@spaciv/sdk 0.0.0 → 0.1.0

package/dist/esm/apis/AccountsApi.d.ts

@@ -0,0 +1,489 @@
+/**
+ * spaciv API
+ * The spaciv API powers workplace planning: modelling how many people an organisation has, how they work, and how much space that requires.  ## Getting started  1. Exchange credentials for an access token using one of the operations under    **Authentication**. 2. Send that token on every subsequent request as `Authorization: Bearer <token>`. 3. Access tokens are short lived. Call `POST /v1/auth/refresh-token` to obtain a new one    before the old one expires.  ## Conventions  Every operation is versioned under `/v1`. Collections are plural (`GET /v1/dashboards` lists, `POST /v1/dashboards` creates) and individual records live beneath them (`/v1/dashboards/{id}`). Singular paths such as `/v1/account`, `/v1/project` and `/v1/user` refer to the record the access token was issued for.  Request and response bodies are JSON. Timestamps are RFC 3339. Identifiers are opaque strings unless documented otherwise, and collection operations return the records visible to the account the token was issued for.  Failures return an [RFC 9457](https://www.rfc-editor.org/rfc/rfc9457) problem document with a `detail` field describing what went wrong.
+ *
+ * The version of the OpenAPI document: 1.0.0
+ * Contact: support@spaciv.com
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+import * as runtime from '../runtime';
+import type { Account, AccountAuthOption, AccountCalculationUsageBody, AccountDetailsResBody, AccountGetAuthOptionsResBody, AccountOIDCProvider, AccountOIDCProviderPatch, AccountPatchAuthOptionsReqBody, AccountPostOIDCProviderReqBody, AccountPostReqBody, AccountPutOIDCClientSecretReqBody, AccountPutReqBody, AccountUsageResBody, ListAccountsForUserRow } from '../models/index';
+export interface AccountsApiCreateRequest {
+    accountPostReqBody: AccountPostReqBody;
+}
+export interface AccountsApiCreateOidcProviderRequest {
+    accountPostOIDCProviderReqBody: AccountPostOIDCProviderReqBody;
+}
+export interface AccountsApiGetAuthOptionsRequest {
+    hostname: string;
+}
+export interface AccountsApiGetHostnameRequest {
+    id: number;
+}
+export interface AccountsApiGetSetupStatusRequest {
+    id: number;
+}
+export interface AccountsApiListUsageCalculationCreditsRequest {
+    days?: AccountsApiListUsageCalculationCreditsDaysEnum;
+}
+export interface AccountsApiUpdateRequest {
+    accountPutReqBody: AccountPutReqBody;
+}
+export interface AccountsApiUpdateAuthOptionsRequest {
+    accountPatchAuthOptionsReqBody: AccountPatchAuthOptionsReqBody;
+}
+export interface AccountsApiUpdateOidcProviderRequest {
+    accountOIDCProviderPatch: AccountOIDCProviderPatch;
+}
+export interface AccountsApiUpdateOidcProviderClientSecretRequest {
+    accountPutOIDCClientSecretReqBody: AccountPutOIDCClientSecretReqBody;
+}
+/**
+ * AccountsApi - interface
+ *
+ * @export
+ * @interface AccountsApiInterface
+ */
+export interface AccountsApiInterface {
+    /**
+     * Creates an account owned by the authenticated user and returns its identifier.  Unless the template is `blank`, the account is seeded from a prebuilt one. Seeding runs in the background, so poll `GET /v1/accounts/{id}/setup-status` until it succeeds before sending the user into the new account.  Account names are unique; reusing one returns `400 account-name-in-use`. Requires the *Manage my account* permission.
+     * @summary Create an account
+     * @param {AccountPostReqBody} accountPostReqBody
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountsApiInterface
+     */
+    createRaw(requestParameters: AccountsApiCreateRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<number>>;
+    /**
+     * Creates an account owned by the authenticated user and returns its identifier.  Unless the template is `blank`, the account is seeded from a prebuilt one. Seeding runs in the background, so poll `GET /v1/accounts/{id}/setup-status` until it succeeds before sending the user into the new account.  Account names are unique; reusing one returns `400 account-name-in-use`. Requires the *Manage my account* permission.
+     * Create an account
+     */
+    create(requestParameters: AccountsApiCreateRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<number>;
+    /**
+     * Registers the identity provider members of the account the access token was issued for sign in through with single sign-on. An account has at most one provider; creating a second returns `409 oidc-provider-exists`. Creating a provider does not enable the `sso` sign-in method; enable it with `PATCH /v1/account/auth-options` afterwards.  The tenant must name a single organisation (Microsoft\'s `common`, `organizations` and `consumers` are rejected) or the request returns `400 invalid-tenant`. The provider\'s OpenID discovery document is fetched before anything is stored, and a provider that cannot be reached returns `400 oidc-discovery-failed`. The change is written to the audit log. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`.
+     * @summary Create the current account\'s OIDC provider
+     * @param {AccountPostOIDCProviderReqBody} accountPostOIDCProviderReqBody
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountsApiInterface
+     */
+    createOidcProviderRaw(requestParameters: AccountsApiCreateOidcProviderRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<AccountOIDCProvider>>;
+    /**
+     * Registers the identity provider members of the account the access token was issued for sign in through with single sign-on. An account has at most one provider; creating a second returns `409 oidc-provider-exists`. Creating a provider does not enable the `sso` sign-in method; enable it with `PATCH /v1/account/auth-options` afterwards.  The tenant must name a single organisation (Microsoft\'s `common`, `organizations` and `consumers` are rejected) or the request returns `400 invalid-tenant`. The provider\'s OpenID discovery document is fetched before anything is stored, and a provider that cannot be reached returns `400 oidc-discovery-failed`. The change is written to the audit log. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`.
+     * Create the current account\'s OIDC provider
+     */
+    createOidcProvider(requestParameters: AccountsApiCreateOidcProviderRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<AccountOIDCProvider>;
+    /**
+     * Permanently deletes the account the access token was issued for, along with its projects and members. This cannot be undone. Requires the *Manage my account* permission.
+     * @summary Delete the current account
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountsApiInterface
+     */
+    deleteRaw(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<void>>;
+    /**
+     * Permanently deletes the account the access token was issued for, along with its projects and members. This cannot be undone. Requires the *Manage my account* permission.
+     * Delete the current account
+     */
+    delete(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void>;
+    /**
+     * Removes the identity provider of the account the access token was issued for, together with its client secret, and disables the `sso` sign-in method in the same change. Sessions signed in through the provider can no longer refresh an access token scoped to the account.  Returns `400 last-auth-option-disabled` when single sign-on is the account\'s only enabled member sign-in method, `404 oidc-provider-not-configured` when the account has no provider, and `409 auth-options-changed` when the account\'s sign-in methods or its provider changed concurrently, in which case the request may be retried. The change is written to the audit log. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`.
+     * @summary Delete the current account\'s OIDC provider
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountsApiInterface
+     */
+    deleteOidcProviderRaw(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<void>>;
+    /**
+     * Removes the identity provider of the account the access token was issued for, together with its client secret, and disables the `sso` sign-in method in the same change. Sessions signed in through the provider can no longer refresh an access token scoped to the account.  Returns `400 last-auth-option-disabled` when single sign-on is the account\'s only enabled member sign-in method, `404 oidc-provider-not-configured` when the account has no provider, and `409 auth-options-changed` when the account\'s sign-in methods or its provider changed concurrently, in which case the request may be retried. The change is written to the audit log. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`.
+     * Delete the current account\'s OIDC provider
+     */
+    deleteOidcProvider(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void>;
+    /**
+     * Returns the account the access token was issued for. Use `GET /v1/account/profile` for the full profile, including address and notification preferences. Requires the *View account overview* permission.
+     * @summary Get the current account
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountsApiInterface
+     */
+    getRaw(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<Account>>;
+    /**
+     * Returns the account the access token was issued for. Use `GET /v1/account/profile` for the full profile, including address and notification preferences. Requires the *View account overview* permission.
+     * Get the current account
+     */
+    get(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<Account>;
+    /**
+     * Returns the sign-in methods configured for the account on a given hostname, each with whether it is enabled, so a login screen can offer the right options. Only `email_password`, `magic_link` and `sso` are returned, as a login screen cannot render any other method. An enabled `sso` method is omitted unless the account has exactly one OIDC provider, as signing in with SSO resolves exactly one; a disabled `sso` method is returned regardless. Open to unauthenticated callers.
+     * @summary List sign-in methods for a hostname
+     * @param {string} hostname Subdomain the user is signing in on.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountsApiInterface
+     */
+    getAuthOptionsRaw(requestParameters: AccountsApiGetAuthOptionsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<Array<AccountAuthOption>>>;
+    /**
+     * Returns the sign-in methods configured for the account on a given hostname, each with whether it is enabled, so a login screen can offer the right options. Only `email_password`, `magic_link` and `sso` are returned, as a login screen cannot render any other method. An enabled `sso` method is omitted unless the account has exactly one OIDC provider, as signing in with SSO resolves exactly one; a disabled `sso` method is returned regardless. Open to unauthenticated callers.
+     * List sign-in methods for a hostname
+     */
+    getAuthOptions(requestParameters: AccountsApiGetAuthOptionsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<Array<AccountAuthOption>>;
+    /**
+     * Returns the subdomain an account signs in on. Open to unauthenticated callers so that a client can redirect a user to the right host before they log in.
+     * @summary Get an account\'s hostname
+     * @param {number} id
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountsApiInterface
+     */
+    getHostnameRaw(requestParameters: AccountsApiGetHostnameRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<string>>;
+    /**
+     * Returns the subdomain an account signs in on. Open to unauthenticated callers so that a client can redirect a user to the right host before they log in.
+     * Get an account\'s hostname
+     */
+    getHostname(requestParameters: AccountsApiGetHostnameRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<string>;
+    /**
+     * Returns the identity provider members of the account the access token was issued for sign in through with single sign-on. The client secret is never returned; `clientSecretSet` reports whether one is stored.  Returns `404 oidc-provider-not-configured` when the account has no provider, and `409 sso-multiple-providers` when it has more than one. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`.
+     * @summary Get the current account\'s OIDC provider
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountsApiInterface
+     */
+    getOidcProviderRaw(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<AccountOIDCProvider>>;
+    /**
+     * Returns the identity provider members of the account the access token was issued for sign in through with single sign-on. The client secret is never returned; `clientSecretSet` reports whether one is stored.  Returns `404 oidc-provider-not-configured` when the account has no provider, and `409 sso-multiple-providers` when it has more than one. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`.
+     * Get the current account\'s OIDC provider
+     */
+    getOidcProvider(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<AccountOIDCProvider>;
+    /**
+     * Returns the full profile of the account the access token was issued for: company details, billing address, notification preferences and the third-party integrations that are connected. Requires the *Manage my account* permission.
+     * @summary Get the current account\'s profile
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountsApiInterface
+     */
+    getProfileRaw(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<AccountDetailsResBody>>;
+    /**
+     * Returns the full profile of the account the access token was issued for: company details, billing address, notification preferences and the third-party integrations that are connected. Requires the *Manage my account* permission.
+     * Get the current account\'s profile
+     */
+    getProfile(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<AccountDetailsResBody>;
+    /**
+     * Long-polls until the account created by `POST /v1/accounts` has finished being seeded from its template, then returns `200`.  The request is held open for up to 90 seconds and returns `408` if setup has not completed by then; call it again to keep waiting. The caller must be a member of the account and hold the *Manage my account* permission.
+     * @summary Wait for account setup to finish
+     * @param {number} id Identifier returned by POST /v1/accounts.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountsApiInterface
+     */
+    getSetupStatusRaw(requestParameters: AccountsApiGetSetupStatusRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<void>>;
+    /**
+     * Long-polls until the account created by `POST /v1/accounts` has finished being seeded from its template, then returns `200`.  The request is held open for up to 90 seconds and returns `408` if setup has not completed by then; call it again to keep waiting. The caller must be a member of the account and hold the *Manage my account* permission.
+     * Wait for account setup to finish
+     */
+    getSetupStatus(requestParameters: AccountsApiGetSetupStatusRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void>;
+    /**
+     * Returns how much the account the access token was issued for holds, currently the number of distinct objects, both overall and in active object groups only. The counts are running totals kept up to date as entries change; right after a group is archived or restored they can lag for a short while, and the objectCountsCalculating flag is set while an account\'s totals are first being built. Requires the *Manage my account* permission.
+     * @summary Get the current account\'s usage
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountsApiInterface
+     */
+    getUsageRaw(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<AccountUsageResBody>>;
+    /**
+     * Returns how much the account the access token was issued for holds, currently the number of distinct objects, both overall and in active object groups only. The counts are running totals kept up to date as entries change; right after a group is archived or restored they can lag for a short while, and the objectCountsCalculating flag is set while an account\'s totals are first being built. Requires the *Manage my account* permission.
+     * Get the current account\'s usage
+     */
+    getUsage(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<AccountUsageResBody>;
+    /**
+     * Returns every account the authenticated user is a member of, for building an account switcher. Requires the *Manage accounts* permission.
+     * @summary List the accounts you belong to
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountsApiInterface
+     */
+    listRaw(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<Array<ListAccountsForUserRow>>>;
+    /**
+     * Returns every account the authenticated user is a member of, for building an account switcher. Requires the *Manage accounts* permission.
+     * List the accounts you belong to
+     */
+    list(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<Array<ListAccountsForUserRow>>;
+    /**
+     * Returns every sign-in method configured for the account the access token was issued for, enabled or not, so it can be administered, along with whether single sign-on is available at all. Requires the *Manage my account* permission.  Use `/v1/auth/options/{hostname}` instead to render a sign-in screen.
+     * @summary List the current account\'s sign-in methods
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountsApiInterface
+     */
+    listAuthOptionsRaw(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<AccountGetAuthOptionsResBody>>;
+    /**
+     * Returns every sign-in method configured for the account the access token was issued for, enabled or not, so it can be administered, along with whether single sign-on is available at all. Requires the *Manage my account* permission.  Use `/v1/auth/options/{hostname}` instead to render a sign-in screen.
+     * List the current account\'s sign-in methods
+     */
+    listAuthOptions(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<AccountGetAuthOptionsResBody>;
+    /**
+     * Returns the credits the account used on each of the last `days` days, split into building layer data, aggregating it and the AI assistant. A piece of calculation work is charged once however many times it is computed, and a result already cached costs nothing. Credits are the same unit the rest of the account\'s usage is counted in. Requires the *Manage my account* permission. Returns `500` if the usage cannot be read.
+     * @summary Get the account\'s credit usage
+     * @param {30 | 90 | 365} [days] How many days of usage to return, ending today (UTC).
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountsApiInterface
+     */
+    listUsageCalculationCreditsRaw(requestParameters: AccountsApiListUsageCalculationCreditsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<AccountCalculationUsageBody>>;
+    /**
+     * Returns the credits the account used on each of the last `days` days, split into building layer data, aggregating it and the AI assistant. A piece of calculation work is charged once however many times it is computed, and a result already cached costs nothing. Credits are the same unit the rest of the account\'s usage is counted in. Requires the *Manage my account* permission. Returns `500` if the usage cannot be read.
+     * Get the account\'s credit usage
+     */
+    listUsageCalculationCredits(requestParameters: AccountsApiListUsageCalculationCreditsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<AccountCalculationUsageBody>;
+    /**
+     * Updates the account the access token was issued for. Only the fields present in the body are changed; omitted fields keep their current values. Requires the *Manage my account* permission.
+     * @summary Update the current account
+     * @param {AccountPutReqBody} accountPutReqBody
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountsApiInterface
+     */
+    updateRaw(requestParameters: AccountsApiUpdateRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<void>>;
+    /**
+     * Updates the account the access token was issued for. Only the fields present in the body are changed; omitted fields keep their current values. Requires the *Manage my account* permission.
+     * Update the current account
+     */
+    update(requestParameters: AccountsApiUpdateRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void>;
+    /**
+     * Enables or disables sign-in methods for the account the access token was issued for, and returns the full set as it now stands. Methods left out of the body keep their current setting, and a method listed more than once takes its last entry.  Disabling the last enabled method returns `400 last-auth-option-disabled`, and enabling `sso` returns `400 sso-not-configured` when the account has no OIDC provider or `400 sso-multiple-providers` when it has more than one, as signing in with SSO resolves exactly one provider. An `sso` method already enabled without exactly one provider does not count as an enabled method. Disabling `sso` stops sign-in through the account\'s own identity provider; an account whose single sign-on comes from a centrally managed shared provider keeps that route whatever this setting says. A concurrent change to the account\'s sign-in methods, or removal of the OIDC provider the result relies on, returns `409 auth-options-changed`, and the request may be retried. Requires the *Manage my account* permission.
+     * @summary Update the current account\'s sign-in methods
+     * @param {AccountPatchAuthOptionsReqBody} accountPatchAuthOptionsReqBody
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountsApiInterface
+     */
+    updateAuthOptionsRaw(requestParameters: AccountsApiUpdateAuthOptionsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<Array<AccountAuthOption>>>;
+    /**
+     * Enables or disables sign-in methods for the account the access token was issued for, and returns the full set as it now stands. Methods left out of the body keep their current setting, and a method listed more than once takes its last entry.  Disabling the last enabled method returns `400 last-auth-option-disabled`, and enabling `sso` returns `400 sso-not-configured` when the account has no OIDC provider or `400 sso-multiple-providers` when it has more than one, as signing in with SSO resolves exactly one provider. An `sso` method already enabled without exactly one provider does not count as an enabled method. Disabling `sso` stops sign-in through the account\'s own identity provider; an account whose single sign-on comes from a centrally managed shared provider keeps that route whatever this setting says. A concurrent change to the account\'s sign-in methods, or removal of the OIDC provider the result relies on, returns `409 auth-options-changed`, and the request may be retried. Requires the *Manage my account* permission.
+     * Update the current account\'s sign-in methods
+     */
+    updateAuthOptions(requestParameters: AccountsApiUpdateAuthOptionsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<Array<AccountAuthOption>>;
+    /**
+     * Changes the identity provider members of the account the access token was issued for sign in through with single sign-on. Fields left out keep their current value; the client secret is changed with `PUT /v1/account/oidc-provider/client-secret`.  When `providerName` or `tenant` changes, the tenant must name a single organisation or the request returns `400 invalid-tenant`, and the provider\'s OpenID discovery document is fetched before anything is stored; a provider that cannot be reached returns `400 oidc-discovery-failed`. Returns `404 oidc-provider-not-configured` when the account has no provider, and `409 oidc-provider-changed` when it was changed concurrently. The change is written to the audit log. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`.
+     * @summary Update the current account\'s OIDC provider
+     * @param {AccountOIDCProviderPatch} accountOIDCProviderPatch
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountsApiInterface
+     */
+    updateOidcProviderRaw(requestParameters: AccountsApiUpdateOidcProviderRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<AccountOIDCProvider>>;
+    /**
+     * Changes the identity provider members of the account the access token was issued for sign in through with single sign-on. Fields left out keep their current value; the client secret is changed with `PUT /v1/account/oidc-provider/client-secret`.  When `providerName` or `tenant` changes, the tenant must name a single organisation or the request returns `400 invalid-tenant`, and the provider\'s OpenID discovery document is fetched before anything is stored; a provider that cannot be reached returns `400 oidc-discovery-failed`. Returns `404 oidc-provider-not-configured` when the account has no provider, and `409 oidc-provider-changed` when it was changed concurrently. The change is written to the audit log. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`.
+     * Update the current account\'s OIDC provider
+     */
+    updateOidcProvider(requestParameters: AccountsApiUpdateOidcProviderRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<AccountOIDCProvider>;
+    /**
+     * Stores a new client secret for the identity provider of the account the access token was issued for. The secret is write-only: no endpoint returns it. Returns `404 oidc-provider-not-configured` when the account has no provider. The change is written to the audit log without the secret. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`.
+     * @summary Replace the current account\'s OIDC client secret
+     * @param {AccountPutOIDCClientSecretReqBody} accountPutOIDCClientSecretReqBody
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountsApiInterface
+     */
+    updateOidcProviderClientSecretRaw(requestParameters: AccountsApiUpdateOidcProviderClientSecretRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<void>>;
+    /**
+     * Stores a new client secret for the identity provider of the account the access token was issued for. The secret is write-only: no endpoint returns it. Returns `404 oidc-provider-not-configured` when the account has no provider. The change is written to the audit log without the secret. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`.
+     * Replace the current account\'s OIDC client secret
+     */
+    updateOidcProviderClientSecret(requestParameters: AccountsApiUpdateOidcProviderClientSecretRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void>;
+}
+/**
+ *
+ */
+export declare class AccountsApi extends runtime.BaseAPI implements AccountsApiInterface {
+    /**
+     * Creates an account owned by the authenticated user and returns its identifier.  Unless the template is `blank`, the account is seeded from a prebuilt one. Seeding runs in the background, so poll `GET /v1/accounts/{id}/setup-status` until it succeeds before sending the user into the new account.  Account names are unique; reusing one returns `400 account-name-in-use`. Requires the *Manage my account* permission.
+     * Create an account
+     */
+    createRaw(requestParameters: AccountsApiCreateRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<number>>;
+    /**
+     * Creates an account owned by the authenticated user and returns its identifier.  Unless the template is `blank`, the account is seeded from a prebuilt one. Seeding runs in the background, so poll `GET /v1/accounts/{id}/setup-status` until it succeeds before sending the user into the new account.  Account names are unique; reusing one returns `400 account-name-in-use`. Requires the *Manage my account* permission.
+     * Create an account
+     */
+    create(requestParameters: AccountsApiCreateRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<number>;
+    /**
+     * Registers the identity provider members of the account the access token was issued for sign in through with single sign-on. An account has at most one provider; creating a second returns `409 oidc-provider-exists`. Creating a provider does not enable the `sso` sign-in method; enable it with `PATCH /v1/account/auth-options` afterwards.  The tenant must name a single organisation (Microsoft\'s `common`, `organizations` and `consumers` are rejected) or the request returns `400 invalid-tenant`. The provider\'s OpenID discovery document is fetched before anything is stored, and a provider that cannot be reached returns `400 oidc-discovery-failed`. The change is written to the audit log. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`.
+     * Create the current account\'s OIDC provider
+     */
+    createOidcProviderRaw(requestParameters: AccountsApiCreateOidcProviderRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<AccountOIDCProvider>>;
+    /**
+     * Registers the identity provider members of the account the access token was issued for sign in through with single sign-on. An account has at most one provider; creating a second returns `409 oidc-provider-exists`. Creating a provider does not enable the `sso` sign-in method; enable it with `PATCH /v1/account/auth-options` afterwards.  The tenant must name a single organisation (Microsoft\'s `common`, `organizations` and `consumers` are rejected) or the request returns `400 invalid-tenant`. The provider\'s OpenID discovery document is fetched before anything is stored, and a provider that cannot be reached returns `400 oidc-discovery-failed`. The change is written to the audit log. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`.
+     * Create the current account\'s OIDC provider
+     */
+    createOidcProvider(requestParameters: AccountsApiCreateOidcProviderRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<AccountOIDCProvider>;
+    /**
+     * Permanently deletes the account the access token was issued for, along with its projects and members. This cannot be undone. Requires the *Manage my account* permission.
+     * Delete the current account
+     */
+    deleteRaw(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<void>>;
+    /**
+     * Permanently deletes the account the access token was issued for, along with its projects and members. This cannot be undone. Requires the *Manage my account* permission.
+     * Delete the current account
+     */
+    delete(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void>;
+    /**
+     * Removes the identity provider of the account the access token was issued for, together with its client secret, and disables the `sso` sign-in method in the same change. Sessions signed in through the provider can no longer refresh an access token scoped to the account.  Returns `400 last-auth-option-disabled` when single sign-on is the account\'s only enabled member sign-in method, `404 oidc-provider-not-configured` when the account has no provider, and `409 auth-options-changed` when the account\'s sign-in methods or its provider changed concurrently, in which case the request may be retried. The change is written to the audit log. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`.
+     * Delete the current account\'s OIDC provider
+     */
+    deleteOidcProviderRaw(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<void>>;
+    /**
+     * Removes the identity provider of the account the access token was issued for, together with its client secret, and disables the `sso` sign-in method in the same change. Sessions signed in through the provider can no longer refresh an access token scoped to the account.  Returns `400 last-auth-option-disabled` when single sign-on is the account\'s only enabled member sign-in method, `404 oidc-provider-not-configured` when the account has no provider, and `409 auth-options-changed` when the account\'s sign-in methods or its provider changed concurrently, in which case the request may be retried. The change is written to the audit log. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`.
+     * Delete the current account\'s OIDC provider
+     */
+    deleteOidcProvider(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void>;
+    /**
+     * Returns the account the access token was issued for. Use `GET /v1/account/profile` for the full profile, including address and notification preferences. Requires the *View account overview* permission.
+     * Get the current account
+     */
+    getRaw(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<Account>>;
+    /**
+     * Returns the account the access token was issued for. Use `GET /v1/account/profile` for the full profile, including address and notification preferences. Requires the *View account overview* permission.
+     * Get the current account
+     */
+    get(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<Account>;
+    /**
+     * Returns the sign-in methods configured for the account on a given hostname, each with whether it is enabled, so a login screen can offer the right options. Only `email_password`, `magic_link` and `sso` are returned, as a login screen cannot render any other method. An enabled `sso` method is omitted unless the account has exactly one OIDC provider, as signing in with SSO resolves exactly one; a disabled `sso` method is returned regardless. Open to unauthenticated callers.
+     * List sign-in methods for a hostname
+     */
+    getAuthOptionsRaw(requestParameters: AccountsApiGetAuthOptionsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<Array<AccountAuthOption>>>;
+    /**
+     * Returns the sign-in methods configured for the account on a given hostname, each with whether it is enabled, so a login screen can offer the right options. Only `email_password`, `magic_link` and `sso` are returned, as a login screen cannot render any other method. An enabled `sso` method is omitted unless the account has exactly one OIDC provider, as signing in with SSO resolves exactly one; a disabled `sso` method is returned regardless. Open to unauthenticated callers.
+     * List sign-in methods for a hostname
+     */
+    getAuthOptions(requestParameters: AccountsApiGetAuthOptionsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<Array<AccountAuthOption>>;
+    /**
+     * Returns the subdomain an account signs in on. Open to unauthenticated callers so that a client can redirect a user to the right host before they log in.
+     * Get an account\'s hostname
+     */
+    getHostnameRaw(requestParameters: AccountsApiGetHostnameRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<string>>;
+    /**
+     * Returns the subdomain an account signs in on. Open to unauthenticated callers so that a client can redirect a user to the right host before they log in.
+     * Get an account\'s hostname
+     */
+    getHostname(requestParameters: AccountsApiGetHostnameRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<string>;
+    /**
+     * Returns the identity provider members of the account the access token was issued for sign in through with single sign-on. The client secret is never returned; `clientSecretSet` reports whether one is stored.  Returns `404 oidc-provider-not-configured` when the account has no provider, and `409 sso-multiple-providers` when it has more than one. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`.
+     * Get the current account\'s OIDC provider
+     */
+    getOidcProviderRaw(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<AccountOIDCProvider>>;
+    /**
+     * Returns the identity provider members of the account the access token was issued for sign in through with single sign-on. The client secret is never returned; `clientSecretSet` reports whether one is stored.  Returns `404 oidc-provider-not-configured` when the account has no provider, and `409 sso-multiple-providers` when it has more than one. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`.
+     * Get the current account\'s OIDC provider
+     */
+    getOidcProvider(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<AccountOIDCProvider>;
+    /**
+     * Returns the full profile of the account the access token was issued for: company details, billing address, notification preferences and the third-party integrations that are connected. Requires the *Manage my account* permission.
+     * Get the current account\'s profile
+     */
+    getProfileRaw(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<AccountDetailsResBody>>;
+    /**
+     * Returns the full profile of the account the access token was issued for: company details, billing address, notification preferences and the third-party integrations that are connected. Requires the *Manage my account* permission.
+     * Get the current account\'s profile
+     */
+    getProfile(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<AccountDetailsResBody>;
+    /**
+     * Long-polls until the account created by `POST /v1/accounts` has finished being seeded from its template, then returns `200`.  The request is held open for up to 90 seconds and returns `408` if setup has not completed by then; call it again to keep waiting. The caller must be a member of the account and hold the *Manage my account* permission.
+     * Wait for account setup to finish
+     */
+    getSetupStatusRaw(requestParameters: AccountsApiGetSetupStatusRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<void>>;
+    /**
+     * Long-polls until the account created by `POST /v1/accounts` has finished being seeded from its template, then returns `200`.  The request is held open for up to 90 seconds and returns `408` if setup has not completed by then; call it again to keep waiting. The caller must be a member of the account and hold the *Manage my account* permission.
+     * Wait for account setup to finish
+     */
+    getSetupStatus(requestParameters: AccountsApiGetSetupStatusRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void>;
+    /**
+     * Returns how much the account the access token was issued for holds, currently the number of distinct objects, both overall and in active object groups only. The counts are running totals kept up to date as entries change; right after a group is archived or restored they can lag for a short while, and the objectCountsCalculating flag is set while an account\'s totals are first being built. Requires the *Manage my account* permission.
+     * Get the current account\'s usage
+     */
+    getUsageRaw(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<AccountUsageResBody>>;
+    /**
+     * Returns how much the account the access token was issued for holds, currently the number of distinct objects, both overall and in active object groups only. The counts are running totals kept up to date as entries change; right after a group is archived or restored they can lag for a short while, and the objectCountsCalculating flag is set while an account\'s totals are first being built. Requires the *Manage my account* permission.
+     * Get the current account\'s usage
+     */
+    getUsage(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<AccountUsageResBody>;
+    /**
+     * Returns every account the authenticated user is a member of, for building an account switcher. Requires the *Manage accounts* permission.
+     * List the accounts you belong to
+     */
+    listRaw(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<Array<ListAccountsForUserRow>>>;
+    /**
+     * Returns every account the authenticated user is a member of, for building an account switcher. Requires the *Manage accounts* permission.
+     * List the accounts you belong to
+     */
+    list(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<Array<ListAccountsForUserRow>>;
+    /**
+     * Returns every sign-in method configured for the account the access token was issued for, enabled or not, so it can be administered, along with whether single sign-on is available at all. Requires the *Manage my account* permission.  Use `/v1/auth/options/{hostname}` instead to render a sign-in screen.
+     * List the current account\'s sign-in methods
+     */
+    listAuthOptionsRaw(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<AccountGetAuthOptionsResBody>>;
+    /**
+     * Returns every sign-in method configured for the account the access token was issued for, enabled or not, so it can be administered, along with whether single sign-on is available at all. Requires the *Manage my account* permission.  Use `/v1/auth/options/{hostname}` instead to render a sign-in screen.
+     * List the current account\'s sign-in methods
+     */
+    listAuthOptions(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<AccountGetAuthOptionsResBody>;
+    /**
+     * Returns the credits the account used on each of the last `days` days, split into building layer data, aggregating it and the AI assistant. A piece of calculation work is charged once however many times it is computed, and a result already cached costs nothing. Credits are the same unit the rest of the account\'s usage is counted in. Requires the *Manage my account* permission. Returns `500` if the usage cannot be read.
+     * Get the account\'s credit usage
+     */
+    listUsageCalculationCreditsRaw(requestParameters: AccountsApiListUsageCalculationCreditsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<AccountCalculationUsageBody>>;
+    /**
+     * Returns the credits the account used on each of the last `days` days, split into building layer data, aggregating it and the AI assistant. A piece of calculation work is charged once however many times it is computed, and a result already cached costs nothing. Credits are the same unit the rest of the account\'s usage is counted in. Requires the *Manage my account* permission. Returns `500` if the usage cannot be read.
+     * Get the account\'s credit usage
+     */
+    listUsageCalculationCredits(requestParameters?: AccountsApiListUsageCalculationCreditsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<AccountCalculationUsageBody>;
+    /**
+     * Updates the account the access token was issued for. Only the fields present in the body are changed; omitted fields keep their current values. Requires the *Manage my account* permission.
+     * Update the current account
+     */
+    updateRaw(requestParameters: AccountsApiUpdateRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<void>>;
+    /**
+     * Updates the account the access token was issued for. Only the fields present in the body are changed; omitted fields keep their current values. Requires the *Manage my account* permission.
+     * Update the current account
+     */
+    update(requestParameters: AccountsApiUpdateRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void>;
+    /**
+     * Enables or disables sign-in methods for the account the access token was issued for, and returns the full set as it now stands. Methods left out of the body keep their current setting, and a method listed more than once takes its last entry.  Disabling the last enabled method returns `400 last-auth-option-disabled`, and enabling `sso` returns `400 sso-not-configured` when the account has no OIDC provider or `400 sso-multiple-providers` when it has more than one, as signing in with SSO resolves exactly one provider. An `sso` method already enabled without exactly one provider does not count as an enabled method. Disabling `sso` stops sign-in through the account\'s own identity provider; an account whose single sign-on comes from a centrally managed shared provider keeps that route whatever this setting says. A concurrent change to the account\'s sign-in methods, or removal of the OIDC provider the result relies on, returns `409 auth-options-changed`, and the request may be retried. Requires the *Manage my account* permission.
+     * Update the current account\'s sign-in methods
+     */
+    updateAuthOptionsRaw(requestParameters: AccountsApiUpdateAuthOptionsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<Array<AccountAuthOption>>>;
+    /**
+     * Enables or disables sign-in methods for the account the access token was issued for, and returns the full set as it now stands. Methods left out of the body keep their current setting, and a method listed more than once takes its last entry.  Disabling the last enabled method returns `400 last-auth-option-disabled`, and enabling `sso` returns `400 sso-not-configured` when the account has no OIDC provider or `400 sso-multiple-providers` when it has more than one, as signing in with SSO resolves exactly one provider. An `sso` method already enabled without exactly one provider does not count as an enabled method. Disabling `sso` stops sign-in through the account\'s own identity provider; an account whose single sign-on comes from a centrally managed shared provider keeps that route whatever this setting says. A concurrent change to the account\'s sign-in methods, or removal of the OIDC provider the result relies on, returns `409 auth-options-changed`, and the request may be retried. Requires the *Manage my account* permission.
+     * Update the current account\'s sign-in methods
+     */
+    updateAuthOptions(requestParameters: AccountsApiUpdateAuthOptionsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<Array<AccountAuthOption>>;
+    /**
+     * Changes the identity provider members of the account the access token was issued for sign in through with single sign-on. Fields left out keep their current value; the client secret is changed with `PUT /v1/account/oidc-provider/client-secret`.  When `providerName` or `tenant` changes, the tenant must name a single organisation or the request returns `400 invalid-tenant`, and the provider\'s OpenID discovery document is fetched before anything is stored; a provider that cannot be reached returns `400 oidc-discovery-failed`. Returns `404 oidc-provider-not-configured` when the account has no provider, and `409 oidc-provider-changed` when it was changed concurrently. The change is written to the audit log. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`.
+     * Update the current account\'s OIDC provider
+     */
+    updateOidcProviderRaw(requestParameters: AccountsApiUpdateOidcProviderRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<AccountOIDCProvider>>;
+    /**
+     * Changes the identity provider members of the account the access token was issued for sign in through with single sign-on. Fields left out keep their current value; the client secret is changed with `PUT /v1/account/oidc-provider/client-secret`.  When `providerName` or `tenant` changes, the tenant must name a single organisation or the request returns `400 invalid-tenant`, and the provider\'s OpenID discovery document is fetched before anything is stored; a provider that cannot be reached returns `400 oidc-discovery-failed`. Returns `404 oidc-provider-not-configured` when the account has no provider, and `409 oidc-provider-changed` when it was changed concurrently. The change is written to the audit log. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`.
+     * Update the current account\'s OIDC provider
+     */
+    updateOidcProvider(requestParameters: AccountsApiUpdateOidcProviderRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<AccountOIDCProvider>;
+    /**
+     * Stores a new client secret for the identity provider of the account the access token was issued for. The secret is write-only: no endpoint returns it. Returns `404 oidc-provider-not-configured` when the account has no provider. The change is written to the audit log without the secret. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`.
+     * Replace the current account\'s OIDC client secret
+     */
+    updateOidcProviderClientSecretRaw(requestParameters: AccountsApiUpdateOidcProviderClientSecretRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<void>>;
+    /**
+     * Stores a new client secret for the identity provider of the account the access token was issued for. The secret is write-only: no endpoint returns it. Returns `404 oidc-provider-not-configured` when the account has no provider. The change is written to the audit log without the secret. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`.
+     * Replace the current account\'s OIDC client secret
+     */
+    updateOidcProviderClientSecret(requestParameters: AccountsApiUpdateOidcProviderClientSecretRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void>;
+}
+/**
+ * @export
+ */
+export declare const AccountsApiListUsageCalculationCreditsDaysEnum: {
+    readonly NUMBER_30: 30;
+    readonly NUMBER_90: 90;
+    readonly NUMBER_365: 365;
+};
+export type AccountsApiListUsageCalculationCreditsDaysEnum = typeof AccountsApiListUsageCalculationCreditsDaysEnum[keyof typeof AccountsApiListUsageCalculationCreditsDaysEnum];