@parallelworks/client 7.95.0 → 7.95.1

package/dist/types/api.d.ts

@@ -4239,6 +4239,28 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/api/oidc/token/direct": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Get an identity token by direct grant
+         * @description > This is a user-centric route, so the response will always be in the context of the currently authenticated user.
+         *
+         *     Mints an identity token for the logged-in user against a registered application, without a browser redirect. This is the exec-credential pattern used by kubectl.
+         */
+        get: operations["get-oidc-token-direct"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/api/onboarding/recommended-resources": {
         parameters: {
             query?: never;
@@ -7669,6 +7691,156 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/api/organizations/{organization}/oidc/apps": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * List OIDC applications
+         * @description > This is a system-level route, so the response will be independent of the currently authenticated user.
+         *
+         *     Lists the applications registered for the organization. Requires an organization administrator. Client secrets are never included.
+         */
+        get: operations["list-org-oidc-apps"];
+        put?: never;
+        /**
+         * Register an OIDC application
+         * @description > This is a system-level route, so the response will be independent of the currently authenticated user.
+         *
+         *     Registers an application that uses the platform as its identity provider. Requires an organization administrator. The client ID is generated; it cannot be chosen.
+         */
+        post: operations["create-org-oidc-app"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/organizations/{organization}/oidc/apps/{clientId}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Get an OIDC application
+         * @description > This is a system-level route, so the response will be independent of the currently authenticated user.
+         *
+         *     Returns a single registered application. Requires an organization administrator. Client secrets are never included.
+         */
+        get: operations["get-org-oidc-app"];
+        /**
+         * Update an OIDC application
+         * @description > This is a system-level route, so the response will be independent of the currently authenticated user.
+         *
+         *     Updates a registered application. Requires an organization administrator.
+         */
+        put: operations["update-org-oidc-app"];
+        post?: never;
+        /**
+         * Delete an OIDC application
+         * @description > This is a system-level route, so the response will be independent of the currently authenticated user.
+         *
+         *     Removes a registered application and its client secrets. Requires an organization administrator.
+         */
+        delete: operations["delete-org-oidc-app"];
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/organizations/{organization}/oidc/apps/{clientId}/secrets": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Create a client secret
+         * @description > This is a system-level route, so the response will be independent of the currently authenticated user.
+         *
+         *     Issues a new client secret for the application and returns it. Requires an organization administrator.
+         */
+        post: operations["create-org-oidc-app-secret"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/organizations/{organization}/oidc/apps/{clientId}/secrets/rotate": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Rotate the client secret
+         * @description > This is a system-level route, so the response will be independent of the currently authenticated user.
+         *
+         *     Issues a replacement client secret. Requires an organization administrator. The previous secrets keep working for the overlap window so the application can be updated without an outage.
+         */
+        post: operations["rotate-org-oidc-app-secret"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/organizations/{organization}/oidc/apps/{clientId}/secrets/{secretId}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        post?: never;
+        /**
+         * Delete a client secret
+         * @description > This is a system-level route, so the response will be independent of the currently authenticated user.
+         *
+         *     Removes a client secret immediately. Requires an organization administrator.
+         */
+        delete: operations["delete-org-oidc-app-secret"];
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/organizations/{organization}/oidc/apps/{clientId}/secrets/{secretId}/reveal": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Reveal a client secret
+         * @description > This is a system-level route, so the response will be independent of the currently authenticated user.
+         *
+         *     Returns a stored client secret again. Requires an organization administrator. Every reveal is recorded as an audit event.
+         */
+        post: operations["reveal-org-oidc-app-secret"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/api/organizations/{organization}/owner": {
         parameters: {
             query?: never;
@@ -15686,6 +15858,87 @@ export interface components {
              */
             source: "platform" | "partner" | "organization";
         };
+        AppBody: {
+            /** @description Groups whose members may use the application. Empty means everyone in the organization. */
+            allowedGroups?: string[] | null;
+            /**
+             * @description Whether the user sees a consent screen. Defaults to none.
+             * @enum {string}
+             */
+            consent?: "none" | "required";
+            /** @description What the application is for. */
+            description?: string;
+            /** @description Whether the application is disabled. */
+            disabled?: boolean;
+            /**
+             * @description The application kind. Defaults to web.
+             * @enum {string}
+             */
+            kind?: "web" | "spa" | "native" | "service";
+            /**
+             * @description Whether the application is scoped to one organization or the whole platform. Defaults to organization.
+             * @enum {string}
+             */
+            level?: "organization" | "platform";
+            /** @description The display name of the application. */
+            name: string;
+            /** @description Permitted redirect URIs for the authorization code flow. */
+            redirectUris?: string[] | null;
+            /** @description Scopes the application may request. */
+            scopes?: string[] | null;
+            /**
+             * @description What the sub claim contains. Defaults to userId.
+             * @enum {string}
+             */
+            subjectType?: "userId" | "username";
+        };
+        AppResponse: {
+            /** @description Groups whose members may use the application. Empty means everyone in the organization. */
+            allowedGroups: string[] | null;
+            /** @description The OIDC client_id, generated by the platform. */
+            clientId: string;
+            /**
+             * @description Whether the user sees a consent screen.
+             * @enum {string}
+             */
+            consent: "none" | "required";
+            /**
+             * Format: date-time
+             * @description When the application was registered.
+             */
+            created: string;
+            /** @description What the application is for. */
+            description?: string;
+            /** @description Whether the application is disabled. */
+            disabled: boolean;
+            /** @description The unique identifier for the application. */
+            id: string;
+            /** @description The issuer tokens for this application are minted with. */
+            issuer?: string;
+            /**
+             * @description The application kind.
+             * @enum {string}
+             */
+            kind: "web" | "spa" | "native" | "service";
+            /**
+             * @description Whether the application is scoped to one organization or the whole platform.
+             * @enum {string}
+             */
+            level: "organization" | "platform";
+            /** @description The display name of the application. */
+            name: string;
+            /** @description Permitted redirect URIs for the authorization code flow. */
+            redirectUris: string[] | null;
+            /** @description Scopes the application may request. */
+            scopes: string[] | null;
+            /** @description Client secret metadata. Never includes the secret itself. */
+            secrets: components["schemas"]["SecretInfo"][] | null;
+            /**
+             * @description What the sub claim contains.
+             * @enum {string}
+             */
+            subjectType: "userId" | "username";
+        };
         AssignedOrganization: {
             displayName: string;
             id: string;
@@ -27974,6 +28227,13 @@ export interface components {
             /** @description Subjects with access */
             subjects: components["schemas"]["RbacSubject"][] | null;
         };
+        RotateSecretInputBody: {
+            /**
+             * Format: int64
+             * @description How long the replaced secret keeps working. Defaults to 24 hours; 0 revokes the previous secrets immediately.
+             */
+            overlapHours?: number;
+        };
         RunAlert: {
             /** @description Indicates if runtime alert is enabled for the storage. */
             enabled: boolean;
@@ -28269,6 +28529,40 @@ export interface components {
             queues?: components["schemas"]["SchedulerPartitionData"][] | null;
             schedulerType: string;
         };
+        SecretInfo: {
+            /**
+             * Format: date-time
+             * @description When the secret was created.
+             */
+            created?: string;
+            /**
+             * Format: date-time
+             * @description When a rotated secret stops working.
+             */
+            expiresAt?: string;
+            /** @description Truncated preview of the secret for identification. */
+            hint?: string;
+            /** @description The identifier for this secret. */
+            id: string;
+        };
+        SecretResponse: {
+            /** @description The client secret. */
+            clientSecret: string;
+            /**
+             * Format: date-time
+             * @description When the secret was created.
+             */
+            created?: string;
+            /**
+             * Format: date-time
+             * @description When a rotated secret stops working.
+             */
+            expiresAt?: string;
+            /** @description Truncated preview of the secret. */
+            hint?: string;
+            /** @description The identifier for this secret. */
+            id: string;
+        };
         SentrySettings: {
             /** @description Whether custom DSNs are configured (false means using Parallel Works defaults). */
             customDsn: boolean;
@@ -37936,6 +38230,38 @@ export interface operations {
             };
         };
     };
+    "get-oidc-token-direct": {
+        parameters: {
+            query: {
+                /** @description The client ID of the application to mint a token for */
+                clientId: string;
+            };
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description OK */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": string;
+                };
+            };
+            /** @description Error */
+            default: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+        };
+    };
     getRecommendedResources: {
         parameters: {
             query?: never;
@@ -45605,6 +45931,320 @@ export interface operations {
             };
         };
     };
+    "list-org-oidc-apps": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description The name of the organization. */
+                organization: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description OK */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["AppResponse"][] | null;
+                };
+            };
+            /** @description Error */
+            default: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+        };
+    };
+    "create-org-oidc-app": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description The name of the organization. */
+                organization: string;
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["AppBody"];
+            };
+        };
+        responses: {
+            /** @description Created */
+            201: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["AppResponse"];
+                };
+            };
+            /** @description Error */
+            default: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+        };
+    };
+    "get-org-oidc-app": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description The name of the organization. */
+                organization: string;
+                /** @description The application's client ID */
+                clientId: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description OK */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["AppResponse"];
+                };
+            };
+            /** @description Error */
+            default: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+        };
+    };
+    "update-org-oidc-app": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description The name of the organization. */
+                organization: string;
+                /** @description The application's client ID */
+                clientId: string;
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["AppBody"];
+            };
+        };
+        responses: {
+            /** @description OK */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["AppResponse"];
+                };
+            };
+            /** @description Error */
+            default: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+        };
+    };
+    "delete-org-oidc-app": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description The name of the organization. */
+                organization: string;
+                /** @description The application's client ID */
+                clientId: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description No Content */
+            204: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Error */
+            default: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+        };
+    };
+    "create-org-oidc-app-secret": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description The name of the organization. */
+                organization: string;
+                /** @description The application's client ID */
+                clientId: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Created */
+            201: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["SecretResponse"];
+                };
+            };
+            /** @description Error */
+            default: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+        };
+    };
+    "rotate-org-oidc-app-secret": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description The name of the organization. */
+                organization: string;
+                /** @description The application's client ID */
+                clientId: string;
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["RotateSecretInputBody"];
+            };
+        };
+        responses: {
+            /** @description OK */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["SecretResponse"];
+                };
+            };
+            /** @description Error */
+            default: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+        };
+    };
+    "delete-org-oidc-app-secret": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description The name of the organization. */
+                organization: string;
+                /** @description The application's client ID */
+                clientId: string;
+                /** @description The secret to delete */
+                secretId: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description No Content */
+            204: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Error */
+            default: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+        };
+    };
+    "reveal-org-oidc-app-secret": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description The name of the organization. */
+                organization: string;
+                /** @description The application's client ID */
+                clientId: string;
+                /** @description The secret to reveal */
+                secretId: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description OK */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["SecretResponse"];
+                };
+            };
+            /** @description Error */
+            default: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+        };
+    };
     "set-organization-owner": {
         parameters: {
             query?: never;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@parallelworks/client",
-  "version": "7.95.0",
+  "version": "7.95.1",
   "description": "Official TypeScript client for Parallel Works ACTIVATE API",
   "type": "module",
   "exports": {