kb-cloud-client-typescript 2.4.0-alpha.89 → 2.4.0-alpha.90

package/dist/adminapi/apis/account-api.d.ts

@@ -25,6 +25,11 @@ import type { MilvusRole } from '../models';
 import type { MilvusRoleCreateRequest } from '../models';
 import type { MilvusRoleList } from '../models';
 import type { MilvusRoleRequest } from '../models';
+import type { ObjectPrivilegeCapabilities } from '../models';
+import type { ObjectPrivilegeChange } from '../models';
+import type { ObjectPrivilegeObjectList } from '../models';
+import type { ObjectPrivilegeSnapshot } from '../models';
+import type { ObjectPrivilegeSubjectType } from '../models';
 import type { PrivilegeListItem } from '../models';
 import type { RbmqAccountRequest } from '../models';
 import type { RbmqAccountsList } from '../models';
@@ -46,6 +51,21 @@ export declare const AccountApiAxiosParamCreator: (configuration?: Configuration
      * @throws {RequiredError}
      */
     bindSeaweedFSPolicies: (orgName: string, clusterName: string, accountName: string, bindSeaweedFSPoliciesRequest: BindSeaweedFSPoliciesRequest, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
+    /**
+     * Native object GRANT/REVOKE alongside presets. Consult capabilities for engine/version-specific object types and privileges. PostgreSQL RESTRICT is the default; MySQL static GRANT OPTION is scope-wide.
+     * @summary Grant or revoke native object and column privileges
+     * @param {string} engineName
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {string} accountName
+     * @param {ObjectPrivilegeChange} body
+     * @param {ObjectPrivilegeSubjectType} [subjectType] Native subject kind; path account name identifies the subject.
+     * @param {string} [host] Deprecated MySQL host alias. Prefer subjectQualifiers. Do not specify host in both.
+     * @param {string} [subjectQualifiers] JSON object of string identity qualifiers, e.g. {\&quot;host\&quot;:\&quot;%\&quot;}. Allowed keys and defaults come from capabilities. Unknown keys or duplicate identity inputs are rejected.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    changeAccountObjectPrivileges: (engineName: string, orgName: string, clusterName: string, accountName: string, body: ObjectPrivilegeChange, subjectType?: ObjectPrivilegeSubjectType, host?: string, subjectQualifiers?: string, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
     /**
      * create an account in cluster
      * @summary Create cluster account
@@ -252,6 +272,37 @@ export declare const AccountApiAxiosParamCreator: (configuration?: Configuration
      * @throws {RequiredError}
      */
     deleteServiceAccount: (engineName: string, orgName: string, clusterName: string, accessKey: string, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
+    /**
+     * Native object GRANT/REVOKE alongside presets. Consult capabilities for engine/version-specific object types and privileges. PostgreSQL RESTRICT is the default; MySQL static GRANT OPTION is scope-wide.
+     * @summary List native object privilege capabilities for the connected server
+     * @param {string} engineName
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {string} accountName
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    getAccountObjectPrivilegeCapabilities: (engineName: string, orgName: string, clusterName: string, accountName: string, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
+    /**
+     * Native object GRANT/REVOKE alongside presets. Consult capabilities for engine/version-specific object types and privileges. PostgreSQL RESTRICT is the default; MySQL static GRANT OPTION is scope-wide.
+     * @summary Inspect native object and column privileges
+     * @param {string} engineName
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {string} accountName
+     * @param {string} objectType
+     * @param {string} [databaseName]
+     * @param {string} [schemaName]
+     * @param {string} [objectName]
+     * @param {string} [objectId]
+     * @param {ObjectPrivilegeSubjectType} [subjectType] Native subject kind; path account name identifies the subject.
+     * @param {string} [host] Deprecated MySQL host alias. Prefer subjectQualifiers. Do not specify host in both.
+     * @param {string} [catalogName]
+     * @param {string} [subjectQualifiers] JSON object of string identity qualifiers, e.g. {\&quot;host\&quot;:\&quot;%\&quot;}. Allowed keys and defaults come from capabilities. Unknown keys or duplicate identity inputs are rejected.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    getAccountObjectPrivileges: (engineName: string, orgName: string, clusterName: string, accountName: string, objectType: string, databaseName?: string, schemaName?: string, objectName?: string, objectId?: string, subjectType?: ObjectPrivilegeSubjectType, host?: string, catalogName?: string, subjectQualifiers?: string, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
     /**
      * Get Hive accounts
      * @summary Get Hive accounts
@@ -305,6 +356,23 @@ export declare const AccountApiAxiosParamCreator: (configuration?: Configuration
      * @throws {RequiredError}
      */
     getServiceAccount: (engineName: string, orgName: string, clusterName: string, accessKey: string, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
+    /**
+     * Lists existing objects of one supported kind. Pagination is not a fixed snapshot. PostgreSQL requires a connection database; schema-contained kinds require schemaName. MySQL global/database listing omits databaseName; other kinds require it.
+     * @summary Discover existing native privilege objects with stable routine identities
+     * @param {string} engineName
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {string} accountName
+     * @param {string} objectType
+     * @param {string} [databaseName]
+     * @param {string} [schemaName]
+     * @param {number} [offset]
+     * @param {number} [limit]
+     * @param {string} [catalogName]
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    listAccountObjectPrivilegeObjects: (engineName: string, orgName: string, clusterName: string, accountName: string, objectType: string, databaseName?: string, schemaName?: string, offset?: number, limit?: number, catalogName?: string, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
     /**
      * list accounts in cluster
      * @summary List cluster accounts
@@ -577,6 +645,21 @@ export declare const AccountApiFp: (configuration?: Configuration) => {
      * @throws {RequiredError}
      */
     bindSeaweedFSPolicies(orgName: string, clusterName: string, accountName: string, bindSeaweedFSPoliciesRequest: BindSeaweedFSPoliciesRequest, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<void>>;
+    /**
+     * Native object GRANT/REVOKE alongside presets. Consult capabilities for engine/version-specific object types and privileges. PostgreSQL RESTRICT is the default; MySQL static GRANT OPTION is scope-wide.
+     * @summary Grant or revoke native object and column privileges
+     * @param {string} engineName
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {string} accountName
+     * @param {ObjectPrivilegeChange} body
+     * @param {ObjectPrivilegeSubjectType} [subjectType] Native subject kind; path account name identifies the subject.
+     * @param {string} [host] Deprecated MySQL host alias. Prefer subjectQualifiers. Do not specify host in both.
+     * @param {string} [subjectQualifiers] JSON object of string identity qualifiers, e.g. {\&quot;host\&quot;:\&quot;%\&quot;}. Allowed keys and defaults come from capabilities. Unknown keys or duplicate identity inputs are rejected.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    changeAccountObjectPrivileges(engineName: string, orgName: string, clusterName: string, accountName: string, body: ObjectPrivilegeChange, subjectType?: ObjectPrivilegeSubjectType, host?: string, subjectQualifiers?: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<void>>;
     /**
      * create an account in cluster
      * @summary Create cluster account
@@ -783,6 +866,37 @@ export declare const AccountApiFp: (configuration?: Configuration) => {
      * @throws {RequiredError}
      */
     deleteServiceAccount(engineName: string, orgName: string, clusterName: string, accessKey: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<void>>;
+    /**
+     * Native object GRANT/REVOKE alongside presets. Consult capabilities for engine/version-specific object types and privileges. PostgreSQL RESTRICT is the default; MySQL static GRANT OPTION is scope-wide.
+     * @summary List native object privilege capabilities for the connected server
+     * @param {string} engineName
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {string} accountName
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    getAccountObjectPrivilegeCapabilities(engineName: string, orgName: string, clusterName: string, accountName: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<ObjectPrivilegeCapabilities>>;
+    /**
+     * Native object GRANT/REVOKE alongside presets. Consult capabilities for engine/version-specific object types and privileges. PostgreSQL RESTRICT is the default; MySQL static GRANT OPTION is scope-wide.
+     * @summary Inspect native object and column privileges
+     * @param {string} engineName
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {string} accountName
+     * @param {string} objectType
+     * @param {string} [databaseName]
+     * @param {string} [schemaName]
+     * @param {string} [objectName]
+     * @param {string} [objectId]
+     * @param {ObjectPrivilegeSubjectType} [subjectType] Native subject kind; path account name identifies the subject.
+     * @param {string} [host] Deprecated MySQL host alias. Prefer subjectQualifiers. Do not specify host in both.
+     * @param {string} [catalogName]
+     * @param {string} [subjectQualifiers] JSON object of string identity qualifiers, e.g. {\&quot;host\&quot;:\&quot;%\&quot;}. Allowed keys and defaults come from capabilities. Unknown keys or duplicate identity inputs are rejected.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    getAccountObjectPrivileges(engineName: string, orgName: string, clusterName: string, accountName: string, objectType: string, databaseName?: string, schemaName?: string, objectName?: string, objectId?: string, subjectType?: ObjectPrivilegeSubjectType, host?: string, catalogName?: string, subjectQualifiers?: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<ObjectPrivilegeSnapshot>>;
     /**
      * Get Hive accounts
      * @summary Get Hive accounts
@@ -836,6 +950,23 @@ export declare const AccountApiFp: (configuration?: Configuration) => {
      * @throws {RequiredError}
      */
     getServiceAccount(engineName: string, orgName: string, clusterName: string, accessKey: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<DmsServiceAccount>>;
+    /**
+     * Lists existing objects of one supported kind. Pagination is not a fixed snapshot. PostgreSQL requires a connection database; schema-contained kinds require schemaName. MySQL global/database listing omits databaseName; other kinds require it.
+     * @summary Discover existing native privilege objects with stable routine identities
+     * @param {string} engineName
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {string} accountName
+     * @param {string} objectType
+     * @param {string} [databaseName]
+     * @param {string} [schemaName]
+     * @param {number} [offset]
+     * @param {number} [limit]
+     * @param {string} [catalogName]
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    listAccountObjectPrivilegeObjects(engineName: string, orgName: string, clusterName: string, accountName: string, objectType: string, databaseName?: string, schemaName?: string, offset?: number, limit?: number, catalogName?: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<ObjectPrivilegeObjectList>>;
     /**
      * list accounts in cluster
      * @summary List cluster accounts
@@ -1105,6 +1236,14 @@ export declare const AccountApiFactory: (configuration?: Configuration, basePath
      * @throws {RequiredError}
      */
     bindSeaweedFSPolicies(requestParameters: AccountApiBindSeaweedFSPoliciesRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+    /**
+     * Native object GRANT/REVOKE alongside presets. Consult capabilities for engine/version-specific object types and privileges. PostgreSQL RESTRICT is the default; MySQL static GRANT OPTION is scope-wide.
+     * @summary Grant or revoke native object and column privileges
+     * @param {AccountApiChangeAccountObjectPrivilegesRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    changeAccountObjectPrivileges(requestParameters: AccountApiChangeAccountObjectPrivilegesRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
     /**
      * create an account in cluster
      * @summary Create cluster account
@@ -1265,6 +1404,22 @@ export declare const AccountApiFactory: (configuration?: Configuration, basePath
      * @throws {RequiredError}
      */
     deleteServiceAccount(requestParameters: AccountApiDeleteServiceAccountRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+    /**
+     * Native object GRANT/REVOKE alongside presets. Consult capabilities for engine/version-specific object types and privileges. PostgreSQL RESTRICT is the default; MySQL static GRANT OPTION is scope-wide.
+     * @summary List native object privilege capabilities for the connected server
+     * @param {AccountApiGetAccountObjectPrivilegeCapabilitiesRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    getAccountObjectPrivilegeCapabilities(requestParameters: AccountApiGetAccountObjectPrivilegeCapabilitiesRequest, options?: RawAxiosRequestConfig): AxiosPromise<ObjectPrivilegeCapabilities>;
+    /**
+     * Native object GRANT/REVOKE alongside presets. Consult capabilities for engine/version-specific object types and privileges. PostgreSQL RESTRICT is the default; MySQL static GRANT OPTION is scope-wide.
+     * @summary Inspect native object and column privileges
+     * @param {AccountApiGetAccountObjectPrivilegesRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    getAccountObjectPrivileges(requestParameters: AccountApiGetAccountObjectPrivilegesRequest, options?: RawAxiosRequestConfig): AxiosPromise<ObjectPrivilegeSnapshot>;
     /**
      * Get Hive accounts
      * @summary Get Hive accounts
@@ -1305,6 +1460,14 @@ export declare const AccountApiFactory: (configuration?: Configuration, basePath
      * @throws {RequiredError}
      */
     getServiceAccount(requestParameters: AccountApiGetServiceAccountRequest, options?: RawAxiosRequestConfig): AxiosPromise<DmsServiceAccount>;
+    /**
+     * Lists existing objects of one supported kind. Pagination is not a fixed snapshot. PostgreSQL requires a connection database; schema-contained kinds require schemaName. MySQL global/database listing omits databaseName; other kinds require it.
+     * @summary Discover existing native privilege objects with stable routine identities
+     * @param {AccountApiListAccountObjectPrivilegeObjectsRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    listAccountObjectPrivilegeObjects(requestParameters: AccountApiListAccountObjectPrivilegeObjectsRequest, options?: RawAxiosRequestConfig): AxiosPromise<ObjectPrivilegeObjectList>;
     /**
      * list accounts in cluster
      * @summary List cluster accounts
@@ -1513,6 +1676,15 @@ export interface AccountApiInterface {
      * @memberof AccountApiInterface
      */
     bindSeaweedFSPolicies(requestParameters: AccountApiBindSeaweedFSPoliciesRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+    /**
+     * Native object GRANT/REVOKE alongside presets. Consult capabilities for engine/version-specific object types and privileges. PostgreSQL RESTRICT is the default; MySQL static GRANT OPTION is scope-wide.
+     * @summary Grant or revoke native object and column privileges
+     * @param {AccountApiChangeAccountObjectPrivilegesRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApiInterface
+     */
+    changeAccountObjectPrivileges(requestParameters: AccountApiChangeAccountObjectPrivilegesRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
     /**
      * create an account in cluster
      * @summary Create cluster account
@@ -1693,6 +1865,24 @@ export interface AccountApiInterface {
      * @memberof AccountApiInterface
      */
     deleteServiceAccount(requestParameters: AccountApiDeleteServiceAccountRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+    /**
+     * Native object GRANT/REVOKE alongside presets. Consult capabilities for engine/version-specific object types and privileges. PostgreSQL RESTRICT is the default; MySQL static GRANT OPTION is scope-wide.
+     * @summary List native object privilege capabilities for the connected server
+     * @param {AccountApiGetAccountObjectPrivilegeCapabilitiesRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApiInterface
+     */
+    getAccountObjectPrivilegeCapabilities(requestParameters: AccountApiGetAccountObjectPrivilegeCapabilitiesRequest, options?: RawAxiosRequestConfig): AxiosPromise<ObjectPrivilegeCapabilities>;
+    /**
+     * Native object GRANT/REVOKE alongside presets. Consult capabilities for engine/version-specific object types and privileges. PostgreSQL RESTRICT is the default; MySQL static GRANT OPTION is scope-wide.
+     * @summary Inspect native object and column privileges
+     * @param {AccountApiGetAccountObjectPrivilegesRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApiInterface
+     */
+    getAccountObjectPrivileges(requestParameters: AccountApiGetAccountObjectPrivilegesRequest, options?: RawAxiosRequestConfig): AxiosPromise<ObjectPrivilegeSnapshot>;
     /**
      * Get Hive accounts
      * @summary Get Hive accounts
@@ -1738,6 +1928,15 @@ export interface AccountApiInterface {
      * @memberof AccountApiInterface
      */
     getServiceAccount(requestParameters: AccountApiGetServiceAccountRequest, options?: RawAxiosRequestConfig): AxiosPromise<DmsServiceAccount>;
+    /**
+     * Lists existing objects of one supported kind. Pagination is not a fixed snapshot. PostgreSQL requires a connection database; schema-contained kinds require schemaName. MySQL global/database listing omits databaseName; other kinds require it.
+     * @summary Discover existing native privilege objects with stable routine identities
+     * @param {AccountApiListAccountObjectPrivilegeObjectsRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApiInterface
+     */
+    listAccountObjectPrivilegeObjects(requestParameters: AccountApiListAccountObjectPrivilegeObjectsRequest, options?: RawAxiosRequestConfig): AxiosPromise<ObjectPrivilegeObjectList>;
     /**
      * list accounts in cluster
      * @summary List cluster accounts
@@ -1986,6 +2185,61 @@ export interface AccountApiBindSeaweedFSPoliciesRequest {
      */
     readonly bindSeaweedFSPoliciesRequest: BindSeaweedFSPoliciesRequest;
 }
+/**
+ * Request parameters for changeAccountObjectPrivileges operation in AccountApi.
+ * @export
+ * @interface AccountApiChangeAccountObjectPrivilegesRequest
+ */
+export interface AccountApiChangeAccountObjectPrivilegesRequest {
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiChangeAccountObjectPrivileges
+     */
+    readonly engineName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiChangeAccountObjectPrivileges
+     */
+    readonly orgName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiChangeAccountObjectPrivileges
+     */
+    readonly clusterName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiChangeAccountObjectPrivileges
+     */
+    readonly accountName: string;
+    /**
+     *
+     * @type {ObjectPrivilegeChange}
+     * @memberof AccountApiChangeAccountObjectPrivileges
+     */
+    readonly body: ObjectPrivilegeChange;
+    /**
+     * Native subject kind; path account name identifies the subject.
+     * @type {ObjectPrivilegeSubjectType}
+     * @memberof AccountApiChangeAccountObjectPrivileges
+     */
+    readonly subjectType?: ObjectPrivilegeSubjectType;
+    /**
+     * Deprecated MySQL host alias. Prefer subjectQualifiers. Do not specify host in both.
+     * @type {string}
+     * @memberof AccountApiChangeAccountObjectPrivileges
+     */
+    readonly host?: string;
+    /**
+     * JSON object of string identity qualifiers, e.g. {\&quot;host\&quot;:\&quot;%\&quot;}. Allowed keys and defaults come from capabilities. Unknown keys or duplicate identity inputs are rejected.
+     * @type {string}
+     * @memberof AccountApiChangeAccountObjectPrivileges
+     */
+    readonly subjectQualifiers?: string;
+}
 /**
  * Request parameters for createAccount operation in AccountApi.
  * @export
@@ -2522,6 +2776,122 @@ export interface AccountApiDeleteServiceAccountRequest {
      */
     readonly accessKey: string;
 }
+/**
+ * Request parameters for getAccountObjectPrivilegeCapabilities operation in AccountApi.
+ * @export
+ * @interface AccountApiGetAccountObjectPrivilegeCapabilitiesRequest
+ */
+export interface AccountApiGetAccountObjectPrivilegeCapabilitiesRequest {
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiGetAccountObjectPrivilegeCapabilities
+     */
+    readonly engineName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiGetAccountObjectPrivilegeCapabilities
+     */
+    readonly orgName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiGetAccountObjectPrivilegeCapabilities
+     */
+    readonly clusterName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiGetAccountObjectPrivilegeCapabilities
+     */
+    readonly accountName: string;
+}
+/**
+ * Request parameters for getAccountObjectPrivileges operation in AccountApi.
+ * @export
+ * @interface AccountApiGetAccountObjectPrivilegesRequest
+ */
+export interface AccountApiGetAccountObjectPrivilegesRequest {
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiGetAccountObjectPrivileges
+     */
+    readonly engineName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiGetAccountObjectPrivileges
+     */
+    readonly orgName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiGetAccountObjectPrivileges
+     */
+    readonly clusterName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiGetAccountObjectPrivileges
+     */
+    readonly accountName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiGetAccountObjectPrivileges
+     */
+    readonly objectType: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiGetAccountObjectPrivileges
+     */
+    readonly databaseName?: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiGetAccountObjectPrivileges
+     */
+    readonly schemaName?: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiGetAccountObjectPrivileges
+     */
+    readonly objectName?: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiGetAccountObjectPrivileges
+     */
+    readonly objectId?: string;
+    /**
+     * Native subject kind; path account name identifies the subject.
+     * @type {ObjectPrivilegeSubjectType}
+     * @memberof AccountApiGetAccountObjectPrivileges
+     */
+    readonly subjectType?: ObjectPrivilegeSubjectType;
+    /**
+     * Deprecated MySQL host alias. Prefer subjectQualifiers. Do not specify host in both.
+     * @type {string}
+     * @memberof AccountApiGetAccountObjectPrivileges
+     */
+    readonly host?: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiGetAccountObjectPrivileges
+     */
+    readonly catalogName?: string;
+    /**
+     * JSON object of string identity qualifiers, e.g. {\&quot;host\&quot;:\&quot;%\&quot;}. Allowed keys and defaults come from capabilities. Unknown keys or duplicate identity inputs are rejected.
+     * @type {string}
+     * @memberof AccountApiGetAccountObjectPrivileges
+     */
+    readonly subjectQualifiers?: string;
+}
 /**
  * Request parameters for getHiveAccounts operation in AccountApi.
  * @export
@@ -2665,6 +3035,73 @@ export interface AccountApiGetServiceAccountRequest {
      */
     readonly accessKey: string;
 }
+/**
+ * Request parameters for listAccountObjectPrivilegeObjects operation in AccountApi.
+ * @export
+ * @interface AccountApiListAccountObjectPrivilegeObjectsRequest
+ */
+export interface AccountApiListAccountObjectPrivilegeObjectsRequest {
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiListAccountObjectPrivilegeObjects
+     */
+    readonly engineName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiListAccountObjectPrivilegeObjects
+     */
+    readonly orgName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiListAccountObjectPrivilegeObjects
+     */
+    readonly clusterName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiListAccountObjectPrivilegeObjects
+     */
+    readonly accountName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiListAccountObjectPrivilegeObjects
+     */
+    readonly objectType: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiListAccountObjectPrivilegeObjects
+     */
+    readonly databaseName?: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiListAccountObjectPrivilegeObjects
+     */
+    readonly schemaName?: string;
+    /**
+     *
+     * @type {number}
+     * @memberof AccountApiListAccountObjectPrivilegeObjects
+     */
+    readonly offset?: number;
+    /**
+     *
+     * @type {number}
+     * @memberof AccountApiListAccountObjectPrivilegeObjects
+     */
+    readonly limit?: number;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiListAccountObjectPrivilegeObjects
+     */
+    readonly catalogName?: string;
+}
 /**
  * Request parameters for listAccounts operation in AccountApi.
  * @export
@@ -3361,6 +3798,15 @@ export declare class AccountApi extends BaseAPI implements AccountApiInterface {
      * @memberof AccountApi
      */
     bindSeaweedFSPolicies(requestParameters: AccountApiBindSeaweedFSPoliciesRequest, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<void, any, {}>>;
+    /**
+     * Native object GRANT/REVOKE alongside presets. Consult capabilities for engine/version-specific object types and privileges. PostgreSQL RESTRICT is the default; MySQL static GRANT OPTION is scope-wide.
+     * @summary Grant or revoke native object and column privileges
+     * @param {AccountApiChangeAccountObjectPrivilegesRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApi
+     */
+    changeAccountObjectPrivileges(requestParameters: AccountApiChangeAccountObjectPrivilegesRequest, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<void, any, {}>>;
     /**
      * create an account in cluster
      * @summary Create cluster account
@@ -3541,6 +3987,24 @@ export declare class AccountApi extends BaseAPI implements AccountApiInterface {
      * @memberof AccountApi
      */
     deleteServiceAccount(requestParameters: AccountApiDeleteServiceAccountRequest, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<void, any, {}>>;
+    /**
+     * Native object GRANT/REVOKE alongside presets. Consult capabilities for engine/version-specific object types and privileges. PostgreSQL RESTRICT is the default; MySQL static GRANT OPTION is scope-wide.
+     * @summary List native object privilege capabilities for the connected server
+     * @param {AccountApiGetAccountObjectPrivilegeCapabilitiesRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApi
+     */
+    getAccountObjectPrivilegeCapabilities(requestParameters: AccountApiGetAccountObjectPrivilegeCapabilitiesRequest, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<ObjectPrivilegeCapabilities, any, {}>>;
+    /**
+     * Native object GRANT/REVOKE alongside presets. Consult capabilities for engine/version-specific object types and privileges. PostgreSQL RESTRICT is the default; MySQL static GRANT OPTION is scope-wide.
+     * @summary Inspect native object and column privileges
+     * @param {AccountApiGetAccountObjectPrivilegesRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApi
+     */
+    getAccountObjectPrivileges(requestParameters: AccountApiGetAccountObjectPrivilegesRequest, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<ObjectPrivilegeSnapshot, any, {}>>;
     /**
      * Get Hive accounts
      * @summary Get Hive accounts
@@ -3586,6 +4050,15 @@ export declare class AccountApi extends BaseAPI implements AccountApiInterface {
      * @memberof AccountApi
      */
     getServiceAccount(requestParameters: AccountApiGetServiceAccountRequest, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<DmsServiceAccount, any, {}>>;
+    /**
+     * Lists existing objects of one supported kind. Pagination is not a fixed snapshot. PostgreSQL requires a connection database; schema-contained kinds require schemaName. MySQL global/database listing omits databaseName; other kinds require it.
+     * @summary Discover existing native privilege objects with stable routine identities
+     * @param {AccountApiListAccountObjectPrivilegeObjectsRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApi
+     */
+    listAccountObjectPrivilegeObjects(requestParameters: AccountApiListAccountObjectPrivilegeObjectsRequest, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<ObjectPrivilegeObjectList, any, {}>>;
     /**
      * list accounts in cluster
      * @summary List cluster accounts