@spaciv/sdk 0.1.0 → 0.1.2

package/src/apis/AccountsApi.ts

@@ -128,7 +128,7 @@ export interface AccountsApiInterface {
     create(requestParameters: AccountsApiCreateRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<number>;
 
     /**
-     * Registers the identity provider members of the account the access token was issued for sign in through with single sign-on. An account has at most one provider; creating a second returns `409 oidc-provider-exists`. Creating a provider does not enable the `sso` sign-in method; enable it with `PATCH /v1/account/auth-options` afterwards.  The tenant must name a single organisation (Microsoft\'s `common`, `organizations` and `consumers` are rejected) or the request returns `400 invalid-tenant`. The provider\'s OpenID discovery document is fetched before anything is stored, and a provider that cannot be reached returns `400 oidc-discovery-failed`. The change is written to the audit log. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`.
+     * Registers the identity provider members of the account the access token was issued for sign in through with single sign-on. An account has at most one provider; creating a second returns `409 oidc-provider-exists`. Creating a provider does not enable the `sso` sign-in method; enable it with `PATCH /v1/account/auth-options` afterwards.  The tenant must name a single organisation (Microsoft\'s `common`, `organizations` and `consumers` are rejected) or the request returns `400 invalid-tenant`. The provider\'s OpenID discovery document is fetched before anything is stored, and a provider that cannot be reached returns `400 oidc-discovery-failed`. The change is written to the audit log. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`. A script\'s own API key cannot call it.
      * @summary Create the current account\'s OIDC provider
      * @param {AccountPostOIDCProviderReqBody} accountPostOIDCProviderReqBody 
      * @param {*} [options] Override http request option.
@@ -138,13 +138,13 @@ export interface AccountsApiInterface {
     createOidcProviderRaw(requestParameters: AccountsApiCreateOidcProviderRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<AccountOIDCProvider>>;
 
     /**
-     * Registers the identity provider members of the account the access token was issued for sign in through with single sign-on. An account has at most one provider; creating a second returns `409 oidc-provider-exists`. Creating a provider does not enable the `sso` sign-in method; enable it with `PATCH /v1/account/auth-options` afterwards.  The tenant must name a single organisation (Microsoft\'s `common`, `organizations` and `consumers` are rejected) or the request returns `400 invalid-tenant`. The provider\'s OpenID discovery document is fetched before anything is stored, and a provider that cannot be reached returns `400 oidc-discovery-failed`. The change is written to the audit log. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`.
+     * Registers the identity provider members of the account the access token was issued for sign in through with single sign-on. An account has at most one provider; creating a second returns `409 oidc-provider-exists`. Creating a provider does not enable the `sso` sign-in method; enable it with `PATCH /v1/account/auth-options` afterwards.  The tenant must name a single organisation (Microsoft\'s `common`, `organizations` and `consumers` are rejected) or the request returns `400 invalid-tenant`. The provider\'s OpenID discovery document is fetched before anything is stored, and a provider that cannot be reached returns `400 oidc-discovery-failed`. The change is written to the audit log. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`. A script\'s own API key cannot call it.
      * Create the current account\'s OIDC provider
      */
     createOidcProvider(requestParameters: AccountsApiCreateOidcProviderRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<AccountOIDCProvider>;
 
     /**
-     * Permanently deletes the account the access token was issued for, along with its projects and members. This cannot be undone. Requires the *Manage my account* permission.
+     * Permanently deletes the account the access token was issued for, along with its projects, members and scripts. This cannot be undone. Scripts are deleted first, so if the request fails some of them may already be gone; repeat it to finish deleting the account. Requires the *Manage my account* permission. A script\'s own API key cannot delete the account.
      * @summary Delete the current account
      * @param {*} [options] Override http request option.
      * @throws {RequiredError}
@@ -153,13 +153,13 @@ export interface AccountsApiInterface {
     deleteRaw(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<void>>;
 
     /**
-     * Permanently deletes the account the access token was issued for, along with its projects and members. This cannot be undone. Requires the *Manage my account* permission.
+     * Permanently deletes the account the access token was issued for, along with its projects, members and scripts. This cannot be undone. Scripts are deleted first, so if the request fails some of them may already be gone; repeat it to finish deleting the account. Requires the *Manage my account* permission. A script\'s own API key cannot delete the account.
      * Delete the current account
      */
     delete(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void>;
 
     /**
-     * Removes the identity provider of the account the access token was issued for, together with its client secret, and disables the `sso` sign-in method in the same change. Sessions signed in through the provider can no longer refresh an access token scoped to the account.  Returns `400 last-auth-option-disabled` when single sign-on is the account\'s only enabled member sign-in method, `404 oidc-provider-not-configured` when the account has no provider, and `409 auth-options-changed` when the account\'s sign-in methods or its provider changed concurrently, in which case the request may be retried. The change is written to the audit log. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`.
+     * Removes the identity provider of the account the access token was issued for, together with its client secret, and disables the `sso` sign-in method in the same change. Sessions signed in through the provider can no longer refresh an access token scoped to the account.  Returns `400 last-auth-option-disabled` when single sign-on is the account\'s only enabled member sign-in method, `404 oidc-provider-not-configured` when the account has no provider, and `409 auth-options-changed` when the account\'s sign-in methods or its provider changed concurrently, in which case the request may be retried. The change is written to the audit log. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`. A script\'s own API key cannot call it.
      * @summary Delete the current account\'s OIDC provider
      * @param {*} [options] Override http request option.
      * @throws {RequiredError}
@@ -168,7 +168,7 @@ export interface AccountsApiInterface {
     deleteOidcProviderRaw(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<void>>;
 
     /**
-     * Removes the identity provider of the account the access token was issued for, together with its client secret, and disables the `sso` sign-in method in the same change. Sessions signed in through the provider can no longer refresh an access token scoped to the account.  Returns `400 last-auth-option-disabled` when single sign-on is the account\'s only enabled member sign-in method, `404 oidc-provider-not-configured` when the account has no provider, and `409 auth-options-changed` when the account\'s sign-in methods or its provider changed concurrently, in which case the request may be retried. The change is written to the audit log. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`.
+     * Removes the identity provider of the account the access token was issued for, together with its client secret, and disables the `sso` sign-in method in the same change. Sessions signed in through the provider can no longer refresh an access token scoped to the account.  Returns `400 last-auth-option-disabled` when single sign-on is the account\'s only enabled member sign-in method, `404 oidc-provider-not-configured` when the account has no provider, and `409 auth-options-changed` when the account\'s sign-in methods or its provider changed concurrently, in which case the request may be retried. The change is written to the audit log. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`. A script\'s own API key cannot call it.
      * Delete the current account\'s OIDC provider
      */
     deleteOidcProvider(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void>;
@@ -221,7 +221,7 @@ export interface AccountsApiInterface {
     getHostname(requestParameters: AccountsApiGetHostnameRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<string>;
 
     /**
-     * Returns the identity provider members of the account the access token was issued for sign in through with single sign-on. The client secret is never returned; `clientSecretSet` reports whether one is stored.  Returns `404 oidc-provider-not-configured` when the account has no provider, and `409 sso-multiple-providers` when it has more than one. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`.
+     * Returns the identity provider members of the account the access token was issued for sign in through with single sign-on. The client secret is never returned; `clientSecretSet` reports whether one is stored.  Returns `404 oidc-provider-not-configured` when the account has no provider, and `409 sso-multiple-providers` when it has more than one. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`. A script\'s own API key cannot call it.
      * @summary Get the current account\'s OIDC provider
      * @param {*} [options] Override http request option.
      * @throws {RequiredError}
@@ -230,7 +230,7 @@ export interface AccountsApiInterface {
     getOidcProviderRaw(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<AccountOIDCProvider>>;
 
     /**
-     * Returns the identity provider members of the account the access token was issued for sign in through with single sign-on. The client secret is never returned; `clientSecretSet` reports whether one is stored.  Returns `404 oidc-provider-not-configured` when the account has no provider, and `409 sso-multiple-providers` when it has more than one. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`.
+     * Returns the identity provider members of the account the access token was issued for sign in through with single sign-on. The client secret is never returned; `clientSecretSet` reports whether one is stored.  Returns `404 oidc-provider-not-configured` when the account has no provider, and `409 sso-multiple-providers` when it has more than one. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`. A script\'s own API key cannot call it.
      * Get the current account\'s OIDC provider
      */
     getOidcProvider(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<AccountOIDCProvider>;
@@ -360,7 +360,7 @@ export interface AccountsApiInterface {
     updateAuthOptions(requestParameters: AccountsApiUpdateAuthOptionsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<Array<AccountAuthOption>>;
 
     /**
-     * Changes the identity provider members of the account the access token was issued for sign in through with single sign-on. Fields left out keep their current value; the client secret is changed with `PUT /v1/account/oidc-provider/client-secret`.  When `providerName` or `tenant` changes, the tenant must name a single organisation or the request returns `400 invalid-tenant`, and the provider\'s OpenID discovery document is fetched before anything is stored; a provider that cannot be reached returns `400 oidc-discovery-failed`. Returns `404 oidc-provider-not-configured` when the account has no provider, and `409 oidc-provider-changed` when it was changed concurrently. The change is written to the audit log. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`.
+     * Changes the identity provider members of the account the access token was issued for sign in through with single sign-on. Fields left out keep their current value; the client secret is changed with `PUT /v1/account/oidc-provider/client-secret`.  When `providerName` or `tenant` changes, the tenant must name a single organisation or the request returns `400 invalid-tenant`, and the provider\'s OpenID discovery document is fetched before anything is stored; a provider that cannot be reached returns `400 oidc-discovery-failed`. Returns `404 oidc-provider-not-configured` when the account has no provider, and `409 oidc-provider-changed` when it was changed concurrently. The change is written to the audit log. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`. A script\'s own API key cannot call it.
      * @summary Update the current account\'s OIDC provider
      * @param {AccountOIDCProviderPatch} accountOIDCProviderPatch 
      * @param {*} [options] Override http request option.
@@ -370,13 +370,13 @@ export interface AccountsApiInterface {
     updateOidcProviderRaw(requestParameters: AccountsApiUpdateOidcProviderRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<AccountOIDCProvider>>;
 
     /**
-     * Changes the identity provider members of the account the access token was issued for sign in through with single sign-on. Fields left out keep their current value; the client secret is changed with `PUT /v1/account/oidc-provider/client-secret`.  When `providerName` or `tenant` changes, the tenant must name a single organisation or the request returns `400 invalid-tenant`, and the provider\'s OpenID discovery document is fetched before anything is stored; a provider that cannot be reached returns `400 oidc-discovery-failed`. Returns `404 oidc-provider-not-configured` when the account has no provider, and `409 oidc-provider-changed` when it was changed concurrently. The change is written to the audit log. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`.
+     * Changes the identity provider members of the account the access token was issued for sign in through with single sign-on. Fields left out keep their current value; the client secret is changed with `PUT /v1/account/oidc-provider/client-secret`.  When `providerName` or `tenant` changes, the tenant must name a single organisation or the request returns `400 invalid-tenant`, and the provider\'s OpenID discovery document is fetched before anything is stored; a provider that cannot be reached returns `400 oidc-discovery-failed`. Returns `404 oidc-provider-not-configured` when the account has no provider, and `409 oidc-provider-changed` when it was changed concurrently. The change is written to the audit log. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`. A script\'s own API key cannot call it.
      * Update the current account\'s OIDC provider
      */
     updateOidcProvider(requestParameters: AccountsApiUpdateOidcProviderRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<AccountOIDCProvider>;
 
     /**
-     * Stores a new client secret for the identity provider of the account the access token was issued for. The secret is write-only: no endpoint returns it. Returns `404 oidc-provider-not-configured` when the account has no provider. The change is written to the audit log without the secret. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`.
+     * Stores a new client secret for the identity provider of the account the access token was issued for. The secret is write-only: no endpoint returns it. Returns `404 oidc-provider-not-configured` when the account has no provider. The change is written to the audit log without the secret. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`. A script\'s own API key cannot call it.
      * @summary Replace the current account\'s OIDC client secret
      * @param {AccountPutOIDCClientSecretReqBody} accountPutOIDCClientSecretReqBody 
      * @param {*} [options] Override http request option.
@@ -386,7 +386,7 @@ export interface AccountsApiInterface {
     updateOidcProviderClientSecretRaw(requestParameters: AccountsApiUpdateOidcProviderClientSecretRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<void>>;
 
     /**
-     * Stores a new client secret for the identity provider of the account the access token was issued for. The secret is write-only: no endpoint returns it. Returns `404 oidc-provider-not-configured` when the account has no provider. The change is written to the audit log without the secret. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`.
+     * Stores a new client secret for the identity provider of the account the access token was issued for. The secret is write-only: no endpoint returns it. Returns `404 oidc-provider-not-configured` when the account has no provider. The change is written to the audit log without the secret. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`. A script\'s own API key cannot call it.
      * Replace the current account\'s OIDC client secret
      */
     updateOidcProviderClientSecret(requestParameters: AccountsApiUpdateOidcProviderClientSecretRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void>;
@@ -452,7 +452,7 @@ export class AccountsApi extends runtime.BaseAPI implements AccountsApiInterface
     }
 
     /**
-     * Registers the identity provider members of the account the access token was issued for sign in through with single sign-on. An account has at most one provider; creating a second returns `409 oidc-provider-exists`. Creating a provider does not enable the `sso` sign-in method; enable it with `PATCH /v1/account/auth-options` afterwards.  The tenant must name a single organisation (Microsoft\'s `common`, `organizations` and `consumers` are rejected) or the request returns `400 invalid-tenant`. The provider\'s OpenID discovery document is fetched before anything is stored, and a provider that cannot be reached returns `400 oidc-discovery-failed`. The change is written to the audit log. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`.
+     * Registers the identity provider members of the account the access token was issued for sign in through with single sign-on. An account has at most one provider; creating a second returns `409 oidc-provider-exists`. Creating a provider does not enable the `sso` sign-in method; enable it with `PATCH /v1/account/auth-options` afterwards.  The tenant must name a single organisation (Microsoft\'s `common`, `organizations` and `consumers` are rejected) or the request returns `400 invalid-tenant`. The provider\'s OpenID discovery document is fetched before anything is stored, and a provider that cannot be reached returns `400 oidc-discovery-failed`. The change is written to the audit log. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`. A script\'s own API key cannot call it.
      * Create the current account\'s OIDC provider
      */
     async createOidcProviderRaw(requestParameters: AccountsApiCreateOidcProviderRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<AccountOIDCProvider>> {
@@ -492,7 +492,7 @@ export class AccountsApi extends runtime.BaseAPI implements AccountsApiInterface
     }
 
     /**
-     * Registers the identity provider members of the account the access token was issued for sign in through with single sign-on. An account has at most one provider; creating a second returns `409 oidc-provider-exists`. Creating a provider does not enable the `sso` sign-in method; enable it with `PATCH /v1/account/auth-options` afterwards.  The tenant must name a single organisation (Microsoft\'s `common`, `organizations` and `consumers` are rejected) or the request returns `400 invalid-tenant`. The provider\'s OpenID discovery document is fetched before anything is stored, and a provider that cannot be reached returns `400 oidc-discovery-failed`. The change is written to the audit log. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`.
+     * Registers the identity provider members of the account the access token was issued for sign in through with single sign-on. An account has at most one provider; creating a second returns `409 oidc-provider-exists`. Creating a provider does not enable the `sso` sign-in method; enable it with `PATCH /v1/account/auth-options` afterwards.  The tenant must name a single organisation (Microsoft\'s `common`, `organizations` and `consumers` are rejected) or the request returns `400 invalid-tenant`. The provider\'s OpenID discovery document is fetched before anything is stored, and a provider that cannot be reached returns `400 oidc-discovery-failed`. The change is written to the audit log. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`. A script\'s own API key cannot call it.
      * Create the current account\'s OIDC provider
      */
     async createOidcProvider(requestParameters: AccountsApiCreateOidcProviderRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<AccountOIDCProvider> {
@@ -501,7 +501,7 @@ export class AccountsApi extends runtime.BaseAPI implements AccountsApiInterface
     }
 
     /**
-     * Permanently deletes the account the access token was issued for, along with its projects and members. This cannot be undone. Requires the *Manage my account* permission.
+     * Permanently deletes the account the access token was issued for, along with its projects, members and scripts. This cannot be undone. Scripts are deleted first, so if the request fails some of them may already be gone; repeat it to finish deleting the account. Requires the *Manage my account* permission. A script\'s own API key cannot delete the account.
      * Delete the current account
      */
     async deleteRaw(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<void>> {
@@ -531,7 +531,7 @@ export class AccountsApi extends runtime.BaseAPI implements AccountsApiInterface
     }
 
     /**
-     * Permanently deletes the account the access token was issued for, along with its projects and members. This cannot be undone. Requires the *Manage my account* permission.
+     * Permanently deletes the account the access token was issued for, along with its projects, members and scripts. This cannot be undone. Scripts are deleted first, so if the request fails some of them may already be gone; repeat it to finish deleting the account. Requires the *Manage my account* permission. A script\'s own API key cannot delete the account.
      * Delete the current account
      */
     async delete(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void> {
@@ -539,7 +539,7 @@ export class AccountsApi extends runtime.BaseAPI implements AccountsApiInterface
     }
 
     /**
-     * Removes the identity provider of the account the access token was issued for, together with its client secret, and disables the `sso` sign-in method in the same change. Sessions signed in through the provider can no longer refresh an access token scoped to the account.  Returns `400 last-auth-option-disabled` when single sign-on is the account\'s only enabled member sign-in method, `404 oidc-provider-not-configured` when the account has no provider, and `409 auth-options-changed` when the account\'s sign-in methods or its provider changed concurrently, in which case the request may be retried. The change is written to the audit log. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`.
+     * Removes the identity provider of the account the access token was issued for, together with its client secret, and disables the `sso` sign-in method in the same change. Sessions signed in through the provider can no longer refresh an access token scoped to the account.  Returns `400 last-auth-option-disabled` when single sign-on is the account\'s only enabled member sign-in method, `404 oidc-provider-not-configured` when the account has no provider, and `409 auth-options-changed` when the account\'s sign-in methods or its provider changed concurrently, in which case the request may be retried. The change is written to the audit log. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`. A script\'s own API key cannot call it.
      * Delete the current account\'s OIDC provider
      */
     async deleteOidcProviderRaw(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<void>> {
@@ -569,7 +569,7 @@ export class AccountsApi extends runtime.BaseAPI implements AccountsApiInterface
     }
 
     /**
-     * Removes the identity provider of the account the access token was issued for, together with its client secret, and disables the `sso` sign-in method in the same change. Sessions signed in through the provider can no longer refresh an access token scoped to the account.  Returns `400 last-auth-option-disabled` when single sign-on is the account\'s only enabled member sign-in method, `404 oidc-provider-not-configured` when the account has no provider, and `409 auth-options-changed` when the account\'s sign-in methods or its provider changed concurrently, in which case the request may be retried. The change is written to the audit log. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`.
+     * Removes the identity provider of the account the access token was issued for, together with its client secret, and disables the `sso` sign-in method in the same change. Sessions signed in through the provider can no longer refresh an access token scoped to the account.  Returns `400 last-auth-option-disabled` when single sign-on is the account\'s only enabled member sign-in method, `404 oidc-provider-not-configured` when the account has no provider, and `409 auth-options-changed` when the account\'s sign-in methods or its provider changed concurrently, in which case the request may be retried. The change is written to the audit log. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`. A script\'s own API key cannot call it.
      * Delete the current account\'s OIDC provider
      */
     async deleteOidcProvider(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void> {
@@ -698,7 +698,7 @@ export class AccountsApi extends runtime.BaseAPI implements AccountsApiInterface
     }
 
     /**
-     * Returns the identity provider members of the account the access token was issued for sign in through with single sign-on. The client secret is never returned; `clientSecretSet` reports whether one is stored.  Returns `404 oidc-provider-not-configured` when the account has no provider, and `409 sso-multiple-providers` when it has more than one. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`.
+     * Returns the identity provider members of the account the access token was issued for sign in through with single sign-on. The client secret is never returned; `clientSecretSet` reports whether one is stored.  Returns `404 oidc-provider-not-configured` when the account has no provider, and `409 sso-multiple-providers` when it has more than one. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`. A script\'s own API key cannot call it.
      * Get the current account\'s OIDC provider
      */
     async getOidcProviderRaw(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<AccountOIDCProvider>> {
@@ -728,7 +728,7 @@ export class AccountsApi extends runtime.BaseAPI implements AccountsApiInterface
     }
 
     /**
-     * Returns the identity provider members of the account the access token was issued for sign in through with single sign-on. The client secret is never returned; `clientSecretSet` reports whether one is stored.  Returns `404 oidc-provider-not-configured` when the account has no provider, and `409 sso-multiple-providers` when it has more than one. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`.
+     * Returns the identity provider members of the account the access token was issued for sign in through with single sign-on. The client secret is never returned; `clientSecretSet` reports whether one is stored.  Returns `404 oidc-provider-not-configured` when the account has no provider, and `409 sso-multiple-providers` when it has more than one. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`. A script\'s own API key cannot call it.
      * Get the current account\'s OIDC provider
      */
     async getOidcProvider(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<AccountOIDCProvider> {
@@ -1079,7 +1079,7 @@ export class AccountsApi extends runtime.BaseAPI implements AccountsApiInterface
     }
 
     /**
-     * Changes the identity provider members of the account the access token was issued for sign in through with single sign-on. Fields left out keep their current value; the client secret is changed with `PUT /v1/account/oidc-provider/client-secret`.  When `providerName` or `tenant` changes, the tenant must name a single organisation or the request returns `400 invalid-tenant`, and the provider\'s OpenID discovery document is fetched before anything is stored; a provider that cannot be reached returns `400 oidc-discovery-failed`. Returns `404 oidc-provider-not-configured` when the account has no provider, and `409 oidc-provider-changed` when it was changed concurrently. The change is written to the audit log. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`.
+     * Changes the identity provider members of the account the access token was issued for sign in through with single sign-on. Fields left out keep their current value; the client secret is changed with `PUT /v1/account/oidc-provider/client-secret`.  When `providerName` or `tenant` changes, the tenant must name a single organisation or the request returns `400 invalid-tenant`, and the provider\'s OpenID discovery document is fetched before anything is stored; a provider that cannot be reached returns `400 oidc-discovery-failed`. Returns `404 oidc-provider-not-configured` when the account has no provider, and `409 oidc-provider-changed` when it was changed concurrently. The change is written to the audit log. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`. A script\'s own API key cannot call it.
      * Update the current account\'s OIDC provider
      */
     async updateOidcProviderRaw(requestParameters: AccountsApiUpdateOidcProviderRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<AccountOIDCProvider>> {
@@ -1119,7 +1119,7 @@ export class AccountsApi extends runtime.BaseAPI implements AccountsApiInterface
     }
 
     /**
-     * Changes the identity provider members of the account the access token was issued for sign in through with single sign-on. Fields left out keep their current value; the client secret is changed with `PUT /v1/account/oidc-provider/client-secret`.  When `providerName` or `tenant` changes, the tenant must name a single organisation or the request returns `400 invalid-tenant`, and the provider\'s OpenID discovery document is fetched before anything is stored; a provider that cannot be reached returns `400 oidc-discovery-failed`. Returns `404 oidc-provider-not-configured` when the account has no provider, and `409 oidc-provider-changed` when it was changed concurrently. The change is written to the audit log. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`.
+     * Changes the identity provider members of the account the access token was issued for sign in through with single sign-on. Fields left out keep their current value; the client secret is changed with `PUT /v1/account/oidc-provider/client-secret`.  When `providerName` or `tenant` changes, the tenant must name a single organisation or the request returns `400 invalid-tenant`, and the provider\'s OpenID discovery document is fetched before anything is stored; a provider that cannot be reached returns `400 oidc-discovery-failed`. Returns `404 oidc-provider-not-configured` when the account has no provider, and `409 oidc-provider-changed` when it was changed concurrently. The change is written to the audit log. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`. A script\'s own API key cannot call it.
      * Update the current account\'s OIDC provider
      */
     async updateOidcProvider(requestParameters: AccountsApiUpdateOidcProviderRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<AccountOIDCProvider> {
@@ -1128,7 +1128,7 @@ export class AccountsApi extends runtime.BaseAPI implements AccountsApiInterface
     }
 
     /**
-     * Stores a new client secret for the identity provider of the account the access token was issued for. The secret is write-only: no endpoint returns it. Returns `404 oidc-provider-not-configured` when the account has no provider. The change is written to the audit log without the secret. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`.
+     * Stores a new client secret for the identity provider of the account the access token was issued for. The secret is write-only: no endpoint returns it. Returns `404 oidc-provider-not-configured` when the account has no provider. The change is written to the audit log without the secret. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`. A script\'s own API key cannot call it.
      * Replace the current account\'s OIDC client secret
      */
     async updateOidcProviderClientSecretRaw(requestParameters: AccountsApiUpdateOidcProviderClientSecretRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<void>> {
@@ -1168,7 +1168,7 @@ export class AccountsApi extends runtime.BaseAPI implements AccountsApiInterface
     }
 
     /**
-     * Stores a new client secret for the identity provider of the account the access token was issued for. The secret is write-only: no endpoint returns it. Returns `404 oidc-provider-not-configured` when the account has no provider. The change is written to the audit log without the secret. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`.
+     * Stores a new client secret for the identity provider of the account the access token was issued for. The secret is write-only: no endpoint returns it. Returns `404 oidc-provider-not-configured` when the account has no provider. The change is written to the audit log without the secret. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`. A script\'s own API key cannot call it.
      * Replace the current account\'s OIDC client secret
      */
     async updateOidcProviderClientSecret(requestParameters: AccountsApiUpdateOidcProviderClientSecretRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void> {

package/src/apis/AssistantApi.ts

@@ -22,6 +22,7 @@ import type {
   AssistantConfigPutReq,
   AssistantConversationListRes,
   AssistantModelListBody,
+  AssistantTranscriptBody,
   ErrorModel,
 } from '../models/index';
 import {
@@ -39,6 +40,8 @@ import {
     AssistantConversationListResToJSON,
     AssistantModelListBodyFromJSON,
     AssistantModelListBodyToJSON,
+    AssistantTranscriptBodyFromJSON,
+    AssistantTranscriptBodyToJSON,
     ErrorModelFromJSON,
     ErrorModelToJSON,
 } from '../models/index';
@@ -51,6 +54,10 @@ export interface AssistantApiDeleteConversationsRequest {
     id: string;
 }
 
+export interface AssistantApiGetConversationsTranscriptRequest {
+    id: string;
+}
+
 export interface AssistantApiPollConversationsRequest {
     id: string;
     since?: string;
@@ -118,6 +125,22 @@ export interface AssistantApiInterface {
      */
     getConfig(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<AssistantConfigBody>;
 
+    /**
+     * Returns the conversation as it is stored, for debugging and evaluating the assistant: every message the assistant has been shown, including the results of its tool calls and the ids that pair each result with its call, and the summary that replaces the earliest messages once the conversation has been compacted. Returns `404` if the conversation does not exist. Requires the *AI assistant* and *Download AI assistant conversation* permissions.
+     * @summary Get a conversation\'s transcript
+     * @param {string} id UUID of the conversation to read.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AssistantApiInterface
+     */
+    getConversationsTranscriptRaw(requestParameters: AssistantApiGetConversationsTranscriptRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<AssistantTranscriptBody>>;
+
+    /**
+     * Returns the conversation as it is stored, for debugging and evaluating the assistant: every message the assistant has been shown, including the results of its tool calls and the ids that pair each result with its call, and the summary that replaces the earliest messages once the conversation has been compacted. Returns `404` if the conversation does not exist. Requires the *AI assistant* and *Download AI assistant conversation* permissions.
+     * Get a conversation\'s transcript
+     */
+    getConversationsTranscript(requestParameters: AssistantApiGetConversationsTranscriptRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<AssistantTranscriptBody>;
+
     /**
      * Returns the caller\'s own assistant conversations in the current project. A conversation belongs to the user who started it and is not visible to anyone else. Requires the *AI assistant* permission.
      * @summary List conversations
@@ -331,6 +354,53 @@ export class AssistantApi extends runtime.BaseAPI implements AssistantApiInterfa
         return await response.value();
     }
 
+    /**
+     * Returns the conversation as it is stored, for debugging and evaluating the assistant: every message the assistant has been shown, including the results of its tool calls and the ids that pair each result with its call, and the summary that replaces the earliest messages once the conversation has been compacted. Returns `404` if the conversation does not exist. Requires the *AI assistant* and *Download AI assistant conversation* permissions.
+     * Get a conversation\'s transcript
+     */
+    async getConversationsTranscriptRaw(requestParameters: AssistantApiGetConversationsTranscriptRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<AssistantTranscriptBody>> {
+        if (requestParameters['id'] == null) {
+            throw new runtime.RequiredError(
+                'id',
+                'Required parameter "id" was null or undefined when calling getConversationsTranscript().'
+            );
+        }
+
+        const queryParameters: any = {};
+
+        const headerParameters: runtime.HTTPHeaders = {};
+
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("accessToken", []);
+
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+
+        let urlPath = `/v1/assistant/conversations/{id}/transcript`;
+        urlPath = urlPath.replace(`{${"id"}}`, encodeURIComponent(String(requestParameters['id'])));
+
+        const response = await this.request({
+            path: urlPath,
+            method: 'GET',
+            headers: headerParameters,
+            query: queryParameters,
+        }, initOverrides);
+
+        return new runtime.JSONApiResponse(response, (jsonValue) => AssistantTranscriptBodyFromJSON(jsonValue));
+    }
+
+    /**
+     * Returns the conversation as it is stored, for debugging and evaluating the assistant: every message the assistant has been shown, including the results of its tool calls and the ids that pair each result with its call, and the summary that replaces the earliest messages once the conversation has been compacted. Returns `404` if the conversation does not exist. Requires the *AI assistant* and *Download AI assistant conversation* permissions.
+     * Get a conversation\'s transcript
+     */
+    async getConversationsTranscript(requestParameters: AssistantApiGetConversationsTranscriptRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<AssistantTranscriptBody> {
+        const response = await this.getConversationsTranscriptRaw(requestParameters, initOverrides);
+        return await response.value();
+    }
+
     /**
      * Returns the caller\'s own assistant conversations in the current project. A conversation belongs to the user who started it and is not visible to anyone else. Requires the *AI assistant* permission.
      * List conversations

package/src/apis/AuditLogApi.ts

@@ -44,7 +44,7 @@ export interface AuditLogApiInterface {
     /**
      * Returns a paginated list of audit-log entries for the account. Specify `entity` to restrict to a single entity type, or pass `entity=all` to retrieve changes across every type the caller has permission to see.  Use `nextCursor` from the response as the `cursor` query parameter to fetch the next page.
      * @summary Query the audit log
-     * @param {string} [entity] Entity type to query. One of: dashboard, property, scenario, floorplan, space-ruleset, top-down-model, object-group, datacollection, contribution, i18n, user, file, variable, upload-quarantine. Pass \"all\" to retrieve entries across all entity types the caller has permission to see (entityId must be omitted).
+     * @param {string} [entity] Entity type to query. One of: dashboard, property, scenario, floorplan, space-ruleset, top-down-model, object-group, datacollection, contribution, i18n, user, file, variable, script, upload-quarantine. Pass \"all\" to retrieve entries across all entity types the caller has permission to see (entityId must be omitted).
      * @param {string} [entityId] Restrict results to changes made to this specific entity. Cannot be used when entity=all.
      * @param {Date} [from] Return only entries at or after this timestamp (RFC 3339). Omit for no lower bound.
      * @param {Date} [to] Return only entries at or before this timestamp (RFC 3339). Omit for no upper bound.

package/src/apis/AuthenticationApi.ts

@@ -127,7 +127,7 @@ export interface AuthenticationApiUpdateAuthPasswordRequest {
  */
 export interface AuthenticationApiInterface {
     /**
-     * Issues a long-lived key for programmatic access, scoped to the calling user and the given project. The secret is returned in the `key` field of this response and never again, since only its hash is stored; a client that loses it must create a replacement. Keys expire after `expiresInDays`, between 1 and 90.
+     * Issues a long-lived key for programmatic access, scoped to the calling user and the given project. The secret is returned in the `key` field of this response and never again, since only its hash is stored; a client that loses it must create a replacement. Keys expire after `expiresInDays`, between 1 and 90. A script\'s own API key cannot create or delete keys.
      * @summary Create an API key
      * @param {ApiKeyPostReqBody} apiKeyPostReqBody 
      * @param {*} [options] Override http request option.
@@ -137,7 +137,7 @@ export interface AuthenticationApiInterface {
     createApiKeysRaw(requestParameters: AuthenticationApiCreateApiKeysRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<ApiKeyPostResBody>>;
 
     /**
-     * Issues a long-lived key for programmatic access, scoped to the calling user and the given project. The secret is returned in the `key` field of this response and never again, since only its hash is stored; a client that loses it must create a replacement. Keys expire after `expiresInDays`, between 1 and 90.
+     * Issues a long-lived key for programmatic access, scoped to the calling user and the given project. The secret is returned in the `key` field of this response and never again, since only its hash is stored; a client that loses it must create a replacement. Keys expire after `expiresInDays`, between 1 and 90. A script\'s own API key cannot create or delete keys.
      * Create an API key
      */
     createApiKeys(requestParameters: AuthenticationApiCreateApiKeysRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<ApiKeyPostResBody>;
@@ -274,7 +274,7 @@ export interface AuthenticationApiInterface {
     createAuthSendToken(requestParameters: AuthenticationApiCreateAuthSendTokenRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void>;
 
     /**
-     * Permanently revokes one of the calling user\'s keys. Access tokens already exchanged for it remain valid until they expire, and the key itself may continue to authenticate for up to a minute while cached resolutions age out.
+     * Permanently revokes one of the calling user\'s keys. Access tokens already exchanged for it remain valid until they expire, and the key itself may continue to authenticate for up to a minute while cached resolutions age out. Keys that belong to a script are rejected with 409; delete or re-authorise the script instead.
      * @summary Revoke an API key
      * @param {number} id 
      * @param {*} [options] Override http request option.
@@ -284,7 +284,7 @@ export interface AuthenticationApiInterface {
     deleteApiKeysRaw(requestParameters: AuthenticationApiDeleteApiKeysRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<void>>;
 
     /**
-     * Permanently revokes one of the calling user\'s keys. Access tokens already exchanged for it remain valid until they expire, and the key itself may continue to authenticate for up to a minute while cached resolutions age out.
+     * Permanently revokes one of the calling user\'s keys. Access tokens already exchanged for it remain valid until they expire, and the key itself may continue to authenticate for up to a minute while cached resolutions age out. Keys that belong to a script are rejected with 409; delete or re-authorise the script instead.
      * Revoke an API key
      */
     deleteApiKeys(requestParameters: AuthenticationApiDeleteApiKeysRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void>;
@@ -345,7 +345,7 @@ export interface AuthenticationApiInterface {
 export class AuthenticationApi extends runtime.BaseAPI implements AuthenticationApiInterface {
 
     /**
-     * Issues a long-lived key for programmatic access, scoped to the calling user and the given project. The secret is returned in the `key` field of this response and never again, since only its hash is stored; a client that loses it must create a replacement. Keys expire after `expiresInDays`, between 1 and 90.
+     * Issues a long-lived key for programmatic access, scoped to the calling user and the given project. The secret is returned in the `key` field of this response and never again, since only its hash is stored; a client that loses it must create a replacement. Keys expire after `expiresInDays`, between 1 and 90. A script\'s own API key cannot create or delete keys.
      * Create an API key
      */
     async createApiKeysRaw(requestParameters: AuthenticationApiCreateApiKeysRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<ApiKeyPostResBody>> {
@@ -385,7 +385,7 @@ export class AuthenticationApi extends runtime.BaseAPI implements Authentication
     }
 
     /**
-     * Issues a long-lived key for programmatic access, scoped to the calling user and the given project. The secret is returned in the `key` field of this response and never again, since only its hash is stored; a client that loses it must create a replacement. Keys expire after `expiresInDays`, between 1 and 90.
+     * Issues a long-lived key for programmatic access, scoped to the calling user and the given project. The secret is returned in the `key` field of this response and never again, since only its hash is stored; a client that loses it must create a replacement. Keys expire after `expiresInDays`, between 1 and 90. A script\'s own API key cannot create or delete keys.
      * Create an API key
      */
     async createApiKeys(requestParameters: AuthenticationApiCreateApiKeysRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<ApiKeyPostResBody> {
@@ -709,7 +709,7 @@ export class AuthenticationApi extends runtime.BaseAPI implements Authentication
     }
 
     /**
-     * Permanently revokes one of the calling user\'s keys. Access tokens already exchanged for it remain valid until they expire, and the key itself may continue to authenticate for up to a minute while cached resolutions age out.
+     * Permanently revokes one of the calling user\'s keys. Access tokens already exchanged for it remain valid until they expire, and the key itself may continue to authenticate for up to a minute while cached resolutions age out. Keys that belong to a script are rejected with 409; delete or re-authorise the script instead.
      * Revoke an API key
      */
     async deleteApiKeysRaw(requestParameters: AuthenticationApiDeleteApiKeysRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<void>> {
@@ -747,7 +747,7 @@ export class AuthenticationApi extends runtime.BaseAPI implements Authentication
     }
 
     /**
-     * Permanently revokes one of the calling user\'s keys. Access tokens already exchanged for it remain valid until they expire, and the key itself may continue to authenticate for up to a minute while cached resolutions age out.
+     * Permanently revokes one of the calling user\'s keys. Access tokens already exchanged for it remain valid until they expire, and the key itself may continue to authenticate for up to a minute while cached resolutions age out. Keys that belong to a script are rejected with 409; delete or re-authorise the script instead.
      * Revoke an API key
      */
     async deleteApiKeys(requestParameters: AuthenticationApiDeleteApiKeysRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void> {