@puku-ai/sdk 4.0.0 → 4.0.2

package/dist/vendor/resources/beta/organization/organization.js

@@ -0,0 +1,54 @@
+// File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
+import { APIResource } from '../../../core/resource.js';
+import * as APIKeysAPI from './api-keys.js';
+import { APIKeys, } from './api-keys.js';
+import * as ComplianceSettingsAPI from './compliance-settings.js';
+import { ComplianceSettings, } from './compliance-settings.js';
+import * as ExternalKeysAPI from './external-keys.js';
+import { ExternalKeys, } from './external-keys.js';
+import * as InvitesAPI from './invites.js';
+import { Invites, } from './invites.js';
+import * as RateLimitsAPI from './rate-limits.js';
+import { RateLimits, } from './rate-limits.js';
+import * as UsersAPI from './users.js';
+import { Users, } from './users.js';
+import * as FederationAPI from './federation/federation.js';
+import { Federation } from './federation/federation.js';
+import * as ServiceAccountsAPI from './service-accounts/service-accounts.js';
+import { ServiceAccounts, } from './service-accounts/service-accounts.js';
+import * as WorkspacesAPI from './workspaces/workspaces.js';
+import { Workspaces, } from './workspaces/workspaces.js';
+export class Organization extends APIResource {
+    apiKeys = new APIKeysAPI.APIKeys(this._client);
+    externalKeys = new ExternalKeysAPI.ExternalKeys(this._client);
+    federation = new FederationAPI.Federation(this._client);
+    invites = new InvitesAPI.Invites(this._client);
+    serviceAccounts = new ServiceAccountsAPI.ServiceAccounts(this._client);
+    users = new UsersAPI.Users(this._client);
+    workspaces = new WorkspacesAPI.Workspaces(this._client);
+    rateLimits = new RateLimitsAPI.RateLimits(this._client);
+    complianceSettings = new ComplianceSettingsAPI.ComplianceSettings(this._client);
+    /**
+     * Retrieve information about the organization associated with the authenticated
+     * API key.
+     *
+     * @example
+     * ```ts
+     * const betaOrganization =
+     *   await client.beta.organization.retrieve();
+     * ```
+     */
+    retrieve(options) {
+        return this._client.get('/v1/organizations/me?beta=true', options);
+    }
+}
+Organization.APIKeys = APIKeys;
+Organization.ExternalKeys = ExternalKeys;
+Organization.Federation = Federation;
+Organization.Invites = Invites;
+Organization.ServiceAccounts = ServiceAccounts;
+Organization.Users = Users;
+Organization.Workspaces = Workspaces;
+Organization.RateLimits = RateLimits;
+Organization.ComplianceSettings = ComplianceSettings;
+//# sourceMappingURL=organization.js.map

package/dist/vendor/resources/beta/organization/organization.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"organization.js","sourceRoot":"","sources":["../../../../../src/vendor/resources/beta/organization/organization.ts"],"names":[],"mappings":"AAAA,sFAAsF;AAEtF,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,KAAK,UAAU,MAAM,YAAY,CAAC;AACzC,OAAO,EAGL,OAAO,GAQR,MAAM,YAAY,CAAC;AACpB,OAAO,KAAK,qBAAqB,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAOL,kBAAkB,GACnB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,eAAe,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAcL,YAAY,GACb,MAAM,iBAAiB,CAAC;AACzB,OAAO,KAAK,UAAU,MAAM,WAAW,CAAC;AACxC,OAAO,EAML,OAAO,GACR,MAAM,WAAW,CAAC;AACnB,OAAO,KAAK,aAAa,MAAM,eAAe,CAAC;AAC/C,OAAO,EAKL,UAAU,GACX,MAAM,eAAe,CAAC;AACvB,OAAO,KAAK,QAAQ,MAAM,SAAS,CAAC;AACpC,OAAO,EAML,KAAK,GACN,MAAM,SAAS,CAAC;AACjB,OAAO,KAAK,aAAa,MAAM,yBAAyB,CAAC;AACzD,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AACrD,OAAO,KAAK,kBAAkB,MAAM,qCAAqC,CAAC;AAC1E,OAAO,EASL,eAAe,GAChB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,KAAK,aAAa,MAAM,yBAAyB,CAAC;AACzD,OAAO,EAaL,UAAU,GACX,MAAM,yBAAyB,CAAC;AAIjC,MAAM,OAAO,YAAa,SAAQ,WAAW;IAC3C,OAAO,GAAuB,IAAI,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACnE,YAAY,GAAiC,IAAI,eAAe,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC5F,UAAU,GAA6B,IAAI,aAAa,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAClF,OAAO,GAAuB,IAAI,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACnE,eAAe,GAAuC,IAAI,kBAAkB,CAAC,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC3G,KAAK,GAAmB,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACzD,UAAU,GAA6B,IAAI,aAAa,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAClF,UAAU,GAA6B,IAAI,aAAa,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAClF,kBAAkB,GAA6C,IAAI,qBAAqB,CAAC,kBAAkB,CACzG,IAAI,CAAC,OAAO,CACb,CAAC;IAEF;;;;;;;;;OASG;IACH,QAAQ,CAAC,OAAwB;QAC/B,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,gCAAgC,EAAE,OAAO,CAAC,CAAC;IACrE,CAAC;CACF;AAgCD,YAAY,CAAC,OAAO,GAAG,OAAO,CAAC;AAC/B,YAAY,CAAC,YAAY,GAAG,YAAY,CAAC;AACzC,YAAY,CAAC,UAAU,GAAG,UAAU,CAAC;AACrC,YAAY,CAAC,OAAO,GAAG,OAAO,CAAC;AAC/B,YAAY,CAAC,eAAe,GAAG,eAAe,CAAC;AAC/C,YAAY,CAAC,KAAK,GAAG,KAAK,CAAC;AAC3B,YAAY,CAAC,UAAU,GAAG,UAAU,CAAC;AACrC,YAAY,CAAC,UAAU,GAAG,UAAU,CAAC;AACrC,YAAY,CAAC,kBAAkB,GAAG,kBAAkB,CAAC"}

package/dist/vendor/resources/beta/organization/rate-limits.d.ts

@@ -0,0 +1,76 @@
+import { APIResource } from '../../../core/resource';
+import { PageCursor, type PageCursorParams, PagePromise } from '../../../core/pagination';
+import { RequestOptions } from '../../../internal/request-options';
+export declare class RateLimits extends APIResource {
+    /**
+     * List Messages API rate limits for your organization.
+     *
+     * Each entry corresponds to one rate-limit group (either a model family or an
+     * API-surface category such as the Files API or Message Batches) and contains the
+     * set of limiter values that apply to it.
+     *
+     * When `limit` is omitted, every matching entry is returned in a single page; when
+     * `limit` truncates the result, follow `next_page` to fetch the remaining entries.
+     *
+     * @example
+     * ```ts
+     * // Automatically fetches more pages as needed.
+     * for await (const betaOrganizationRateLimit of client.beta.organization.rateLimits.list()) {
+     *   // ...
+     * }
+     * ```
+     */
+    list(query?: RateLimitListParams | null | undefined, options?: RequestOptions): PagePromise<BetaOrganizationRateLimitsPageCursor, BetaOrganizationRateLimit>;
+}
+export type BetaOrganizationRateLimitsPageCursor = PageCursor<BetaOrganizationRateLimit>;
+export interface BetaOrganizationRateLimit {
+    /**
+     * Stable identifier for this rate-limit group within the organization.
+     */
+    id: string;
+    /**
+     * The kind of rate-limit group this entry represents. `model_group` entries apply
+     * to a family of models (listed in `models`); other values apply to an API-surface
+     * category and have `models` set to `null`.
+     */
+    group_type: 'batch' | 'files' | 'model_group' | 'skills' | 'token_count' | 'web_search';
+    /**
+     * The limiter values that apply to this group.
+     */
+    limits: Array<BetaOrganizationRateLimitValue>;
+    /**
+     * Model names this entry's limits apply to, including aliases. `null` when
+     * `group_type` is not `"model_group"`.
+     */
+    models: Array<string> | null;
+    /**
+     * Object type. Always `rate_limit` for organization rate-limit entries.
+     */
+    type: 'rate_limit';
+}
+export interface BetaOrganizationRateLimitValue {
+    /**
+     * The limiter type (for example, `requests_per_minute` or
+     * `input_tokens_per_minute`).
+     */
+    type: string;
+    /**
+     * The configured limit value for this limiter type.
+     */
+    value: number;
+}
+export interface RateLimitListParams extends PageCursorParams {
+    /**
+     * Filter by group type.
+     */
+    group_type?: 'batch' | 'files' | 'model_group' | 'skills' | 'token_count' | 'web_search' | null;
+    /**
+     * Filter to the single entry containing this model. Accepts full model names and
+     * aliases. Returns 404 if the model is not found or has no rate limits for this
+     * organization.
+     */
+    model?: string | null;
+}
+export declare namespace RateLimits {
+    export { type BetaOrganizationRateLimit as BetaOrganizationRateLimit, type BetaOrganizationRateLimitValue as BetaOrganizationRateLimitValue, type BetaOrganizationRateLimitsPageCursor as BetaOrganizationRateLimitsPageCursor, type RateLimitListParams as RateLimitListParams, };
+}

package/dist/vendor/resources/beta/organization/rate-limits.js

@@ -0,0 +1,27 @@
+// File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
+import { APIResource } from '../../../core/resource.js';
+import { PageCursor } from '../../../core/pagination.js';
+export class RateLimits extends APIResource {
+    /**
+     * List Messages API rate limits for your organization.
+     *
+     * Each entry corresponds to one rate-limit group (either a model family or an
+     * API-surface category such as the Files API or Message Batches) and contains the
+     * set of limiter values that apply to it.
+     *
+     * When `limit` is omitted, every matching entry is returned in a single page; when
+     * `limit` truncates the result, follow `next_page` to fetch the remaining entries.
+     *
+     * @example
+     * ```ts
+     * // Automatically fetches more pages as needed.
+     * for await (const betaOrganizationRateLimit of client.beta.organization.rateLimits.list()) {
+     *   // ...
+     * }
+     * ```
+     */
+    list(query = {}, options) {
+        return this._client.getAPIList('/v1/organizations/rate_limits?beta=true', (PageCursor), { query, ...options });
+    }
+}
+//# sourceMappingURL=rate-limits.js.map

package/dist/vendor/resources/beta/organization/rate-limits.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limits.js","sourceRoot":"","sources":["../../../../../src/vendor/resources/beta/organization/rate-limits.ts"],"names":[],"mappings":"AAAA,sFAAsF;AAEtF,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,EAAE,UAAU,EAAsC,MAAM,0BAA0B,CAAC;AAG1F,MAAM,OAAO,UAAW,SAAQ,WAAW;IACzC;;;;;;;;;;;;;;;;;OAiBG;IACH,IAAI,CACF,QAAgD,EAAE,EAClD,OAAwB;QAExB,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAC5B,yCAAyC,EACzC,CAAA,UAAqC,CAAA,EACrC,EAAE,KAAK,EAAE,GAAG,OAAO,EAAE,CACtB,CAAC;IACJ,CAAC;CACF"}

package/dist/vendor/resources/beta/organization/service-accounts/index.d.ts

@@ -0,0 +1,2 @@
+export { ServiceAccounts, type BetaServiceAccount, type BetaServiceAccountWorkspaceMember, type ServiceAccountCreateParams, type ServiceAccountRetrieveParams, type ServiceAccountUpdateParams, type ServiceAccountListParams, type ServiceAccountArchiveParams, type BetaServiceAccountWorkspaceMembersPageCursor, type BetaServiceAccountsPageCursor, } from './service-accounts';
+export { Workspaces, type WorkspaceRemoveResponse, type WorkspaceListParams, type WorkspaceAddParams, type WorkspaceRemoveParams, } from './workspaces';

package/dist/vendor/resources/beta/organization/service-accounts/index.js

@@ -0,0 +1,4 @@
+// File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
+export { ServiceAccounts, } from './service-accounts.js';
+export { Workspaces, } from './workspaces.js';
+//# sourceMappingURL=index.js.map

package/dist/vendor/resources/beta/organization/service-accounts/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../src/vendor/resources/beta/organization/service-accounts/index.ts"],"names":[],"mappings":"AAAA,sFAAsF;AAEtF,OAAO,EACL,eAAe,GAUhB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,UAAU,GAKX,MAAM,cAAc,CAAC"}

package/dist/vendor/resources/beta/organization/service-accounts/service-accounts.d.ts

@@ -0,0 +1,257 @@
+import { APIResource } from '../../../../core/resource';
+import * as BetaAPI from '../../beta';
+import * as WorkspacesAPI from './workspaces';
+import { WorkspaceAddParams, WorkspaceListParams, WorkspaceRemoveParams, WorkspaceRemoveResponse, Workspaces } from './workspaces';
+import * as OrganizationWorkspacesAPI from '../workspaces/workspaces';
+import { APIPromise } from '../../../../core/api-promise';
+import { PageCursor, type PageCursorParams, PagePromise } from '../../../../core/pagination';
+import { RequestOptions } from '../../../../internal/request-options';
+export declare class ServiceAccounts extends APIResource {
+    workspaces: WorkspacesAPI.Workspaces;
+    /**
+     * **Requires an OAuth access token with the `org:admin` scope**, from
+     * `ant auth login --scope org:admin` or a workload identity federation rule; Admin
+     * API keys are not accepted. See
+     * [Manage WIF with the Admin API](/docs/en/manage-puku/wif-admin-api).
+     *
+     * Create a service account.
+     *
+     * A service account is a named workload identity that federation rules target.
+     * `organization_role` is `developer` (default) or `admin`; a rule may only be
+     * created or retargeted to grant `org:admin` scope when the target's
+     * `organization_role` is `admin`. Creating an `admin`-role service account
+     * requires an interactive credential (a user OAuth token or a Console session) — a
+     * workload may only create `developer`-role service accounts.
+     *
+     * @example
+     * ```ts
+     * const betaServiceAccount =
+     *   await client.beta.organization.serviceAccounts.create({
+     *     name: 'ci-deploy-bot',
+     *   });
+     * ```
+     */
+    create(params: ServiceAccountCreateParams, options?: RequestOptions): APIPromise<BetaServiceAccount>;
+    /**
+     * **Requires an OAuth access token with the `org:admin` scope**, from
+     * `ant auth login --scope org:admin` or a workload identity federation rule; Admin
+     * API keys are not accepted. See
+     * [Manage WIF with the Admin API](/docs/en/manage-puku/wif-admin-api).
+     *
+     * Retrieve a service account by its ID (`svac_...`).
+     *
+     * @example
+     * ```ts
+     * const betaServiceAccount =
+     *   await client.beta.organization.serviceAccounts.retrieve(
+     *     'service_account_id',
+     *   );
+     * ```
+     */
+    retrieve(serviceAccountID: string, params?: ServiceAccountRetrieveParams | null | undefined, options?: RequestOptions): APIPromise<BetaServiceAccount>;
+    /**
+     * **Requires an OAuth access token with the `org:admin` scope**, from
+     * `ant auth login --scope org:admin` or a workload identity federation rule; Admin
+     * API keys are not accepted. See
+     * [Manage WIF with the Admin API](/docs/en/manage-puku/wif-admin-api).
+     *
+     * Update a service account.
+     *
+     * Only `description` and `organization_role` are mutable; `name` cannot be
+     * changed. Archived service accounts cannot be updated; this returns 400. Setting
+     * `organization_role` to `admin` (even when unchanged) requires an interactive
+     * credential (a user OAuth token or a Console session).
+     *
+     * @example
+     * ```ts
+     * const betaServiceAccount =
+     *   await client.beta.organization.serviceAccounts.update(
+     *     'service_account_id',
+     *   );
+     * ```
+     */
+    update(serviceAccountID: string, params: ServiceAccountUpdateParams, options?: RequestOptions): APIPromise<BetaServiceAccount>;
+    /**
+     * **Requires an OAuth access token with the `org:admin` scope**, from
+     * `ant auth login --scope org:admin` or a workload identity federation rule; Admin
+     * API keys are not accepted. See
+     * [Manage WIF with the Admin API](/docs/en/manage-puku/wif-admin-api).
+     *
+     * List service accounts in the caller's organization.
+     *
+     * Results are ordered by creation time, newest first. Use `limit` and the
+     * `next_page` cursor to paginate; set `include_archived=true` to include archived
+     * service accounts.
+     *
+     * @example
+     * ```ts
+     * // Automatically fetches more pages as needed.
+     * for await (const betaServiceAccount of client.beta.organization.serviceAccounts.list()) {
+     *   // ...
+     * }
+     * ```
+     */
+    list(params?: ServiceAccountListParams | null | undefined, options?: RequestOptions): PagePromise<BetaServiceAccountsPageCursor, BetaServiceAccount>;
+    /**
+     * **Requires an OAuth access token with the `org:admin` scope**, from
+     * `ant auth login --scope org:admin` or a workload identity federation rule; Admin
+     * API keys are not accepted. See
+     * [Manage WIF with the Admin API](/docs/en/manage-puku/wif-admin-api).
+     *
+     * Archive a service account.
+     *
+     * Idempotent; re-archiving returns the service account with its original
+     * `archived_at`. Rejected with 400 if any live (non-archived) federation rule
+     * still targets this service account, same as issuer archival; archive those rules
+     * first or change their target to another service account.
+     *
+     * @example
+     * ```ts
+     * const betaServiceAccount =
+     *   await client.beta.organization.serviceAccounts.archive(
+     *     'service_account_id',
+     *   );
+     * ```
+     */
+    archive(serviceAccountID: string, params?: ServiceAccountArchiveParams | null | undefined, options?: RequestOptions): APIPromise<BetaServiceAccount>;
+}
+export type BetaServiceAccountsPageCursor = PageCursor<BetaServiceAccount>;
+export type BetaServiceAccountWorkspaceMembersPageCursor = PageCursor<BetaServiceAccountWorkspaceMember>;
+/**
+ * Named non-human identity within the caller's organization.
+ *
+ * A service account is a pure identity: name + org. Authorization lives on
+ * whatever references it (federation rules).
+ */
+export interface BetaServiceAccount {
+    /**
+     * Tagged ID of the service account.
+     */
+    id: string;
+    /**
+     * If set, this service account is archived.
+     */
+    archived_at: string | null;
+    /**
+     * Tagged ID (`user_`/`svac_`) of the actor that archived this service account.
+     */
+    archived_by_actor_id: string | null;
+    /**
+     * When this service account was created.
+     */
+    created_at: string;
+    /**
+     * Tagged ID (`user_`/`svac_`) of the actor that created this service account.
+     */
+    created_by_actor_id: string | null;
+    /**
+     * Optional free-text description.
+     */
+    description: string | null;
+    /**
+     * Admin-chosen slug identifier.
+     */
+    name: string;
+    /**
+     * Org-level role. A federation rule may only be created or retargeted to grant
+     * `org:admin` scope when this is `admin`. A rule granting `org:admin` whose target
+     * is later demoted to `developer` is rejected at token exchange. Rules granting
+     * `org:admin` are managed in the Console.
+     */
+    organization_role: 'admin' | 'developer';
+    type: 'service_account';
+    /**
+     * When this service account was last updated.
+     */
+    updated_at: string;
+    /**
+     * Tagged ID (`user_`/`svac_`) of the actor that last updated this service account.
+     */
+    updated_by_actor_id: string | null;
+}
+export interface BetaServiceAccountWorkspaceMember {
+    /**
+     * Tagged ID (`user_...`/`svac_...`) of the actor who created this membership.
+     */
+    created_by_actor_id: string | null;
+    /**
+     * True when this is the implicit default-workspace membership every service
+     * account has when no explicit membership exists. Implicit memberships have role
+     * `workspace_user` and cannot be removed.
+     */
+    implicit: boolean | null;
+    /**
+     * Tagged service account ID (`svac_...`).
+     */
+    service_account_id: string;
+    type: 'service_account_workspace_member';
+    /**
+     * Tagged workspace ID (`wrkspc_...`).
+     */
+    workspace_id: string;
+    /**
+     * Role of the service account in this workspace. Service accounts cannot hold the
+     * `workspace_billing` role.
+     */
+    workspace_role: OrganizationWorkspacesAPI.BetaWorkspaceRole;
+}
+export interface ServiceAccountCreateParams {
+    /**
+     * Body param: Slug identifier (lowercase, digits, hyphens). Unique within the
+     * organization; a duplicate name returns 409.
+     */
+    name: string;
+    /**
+     * Body param: Optional free-text description.
+     */
+    description?: string | null;
+    /**
+     * Body param: Org-level role. Defaults to `developer`.
+     */
+    organization_role?: 'admin' | 'developer';
+    /**
+     * Header param: Optional header to specify the beta version(s) you want to use.
+     */
+    betas?: Array<BetaAPI.PukuBeta>;
+}
+export interface ServiceAccountRetrieveParams {
+    /**
+     * Optional header to specify the beta version(s) you want to use.
+     */
+    betas?: Array<BetaAPI.PukuBeta>;
+}
+export interface ServiceAccountUpdateParams {
+    /**
+     * Body param: Replaces the description. Omit to leave unchanged; send `null` to
+     * clear (the field is stored as an empty string).
+     */
+    description?: string | null;
+    /**
+     * Body param: Replaces the org-level role. Omit or send `null` to leave unchanged.
+     */
+    organization_role?: 'admin' | 'developer' | null;
+    /**
+     * Header param: Optional header to specify the beta version(s) you want to use.
+     */
+    betas?: Array<BetaAPI.PukuBeta>;
+}
+export interface ServiceAccountListParams extends PageCursorParams {
+    /**
+     * Query param: Include archived resources. Defaults to false.
+     */
+    include_archived?: boolean;
+    /**
+     * Header param: Optional header to specify the beta version(s) you want to use.
+     */
+    betas?: Array<BetaAPI.PukuBeta>;
+}
+export interface ServiceAccountArchiveParams {
+    /**
+     * Optional header to specify the beta version(s) you want to use.
+     */
+    betas?: Array<BetaAPI.PukuBeta>;
+}
+export declare namespace ServiceAccounts {
+    export { type BetaServiceAccount as BetaServiceAccount, type BetaServiceAccountWorkspaceMember as BetaServiceAccountWorkspaceMember, type BetaServiceAccountsPageCursor as BetaServiceAccountsPageCursor, type ServiceAccountCreateParams as ServiceAccountCreateParams, type ServiceAccountRetrieveParams as ServiceAccountRetrieveParams, type ServiceAccountUpdateParams as ServiceAccountUpdateParams, type ServiceAccountListParams as ServiceAccountListParams, type ServiceAccountArchiveParams as ServiceAccountArchiveParams, };
+    export { Workspaces as Workspaces, type WorkspaceRemoveResponse as WorkspaceRemoveResponse, type WorkspaceListParams as WorkspaceListParams, type WorkspaceAddParams as WorkspaceAddParams, type WorkspaceRemoveParams as WorkspaceRemoveParams, };
+}

package/dist/vendor/resources/beta/organization/service-accounts/service-accounts.js

@@ -0,0 +1,166 @@
+// File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
+import { APIResource } from '../../../../core/resource.js';
+import * as WorkspacesAPI from './workspaces.js';
+import { Workspaces, } from './workspaces.js';
+import { PageCursor } from '../../../../core/pagination.js';
+import { buildHeaders } from '../../../../internal/headers.js';
+import { path } from '../../../../internal/utils/path.js';
+export class ServiceAccounts extends APIResource {
+    workspaces = new WorkspacesAPI.Workspaces(this._client);
+    /**
+     * **Requires an OAuth access token with the `org:admin` scope**, from
+     * `ant auth login --scope org:admin` or a workload identity federation rule; Admin
+     * API keys are not accepted. See
+     * [Manage WIF with the Admin API](/docs/en/manage-puku/wif-admin-api).
+     *
+     * Create a service account.
+     *
+     * A service account is a named workload identity that federation rules target.
+     * `organization_role` is `developer` (default) or `admin`; a rule may only be
+     * created or retargeted to grant `org:admin` scope when the target's
+     * `organization_role` is `admin`. Creating an `admin`-role service account
+     * requires an interactive credential (a user OAuth token or a Console session) — a
+     * workload may only create `developer`-role service accounts.
+     *
+     * @example
+     * ```ts
+     * const betaServiceAccount =
+     *   await client.beta.organization.serviceAccounts.create({
+     *     name: 'ci-deploy-bot',
+     *   });
+     * ```
+     */
+    create(params, options) {
+        const { betas, ...body } = params;
+        return this._client.post('/v1/organizations/service_accounts?beta=true', {
+            body,
+            ...options,
+            headers: buildHeaders([
+                { ...(betas?.toString() != null ? { 'puku-beta': betas?.toString() } : undefined) },
+                options?.headers,
+            ]),
+        });
+    }
+    /**
+     * **Requires an OAuth access token with the `org:admin` scope**, from
+     * `ant auth login --scope org:admin` or a workload identity federation rule; Admin
+     * API keys are not accepted. See
+     * [Manage WIF with the Admin API](/docs/en/manage-puku/wif-admin-api).
+     *
+     * Retrieve a service account by its ID (`svac_...`).
+     *
+     * @example
+     * ```ts
+     * const betaServiceAccount =
+     *   await client.beta.organization.serviceAccounts.retrieve(
+     *     'service_account_id',
+     *   );
+     * ```
+     */
+    retrieve(serviceAccountID, params = {}, options) {
+        const { betas } = params ?? {};
+        return this._client.get(path `/v1/organizations/service_accounts/${serviceAccountID}?beta=true`, {
+            ...options,
+            headers: buildHeaders([
+                { ...(betas?.toString() != null ? { 'puku-beta': betas?.toString() } : undefined) },
+                options?.headers,
+            ]),
+        });
+    }
+    /**
+     * **Requires an OAuth access token with the `org:admin` scope**, from
+     * `ant auth login --scope org:admin` or a workload identity federation rule; Admin
+     * API keys are not accepted. See
+     * [Manage WIF with the Admin API](/docs/en/manage-puku/wif-admin-api).
+     *
+     * Update a service account.
+     *
+     * Only `description` and `organization_role` are mutable; `name` cannot be
+     * changed. Archived service accounts cannot be updated; this returns 400. Setting
+     * `organization_role` to `admin` (even when unchanged) requires an interactive
+     * credential (a user OAuth token or a Console session).
+     *
+     * @example
+     * ```ts
+     * const betaServiceAccount =
+     *   await client.beta.organization.serviceAccounts.update(
+     *     'service_account_id',
+     *   );
+     * ```
+     */
+    update(serviceAccountID, params, options) {
+        const { betas, ...body } = params;
+        return this._client.post(path `/v1/organizations/service_accounts/${serviceAccountID}?beta=true`, {
+            body,
+            ...options,
+            headers: buildHeaders([
+                { ...(betas?.toString() != null ? { 'puku-beta': betas?.toString() } : undefined) },
+                options?.headers,
+            ]),
+        });
+    }
+    /**
+     * **Requires an OAuth access token with the `org:admin` scope**, from
+     * `ant auth login --scope org:admin` or a workload identity federation rule; Admin
+     * API keys are not accepted. See
+     * [Manage WIF with the Admin API](/docs/en/manage-puku/wif-admin-api).
+     *
+     * List service accounts in the caller's organization.
+     *
+     * Results are ordered by creation time, newest first. Use `limit` and the
+     * `next_page` cursor to paginate; set `include_archived=true` to include archived
+     * service accounts.
+     *
+     * @example
+     * ```ts
+     * // Automatically fetches more pages as needed.
+     * for await (const betaServiceAccount of client.beta.organization.serviceAccounts.list()) {
+     *   // ...
+     * }
+     * ```
+     */
+    list(params = {}, options) {
+        const { betas, ...query } = params ?? {};
+        return this._client.getAPIList('/v1/organizations/service_accounts?beta=true', (PageCursor), {
+            query,
+            ...options,
+            headers: buildHeaders([
+                { ...(betas?.toString() != null ? { 'puku-beta': betas?.toString() } : undefined) },
+                options?.headers,
+            ]),
+        });
+    }
+    /**
+     * **Requires an OAuth access token with the `org:admin` scope**, from
+     * `ant auth login --scope org:admin` or a workload identity federation rule; Admin
+     * API keys are not accepted. See
+     * [Manage WIF with the Admin API](/docs/en/manage-puku/wif-admin-api).
+     *
+     * Archive a service account.
+     *
+     * Idempotent; re-archiving returns the service account with its original
+     * `archived_at`. Rejected with 400 if any live (non-archived) federation rule
+     * still targets this service account, same as issuer archival; archive those rules
+     * first or change their target to another service account.
+     *
+     * @example
+     * ```ts
+     * const betaServiceAccount =
+     *   await client.beta.organization.serviceAccounts.archive(
+     *     'service_account_id',
+     *   );
+     * ```
+     */
+    archive(serviceAccountID, params = {}, options) {
+        const { betas } = params ?? {};
+        return this._client.post(path `/v1/organizations/service_accounts/${serviceAccountID}/archive?beta=true`, {
+            ...options,
+            headers: buildHeaders([
+                { ...(betas?.toString() != null ? { 'puku-beta': betas?.toString() } : undefined) },
+                options?.headers,
+            ]),
+        });
+    }
+}
+ServiceAccounts.Workspaces = Workspaces;
+//# sourceMappingURL=service-accounts.js.map

package/dist/vendor/resources/beta/organization/service-accounts/service-accounts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service-accounts.js","sourceRoot":"","sources":["../../../../../../src/vendor/resources/beta/organization/service-accounts/service-accounts.ts"],"names":[],"mappings":"AAAA,sFAAsF;AAEtF,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAExD,OAAO,KAAK,aAAa,MAAM,cAAc,CAAC;AAC9C,OAAO,EAKL,UAAU,GACX,MAAM,cAAc,CAAC;AAGtB,OAAO,EAAE,UAAU,EAAsC,MAAM,6BAA6B,CAAC;AAC7F,OAAO,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAE5D,OAAO,EAAE,IAAI,EAAE,MAAM,iCAAiC,CAAC;AAEvD,MAAM,OAAO,eAAgB,SAAQ,WAAW;IAC9C,UAAU,GAA6B,IAAI,aAAa,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAElF;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACH,MAAM,CAAC,MAAkC,EAAE,OAAwB;QACjE,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,GAAG,MAAM,CAAC;QAClC,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,8CAA8C,EAAE;YACvE,IAAI;YACJ,GAAG,OAAO;YACV,OAAO,EAAE,YAAY,CAAC;gBACpB,EAAE,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE;gBACnF,OAAO,EAAE,OAAO;aACjB,CAAC;SACH,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACH,QAAQ,CACN,gBAAwB,EACxB,SAA0D,EAAE,EAC5D,OAAwB;QAExB,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,EAAE,CAAC;QAC/B,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAA,sCAAsC,gBAAgB,YAAY,EAAE;YAC9F,GAAG,OAAO;YACV,OAAO,EAAE,YAAY,CAAC;gBACpB,EAAE,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE;gBACnF,OAAO,EAAE,OAAO;aACjB,CAAC;SACH,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,MAAM,CACJ,gBAAwB,EACxB,MAAkC,EAClC,OAAwB;QAExB,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,GAAG,MAAM,CAAC;QAClC,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAA,sCAAsC,gBAAgB,YAAY,EAAE;YAC/F,IAAI;YACJ,GAAG,OAAO;YACV,OAAO,EAAE,YAAY,CAAC;gBACpB,EAAE,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE;gBACnF,OAAO,EAAE,OAAO;aACjB,CAAC;SACH,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;;;;;;;;;;;OAmBG;IACH,IAAI,CACF,SAAsD,EAAE,EACxD,OAAwB;QAExB,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,EAAE,GAAG,MAAM,IAAI,EAAE,CAAC;QACzC,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAC5B,8CAA8C,EAC9C,CAAA,UAA8B,CAAA,EAC9B;YACE,KAAK;YACL,GAAG,OAAO;YACV,OAAO,EAAE,YAAY,CAAC;gBACpB,EAAE,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE;gBACnF,OAAO,EAAE,OAAO;aACjB,CAAC;SACH,CACF,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,OAAO,CACL,gBAAwB,EACxB,SAAyD,EAAE,EAC3D,OAAwB;QAExB,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,EAAE,CAAC;QAC/B,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAA,sCAAsC,gBAAgB,oBAAoB,EAAE;YACvG,GAAG,OAAO;YACV,OAAO,EAAE,YAAY,CAAC;gBACpB,EAAE,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE;gBACnF,OAAO,EAAE,OAAO;aACjB,CAAC;SACH,CAAC,CAAC;IACL,CAAC;CACF;AAwKD,eAAe,CAAC,UAAU,GAAG,UAAU,CAAC"}