kb-cloud-client-typescript 2.4.0-alpha.91 → 2.4.0-alpha.93

package/dist/openapi/apis/account-api.d.ts

@@ -28,6 +28,7 @@ import type { MilvusRoleRequest } from '../models';
 import type { ObjectPrivilegeCapabilities } from '../models';
 import type { ObjectPrivilegeChange } from '../models';
 import type { ObjectPrivilegeObjectList } from '../models';
+import type { ObjectPrivilegeResetStep } from '../models';
 import type { ObjectPrivilegeSnapshot } from '../models';
 import type { ObjectPrivilegeSubjectType } from '../models';
 import type { PrivilegeListItem } from '../models';
@@ -356,6 +357,20 @@ export declare const AccountApiAxiosParamCreator: (configuration?: Configuration
      * @throws {RequiredError}
      */
     getServiceAccount: (engineName: string, orgName: string, clusterName: string, accessKey: string, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
+    /**
+     * Read MySQL table or view column names using the account management connection. No workbench datasource is required. Names are returned verbatim for column-level grants.
+     * @summary List exact column names for account object privileges
+     * @param {string} engineName
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {string} accountName
+     * @param {string} objectType Object type, either table or view
+     * @param {string} databaseName
+     * @param {string} objectName
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    listAccountObjectPrivilegeColumns: (engineName: string, orgName: string, clusterName: string, accountName: string, objectType: string, databaseName: string, objectName: string, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
     /**
      * Lists existing objects of one supported kind. Pagination is not a fixed snapshot. PostgreSQL requires a connection database; schema-contained kinds require schemaName. MySQL global/database listing omits databaseName; other kinds require it.
      * @summary Discover existing native privilege objects with stable routine identities
@@ -459,6 +474,20 @@ export declare const AccountApiAxiosParamCreator: (configuration?: Configuration
      * @throws {RequiredError}
      */
     lockAccount: (engineName: string, orgName: string, clusterName: string, accountName: string, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
+    /**
+     * MySQL only. Clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections.
+     * @summary Preview clearing all MySQL account privileges
+     * @param {string} engineName
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {string} accountName
+     * @param {ObjectPrivilegeSubjectType} [subjectType] Native subject kind; path account name identifies the subject.
+     * @param {string} [host] Deprecated MySQL host alias. Prefer subjectQualifiers. Do not specify host in both.
+     * @param {string} [subjectQualifiers] JSON identity qualifiers; MySQL host defaults to %.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    previewAccountPrivilegeReset: (engineName: string, orgName: string, clusterName: string, accountName: string, subjectType?: ObjectPrivilegeSubjectType, host?: string, subjectQualifiers?: string, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
     /**
      * Creates or replaces a named AWS IAM JSON policy document. Updates affect every identity and group that uses this policy.
      * @summary putSeaweedFSPolicy
@@ -472,6 +501,20 @@ export declare const AccountApiAxiosParamCreator: (configuration?: Configuration
     putSeaweedFSPolicy: (orgName: string, clusterName: string, policyName: string, requestBody: {
         [key: string]: any;
     }, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
+    /**
+     * MySQL only. Clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections.
+     * @summary Clear all MySQL account privileges
+     * @param {string} engineName
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {string} accountName
+     * @param {ObjectPrivilegeSubjectType} [subjectType] Native subject kind; path account name identifies the subject.
+     * @param {string} [host] Deprecated MySQL host alias. Prefer subjectQualifiers. Do not specify host in both.
+     * @param {string} [subjectQualifiers] JSON identity qualifiers; MySQL host defaults to %.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    resetAccountPrivileges: (engineName: string, orgName: string, clusterName: string, accountName: string, subjectType?: ObjectPrivilegeSubjectType, host?: string, subjectQualifiers?: string, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
     /**
      * unlock an account in cluster
      * @summary Unlock cluster account
@@ -950,6 +993,20 @@ export declare const AccountApiFp: (configuration?: Configuration) => {
      * @throws {RequiredError}
      */
     getServiceAccount(engineName: string, orgName: string, clusterName: string, accessKey: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<DmsServiceAccount>>;
+    /**
+     * Read MySQL table or view column names using the account management connection. No workbench datasource is required. Names are returned verbatim for column-level grants.
+     * @summary List exact column names for account object privileges
+     * @param {string} engineName
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {string} accountName
+     * @param {string} objectType Object type, either table or view
+     * @param {string} databaseName
+     * @param {string} objectName
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    listAccountObjectPrivilegeColumns(engineName: string, orgName: string, clusterName: string, accountName: string, objectType: string, databaseName: string, objectName: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<Array<string>>>;
     /**
      * Lists existing objects of one supported kind. Pagination is not a fixed snapshot. PostgreSQL requires a connection database; schema-contained kinds require schemaName. MySQL global/database listing omits databaseName; other kinds require it.
      * @summary Discover existing native privilege objects with stable routine identities
@@ -1053,6 +1110,20 @@ export declare const AccountApiFp: (configuration?: Configuration) => {
      * @throws {RequiredError}
      */
     lockAccount(engineName: string, orgName: string, clusterName: string, accountName: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<void>>;
+    /**
+     * MySQL only. Clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections.
+     * @summary Preview clearing all MySQL account privileges
+     * @param {string} engineName
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {string} accountName
+     * @param {ObjectPrivilegeSubjectType} [subjectType] Native subject kind; path account name identifies the subject.
+     * @param {string} [host] Deprecated MySQL host alias. Prefer subjectQualifiers. Do not specify host in both.
+     * @param {string} [subjectQualifiers] JSON identity qualifiers; MySQL host defaults to %.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    previewAccountPrivilegeReset(engineName: string, orgName: string, clusterName: string, accountName: string, subjectType?: ObjectPrivilegeSubjectType, host?: string, subjectQualifiers?: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<Array<ObjectPrivilegeResetStep>>>;
     /**
      * Creates or replaces a named AWS IAM JSON policy document. Updates affect every identity and group that uses this policy.
      * @summary putSeaweedFSPolicy
@@ -1066,6 +1137,20 @@ export declare const AccountApiFp: (configuration?: Configuration) => {
     putSeaweedFSPolicy(orgName: string, clusterName: string, policyName: string, requestBody: {
         [key: string]: any;
     }, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<void>>;
+    /**
+     * MySQL only. Clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections.
+     * @summary Clear all MySQL account privileges
+     * @param {string} engineName
+     * @param {string} orgName
+     * @param {string} clusterName
+     * @param {string} accountName
+     * @param {ObjectPrivilegeSubjectType} [subjectType] Native subject kind; path account name identifies the subject.
+     * @param {string} [host] Deprecated MySQL host alias. Prefer subjectQualifiers. Do not specify host in both.
+     * @param {string} [subjectQualifiers] JSON identity qualifiers; MySQL host defaults to %.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    resetAccountPrivileges(engineName: string, orgName: string, clusterName: string, accountName: string, subjectType?: ObjectPrivilegeSubjectType, host?: string, subjectQualifiers?: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<void>>;
     /**
      * unlock an account in cluster
      * @summary Unlock cluster account
@@ -1460,6 +1545,14 @@ export declare const AccountApiFactory: (configuration?: Configuration, basePath
      * @throws {RequiredError}
      */
     getServiceAccount(requestParameters: AccountApiGetServiceAccountRequest, options?: RawAxiosRequestConfig): AxiosPromise<DmsServiceAccount>;
+    /**
+     * Read MySQL table or view column names using the account management connection. No workbench datasource is required. Names are returned verbatim for column-level grants.
+     * @summary List exact column names for account object privileges
+     * @param {AccountApiListAccountObjectPrivilegeColumnsRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    listAccountObjectPrivilegeColumns(requestParameters: AccountApiListAccountObjectPrivilegeColumnsRequest, options?: RawAxiosRequestConfig): AxiosPromise<Array<string>>;
     /**
      * Lists existing objects of one supported kind. Pagination is not a fixed snapshot. PostgreSQL requires a connection database; schema-contained kinds require schemaName. MySQL global/database listing omits databaseName; other kinds require it.
      * @summary Discover existing native privilege objects with stable routine identities
@@ -1540,6 +1633,14 @@ export declare const AccountApiFactory: (configuration?: Configuration, basePath
      * @throws {RequiredError}
      */
     lockAccount(requestParameters: AccountApiLockAccountRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+    /**
+     * MySQL only. Clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections.
+     * @summary Preview clearing all MySQL account privileges
+     * @param {AccountApiPreviewAccountPrivilegeResetRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    previewAccountPrivilegeReset(requestParameters: AccountApiPreviewAccountPrivilegeResetRequest, options?: RawAxiosRequestConfig): AxiosPromise<Array<ObjectPrivilegeResetStep>>;
     /**
      * Creates or replaces a named AWS IAM JSON policy document. Updates affect every identity and group that uses this policy.
      * @summary putSeaweedFSPolicy
@@ -1548,6 +1649,14 @@ export declare const AccountApiFactory: (configuration?: Configuration, basePath
      * @throws {RequiredError}
      */
     putSeaweedFSPolicy(requestParameters: AccountApiPutSeaweedFSPolicyRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+    /**
+     * MySQL only. Clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections.
+     * @summary Clear all MySQL account privileges
+     * @param {AccountApiResetAccountPrivilegesRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    resetAccountPrivileges(requestParameters: AccountApiResetAccountPrivilegesRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
     /**
      * unlock an account in cluster
      * @summary Unlock cluster account
@@ -1928,6 +2037,15 @@ export interface AccountApiInterface {
      * @memberof AccountApiInterface
      */
     getServiceAccount(requestParameters: AccountApiGetServiceAccountRequest, options?: RawAxiosRequestConfig): AxiosPromise<DmsServiceAccount>;
+    /**
+     * Read MySQL table or view column names using the account management connection. No workbench datasource is required. Names are returned verbatim for column-level grants.
+     * @summary List exact column names for account object privileges
+     * @param {AccountApiListAccountObjectPrivilegeColumnsRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApiInterface
+     */
+    listAccountObjectPrivilegeColumns(requestParameters: AccountApiListAccountObjectPrivilegeColumnsRequest, options?: RawAxiosRequestConfig): AxiosPromise<Array<string>>;
     /**
      * Lists existing objects of one supported kind. Pagination is not a fixed snapshot. PostgreSQL requires a connection database; schema-contained kinds require schemaName. MySQL global/database listing omits databaseName; other kinds require it.
      * @summary Discover existing native privilege objects with stable routine identities
@@ -2018,6 +2136,15 @@ export interface AccountApiInterface {
      * @memberof AccountApiInterface
      */
     lockAccount(requestParameters: AccountApiLockAccountRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+    /**
+     * MySQL only. Clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections.
+     * @summary Preview clearing all MySQL account privileges
+     * @param {AccountApiPreviewAccountPrivilegeResetRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApiInterface
+     */
+    previewAccountPrivilegeReset(requestParameters: AccountApiPreviewAccountPrivilegeResetRequest, options?: RawAxiosRequestConfig): AxiosPromise<Array<ObjectPrivilegeResetStep>>;
     /**
      * Creates or replaces a named AWS IAM JSON policy document. Updates affect every identity and group that uses this policy.
      * @summary putSeaweedFSPolicy
@@ -2027,6 +2154,15 @@ export interface AccountApiInterface {
      * @memberof AccountApiInterface
      */
     putSeaweedFSPolicy(requestParameters: AccountApiPutSeaweedFSPolicyRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+    /**
+     * MySQL only. Clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections.
+     * @summary Clear all MySQL account privileges
+     * @param {AccountApiResetAccountPrivilegesRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApiInterface
+     */
+    resetAccountPrivileges(requestParameters: AccountApiResetAccountPrivilegesRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
     /**
      * unlock an account in cluster
      * @summary Unlock cluster account
@@ -3035,6 +3171,55 @@ export interface AccountApiGetServiceAccountRequest {
      */
     readonly accessKey: string;
 }
+/**
+ * Request parameters for listAccountObjectPrivilegeColumns operation in AccountApi.
+ * @export
+ * @interface AccountApiListAccountObjectPrivilegeColumnsRequest
+ */
+export interface AccountApiListAccountObjectPrivilegeColumnsRequest {
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiListAccountObjectPrivilegeColumns
+     */
+    readonly engineName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiListAccountObjectPrivilegeColumns
+     */
+    readonly orgName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiListAccountObjectPrivilegeColumns
+     */
+    readonly clusterName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiListAccountObjectPrivilegeColumns
+     */
+    readonly accountName: string;
+    /**
+     * Object type, either table or view
+     * @type {string}
+     * @memberof AccountApiListAccountObjectPrivilegeColumns
+     */
+    readonly objectType: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiListAccountObjectPrivilegeColumns
+     */
+    readonly databaseName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiListAccountObjectPrivilegeColumns
+     */
+    readonly objectName: string;
+}
 /**
  * Request parameters for listAccountObjectPrivilegeObjects operation in AccountApi.
  * @export
@@ -3303,6 +3488,55 @@ export interface AccountApiLockAccountRequest {
      */
     readonly accountName: string;
 }
+/**
+ * Request parameters for previewAccountPrivilegeReset operation in AccountApi.
+ * @export
+ * @interface AccountApiPreviewAccountPrivilegeResetRequest
+ */
+export interface AccountApiPreviewAccountPrivilegeResetRequest {
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiPreviewAccountPrivilegeReset
+     */
+    readonly engineName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiPreviewAccountPrivilegeReset
+     */
+    readonly orgName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiPreviewAccountPrivilegeReset
+     */
+    readonly clusterName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiPreviewAccountPrivilegeReset
+     */
+    readonly accountName: string;
+    /**
+     * Native subject kind; path account name identifies the subject.
+     * @type {ObjectPrivilegeSubjectType}
+     * @memberof AccountApiPreviewAccountPrivilegeReset
+     */
+    readonly subjectType?: ObjectPrivilegeSubjectType;
+    /**
+     * Deprecated MySQL host alias. Prefer subjectQualifiers. Do not specify host in both.
+     * @type {string}
+     * @memberof AccountApiPreviewAccountPrivilegeReset
+     */
+    readonly host?: string;
+    /**
+     * JSON identity qualifiers; MySQL host defaults to %.
+     * @type {string}
+     * @memberof AccountApiPreviewAccountPrivilegeReset
+     */
+    readonly subjectQualifiers?: string;
+}
 /**
  * Request parameters for putSeaweedFSPolicy operation in AccountApi.
  * @export
@@ -3336,6 +3570,55 @@ export interface AccountApiPutSeaweedFSPolicyRequest {
         [key: string]: any;
     };
 }
+/**
+ * Request parameters for resetAccountPrivileges operation in AccountApi.
+ * @export
+ * @interface AccountApiResetAccountPrivilegesRequest
+ */
+export interface AccountApiResetAccountPrivilegesRequest {
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiResetAccountPrivileges
+     */
+    readonly engineName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiResetAccountPrivileges
+     */
+    readonly orgName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiResetAccountPrivileges
+     */
+    readonly clusterName: string;
+    /**
+     *
+     * @type {string}
+     * @memberof AccountApiResetAccountPrivileges
+     */
+    readonly accountName: string;
+    /**
+     * Native subject kind; path account name identifies the subject.
+     * @type {ObjectPrivilegeSubjectType}
+     * @memberof AccountApiResetAccountPrivileges
+     */
+    readonly subjectType?: ObjectPrivilegeSubjectType;
+    /**
+     * Deprecated MySQL host alias. Prefer subjectQualifiers. Do not specify host in both.
+     * @type {string}
+     * @memberof AccountApiResetAccountPrivileges
+     */
+    readonly host?: string;
+    /**
+     * JSON identity qualifiers; MySQL host defaults to %.
+     * @type {string}
+     * @memberof AccountApiResetAccountPrivileges
+     */
+    readonly subjectQualifiers?: string;
+}
 /**
  * Request parameters for unlockAccount operation in AccountApi.
  * @export
@@ -4050,6 +4333,15 @@ export declare class AccountApi extends BaseAPI implements AccountApiInterface {
      * @memberof AccountApi
      */
     getServiceAccount(requestParameters: AccountApiGetServiceAccountRequest, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<DmsServiceAccount, any, {}>>;
+    /**
+     * Read MySQL table or view column names using the account management connection. No workbench datasource is required. Names are returned verbatim for column-level grants.
+     * @summary List exact column names for account object privileges
+     * @param {AccountApiListAccountObjectPrivilegeColumnsRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApi
+     */
+    listAccountObjectPrivilegeColumns(requestParameters: AccountApiListAccountObjectPrivilegeColumnsRequest, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<string[], any, {}>>;
     /**
      * Lists existing objects of one supported kind. Pagination is not a fixed snapshot. PostgreSQL requires a connection database; schema-contained kinds require schemaName. MySQL global/database listing omits databaseName; other kinds require it.
      * @summary Discover existing native privilege objects with stable routine identities
@@ -4140,6 +4432,15 @@ export declare class AccountApi extends BaseAPI implements AccountApiInterface {
      * @memberof AccountApi
      */
     lockAccount(requestParameters: AccountApiLockAccountRequest, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<void, any, {}>>;
+    /**
+     * MySQL only. Clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections.
+     * @summary Preview clearing all MySQL account privileges
+     * @param {AccountApiPreviewAccountPrivilegeResetRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApi
+     */
+    previewAccountPrivilegeReset(requestParameters: AccountApiPreviewAccountPrivilegeResetRequest, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<ObjectPrivilegeResetStep[], any, {}>>;
     /**
      * Creates or replaces a named AWS IAM JSON policy document. Updates affect every identity and group that uses this policy.
      * @summary putSeaweedFSPolicy
@@ -4149,6 +4450,15 @@ export declare class AccountApi extends BaseAPI implements AccountApiInterface {
      * @memberof AccountApi
      */
     putSeaweedFSPolicy(requestParameters: AccountApiPutSeaweedFSPolicyRequest, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<void, any, {}>>;
+    /**
+     * MySQL only. Clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections.
+     * @summary Clear all MySQL account privileges
+     * @param {AccountApiResetAccountPrivilegesRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AccountApi
+     */
+    resetAccountPrivileges(requestParameters: AccountApiResetAccountPrivilegesRequest, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<void, any, {}>>;
     /**
      * unlock an account in cluster
      * @summary Unlock cluster account