@parallelworks/client 7.93.0 → 7.95.0

package/dist/index.js

@@ -259,9 +259,9 @@ export class Client {
                     const record = body && typeof body === 'object'
                         ? body
                         : {};
-                    record.status = response.status;
-                    if (typeof record.message !== 'string' || !record.message) {
-                        record.message =
+                    record['status'] = response.status;
+                    if (typeof record['message'] !== 'string' || !record['message']) {
+                        record['message'] =
                             response.statusText ||
                                 `Request failed with status ${response.status}`;
                     }

package/dist/types/api.d.ts

@@ -926,6 +926,30 @@ export interface paths {
         patch: operations["set-ai-integration-icon"];
         trace?: never;
     };
+    "/api/admin/products/ai/catalog/{catalogEntryId}/models": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * List models reported for an AI integration
+         * @description > This is a system-level route, so the response will be independent of the currently authenticated user.
+         *
+         *     > This is a platform-admin only route.
+         *
+         *     Aggregates the model IDs existing connections report live for this integration, as a picking aid for the allowed-models list.
+         */
+        get: operations["list-ai-integration-catalog-models"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/api/admin/products/ai/connections/{connectionId}": {
         parameters: {
             query?: never;
@@ -5261,7 +5285,7 @@ export interface paths {
          * Set organization bootstrap script
          * @description > This is a system-level route, so the response will be independent of the currently authenticated user.
          *
-         *     Sets the organization's bootstrap script of the given type, replacing any existing script of that type. Cloud cluster bootstrap scripts run on every cloud cluster before any user bootstrap or health check scripts.
+         *     Sets the organization's bootstrap script of the given type, replacing any existing script of that type. Cloud cluster bootstrap scripts run on every cloud cluster before any user bootstrap or health check scripts. User workspace bootstrap scripts run as root in every user workspace in the organization at startup, before the home directory is prepared, receive the username as the first argument, and stop the workspace from starting when they exit non-zero. Every user can read the workspace script from inside their workspace, so it must not contain secrets.
          */
         put: operations["put-organization-bootstrap-script"];
         post?: never;
@@ -6071,6 +6095,28 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/api/organizations/{organization}/gitlab-servers/ca-cert": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Discover a GitLab server's CA certificate
+         * @description > This is a system-level route, so the response will be independent of the currently authenticated user.
+         *
+         *     Dials the GitLab server and returns the CA certificate its TLS chain is issued by, for registrations that verify against a custom CA.
+         */
+        post: operations["discover-organization-gitlab-server-ca-cert"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/api/organizations/{organization}/gitlab-servers/{server}": {
         parameters: {
             query?: never;
@@ -7739,6 +7785,28 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/api/organizations/{organization}/policies/disable-password-login": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Set organization policy: disable-password-login
+         * @description > This is a system-level route, so the response will be independent of the currently authenticated user.
+         *
+         *     Sets disable-password-login policy for the organization.
+         */
+        post: operations["set-organization-disable-password-login-policy"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/api/organizations/{organization}/policies/enforce-mfa": {
         parameters: {
             query?: never;
@@ -11694,6 +11762,34 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/api/organizations/{organization}/users/{user}/storage/{name}/permissions": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Get storage permissions
+         * @description > This is a system-level route, so the response will be independent of the currently authenticated user.
+         *
+         *     Returns the set of permissions granted on a storage.
+         */
+        get: operations["get-storage-permissions"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        /**
+         * Update storage permissions
+         * @description > This is a system-level route, so the response will be independent of the currently authenticated user.
+         *
+         *     Replaces the set of permissions granted on a storage.
+         */
+        patch: operations["update-storage-permissions"];
+        trace?: never;
+    };
     "/api/organizations/{organization}/users/{user}/user-workspace": {
         parameters: {
             query?: never;
@@ -12568,6 +12664,28 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/api/platform/policies/disable-password-login": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Set platform policy: disable-password-login
+         * @description > This is a system-level route, so the response will be independent of the currently authenticated user.
+         *
+         *     Sets the disable-password-login policy for the platform.
+         */
+        post: operations["set-platform-disable-password-login-policy"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/api/platform/policies/enforce-webauthn-mfa": {
         parameters: {
             query?: never;
@@ -13855,6 +13973,28 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/api/user-workspace/bootstrap-script": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Get user workspace bootstrap script
+         * @description > This is a system-level route, so the response will be independent of the currently authenticated user.
+         *
+         *     Returns the bootstrap script the currently authenticated user's organization runs in every user workspace at startup, or an empty script when none is set.
+         */
+        get: operations["get-user-workspace-bootstrap-script"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/api/user-workspace/status": {
         parameters: {
             query?: never;
@@ -14504,28 +14644,6 @@ export interface paths {
         patch: operations["update-workflow"];
         trace?: never;
     };
-    "/api/workflows/{workflow}/duplicate": {
-        parameters: {
-            query?: never;
-            header?: never;
-            path?: never;
-            cookie?: never;
-        };
-        get?: never;
-        put?: never;
-        /**
-         * Duplicate Workflow
-         * @description > This is a user-centric route, so the response will always be in the context of the currently authenticated user.
-         *
-         *     Creates a copy of an existing workflow with a new name.
-         */
-        post: operations["duplicate-workflow"];
-        delete?: never;
-        options?: never;
-        head?: never;
-        patch?: never;
-        trace?: never;
-    };
     "/api/workflows/{workflow}/fork": {
         parameters: {
             query?: never;
@@ -14852,14 +14970,14 @@ export interface components {
             termsAcceptedAt: string;
         };
         AccessManagementBody: {
-            /** @description Enable pam_mkhomedir for automatic home directory creation */
-            homeDirectories: boolean;
-            /** @description Enable AuthorizedKeysCommand for SSH key lookup */
-            sshKeys: boolean;
-            /** @description Enable sudoers.d for pwsudo group */
-            sudoAccess: boolean;
-            /** @description Enable libnss_cache, nsswitch, and user/group cache file sync */
-            userPopulation: boolean;
+            /** @description Enable pam_mkhomedir for automatic home directory creation; absent means unmanaged */
+            homeDirectories?: boolean;
+            /** @description Enable AuthorizedKeysCommand for SSH key lookup; absent means unmanaged */
+            sshKeys?: boolean;
+            /** @description Enable sudoers.d for pwsudo group; absent means unmanaged */
+            sudoAccess?: boolean;
+            /** @description Enable libnss_cache, nsswitch, and user/group cache file sync; absent means unmanaged */
+            userPopulation?: boolean;
         };
         AccessibleAIProviderResponse: {
             /** @description Friendly display name */
@@ -15347,6 +15465,8 @@ export interface components {
             accountEmail?: string;
             /** @description Login of the connected GitHub account (copilot provider) */
             accountLogin?: string;
+            /** @description Admin allowlist from the catalog entry; empty allows every model the provider reports */
+            allowedModels?: string[] | null;
             /** @description Attached storage bucket infrastructure ID */
             bucketId?: string;
             /** @description Attached storage bucket name */
@@ -15367,8 +15487,6 @@ export interface components {
             endpoint?: string;
             /** @description Billing group the provider is provisioned under (managed providers) */
             group?: string;
-            /** @description Whether a custom CA certificate is configured */
-            hasCaCertificate?: boolean;
             /** @description Unique identifier for the resource */
             id: string;
             /** @description Current icon configured on the provider's catalog entry */
@@ -15391,6 +15509,11 @@ export interface components {
             supportsResponses?: boolean;
             /** @description Whether the provider reports usage information */
             supportsUsage?: boolean;
+            /**
+             * @description How the integration's TLS certificate is verified
+             * @enum {string}
+             */
+            tlsVerification?: "public" | "ca-certificate" | "skip";
             /** @description The username of the user that owns this resource */
             user: string;
         };
@@ -17066,7 +17189,7 @@ export interface components {
              * @example cloudclusters
              * @enum {string}
              */
-            type: "cloudclusters";
+            type: "cloudclusters" | "userworkspaces";
             /**
              * Format: date-time
              * @description The last update timestamp of the bootstrap script.
@@ -17284,6 +17407,8 @@ export interface components {
             workspaceType: string;
         };
         BuiltinProviderResponse: {
+            /** @description Model IDs users may see and enable; empty allows every model the provider reports */
+            allowedModels?: string[] | null;
             caCertificate?: string;
             /** Format: int64 */
             connectionCount: number;
@@ -17308,9 +17433,13 @@ export interface components {
             /** @description Connections carry a credential */
             requiresApiKey: boolean;
             /** @enum {string} */
+            tlsVerification?: "public" | "ca-certificate" | "skip";
+            /** @enum {string} */
             toolCallingMode?: "native" | "emulated" | "none";
         };
         CatalogEntryBody: {
+            /** @description Model IDs users may see and enable; empty allows every model the provider reports */
+            allowedModels?: string[] | null;
             caCertificate?: string;
             displayName: string;
             endpointOrigin: string;
@@ -17325,9 +17454,13 @@ export interface components {
             /** @enum {string} */
             protocol: "azure-foundry" | "bedrock-converse" | "codex" | "anthropic-messages" | "openai-chat" | "openai-responses";
             /** @enum {string} */
+            tlsVerification?: "public" | "ca-certificate" | "skip";
+            /** @enum {string} */
             toolCallingMode?: "native" | "emulated" | "none";
         };
         CatalogEntryResponse: {
+            /** @description Model IDs users may see and enable; empty allows every model the provider reports */
+            allowedModels?: string[] | null;
             caCertificate?: string;
             /** Format: int64 */
             connectionCount: number;
@@ -17357,10 +17490,21 @@ export interface components {
             /** @description Connections carry a credential */
             requiresApiKey: boolean;
             /** @enum {string} */
+            tlsVerification: "public" | "ca-certificate" | "skip";
+            /** @enum {string} */
             toolCallingMode: "native" | "emulated" | "none";
             /** Format: date-time */
             updatedAt: string;
         };
+        CatalogModelsOutputBody: {
+            /**
+             * Format: int64
+             * @description Connections that reported models
+             */
+            connections: number;
+            /** @description Union of model IDs reported live by connections mapped to this integration */
+            models: string[] | null;
+        };
         CertInfo: {
             /** @description DNS names the certificate covers */
             dnsNames?: string[] | null;
@@ -17660,6 +17804,7 @@ export interface components {
             csp: string;
             dnsZoneId?: string;
             dnsZoneName?: string;
+            firewallRules?: components["schemas"]["NetworkFirewallRule"][] | null;
             id: string;
             name: string;
             natGateway: boolean;
@@ -18927,6 +19072,8 @@ export interface components {
             name: string;
         };
         CreateNetworkBody: {
+            /** @description Custom ingress security group rules applied to resources provisioned on this network */
+            firewallRules?: components["schemas"]["NetworkFirewallRule"][] | null;
             /** @description Name of the network */
             name: string;
             /** @description Whether to provision a NAT gateway for outbound internet access (only applies when provisioning mode is private and not peered to platform) */
@@ -19346,8 +19493,12 @@ export interface components {
         CreateWorkflowBody: {
             /** @description Resource description */
             description?: string;
+            /** @description Markdown description of the workflow */
+            descriptionMarkdown?: string;
             /** @description Display name of the workflow */
             displayName?: string;
+            /** @description URL of the workflow icon */
+            imageUrl?: string;
             /** @description Resource name */
             name: string;
             /** @description Remote workflow configuration (required for remote type) */
@@ -19364,6 +19515,8 @@ export interface components {
              * @enum {string}
              */
             type: "remote" | "local";
+            /** @description Workflow YAML definition as a YAML string. If not provided, a default template is used. */
+            yaml?: string;
         };
         CreateWorkflowRunInputBody: {
             /** @description Auto-grant each workflow's declared user-variable needs (no consent prompt). */
@@ -19711,10 +19864,20 @@ export interface components {
              */
             endpoint: string;
         };
+        DiscoverCACertInputBody1: {
+            /** @description Whether the server may sit on a private network address. Platform administrators only. */
+            allowPrivateAddress?: boolean;
+            /** @description Origin of the GitLab instance to dial, for example https://gitlab.example.com. */
+            baseUrl: string;
+        };
         DiscoverCACertOutputBody: {
             /** @description PEM-encoded CA certificate served by the endpoint */
             caCert: string;
         };
+        DiscoverCACertOutputBody1: {
+            /** @description PEM-encoded CA certificate served by the endpoint. */
+            caCert: string;
+        };
         Disk: {
             /** @description Cloud service provider of the disk */
             csp: string;
@@ -19786,10 +19949,6 @@ export interface components {
             /** @description A list of mounts to be used in docker workspaces. */
             mounts: string[] | null;
         };
-        DuplicateWorkflowBody: {
-            /** @description Display name for the duplicated workflow */
-            newName: string;
-        };
         EffectiveProduct: {
             id: string;
             name: string;
@@ -20453,6 +20612,10 @@ export interface components {
             enforceWebAuthnMfa: boolean;
             /** @description List of configured MFA methods */
             mfaSettings: components["schemas"]["MfaSettingResponse"][] | null;
+            /** @description Whether the user's registered security key does not meet the required level and must be replaced */
+            webAuthnKeyRequiresReplacement: boolean;
+            /** @description Required security key level (hardware or fips); empty when not enforced */
+            webAuthnMfaLevel?: string;
         };
         GetNodeMetricsOutputBody: {
             dataPoints: components["schemas"]["MetricsDataPoint"][] | null;
@@ -20478,6 +20641,10 @@ export interface components {
             /** @description Resources that are unprovisioned, stopped, off, or deleted and do not need deprovisioning */
             inactive: components["schemas"]["UserResource"][] | null;
         };
+        GetUserWorkspaceBootstrapScriptOutputBody: {
+            /** @description The organization's user workspace bootstrap script, or empty when none is set. */
+            script: string;
+        };
         GitHubAppConfigResponse: {
             /** Format: int64 */
             appId: number;
@@ -20517,6 +20684,8 @@ export interface components {
             allowPrivateAddress: boolean;
             /** @description Origin of the GitLab instance, for example https://gitlab.example.com. */
             baseUrl: string;
+            /** @description PEM-encoded CA certificate the server's certificate chains to, when tlsVerification is ca-certificate. */
+            caCertificate?: string;
             /** @description Application ID of the OAuth application registered on the server, when members may connect through OAuth. */
             clientId?: string;
             /** @description Whether the application secret is stored. */
@@ -20529,10 +20698,20 @@ export interface components {
             readonly id: string;
             /** @description How members may connect: oauth, token, or both. */
             readonly methods: ("oauth" | "token")[] | null;
+            /**
+             * @description Lowest TLS version the platform negotiates with the server.
+             * @enum {string}
+             */
+            minimumTlsVersion: "1.2" | "1.3";
             /** @description Short name of the server, unique within the organization. */
             name: string;
             /** @description Redirect URI to configure on the OAuth application. */
             readonly redirectUri: string;
+            /**
+             * @description How the server's certificate is verified: against the public roots, against the supplied CA certificate, or not at all.
+             * @enum {string}
+             */
+            tlsVerification: "public" | "ca-certificate" | "skip";
         };
         GitLabServerCreateBody: {
             /** @description Let members connect by pasting a personal access token with the read_api scope. */
@@ -20541,12 +20720,24 @@ export interface components {
             allowPrivateAddress?: boolean;
             /** @description Origin of the GitLab instance, for example https://gitlab.example.com. */
             baseUrl: string;
+            /** @description PEM-encoded CA certificate the server's certificate chains to. Required for ca-certificate verification and not accepted otherwise. */
+            caCertificate?: string;
             /** @description Application ID of the OAuth application registered on the server. Give it together with clientSecret to let members connect through OAuth. */
             clientId?: string;
             /** @description Secret of the OAuth application. Stored in the platform vault and never returned. */
             clientSecret?: string;
+            /**
+             * @description Lowest TLS version the platform negotiates with the server. Defaults to 1.2.
+             * @enum {string}
+             */
+            minimumTlsVersion?: "1.2" | "1.3";
             /** @description Short name of the server, unique within the organization. */
             name: string;
+            /**
+             * @description How the server's certificate is verified. Defaults to public, or ca-certificate when one is supplied.
+             * @enum {string}
+             */
+            tlsVerification?: "public" | "ca-certificate" | "skip";
         };
         GitLabServerPatchBody: {
             /** @description Let members connect by pasting a personal access token with the read_api scope. */
@@ -20555,12 +20746,24 @@ export interface components {
             allowPrivateAddress?: boolean;
             /** @description New origin of the GitLab instance. */
             baseUrl?: string;
+            /** @description PEM-encoded CA certificate the server's certificate chains to. Only accepted with ca-certificate verification. */
+            caCertificate?: string;
             /** @description New application ID. */
             clientId?: string;
             /** @description New application secret. */
             clientSecret?: string;
+            /**
+             * @description Lowest TLS version the platform negotiates with the server.
+             * @enum {string}
+             */
+            minimumTlsVersion?: "1.2" | "1.3";
             /** @description New short name of the server. */
             name?: string;
+            /**
+             * @description How the server's certificate is verified. Switching away from ca-certificate discards the stored CA certificate.
+             * @enum {string}
+             */
+            tlsVerification?: "public" | "ca-certificate" | "skip";
         };
         GoogleBucket: {
             /**
@@ -21168,14 +21371,14 @@ export interface components {
             totalMAU?: number;
         };
         HeartbeatAccessManagement: {
-            /** @description Enable pam_mkhomedir for automatic home directory creation */
-            homeDirectories: boolean;
-            /** @description Enable AuthorizedKeysCommand for SSH key lookup */
-            sshKeys: boolean;
-            /** @description Enable sudoers.d for pwsudo group */
-            sudoAccess: boolean;
-            /** @description Enable libnss_cache, nsswitch, and user/group cache file sync */
-            userPopulation: boolean;
+            /** @description Enable pam_mkhomedir for automatic home directory creation; absent means unmanaged */
+            homeDirectories?: boolean;
+            /** @description Enable AuthorizedKeysCommand for SSH key lookup; absent means unmanaged */
+            sshKeys?: boolean;
+            /** @description Enable sudoers.d for pwsudo group; absent means unmanaged */
+            sudoAccess?: boolean;
+            /** @description Enable libnss_cache, nsswitch, and user/group cache file sync; absent means unmanaged */
+            userPopulation?: boolean;
         };
         HeartbeatGroup: {
             /**
@@ -21221,6 +21424,8 @@ export interface components {
             nodeOverrides?: {
                 [key: string]: components["schemas"]["HeartbeatAccessManagement"];
             };
+            /** @description Whether this node should report cluster-wide scheduler partitions and jobs on its next heartbeat */
+            schedulerReporter: boolean;
             /** @description Heartbeat status */
             status: string;
             /** @description Users with access to this cluster */
@@ -23585,6 +23790,25 @@ export interface components {
             /** @description Zone for a zonal RDMA network. */
             zone?: string;
         };
+        NetworkFirewallRule: {
+            /** @description Source CIDR block allowed by this rule */
+            cidr: string;
+            /**
+             * Format: int64
+             * @description Start of the destination port range
+             */
+            fromPort: number;
+            /**
+             * @description Protocol for the rule
+             * @enum {string}
+             */
+            protocol: "tcp" | "udp";
+            /**
+             * Format: int64
+             * @description End of the destination port range
+             */
+            toPort: number;
+        };
         NetworkInterface: {
             /**
              * @description The resource to which this network interface is attached.
@@ -24527,8 +24751,6 @@ export interface components {
             emulatedToolCalling?: boolean;
             /** @description Provider endpoint URL */
             endpoint?: string;
-            /** @description Whether a custom CA certificate is configured */
-            hasCaCertificate?: boolean;
             /** @description Unique identifier */
             id: string;
             /** @description Current icon configured on the provider's catalog entry */
@@ -24539,6 +24761,11 @@ export interface components {
             supportsResponses?: boolean;
             /** @description Whether the provider reports plan usage limits */
             supportsUsage?: boolean;
+            /**
+             * @description How the integration's TLS certificate is verified
+             * @enum {string}
+             */
+            tlsVerification?: "public" | "ca-certificate" | "skip";
             /** @description AI provider type */
             type: string;
         };
@@ -24752,6 +24979,8 @@ export interface components {
             selfService: boolean;
         };
         OrganizationCatalogEntry: {
+            /** @description Model IDs users may see and enable; empty allows every model the provider reports */
+            allowedModels?: string[] | null;
             caCertificate?: string;
             /** Format: date-time */
             createdAt: string;
@@ -24777,6 +25006,8 @@ export interface components {
             /** @description Connections carry a credential */
             requiresApiKey: boolean;
             /** @enum {string} */
+            tlsVerification: "public" | "ca-certificate" | "skip";
+            /** @enum {string} */
             toolCallingMode: "native" | "emulated" | "none";
             /** Format: date-time */
             updatedAt: string;
@@ -25037,6 +25268,8 @@ export interface components {
             outputRate?: number;
         };
         PatchNetworkBody: {
+            /** @description Custom ingress security group rules applied to resources provisioned on this network; omit to leave unchanged */
+            firewallRules?: components["schemas"]["NetworkFirewallRule"][] | null;
             /** @description List of regions with corresponding CIDR ranges */
             regions: {
                 [key: string]: string;
@@ -26900,12 +27133,12 @@ export interface components {
              */
             script: string;
             /**
-             * @description The type of the bootstrap script.
+             * @description The type of the bootstrap script. cloudclusters runs on every cloud cluster before user bootstrap and health check scripts. userworkspaces runs as root in every user workspace at startup, before the home directory is prepared, with the username as the first argument; a non-zero exit stops the workspace from starting. Every user can read it from inside their workspace, so it must not contain secrets.
              * @default cloudclusters
              * @example cloudclusters
              * @enum {string}
              */
-            type: "cloudclusters";
+            type: "cloudclusters" | "userworkspaces";
         };
         PutGitHubAppConfigInputBody: {
             /**
@@ -28524,6 +28757,10 @@ export interface components {
             /** @description Step status. */
             status?: string;
         };
+        StopClusterOptions: {
+            /** @description Stop the controller through the cloud provider instead of waiting for the cluster agent to shut it down from inside the guest. */
+            force?: boolean;
+        };
         StorageAttachment: {
             /** @description ID of the resource. */
             id: string;
@@ -29071,14 +29308,14 @@ export interface components {
             };
         };
         UpdateAccessManagementBody: {
-            /** @description Enable pam_mkhomedir for automatic home directory creation */
-            homeDirectories?: boolean;
-            /** @description Enable AuthorizedKeysCommand for SSH key lookup */
-            sshKeys?: boolean;
-            /** @description Enable sudoers.d for pwsudo group */
-            sudoAccess?: boolean;
-            /** @description Enable libnss_cache, nsswitch, and user/group cache file sync */
-            userPopulation?: boolean;
+            /** @description Enable pam_mkhomedir for automatic home directory creation. Send null to stop managing it. */
+            homeDirectories?: boolean | null;
+            /** @description Enable AuthorizedKeysCommand for SSH key lookup. Send null to stop managing it. */
+            sshKeys?: boolean | null;
+            /** @description Enable sudoers.d for pwsudo group. Send null to stop managing it. */
+            sudoAccess?: boolean | null;
+            /** @description Enable libnss_cache, nsswitch, and user/group cache file sync. Send null to stop managing it. */
+            userPopulation?: boolean | null;
         };
         UpdateAdminPlatformSettingsInputBody: {
             /** @description Contact email registered with the ACME account. */
@@ -29858,12 +30095,12 @@ export interface components {
             createdAt: string;
             /**
              * @description the image the user workspace is currently running. This will be always be set to the same as Image when the workspace restarts.
-             * @example ghcr.io/parallelworks/usercontainer-theia:latest
+             * @example ghcr.io/parallelworks/usercontainer-vscode:latest
              */
             currentImage: string;
             /**
              * @description the image set for the user workspace
-             * @example ghcr.io/parallelworks/usercontainer-theia:latest
+             * @example ghcr.io/parallelworks/usercontainer-vscode:latest
              */
             image: string;
             /**
@@ -29876,6 +30113,11 @@ export interface components {
              * @example User has running workflows
              */
             notSafeToKillReason?: string;
+            /**
+             * @description the organization of the user associated with the workspace
+             * @example parallelworks
+             */
+            organization?: string;
             /**
              * @description the resolved version number of the image the workspace is actually running. Read from the image tag for pinned deployments, or resolved from the running image digest via the workspace's API for 'latest'-tag deployments.
              * @example v7.62.0
@@ -30008,7 +30250,7 @@ export interface components {
              * @example hardware
              * @enum {string}
              */
-            value: "hardware";
+            value: "hardware" | "fips";
         };
         WebAuthnRegAuthenticatorSelection: {
             /** @description Required authenticator attachment */
@@ -31949,6 +32191,37 @@ export interface operations {
             };
         };
     };
+    "list-ai-integration-catalog-models": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                catalogEntryId: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description OK */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["CatalogModelsOutputBody"];
+                };
+            };
+            /** @description Error */
+            default: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+        };
+    };
     "delete-ai-connection": {
         parameters: {
             query?: never;
@@ -39947,7 +40220,7 @@ export interface operations {
         parameters: {
             query?: {
                 /** @description The type of the bootstrap script. */
-                type?: string;
+                type?: "cloudclusters" | "userworkspaces";
             };
             header?: never;
             path: {
@@ -41761,6 +42034,42 @@ export interface operations {
             };
         };
     };
+    "discover-organization-gitlab-server-ca-cert": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description The name of the organization. */
+                organization: string;
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["DiscoverCACertInputBody1"];
+            };
+        };
+        responses: {
+            /** @description OK */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["DiscoverCACertOutputBody1"];
+                };
+            };
+            /** @description Error */
+            default: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+        };
+    };
     "get-organization-gitlab-server": {
         parameters: {
             query?: never;
@@ -45510,6 +45819,44 @@ export interface operations {
             };
         };
     };
+    "set-organization-disable-password-login-policy": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description The name of the organization. */
+                organization: string;
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": boolean;
+            };
+        };
+        responses: {
+            /** @description OK */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        [key: string]: components["schemas"]["BooleanPolicyOutput"];
+                    };
+                };
+            };
+            /** @description Error */
+            default: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+        };
+    };
     "set-organization-enforce-mfa-policy": {
         parameters: {
             query?: never;
@@ -45560,7 +45907,7 @@ export interface operations {
         };
         requestBody: {
             content: {
-                "application/json": "hardware";
+                "application/json": "hardware" | "fips";
             };
         };
         responses: {
@@ -48830,6 +49177,8 @@ export interface operations {
                 expiresIn?: number;
                 /** @description The permissions for the pre-signed URL. Default is read (r). Combine: r,w,d,c. */
                 permissions?: string;
+                /** @description Content-Disposition the file is served with, so a browser download can be given a filename. Omit to serve the file as stored. */
+                contentDisposition?: string;
             };
             header?: never;
             path: {
@@ -49019,6 +49368,8 @@ export interface operations {
                 expiresIn?: number;
                 /** @description The permissions for the pre-signed URL. Default is read (r). Other permissions include write (w), delete (d), list (l), add (a), create (c). Combine multiple permissions as needed. */
                 permissions?: string;
+                /** @description Content-Disposition the blob is served with, so a browser download can be given a filename. Omit to serve the blob as stored. */
+                contentDisposition?: string;
             };
             header?: never;
             path: {
@@ -50630,7 +50981,11 @@ export interface operations {
             };
             cookie?: never;
         };
-        requestBody?: never;
+        requestBody?: {
+            content: {
+                "application/json": components["schemas"]["StopClusterOptions"];
+            };
+        };
         responses: {
             /** @description No Content */
             204: {
@@ -51518,6 +51873,8 @@ export interface operations {
                 objectName: string;
                 /** @description The expiration time in seconds for the pre-signed URL. Default is 12 hours. */
                 expiresIn?: number;
+                /** @description Content-Disposition the object is served with, so a browser download can be given a filename. Omit to serve the object as stored. */
+                contentDisposition?: string;
             };
             header?: never;
             path: {
@@ -53701,6 +54058,80 @@ export interface operations {
             };
         };
     };
+    "get-storage-permissions": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description The name of the organization. */
+                organization: string;
+                /** @description Username of the target user. */
+                user: string;
+                /** @description Platform name of the storage. */
+                name: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description OK */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["SubjectPermissions"];
+                };
+            };
+            /** @description Error */
+            default: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+        };
+    };
+    "update-storage-permissions": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description The name of the organization. */
+                organization: string;
+                /** @description Username of the target user. */
+                user: string;
+                /** @description Platform name of the storage. */
+                name: string;
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["SubjectPermissions"];
+            };
+        };
+        responses: {
+            /** @description No Content */
+            204: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Error */
+            default: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+        };
+    };
     "get-user-workspace": {
         parameters: {
             query?: never;
@@ -55605,6 +56036,41 @@ export interface operations {
             };
         };
     };
+    "set-platform-disable-password-login-policy": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": boolean;
+            };
+        };
+        responses: {
+            /** @description OK */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        [key: string]: components["schemas"]["BooleanPolicyOutput"];
+                    };
+                };
+            };
+            /** @description Error */
+            default: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+        };
+    };
     "set-platform-enforce-webauthn-mfa-policy": {
         parameters: {
             query?: never;
@@ -55614,7 +56080,7 @@ export interface operations {
         };
         requestBody: {
             content: {
-                "application/json": "hardware";
+                "application/json": "hardware" | "fips";
             };
         };
         responses: {
@@ -57753,6 +58219,35 @@ export interface operations {
             };
         };
     };
+    "get-user-workspace-bootstrap-script": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description OK */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["GetUserWorkspaceBootstrapScriptOutputBody"];
+                };
+            };
+            /** @description Error */
+            default: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+        };
+    };
     "get-user-workspace-status": {
         parameters: {
             query?: never;
@@ -58987,42 +59482,6 @@ export interface operations {
             };
         };
     };
-    "duplicate-workflow": {
-        parameters: {
-            query?: never;
-            header?: never;
-            path: {
-                /** @description Name of the workflow to duplicate. */
-                workflow: string;
-            };
-            cookie?: never;
-        };
-        requestBody: {
-            content: {
-                "application/json": components["schemas"]["DuplicateWorkflowBody"];
-            };
-        };
-        responses: {
-            /** @description OK */
-            200: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": components["schemas"]["WorkflowItem"];
-                };
-            };
-            /** @description Error */
-            default: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": components["schemas"]["Error"];
-                };
-            };
-        };
-    };
     "fork-workflow": {
         parameters: {
             query?: never;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@parallelworks/client",
-  "version": "7.93.0",
+  "version": "7.95.0",
   "description": "Official TypeScript client for Parallel Works ACTIVATE API",
   "type": "module",
   "exports": {