kb-cloud-client-typescript 2.4.0-alpha.91 → 2.4.0-alpha.93

package/src/openapi/apis/shared-api.ts

@@ -282,6 +282,8 @@ import type { ObjectPrivilegeChange } from '../models';
 // @ts-ignore
 import type { ObjectPrivilegeObjectList } from '../models';
 // @ts-ignore
+import type { ObjectPrivilegeResetStep } from '../models';
+// @ts-ignore
 import type { ObjectPrivilegeSnapshot } from '../models';
 // @ts-ignore
 import type { ObjectPrivilegeSubjectType } from '../models';
@@ -9117,6 +9119,80 @@ export const SharedApiAxiosParamCreator = function (configuration?: Configuratio
 
 
     
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
+
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         * Read MySQL table or view column names using the account management connection. No workbench datasource is required. Names are returned verbatim for column-level grants.
+         * @summary List exact column names for account object privileges
+         * @param {string} engineName 
+         * @param {string} orgName 
+         * @param {string} clusterName 
+         * @param {string} accountName 
+         * @param {string} objectType Object type, either table or view
+         * @param {string} databaseName 
+         * @param {string} objectName 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        listAccountObjectPrivilegeColumns: async (engineName: string, orgName: string, clusterName: string, accountName: string, objectType: string, databaseName: string, objectName: string, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            // verify required parameter 'engineName' is not null or undefined
+            assertParamExists('listAccountObjectPrivilegeColumns', 'engineName', engineName)
+            // verify required parameter 'orgName' is not null or undefined
+            assertParamExists('listAccountObjectPrivilegeColumns', 'orgName', orgName)
+            // verify required parameter 'clusterName' is not null or undefined
+            assertParamExists('listAccountObjectPrivilegeColumns', 'clusterName', clusterName)
+            // verify required parameter 'accountName' is not null or undefined
+            assertParamExists('listAccountObjectPrivilegeColumns', 'accountName', accountName)
+            // verify required parameter 'objectType' is not null or undefined
+            assertParamExists('listAccountObjectPrivilegeColumns', 'objectType', objectType)
+            // verify required parameter 'databaseName' is not null or undefined
+            assertParamExists('listAccountObjectPrivilegeColumns', 'databaseName', databaseName)
+            // verify required parameter 'objectName' is not null or undefined
+            assertParamExists('listAccountObjectPrivilegeColumns', 'objectName', objectName)
+            const localVarPath = `/api/v1/data/{engineName}/organizations/{orgName}/clusters/{clusterName}/accounts/{accountName}/object-privileges/columns`
+                .replace(`{${"engineName"}}`, encodeURIComponent(String(engineName)))
+                .replace(`{${"orgName"}}`, encodeURIComponent(String(orgName)))
+                .replace(`{${"clusterName"}}`, encodeURIComponent(String(clusterName)))
+                .replace(`{${"accountName"}}`, encodeURIComponent(String(accountName)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'GET', ...baseOptions, ...options};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication BearerToken required
+            // http bearer authentication required
+            await setBearerAuthToObject(localVarHeaderParameter, configuration)
+
+            // authentication DigestAuth required
+            await setApiKeyToObject(localVarHeaderParameter, "Authorization", configuration)
+
+            if (objectType !== undefined) {
+                localVarQueryParameter['objectType'] = objectType;
+            }
+
+            if (databaseName !== undefined) {
+                localVarQueryParameter['databaseName'] = databaseName;
+            }
+
+            if (objectName !== undefined) {
+                localVarQueryParameter['objectName'] = objectName;
+            }
+
+
+    
             setSearchParams(localVarUrlObj, localVarQueryParameter);
             let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
             localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
@@ -12845,6 +12921,74 @@ export const SharedApiAxiosParamCreator = function (configuration?: Configuratio
                 options: localVarRequestOptions,
             };
         },
+        /**
+         * MySQL only. Clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections.
+         * @summary Preview clearing all MySQL account privileges
+         * @param {string} engineName 
+         * @param {string} orgName 
+         * @param {string} clusterName 
+         * @param {string} accountName 
+         * @param {ObjectPrivilegeSubjectType} [subjectType] Native subject kind; path account name identifies the subject.
+         * @param {string} [host] Deprecated MySQL host alias. Prefer subjectQualifiers. Do not specify host in both.
+         * @param {string} [subjectQualifiers] JSON identity qualifiers; MySQL host defaults to %.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        previewAccountPrivilegeReset: async (engineName: string, orgName: string, clusterName: string, accountName: string, subjectType?: ObjectPrivilegeSubjectType, host?: string, subjectQualifiers?: string, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            // verify required parameter 'engineName' is not null or undefined
+            assertParamExists('previewAccountPrivilegeReset', 'engineName', engineName)
+            // verify required parameter 'orgName' is not null or undefined
+            assertParamExists('previewAccountPrivilegeReset', 'orgName', orgName)
+            // verify required parameter 'clusterName' is not null or undefined
+            assertParamExists('previewAccountPrivilegeReset', 'clusterName', clusterName)
+            // verify required parameter 'accountName' is not null or undefined
+            assertParamExists('previewAccountPrivilegeReset', 'accountName', accountName)
+            const localVarPath = `/api/v1/data/{engineName}/organizations/{orgName}/clusters/{clusterName}/accounts/{accountName}/object-privileges/reset`
+                .replace(`{${"engineName"}}`, encodeURIComponent(String(engineName)))
+                .replace(`{${"orgName"}}`, encodeURIComponent(String(orgName)))
+                .replace(`{${"clusterName"}}`, encodeURIComponent(String(clusterName)))
+                .replace(`{${"accountName"}}`, encodeURIComponent(String(accountName)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'GET', ...baseOptions, ...options};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication BearerToken required
+            // http bearer authentication required
+            await setBearerAuthToObject(localVarHeaderParameter, configuration)
+
+            // authentication DigestAuth required
+            await setApiKeyToObject(localVarHeaderParameter, "Authorization", configuration)
+
+            if (subjectType !== undefined) {
+                localVarQueryParameter['subjectType'] = subjectType;
+            }
+
+            if (host !== undefined) {
+                localVarQueryParameter['host'] = host;
+            }
+
+            if (subjectQualifiers !== undefined) {
+                localVarQueryParameter['subjectQualifiers'] = subjectQualifiers;
+            }
+
+
+    
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
+
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
         /**
          * 
          * @summary Produce message to topic
@@ -15016,6 +15160,74 @@ export const SharedApiAxiosParamCreator = function (configuration?: Configuratio
                 options: localVarRequestOptions,
             };
         },
+        /**
+         * MySQL only. Clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections.
+         * @summary Clear all MySQL account privileges
+         * @param {string} engineName 
+         * @param {string} orgName 
+         * @param {string} clusterName 
+         * @param {string} accountName 
+         * @param {ObjectPrivilegeSubjectType} [subjectType] Native subject kind; path account name identifies the subject.
+         * @param {string} [host] Deprecated MySQL host alias. Prefer subjectQualifiers. Do not specify host in both.
+         * @param {string} [subjectQualifiers] JSON identity qualifiers; MySQL host defaults to %.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        resetAccountPrivileges: async (engineName: string, orgName: string, clusterName: string, accountName: string, subjectType?: ObjectPrivilegeSubjectType, host?: string, subjectQualifiers?: string, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            // verify required parameter 'engineName' is not null or undefined
+            assertParamExists('resetAccountPrivileges', 'engineName', engineName)
+            // verify required parameter 'orgName' is not null or undefined
+            assertParamExists('resetAccountPrivileges', 'orgName', orgName)
+            // verify required parameter 'clusterName' is not null or undefined
+            assertParamExists('resetAccountPrivileges', 'clusterName', clusterName)
+            // verify required parameter 'accountName' is not null or undefined
+            assertParamExists('resetAccountPrivileges', 'accountName', accountName)
+            const localVarPath = `/api/v1/data/{engineName}/organizations/{orgName}/clusters/{clusterName}/accounts/{accountName}/object-privileges/reset`
+                .replace(`{${"engineName"}}`, encodeURIComponent(String(engineName)))
+                .replace(`{${"orgName"}}`, encodeURIComponent(String(orgName)))
+                .replace(`{${"clusterName"}}`, encodeURIComponent(String(clusterName)))
+                .replace(`{${"accountName"}}`, encodeURIComponent(String(accountName)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'DELETE', ...baseOptions, ...options};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication BearerToken required
+            // http bearer authentication required
+            await setBearerAuthToObject(localVarHeaderParameter, configuration)
+
+            // authentication DigestAuth required
+            await setApiKeyToObject(localVarHeaderParameter, "Authorization", configuration)
+
+            if (subjectType !== undefined) {
+                localVarQueryParameter['subjectType'] = subjectType;
+            }
+
+            if (host !== undefined) {
+                localVarQueryParameter['host'] = host;
+            }
+
+            if (subjectQualifiers !== undefined) {
+                localVarQueryParameter['subjectQualifiers'] = subjectQualifiers;
+            }
+
+
+    
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
+
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
         /**
          * 
          * @summary Reset consumer offset of topic
@@ -20634,6 +20846,25 @@ export const SharedApiFp = function(configuration?: Configuration) {
             const localVarOperationServerBasePath = operationServerMap['SharedApi.killSession']?.[localVarOperationServerIndex]?.url;
             return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
         },
+        /**
+         * Read MySQL table or view column names using the account management connection. No workbench datasource is required. Names are returned verbatim for column-level grants.
+         * @summary List exact column names for account object privileges
+         * @param {string} engineName 
+         * @param {string} orgName 
+         * @param {string} clusterName 
+         * @param {string} accountName 
+         * @param {string} objectType Object type, either table or view
+         * @param {string} databaseName 
+         * @param {string} objectName 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async listAccountObjectPrivilegeColumns(engineName: string, orgName: string, clusterName: string, accountName: string, objectType: string, databaseName: string, objectName: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<Array<string>>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.listAccountObjectPrivilegeColumns(engineName, orgName, clusterName, accountName, objectType, databaseName, objectName, options);
+            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+            const localVarOperationServerBasePath = operationServerMap['SharedApi.listAccountObjectPrivilegeColumns']?.[localVarOperationServerIndex]?.url;
+            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
         /**
          * Lists existing objects of one supported kind. Pagination is not a fixed snapshot. PostgreSQL requires a connection database; schema-contained kinds require schemaName. MySQL global/database listing omits databaseName; other kinds require it.
          * @summary Discover existing native privilege objects with stable routine identities
@@ -21744,6 +21975,25 @@ export const SharedApiFp = function(configuration?: Configuration) {
             const localVarOperationServerBasePath = operationServerMap['SharedApi.patchOrgParameter']?.[localVarOperationServerIndex]?.url;
             return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
         },
+        /**
+         * MySQL only. Clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections.
+         * @summary Preview clearing all MySQL account privileges
+         * @param {string} engineName 
+         * @param {string} orgName 
+         * @param {string} clusterName 
+         * @param {string} accountName 
+         * @param {ObjectPrivilegeSubjectType} [subjectType] Native subject kind; path account name identifies the subject.
+         * @param {string} [host] Deprecated MySQL host alias. Prefer subjectQualifiers. Do not specify host in both.
+         * @param {string} [subjectQualifiers] JSON identity qualifiers; MySQL host defaults to %.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async previewAccountPrivilegeReset(engineName: string, orgName: string, clusterName: string, accountName: string, subjectType?: ObjectPrivilegeSubjectType, host?: string, subjectQualifiers?: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<Array<ObjectPrivilegeResetStep>>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.previewAccountPrivilegeReset(engineName, orgName, clusterName, accountName, subjectType, host, subjectQualifiers, options);
+            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+            const localVarOperationServerBasePath = operationServerMap['SharedApi.previewAccountPrivilegeReset']?.[localVarOperationServerIndex]?.url;
+            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
         /**
          * 
          * @summary Produce message to topic
@@ -22304,6 +22554,25 @@ export const SharedApiFp = function(configuration?: Configuration) {
             const localVarOperationServerBasePath = operationServerMap['SharedApi.reconfigureCluster']?.[localVarOperationServerIndex]?.url;
             return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
         },
+        /**
+         * MySQL only. Clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections.
+         * @summary Clear all MySQL account privileges
+         * @param {string} engineName 
+         * @param {string} orgName 
+         * @param {string} clusterName 
+         * @param {string} accountName 
+         * @param {ObjectPrivilegeSubjectType} [subjectType] Native subject kind; path account name identifies the subject.
+         * @param {string} [host] Deprecated MySQL host alias. Prefer subjectQualifiers. Do not specify host in both.
+         * @param {string} [subjectQualifiers] JSON identity qualifiers; MySQL host defaults to %.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async resetAccountPrivileges(engineName: string, orgName: string, clusterName: string, accountName: string, subjectType?: ObjectPrivilegeSubjectType, host?: string, subjectQualifiers?: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<void>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.resetAccountPrivileges(engineName, orgName, clusterName, accountName, subjectType, host, subjectQualifiers, options);
+            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+            const localVarOperationServerBasePath = operationServerMap['SharedApi.resetAccountPrivileges']?.[localVarOperationServerIndex]?.url;
+            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
         /**
          * 
          * @summary Reset consumer offset of topic
@@ -24798,6 +25067,16 @@ export const SharedApiFactory = function (configuration?: Configuration, basePat
         killSession(requestParameters: SharedApiKillSessionRequest, options?: RawAxiosRequestConfig): AxiosPromise<void> {
             return localVarFp.killSession(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.session, requestParameters.keep, options).then((request) => request(axios, basePath));
         },
+        /**
+         * Read MySQL table or view column names using the account management connection. No workbench datasource is required. Names are returned verbatim for column-level grants.
+         * @summary List exact column names for account object privileges
+         * @param {SharedApiListAccountObjectPrivilegeColumnsRequest} requestParameters Request parameters.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        listAccountObjectPrivilegeColumns(requestParameters: SharedApiListAccountObjectPrivilegeColumnsRequest, options?: RawAxiosRequestConfig): AxiosPromise<Array<string>> {
+            return localVarFp.listAccountObjectPrivilegeColumns(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.accountName, requestParameters.objectType, requestParameters.databaseName, requestParameters.objectName, options).then((request) => request(axios, basePath));
+        },
         /**
          * Lists existing objects of one supported kind. Pagination is not a fixed snapshot. PostgreSQL requires a connection database; schema-contained kinds require schemaName. MySQL global/database listing omits databaseName; other kinds require it.
          * @summary Discover existing native privilege objects with stable routine identities
@@ -25536,6 +25815,16 @@ export const SharedApiFactory = function (configuration?: Configuration, basePat
         patchOrgParameter(requestParameters: SharedApiPatchOrgParameterRequest, options?: RawAxiosRequestConfig): AxiosPromise<OrgParameter> {
             return localVarFp.patchOrgParameter(requestParameters.orgName, requestParameters.parameterName, requestParameters.orgParameter, options).then((request) => request(axios, basePath));
         },
+        /**
+         * MySQL only. Clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections.
+         * @summary Preview clearing all MySQL account privileges
+         * @param {SharedApiPreviewAccountPrivilegeResetRequest} requestParameters Request parameters.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        previewAccountPrivilegeReset(requestParameters: SharedApiPreviewAccountPrivilegeResetRequest, options?: RawAxiosRequestConfig): AxiosPromise<Array<ObjectPrivilegeResetStep>> {
+            return localVarFp.previewAccountPrivilegeReset(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.accountName, requestParameters.subjectType, requestParameters.host, requestParameters.subjectQualifiers, options).then((request) => request(axios, basePath));
+        },
         /**
          * 
          * @summary Produce message to topic
@@ -25815,6 +26104,16 @@ export const SharedApiFactory = function (configuration?: Configuration, basePat
         reconfigureCluster(requestParameters: SharedApiReconfigureClusterRequest, options?: RawAxiosRequestConfig): AxiosPromise<OpsRequestName> {
             return localVarFp.reconfigureCluster(requestParameters.orgName, requestParameters.clusterName, requestParameters.body, options).then((request) => request(axios, basePath));
         },
+        /**
+         * MySQL only. Clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections.
+         * @summary Clear all MySQL account privileges
+         * @param {SharedApiResetAccountPrivilegesRequest} requestParameters Request parameters.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        resetAccountPrivileges(requestParameters: SharedApiResetAccountPrivilegesRequest, options?: RawAxiosRequestConfig): AxiosPromise<void> {
+            return localVarFp.resetAccountPrivileges(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.accountName, requestParameters.subjectType, requestParameters.host, requestParameters.subjectQualifiers, options).then((request) => request(axios, basePath));
+        },
         /**
          * 
          * @summary Reset consumer offset of topic
@@ -27982,6 +28281,16 @@ export interface SharedApiInterface {
      */
     killSession(requestParameters: SharedApiKillSessionRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
 
+    /**
+     * Read MySQL table or view column names using the account management connection. No workbench datasource is required. Names are returned verbatim for column-level grants.
+     * @summary List exact column names for account object privileges
+     * @param {SharedApiListAccountObjectPrivilegeColumnsRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof SharedApiInterface
+     */
+    listAccountObjectPrivilegeColumns(requestParameters: SharedApiListAccountObjectPrivilegeColumnsRequest, options?: RawAxiosRequestConfig): AxiosPromise<Array<string>>;
+
     /**
      * Lists existing objects of one supported kind. Pagination is not a fixed snapshot. PostgreSQL requires a connection database; schema-contained kinds require schemaName. MySQL global/database listing omits databaseName; other kinds require it.
      * @summary Discover existing native privilege objects with stable routine identities
@@ -28720,6 +29029,16 @@ export interface SharedApiInterface {
      */
     patchOrgParameter(requestParameters: SharedApiPatchOrgParameterRequest, options?: RawAxiosRequestConfig): AxiosPromise<OrgParameter>;
 
+    /**
+     * MySQL only. Clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections.
+     * @summary Preview clearing all MySQL account privileges
+     * @param {SharedApiPreviewAccountPrivilegeResetRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof SharedApiInterface
+     */
+    previewAccountPrivilegeReset(requestParameters: SharedApiPreviewAccountPrivilegeResetRequest, options?: RawAxiosRequestConfig): AxiosPromise<Array<ObjectPrivilegeResetStep>>;
+
     /**
      * 
      * @summary Produce message to topic
@@ -28999,6 +29318,16 @@ export interface SharedApiInterface {
      */
     reconfigureCluster(requestParameters: SharedApiReconfigureClusterRequest, options?: RawAxiosRequestConfig): AxiosPromise<OpsRequestName>;
 
+    /**
+     * MySQL only. Clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections.
+     * @summary Clear all MySQL account privileges
+     * @param {SharedApiResetAccountPrivilegesRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof SharedApiInterface
+     */
+    resetAccountPrivileges(requestParameters: SharedApiResetAccountPrivilegesRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+
     /**
      * 
      * @summary Reset consumer offset of topic
@@ -35061,6 +35390,62 @@ export interface SharedApiKillSessionRequest {
     readonly keep?: boolean
 }
 
+/**
+ * Request parameters for listAccountObjectPrivilegeColumns operation in SharedApi.
+ * @export
+ * @interface SharedApiListAccountObjectPrivilegeColumnsRequest
+ */
+export interface SharedApiListAccountObjectPrivilegeColumnsRequest {
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiListAccountObjectPrivilegeColumns
+     */
+    readonly engineName: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiListAccountObjectPrivilegeColumns
+     */
+    readonly orgName: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiListAccountObjectPrivilegeColumns
+     */
+    readonly clusterName: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiListAccountObjectPrivilegeColumns
+     */
+    readonly accountName: string
+
+    /**
+     * Object type, either table or view
+     * @type {string}
+     * @memberof SharedApiListAccountObjectPrivilegeColumns
+     */
+    readonly objectType: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiListAccountObjectPrivilegeColumns
+     */
+    readonly databaseName: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiListAccountObjectPrivilegeColumns
+     */
+    readonly objectName: string
+}
+
 /**
  * Request parameters for listAccountObjectPrivilegeObjects operation in SharedApi.
  * @export
@@ -37105,6 +37490,62 @@ export interface SharedApiPatchOrgParameterRequest {
     readonly orgParameter: OrgParameter
 }
 
+/**
+ * Request parameters for previewAccountPrivilegeReset operation in SharedApi.
+ * @export
+ * @interface SharedApiPreviewAccountPrivilegeResetRequest
+ */
+export interface SharedApiPreviewAccountPrivilegeResetRequest {
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiPreviewAccountPrivilegeReset
+     */
+    readonly engineName: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiPreviewAccountPrivilegeReset
+     */
+    readonly orgName: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiPreviewAccountPrivilegeReset
+     */
+    readonly clusterName: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiPreviewAccountPrivilegeReset
+     */
+    readonly accountName: string
+
+    /**
+     * Native subject kind; path account name identifies the subject.
+     * @type {ObjectPrivilegeSubjectType}
+     * @memberof SharedApiPreviewAccountPrivilegeReset
+     */
+    readonly subjectType?: ObjectPrivilegeSubjectType
+
+    /**
+     * Deprecated MySQL host alias. Prefer subjectQualifiers. Do not specify host in both.
+     * @type {string}
+     * @memberof SharedApiPreviewAccountPrivilegeReset
+     */
+    readonly host?: string
+
+    /**
+     * JSON identity qualifiers; MySQL host defaults to %.
+     * @type {string}
+     * @memberof SharedApiPreviewAccountPrivilegeReset
+     */
+    readonly subjectQualifiers?: string
+}
+
 /**
  * Request parameters for produceKafkaTopicMessage operation in SharedApi.
  * @export
@@ -38862,6 +39303,62 @@ export interface SharedApiReconfigureClusterRequest {
     readonly body: ReconfigureCreate
 }
 
+/**
+ * Request parameters for resetAccountPrivileges operation in SharedApi.
+ * @export
+ * @interface SharedApiResetAccountPrivilegesRequest
+ */
+export interface SharedApiResetAccountPrivilegesRequest {
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiResetAccountPrivileges
+     */
+    readonly engineName: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiResetAccountPrivileges
+     */
+    readonly orgName: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiResetAccountPrivileges
+     */
+    readonly clusterName: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiResetAccountPrivileges
+     */
+    readonly accountName: string
+
+    /**
+     * Native subject kind; path account name identifies the subject.
+     * @type {ObjectPrivilegeSubjectType}
+     * @memberof SharedApiResetAccountPrivileges
+     */
+    readonly subjectType?: ObjectPrivilegeSubjectType
+
+    /**
+     * Deprecated MySQL host alias. Prefer subjectQualifiers. Do not specify host in both.
+     * @type {string}
+     * @memberof SharedApiResetAccountPrivileges
+     */
+    readonly host?: string
+
+    /**
+     * JSON identity qualifiers; MySQL host defaults to %.
+     * @type {string}
+     * @memberof SharedApiResetAccountPrivileges
+     */
+    readonly subjectQualifiers?: string
+}
+
 /**
  * Request parameters for resetKafkaTopicConsumerOffset operation in SharedApi.
  * @export
@@ -42640,6 +43137,18 @@ export class SharedApi extends BaseAPI implements SharedApiInterface {
         return SharedApiFp(this.configuration).killSession(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.session, requestParameters.keep, options).then((request) => request(this.axios, this.basePath));
     }
 
+    /**
+     * Read MySQL table or view column names using the account management connection. No workbench datasource is required. Names are returned verbatim for column-level grants.
+     * @summary List exact column names for account object privileges
+     * @param {SharedApiListAccountObjectPrivilegeColumnsRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof SharedApi
+     */
+    public listAccountObjectPrivilegeColumns(requestParameters: SharedApiListAccountObjectPrivilegeColumnsRequest, options?: RawAxiosRequestConfig) {
+        return SharedApiFp(this.configuration).listAccountObjectPrivilegeColumns(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.accountName, requestParameters.objectType, requestParameters.databaseName, requestParameters.objectName, options).then((request) => request(this.axios, this.basePath));
+    }
+
     /**
      * Lists existing objects of one supported kind. Pagination is not a fixed snapshot. PostgreSQL requires a connection database; schema-contained kinds require schemaName. MySQL global/database listing omits databaseName; other kinds require it.
      * @summary Discover existing native privilege objects with stable routine identities
@@ -43526,6 +44035,18 @@ export class SharedApi extends BaseAPI implements SharedApiInterface {
         return SharedApiFp(this.configuration).patchOrgParameter(requestParameters.orgName, requestParameters.parameterName, requestParameters.orgParameter, options).then((request) => request(this.axios, this.basePath));
     }
 
+    /**
+     * MySQL only. Clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections.
+     * @summary Preview clearing all MySQL account privileges
+     * @param {SharedApiPreviewAccountPrivilegeResetRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof SharedApi
+     */
+    public previewAccountPrivilegeReset(requestParameters: SharedApiPreviewAccountPrivilegeResetRequest, options?: RawAxiosRequestConfig) {
+        return SharedApiFp(this.configuration).previewAccountPrivilegeReset(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.accountName, requestParameters.subjectType, requestParameters.host, requestParameters.subjectQualifiers, options).then((request) => request(this.axios, this.basePath));
+    }
+
     /**
      * 
      * @summary Produce message to topic
@@ -43861,6 +44382,18 @@ export class SharedApi extends BaseAPI implements SharedApiInterface {
         return SharedApiFp(this.configuration).reconfigureCluster(requestParameters.orgName, requestParameters.clusterName, requestParameters.body, options).then((request) => request(this.axios, this.basePath));
     }
 
+    /**
+     * MySQL only. Clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections.
+     * @summary Clear all MySQL account privileges
+     * @param {SharedApiResetAccountPrivilegesRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof SharedApi
+     */
+    public resetAccountPrivileges(requestParameters: SharedApiResetAccountPrivilegesRequest, options?: RawAxiosRequestConfig) {
+        return SharedApiFp(this.configuration).resetAccountPrivileges(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.accountName, requestParameters.subjectType, requestParameters.host, requestParameters.subjectQualifiers, options).then((request) => request(this.axios, this.basePath));
+    }
+
     /**
      * 
      * @summary Reset consumer offset of topic