulated" | "none";
         };
         CatalogEntryBody: {
+            /** @description Model IDs users may see and enable; empty allows every model the provider reports */
+            allowedModels?: string[] | null;
             caCertificate?: string;
             displayName: string;
             endpointOrigin: string;
@@ -17325,9 +17454,13 @@ export interface components {
             /** @enum {string} */
             protocol: "azure-foundry" | "bedrock-converse" | "codex" | "anthropic-messages" | "openai-chat" | "openai-responses";
             /** @enum {string} */
+            tlsVerification?: "public" | "ca-certificate" | "skip";
+            /** @enum {string} */
             toolCallingMode?: "native" | "emulated" | "none";
         };
         CatalogEntryResponse: {
+            /** @description Model IDs users may see and enable; empty allows every model the provider reports */
+            allowedModels?: string[] | null;
             caCertificate?: string;
             /** Format: int64 */
             connectionCount: number;
@@ -17357,10 +17490,21 @@ export interface components {
             /** @description Connections carry a credential */
             requiresApiKey: boolean;
             /** @enum {string} */
+            tlsVerification: "public" | "ca-certificate" | "skip";
+            /** @enum {string} */
             toolCallingMode: "native" | "emulated" | "none";
             /** Format: date-time */
             updatedAt: string;
         };
+        CatalogModelsOutputBody: {
+            /**
+             * Format: int64
+             * @description Connections that reported models
+             */
+            connections: number;
+            /** @description Union of model IDs reported live by connections mapped to this integration */
+            models: string[] | null;
+        };
         CertInfo: {
             /** @description DNS names the certificate covers */
             dnsNames?: string[] | null;
@@ -17660,6 +17804,7 @@ export interface components {
             csp: string;
             dnsZoneId?: string;
             dnsZoneName?: string;
+            firewallRules?: components["schemas"]["NetworkFirewallRule"][] | null;
             id: string;
             name: string;
             natGateway: boolean;
@@ -18927,6 +19072,8 @@ export interface components {
             name: string;
         };
         CreateNetworkBody: {
+            /** @description Custom ingress security group rules applied to resources provisioned on this network */
+            firewallRules?: components["schemas"]["NetworkFirewallRule"][] | null;
             /** @description Name of the network */
             name: string;
             /** @description Whether to provision a NAT gateway for outbound internet access (only applies when provisioning mode is private and not peered to platform) */
@@ -20478,6 +20625,10 @@ export interface components {
             /** @description Resources that are unprovisioned, stopped, off, or deleted and do not need deprovisioning */
             inactive: components["schemas"]["UserResource"][] | null;
         };
+        GetUserWorkspaceBootstrapScriptOutputBody: {
+            /** @description The organization's user workspace bootstrap script, or empty when none is set. */
+            script: string;
+        };
         GitHubAppConfigResponse: {
             /** Format: int64 */
             appId: number;
@@ -21168,14 +21319,14 @@ export interface components {
             totalMAU?: number;
         };
         HeartbeatAccessManagement: {
-            /** @description Enable pam_mkhomedir for automatic home directory creation */
-            homeDirectories: boolean;
-            /** @description Enable AuthorizedKeysCommand for SSH key lookup */
-            sshKeys: boolean;
-            /** @description Enable sudoers.d for pwsudo group */
-            sudoAccess: boolean;
-            /** @description Enable libnss_cache, nsswitch, and user/group cache file sync */
-            userPopulation: boolean;
+            /** @description Enable pam_mkhomedir for automatic home directory creation; absent means unmanaged */
+            homeDirectories?: boolean;
+            /** @description Enable AuthorizedKeysCommand for SSH key lookup; absent means unmanaged */
+            sshKeys?: boolean;
+            /** @description Enable sudoers.d for pwsudo group; absent means unmanaged */
+            sudoAccess?: boolean;
+            /** @description Enable libnss_cache, nsswitch, and user/group cache file sync; absent means unmanaged */
+            userPopulation?: boolean;
         };
         HeartbeatGroup: {
             /**
@@ -21221,6 +21372,8 @@ export interface components {
             nodeOverrides?: {
                 [key: string]: components["schemas"]["HeartbeatAccessManagement"];
             };
+            /** @description Whether this node should report cluster-wide scheduler partitions and jobs on its next heartbeat */
+            schedulerReporter: boolean;
             /** @description Heartbeat status */
             status: string;
             /** @description Users with access to this cluster */
@@ -23585,6 +23738,25 @@ export interface components {
             /** @description Zone for a zonal RDMA network. */
             zone?: string;
         };
+        NetworkFirewallRule: {
+            /** @description Source CIDR block allowed by this rule */
+            cidr: string;
+            /**
+             * Format: int64
+             * @description Start of the destination port range
+             */
+            fromPort: number;
+            /**
+             * @description Protocol for the rule
+             * @enum {string}
+             */
+            protocol: "tcp" | "udp";
+            /**
+             * Format: int64
+             * @description End of the destination port range
+             */
+            toPort: number;
+        };
         NetworkInterface: {
             /**
              * @description The resource to which this network interface is attached.
@@ -24527,8 +24699,6 @@ export interface components {
             emulatedToolCalling?: boolean;
             /** @description Provider endpoint URL */
             endpoint?: string;
-            /** @description Whether a custom CA certificate is configured */
-            hasCaCertificate?: boolean;
             /** @description Unique identifier */
             id: string;
             /** @description Current icon configured on the provider's catalog entry */
@@ -24539,6 +24709,11 @@ export interface components {
             supportsResponses?: boolean;
             /** @description Whether the provider reports plan usage limits */
             supportsUsage?: boolean;
+            /**
+             * @description How the integration's TLS certificate is verified
+             * @enum {string}
+             */
+            tlsVerification?: "public" | "ca-certificate" | "skip";
             /** @description AI provider type */
             type: string;
         };
@@ -24752,6 +24927,8 @@ export interface components {
             selfService: boolean;
         };
         OrganizationCatalogEntry: {
+            /** @description Model IDs users may see and enable; empty allows every model the provider reports */
+            allowedModels?: string[] | null;
             caCertificate?: string;
             /** Format: date-time */
             createdAt: string;
@@ -24777,6 +24954,8 @@ export interface components {
             /** @description Connections carry a credential */
             requiresApiKey: boolean;
             /** @enum {string} */
+            tlsVerification: "public" | "ca-certificate" | "skip";
+            /** @enum {string} */
             toolCallingMode: "native" | "emulated" | "none";
             /** Format: date-time */
             updatedAt: string;
@@ -25037,6 +25216,8 @@ export interface components {
             outputRate?: number;
         };
         PatchNetworkBody: {
+            /** @description Custom ingress security group rules applied to resources provisioned on this network; omit to leave unchanged */
+            firewallRules?: components["schemas"]["NetworkFirewallRule"][] | null;
             /** @description List of regions with corresponding CIDR ranges */
             regions: {
                 [key: string]: string;
@@ -26900,12 +27081,12 @@ export interface components {
              */
             script: string;
             /**
-             * @description The type of the bootstrap script.
+             * @description The type of the bootstrap script. cloudclusters runs on every cloud cluster before user bootstrap and health check scripts. userworkspaces runs as root in every user workspace at startup, before the home directory is prepared, with the username as the first argument; a non-zero exit stops the workspace from starting. Every user can read it from inside their workspace, so it must not contain secrets.
              * @default cloudclusters
              * @example cloudclusters
              * @enum {string}
              */
-            type: "cloudclusters";
+            type: "cloudclusters" | "userworkspaces";
         };
         PutGitHubAppConfigInputBody: {
             /**
@@ -29071,14 +29252,14 @@ export interface components {
             };
         };
         UpdateAccessManagementBody: {
-            /** @description Enable pam_mkhomedir for automatic home directory creation */
-            homeDirectories?: boolean;
-            /** @description Enable AuthorizedKeysCommand for SSH key lookup */
-            sshKeys?: boolean;
-            /** @description Enable sudoers.d for pwsudo group */
-            sudoAccess?: boolean;
-            /** @description Enable libnss_cache, nsswitch, and user/group cache file sync */
-            userPopulation?: boolean;
+            /** @description Enable pam_mkhomedir for automatic home directory creation. Send null to stop managing it. */
+            homeDirectories?: boolean | null;
+            /** @description Enable AuthorizedKeysCommand for SSH key lookup. Send null to stop managing it. */
+            sshKeys?: boolean | null;
+            /** @description Enable sudoers.d for pwsudo group. Send null to stop managing it. */
+            sudoAccess?: boolean | null;
+            /** @description Enable libnss_cache, nsswitch, and user/group cache file sync. Send null to stop managing it. */
+            userPopulation?: boolean | null;
         };
         UpdateAdminPlatformSettingsInputBody: {
             /** @description Contact email registered with the ACME account. */
@@ -29876,6 +30057,11 @@ export interface components {
              * @example User has running workflows
              */
             notSafeToKillReason?: string;
+            /**
+             * @description the organization of the user associated with the workspace
+             * @example parallelworks
+             */
+            organization?: string;
             /**
              * @description the resolved version number of the image the workspace is actually running. Read from the image tag for pinned deployments, or resolved from the running image digest via the workspace's API for 'latest'-tag deployments.
              * @example v7.62.0
@@ -31949,6 +32135,37 @@ export interface operations {
             };
         };
     };
+    "list-ai-integration-catalog-models": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                catalogEntryId: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description OK */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["CatalogModelsOutputBody"];
+                };
+            };
+            /** @description Error */
+            default: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+        };
+    };
     "delete-ai-connection": {
         parameters: {
             query?: never;
@@ -39947,7 +40164,7 @@ export interface operations {
         parameters: {
             query?: {
                 /** @description The type of the bootstrap script. */
-                type?: string;
+                type?: "cloudclusters" | "userworkspaces";
             };
             header?: never;
             path: {
@@ -45510,6 +45727,44 @@ export interface operations {
             };
         };
     };
+    "set-organization-disable-password-login-policy": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description The name of the organization. */
+                organization: string;
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": boolean;
+            };
+        };
+        responses: {
+            /** @description OK */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        [key: string]: components["schemas"]["BooleanPolicyOutput"];
+                    };
+                };
+            };
+            /** @description Error */
+            default: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+        };
+    };
     "set-organization-enforce-mfa-policy": {
         parameters: {
             query?: never;
@@ -48830,6 +49085,8 @@ export interface operations {
                 expiresIn?: number;
                 /** @description The permissions for the pre-signed URL. Default is read (r). Combine: r,w,d,c. */
                 permissions?: string;
+                /** @description Content-Disposition the file is served with, so a browser download can be given a filename. Omit to serve the file as stored. */
+                contentDisposition?: string;
             };
             header?: never;
             path: {
@@ -49019,6 +49276,8 @@ export interface operations {
                 expiresIn?: number;
                 /** @description The permissions for the pre-signed URL. Default is read (r). Other permissions include write (w), delete (d), list (l), add (a), create (c). Combine multiple permissions as needed. */
                 permissions?: string;
+                /** @description Content-Disposition the blob is served with, so a browser download can be given a filename. Omit to serve the blob as stored. */
+                contentDisposition?: string;
             };
             header?: never;
             path: {
@@ -51518,6 +51777,8 @@ export interface operations {
                 objectName: string;
                 /** @description The expiration time in seconds for the pre-signed URL. Default is 12 hours. */
                 expiresIn?: number;
+                /** @description Content-Disposition the object is served with, so a browser download can be given a filename. Omit to serve the object as stored. */
+                contentDisposition?: string;
             };
             header?: never;
             path: {
@@ -53701,6 +53962,80 @@ export interface operations {
             };
         };
     };
+    "get-storage-permissions": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description The name of the organization. */
+                organization: string;
+                /** @description Username of the target user. */
+                user: string;
+                /** @description Platform name of the storage. */
+                name: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description OK */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["SubjectPermissions"];
+                };
+            };
+            /** @description Error */
+            default: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+        };
+    };
+    "update-storage-permissions": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description The name of the organization. */
+                organization: string;
+                /** @description Username of the target user. */
+                user: string;
+                /** @description Platform name of the storage. */
+                name: string;
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["SubjectPermissions"];
+            };
+        };
+        responses: {
+            /** @description No Content */
+            204: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Error */
+            default: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+        };
+    };
     "get-user-workspace": {
         parameters: {
             query?: never;
@@ -55605,6 +55940,41 @@ export interface operations {
             };
         };
     };
+    "set-platform-disable-password-login-policy": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": boolean;
+            };
+        };
+        responses: {
+            /** @description OK */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        [key: string]: components["schemas"]["BooleanPolicyOutput"];
+                    };
+                };
+            };
+            /** @description Error */
+            default: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+        };
+    };
     "set-platform-enforce-webauthn-mfa-policy": {
         parameters: {
             query?: never;
@@ -57753,6 +58123,35 @@ export interface operations {
             };
         };
     };
+    "get-user-workspace-bootstrap-script": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description OK */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["GetUserWorkspaceBootstrapScriptOutputBody"];
+                };
+            };
+            /** @description Error */
+            default: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+        };
+    };
     "get-user-workspace-status": {
         parameters: {
             query?: never;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@parallelworks/client",
-  "version": "7.93.0",
+  "version": "7.94.0",
   "description": "Official TypeScript client for Parallel Works ACTIVATE API",
   "type": "module",
   "exports": {