@spaciv/sdk 0.1.1 → 0.1.2

package/.openapi-generator/FILES

@@ -25,6 +25,7 @@ src/apis/ProjectsApi.ts
 src/apis/PropertiesApi.ts
 src/apis/ReportsApi.ts
 src/apis/ScenariosApi.ts
+src/apis/ScriptsApi.ts
 src/apis/ServiceApi.ts
 src/apis/SpaceRulesetsApi.ts
 src/apis/TemplateProjectsApi.ts
@@ -327,6 +328,28 @@ src/models/ScenarioListEntry.ts
 src/models/ScenarioListRes.ts
 src/models/ScenarioNotFoundDetail.ts
 src/models/ScenarioPatch.ts
+src/models/ScriptAuditEntry.ts
+src/models/ScriptAuditResBody.ts
+src/models/ScriptDetail.ts
+src/models/ScriptExport.ts
+src/models/ScriptExportResBody.ts
+src/models/ScriptExportRun.ts
+src/models/ScriptKey.ts
+src/models/ScriptListResBody.ts
+src/models/ScriptLogLine.ts
+src/models/ScriptPatchReqBody.ts
+src/models/ScriptPostReqBody.ts
+src/models/ScriptRun.ts
+src/models/ScriptRunLogsResBody.ts
+src/models/ScriptRunsResBody.ts
+src/models/ScriptRuntime.ts
+src/models/ScriptSchedule.ts
+src/models/ScriptSchedulePreviewReqBody.ts
+src/models/ScriptSchedulePreviewResBody.ts
+src/models/ScriptSecretsReqBody.ts
+src/models/ScriptSecretsResBody.ts
+src/models/ScriptSummary.ts
+src/models/ScriptWebhookResBody.ts
 src/models/SendPasswordPutReqBody.ts
 src/models/SerializedEvent.ts
 src/models/SingleSelectChangelogData.ts

package/README.md

@@ -1,4 +1,4 @@
-## @spaciv/sdk@0.1.1
+## @spaciv/sdk@0.1.2
 
 This generator creates TypeScript/JavaScript client that utilizes [Fetch API](https://fetch.spec.whatwg.org/). The generated Node module can be used in the following environments:
 
@@ -36,7 +36,7 @@ navigate to the folder of your consuming project and run one of the following co
 _published:_
 
 ```
-npm install @spaciv/sdk@0.1.1 --save
+npm install @spaciv/sdk@0.1.2 --save
 ```
 
 _unPublished (not recommended):_

package/dist/apis/AccountsApi.d.ts

@@ -63,7 +63,7 @@ export interface AccountsApiInterface {
      */
     create(requestParameters: AccountsApiCreateRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<number>;
     /**
-     * Registers the identity provider members of the account the access token was issued for sign in through with single sign-on. An account has at most one provider; creating a second returns `409 oidc-provider-exists`. Creating a provider does not enable the `sso` sign-in method; enable it with `PATCH /v1/account/auth-options` afterwards.  The tenant must name a single organisation (Microsoft\'s `common`, `organizations` and `consumers` are rejected) or the request returns `400 invalid-tenant`. The provider\'s OpenID discovery document is fetched before anything is stored, and a provider that cannot be reached returns `400 oidc-discovery-failed`. The change is written to the audit log. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`.
+     * Registers the identity provider members of the account the access token was issued for sign in through with single sign-on. An account has at most one provider; creating a second returns `409 oidc-provider-exists`. Creating a provider does not enable the `sso` sign-in method; enable it with `PATCH /v1/account/auth-options` afterwards.  The tenant must name a single organisation (Microsoft\'s `common`, `organizations` and `consumers` are rejected) or the request returns `400 invalid-tenant`. The provider\'s OpenID discovery document is fetched before anything is stored, and a provider that cannot be reached returns `400 oidc-discovery-failed`. The change is written to the audit log. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`. A script\'s own API key cannot call it.
      * @summary Create the current account\'s OIDC provider
      * @param {AccountPostOIDCProviderReqBody} accountPostOIDCProviderReqBody
      * @param {*} [options] Override http request option.
@@ -72,12 +72,12 @@ export interface AccountsApiInterface {
      */
     createOidcProviderRaw(requestParameters: AccountsApiCreateOidcProviderRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<AccountOIDCProvider>>;
     /**
-     * Registers the identity provider members of the account the access token was issued for sign in through with single sign-on. An account has at most one provider; creating a second returns `409 oidc-provider-exists`. Creating a provider does not enable the `sso` sign-in method; enable it with `PATCH /v1/account/auth-options` afterwards.  The tenant must name a single organisation (Microsoft\'s `common`, `organizations` and `consumers` are rejected) or the request returns `400 invalid-tenant`. The provider\'s OpenID discovery document is fetched before anything is stored, and a provider that cannot be reached returns `400 oidc-discovery-failed`. The change is written to the audit log. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`.
+     * Registers the identity provider members of the account the access token was issued for sign in through with single sign-on. An account has at most one provider; creating a second returns `409 oidc-provider-exists`. Creating a provider does not enable the `sso` sign-in method; enable it with `PATCH /v1/account/auth-options` afterwards.  The tenant must name a single organisation (Microsoft\'s `common`, `organizations` and `consumers` are rejected) or the request returns `400 invalid-tenant`. The provider\'s OpenID discovery document is fetched before anything is stored, and a provider that cannot be reached returns `400 oidc-discovery-failed`. The change is written to the audit log. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`. A script\'s own API key cannot call it.
      * Create the current account\'s OIDC provider
      */
     createOidcProvider(requestParameters: AccountsApiCreateOidcProviderRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<AccountOIDCProvider>;
     /**
-     * Permanently deletes the account the access token was issued for, along with its projects and members. This cannot be undone. Requires the *Manage my account* permission.
+     * Permanently deletes the account the access token was issued for, along with its projects, members and scripts. This cannot be undone. Scripts are deleted first, so if the request fails some of them may already be gone; repeat it to finish deleting the account. Requires the *Manage my account* permission. A script\'s own API key cannot delete the account.
      * @summary Delete the current account
      * @param {*} [options] Override http request option.
      * @throws {RequiredError}
@@ -85,12 +85,12 @@ export interface AccountsApiInterface {
      */
     deleteRaw(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<void>>;
     /**
-     * Permanently deletes the account the access token was issued for, along with its projects and members. This cannot be undone. Requires the *Manage my account* permission.
+     * Permanently deletes the account the access token was issued for, along with its projects, members and scripts. This cannot be undone. Scripts are deleted first, so if the request fails some of them may already be gone; repeat it to finish deleting the account. Requires the *Manage my account* permission. A script\'s own API key cannot delete the account.
      * Delete the current account
      */
     delete(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void>;
     /**
-     * Removes the identity provider of the account the access token was issued for, together with its client secret, and disables the `sso` sign-in method in the same change. Sessions signed in through the provider can no longer refresh an access token scoped to the account.  Returns `400 last-auth-option-disabled` when single sign-on is the account\'s only enabled member sign-in method, `404 oidc-provider-not-configured` when the account has no provider, and `409 auth-options-changed` when the account\'s sign-in methods or its provider changed concurrently, in which case the request may be retried. The change is written to the audit log. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`.
+     * Removes the identity provider of the account the access token was issued for, together with its client secret, and disables the `sso` sign-in method in the same change. Sessions signed in through the provider can no longer refresh an access token scoped to the account.  Returns `400 last-auth-option-disabled` when single sign-on is the account\'s only enabled member sign-in method, `404 oidc-provider-not-configured` when the account has no provider, and `409 auth-options-changed` when the account\'s sign-in methods or its provider changed concurrently, in which case the request may be retried. The change is written to the audit log. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`. A script\'s own API key cannot call it.
      * @summary Delete the current account\'s OIDC provider
      * @param {*} [options] Override http request option.
      * @throws {RequiredError}
@@ -98,7 +98,7 @@ export interface AccountsApiInterface {
      */
     deleteOidcProviderRaw(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<void>>;
     /**
-     * Removes the identity provider of the account the access token was issued for, together with its client secret, and disables the `sso` sign-in method in the same change. Sessions signed in through the provider can no longer refresh an access token scoped to the account.  Returns `400 last-auth-option-disabled` when single sign-on is the account\'s only enabled member sign-in method, `404 oidc-provider-not-configured` when the account has no provider, and `409 auth-options-changed` when the account\'s sign-in methods or its provider changed concurrently, in which case the request may be retried. The change is written to the audit log. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`.
+     * Removes the identity provider of the account the access token was issued for, together with its client secret, and disables the `sso` sign-in method in the same change. Sessions signed in through the provider can no longer refresh an access token scoped to the account.  Returns `400 last-auth-option-disabled` when single sign-on is the account\'s only enabled member sign-in method, `404 oidc-provider-not-configured` when the account has no provider, and `409 auth-options-changed` when the account\'s sign-in methods or its provider changed concurrently, in which case the request may be retried. The change is written to the audit log. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`. A script\'s own API key cannot call it.
      * Delete the current account\'s OIDC provider
      */
     deleteOidcProvider(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void>;
@@ -144,7 +144,7 @@ export interface AccountsApiInterface {
      */
     getHostname(requestParameters: AccountsApiGetHostnameRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<string>;
     /**
-     * Returns the identity provider members of the account the access token was issued for sign in through with single sign-on. The client secret is never returned; `clientSecretSet` reports whether one is stored.  Returns `404 oidc-provider-not-configured` when the account has no provider, and `409 sso-multiple-providers` when it has more than one. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`.
+     * Returns the identity provider members of the account the access token was issued for sign in through with single sign-on. The client secret is never returned; `clientSecretSet` reports whether one is stored.  Returns `404 oidc-provider-not-configured` when the account has no provider, and `409 sso-multiple-providers` when it has more than one. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`. A script\'s own API key cannot call it.
      * @summary Get the current account\'s OIDC provider
      * @param {*} [options] Override http request option.
      * @throws {RequiredError}
@@ -152,7 +152,7 @@ export interface AccountsApiInterface {
      */
     getOidcProviderRaw(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<AccountOIDCProvider>>;
     /**
-     * Returns the identity provider members of the account the access token was issued for sign in through with single sign-on. The client secret is never returned; `clientSecretSet` reports whether one is stored.  Returns `404 oidc-provider-not-configured` when the account has no provider, and `409 sso-multiple-providers` when it has more than one. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`.
+     * Returns the identity provider members of the account the access token was issued for sign in through with single sign-on. The client secret is never returned; `clientSecretSet` reports whether one is stored.  Returns `404 oidc-provider-not-configured` when the account has no provider, and `409 sso-multiple-providers` when it has more than one. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`. A script\'s own API key cannot call it.
      * Get the current account\'s OIDC provider
      */
     getOidcProvider(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<AccountOIDCProvider>;
@@ -265,7 +265,7 @@ export interface AccountsApiInterface {
      */
     updateAuthOptions(requestParameters: AccountsApiUpdateAuthOptionsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<Array<AccountAuthOption>>;
     /**
-     * Changes the identity provider members of the account the access token was issued for sign in through with single sign-on. Fields left out keep their current value; the client secret is changed with `PUT /v1/account/oidc-provider/client-secret`.  When `providerName` or `tenant` changes, the tenant must name a single organisation or the request returns `400 invalid-tenant`, and the provider\'s OpenID discovery document is fetched before anything is stored; a provider that cannot be reached returns `400 oidc-discovery-failed`. Returns `404 oidc-provider-not-configured` when the account has no provider, and `409 oidc-provider-changed` when it was changed concurrently. The change is written to the audit log. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`.
+     * Changes the identity provider members of the account the access token was issued for sign in through with single sign-on. Fields left out keep their current value; the client secret is changed with `PUT /v1/account/oidc-provider/client-secret`.  When `providerName` or `tenant` changes, the tenant must name a single organisation or the request returns `400 invalid-tenant`, and the provider\'s OpenID discovery document is fetched before anything is stored; a provider that cannot be reached returns `400 oidc-discovery-failed`. Returns `404 oidc-provider-not-configured` when the account has no provider, and `409 oidc-provider-changed` when it was changed concurrently. The change is written to the audit log. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`. A script\'s own API key cannot call it.
      * @summary Update the current account\'s OIDC provider
      * @param {AccountOIDCProviderPatch} accountOIDCProviderPatch
      * @param {*} [options] Override http request option.
@@ -274,12 +274,12 @@ export interface AccountsApiInterface {
      */
     updateOidcProviderRaw(requestParameters: AccountsApiUpdateOidcProviderRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<AccountOIDCProvider>>;
     /**
-     * Changes the identity provider members of the account the access token was issued for sign in through with single sign-on. Fields left out keep their current value; the client secret is changed with `PUT /v1/account/oidc-provider/client-secret`.  When `providerName` or `tenant` changes, the tenant must name a single organisation or the request returns `400 invalid-tenant`, and the provider\'s OpenID discovery document is fetched before anything is stored; a provider that cannot be reached returns `400 oidc-discovery-failed`. Returns `404 oidc-provider-not-configured` when the account has no provider, and `409 oidc-provider-changed` when it was changed concurrently. The change is written to the audit log. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`.
+     * Changes the identity provider members of the account the access token was issued for sign in through with single sign-on. Fields left out keep their current value; the client secret is changed with `PUT /v1/account/oidc-provider/client-secret`.  When `providerName` or `tenant` changes, the tenant must name a single organisation or the request returns `400 invalid-tenant`, and the provider\'s OpenID discovery document is fetched before anything is stored; a provider that cannot be reached returns `400 oidc-discovery-failed`. Returns `404 oidc-provider-not-configured` when the account has no provider, and `409 oidc-provider-changed` when it was changed concurrently. The change is written to the audit log. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`. A script\'s own API key cannot call it.
      * Update the current account\'s OIDC provider
      */
     updateOidcProvider(requestParameters: AccountsApiUpdateOidcProviderRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<AccountOIDCProvider>;
     /**
-     * Stores a new client secret for the identity provider of the account the access token was issued for. The secret is write-only: no endpoint returns it. Returns `404 oidc-provider-not-configured` when the account has no provider. The change is written to the audit log without the secret. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`.
+     * Stores a new client secret for the identity provider of the account the access token was issued for. The secret is write-only: no endpoint returns it. Returns `404 oidc-provider-not-configured` when the account has no provider. The change is written to the audit log without the secret. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`. A script\'s own API key cannot call it.
      * @summary Replace the current account\'s OIDC client secret
      * @param {AccountPutOIDCClientSecretReqBody} accountPutOIDCClientSecretReqBody
      * @param {*} [options] Override http request option.
@@ -288,7 +288,7 @@ export interface AccountsApiInterface {
      */
     updateOidcProviderClientSecretRaw(requestParameters: AccountsApiUpdateOidcProviderClientSecretRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<void>>;
     /**
-     * Stores a new client secret for the identity provider of the account the access token was issued for. The secret is write-only: no endpoint returns it. Returns `404 oidc-provider-not-configured` when the account has no provider. The change is written to the audit log without the secret. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`.
+     * Stores a new client secret for the identity provider of the account the access token was issued for. The secret is write-only: no endpoint returns it. Returns `404 oidc-provider-not-configured` when the account has no provider. The change is written to the audit log without the secret. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`. A script\'s own API key cannot call it.
      * Replace the current account\'s OIDC client secret
      */
     updateOidcProviderClientSecret(requestParameters: AccountsApiUpdateOidcProviderClientSecretRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void>;
@@ -308,32 +308,32 @@ export declare class AccountsApi extends runtime.BaseAPI implements AccountsApiI
      */
     create(requestParameters: AccountsApiCreateRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<number>;
     /**
-     * Registers the identity provider members of the account the access token was issued for sign in through with single sign-on. An account has at most one provider; creating a second returns `409 oidc-provider-exists`. Creating a provider does not enable the `sso` sign-in method; enable it with `PATCH /v1/account/auth-options` afterwards.  The tenant must name a single organisation (Microsoft\'s `common`, `organizations` and `consumers` are rejected) or the request returns `400 invalid-tenant`. The provider\'s OpenID discovery document is fetched before anything is stored, and a provider that cannot be reached returns `400 oidc-discovery-failed`. The change is written to the audit log. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`.
+     * Registers the identity provider members of the account the access token was issued for sign in through with single sign-on. An account has at most one provider; creating a second returns `409 oidc-provider-exists`. Creating a provider does not enable the `sso` sign-in method; enable it with `PATCH /v1/account/auth-options` afterwards.  The tenant must name a single organisation (Microsoft\'s `common`, `organizations` and `consumers` are rejected) or the request returns `400 invalid-tenant`. The provider\'s OpenID discovery document is fetched before anything is stored, and a provider that cannot be reached returns `400 oidc-discovery-failed`. The change is written to the audit log. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`. A script\'s own API key cannot call it.
      * Create the current account\'s OIDC provider
      */
     createOidcProviderRaw(requestParameters: AccountsApiCreateOidcProviderRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<AccountOIDCProvider>>;
     /**
-     * Registers the identity provider members of the account the access token was issued for sign in through with single sign-on. An account has at most one provider; creating a second returns `409 oidc-provider-exists`. Creating a provider does not enable the `sso` sign-in method; enable it with `PATCH /v1/account/auth-options` afterwards.  The tenant must name a single organisation (Microsoft\'s `common`, `organizations` and `consumers` are rejected) or the request returns `400 invalid-tenant`. The provider\'s OpenID discovery document is fetched before anything is stored, and a provider that cannot be reached returns `400 oidc-discovery-failed`. The change is written to the audit log. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`.
+     * Registers the identity provider members of the account the access token was issued for sign in through with single sign-on. An account has at most one provider; creating a second returns `409 oidc-provider-exists`. Creating a provider does not enable the `sso` sign-in method; enable it with `PATCH /v1/account/auth-options` afterwards.  The tenant must name a single organisation (Microsoft\'s `common`, `organizations` and `consumers` are rejected) or the request returns `400 invalid-tenant`. The provider\'s OpenID discovery document is fetched before anything is stored, and a provider that cannot be reached returns `400 oidc-discovery-failed`. The change is written to the audit log. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`. A script\'s own API key cannot call it.
      * Create the current account\'s OIDC provider
      */
     createOidcProvider(requestParameters: AccountsApiCreateOidcProviderRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<AccountOIDCProvider>;
     /**
-     * Permanently deletes the account the access token was issued for, along with its projects and members. This cannot be undone. Requires the *Manage my account* permission.
+     * Permanently deletes the account the access token was issued for, along with its projects, members and scripts. This cannot be undone. Scripts are deleted first, so if the request fails some of them may already be gone; repeat it to finish deleting the account. Requires the *Manage my account* permission. A script\'s own API key cannot delete the account.
      * Delete the current account
      */
     deleteRaw(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<void>>;
     /**
-     * Permanently deletes the account the access token was issued for, along with its projects and members. This cannot be undone. Requires the *Manage my account* permission.
+     * Permanently deletes the account the access token was issued for, along with its projects, members and scripts. This cannot be undone. Scripts are deleted first, so if the request fails some of them may already be gone; repeat it to finish deleting the account. Requires the *Manage my account* permission. A script\'s own API key cannot delete the account.
      * Delete the current account
      */
     delete(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void>;
     /**
-     * Removes the identity provider of the account the access token was issued for, together with its client secret, and disables the `sso` sign-in method in the same change. Sessions signed in through the provider can no longer refresh an access token scoped to the account.  Returns `400 last-auth-option-disabled` when single sign-on is the account\'s only enabled member sign-in method, `404 oidc-provider-not-configured` when the account has no provider, and `409 auth-options-changed` when the account\'s sign-in methods or its provider changed concurrently, in which case the request may be retried. The change is written to the audit log. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`.
+     * Removes the identity provider of the account the access token was issued for, together with its client secret, and disables the `sso` sign-in method in the same change. Sessions signed in through the provider can no longer refresh an access token scoped to the account.  Returns `400 last-auth-option-disabled` when single sign-on is the account\'s only enabled member sign-in method, `404 oidc-provider-not-configured` when the account has no provider, and `409 auth-options-changed` when the account\'s sign-in methods or its provider changed concurrently, in which case the request may be retried. The change is written to the audit log. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`. A script\'s own API key cannot call it.
      * Delete the current account\'s OIDC provider
      */
     deleteOidcProviderRaw(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<void>>;
     /**
-     * Removes the identity provider of the account the access token was issued for, together with its client secret, and disables the `sso` sign-in method in the same change. Sessions signed in through the provider can no longer refresh an access token scoped to the account.  Returns `400 last-auth-option-disabled` when single sign-on is the account\'s only enabled member sign-in method, `404 oidc-provider-not-configured` when the account has no provider, and `409 auth-options-changed` when the account\'s sign-in methods or its provider changed concurrently, in which case the request may be retried. The change is written to the audit log. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`.
+     * Removes the identity provider of the account the access token was issued for, together with its client secret, and disables the `sso` sign-in method in the same change. Sessions signed in through the provider can no longer refresh an access token scoped to the account.  Returns `400 last-auth-option-disabled` when single sign-on is the account\'s only enabled member sign-in method, `404 oidc-provider-not-configured` when the account has no provider, and `409 auth-options-changed` when the account\'s sign-in methods or its provider changed concurrently, in which case the request may be retried. The change is written to the audit log. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`. A script\'s own API key cannot call it.
      * Delete the current account\'s OIDC provider
      */
     deleteOidcProvider(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void>;
@@ -368,12 +368,12 @@ export declare class AccountsApi extends runtime.BaseAPI implements AccountsApiI
      */
     getHostname(requestParameters: AccountsApiGetHostnameRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<string>;
     /**
-     * Returns the identity provider members of the account the access token was issued for sign in through with single sign-on. The client secret is never returned; `clientSecretSet` reports whether one is stored.  Returns `404 oidc-provider-not-configured` when the account has no provider, and `409 sso-multiple-providers` when it has more than one. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`.
+     * Returns the identity provider members of the account the access token was issued for sign in through with single sign-on. The client secret is never returned; `clientSecretSet` reports whether one is stored.  Returns `404 oidc-provider-not-configured` when the account has no provider, and `409 sso-multiple-providers` when it has more than one. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`. A script\'s own API key cannot call it.
      * Get the current account\'s OIDC provider
      */
     getOidcProviderRaw(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<AccountOIDCProvider>>;
     /**
-     * Returns the identity provider members of the account the access token was issued for sign in through with single sign-on. The client secret is never returned; `clientSecretSet` reports whether one is stored.  Returns `404 oidc-provider-not-configured` when the account has no provider, and `409 sso-multiple-providers` when it has more than one. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`.
+     * Returns the identity provider members of the account the access token was issued for sign in through with single sign-on. The client secret is never returned; `clientSecretSet` reports whether one is stored.  Returns `404 oidc-provider-not-configured` when the account has no provider, and `409 sso-multiple-providers` when it has more than one. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`. A script\'s own API key cannot call it.
      * Get the current account\'s OIDC provider
      */
     getOidcProvider(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<AccountOIDCProvider>;
@@ -458,22 +458,22 @@ export declare class AccountsApi extends runtime.BaseAPI implements AccountsApiI
      */
     updateAuthOptions(requestParameters: AccountsApiUpdateAuthOptionsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<Array<AccountAuthOption>>;
     /**
-     * Changes the identity provider members of the account the access token was issued for sign in through with single sign-on. Fields left out keep their current value; the client secret is changed with `PUT /v1/account/oidc-provider/client-secret`.  When `providerName` or `tenant` changes, the tenant must name a single organisation or the request returns `400 invalid-tenant`, and the provider\'s OpenID discovery document is fetched before anything is stored; a provider that cannot be reached returns `400 oidc-discovery-failed`. Returns `404 oidc-provider-not-configured` when the account has no provider, and `409 oidc-provider-changed` when it was changed concurrently. The change is written to the audit log. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`.
+     * Changes the identity provider members of the account the access token was issued for sign in through with single sign-on. Fields left out keep their current value; the client secret is changed with `PUT /v1/account/oidc-provider/client-secret`.  When `providerName` or `tenant` changes, the tenant must name a single organisation or the request returns `400 invalid-tenant`, and the provider\'s OpenID discovery document is fetched before anything is stored; a provider that cannot be reached returns `400 oidc-discovery-failed`. Returns `404 oidc-provider-not-configured` when the account has no provider, and `409 oidc-provider-changed` when it was changed concurrently. The change is written to the audit log. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`. A script\'s own API key cannot call it.
      * Update the current account\'s OIDC provider
      */
     updateOidcProviderRaw(requestParameters: AccountsApiUpdateOidcProviderRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<AccountOIDCProvider>>;
     /**
-     * Changes the identity provider members of the account the access token was issued for sign in through with single sign-on. Fields left out keep their current value; the client secret is changed with `PUT /v1/account/oidc-provider/client-secret`.  When `providerName` or `tenant` changes, the tenant must name a single organisation or the request returns `400 invalid-tenant`, and the provider\'s OpenID discovery document is fetched before anything is stored; a provider that cannot be reached returns `400 oidc-discovery-failed`. Returns `404 oidc-provider-not-configured` when the account has no provider, and `409 oidc-provider-changed` when it was changed concurrently. The change is written to the audit log. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`.
+     * Changes the identity provider members of the account the access token was issued for sign in through with single sign-on. Fields left out keep their current value; the client secret is changed with `PUT /v1/account/oidc-provider/client-secret`.  When `providerName` or `tenant` changes, the tenant must name a single organisation or the request returns `400 invalid-tenant`, and the provider\'s OpenID discovery document is fetched before anything is stored; a provider that cannot be reached returns `400 oidc-discovery-failed`. Returns `404 oidc-provider-not-configured` when the account has no provider, and `409 oidc-provider-changed` when it was changed concurrently. The change is written to the audit log. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`. A script\'s own API key cannot call it.
      * Update the current account\'s OIDC provider
      */
     updateOidcProvider(requestParameters: AccountsApiUpdateOidcProviderRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<AccountOIDCProvider>;
     /**
-     * Stores a new client secret for the identity provider of the account the access token was issued for. The secret is write-only: no endpoint returns it. Returns `404 oidc-provider-not-configured` when the account has no provider. The change is written to the audit log without the secret. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`.
+     * Stores a new client secret for the identity provider of the account the access token was issued for. The secret is write-only: no endpoint returns it. Returns `404 oidc-provider-not-configured` when the account has no provider. The change is written to the audit log without the secret. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`. A script\'s own API key cannot call it.
      * Replace the current account\'s OIDC client secret
      */
     updateOidcProviderClientSecretRaw(requestParameters: AccountsApiUpdateOidcProviderClientSecretRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<void>>;
     /**
-     * Stores a new client secret for the identity provider of the account the access token was issued for. The secret is write-only: no endpoint returns it. Returns `404 oidc-provider-not-configured` when the account has no provider. The change is written to the audit log without the secret. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`.
+     * Stores a new client secret for the identity provider of the account the access token was issued for. The secret is write-only: no endpoint returns it. Returns `404 oidc-provider-not-configured` when the account has no provider. The change is written to the audit log without the secret. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`. A script\'s own API key cannot call it.
      * Replace the current account\'s OIDC client secret
      */
     updateOidcProviderClientSecret(requestParameters: AccountsApiUpdateOidcProviderClientSecretRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void>;

package/dist/apis/AccountsApi.js

@@ -75,7 +75,7 @@ class AccountsApi extends runtime.BaseAPI {
         });
     }
     /**
-     * Registers the identity provider members of the account the access token was issued for sign in through with single sign-on. An account has at most one provider; creating a second returns `409 oidc-provider-exists`. Creating a provider does not enable the `sso` sign-in method; enable it with `PATCH /v1/account/auth-options` afterwards.  The tenant must name a single organisation (Microsoft\'s `common`, `organizations` and `consumers` are rejected) or the request returns `400 invalid-tenant`. The provider\'s OpenID discovery document is fetched before anything is stored, and a provider that cannot be reached returns `400 oidc-discovery-failed`. The change is written to the audit log. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`.
+     * Registers the identity provider members of the account the access token was issued for sign in through with single sign-on. An account has at most one provider; creating a second returns `409 oidc-provider-exists`. Creating a provider does not enable the `sso` sign-in method; enable it with `PATCH /v1/account/auth-options` afterwards.  The tenant must name a single organisation (Microsoft\'s `common`, `organizations` and `consumers` are rejected) or the request returns `400 invalid-tenant`. The provider\'s OpenID discovery document is fetched before anything is stored, and a provider that cannot be reached returns `400 oidc-discovery-failed`. The change is written to the audit log. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`. A script\'s own API key cannot call it.
      * Create the current account\'s OIDC provider
      */
     createOidcProviderRaw(requestParameters, initOverrides) {
@@ -105,7 +105,7 @@ class AccountsApi extends runtime.BaseAPI {
         });
     }
     /**
-     * Registers the identity provider members of the account the access token was issued for sign in through with single sign-on. An account has at most one provider; creating a second returns `409 oidc-provider-exists`. Creating a provider does not enable the `sso` sign-in method; enable it with `PATCH /v1/account/auth-options` afterwards.  The tenant must name a single organisation (Microsoft\'s `common`, `organizations` and `consumers` are rejected) or the request returns `400 invalid-tenant`. The provider\'s OpenID discovery document is fetched before anything is stored, and a provider that cannot be reached returns `400 oidc-discovery-failed`. The change is written to the audit log. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`.
+     * Registers the identity provider members of the account the access token was issued for sign in through with single sign-on. An account has at most one provider; creating a second returns `409 oidc-provider-exists`. Creating a provider does not enable the `sso` sign-in method; enable it with `PATCH /v1/account/auth-options` afterwards.  The tenant must name a single organisation (Microsoft\'s `common`, `organizations` and `consumers` are rejected) or the request returns `400 invalid-tenant`. The provider\'s OpenID discovery document is fetched before anything is stored, and a provider that cannot be reached returns `400 oidc-discovery-failed`. The change is written to the audit log. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`. A script\'s own API key cannot call it.
      * Create the current account\'s OIDC provider
      */
     createOidcProvider(requestParameters, initOverrides) {
@@ -115,7 +115,7 @@ class AccountsApi extends runtime.BaseAPI {
         });
     }
     /**
-     * Permanently deletes the account the access token was issued for, along with its projects and members. This cannot be undone. Requires the *Manage my account* permission.
+     * Permanently deletes the account the access token was issued for, along with its projects, members and scripts. This cannot be undone. Scripts are deleted first, so if the request fails some of them may already be gone; repeat it to finish deleting the account. Requires the *Manage my account* permission. A script\'s own API key cannot delete the account.
      * Delete the current account
      */
     deleteRaw(initOverrides) {
@@ -140,7 +140,7 @@ class AccountsApi extends runtime.BaseAPI {
         });
     }
     /**
-     * Permanently deletes the account the access token was issued for, along with its projects and members. This cannot be undone. Requires the *Manage my account* permission.
+     * Permanently deletes the account the access token was issued for, along with its projects, members and scripts. This cannot be undone. Scripts are deleted first, so if the request fails some of them may already be gone; repeat it to finish deleting the account. Requires the *Manage my account* permission. A script\'s own API key cannot delete the account.
      * Delete the current account
      */
     delete(initOverrides) {
@@ -149,7 +149,7 @@ class AccountsApi extends runtime.BaseAPI {
         });
     }
     /**
-     * Removes the identity provider of the account the access token was issued for, together with its client secret, and disables the `sso` sign-in method in the same change. Sessions signed in through the provider can no longer refresh an access token scoped to the account.  Returns `400 last-auth-option-disabled` when single sign-on is the account\'s only enabled member sign-in method, `404 oidc-provider-not-configured` when the account has no provider, and `409 auth-options-changed` when the account\'s sign-in methods or its provider changed concurrently, in which case the request may be retried. The change is written to the audit log. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`.
+     * Removes the identity provider of the account the access token was issued for, together with its client secret, and disables the `sso` sign-in method in the same change. Sessions signed in through the provider can no longer refresh an access token scoped to the account.  Returns `400 last-auth-option-disabled` when single sign-on is the account\'s only enabled member sign-in method, `404 oidc-provider-not-configured` when the account has no provider, and `409 auth-options-changed` when the account\'s sign-in methods or its provider changed concurrently, in which case the request may be retried. The change is written to the audit log. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`. A script\'s own API key cannot call it.
      * Delete the current account\'s OIDC provider
      */
     deleteOidcProviderRaw(initOverrides) {
@@ -174,7 +174,7 @@ class AccountsApi extends runtime.BaseAPI {
         });
     }
     /**
-     * Removes the identity provider of the account the access token was issued for, together with its client secret, and disables the `sso` sign-in method in the same change. Sessions signed in through the provider can no longer refresh an access token scoped to the account.  Returns `400 last-auth-option-disabled` when single sign-on is the account\'s only enabled member sign-in method, `404 oidc-provider-not-configured` when the account has no provider, and `409 auth-options-changed` when the account\'s sign-in methods or its provider changed concurrently, in which case the request may be retried. The change is written to the audit log. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`.
+     * Removes the identity provider of the account the access token was issued for, together with its client secret, and disables the `sso` sign-in method in the same change. Sessions signed in through the provider can no longer refresh an access token scoped to the account.  Returns `400 last-auth-option-disabled` when single sign-on is the account\'s only enabled member sign-in method, `404 oidc-provider-not-configured` when the account has no provider, and `409 auth-options-changed` when the account\'s sign-in methods or its provider changed concurrently, in which case the request may be retried. The change is written to the audit log. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`. A script\'s own API key cannot call it.
      * Delete the current account\'s OIDC provider
      */
     deleteOidcProvider(initOverrides) {
@@ -287,7 +287,7 @@ class AccountsApi extends runtime.BaseAPI {
         });
     }
     /**
-     * Returns the identity provider members of the account the access token was issued for sign in through with single sign-on. The client secret is never returned; `clientSecretSet` reports whether one is stored.  Returns `404 oidc-provider-not-configured` when the account has no provider, and `409 sso-multiple-providers` when it has more than one. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`.
+     * Returns the identity provider members of the account the access token was issued for sign in through with single sign-on. The client secret is never returned; `clientSecretSet` reports whether one is stored.  Returns `404 oidc-provider-not-configured` when the account has no provider, and `409 sso-multiple-providers` when it has more than one. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`. A script\'s own API key cannot call it.
      * Get the current account\'s OIDC provider
      */
     getOidcProviderRaw(initOverrides) {
@@ -312,7 +312,7 @@ class AccountsApi extends runtime.BaseAPI {
         });
     }
     /**
-     * Returns the identity provider members of the account the access token was issued for sign in through with single sign-on. The client secret is never returned; `clientSecretSet` reports whether one is stored.  Returns `404 oidc-provider-not-configured` when the account has no provider, and `409 sso-multiple-providers` when it has more than one. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`.
+     * Returns the identity provider members of the account the access token was issued for sign in through with single sign-on. The client secret is never returned; `clientSecretSet` reports whether one is stored.  Returns `404 oidc-provider-not-configured` when the account has no provider, and `409 sso-multiple-providers` when it has more than one. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`. A script\'s own API key cannot call it.
      * Get the current account\'s OIDC provider
      */
     getOidcProvider(initOverrides) {
@@ -617,7 +617,7 @@ class AccountsApi extends runtime.BaseAPI {
         });
     }
     /**
-     * Changes the identity provider members of the account the access token was issued for sign in through with single sign-on. Fields left out keep their current value; the client secret is changed with `PUT /v1/account/oidc-provider/client-secret`.  When `providerName` or `tenant` changes, the tenant must name a single organisation or the request returns `400 invalid-tenant`, and the provider\'s OpenID discovery document is fetched before anything is stored; a provider that cannot be reached returns `400 oidc-discovery-failed`. Returns `404 oidc-provider-not-configured` when the account has no provider, and `409 oidc-provider-changed` when it was changed concurrently. The change is written to the audit log. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`.
+     * Changes the identity provider members of the account the access token was issued for sign in through with single sign-on. Fields left out keep their current value; the client secret is changed with `PUT /v1/account/oidc-provider/client-secret`.  When `providerName` or `tenant` changes, the tenant must name a single organisation or the request returns `400 invalid-tenant`, and the provider\'s OpenID discovery document is fetched before anything is stored; a provider that cannot be reached returns `400 oidc-discovery-failed`. Returns `404 oidc-provider-not-configured` when the account has no provider, and `409 oidc-provider-changed` when it was changed concurrently. The change is written to the audit log. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`. A script\'s own API key cannot call it.
      * Update the current account\'s OIDC provider
      */
     updateOidcProviderRaw(requestParameters, initOverrides) {
@@ -647,7 +647,7 @@ class AccountsApi extends runtime.BaseAPI {
         });
     }
     /**
-     * Changes the identity provider members of the account the access token was issued for sign in through with single sign-on. Fields left out keep their current value; the client secret is changed with `PUT /v1/account/oidc-provider/client-secret`.  When `providerName` or `tenant` changes, the tenant must name a single organisation or the request returns `400 invalid-tenant`, and the provider\'s OpenID discovery document is fetched before anything is stored; a provider that cannot be reached returns `400 oidc-discovery-failed`. Returns `404 oidc-provider-not-configured` when the account has no provider, and `409 oidc-provider-changed` when it was changed concurrently. The change is written to the audit log. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`.
+     * Changes the identity provider members of the account the access token was issued for sign in through with single sign-on. Fields left out keep their current value; the client secret is changed with `PUT /v1/account/oidc-provider/client-secret`.  When `providerName` or `tenant` changes, the tenant must name a single organisation or the request returns `400 invalid-tenant`, and the provider\'s OpenID discovery document is fetched before anything is stored; a provider that cannot be reached returns `400 oidc-discovery-failed`. Returns `404 oidc-provider-not-configured` when the account has no provider, and `409 oidc-provider-changed` when it was changed concurrently. The change is written to the audit log. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`. A script\'s own API key cannot call it.
      * Update the current account\'s OIDC provider
      */
     updateOidcProvider(requestParameters, initOverrides) {
@@ -657,7 +657,7 @@ class AccountsApi extends runtime.BaseAPI {
         });
     }
     /**
-     * Stores a new client secret for the identity provider of the account the access token was issued for. The secret is write-only: no endpoint returns it. Returns `404 oidc-provider-not-configured` when the account has no provider. The change is written to the audit log without the secret. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`.
+     * Stores a new client secret for the identity provider of the account the access token was issued for. The secret is write-only: no endpoint returns it. Returns `404 oidc-provider-not-configured` when the account has no provider. The change is written to the audit log without the secret. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`. A script\'s own API key cannot call it.
      * Replace the current account\'s OIDC client secret
      */
     updateOidcProviderClientSecretRaw(requestParameters, initOverrides) {
@@ -687,7 +687,7 @@ class AccountsApi extends runtime.BaseAPI {
         });
     }
     /**
-     * Stores a new client secret for the identity provider of the account the access token was issued for. The secret is write-only: no endpoint returns it. Returns `404 oidc-provider-not-configured` when the account has no provider. The change is written to the audit log without the secret. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`.
+     * Stores a new client secret for the identity provider of the account the access token was issued for. The secret is write-only: no endpoint returns it. Returns `404 oidc-provider-not-configured` when the account has no provider. The change is written to the audit log without the secret. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`. A script\'s own API key cannot call it.
      * Replace the current account\'s OIDC client secret
      */
     updateOidcProviderClientSecret(requestParameters, initOverrides) {

package/dist/apis/AuditLogApi.d.ts

@@ -29,7 +29,7 @@ export interface AuditLogApiInterface {
     /**
      * Returns a paginated list of audit-log entries for the account. Specify `entity` to restrict to a single entity type, or pass `entity=all` to retrieve changes across every type the caller has permission to see.  Use `nextCursor` from the response as the `cursor` query parameter to fetch the next page.
      * @summary Query the audit log
-     * @param {string} [entity] Entity type to query. One of: dashboard, property, scenario, floorplan, space-ruleset, top-down-model, object-group, datacollection, contribution, i18n, user, file, variable, upload-quarantine. Pass \"all\" to retrieve entries across all entity types the caller has permission to see (entityId must be omitted).
+     * @param {string} [entity] Entity type to query. One of: dashboard, property, scenario, floorplan, space-ruleset, top-down-model, object-group, datacollection, contribution, i18n, user, file, variable, script, upload-quarantine. Pass \"all\" to retrieve entries across all entity types the caller has permission to see (entityId must be omitted).
      * @param {string} [entityId] Restrict results to changes made to this specific entity. Cannot be used when entity=all.
      * @param {Date} [from] Return only entries at or after this timestamp (RFC 3339). Omit for no lower bound.
      * @param {Date} [to] Return only entries at or before this timestamp (RFC 3339). Omit for no upper bound.

package/dist/apis/AuthenticationApi.d.ts

@@ -59,7 +59,7 @@ export interface AuthenticationApiUpdateAuthPasswordRequest {
  */
 export interface AuthenticationApiInterface {
     /**
-     * Issues a long-lived key for programmatic access, scoped to the calling user and the given project. The secret is returned in the `key` field of this response and never again, since only its hash is stored; a client that loses it must create a replacement. Keys expire after `expiresInDays`, between 1 and 90.
+     * Issues a long-lived key for programmatic access, scoped to the calling user and the given project. The secret is returned in the `key` field of this response and never again, since only its hash is stored; a client that loses it must create a replacement. Keys expire after `expiresInDays`, between 1 and 90. A script\'s own API key cannot create or delete keys.
      * @summary Create an API key
      * @param {ApiKeyPostReqBody} apiKeyPostReqBody
      * @param {*} [options] Override http request option.
@@ -68,7 +68,7 @@ export interface AuthenticationApiInterface {
      */
     createApiKeysRaw(requestParameters: AuthenticationApiCreateApiKeysRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<ApiKeyPostResBody>>;
     /**
-     * Issues a long-lived key for programmatic access, scoped to the calling user and the given project. The secret is returned in the `key` field of this response and never again, since only its hash is stored; a client that loses it must create a replacement. Keys expire after `expiresInDays`, between 1 and 90.
+     * Issues a long-lived key for programmatic access, scoped to the calling user and the given project. The secret is returned in the `key` field of this response and never again, since only its hash is stored; a client that loses it must create a replacement. Keys expire after `expiresInDays`, between 1 and 90. A script\'s own API key cannot create or delete keys.
      * Create an API key
      */
     createApiKeys(requestParameters: AuthenticationApiCreateApiKeysRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<ApiKeyPostResBody>;
@@ -188,7 +188,7 @@ export interface AuthenticationApiInterface {
      */
     createAuthSendToken(requestParameters: AuthenticationApiCreateAuthSendTokenRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void>;
     /**
-     * Permanently revokes one of the calling user\'s keys. Access tokens already exchanged for it remain valid until they expire, and the key itself may continue to authenticate for up to a minute while cached resolutions age out.
+     * Permanently revokes one of the calling user\'s keys. Access tokens already exchanged for it remain valid until they expire, and the key itself may continue to authenticate for up to a minute while cached resolutions age out. Keys that belong to a script are rejected with 409; delete or re-authorise the script instead.
      * @summary Revoke an API key
      * @param {number} id
      * @param {*} [options] Override http request option.
@@ -197,7 +197,7 @@ export interface AuthenticationApiInterface {
      */
     deleteApiKeysRaw(requestParameters: AuthenticationApiDeleteApiKeysRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<void>>;
     /**
-     * Permanently revokes one of the calling user\'s keys. Access tokens already exchanged for it remain valid until they expire, and the key itself may continue to authenticate for up to a minute while cached resolutions age out.
+     * Permanently revokes one of the calling user\'s keys. Access tokens already exchanged for it remain valid until they expire, and the key itself may continue to authenticate for up to a minute while cached resolutions age out. Keys that belong to a script are rejected with 409; delete or re-authorise the script instead.
      * Revoke an API key
      */
     deleteApiKeys(requestParameters: AuthenticationApiDeleteApiKeysRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void>;
@@ -249,12 +249,12 @@ export interface AuthenticationApiInterface {
  */
 export declare class AuthenticationApi extends runtime.BaseAPI implements AuthenticationApiInterface {
     /**
-     * Issues a long-lived key for programmatic access, scoped to the calling user and the given project. The secret is returned in the `key` field of this response and never again, since only its hash is stored; a client that loses it must create a replacement. Keys expire after `expiresInDays`, between 1 and 90.
+     * Issues a long-lived key for programmatic access, scoped to the calling user and the given project. The secret is returned in the `key` field of this response and never again, since only its hash is stored; a client that loses it must create a replacement. Keys expire after `expiresInDays`, between 1 and 90. A script\'s own API key cannot create or delete keys.
      * Create an API key
      */
     createApiKeysRaw(requestParameters: AuthenticationApiCreateApiKeysRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<ApiKeyPostResBody>>;
     /**
-     * Issues a long-lived key for programmatic access, scoped to the calling user and the given project. The secret is returned in the `key` field of this response and never again, since only its hash is stored; a client that loses it must create a replacement. Keys expire after `expiresInDays`, between 1 and 90.
+     * Issues a long-lived key for programmatic access, scoped to the calling user and the given project. The secret is returned in the `key` field of this response and never again, since only its hash is stored; a client that loses it must create a replacement. Keys expire after `expiresInDays`, between 1 and 90. A script\'s own API key cannot create or delete keys.
      * Create an API key
      */
     createApiKeys(requestParameters: AuthenticationApiCreateApiKeysRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<ApiKeyPostResBody>;
@@ -339,12 +339,12 @@ export declare class AuthenticationApi extends runtime.BaseAPI implements Authen
      */
     createAuthSendToken(requestParameters: AuthenticationApiCreateAuthSendTokenRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void>;
     /**
-     * Permanently revokes one of the calling user\'s keys. Access tokens already exchanged for it remain valid until they expire, and the key itself may continue to authenticate for up to a minute while cached resolutions age out.
+     * Permanently revokes one of the calling user\'s keys. Access tokens already exchanged for it remain valid until they expire, and the key itself may continue to authenticate for up to a minute while cached resolutions age out. Keys that belong to a script are rejected with 409; delete or re-authorise the script instead.
      * Revoke an API key
      */
     deleteApiKeysRaw(requestParameters: AuthenticationApiDeleteApiKeysRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<void>>;
     /**
-     * Permanently revokes one of the calling user\'s keys. Access tokens already exchanged for it remain valid until they expire, and the key itself may continue to authenticate for up to a minute while cached resolutions age out.
+     * Permanently revokes one of the calling user\'s keys. Access tokens already exchanged for it remain valid until they expire, and the key itself may continue to authenticate for up to a minute while cached resolutions age out. Keys that belong to a script are rejected with 409; delete or re-authorise the script instead.
      * Revoke an API key
      */
     deleteApiKeys(requestParameters: AuthenticationApiDeleteApiKeysRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void>;

package/dist/apis/AuthenticationApi.js

@@ -30,7 +30,7 @@ const index_1 = require("../models/index");
  */
 class AuthenticationApi extends runtime.BaseAPI {
     /**
-     * Issues a long-lived key for programmatic access, scoped to the calling user and the given project. The secret is returned in the `key` field of this response and never again, since only its hash is stored; a client that loses it must create a replacement. Keys expire after `expiresInDays`, between 1 and 90.
+     * Issues a long-lived key for programmatic access, scoped to the calling user and the given project. The secret is returned in the `key` field of this response and never again, since only its hash is stored; a client that loses it must create a replacement. Keys expire after `expiresInDays`, between 1 and 90. A script\'s own API key cannot create or delete keys.
      * Create an API key
      */
     createApiKeysRaw(requestParameters, initOverrides) {
@@ -60,7 +60,7 @@ class AuthenticationApi extends runtime.BaseAPI {
         });
     }
     /**
-     * Issues a long-lived key for programmatic access, scoped to the calling user and the given project. The secret is returned in the `key` field of this response and never again, since only its hash is stored; a client that loses it must create a replacement. Keys expire after `expiresInDays`, between 1 and 90.
+     * Issues a long-lived key for programmatic access, scoped to the calling user and the given project. The secret is returned in the `key` field of this response and never again, since only its hash is stored; a client that loses it must create a replacement. Keys expire after `expiresInDays`, between 1 and 90. A script\'s own API key cannot create or delete keys.
      * Create an API key
      */
     createApiKeys(requestParameters, initOverrides) {
@@ -326,7 +326,7 @@ class AuthenticationApi extends runtime.BaseAPI {
         });
     }
     /**
-     * Permanently revokes one of the calling user\'s keys. Access tokens already exchanged for it remain valid until they expire, and the key itself may continue to authenticate for up to a minute while cached resolutions age out.
+     * Permanently revokes one of the calling user\'s keys. Access tokens already exchanged for it remain valid until they expire, and the key itself may continue to authenticate for up to a minute while cached resolutions age out. Keys that belong to a script are rejected with 409; delete or re-authorise the script instead.
      * Revoke an API key
      */
     deleteApiKeysRaw(requestParameters, initOverrides) {
@@ -355,7 +355,7 @@ class AuthenticationApi extends runtime.BaseAPI {
         });
     }
     /**
-     * Permanently revokes one of the calling user\'s keys. Access tokens already exchanged for it remain valid until they expire, and the key itself may continue to authenticate for up to a minute while cached resolutions age out.
+     * Permanently revokes one of the calling user\'s keys. Access tokens already exchanged for it remain valid until they expire, and the key itself may continue to authenticate for up to a minute while cached resolutions age out. Keys that belong to a script are rejected with 409; delete or re-authorise the script instead.
      * Revoke an API key
      */
     deleteApiKeys(requestParameters, initOverrides) {