@sonatype/nexus-iq-api-client 0.200.0 → 0.203.0

package/dist/esm/apis/FirewallApi.d.ts

@@ -2,7 +2,7 @@
  * Sonatype Lifecycle Public REST API
  * No description provided (generated by Openapi Generator https://github.com/openapitools/openapi-generator)
  *
- * The version of the OpenAPI document: 1.200.0-01
+ * The version of the OpenAPI document: 1.203.0-01
  *
  *
  * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
@@ -10,7 +10,12 @@
  * Do not edit the class manually.
  */
 import * as runtime from '../runtime';
-import type { ApiContainerImageWaiverDTO, ApiFirewallComponentDTOResult, ApiFirewallMetricsResultDTO, ApiFirewallQuarantineSummaryDTO, ApiFirewallQuarantinedComponentDtoResult, ApiFirewallReleaseQuarantineConfigDTO, ApiFirewallReleaseQuarantineSummaryDTO, ApiMalwareComponentEvaluationRequestList, ApiRepositoryComponentEvaluationRequestList, ApiRepositoryComponentEvaluationResultList, ApiRepositoryContainerDTO, ApiRepositoryListDTO, ApiRepositoryManagerDTO, ApiRepositoryManagerListDTO, CascadeReevaluateTicketDTO, CascadeStatusResponseDTO, ContainerImageInQuarantineDataResult, MalwareDefenseResponseList, PolicyContainerWaiverDataResult } from '../models/index';
+import type { ApiBulkWaiversDTO, ApiContainerImageWaiverDTO, ApiFirewallComponentDTOResult, ApiFirewallMetricsResultDTO, ApiFirewallQuarantineSummaryDTO, ApiFirewallQuarantinedComponentDtoResult, ApiFirewallReleaseQuarantineConfigDTO, ApiFirewallReleaseQuarantineSummaryDTO, ApiMalwareComponentEvaluationRequestList, ApiRepositoryComponentEvaluationRequestList, ApiRepositoryComponentEvaluationResultList, ApiRepositoryContainerDTO, ApiRepositoryListDTO, ApiRepositoryManagerDTO, ApiRepositoryManagerListDTO, ApplicationSummaryList, CascadeReevaluateTicketDTO, CascadeStatusResponseDTO, ContainerImageInQuarantineDataResult, MalwareDefenseResponseList, PolicyContainerWaiverDataResult } from '../models/index';
+export interface FirewallApiAddBulkWaiversRequest {
+    ownerType: AddBulkWaiversOwnerTypeEnum;
+    ownerId: string;
+    apiBulkWaiversDTO: ApiBulkWaiversDTO;
+}
 export interface FirewallApiAddProprietaryComponentNamesRequest {
     format: string;
     requestBody: Array<string>;
@@ -95,6 +100,20 @@ export interface FirewallApiSetQuarantinedComponentViewAnonymousAccessRequest {
  * @interface FirewallApiInterface
  */
 export interface FirewallApiInterface {
+    /**
+     * Bulk-waive up to 1000 repository policy violations for Firewall. Supports both quarantine violations (FAIL action) and non-quarantine violations (WARN action). Quarantined components are released on the next monitoring or reevaluation pass once all remaining FAIL violations have been waived.  This operation executes within a single database transaction - if any violation fails validation, the entire request is rolled back (no partial waivers are created).  **Performance**: Requests with 100 violations typically complete in <5 seconds, requests with 1000 violations complete in <10 seconds.  **Permissions required**: Waive Policy Violations  **Security**: All violations must belong to the authenticated owner\'s tenant hierarchy. Cross-tenant access attempts will be rejected.
+     * @param {'organization' | 'repository_container' | 'repository_manager' | 'repository'} ownerType Owner type scope for the waiver. Must be one of: organization, repository, repository_manager, repository_container. Use \&#39;organization\&#39; with ownerId \&#39;ROOT_ORGANIZATION_ID\&#39; to apply waiver across all repositories.
+     * @param {string} ownerId Owner ID corresponding to the owner type. All violations must belong to this owner\&#39;s tenant hierarchy.
+     * @param {ApiBulkWaiversDTO} apiBulkWaiversDTO Bulk waiver request containing: - **violationIds** (required, 1-1000 items): List of repository policy violation IDs to waive. Duplicate IDs are automatically deduplicated. Supports both quarantine (FAIL) and non-quarantine (WARN) violations. Already-waived violations are skipped without error. - **apiWaiverOptionsDTO** (required): Waiver options including:   - **comment** (required, non-blank): Reason for waiving these violations   - **matcherStrategy** (required): EXACT_COMPONENT or ALL_VERSIONS   - **expiryTime** (optional): Must be in the future if provided   - **waiverReasonId** (optional): Reference to a pre-defined waiver reason   - **expireWhenRemediationAvailable** (optional): If true, matcherStrategy must be EXACT_COMPONENT
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof FirewallApiInterface
+     */
+    addBulkWaiversRaw(requestParameters: FirewallApiAddBulkWaiversRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<void>>;
+    /**
+     * Bulk-waive up to 1000 repository policy violations for Firewall. Supports both quarantine violations (FAIL action) and non-quarantine violations (WARN action). Quarantined components are released on the next monitoring or reevaluation pass once all remaining FAIL violations have been waived.  This operation executes within a single database transaction - if any violation fails validation, the entire request is rolled back (no partial waivers are created).  **Performance**: Requests with 100 violations typically complete in <5 seconds, requests with 1000 violations complete in <10 seconds.  **Permissions required**: Waive Policy Violations  **Security**: All violations must belong to the authenticated owner\'s tenant hierarchy. Cross-tenant access attempts will be rejected.
+     */
+    addBulkWaivers(requestParameters: FirewallApiAddBulkWaiversRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void>;
     /**
      * Adds a list of proprietary component namespaces for the specified format to prevent namespace confusion attacks.  Permissions required: Evaluate Individual Components
      * @param {string} format Format for which the proprietary namespaces are being added.
@@ -171,17 +190,17 @@ export interface FirewallApiInterface {
      */
     deleteRepositoryManager(requestParameters: FirewallApiDeleteRepositoryManagerRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void>;
     /**
-     * Use this method to evaluate components (max. 100).  Permissions required: Evaluate Individual Components
+     * Use this method to evaluate components (max. 100).  **Hash Requirements by Format Type:**  **Coordinate-Based Formats** (hash NOT required when using packageUrl): - golang, conan, cargo, cocoapods, cran, conda, composer, hf-model - These formats identify components by coordinates (name+version) rather than file hash - When using packageUrl, hash is optional - If hash is provided, it will be used  **Hash-Based Formats** (hash REQUIRED): - maven, npm, pypi, nuget, docker, rubygems, and others - Hash must ALWAYS be provided to identify the exact file content - Hash is required regardless of whether pathname or packageUrl is used - Missing hash for these formats will result in incorrect component identification  Permissions required: Evaluate Individual Components
      * @param {string} repositoryManagerId Enter the repository manager ID.
      * @param {string} repositoryId Enter the repository ID.
-     * @param {ApiRepositoryComponentEvaluationRequestList} apiRepositoryComponentEvaluationRequestList Provide the array of the component identifiers to be evaluated, using the component hash and the (packageUrl or pathname). A maximum of 100 components can be evaluated in one request.
+     * @param {ApiRepositoryComponentEvaluationRequestList} apiRepositoryComponentEvaluationRequestList Provide the array of component identifiers to be evaluated. Each component requires **one of the following combinations**:  **For Coordinate-Based Formats (golang, conan, cargo, cocoapods, cran, conda, composer, hf-model):** - **packageUrl only** - Hash is optional - **packageUrl + hash** - Hash is optional, will be used if provided - **pathname + hash** - Hash required (pathname approach always requires hash)  **For Hash-Based Formats (maven, npm, pypi, nuget, docker, rubygems, etc.):** - **packageUrl + hash** - Hash REQUIRED to identify exact file content - **pathname + hash** - Hash REQUIRED - Providing packageUrl without hash for these formats will result in incorrect identification  A maximum of 100 components can be evaluated in one request.
      * @param {*} [options] Override http request option.
      * @throws {RequiredError}
      * @memberof FirewallApiInterface
      */
     evaluateComponents1Raw(requestParameters: FirewallApiEvaluateComponents1Request, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<ApiRepositoryComponentEvaluationResultList>>;
     /**
-     * Use this method to evaluate components (max. 100).  Permissions required: Evaluate Individual Components
+     * Use this method to evaluate components (max. 100).  **Hash Requirements by Format Type:**  **Coordinate-Based Formats** (hash NOT required when using packageUrl): - golang, conan, cargo, cocoapods, cran, conda, composer, hf-model - These formats identify components by coordinates (name+version) rather than file hash - When using packageUrl, hash is optional - If hash is provided, it will be used  **Hash-Based Formats** (hash REQUIRED): - maven, npm, pypi, nuget, docker, rubygems, and others - Hash must ALWAYS be provided to identify the exact file content - Hash is required regardless of whether pathname or packageUrl is used - Missing hash for these formats will result in incorrect component identification  Permissions required: Evaluate Individual Components
      */
     evaluateComponents1(requestParameters: FirewallApiEvaluateComponents1Request, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<ApiRepositoryComponentEvaluationResultList>;
     /**
@@ -379,7 +398,7 @@ export interface FirewallApiInterface {
      */
     getUnquarantineList(requestParameters: FirewallApiGetUnquarantineListRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<ApiFirewallComponentDTOResult>;
     /**
-     * Use this method to get all policy waivers for container images.   Permissions required: Waive Policy Violations
+     * Use this method to get all policy waivers for container images.   Permissions required: View IQ Elements
      * @param {number} [page]
      * @param {number} [pageSize]
      * @param {*} [options] Override http request option.
@@ -388,7 +407,7 @@ export interface FirewallApiInterface {
      */
     getWaiversRaw(requestParameters: FirewallApiGetWaiversRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<PolicyContainerWaiverDataResult>>;
     /**
-     * Use this method to get all policy waivers for container images.   Permissions required: Waive Policy Violations
+     * Use this method to get all policy waivers for container images.   Permissions required: View IQ Elements
      */
     getWaivers(requestParameters: FirewallApiGetWaiversRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<PolicyContainerWaiverDataResult>;
     /**
@@ -439,11 +458,30 @@ export interface FirewallApiInterface {
      * Use this method to enable/disable anonymous access to view the quarantined components.  Permissions required: Edit IQ Elements
      */
     setQuarantinedComponentViewAnonymousAccess(requestParameters: FirewallApiSetQuarantinedComponentViewAnonymousAccessRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void>;
+    /**
+     * Use this method to verify that the authenticated user has required permissions for firewall operations and retrieve accessible applications.  Permissions required: Evaluate Individual Components
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof FirewallApiInterface
+     */
+    verifyConnectionAndGetApplicationsRaw(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<ApplicationSummaryList>>;
+    /**
+     * Use this method to verify that the authenticated user has required permissions for firewall operations and retrieve accessible applications.  Permissions required: Evaluate Individual Components
+     */
+    verifyConnectionAndGetApplications(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<ApplicationSummaryList>;
 }
 /**
  *
  */
 export declare class FirewallApi extends runtime.BaseAPI implements FirewallApiInterface {
+    /**
+     * Bulk-waive up to 1000 repository policy violations for Firewall. Supports both quarantine violations (FAIL action) and non-quarantine violations (WARN action). Quarantined components are released on the next monitoring or reevaluation pass once all remaining FAIL violations have been waived.  This operation executes within a single database transaction - if any violation fails validation, the entire request is rolled back (no partial waivers are created).  **Performance**: Requests with 100 violations typically complete in <5 seconds, requests with 1000 violations complete in <10 seconds.  **Permissions required**: Waive Policy Violations  **Security**: All violations must belong to the authenticated owner\'s tenant hierarchy. Cross-tenant access attempts will be rejected.
+     */
+    addBulkWaiversRaw(requestParameters: FirewallApiAddBulkWaiversRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<void>>;
+    /**
+     * Bulk-waive up to 1000 repository policy violations for Firewall. Supports both quarantine violations (FAIL action) and non-quarantine violations (WARN action). Quarantined components are released on the next monitoring or reevaluation pass once all remaining FAIL violations have been waived.  This operation executes within a single database transaction - if any violation fails validation, the entire request is rolled back (no partial waivers are created).  **Performance**: Requests with 100 violations typically complete in <5 seconds, requests with 1000 violations complete in <10 seconds.  **Permissions required**: Waive Policy Violations  **Security**: All violations must belong to the authenticated owner\'s tenant hierarchy. Cross-tenant access attempts will be rejected.
+     */
+    addBulkWaivers(requestParameters: FirewallApiAddBulkWaiversRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void>;
     /**
      * Adds a list of proprietary component namespaces for the specified format to prevent namespace confusion attacks.  Permissions required: Evaluate Individual Components
      */
@@ -493,11 +531,11 @@ export declare class FirewallApi extends runtime.BaseAPI implements FirewallApiI
      */
     deleteRepositoryManager(requestParameters: FirewallApiDeleteRepositoryManagerRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void>;
     /**
-     * Use this method to evaluate components (max. 100).  Permissions required: Evaluate Individual Components
+     * Use this method to evaluate components (max. 100).  **Hash Requirements by Format Type:**  **Coordinate-Based Formats** (hash NOT required when using packageUrl): - golang, conan, cargo, cocoapods, cran, conda, composer, hf-model - These formats identify components by coordinates (name+version) rather than file hash - When using packageUrl, hash is optional - If hash is provided, it will be used  **Hash-Based Formats** (hash REQUIRED): - maven, npm, pypi, nuget, docker, rubygems, and others - Hash must ALWAYS be provided to identify the exact file content - Hash is required regardless of whether pathname or packageUrl is used - Missing hash for these formats will result in incorrect component identification  Permissions required: Evaluate Individual Components
      */
     evaluateComponents1Raw(requestParameters: FirewallApiEvaluateComponents1Request, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<ApiRepositoryComponentEvaluationResultList>>;
     /**
-     * Use this method to evaluate components (max. 100).  Permissions required: Evaluate Individual Components
+     * Use this method to evaluate components (max. 100).  **Hash Requirements by Format Type:**  **Coordinate-Based Formats** (hash NOT required when using packageUrl): - golang, conan, cargo, cocoapods, cran, conda, composer, hf-model - These formats identify components by coordinates (name+version) rather than file hash - When using packageUrl, hash is optional - If hash is provided, it will be used  **Hash-Based Formats** (hash REQUIRED): - maven, npm, pypi, nuget, docker, rubygems, and others - Hash must ALWAYS be provided to identify the exact file content - Hash is required regardless of whether pathname or packageUrl is used - Missing hash for these formats will result in incorrect component identification  Permissions required: Evaluate Individual Components
      */
     evaluateComponents1(requestParameters: FirewallApiEvaluateComponents1Request, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<ApiRepositoryComponentEvaluationResultList>;
     /**
@@ -629,11 +667,11 @@ export declare class FirewallApi extends runtime.BaseAPI implements FirewallApiI
      */
     getUnquarantineList(requestParameters?: FirewallApiGetUnquarantineListRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<ApiFirewallComponentDTOResult>;
     /**
-     * Use this method to get all policy waivers for container images.   Permissions required: Waive Policy Violations
+     * Use this method to get all policy waivers for container images.   Permissions required: View IQ Elements
      */
     getWaiversRaw(requestParameters: FirewallApiGetWaiversRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<PolicyContainerWaiverDataResult>>;
     /**
-     * Use this method to get all policy waivers for container images.   Permissions required: Waive Policy Violations
+     * Use this method to get all policy waivers for container images.   Permissions required: View IQ Elements
      */
     getWaivers(requestParameters?: FirewallApiGetWaiversRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<PolicyContainerWaiverDataResult>;
     /**
@@ -668,4 +706,22 @@ export declare class FirewallApi extends runtime.BaseAPI implements FirewallApiI
      * Use this method to enable/disable anonymous access to view the quarantined components.  Permissions required: Edit IQ Elements
      */
     setQuarantinedComponentViewAnonymousAccess(requestParameters: FirewallApiSetQuarantinedComponentViewAnonymousAccessRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void>;
+    /**
+     * Use this method to verify that the authenticated user has required permissions for firewall operations and retrieve accessible applications.  Permissions required: Evaluate Individual Components
+     */
+    verifyConnectionAndGetApplicationsRaw(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<ApplicationSummaryList>>;
+    /**
+     * Use this method to verify that the authenticated user has required permissions for firewall operations and retrieve accessible applications.  Permissions required: Evaluate Individual Components
+     */
+    verifyConnectionAndGetApplications(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<ApplicationSummaryList>;
 }
+/**
+ * @export
+ */
+export declare const AddBulkWaiversOwnerTypeEnum: {
+    readonly Organization: "organization";
+    readonly RepositoryContainer: "repository_container";
+    readonly RepositoryManager: "repository_manager";
+    readonly Repository: "repository";
+};
+export type AddBulkWaiversOwnerTypeEnum = typeof AddBulkWaiversOwnerTypeEnum[keyof typeof AddBulkWaiversOwnerTypeEnum];

package/dist/esm/apis/FirewallApi.js

@@ -4,7 +4,7 @@
  * Sonatype Lifecycle Public REST API
  * No description provided (generated by Openapi Generator https://github.com/openapitools/openapi-generator)
  *
- * The version of the OpenAPI document: 1.200.0-01
+ * The version of the OpenAPI document: 1.203.0-01
  *
  *
  * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
@@ -21,11 +21,59 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
     });
 };
 import * as runtime from '../runtime';
-import { ApiContainerImageWaiverDTOToJSON, ApiFirewallComponentDTOResultFromJSON, ApiFirewallMetricsResultDTOFromJSON, ApiFirewallQuarantineSummaryDTOFromJSON, ApiFirewallQuarantinedComponentDtoResultFromJSON, ApiFirewallReleaseQuarantineConfigDTOFromJSON, ApiFirewallReleaseQuarantineConfigDTOToJSON, ApiFirewallReleaseQuarantineSummaryDTOFromJSON, ApiMalwareComponentEvaluationRequestListToJSON, ApiRepositoryComponentEvaluationRequestListToJSON, ApiRepositoryComponentEvaluationResultListFromJSON, ApiRepositoryContainerDTOFromJSON, ApiRepositoryListDTOFromJSON, ApiRepositoryListDTOToJSON, ApiRepositoryManagerDTOFromJSON, ApiRepositoryManagerDTOToJSON, ApiRepositoryManagerListDTOFromJSON, CascadeReevaluateTicketDTOFromJSON, CascadeStatusResponseDTOFromJSON, ContainerImageInQuarantineDataResultFromJSON, MalwareDefenseResponseListFromJSON, PolicyContainerWaiverDataResultFromJSON, } from '../models/index';
+import { ApiBulkWaiversDTOToJSON, ApiContainerImageWaiverDTOToJSON, ApiFirewallComponentDTOResultFromJSON, ApiFirewallMetricsResultDTOFromJSON, ApiFirewallQuarantineSummaryDTOFromJSON, ApiFirewallQuarantinedComponentDtoResultFromJSON, ApiFirewallReleaseQuarantineConfigDTOFromJSON, ApiFirewallReleaseQuarantineConfigDTOToJSON, ApiFirewallReleaseQuarantineSummaryDTOFromJSON, ApiMalwareComponentEvaluationRequestListToJSON, ApiRepositoryComponentEvaluationRequestListToJSON, ApiRepositoryComponentEvaluationResultListFromJSON, ApiRepositoryContainerDTOFromJSON, ApiRepositoryListDTOFromJSON, ApiRepositoryListDTOToJSON, ApiRepositoryManagerDTOFromJSON, ApiRepositoryManagerDTOToJSON, ApiRepositoryManagerListDTOFromJSON, ApplicationSummaryListFromJSON, CascadeReevaluateTicketDTOFromJSON, CascadeStatusResponseDTOFromJSON, ContainerImageInQuarantineDataResultFromJSON, MalwareDefenseResponseListFromJSON, PolicyContainerWaiverDataResultFromJSON, } from '../models/index';
 /**
  *
  */
 export class FirewallApi extends runtime.BaseAPI {
+    /**
+     * Bulk-waive up to 1000 repository policy violations for Firewall. Supports both quarantine violations (FAIL action) and non-quarantine violations (WARN action). Quarantined components are released on the next monitoring or reevaluation pass once all remaining FAIL violations have been waived.  This operation executes within a single database transaction - if any violation fails validation, the entire request is rolled back (no partial waivers are created).  **Performance**: Requests with 100 violations typically complete in <5 seconds, requests with 1000 violations complete in <10 seconds.  **Permissions required**: Waive Policy Violations  **Security**: All violations must belong to the authenticated owner\'s tenant hierarchy. Cross-tenant access attempts will be rejected.
+     */
+    addBulkWaiversRaw(requestParameters, initOverrides) {
+        return __awaiter(this, void 0, void 0, function* () {
+            if (requestParameters['ownerType'] == null) {
+                throw new runtime.RequiredError('ownerType', 'Required parameter "ownerType" was null or undefined when calling addBulkWaivers().');
+            }
+            if (requestParameters['ownerId'] == null) {
+                throw new runtime.RequiredError('ownerId', 'Required parameter "ownerId" was null or undefined when calling addBulkWaivers().');
+            }
+            if (requestParameters['apiBulkWaiversDTO'] == null) {
+                throw new runtime.RequiredError('apiBulkWaiversDTO', 'Required parameter "apiBulkWaiversDTO" was null or undefined when calling addBulkWaivers().');
+            }
+            const queryParameters = {};
+            const headerParameters = {};
+            headerParameters['Content-Type'] = 'application/json';
+            if (this.configuration && (this.configuration.username !== undefined || this.configuration.password !== undefined)) {
+                headerParameters["Authorization"] = "Basic " + btoa(this.configuration.username + ":" + this.configuration.password);
+            }
+            if (this.configuration && this.configuration.accessToken) {
+                const token = this.configuration.accessToken;
+                const tokenString = yield token("BearerAuth", []);
+                if (tokenString) {
+                    headerParameters["Authorization"] = `Bearer ${tokenString}`;
+                }
+            }
+            let urlPath = `/api/v2/firewall/repositories/{ownerType}/{ownerId}/waivers/bulk`;
+            urlPath = urlPath.replace(`{${"ownerType"}}`, encodeURIComponent(String(requestParameters['ownerType'])));
+            urlPath = urlPath.replace(`{${"ownerId"}}`, encodeURIComponent(String(requestParameters['ownerId'])));
+            const response = yield this.request({
+                path: urlPath,
+                method: 'POST',
+                headers: headerParameters,
+                query: queryParameters,
+                body: ApiBulkWaiversDTOToJSON(requestParameters['apiBulkWaiversDTO']),
+            }, initOverrides);
+            return new runtime.VoidApiResponse(response);
+        });
+    }
+    /**
+     * Bulk-waive up to 1000 repository policy violations for Firewall. Supports both quarantine violations (FAIL action) and non-quarantine violations (WARN action). Quarantined components are released on the next monitoring or reevaluation pass once all remaining FAIL violations have been waived.  This operation executes within a single database transaction - if any violation fails validation, the entire request is rolled back (no partial waivers are created).  **Performance**: Requests with 100 violations typically complete in <5 seconds, requests with 1000 violations complete in <10 seconds.  **Permissions required**: Waive Policy Violations  **Security**: All violations must belong to the authenticated owner\'s tenant hierarchy. Cross-tenant access attempts will be rejected.
+     */
+    addBulkWaivers(requestParameters, initOverrides) {
+        return __awaiter(this, void 0, void 0, function* () {
+            yield this.addBulkWaiversRaw(requestParameters, initOverrides);
+        });
+    }
     /**
      * Adds a list of proprietary component namespaces for the specified format to prevent namespace confusion attacks.  Permissions required: Evaluate Individual Components
      */
@@ -275,7 +323,7 @@ export class FirewallApi extends runtime.BaseAPI {
         });
     }
     /**
-     * Use this method to evaluate components (max. 100).  Permissions required: Evaluate Individual Components
+     * Use this method to evaluate components (max. 100).  **Hash Requirements by Format Type:**  **Coordinate-Based Formats** (hash NOT required when using packageUrl): - golang, conan, cargo, cocoapods, cran, conda, composer, hf-model - These formats identify components by coordinates (name+version) rather than file hash - When using packageUrl, hash is optional - If hash is provided, it will be used  **Hash-Based Formats** (hash REQUIRED): - maven, npm, pypi, nuget, docker, rubygems, and others - Hash must ALWAYS be provided to identify the exact file content - Hash is required regardless of whether pathname or packageUrl is used - Missing hash for these formats will result in incorrect component identification  Permissions required: Evaluate Individual Components
      */
     evaluateComponents1Raw(requestParameters, initOverrides) {
         return __awaiter(this, void 0, void 0, function* () {
@@ -315,7 +363,7 @@ export class FirewallApi extends runtime.BaseAPI {
         });
     }
     /**
-     * Use this method to evaluate components (max. 100).  Permissions required: Evaluate Individual Components
+     * Use this method to evaluate components (max. 100).  **Hash Requirements by Format Type:**  **Coordinate-Based Formats** (hash NOT required when using packageUrl): - golang, conan, cargo, cocoapods, cran, conda, composer, hf-model - These formats identify components by coordinates (name+version) rather than file hash - When using packageUrl, hash is optional - If hash is provided, it will be used  **Hash-Based Formats** (hash REQUIRED): - maven, npm, pypi, nuget, docker, rubygems, and others - Hash must ALWAYS be provided to identify the exact file content - Hash is required regardless of whether pathname or packageUrl is used - Missing hash for these formats will result in incorrect component identification  Permissions required: Evaluate Individual Components
      */
     evaluateComponents1(requestParameters, initOverrides) {
         return __awaiter(this, void 0, void 0, function* () {
@@ -934,7 +982,7 @@ export class FirewallApi extends runtime.BaseAPI {
         });
     }
     /**
-     * Use this method to get all policy waivers for container images.   Permissions required: Waive Policy Violations
+     * Use this method to get all policy waivers for container images.   Permissions required: View IQ Elements
      */
     getWaiversRaw(requestParameters, initOverrides) {
         return __awaiter(this, void 0, void 0, function* () {
@@ -967,7 +1015,7 @@ export class FirewallApi extends runtime.BaseAPI {
         });
     }
     /**
-     * Use this method to get all policy waivers for container images.   Permissions required: Waive Policy Violations
+     * Use this method to get all policy waivers for container images.   Permissions required: View IQ Elements
      */
     getWaivers() {
         return __awaiter(this, arguments, void 0, function* (requestParameters = {}, initOverrides) {
@@ -1134,4 +1182,49 @@ export class FirewallApi extends runtime.BaseAPI {
             yield this.setQuarantinedComponentViewAnonymousAccessRaw(requestParameters, initOverrides);
         });
     }
+    /**
+     * Use this method to verify that the authenticated user has required permissions for firewall operations and retrieve accessible applications.  Permissions required: Evaluate Individual Components
+     */
+    verifyConnectionAndGetApplicationsRaw(initOverrides) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const queryParameters = {};
+            const headerParameters = {};
+            if (this.configuration && (this.configuration.username !== undefined || this.configuration.password !== undefined)) {
+                headerParameters["Authorization"] = "Basic " + btoa(this.configuration.username + ":" + this.configuration.password);
+            }
+            if (this.configuration && this.configuration.accessToken) {
+                const token = this.configuration.accessToken;
+                const tokenString = yield token("BearerAuth", []);
+                if (tokenString) {
+                    headerParameters["Authorization"] = `Bearer ${tokenString}`;
+                }
+            }
+            let urlPath = `/api/v2/firewall/connection/verify`;
+            const response = yield this.request({
+                path: urlPath,
+                method: 'GET',
+                headers: headerParameters,
+                query: queryParameters,
+            }, initOverrides);
+            return new runtime.JSONApiResponse(response, (jsonValue) => ApplicationSummaryListFromJSON(jsonValue));
+        });
+    }
+    /**
+     * Use this method to verify that the authenticated user has required permissions for firewall operations and retrieve accessible applications.  Permissions required: Evaluate Individual Components
+     */
+    verifyConnectionAndGetApplications(initOverrides) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const response = yield this.verifyConnectionAndGetApplicationsRaw(initOverrides);
+            return yield response.value();
+        });
+    }
 }
+/**
+ * @export
+ */
+export const AddBulkWaiversOwnerTypeEnum = {
+    Organization: 'organization',
+    RepositoryContainer: 'repository_container',
+    RepositoryManager: 'repository_manager',
+    Repository: 'repository'
+};

package/dist/esm/apis/GitHubAppConfigurationApi.d.ts

@@ -0,0 +1,114 @@
+/**
+ * Sonatype Lifecycle Public REST API
+ * No description provided (generated by Openapi Generator https://github.com/openapitools/openapi-generator)
+ *
+ * The version of the OpenAPI document: 1.203.0-01
+ *
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+import * as runtime from '../runtime';
+export interface GitHubAppConfigurationApiGenerateManifestRequest {
+    ownerId: string;
+    organizationName?: string;
+}
+export interface GitHubAppConfigurationApiHandleInstallationSetupRequest {
+    installationId: number;
+    state: string;
+    code: string;
+}
+export interface GitHubAppConfigurationApiHandleRedirectRequest {
+    code: string;
+    state?: string;
+}
+/**
+ * GitHubAppConfigurationApi - interface
+ *
+ * @export
+ * @interface GitHubAppConfigurationApiInterface
+ */
+export interface GitHubAppConfigurationApiInterface {
+    /**
+     * Generate a GitHub App manifest for registration. Returns manifest JSON with a state token for CSRF protection. The state token is cryptographically secure, single-use, and expires after 10 minutes. Submit the manifest to GitHub\'s app creation flow, which will redirect back to IQ Server with the state token for validation.   **Permissions Required:** Configure System Configuration and Users
+     * @summary Generate GitHub App manifest
+     * @param {string} ownerId Owner (organization/application) ID
+     * @param {string} [organizationName] GitHub organization name
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof GitHubAppConfigurationApiInterface
+     */
+    generateManifestRaw(requestParameters: GitHubAppConfigurationApiGenerateManifestRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<void>>;
+    /**
+     * Generate a GitHub App manifest for registration. Returns manifest JSON with a state token for CSRF protection. The state token is cryptographically secure, single-use, and expires after 10 minutes. Submit the manifest to GitHub\'s app creation flow, which will redirect back to IQ Server with the state token for validation.   **Permissions Required:** Configure System Configuration and Users
+     * Generate GitHub App manifest
+     */
+    generateManifest(requestParameters: GitHubAppConfigurationApiGenerateManifestRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void>;
+    /**
+     * Process the redirect from GitHub after OAuth authorization, validate state token, exchange OAuth code with PKCE verification, verify user ownership, configure the installation for the specified organization/application, and redirect to the configuration page
+     * @summary Handle GitHub App installation setup callback with OAuth + PKCE
+     * @param {number} installationId GitHub App installation ID
+     * @param {string} state State token for CSRF protection
+     * @param {string} code OAuth authorization code
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof GitHubAppConfigurationApiInterface
+     */
+    handleInstallationSetupRaw(requestParameters: GitHubAppConfigurationApiHandleInstallationSetupRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<void>>;
+    /**
+     * Process the redirect from GitHub after OAuth authorization, validate state token, exchange OAuth code with PKCE verification, verify user ownership, configure the installation for the specified organization/application, and redirect to the configuration page
+     * Handle GitHub App installation setup callback with OAuth + PKCE
+     */
+    handleInstallationSetup(requestParameters: GitHubAppConfigurationApiHandleInstallationSetupRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void>;
+    /**
+     * Handles redirect from GitHub after manifest submission. Exchanges temporary code for permanent app credentials. The user\'s browser is automatically redirected here by GitHub - not intended for direct use. **Permissions Required:** Configure System Configuration and Users
+     * @summary GitHub App registration redirect callback
+     * @param {string} code Temporary manifest conversion code from GitHub
+     * @param {string} [state] OAuth state token for CSRF protection
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof GitHubAppConfigurationApiInterface
+     */
+    handleRedirectRaw(requestParameters: GitHubAppConfigurationApiHandleRedirectRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<void>>;
+    /**
+     * Handles redirect from GitHub after manifest submission. Exchanges temporary code for permanent app credentials. The user\'s browser is automatically redirected here by GitHub - not intended for direct use. **Permissions Required:** Configure System Configuration and Users
+     * GitHub App registration redirect callback
+     */
+    handleRedirect(requestParameters: GitHubAppConfigurationApiHandleRedirectRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void>;
+}
+/**
+ *
+ */
+export declare class GitHubAppConfigurationApi extends runtime.BaseAPI implements GitHubAppConfigurationApiInterface {
+    /**
+     * Generate a GitHub App manifest for registration. Returns manifest JSON with a state token for CSRF protection. The state token is cryptographically secure, single-use, and expires after 10 minutes. Submit the manifest to GitHub\'s app creation flow, which will redirect back to IQ Server with the state token for validation.   **Permissions Required:** Configure System Configuration and Users
+     * Generate GitHub App manifest
+     */
+    generateManifestRaw(requestParameters: GitHubAppConfigurationApiGenerateManifestRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<void>>;
+    /**
+     * Generate a GitHub App manifest for registration. Returns manifest JSON with a state token for CSRF protection. The state token is cryptographically secure, single-use, and expires after 10 minutes. Submit the manifest to GitHub\'s app creation flow, which will redirect back to IQ Server with the state token for validation.   **Permissions Required:** Configure System Configuration and Users
+     * Generate GitHub App manifest
+     */
+    generateManifest(requestParameters: GitHubAppConfigurationApiGenerateManifestRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void>;
+    /**
+     * Process the redirect from GitHub after OAuth authorization, validate state token, exchange OAuth code with PKCE verification, verify user ownership, configure the installation for the specified organization/application, and redirect to the configuration page
+     * Handle GitHub App installation setup callback with OAuth + PKCE
+     */
+    handleInstallationSetupRaw(requestParameters: GitHubAppConfigurationApiHandleInstallationSetupRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<void>>;
+    /**
+     * Process the redirect from GitHub after OAuth authorization, validate state token, exchange OAuth code with PKCE verification, verify user ownership, configure the installation for the specified organization/application, and redirect to the configuration page
+     * Handle GitHub App installation setup callback with OAuth + PKCE
+     */
+    handleInstallationSetup(requestParameters: GitHubAppConfigurationApiHandleInstallationSetupRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void>;
+    /**
+     * Handles redirect from GitHub after manifest submission. Exchanges temporary code for permanent app credentials. The user\'s browser is automatically redirected here by GitHub - not intended for direct use. **Permissions Required:** Configure System Configuration and Users
+     * GitHub App registration redirect callback
+     */
+    handleRedirectRaw(requestParameters: GitHubAppConfigurationApiHandleRedirectRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<void>>;
+    /**
+     * Handles redirect from GitHub after manifest submission. Exchanges temporary code for permanent app credentials. The user\'s browser is automatically redirected here by GitHub - not intended for direct use. **Permissions Required:** Configure System Configuration and Users
+     * GitHub App registration redirect callback
+     */
+    handleRedirect(requestParameters: GitHubAppConfigurationApiHandleRedirectRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void>;
+}

package/dist/esm/apis/GitHubAppConfigurationApi.js

@@ -0,0 +1,175 @@
+/* tslint:disable */
+/* eslint-disable */
+/**
+ * Sonatype Lifecycle Public REST API
+ * No description provided (generated by Openapi Generator https://github.com/openapitools/openapi-generator)
+ *
+ * The version of the OpenAPI document: 1.203.0-01
+ *
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+import * as runtime from '../runtime';
+/**
+ *
+ */
+export class GitHubAppConfigurationApi extends runtime.BaseAPI {
+    /**
+     * Generate a GitHub App manifest for registration. Returns manifest JSON with a state token for CSRF protection. The state token is cryptographically secure, single-use, and expires after 10 minutes. Submit the manifest to GitHub\'s app creation flow, which will redirect back to IQ Server with the state token for validation.   **Permissions Required:** Configure System Configuration and Users
+     * Generate GitHub App manifest
+     */
+    generateManifestRaw(requestParameters, initOverrides) {
+        return __awaiter(this, void 0, void 0, function* () {
+            if (requestParameters['ownerId'] == null) {
+                throw new runtime.RequiredError('ownerId', 'Required parameter "ownerId" was null or undefined when calling generateManifest().');
+            }
+            const queryParameters = {};
+            if (requestParameters['ownerId'] != null) {
+                queryParameters['ownerId'] = requestParameters['ownerId'];
+            }
+            if (requestParameters['organizationName'] != null) {
+                queryParameters['organizationName'] = requestParameters['organizationName'];
+            }
+            const headerParameters = {};
+            if (this.configuration && (this.configuration.username !== undefined || this.configuration.password !== undefined)) {
+                headerParameters["Authorization"] = "Basic " + btoa(this.configuration.username + ":" + this.configuration.password);
+            }
+            if (this.configuration && this.configuration.accessToken) {
+                const token = this.configuration.accessToken;
+                const tokenString = yield token("BearerAuth", []);
+                if (tokenString) {
+                    headerParameters["Authorization"] = `Bearer ${tokenString}`;
+                }
+            }
+            let urlPath = `/api/v2/githubApp/manifest`;
+            const response = yield this.request({
+                path: urlPath,
+                method: 'POST',
+                headers: headerParameters,
+                query: queryParameters,
+            }, initOverrides);
+            return new runtime.VoidApiResponse(response);
+        });
+    }
+    /**
+     * Generate a GitHub App manifest for registration. Returns manifest JSON with a state token for CSRF protection. The state token is cryptographically secure, single-use, and expires after 10 minutes. Submit the manifest to GitHub\'s app creation flow, which will redirect back to IQ Server with the state token for validation.   **Permissions Required:** Configure System Configuration and Users
+     * Generate GitHub App manifest
+     */
+    generateManifest(requestParameters, initOverrides) {
+        return __awaiter(this, void 0, void 0, function* () {
+            yield this.generateManifestRaw(requestParameters, initOverrides);
+        });
+    }
+    /**
+     * Process the redirect from GitHub after OAuth authorization, validate state token, exchange OAuth code with PKCE verification, verify user ownership, configure the installation for the specified organization/application, and redirect to the configuration page
+     * Handle GitHub App installation setup callback with OAuth + PKCE
+     */
+    handleInstallationSetupRaw(requestParameters, initOverrides) {
+        return __awaiter(this, void 0, void 0, function* () {
+            if (requestParameters['installationId'] == null) {
+                throw new runtime.RequiredError('installationId', 'Required parameter "installationId" was null or undefined when calling handleInstallationSetup().');
+            }
+            if (requestParameters['state'] == null) {
+                throw new runtime.RequiredError('state', 'Required parameter "state" was null or undefined when calling handleInstallationSetup().');
+            }
+            if (requestParameters['code'] == null) {
+                throw new runtime.RequiredError('code', 'Required parameter "code" was null or undefined when calling handleInstallationSetup().');
+            }
+            const queryParameters = {};
+            if (requestParameters['installationId'] != null) {
+                queryParameters['installation_id'] = requestParameters['installationId'];
+            }
+            if (requestParameters['state'] != null) {
+                queryParameters['state'] = requestParameters['state'];
+            }
+            if (requestParameters['code'] != null) {
+                queryParameters['code'] = requestParameters['code'];
+            }
+            const headerParameters = {};
+            if (this.configuration && (this.configuration.username !== undefined || this.configuration.password !== undefined)) {
+                headerParameters["Authorization"] = "Basic " + btoa(this.configuration.username + ":" + this.configuration.password);
+            }
+            if (this.configuration && this.configuration.accessToken) {
+                const token = this.configuration.accessToken;
+                const tokenString = yield token("BearerAuth", []);
+                if (tokenString) {
+                    headerParameters["Authorization"] = `Bearer ${tokenString}`;
+                }
+            }
+            let urlPath = `/api/v2/githubApp/setupInstallation`;
+            const response = yield this.request({
+                path: urlPath,
+                method: 'GET',
+                headers: headerParameters,
+                query: queryParameters,
+            }, initOverrides);
+            return new runtime.VoidApiResponse(response);
+        });
+    }
+    /**
+     * Process the redirect from GitHub after OAuth authorization, validate state token, exchange OAuth code with PKCE verification, verify user ownership, configure the installation for the specified organization/application, and redirect to the configuration page
+     * Handle GitHub App installation setup callback with OAuth + PKCE
+     */
+    handleInstallationSetup(requestParameters, initOverrides) {
+        return __awaiter(this, void 0, void 0, function* () {
+            yield this.handleInstallationSetupRaw(requestParameters, initOverrides);
+        });
+    }
+    /**
+     * Handles redirect from GitHub after manifest submission. Exchanges temporary code for permanent app credentials. The user\'s browser is automatically redirected here by GitHub - not intended for direct use. **Permissions Required:** Configure System Configuration and Users
+     * GitHub App registration redirect callback
+     */
+    handleRedirectRaw(requestParameters, initOverrides) {
+        return __awaiter(this, void 0, void 0, function* () {
+            if (requestParameters['code'] == null) {
+                throw new runtime.RequiredError('code', 'Required parameter "code" was null or undefined when calling handleRedirect().');
+            }
+            const queryParameters = {};
+            if (requestParameters['code'] != null) {
+                queryParameters['code'] = requestParameters['code'];
+            }
+            if (requestParameters['state'] != null) {
+                queryParameters['state'] = requestParameters['state'];
+            }
+            const headerParameters = {};
+            if (this.configuration && (this.configuration.username !== undefined || this.configuration.password !== undefined)) {
+                headerParameters["Authorization"] = "Basic " + btoa(this.configuration.username + ":" + this.configuration.password);
+            }
+            if (this.configuration && this.configuration.accessToken) {
+                const token = this.configuration.accessToken;
+                const tokenString = yield token("BearerAuth", []);
+                if (tokenString) {
+                    headerParameters["Authorization"] = `Bearer ${tokenString}`;
+                }
+            }
+            let urlPath = `/api/v2/githubApp/redirect`;
+            const response = yield this.request({
+                path: urlPath,
+                method: 'GET',
+                headers: headerParameters,
+                query: queryParameters,
+            }, initOverrides);
+            return new runtime.VoidApiResponse(response);
+        });
+    }
+    /**
+     * Handles redirect from GitHub after manifest submission. Exchanges temporary code for permanent app credentials. The user\'s browser is automatically redirected here by GitHub - not intended for direct use. **Permissions Required:** Configure System Configuration and Users
+     * GitHub App registration redirect callback
+     */
+    handleRedirect(requestParameters, initOverrides) {
+        return __awaiter(this, void 0, void 0, function* () {
+            yield this.handleRedirectRaw(requestParameters, initOverrides);
+        });
+    }
+}

package/dist/esm/apis/LicenseLegalMetadataReportApi.d.ts

@@ -2,7 +2,7 @@
  * Sonatype Lifecycle Public REST API
  * No description provided (generated by Openapi Generator https://github.com/openapitools/openapi-generator)
  *
- * The version of the OpenAPI document: 1.200.0-01
+ * The version of the OpenAPI document: 1.203.0-01
  *
  *
  * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).