@spaciv/sdk 0.1.1 → 0.1.2

package/dist/models/ScriptSummary.js

@@ -0,0 +1,115 @@
+"use strict";
+/* tslint:disable */
+/* eslint-disable */
+/**
+ * spaciv API
+ * The spaciv API powers workplace planning: modelling how many people an organisation has, how they work, and how much space that requires.  ## Getting started  1. Exchange credentials for an access token using one of the operations under    **Authentication**. 2. Send that token on every subsequent request as `Authorization: Bearer <token>`. 3. Access tokens are short lived. Call `POST /v1/auth/refresh-token` to obtain a new one    before the old one expires.  ## Conventions  Every operation is versioned under `/v1`. Collections are plural (`GET /v1/dashboards` lists, `POST /v1/dashboards` creates) and individual records live beneath them (`/v1/dashboards/{id}`). Singular paths such as `/v1/account`, `/v1/project` and `/v1/user` refer to the record the access token was issued for.  Request and response bodies are JSON. Timestamps are RFC 3339. Identifiers are opaque strings unless documented otherwise, and collection operations return the records visible to the account the token was issued for.  Failures return an [RFC 9457](https://www.rfc-editor.org/rfc/rfc9457) problem document with a `detail` field describing what went wrong.
+ *
+ * The version of the OpenAPI document: 1.0.0
+ * Contact: support@spaciv.com
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ScriptSummaryTypeEnum = exports.ScriptSummaryLanguageEnum = void 0;
+exports.instanceOfScriptSummary = instanceOfScriptSummary;
+exports.ScriptSummaryFromJSON = ScriptSummaryFromJSON;
+exports.ScriptSummaryFromJSONTyped = ScriptSummaryFromJSONTyped;
+exports.ScriptSummaryToJSON = ScriptSummaryToJSON;
+exports.ScriptSummaryToJSONTyped = ScriptSummaryToJSONTyped;
+const ScriptKey_1 = require("./ScriptKey");
+const ScriptSchedule_1 = require("./ScriptSchedule");
+/**
+ * @export
+ */
+exports.ScriptSummaryLanguageEnum = {
+    Python: 'python',
+    Go: 'go',
+    Javascript: 'javascript'
+};
+/**
+ * @export
+ */
+exports.ScriptSummaryTypeEnum = {
+    Integration: 'integration'
+};
+/**
+ * Check if a given object implements the ScriptSummary interface.
+ */
+function instanceOfScriptSummary(value) {
+    if (!('createdAt' in value) || value['createdAt'] === undefined)
+        return false;
+    if (!('createdBy' in value) || value['createdBy'] === undefined)
+        return false;
+    if (!('enabled' in value) || value['enabled'] === undefined)
+        return false;
+    if (!('id' in value) || value['id'] === undefined)
+        return false;
+    if (!('key' in value) || value['key'] === undefined)
+        return false;
+    if (!('language' in value) || value['language'] === undefined)
+        return false;
+    if (!('name' in value) || value['name'] === undefined)
+        return false;
+    if (!('revision' in value) || value['revision'] === undefined)
+        return false;
+    if (!('schedule' in value) || value['schedule'] === undefined)
+        return false;
+    if (!('type' in value) || value['type'] === undefined)
+        return false;
+    if (!('updatedAt' in value) || value['updatedAt'] === undefined)
+        return false;
+    if (!('webhook' in value) || value['webhook'] === undefined)
+        return false;
+    return true;
+}
+function ScriptSummaryFromJSON(json) {
+    return ScriptSummaryFromJSONTyped(json, false);
+}
+function ScriptSummaryFromJSONTyped(json, ignoreDiscriminator) {
+    if (json == null) {
+        return json;
+    }
+    return {
+        'createdAt': (new Date(json['createdAt'])),
+        'createdBy': json['createdBy'],
+        'description': json['description'] == null ? undefined : json['description'],
+        'enabled': json['enabled'],
+        'id': json['id'],
+        'key': (0, ScriptKey_1.ScriptKeyFromJSON)(json['key']),
+        'language': json['language'],
+        'name': json['name'],
+        'project': json['project'] == null ? undefined : json['project'],
+        'revision': json['revision'],
+        'schedule': (0, ScriptSchedule_1.ScriptScheduleFromJSON)(json['schedule']),
+        'type': json['type'],
+        'updatedAt': (new Date(json['updatedAt'])),
+        'webhook': json['webhook'],
+    };
+}
+function ScriptSummaryToJSON(json) {
+    return ScriptSummaryToJSONTyped(json, false);
+}
+function ScriptSummaryToJSONTyped(value, ignoreDiscriminator = false) {
+    if (value == null) {
+        return value;
+    }
+    return {
+        'createdAt': ((value['createdAt']).toISOString()),
+        'createdBy': value['createdBy'],
+        'description': value['description'],
+        'enabled': value['enabled'],
+        'id': value['id'],
+        'key': (0, ScriptKey_1.ScriptKeyToJSON)(value['key']),
+        'language': value['language'],
+        'name': value['name'],
+        'project': value['project'],
+        'revision': value['revision'],
+        'schedule': (0, ScriptSchedule_1.ScriptScheduleToJSON)(value['schedule']),
+        'type': value['type'],
+        'updatedAt': ((value['updatedAt']).toISOString()),
+        'webhook': value['webhook'],
+    };
+}

package/dist/models/ScriptWebhookResBody.d.ts

@@ -0,0 +1,32 @@
+/**
+ * spaciv API
+ * The spaciv API powers workplace planning: modelling how many people an organisation has, how they work, and how much space that requires.  ## Getting started  1. Exchange credentials for an access token using one of the operations under    **Authentication**. 2. Send that token on every subsequent request as `Authorization: Bearer <token>`. 3. Access tokens are short lived. Call `POST /v1/auth/refresh-token` to obtain a new one    before the old one expires.  ## Conventions  Every operation is versioned under `/v1`. Collections are plural (`GET /v1/dashboards` lists, `POST /v1/dashboards` creates) and individual records live beneath them (`/v1/dashboards/{id}`). Singular paths such as `/v1/account`, `/v1/project` and `/v1/user` refer to the record the access token was issued for.  Request and response bodies are JSON. Timestamps are RFC 3339. Identifiers are opaque strings unless documented otherwise, and collection operations return the records visible to the account the token was issued for.  Failures return an [RFC 9457](https://www.rfc-editor.org/rfc/rfc9457) problem document with a `detail` field describing what went wrong.
+ *
+ * The version of the OpenAPI document: 1.0.0
+ * Contact: support@spaciv.com
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+/**
+ *
+ * @export
+ * @interface ScriptWebhookResBody
+ */
+export interface ScriptWebhookResBody {
+    /**
+     *
+     * @type {string}
+     * @memberof ScriptWebhookResBody
+     */
+    webhookUrl: string;
+}
+/**
+ * Check if a given object implements the ScriptWebhookResBody interface.
+ */
+export declare function instanceOfScriptWebhookResBody(value: object): value is ScriptWebhookResBody;
+export declare function ScriptWebhookResBodyFromJSON(json: any): ScriptWebhookResBody;
+export declare function ScriptWebhookResBodyFromJSONTyped(json: any, ignoreDiscriminator: boolean): ScriptWebhookResBody;
+export declare function ScriptWebhookResBodyToJSON(json: any): ScriptWebhookResBody;
+export declare function ScriptWebhookResBodyToJSONTyped(value?: ScriptWebhookResBody | null, ignoreDiscriminator?: boolean): any;

package/dist/models/ScriptWebhookResBody.js

@@ -0,0 +1,50 @@
+"use strict";
+/* tslint:disable */
+/* eslint-disable */
+/**
+ * spaciv API
+ * The spaciv API powers workplace planning: modelling how many people an organisation has, how they work, and how much space that requires.  ## Getting started  1. Exchange credentials for an access token using one of the operations under    **Authentication**. 2. Send that token on every subsequent request as `Authorization: Bearer <token>`. 3. Access tokens are short lived. Call `POST /v1/auth/refresh-token` to obtain a new one    before the old one expires.  ## Conventions  Every operation is versioned under `/v1`. Collections are plural (`GET /v1/dashboards` lists, `POST /v1/dashboards` creates) and individual records live beneath them (`/v1/dashboards/{id}`). Singular paths such as `/v1/account`, `/v1/project` and `/v1/user` refer to the record the access token was issued for.  Request and response bodies are JSON. Timestamps are RFC 3339. Identifiers are opaque strings unless documented otherwise, and collection operations return the records visible to the account the token was issued for.  Failures return an [RFC 9457](https://www.rfc-editor.org/rfc/rfc9457) problem document with a `detail` field describing what went wrong.
+ *
+ * The version of the OpenAPI document: 1.0.0
+ * Contact: support@spaciv.com
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.instanceOfScriptWebhookResBody = instanceOfScriptWebhookResBody;
+exports.ScriptWebhookResBodyFromJSON = ScriptWebhookResBodyFromJSON;
+exports.ScriptWebhookResBodyFromJSONTyped = ScriptWebhookResBodyFromJSONTyped;
+exports.ScriptWebhookResBodyToJSON = ScriptWebhookResBodyToJSON;
+exports.ScriptWebhookResBodyToJSONTyped = ScriptWebhookResBodyToJSONTyped;
+/**
+ * Check if a given object implements the ScriptWebhookResBody interface.
+ */
+function instanceOfScriptWebhookResBody(value) {
+    if (!('webhookUrl' in value) || value['webhookUrl'] === undefined)
+        return false;
+    return true;
+}
+function ScriptWebhookResBodyFromJSON(json) {
+    return ScriptWebhookResBodyFromJSONTyped(json, false);
+}
+function ScriptWebhookResBodyFromJSONTyped(json, ignoreDiscriminator) {
+    if (json == null) {
+        return json;
+    }
+    return {
+        'webhookUrl': json['webhookUrl'],
+    };
+}
+function ScriptWebhookResBodyToJSON(json) {
+    return ScriptWebhookResBodyToJSONTyped(json, false);
+}
+function ScriptWebhookResBodyToJSONTyped(value, ignoreDiscriminator = false) {
+    if (value == null) {
+        return value;
+    }
+    return {
+        'webhookUrl': value['webhookUrl'],
+    };
+}

package/dist/models/index.d.ts

@@ -292,6 +292,28 @@ export * from './ScenarioListEntry';
 export * from './ScenarioListRes';
 export * from './ScenarioNotFoundDetail';
 export * from './ScenarioPatch';
+export * from './ScriptAuditEntry';
+export * from './ScriptAuditResBody';
+export * from './ScriptDetail';
+export * from './ScriptExport';
+export * from './ScriptExportResBody';
+export * from './ScriptExportRun';
+export * from './ScriptKey';
+export * from './ScriptListResBody';
+export * from './ScriptLogLine';
+export * from './ScriptPatchReqBody';
+export * from './ScriptPostReqBody';
+export * from './ScriptRun';
+export * from './ScriptRunLogsResBody';
+export * from './ScriptRunsResBody';
+export * from './ScriptRuntime';
+export * from './ScriptSchedule';
+export * from './ScriptSchedulePreviewReqBody';
+export * from './ScriptSchedulePreviewResBody';
+export * from './ScriptSecretsReqBody';
+export * from './ScriptSecretsResBody';
+export * from './ScriptSummary';
+export * from './ScriptWebhookResBody';
 export * from './SendPasswordPutReqBody';
 export * from './SerializedEvent';
 export * from './SingleSelectChangelogData';

package/dist/models/index.js

@@ -310,6 +310,28 @@ __exportStar(require("./ScenarioListEntry"), exports);
 __exportStar(require("./ScenarioListRes"), exports);
 __exportStar(require("./ScenarioNotFoundDetail"), exports);
 __exportStar(require("./ScenarioPatch"), exports);
+__exportStar(require("./ScriptAuditEntry"), exports);
+__exportStar(require("./ScriptAuditResBody"), exports);
+__exportStar(require("./ScriptDetail"), exports);
+__exportStar(require("./ScriptExport"), exports);
+__exportStar(require("./ScriptExportResBody"), exports);
+__exportStar(require("./ScriptExportRun"), exports);
+__exportStar(require("./ScriptKey"), exports);
+__exportStar(require("./ScriptListResBody"), exports);
+__exportStar(require("./ScriptLogLine"), exports);
+__exportStar(require("./ScriptPatchReqBody"), exports);
+__exportStar(require("./ScriptPostReqBody"), exports);
+__exportStar(require("./ScriptRun"), exports);
+__exportStar(require("./ScriptRunLogsResBody"), exports);
+__exportStar(require("./ScriptRunsResBody"), exports);
+__exportStar(require("./ScriptRuntime"), exports);
+__exportStar(require("./ScriptSchedule"), exports);
+__exportStar(require("./ScriptSchedulePreviewReqBody"), exports);
+__exportStar(require("./ScriptSchedulePreviewResBody"), exports);
+__exportStar(require("./ScriptSecretsReqBody"), exports);
+__exportStar(require("./ScriptSecretsResBody"), exports);
+__exportStar(require("./ScriptSummary"), exports);
+__exportStar(require("./ScriptWebhookResBody"), exports);
 __exportStar(require("./SendPasswordPutReqBody"), exports);
 __exportStar(require("./SerializedEvent"), exports);
 __exportStar(require("./SingleSelectChangelogData"), exports);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@spaciv/sdk",
-  "version": "0.1.1",
+  "version": "0.1.2",
   "description": "OpenAPI client for @spaciv/sdk",
   "author": "OpenAPI-Generator",
   "repository": {

package/src/apis/AccountsApi.ts

@@ -128,7 +128,7 @@ export interface AccountsApiInterface {
     create(requestParameters: AccountsApiCreateRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<number>;
 
     /**
-     * Registers the identity provider members of the account the access token was issued for sign in through with single sign-on. An account has at most one provider; creating a second returns `409 oidc-provider-exists`. Creating a provider does not enable the `sso` sign-in method; enable it with `PATCH /v1/account/auth-options` afterwards.  The tenant must name a single organisation (Microsoft\'s `common`, `organizations` and `consumers` are rejected) or the request returns `400 invalid-tenant`. The provider\'s OpenID discovery document is fetched before anything is stored, and a provider that cannot be reached returns `400 oidc-discovery-failed`. The change is written to the audit log. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`.
+     * Registers the identity provider members of the account the access token was issued for sign in through with single sign-on. An account has at most one provider; creating a second returns `409 oidc-provider-exists`. Creating a provider does not enable the `sso` sign-in method; enable it with `PATCH /v1/account/auth-options` afterwards.  The tenant must name a single organisation (Microsoft\'s `common`, `organizations` and `consumers` are rejected) or the request returns `400 invalid-tenant`. The provider\'s OpenID discovery document is fetched before anything is stored, and a provider that cannot be reached returns `400 oidc-discovery-failed`. The change is written to the audit log. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`. A script\'s own API key cannot call it.
      * @summary Create the current account\'s OIDC provider
      * @param {AccountPostOIDCProviderReqBody} accountPostOIDCProviderReqBody 
      * @param {*} [options] Override http request option.
@@ -138,13 +138,13 @@ export interface AccountsApiInterface {
     createOidcProviderRaw(requestParameters: AccountsApiCreateOidcProviderRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<AccountOIDCProvider>>;
 
     /**
-     * Registers the identity provider members of the account the access token was issued for sign in through with single sign-on. An account has at most one provider; creating a second returns `409 oidc-provider-exists`. Creating a provider does not enable the `sso` sign-in method; enable it with `PATCH /v1/account/auth-options` afterwards.  The tenant must name a single organisation (Microsoft\'s `common`, `organizations` and `consumers` are rejected) or the request returns `400 invalid-tenant`. The provider\'s OpenID discovery document is fetched before anything is stored, and a provider that cannot be reached returns `400 oidc-discovery-failed`. The change is written to the audit log. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`.
+     * Registers the identity provider members of the account the access token was issued for sign in through with single sign-on. An account has at most one provider; creating a second returns `409 oidc-provider-exists`. Creating a provider does not enable the `sso` sign-in method; enable it with `PATCH /v1/account/auth-options` afterwards.  The tenant must name a single organisation (Microsoft\'s `common`, `organizations` and `consumers` are rejected) or the request returns `400 invalid-tenant`. The provider\'s OpenID discovery document is fetched before anything is stored, and a provider that cannot be reached returns `400 oidc-discovery-failed`. The change is written to the audit log. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`. A script\'s own API key cannot call it.
      * Create the current account\'s OIDC provider
      */
     createOidcProvider(requestParameters: AccountsApiCreateOidcProviderRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<AccountOIDCProvider>;
 
     /**
-     * Permanently deletes the account the access token was issued for, along with its projects and members. This cannot be undone. Requires the *Manage my account* permission.
+     * Permanently deletes the account the access token was issued for, along with its projects, members and scripts. This cannot be undone. Scripts are deleted first, so if the request fails some of them may already be gone; repeat it to finish deleting the account. Requires the *Manage my account* permission. A script\'s own API key cannot delete the account.
      * @summary Delete the current account
      * @param {*} [options] Override http request option.
      * @throws {RequiredError}
@@ -153,13 +153,13 @@ export interface AccountsApiInterface {
     deleteRaw(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<void>>;
 
     /**
-     * Permanently deletes the account the access token was issued for, along with its projects and members. This cannot be undone. Requires the *Manage my account* permission.
+     * Permanently deletes the account the access token was issued for, along with its projects, members and scripts. This cannot be undone. Scripts are deleted first, so if the request fails some of them may already be gone; repeat it to finish deleting the account. Requires the *Manage my account* permission. A script\'s own API key cannot delete the account.
      * Delete the current account
      */
     delete(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void>;
 
     /**
-     * Removes the identity provider of the account the access token was issued for, together with its client secret, and disables the `sso` sign-in method in the same change. Sessions signed in through the provider can no longer refresh an access token scoped to the account.  Returns `400 last-auth-option-disabled` when single sign-on is the account\'s only enabled member sign-in method, `404 oidc-provider-not-configured` when the account has no provider, and `409 auth-options-changed` when the account\'s sign-in methods or its provider changed concurrently, in which case the request may be retried. The change is written to the audit log. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`.
+     * Removes the identity provider of the account the access token was issued for, together with its client secret, and disables the `sso` sign-in method in the same change. Sessions signed in through the provider can no longer refresh an access token scoped to the account.  Returns `400 last-auth-option-disabled` when single sign-on is the account\'s only enabled member sign-in method, `404 oidc-provider-not-configured` when the account has no provider, and `409 auth-options-changed` when the account\'s sign-in methods or its provider changed concurrently, in which case the request may be retried. The change is written to the audit log. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`. A script\'s own API key cannot call it.
      * @summary Delete the current account\'s OIDC provider
      * @param {*} [options] Override http request option.
      * @throws {RequiredError}
@@ -168,7 +168,7 @@ export interface AccountsApiInterface {
     deleteOidcProviderRaw(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<void>>;
 
     /**
-     * Removes the identity provider of the account the access token was issued for, together with its client secret, and disables the `sso` sign-in method in the same change. Sessions signed in through the provider can no longer refresh an access token scoped to the account.  Returns `400 last-auth-option-disabled` when single sign-on is the account\'s only enabled member sign-in method, `404 oidc-provider-not-configured` when the account has no provider, and `409 auth-options-changed` when the account\'s sign-in methods or its provider changed concurrently, in which case the request may be retried. The change is written to the audit log. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`.
+     * Removes the identity provider of the account the access token was issued for, together with its client secret, and disables the `sso` sign-in method in the same change. Sessions signed in through the provider can no longer refresh an access token scoped to the account.  Returns `400 last-auth-option-disabled` when single sign-on is the account\'s only enabled member sign-in method, `404 oidc-provider-not-configured` when the account has no provider, and `409 auth-options-changed` when the account\'s sign-in methods or its provider changed concurrently, in which case the request may be retried. The change is written to the audit log. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`. A script\'s own API key cannot call it.
      * Delete the current account\'s OIDC provider
      */
     deleteOidcProvider(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void>;
@@ -221,7 +221,7 @@ export interface AccountsApiInterface {
     getHostname(requestParameters: AccountsApiGetHostnameRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<string>;
 
     /**
-     * Returns the identity provider members of the account the access token was issued for sign in through with single sign-on. The client secret is never returned; `clientSecretSet` reports whether one is stored.  Returns `404 oidc-provider-not-configured` when the account has no provider, and `409 sso-multiple-providers` when it has more than one. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`.
+     * Returns the identity provider members of the account the access token was issued for sign in through with single sign-on. The client secret is never returned; `clientSecretSet` reports whether one is stored.  Returns `404 oidc-provider-not-configured` when the account has no provider, and `409 sso-multiple-providers` when it has more than one. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`. A script\'s own API key cannot call it.
      * @summary Get the current account\'s OIDC provider
      * @param {*} [options] Override http request option.
      * @throws {RequiredError}
@@ -230,7 +230,7 @@ export interface AccountsApiInterface {
     getOidcProviderRaw(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<AccountOIDCProvider>>;
 
     /**
-     * Returns the identity provider members of the account the access token was issued for sign in through with single sign-on. The client secret is never returned; `clientSecretSet` reports whether one is stored.  Returns `404 oidc-provider-not-configured` when the account has no provider, and `409 sso-multiple-providers` when it has more than one. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`.
+     * Returns the identity provider members of the account the access token was issued for sign in through with single sign-on. The client secret is never returned; `clientSecretSet` reports whether one is stored.  Returns `404 oidc-provider-not-configured` when the account has no provider, and `409 sso-multiple-providers` when it has more than one. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`. A script\'s own API key cannot call it.
      * Get the current account\'s OIDC provider
      */
     getOidcProvider(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<AccountOIDCProvider>;
@@ -360,7 +360,7 @@ export interface AccountsApiInterface {
     updateAuthOptions(requestParameters: AccountsApiUpdateAuthOptionsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<Array<AccountAuthOption>>;
 
     /**
-     * Changes the identity provider members of the account the access token was issued for sign in through with single sign-on. Fields left out keep their current value; the client secret is changed with `PUT /v1/account/oidc-provider/client-secret`.  When `providerName` or `tenant` changes, the tenant must name a single organisation or the request returns `400 invalid-tenant`, and the provider\'s OpenID discovery document is fetched before anything is stored; a provider that cannot be reached returns `400 oidc-discovery-failed`. Returns `404 oidc-provider-not-configured` when the account has no provider, and `409 oidc-provider-changed` when it was changed concurrently. The change is written to the audit log. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`.
+     * Changes the identity provider members of the account the access token was issued for sign in through with single sign-on. Fields left out keep their current value; the client secret is changed with `PUT /v1/account/oidc-provider/client-secret`.  When `providerName` or `tenant` changes, the tenant must name a single organisation or the request returns `400 invalid-tenant`, and the provider\'s OpenID discovery document is fetched before anything is stored; a provider that cannot be reached returns `400 oidc-discovery-failed`. Returns `404 oidc-provider-not-configured` when the account has no provider, and `409 oidc-provider-changed` when it was changed concurrently. The change is written to the audit log. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`. A script\'s own API key cannot call it.
      * @summary Update the current account\'s OIDC provider
      * @param {AccountOIDCProviderPatch} accountOIDCProviderPatch 
      * @param {*} [options] Override http request option.
@@ -370,13 +370,13 @@ export interface AccountsApiInterface {
     updateOidcProviderRaw(requestParameters: AccountsApiUpdateOidcProviderRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<AccountOIDCProvider>>;
 
     /**
-     * Changes the identity provider members of the account the access token was issued for sign in through with single sign-on. Fields left out keep their current value; the client secret is changed with `PUT /v1/account/oidc-provider/client-secret`.  When `providerName` or `tenant` changes, the tenant must name a single organisation or the request returns `400 invalid-tenant`, and the provider\'s OpenID discovery document is fetched before anything is stored; a provider that cannot be reached returns `400 oidc-discovery-failed`. Returns `404 oidc-provider-not-configured` when the account has no provider, and `409 oidc-provider-changed` when it was changed concurrently. The change is written to the audit log. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`.
+     * Changes the identity provider members of the account the access token was issued for sign in through with single sign-on. Fields left out keep their current value; the client secret is changed with `PUT /v1/account/oidc-provider/client-secret`.  When `providerName` or `tenant` changes, the tenant must name a single organisation or the request returns `400 invalid-tenant`, and the provider\'s OpenID discovery document is fetched before anything is stored; a provider that cannot be reached returns `400 oidc-discovery-failed`. Returns `404 oidc-provider-not-configured` when the account has no provider, and `409 oidc-provider-changed` when it was changed concurrently. The change is written to the audit log. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`. A script\'s own API key cannot call it.
      * Update the current account\'s OIDC provider
      */
     updateOidcProvider(requestParameters: AccountsApiUpdateOidcProviderRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<AccountOIDCProvider>;
 
     /**
-     * Stores a new client secret for the identity provider of the account the access token was issued for. The secret is write-only: no endpoint returns it. Returns `404 oidc-provider-not-configured` when the account has no provider. The change is written to the audit log without the secret. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`.
+     * Stores a new client secret for the identity provider of the account the access token was issued for. The secret is write-only: no endpoint returns it. Returns `404 oidc-provider-not-configured` when the account has no provider. The change is written to the audit log without the secret. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`. A script\'s own API key cannot call it.
      * @summary Replace the current account\'s OIDC client secret
      * @param {AccountPutOIDCClientSecretReqBody} accountPutOIDCClientSecretReqBody 
      * @param {*} [options] Override http request option.
@@ -386,7 +386,7 @@ export interface AccountsApiInterface {
     updateOidcProviderClientSecretRaw(requestParameters: AccountsApiUpdateOidcProviderClientSecretRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<void>>;
 
     /**
-     * Stores a new client secret for the identity provider of the account the access token was issued for. The secret is write-only: no endpoint returns it. Returns `404 oidc-provider-not-configured` when the account has no provider. The change is written to the audit log without the secret. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`.
+     * Stores a new client secret for the identity provider of the account the access token was issued for. The secret is write-only: no endpoint returns it. Returns `404 oidc-provider-not-configured` when the account has no provider. The change is written to the audit log without the secret. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`. A script\'s own API key cannot call it.
      * Replace the current account\'s OIDC client secret
      */
     updateOidcProviderClientSecret(requestParameters: AccountsApiUpdateOidcProviderClientSecretRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void>;
@@ -452,7 +452,7 @@ export class AccountsApi extends runtime.BaseAPI implements AccountsApiInterface
     }
 
     /**
-     * Registers the identity provider members of the account the access token was issued for sign in through with single sign-on. An account has at most one provider; creating a second returns `409 oidc-provider-exists`. Creating a provider does not enable the `sso` sign-in method; enable it with `PATCH /v1/account/auth-options` afterwards.  The tenant must name a single organisation (Microsoft\'s `common`, `organizations` and `consumers` are rejected) or the request returns `400 invalid-tenant`. The provider\'s OpenID discovery document is fetched before anything is stored, and a provider that cannot be reached returns `400 oidc-discovery-failed`. The change is written to the audit log. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`.
+     * Registers the identity provider members of the account the access token was issued for sign in through with single sign-on. An account has at most one provider; creating a second returns `409 oidc-provider-exists`. Creating a provider does not enable the `sso` sign-in method; enable it with `PATCH /v1/account/auth-options` afterwards.  The tenant must name a single organisation (Microsoft\'s `common`, `organizations` and `consumers` are rejected) or the request returns `400 invalid-tenant`. The provider\'s OpenID discovery document is fetched before anything is stored, and a provider that cannot be reached returns `400 oidc-discovery-failed`. The change is written to the audit log. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`. A script\'s own API key cannot call it.
      * Create the current account\'s OIDC provider
      */
     async createOidcProviderRaw(requestParameters: AccountsApiCreateOidcProviderRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<AccountOIDCProvider>> {
@@ -492,7 +492,7 @@ export class AccountsApi extends runtime.BaseAPI implements AccountsApiInterface
     }
 
     /**
-     * Registers the identity provider members of the account the access token was issued for sign in through with single sign-on. An account has at most one provider; creating a second returns `409 oidc-provider-exists`. Creating a provider does not enable the `sso` sign-in method; enable it with `PATCH /v1/account/auth-options` afterwards.  The tenant must name a single organisation (Microsoft\'s `common`, `organizations` and `consumers` are rejected) or the request returns `400 invalid-tenant`. The provider\'s OpenID discovery document is fetched before anything is stored, and a provider that cannot be reached returns `400 oidc-discovery-failed`. The change is written to the audit log. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`.
+     * Registers the identity provider members of the account the access token was issued for sign in through with single sign-on. An account has at most one provider; creating a second returns `409 oidc-provider-exists`. Creating a provider does not enable the `sso` sign-in method; enable it with `PATCH /v1/account/auth-options` afterwards.  The tenant must name a single organisation (Microsoft\'s `common`, `organizations` and `consumers` are rejected) or the request returns `400 invalid-tenant`. The provider\'s OpenID discovery document is fetched before anything is stored, and a provider that cannot be reached returns `400 oidc-discovery-failed`. The change is written to the audit log. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`. A script\'s own API key cannot call it.
      * Create the current account\'s OIDC provider
      */
     async createOidcProvider(requestParameters: AccountsApiCreateOidcProviderRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<AccountOIDCProvider> {
@@ -501,7 +501,7 @@ export class AccountsApi extends runtime.BaseAPI implements AccountsApiInterface
     }
 
     /**
-     * Permanently deletes the account the access token was issued for, along with its projects and members. This cannot be undone. Requires the *Manage my account* permission.
+     * Permanently deletes the account the access token was issued for, along with its projects, members and scripts. This cannot be undone. Scripts are deleted first, so if the request fails some of them may already be gone; repeat it to finish deleting the account. Requires the *Manage my account* permission. A script\'s own API key cannot delete the account.
      * Delete the current account
      */
     async deleteRaw(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<void>> {
@@ -531,7 +531,7 @@ export class AccountsApi extends runtime.BaseAPI implements AccountsApiInterface
     }
 
     /**
-     * Permanently deletes the account the access token was issued for, along with its projects and members. This cannot be undone. Requires the *Manage my account* permission.
+     * Permanently deletes the account the access token was issued for, along with its projects, members and scripts. This cannot be undone. Scripts are deleted first, so if the request fails some of them may already be gone; repeat it to finish deleting the account. Requires the *Manage my account* permission. A script\'s own API key cannot delete the account.
      * Delete the current account
      */
     async delete(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void> {
@@ -539,7 +539,7 @@ export class AccountsApi extends runtime.BaseAPI implements AccountsApiInterface
     }
 
     /**
-     * Removes the identity provider of the account the access token was issued for, together with its client secret, and disables the `sso` sign-in method in the same change. Sessions signed in through the provider can no longer refresh an access token scoped to the account.  Returns `400 last-auth-option-disabled` when single sign-on is the account\'s only enabled member sign-in method, `404 oidc-provider-not-configured` when the account has no provider, and `409 auth-options-changed` when the account\'s sign-in methods or its provider changed concurrently, in which case the request may be retried. The change is written to the audit log. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`.
+     * Removes the identity provider of the account the access token was issued for, together with its client secret, and disables the `sso` sign-in method in the same change. Sessions signed in through the provider can no longer refresh an access token scoped to the account.  Returns `400 last-auth-option-disabled` when single sign-on is the account\'s only enabled member sign-in method, `404 oidc-provider-not-configured` when the account has no provider, and `409 auth-options-changed` when the account\'s sign-in methods or its provider changed concurrently, in which case the request may be retried. The change is written to the audit log. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`. A script\'s own API key cannot call it.
      * Delete the current account\'s OIDC provider
      */
     async deleteOidcProviderRaw(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<void>> {
@@ -569,7 +569,7 @@ export class AccountsApi extends runtime.BaseAPI implements AccountsApiInterface
     }
 
     /**
-     * Removes the identity provider of the account the access token was issued for, together with its client secret, and disables the `sso` sign-in method in the same change. Sessions signed in through the provider can no longer refresh an access token scoped to the account.  Returns `400 last-auth-option-disabled` when single sign-on is the account\'s only enabled member sign-in method, `404 oidc-provider-not-configured` when the account has no provider, and `409 auth-options-changed` when the account\'s sign-in methods or its provider changed concurrently, in which case the request may be retried. The change is written to the audit log. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`.
+     * Removes the identity provider of the account the access token was issued for, together with its client secret, and disables the `sso` sign-in method in the same change. Sessions signed in through the provider can no longer refresh an access token scoped to the account.  Returns `400 last-auth-option-disabled` when single sign-on is the account\'s only enabled member sign-in method, `404 oidc-provider-not-configured` when the account has no provider, and `409 auth-options-changed` when the account\'s sign-in methods or its provider changed concurrently, in which case the request may be retried. The change is written to the audit log. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`. A script\'s own API key cannot call it.
      * Delete the current account\'s OIDC provider
      */
     async deleteOidcProvider(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void> {
@@ -698,7 +698,7 @@ export class AccountsApi extends runtime.BaseAPI implements AccountsApiInterface
     }
 
     /**
-     * Returns the identity provider members of the account the access token was issued for sign in through with single sign-on. The client secret is never returned; `clientSecretSet` reports whether one is stored.  Returns `404 oidc-provider-not-configured` when the account has no provider, and `409 sso-multiple-providers` when it has more than one. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`.
+     * Returns the identity provider members of the account the access token was issued for sign in through with single sign-on. The client secret is never returned; `clientSecretSet` reports whether one is stored.  Returns `404 oidc-provider-not-configured` when the account has no provider, and `409 sso-multiple-providers` when it has more than one. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`. A script\'s own API key cannot call it.
      * Get the current account\'s OIDC provider
      */
     async getOidcProviderRaw(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<AccountOIDCProvider>> {
@@ -728,7 +728,7 @@ export class AccountsApi extends runtime.BaseAPI implements AccountsApiInterface
     }
 
     /**
-     * Returns the identity provider members of the account the access token was issued for sign in through with single sign-on. The client secret is never returned; `clientSecretSet` reports whether one is stored.  Returns `404 oidc-provider-not-configured` when the account has no provider, and `409 sso-multiple-providers` when it has more than one. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`.
+     * Returns the identity provider members of the account the access token was issued for sign in through with single sign-on. The client secret is never returned; `clientSecretSet` reports whether one is stored.  Returns `404 oidc-provider-not-configured` when the account has no provider, and `409 sso-multiple-providers` when it has more than one. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`. A script\'s own API key cannot call it.
      * Get the current account\'s OIDC provider
      */
     async getOidcProvider(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<AccountOIDCProvider> {
@@ -1079,7 +1079,7 @@ export class AccountsApi extends runtime.BaseAPI implements AccountsApiInterface
     }
 
     /**
-     * Changes the identity provider members of the account the access token was issued for sign in through with single sign-on. Fields left out keep their current value; the client secret is changed with `PUT /v1/account/oidc-provider/client-secret`.  When `providerName` or `tenant` changes, the tenant must name a single organisation or the request returns `400 invalid-tenant`, and the provider\'s OpenID discovery document is fetched before anything is stored; a provider that cannot be reached returns `400 oidc-discovery-failed`. Returns `404 oidc-provider-not-configured` when the account has no provider, and `409 oidc-provider-changed` when it was changed concurrently. The change is written to the audit log. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`.
+     * Changes the identity provider members of the account the access token was issued for sign in through with single sign-on. Fields left out keep their current value; the client secret is changed with `PUT /v1/account/oidc-provider/client-secret`.  When `providerName` or `tenant` changes, the tenant must name a single organisation or the request returns `400 invalid-tenant`, and the provider\'s OpenID discovery document is fetched before anything is stored; a provider that cannot be reached returns `400 oidc-discovery-failed`. Returns `404 oidc-provider-not-configured` when the account has no provider, and `409 oidc-provider-changed` when it was changed concurrently. The change is written to the audit log. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`. A script\'s own API key cannot call it.
      * Update the current account\'s OIDC provider
      */
     async updateOidcProviderRaw(requestParameters: AccountsApiUpdateOidcProviderRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<AccountOIDCProvider>> {
@@ -1119,7 +1119,7 @@ export class AccountsApi extends runtime.BaseAPI implements AccountsApiInterface
     }
 
     /**
-     * Changes the identity provider members of the account the access token was issued for sign in through with single sign-on. Fields left out keep their current value; the client secret is changed with `PUT /v1/account/oidc-provider/client-secret`.  When `providerName` or `tenant` changes, the tenant must name a single organisation or the request returns `400 invalid-tenant`, and the provider\'s OpenID discovery document is fetched before anything is stored; a provider that cannot be reached returns `400 oidc-discovery-failed`. Returns `404 oidc-provider-not-configured` when the account has no provider, and `409 oidc-provider-changed` when it was changed concurrently. The change is written to the audit log. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`.
+     * Changes the identity provider members of the account the access token was issued for sign in through with single sign-on. Fields left out keep their current value; the client secret is changed with `PUT /v1/account/oidc-provider/client-secret`.  When `providerName` or `tenant` changes, the tenant must name a single organisation or the request returns `400 invalid-tenant`, and the provider\'s OpenID discovery document is fetched before anything is stored; a provider that cannot be reached returns `400 oidc-discovery-failed`. Returns `404 oidc-provider-not-configured` when the account has no provider, and `409 oidc-provider-changed` when it was changed concurrently. The change is written to the audit log. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`. A script\'s own API key cannot call it.
      * Update the current account\'s OIDC provider
      */
     async updateOidcProvider(requestParameters: AccountsApiUpdateOidcProviderRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<AccountOIDCProvider> {
@@ -1128,7 +1128,7 @@ export class AccountsApi extends runtime.BaseAPI implements AccountsApiInterface
     }
 
     /**
-     * Stores a new client secret for the identity provider of the account the access token was issued for. The secret is write-only: no endpoint returns it. Returns `404 oidc-provider-not-configured` when the account has no provider. The change is written to the audit log without the secret. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`.
+     * Stores a new client secret for the identity provider of the account the access token was issued for. The secret is write-only: no endpoint returns it. Returns `404 oidc-provider-not-configured` when the account has no provider. The change is written to the audit log without the secret. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`. A script\'s own API key cannot call it.
      * Replace the current account\'s OIDC client secret
      */
     async updateOidcProviderClientSecretRaw(requestParameters: AccountsApiUpdateOidcProviderClientSecretRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<void>> {
@@ -1168,7 +1168,7 @@ export class AccountsApi extends runtime.BaseAPI implements AccountsApiInterface
     }
 
     /**
-     * Stores a new client secret for the identity provider of the account the access token was issued for. The secret is write-only: no endpoint returns it. Returns `404 oidc-provider-not-configured` when the account has no provider. The change is written to the audit log without the secret. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`.
+     * Stores a new client secret for the identity provider of the account the access token was issued for. The secret is write-only: no endpoint returns it. Returns `404 oidc-provider-not-configured` when the account has no provider. The change is written to the audit log without the secret. Requires the *Manage my account* permission. The account owning the centrally managed shared provider gets `403 shared-sso-provider`. A script\'s own API key cannot call it.
      * Replace the current account\'s OIDC client secret
      */
     async updateOidcProviderClientSecret(requestParameters: AccountsApiUpdateOidcProviderClientSecretRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void> {

package/src/apis/AuditLogApi.ts

@@ -44,7 +44,7 @@ export interface AuditLogApiInterface {
     /**
      * Returns a paginated list of audit-log entries for the account. Specify `entity` to restrict to a single entity type, or pass `entity=all` to retrieve changes across every type the caller has permission to see.  Use `nextCursor` from the response as the `cursor` query parameter to fetch the next page.
      * @summary Query the audit log
-     * @param {string} [entity] Entity type to query. One of: dashboard, property, scenario, floorplan, space-ruleset, top-down-model, object-group, datacollection, contribution, i18n, user, file, variable, upload-quarantine. Pass \"all\" to retrieve entries across all entity types the caller has permission to see (entityId must be omitted).
+     * @param {string} [entity] Entity type to query. One of: dashboard, property, scenario, floorplan, space-ruleset, top-down-model, object-group, datacollection, contribution, i18n, user, file, variable, script, upload-quarantine. Pass \"all\" to retrieve entries across all entity types the caller has permission to see (entityId must be omitted).
      * @param {string} [entityId] Restrict results to changes made to this specific entity. Cannot be used when entity=all.
      * @param {Date} [from] Return only entries at or after this timestamp (RFC 3339). Omit for no lower bound.
      * @param {Date} [to] Return only entries at or before this timestamp (RFC 3339). Omit for no upper bound.

package/src/apis/AuthenticationApi.ts

@@ -127,7 +127,7 @@ export interface AuthenticationApiUpdateAuthPasswordRequest {
  */
 export interface AuthenticationApiInterface {
     /**
-     * Issues a long-lived key for programmatic access, scoped to the calling user and the given project. The secret is returned in the `key` field of this response and never again, since only its hash is stored; a client that loses it must create a replacement. Keys expire after `expiresInDays`, between 1 and 90.
+     * Issues a long-lived key for programmatic access, scoped to the calling user and the given project. The secret is returned in the `key` field of this response and never again, since only its hash is stored; a client that loses it must create a replacement. Keys expire after `expiresInDays`, between 1 and 90. A script\'s own API key cannot create or delete keys.
      * @summary Create an API key
      * @param {ApiKeyPostReqBody} apiKeyPostReqBody 
      * @param {*} [options] Override http request option.
@@ -137,7 +137,7 @@ export interface AuthenticationApiInterface {
     createApiKeysRaw(requestParameters: AuthenticationApiCreateApiKeysRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<ApiKeyPostResBody>>;
 
     /**
-     * Issues a long-lived key for programmatic access, scoped to the calling user and the given project. The secret is returned in the `key` field of this response and never again, since only its hash is stored; a client that loses it must create a replacement. Keys expire after `expiresInDays`, between 1 and 90.
+     * Issues a long-lived key for programmatic access, scoped to the calling user and the given project. The secret is returned in the `key` field of this response and never again, since only its hash is stored; a client that loses it must create a replacement. Keys expire after `expiresInDays`, between 1 and 90. A script\'s own API key cannot create or delete keys.
      * Create an API key
      */
     createApiKeys(requestParameters: AuthenticationApiCreateApiKeysRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<ApiKeyPostResBody>;
@@ -274,7 +274,7 @@ export interface AuthenticationApiInterface {
     createAuthSendToken(requestParameters: AuthenticationApiCreateAuthSendTokenRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void>;
 
     /**
-     * Permanently revokes one of the calling user\'s keys. Access tokens already exchanged for it remain valid until they expire, and the key itself may continue to authenticate for up to a minute while cached resolutions age out.
+     * Permanently revokes one of the calling user\'s keys. Access tokens already exchanged for it remain valid until they expire, and the key itself may continue to authenticate for up to a minute while cached resolutions age out. Keys that belong to a script are rejected with 409; delete or re-authorise the script instead.
      * @summary Revoke an API key
      * @param {number} id 
      * @param {*} [options] Override http request option.
@@ -284,7 +284,7 @@ export interface AuthenticationApiInterface {
     deleteApiKeysRaw(requestParameters: AuthenticationApiDeleteApiKeysRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<void>>;
 
     /**
-     * Permanently revokes one of the calling user\'s keys. Access tokens already exchanged for it remain valid until they expire, and the key itself may continue to authenticate for up to a minute while cached resolutions age out.
+     * Permanently revokes one of the calling user\'s keys. Access tokens already exchanged for it remain valid until they expire, and the key itself may continue to authenticate for up to a minute while cached resolutions age out. Keys that belong to a script are rejected with 409; delete or re-authorise the script instead.
      * Revoke an API key
      */
     deleteApiKeys(requestParameters: AuthenticationApiDeleteApiKeysRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void>;
@@ -345,7 +345,7 @@ export interface AuthenticationApiInterface {
 export class AuthenticationApi extends runtime.BaseAPI implements AuthenticationApiInterface {
 
     /**
-     * Issues a long-lived key for programmatic access, scoped to the calling user and the given project. The secret is returned in the `key` field of this response and never again, since only its hash is stored; a client that loses it must create a replacement. Keys expire after `expiresInDays`, between 1 and 90.
+     * Issues a long-lived key for programmatic access, scoped to the calling user and the given project. The secret is returned in the `key` field of this response and never again, since only its hash is stored; a client that loses it must create a replacement. Keys expire after `expiresInDays`, between 1 and 90. A script\'s own API key cannot create or delete keys.
      * Create an API key
      */
     async createApiKeysRaw(requestParameters: AuthenticationApiCreateApiKeysRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<ApiKeyPostResBody>> {
@@ -385,7 +385,7 @@ export class AuthenticationApi extends runtime.BaseAPI implements Authentication
     }
 
     /**
-     * Issues a long-lived key for programmatic access, scoped to the calling user and the given project. The secret is returned in the `key` field of this response and never again, since only its hash is stored; a client that loses it must create a replacement. Keys expire after `expiresInDays`, between 1 and 90.
+     * Issues a long-lived key for programmatic access, scoped to the calling user and the given project. The secret is returned in the `key` field of this response and never again, since only its hash is stored; a client that loses it must create a replacement. Keys expire after `expiresInDays`, between 1 and 90. A script\'s own API key cannot create or delete keys.
      * Create an API key
      */
     async createApiKeys(requestParameters: AuthenticationApiCreateApiKeysRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<ApiKeyPostResBody> {
@@ -709,7 +709,7 @@ export class AuthenticationApi extends runtime.BaseAPI implements Authentication
     }
 
     /**
-     * Permanently revokes one of the calling user\'s keys. Access tokens already exchanged for it remain valid until they expire, and the key itself may continue to authenticate for up to a minute while cached resolutions age out.
+     * Permanently revokes one of the calling user\'s keys. Access tokens already exchanged for it remain valid until they expire, and the key itself may continue to authenticate for up to a minute while cached resolutions age out. Keys that belong to a script are rejected with 409; delete or re-authorise the script instead.
      * Revoke an API key
      */
     async deleteApiKeysRaw(requestParameters: AuthenticationApiDeleteApiKeysRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<void>> {
@@ -747,7 +747,7 @@ export class AuthenticationApi extends runtime.BaseAPI implements Authentication
     }
 
     /**
-     * Permanently revokes one of the calling user\'s keys. Access tokens already exchanged for it remain valid until they expire, and the key itself may continue to authenticate for up to a minute while cached resolutions age out.
+     * Permanently revokes one of the calling user\'s keys. Access tokens already exchanged for it remain valid until they expire, and the key itself may continue to authenticate for up to a minute while cached resolutions age out. Keys that belong to a script are rejected with 409; delete or re-authorise the script instead.
      * Revoke an API key
      */
     async deleteApiKeys(requestParameters: AuthenticationApiDeleteApiKeysRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void> {