@parallelworks/client 7.94.0 → 7.95.1

package/dist/index.js

@@ -259,9 +259,9 @@ export class Client {
                     const record = body && typeof body === 'object'
                         ? body
                         : {};
-                    record.status = response.status;
-                    if (typeof record.message !== 'string' || !record.message) {
-                        record.message =
+                    record['status'] = response.status;
+                    if (typeof record['message'] !== 'string' || !record['message']) {
+                        record['message'] =
                             response.statusText ||
                                 `Request failed with status ${response.status}`;
                     }

package/dist/types/api.d.ts

@@ -4239,6 +4239,28 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/api/oidc/token/direct": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Get an identity token by direct grant
+         * @description > This is a user-centric route, so the response will always be in the context of the currently authenticated user.
+         *
+         *     Mints an identity token for the logged-in user against a registered application, without a browser redirect. This is the exec-credential pattern used by kubectl.
+         */
+        get: operations["get-oidc-token-direct"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/api/onboarding/recommended-resources": {
         parameters: {
             query?: never;
@@ -6095,6 +6117,28 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/api/organizations/{organization}/gitlab-servers/ca-cert": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Discover a GitLab server's CA certificate
+         * @description > This is a system-level route, so the response will be independent of the currently authenticated user.
+         *
+         *     Dials the GitLab server and returns the CA certificate its TLS chain is issued by, for registrations that verify against a custom CA.
+         */
+        post: operations["discover-organization-gitlab-server-ca-cert"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/api/organizations/{organization}/gitlab-servers/{server}": {
         parameters: {
             query?: never;
@@ -7647,6 +7691,156 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/api/organizations/{organization}/oidc/apps": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * List OIDC applications
+         * @description > This is a system-level route, so the response will be independent of the currently authenticated user.
+         *
+         *     Lists the applications registered for the organization. Requires an organization administrator. Client secrets are never included.
+         */
+        get: operations["list-org-oidc-apps"];
+        put?: never;
+        /**
+         * Register an OIDC application
+         * @description > This is a system-level route, so the response will be independent of the currently authenticated user.
+         *
+         *     Registers an application that uses the platform as its identity provider. Requires an organization administrator. The client ID is generated; it cannot be chosen.
+         */
+        post: operations["create-org-oidc-app"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/organizations/{organization}/oidc/apps/{clientId}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Get an OIDC application
+         * @description > This is a system-level route, so the response will be independent of the currently authenticated user.
+         *
+         *     Returns a single registered application. Requires an organization administrator. Client secrets are never included.
+         */
+        get: operations["get-org-oidc-app"];
+        /**
+         * Update an OIDC application
+         * @description > This is a system-level route, so the response will be independent of the currently authenticated user.
+         *
+         *     Updates a registered application. Requires an organization administrator.
+         */
+        put: operations["update-org-oidc-app"];
+        post?: never;
+        /**
+         * Delete an OIDC application
+         * @description > This is a system-level route, so the response will be independent of the currently authenticated user.
+         *
+         *     Removes a registered application and its client secrets. Requires an organization administrator.
+         */
+        delete: operations["delete-org-oidc-app"];
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/organizations/{organization}/oidc/apps/{clientId}/secrets": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Create a client secret
+         * @description > This is a system-level route, so the response will be independent of the currently authenticated user.
+         *
+         *     Issues a new client secret for the application and returns it. Requires an organization administrator.
+         */
+        post: operations["create-org-oidc-app-secret"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/organizations/{organization}/oidc/apps/{clientId}/secrets/rotate": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Rotate the client secret
+         * @description > This is a system-level route, so the response will be independent of the currently authenticated user.
+         *
+         *     Issues a replacement client secret. Requires an organization administrator. The previous secrets keep working for the overlap window so the application can be updated without an outage.
+         */
+        post: operations["rotate-org-oidc-app-secret"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/organizations/{organization}/oidc/apps/{clientId}/secrets/{secretId}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        post?: never;
+        /**
+         * Delete a client secret
+         * @description > This is a system-level route, so the response will be independent of the currently authenticated user.
+         *
+         *     Removes a client secret immediately. Requires an organization administrator.
+         */
+        delete: operations["delete-org-oidc-app-secret"];
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/organizations/{organization}/oidc/apps/{clientId}/secrets/{secretId}/reveal": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Reveal a client secret
+         * @description > This is a system-level route, so the response will be independent of the currently authenticated user.
+         *
+         *     Returns a stored client secret again. Requires an organization administrator. Every reveal is recorded as an audit event.
+         */
+        post: operations["reveal-org-oidc-app-secret"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/api/organizations/{organization}/owner": {
         parameters: {
             query?: never;
@@ -14622,28 +14816,6 @@ export interface paths {
         patch: operations["update-workflow"];
         trace?: never;
     };
-    "/api/workflows/{workflow}/duplicate": {
-        parameters: {
-            query?: never;
-            header?: never;
-            path?: never;
-            cookie?: never;
-        };
-        get?: never;
-        put?: never;
-        /**
-         * Duplicate Workflow
-         * @description > This is a user-centric route, so the response will always be in the context of the currently authenticated user.
-         *
-         *     Creates a copy of an existing workflow with a new name.
-         */
-        post: operations["duplicate-workflow"];
-        delete?: never;
-        options?: never;
-        head?: never;
-        patch?: never;
-        trace?: never;
-    };
     "/api/workflows/{workflow}/fork": {
         parameters: {
             query?: never;
@@ -15686,6 +15858,87 @@ export interface components {
              */
             source: "platform" | "partner" | "organization";
         };
+        AppBody: {
+            /** @description Groups whose members may use the application. Empty means everyone in the organization. */
+            allowedGroups?: string[] | null;
+            /**
+             * @description Whether the user sees a consent screen. Defaults to none.
+             * @enum {string}
+             */
+            consent?: "none" | "required";
+            /** @description What the application is for. */
+            description?: string;
+            /** @description Whether the application is disabled. */
+            disabled?: boolean;
+            /**
+             * @description The application kind. Defaults to web.
+             * @enum {string}
+             */
+            kind?: "web" | "spa" | "native" | "service";
+            /**
+             * @description Whether the application is scoped to one organization or the whole platform. Defaults to organization.
+             * @enum {string}
+             */
+            level?: "organization" | "platform";
+            /** @description The display name of the application. */
+            name: string;
+            /** @description Permitted redirect URIs for the authorization code flow. */
+            redirectUris?: string[] | null;
+            /** @description Scopes the application may request. */
+            scopes?: string[] | null;
+            /**
+             * @description What the sub claim contains. Defaults to userId.
+             * @enum {string}
+             */
+            subjectType?: "userId" | "username";
+        };
+        AppResponse: {
+            /** @description Groups whose members may use the application. Empty means everyone in the organization. */
+            allowedGroups: string[] | null;
+            /** @description The OIDC client_id, generated by the platform. */
+            clientId: string;
+            /**
+             * @description Whether the user sees a consent screen.
+             * @enum {string}
+             */
+            consent: "none" | "required";
+            /**
+             * Format: date-time
+             * @description When the application was registered.
+             */
+            created: string;
+            /** @description What the application is for. */
+            description?: string;
+            /** @description Whether the application is disabled. */
+            disabled: boolean;
+            /** @description The unique identifier for the application. */
+            id: string;
+            /** @description The issuer tokens for this application are minted with. */
+            issuer?: string;
+            /**
+             * @description The application kind.
+             * @enum {string}
+             */
+            kind: "web" | "spa" | "native" | "service";
+            /**
+             * @description Whether the application is scoped to one organization or the whole platform.
+             * @enum {string}
+             */
+            level: "organization" | "platform";
+            /** @description The display name of the application. */
+            name: string;
+            /** @description Permitted redirect URIs for the authorization code flow. */
+            redirectUris: string[] | null;
+            /** @description Scopes the application may request. */
+            scopes: string[] | null;
+            /** @description Client secret metadata. Never includes the secret itself. */
+            secrets: components["schemas"]["SecretInfo"][] | null;
+            /**
+             * @description What the sub claim contains.
+             * @enum {string}
+             */
+            subjectType: "userId" | "username";
+        };
         AssignedOrganization: {
             displayName: string;
             id: string;
@@ -19493,8 +19746,12 @@ export interface components {
         CreateWorkflowBody: {
             /** @description Resource description */
             description?: string;
+            /** @description Markdown description of the workflow */
+            descriptionMarkdown?: string;
             /** @description Display name of the workflow */
             displayName?: string;
+            /** @description URL of the workflow icon */
+            imageUrl?: string;
             /** @description Resource name */
             name: string;
             /** @description Remote workflow configuration (required for remote type) */
@@ -19511,6 +19768,8 @@ export interface components {
              * @enum {string}
              */
             type: "remote" | "local";
+            /** @description Workflow YAML definition as a YAML string. If not provided, a default template is used. */
+            yaml?: string;
         };
         CreateWorkflowRunInputBody: {
             /** @description Auto-grant each workflow's declared user-variable needs (no consent prompt). */
@@ -19858,10 +20117,20 @@ export interface components {
              */
             endpoint: string;
         };
+        DiscoverCACertInputBody1: {
+            /** @description Whether the server may sit on a private network address. Platform administrators only. */
+            allowPrivateAddress?: boolean;
+            /** @description Origin of the GitLab instance to dial, for example https://gitlab.example.com. */
+            baseUrl: string;
+        };
         DiscoverCACertOutputBody: {
             /** @description PEM-encoded CA certificate served by the endpoint */
             caCert: string;
         };
+        DiscoverCACertOutputBody1: {
+            /** @description PEM-encoded CA certificate served by the endpoint. */
+            caCert: string;
+        };
         Disk: {
             /** @description Cloud service provider of the disk */
             csp: string;
@@ -19933,10 +20202,6 @@ export interface components {
             /** @description A list of mounts to be used in docker workspaces. */
             mounts: string[] | null;
         };
-        DuplicateWorkflowBody: {
-            /** @description Display name for the duplicated workflow */
-            newName: string;
-        };
         EffectiveProduct: {
             id: string;
             name: string;
@@ -20600,6 +20865,10 @@ export interface components {
             enforceWebAuthnMfa: boolean;
             /** @description List of configured MFA methods */
             mfaSettings: components["schemas"]["MfaSettingResponse"][] | null;
+            /** @description Whether the user's registered security key does not meet the required level and must be replaced */
+            webAuthnKeyRequiresReplacement: boolean;
+            /** @description Required security key level (hardware or fips); empty when not enforced */
+            webAuthnMfaLevel?: string;
         };
         GetNodeMetricsOutputBody: {
             dataPoints: components["schemas"]["MetricsDataPoint"][] | null;
@@ -20668,6 +20937,8 @@ export interface components {
             allowPrivateAddress: boolean;
             /** @description Origin of the GitLab instance, for example https://gitlab.example.com. */
             baseUrl: string;
+            /** @description PEM-encoded CA certificate the server's certificate chains to, when tlsVerification is ca-certificate. */
+            caCertificate?: string;
             /** @description Application ID of the OAuth application registered on the server, when members may connect through OAuth. */
             clientId?: string;
             /** @description Whether the application secret is stored. */
@@ -20680,10 +20951,20 @@ export interface components {
             readonly id: string;
             /** @description How members may connect: oauth, token, or both. */
             readonly methods: ("oauth" | "token")[] | null;
+            /**
+             * @description Lowest TLS version the platform negotiates with the server.
+             * @enum {string}
+             */
+            minimumTlsVersion: "1.2" | "1.3";
             /** @description Short name of the server, unique within the organization. */
             name: string;
             /** @description Redirect URI to configure on the OAuth application. */
             readonly redirectUri: string;
+            /**
+             * @description How the server's certificate is verified: against the public roots, against the supplied CA certificate, or not at all.
+             * @enum {string}
+             */
+            tlsVerification: "public" | "ca-certificate" | "skip";
         };
         GitLabServerCreateBody: {
             /** @description Let members connect by pasting a personal access token with the read_api scope. */
@@ -20692,12 +20973,24 @@ export interface components {
             allowPrivateAddress?: boolean;
             /** @description Origin of the GitLab instance, for example https://gitlab.example.com. */
             baseUrl: string;
+            /** @description PEM-encoded CA certificate the server's certificate chains to. Required for ca-certificate verification and not accepted otherwise. */
+            caCertificate?: string;
             /** @description Application ID of the OAuth application registered on the server. Give it together with clientSecret to let members connect through OAuth. */
             clientId?: string;
             /** @description Secret of the OAuth application. Stored in the platform vault and never returned. */
             clientSecret?: string;
+            /**
+             * @description Lowest TLS version the platform negotiates with the server. Defaults to 1.2.
+             * @enum {string}
+             */
+            minimumTlsVersion?: "1.2" | "1.3";
             /** @description Short name of the server, unique within the organization. */
             name: string;
+            /**
+             * @description How the server's certificate is verified. Defaults to public, or ca-certificate when one is supplied.
+             * @enum {string}
+             */
+            tlsVerification?: "public" | "ca-certificate" | "skip";
         };
         GitLabServerPatchBody: {
             /** @description Let members connect by pasting a personal access token with the read_api scope. */
@@ -20706,12 +20999,24 @@ export interface components {
             allowPrivateAddress?: boolean;
             /** @description New origin of the GitLab instance. */
             baseUrl?: string;
+            /** @description PEM-encoded CA certificate the server's certificate chains to. Only accepted with ca-certificate verification. */
+            caCertificate?: string;
             /** @description New application ID. */
             clientId?: string;
             /** @description New application secret. */
             clientSecret?: string;
+            /**
+             * @description Lowest TLS version the platform negotiates with the server.
+             * @enum {string}
+             */
+            minimumTlsVersion?: "1.2" | "1.3";
             /** @description New short name of the server. */
             name?: string;
+            /**
+             * @description How the server's certificate is verified. Switching away from ca-certificate discards the stored CA certificate.
+             * @enum {string}
+             */
+            tlsVerification?: "public" | "ca-certificate" | "skip";
         };
         GoogleBucket: {
             /**
@@ -27922,6 +28227,13 @@ export interface components {
             /** @description Subjects with access */
             subjects: components["schemas"]["RbacSubject"][] | null;
         };
+        RotateSecretInputBody: {
+            /**
+             * Format: int64
+             * @description How long the replaced secret keeps working. Defaults to 24 hours; 0 revokes the previous secrets immediately.
+             */
+            overlapHours?: number;
+        };
         RunAlert: {
             /** @description Indicates if runtime alert is enabled for the storage. */
             enabled: boolean;
@@ -28217,6 +28529,40 @@ export interface components {
             queues?: components["schemas"]["SchedulerPartitionData"][] | null;
             schedulerType: string;
         };
+        SecretInfo: {
+            /**
+             * Format: date-time
+             * @description When the secret was created.
+             */
+            created?: string;
+            /**
+             * Format: date-time
+             * @description When a rotated secret stops working.
+             */
+            expiresAt?: string;
+            /** @description Truncated preview of the secret for identification. */
+            hint?: string;
+            /** @description The identifier for this secret. */
+            id: string;
+        };
+        SecretResponse: {
+            /** @description The client secret. */
+            clientSecret: string;
+            /**
+             * Format: date-time
+             * @description When the secret was created.
+             */
+            created?: string;
+            /**
+             * Format: date-time
+             * @description When a rotated secret stops working.
+             */
+            expiresAt?: string;
+            /** @description Truncated preview of the secret. */
+            hint?: string;
+            /** @description The identifier for this secret. */
+            id: string;
+        };
         SentrySettings: {
             /** @description Whether custom DSNs are configured (false means using Parallel Works defaults). */
             customDsn: boolean;
@@ -28705,6 +29051,10 @@ export interface components {
             /** @description Step status. */
             status?: string;
         };
+        StopClusterOptions: {
+            /** @description Stop the controller through the cloud provider instead of waiting for the cluster agent to shut it down from inside the guest. */
+            force?: boolean;
+        };
         StorageAttachment: {
             /** @description ID of the resource. */
             id: string;
@@ -30039,12 +30389,12 @@ export interface components {
             createdAt: string;
             /**
              * @description the image the user workspace is currently running. This will be always be set to the same as Image when the workspace restarts.
-             * @example ghcr.io/parallelworks/usercontainer-theia:latest
+             * @example ghcr.io/parallelworks/usercontainer-vscode:latest
              */
             currentImage: string;
             /**
              * @description the image set for the user workspace
-             * @example ghcr.io/parallelworks/usercontainer-theia:latest
+             * @example ghcr.io/parallelworks/usercontainer-vscode:latest
              */
             image: string;
             /**
@@ -30194,7 +30544,7 @@ export interface components {
              * @example hardware
              * @enum {string}
              */
-            value: "hardware";
+            value: "hardware" | "fips";
         };
         WebAuthnRegAuthenticatorSelection: {
             /** @description Required authenticator attachment */
@@ -37880,6 +38230,38 @@ export interface operations {
             };
         };
     };
+    "get-oidc-token-direct": {
+        parameters: {
+            query: {
+                /** @description The client ID of the application to mint a token for */
+                clientId: string;
+            };
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description OK */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": string;
+                };
+            };
+            /** @description Error */
+            default: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+        };
+    };
     getRecommendedResources: {
         parameters: {
             query?: never;
@@ -41978,6 +42360,42 @@ export interface operations {
             };
         };
     };
+    "discover-organization-gitlab-server-ca-cert": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description The name of the organization. */
+                organization: string;
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["DiscoverCACertInputBody1"];
+            };
+        };
+        responses: {
+            /** @description OK */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["DiscoverCACertOutputBody1"];
+                };
+            };
+            /** @description Error */
+            default: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+        };
+    };
     "get-organization-gitlab-server": {
         parameters: {
             query?: never;
@@ -45513,6 +45931,320 @@ export interface operations {
             };
         };
     };
+    "list-org-oidc-apps": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description The name of the organization. */
+                organization: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description OK */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["AppResponse"][] | null;
+                };
+            };
+            /** @description Error */
+            default: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+        };
+    };
+    "create-org-oidc-app": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description The name of the organization. */
+                organization: string;
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["AppBody"];
+            };
+        };
+        responses: {
+            /** @description Created */
+            201: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["AppResponse"];
+                };
+            };
+            /** @description Error */
+            default: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+        };
+    };
+    "get-org-oidc-app": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description The name of the organization. */
+                organization: string;
+                /** @description The application's client ID */
+                clientId: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description OK */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["AppResponse"];
+                };
+            };
+            /** @description Error */
+            default: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+        };
+    };
+    "update-org-oidc-app": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description The name of the organization. */
+                organization: string;
+                /** @description The application's client ID */
+                clientId: string;
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["AppBody"];
+            };
+        };
+        responses: {
+            /** @description OK */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["AppResponse"];
+                };
+            };
+            /** @description Error */
+            default: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+        };
+    };
+    "delete-org-oidc-app": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description The name of the organization. */
+                organization: string;
+                /** @description The application's client ID */
+                clientId: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description No Content */
+            204: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Error */
+            default: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+        };
+    };
+    "create-org-oidc-app-secret": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description The name of the organization. */
+                organization: string;
+                /** @description The application's client ID */
+                clientId: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Created */
+            201: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["SecretResponse"];
+                };
+            };
+            /** @description Error */
+            default: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+        };
+    };
+    "rotate-org-oidc-app-secret": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description The name of the organization. */
+                organization: string;
+                /** @description The application's client ID */
+                clientId: string;
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["RotateSecretInputBody"];
+            };
+        };
+        responses: {
+            /** @description OK */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["SecretResponse"];
+                };
+            };
+            /** @description Error */
+            default: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+        };
+    };
+    "delete-org-oidc-app-secret": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description The name of the organization. */
+                organization: string;
+                /** @description The application's client ID */
+                clientId: string;
+                /** @description The secret to delete */
+                secretId: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description No Content */
+            204: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Error */
+            default: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+        };
+    };
+    "reveal-org-oidc-app-secret": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description The name of the organization. */
+                organization: string;
+                /** @description The application's client ID */
+                clientId: string;
+                /** @description The secret to reveal */
+                secretId: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description OK */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["SecretResponse"];
+                };
+            };
+            /** @description Error */
+            default: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+        };
+    };
     "set-organization-owner": {
         parameters: {
             query?: never;
@@ -45815,7 +46547,7 @@ export interface operations {
         };
         requestBody: {
             content: {
-                "application/json": "hardware";
+                "application/json": "hardware" | "fips";
             };
         };
         responses: {
@@ -50889,7 +51621,11 @@ export interface operations {
             };
             cookie?: never;
         };
-        requestBody?: never;
+        requestBody?: {
+            content: {
+                "application/json": components["schemas"]["StopClusterOptions"];
+            };
+        };
         responses: {
             /** @description No Content */
             204: {
@@ -55984,7 +56720,7 @@ export interface operations {
         };
         requestBody: {
             content: {
-                "application/json": "hardware";
+                "application/json": "hardware" | "fips";
             };
         };
         responses: {
@@ -59386,42 +60122,6 @@ export interface operations {
             };
         };
     };
-    "duplicate-workflow": {
-        parameters: {
-            query?: never;
-            header?: never;
-            path: {
-                /** @description Name of the workflow to duplicate. */
-                workflow: string;
-            };
-            cookie?: never;
-        };
-        requestBody: {
-            content: {
-                "application/json": components["schemas"]["DuplicateWorkflowBody"];
-            };
-        };
-        responses: {
-            /** @description OK */
-            200: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": components["schemas"]["WorkflowItem"];
-                };
-            };
-            /** @description Error */
-            default: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": components["schemas"]["Error"];
-                };
-            };
-        };
-    };
     "fork-workflow": {
         parameters: {
             query?: never;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@parallelworks/client",
-  "version": "7.94.0",
+  "version": "7.95.1",
   "description": "Official TypeScript client for Parallel Works ACTIVATE API",
   "type": "module",
   "exports": {