@puku-ai/sdk 4.0.3 → 4.0.4

package/dist/vendor/resources/beta/organization/service-accounts/service-accounts.cjs

@@ -0,0 +1,202 @@
+"use strict";
+// File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ServiceAccounts = void 0;
+const resource_1 = require("../../../../core/resource");
+const WorkspacesAPI = __importStar(require("./workspaces"));
+const workspaces_1 = require("./workspaces");
+const pagination_1 = require("../../../../core/pagination");
+const headers_1 = require("../../../../internal/headers");
+const path_1 = require("../../../../internal/utils/path");
+class ServiceAccounts extends resource_1.APIResource {
+    workspaces = new WorkspacesAPI.Workspaces(this._client);
+    /**
+     * **Requires an OAuth access token with the `org:admin` scope**, from
+     * `ant auth login --scope org:admin` or a workload identity federation rule; Admin
+     * API keys are not accepted. See
+     * [Manage WIF with the Admin API](/docs/en/manage-puku/wif-admin-api).
+     *
+     * Create a service account.
+     *
+     * A service account is a named workload identity that federation rules target.
+     * `organization_role` is `developer` (default) or `admin`; a rule may only be
+     * created or retargeted to grant `org:admin` scope when the target's
+     * `organization_role` is `admin`. Creating an `admin`-role service account
+     * requires an interactive credential (a user OAuth token or a Console session) — a
+     * workload may only create `developer`-role service accounts.
+     *
+     * @example
+     * ```ts
+     * const betaServiceAccount =
+     *   await client.beta.organization.serviceAccounts.create({
+     *     name: 'ci-deploy-bot',
+     *   });
+     * ```
+     */
+    create(params, options) {
+        const { betas, ...body } = params;
+        return this._client.post('/v1/organizations/service_accounts?beta=true', {
+            body,
+            ...options,
+            headers: (0, headers_1.buildHeaders)([
+                { ...(betas?.toString() != null ? { 'puku-beta': betas?.toString() } : undefined) },
+                options?.headers,
+            ]),
+        });
+    }
+    /**
+     * **Requires an OAuth access token with the `org:admin` scope**, from
+     * `ant auth login --scope org:admin` or a workload identity federation rule; Admin
+     * API keys are not accepted. See
+     * [Manage WIF with the Admin API](/docs/en/manage-puku/wif-admin-api).
+     *
+     * Retrieve a service account by its ID (`svac_...`).
+     *
+     * @example
+     * ```ts
+     * const betaServiceAccount =
+     *   await client.beta.organization.serviceAccounts.retrieve(
+     *     'service_account_id',
+     *   );
+     * ```
+     */
+    retrieve(serviceAccountID, params = {}, options) {
+        const { betas } = params ?? {};
+        return this._client.get((0, path_1.path) `/v1/organizations/service_accounts/${serviceAccountID}?beta=true`, {
+            ...options,
+            headers: (0, headers_1.buildHeaders)([
+                { ...(betas?.toString() != null ? { 'puku-beta': betas?.toString() } : undefined) },
+                options?.headers,
+            ]),
+        });
+    }
+    /**
+     * **Requires an OAuth access token with the `org:admin` scope**, from
+     * `ant auth login --scope org:admin` or a workload identity federation rule; Admin
+     * API keys are not accepted. See
+     * [Manage WIF with the Admin API](/docs/en/manage-puku/wif-admin-api).
+     *
+     * Update a service account.
+     *
+     * Only `description` and `organization_role` are mutable; `name` cannot be
+     * changed. Archived service accounts cannot be updated; this returns 400. Setting
+     * `organization_role` to `admin` (even when unchanged) requires an interactive
+     * credential (a user OAuth token or a Console session).
+     *
+     * @example
+     * ```ts
+     * const betaServiceAccount =
+     *   await client.beta.organization.serviceAccounts.update(
+     *     'service_account_id',
+     *   );
+     * ```
+     */
+    update(serviceAccountID, params, options) {
+        const { betas, ...body } = params;
+        return this._client.post((0, path_1.path) `/v1/organizations/service_accounts/${serviceAccountID}?beta=true`, {
+            body,
+            ...options,
+            headers: (0, headers_1.buildHeaders)([
+                { ...(betas?.toString() != null ? { 'puku-beta': betas?.toString() } : undefined) },
+                options?.headers,
+            ]),
+        });
+    }
+    /**
+     * **Requires an OAuth access token with the `org:admin` scope**, from
+     * `ant auth login --scope org:admin` or a workload identity federation rule; Admin
+     * API keys are not accepted. See
+     * [Manage WIF with the Admin API](/docs/en/manage-puku/wif-admin-api).
+     *
+     * List service accounts in the caller's organization.
+     *
+     * Results are ordered by creation time, newest first. Use `limit` and the
+     * `next_page` cursor to paginate; set `include_archived=true` to include archived
+     * service accounts.
+     *
+     * @example
+     * ```ts
+     * // Automatically fetches more pages as needed.
+     * for await (const betaServiceAccount of client.beta.organization.serviceAccounts.list()) {
+     *   // ...
+     * }
+     * ```
+     */
+    list(params = {}, options) {
+        const { betas, ...query } = params ?? {};
+        return this._client.getAPIList('/v1/organizations/service_accounts?beta=true', (pagination_1.PageCursor), {
+            query,
+            ...options,
+            headers: (0, headers_1.buildHeaders)([
+                { ...(betas?.toString() != null ? { 'puku-beta': betas?.toString() } : undefined) },
+                options?.headers,
+            ]),
+        });
+    }
+    /**
+     * **Requires an OAuth access token with the `org:admin` scope**, from
+     * `ant auth login --scope org:admin` or a workload identity federation rule; Admin
+     * API keys are not accepted. See
+     * [Manage WIF with the Admin API](/docs/en/manage-puku/wif-admin-api).
+     *
+     * Archive a service account.
+     *
+     * Idempotent; re-archiving returns the service account with its original
+     * `archived_at`. Rejected with 400 if any live (non-archived) federation rule
+     * still targets this service account, same as issuer archival; archive those rules
+     * first or change their target to another service account.
+     *
+     * @example
+     * ```ts
+     * const betaServiceAccount =
+     *   await client.beta.organization.serviceAccounts.archive(
+     *     'service_account_id',
+     *   );
+     * ```
+     */
+    archive(serviceAccountID, params = {}, options) {
+        const { betas } = params ?? {};
+        return this._client.post((0, path_1.path) `/v1/organizations/service_accounts/${serviceAccountID}/archive?beta=true`, {
+            ...options,
+            headers: (0, headers_1.buildHeaders)([
+                { ...(betas?.toString() != null ? { 'puku-beta': betas?.toString() } : undefined) },
+                options?.headers,
+            ]),
+        });
+    }
+}
+exports.ServiceAccounts = ServiceAccounts;
+ServiceAccounts.Workspaces = workspaces_1.Workspaces;

package/dist/vendor/resources/beta/organization/service-accounts/workspaces.cjs

@@ -0,0 +1,124 @@
+"use strict";
+// File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Workspaces = void 0;
+const resource_1 = require("../../../../core/resource");
+const pagination_1 = require("../../../../core/pagination");
+const headers_1 = require("../../../../internal/headers");
+const path_1 = require("../../../../internal/utils/path");
+class Workspaces extends resource_1.APIResource {
+    /**
+     * **Requires an OAuth access token with the `org:admin` scope**, from
+     * `ant auth login --scope org:admin` or a workload identity federation rule; Admin
+     * API keys are not accepted. See
+     * [Manage WIF with the Admin API](/docs/en/manage-puku/wif-admin-api).
+     *
+     * List the workspaces a service account is a member of.
+     *
+     * Each entry includes the service account's `workspace_role` in that workspace.
+     * Use `limit` and the `next_page` cursor to paginate. When the service account has
+     * no explicit default-workspace membership, the implicit (`implicit: true`)
+     * membership is returned as the first entry on the first page; with `limit=1` the
+     * first page may return up to 2 entries (the implicit entry plus one explicit
+     * membership) so a pagination cursor can be derived. Memberships are returned only
+     * while the service account is active. Without a `page` cursor, an archived
+     * service account returns an empty list. A `page` cursor that does not match an
+     * active membership returns a 400 invalid-request error. A cursor stops matching
+     * when the membership is removed, the workspace is deleted, or the service account
+     * is archived. Restart pagination from the first page to recover.
+     *
+     * @example
+     * ```ts
+     * // Automatically fetches more pages as needed.
+     * for await (const betaServiceAccountWorkspaceMember of client.beta.organization.serviceAccounts.workspaces.list(
+     *   'service_account_id',
+     * )) {
+     *   // ...
+     * }
+     * ```
+     */
+    list(serviceAccountID, params = {}, options) {
+        const { betas, ...query } = params ?? {};
+        return this._client.getAPIList((0, path_1.path) `/v1/organizations/service_accounts/${serviceAccountID}/workspaces?beta=true`, (pagination_1.PageCursor), {
+            query,
+            ...options,
+            headers: (0, headers_1.buildHeaders)([
+                { ...(betas?.toString() != null ? { 'puku-beta': betas?.toString() } : undefined) },
+                options?.headers,
+            ]),
+        });
+    }
+    /**
+     * **Requires an OAuth access token with the `org:admin` scope**, from
+     * `ant auth login --scope org:admin` or a workload identity federation rule; Admin
+     * API keys are not accepted. See
+     * [Manage WIF with the Admin API](/docs/en/manage-puku/wif-admin-api).
+     *
+     * Add a service account to a workspace with the given `workspace_role`.
+     *
+     * Mirror of `POST /workspaces/{workspace_id}/service_accounts`, addressed from the
+     * service-account side; both create the same membership. If the service account is
+     * already an explicit member of the workspace, its `workspace_role` is replaced
+     * with the value supplied here. Archived workspaces return 400. Archived service
+     * accounts cannot be added and are rejected.
+     *
+     * @example
+     * ```ts
+     * const betaServiceAccountWorkspaceMember =
+     *   await client.beta.organization.serviceAccounts.workspaces.add(
+     *     'service_account_id',
+     *     {
+     *       workspace_id: 'workspace_id',
+     *       workspace_role: 'workspace_admin',
+     *     },
+     *   );
+     * ```
+     */
+    add(serviceAccountID, params, options) {
+        const { betas, ...body } = params;
+        return this._client.post((0, path_1.path) `/v1/organizations/service_accounts/${serviceAccountID}/workspaces?beta=true`, {
+            body,
+            ...options,
+            headers: (0, headers_1.buildHeaders)([
+                { ...(betas?.toString() != null ? { 'puku-beta': betas?.toString() } : undefined) },
+                options?.headers,
+            ]),
+        });
+    }
+    /**
+     * **Requires an OAuth access token with the `org:admin` scope**, from
+     * `ant auth login --scope org:admin` or a workload identity federation rule; Admin
+     * API keys are not accepted. See
+     * [Manage WIF with the Admin API](/docs/en/manage-puku/wif-admin-api).
+     *
+     * Remove a service account from a workspace.
+     *
+     * Mirror of
+     * `DELETE /workspaces/{workspace_id}/service_accounts/{service_account_id}`,
+     * addressed from the service-account side. Removal is idempotent (returns 200 even
+     * if the membership was already removed). A DELETE against the implicit
+     * default-workspace membership returns 200 but is a no-op and the membership
+     * persists; deleting an explicit default-workspace row reverts to the implicit
+     * `workspace_user` membership. Archived workspaces return 400.
+     *
+     * @example
+     * ```ts
+     * const workspace =
+     *   await client.beta.organization.serviceAccounts.workspaces.remove(
+     *     'workspace_id',
+     *     { service_account_id: 'service_account_id' },
+     *   );
+     * ```
+     */
+    remove(workspaceID, params, options) {
+        const { service_account_id, betas } = params;
+        return this._client.delete((0, path_1.path) `/v1/organizations/service_accounts/${service_account_id}/workspaces/${workspaceID}?beta=true`, {
+            ...options,
+            headers: (0, headers_1.buildHeaders)([
+                { ...(betas?.toString() != null ? { 'puku-beta': betas?.toString() } : undefined) },
+                options?.headers,
+            ]),
+        });
+    }
+}
+exports.Workspaces = Workspaces;

package/dist/vendor/resources/beta/organization/service-accounts.cjs

@@ -0,0 +1,18 @@
+"use strict";
+// File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./service-accounts/index"), exports);

package/dist/vendor/resources/beta/organization/users.cjs

@@ -0,0 +1,66 @@
+"use strict";
+// File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Users = void 0;
+const resource_1 = require("../../../core/resource");
+const pagination_1 = require("../../../core/pagination");
+const path_1 = require("../../../internal/utils/path");
+class Users extends resource_1.APIResource {
+    /**
+     * Retrieve a member of the organization by user ID.
+     *
+     * @example
+     * ```ts
+     * const betaOrganizationUser =
+     *   await client.beta.organization.users.retrieve('user_id');
+     * ```
+     */
+    retrieve(userID, options) {
+        return this._client.get((0, path_1.path) `/v1/organizations/users/${userID}?beta=true`, options);
+    }
+    /**
+     * Update a member's organization role.
+     *
+     * @example
+     * ```ts
+     * const betaOrganizationUser =
+     *   await client.beta.organization.users.update('user_id', {
+     *     role: 'user',
+     *   });
+     * ```
+     */
+    update(userID, body, options) {
+        return this._client.post((0, path_1.path) `/v1/organizations/users/${userID}?beta=true`, { body, ...options });
+    }
+    /**
+     * List the organization's members.
+     *
+     * @example
+     * ```ts
+     * // Automatically fetches more pages as needed.
+     * for await (const betaOrganizationUser of client.beta.organization.users.list()) {
+     *   // ...
+     * }
+     * ```
+     */
+    list(query = {}, options) {
+        return this._client.getAPIList('/v1/organizations/users?beta=true', (pagination_1.Page), {
+            query,
+            ...options,
+        });
+    }
+    /**
+     * Remove a member from the organization.
+     *
+     * @example
+     * ```ts
+     * const user = await client.beta.organization.users.remove(
+     *   'user_id',
+     * );
+     * ```
+     */
+    remove(userID, options) {
+        return this._client.delete((0, path_1.path) `/v1/organizations/users/${userID}?beta=true`, options);
+    }
+}
+exports.Users = Users;

package/dist/vendor/resources/beta/organization/workspaces/index.cjs

@@ -0,0 +1,12 @@
+"use strict";
+// File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Workspaces = exports.ServiceAccounts = exports.RateLimits = exports.Members = void 0;
+var members_1 = require("./members");
+Object.defineProperty(exports, "Members", { enumerable: true, get: function () { return members_1.Members; } });
+var rate_limits_1 = require("./rate-limits");
+Object.defineProperty(exports, "RateLimits", { enumerable: true, get: function () { return rate_limits_1.RateLimits; } });
+var service_accounts_1 = require("./service-accounts");
+Object.defineProperty(exports, "ServiceAccounts", { enumerable: true, get: function () { return service_accounts_1.ServiceAccounts; } });
+var workspaces_1 = require("./workspaces");
+Object.defineProperty(exports, "Workspaces", { enumerable: true, get: function () { return workspaces_1.Workspaces; } });

package/dist/vendor/resources/beta/organization/workspaces/members.cjs

@@ -0,0 +1,101 @@
+"use strict";
+// File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Members = void 0;
+const resource_1 = require("../../../../core/resource");
+const pagination_1 = require("../../../../core/pagination");
+const path_1 = require("../../../../internal/utils/path");
+class Members extends resource_1.APIResource {
+    /**
+     * Get Workspace Member
+     *
+     * @example
+     * ```ts
+     * const betaWorkspaceMember =
+     *   await client.beta.organization.workspaces.members.retrieve(
+     *     'user_id',
+     *     { workspace_id: 'workspace_id' },
+     *   );
+     * ```
+     */
+    retrieve(userID, params, options) {
+        const { workspace_id } = params;
+        return this._client.get((0, path_1.path) `/v1/organizations/workspaces/${workspace_id}/members/${userID}?beta=true`, options);
+    }
+    /**
+     * Update Workspace Member
+     *
+     * @example
+     * ```ts
+     * const betaWorkspaceMember =
+     *   await client.beta.organization.workspaces.members.update(
+     *     'user_id',
+     *     {
+     *       workspace_id: 'workspace_id',
+     *       workspace_role: 'workspace_admin',
+     *     },
+     *   );
+     * ```
+     */
+    update(userID, params, options) {
+        const { workspace_id, ...body } = params;
+        return this._client.post((0, path_1.path) `/v1/organizations/workspaces/${workspace_id}/members/${userID}?beta=true`, {
+            body,
+            ...options,
+        });
+    }
+    /**
+     * List Workspace Members
+     *
+     * @example
+     * ```ts
+     * // Automatically fetches more pages as needed.
+     * for await (const betaWorkspaceMember of client.beta.organization.workspaces.members.list(
+     *   'workspace_id',
+     * )) {
+     *   // ...
+     * }
+     * ```
+     */
+    list(workspaceID, query = {}, options) {
+        return this._client.getAPIList((0, path_1.path) `/v1/organizations/workspaces/${workspaceID}/members?beta=true`, (pagination_1.Page), { query, ...options });
+    }
+    /**
+     * Create Workspace Member
+     *
+     * @example
+     * ```ts
+     * const betaWorkspaceMember =
+     *   await client.beta.organization.workspaces.members.add(
+     *     'workspace_id',
+     *     {
+     *       user_id: 'user_01WCz1FkmYMm4gnmykNKUu3Q',
+     *       workspace_role: 'workspace_admin',
+     *     },
+     *   );
+     * ```
+     */
+    add(workspaceID, body, options) {
+        return this._client.post((0, path_1.path) `/v1/organizations/workspaces/${workspaceID}/members?beta=true`, {
+            body,
+            ...options,
+        });
+    }
+    /**
+     * Delete Workspace Member
+     *
+     * @example
+     * ```ts
+     * const member =
+     *   await client.beta.organization.workspaces.members.remove(
+     *     'user_id',
+     *     { workspace_id: 'workspace_id' },
+     *   );
+     * ```
+     */
+    remove(userID, params, options) {
+        const { workspace_id } = params;
+        return this._client.delete((0, path_1.path) `/v1/organizations/workspaces/${workspace_id}/members/${userID}?beta=true`, options);
+    }
+}
+exports.Members = Members;

package/dist/vendor/resources/beta/organization/workspaces/rate-limits.cjs

@@ -0,0 +1,33 @@
+"use strict";
+// File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RateLimits = void 0;
+const resource_1 = require("../../../../core/resource");
+const pagination_1 = require("../../../../core/pagination");
+const path_1 = require("../../../../internal/utils/path");
+class RateLimits extends resource_1.APIResource {
+    /**
+     * List rate-limit overrides configured for a workspace.
+     *
+     * Returns only the groups and limiter types that have a workspace-level override.
+     * Groups without overrides inherit the organization limits and are not listed; use
+     * `GET /v1/organizations/rate_limits` to see those.
+     *
+     * When `limit` is omitted, every matching entry is returned in a single page; when
+     * `limit` truncates the result, follow `next_page` to fetch the remaining entries.
+     *
+     * @example
+     * ```ts
+     * // Automatically fetches more pages as needed.
+     * for await (const betaWorkspaceRateLimit of client.beta.organization.workspaces.rateLimits.list(
+     *   'workspace_id',
+     * )) {
+     *   // ...
+     * }
+     * ```
+     */
+    list(workspaceID, query = {}, options) {
+        return this._client.getAPIList((0, path_1.path) `/v1/organizations/workspaces/${workspaceID}/rate_limits?beta=true`, (pagination_1.PageCursor), { query, ...options });
+    }
+}
+exports.RateLimits = RateLimits;