kb-cloud-client-typescript 2.4.0-alpha.92 → 2.4.0-alpha.94

package/src/adminapi/apis/shared-api.ts

@@ -294,6 +294,8 @@ import type { ObjectPrivilegeChange } from '../models';
 // @ts-ignore
 import type { ObjectPrivilegeObjectList } from '../models';
 // @ts-ignore
+import type { ObjectPrivilegeResetStep } from '../models';
+// @ts-ignore
 import type { ObjectPrivilegeSnapshot } from '../models';
 // @ts-ignore
 import type { ObjectPrivilegeSubjectType } from '../models';
@@ -13002,6 +13004,74 @@ export const SharedApiAxiosParamCreator = function (configuration?: Configuratio
                 options: localVarRequestOptions,
             };
         },
+        /**
+         * MySQL only. Clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections.
+         * @summary Preview clearing all MySQL account privileges
+         * @param {string} engineName 
+         * @param {string} orgName 
+         * @param {string} clusterName 
+         * @param {string} accountName 
+         * @param {ObjectPrivilegeSubjectType} [subjectType] Native subject kind; path account name identifies the subject.
+         * @param {string} [host] Deprecated MySQL host alias. Prefer subjectQualifiers. Do not specify host in both.
+         * @param {string} [subjectQualifiers] JSON identity qualifiers; MySQL host defaults to %.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        previewAccountPrivilegeReset: async (engineName: string, orgName: string, clusterName: string, accountName: string, subjectType?: ObjectPrivilegeSubjectType, host?: string, subjectQualifiers?: string, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            // verify required parameter 'engineName' is not null or undefined
+            assertParamExists('previewAccountPrivilegeReset', 'engineName', engineName)
+            // verify required parameter 'orgName' is not null or undefined
+            assertParamExists('previewAccountPrivilegeReset', 'orgName', orgName)
+            // verify required parameter 'clusterName' is not null or undefined
+            assertParamExists('previewAccountPrivilegeReset', 'clusterName', clusterName)
+            // verify required parameter 'accountName' is not null or undefined
+            assertParamExists('previewAccountPrivilegeReset', 'accountName', accountName)
+            const localVarPath = `/admin/v1/data/{engineName}/organizations/{orgName}/clusters/{clusterName}/accounts/{accountName}/object-privileges/reset`
+                .replace(`{${"engineName"}}`, encodeURIComponent(String(engineName)))
+                .replace(`{${"orgName"}}`, encodeURIComponent(String(orgName)))
+                .replace(`{${"clusterName"}}`, encodeURIComponent(String(clusterName)))
+                .replace(`{${"accountName"}}`, encodeURIComponent(String(accountName)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'GET', ...baseOptions, ...options};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication BearerToken required
+            // http bearer authentication required
+            await setBearerAuthToObject(localVarHeaderParameter, configuration)
+
+            // authentication DigestAuth required
+            await setApiKeyToObject(localVarHeaderParameter, "Authorization", configuration)
+
+            if (subjectType !== undefined) {
+                localVarQueryParameter['subjectType'] = subjectType;
+            }
+
+            if (host !== undefined) {
+                localVarQueryParameter['host'] = host;
+            }
+
+            if (subjectQualifiers !== undefined) {
+                localVarQueryParameter['subjectQualifiers'] = subjectQualifiers;
+            }
+
+
+    
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
+
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
         /**
          * 
          * @summary Produce message to topic
@@ -15173,6 +15243,74 @@ export const SharedApiAxiosParamCreator = function (configuration?: Configuratio
                 options: localVarRequestOptions,
             };
         },
+        /**
+         * MySQL only. Clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections.
+         * @summary Clear all MySQL account privileges
+         * @param {string} engineName 
+         * @param {string} orgName 
+         * @param {string} clusterName 
+         * @param {string} accountName 
+         * @param {ObjectPrivilegeSubjectType} [subjectType] Native subject kind; path account name identifies the subject.
+         * @param {string} [host] Deprecated MySQL host alias. Prefer subjectQualifiers. Do not specify host in both.
+         * @param {string} [subjectQualifiers] JSON identity qualifiers; MySQL host defaults to %.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        resetAccountPrivileges: async (engineName: string, orgName: string, clusterName: string, accountName: string, subjectType?: ObjectPrivilegeSubjectType, host?: string, subjectQualifiers?: string, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            // verify required parameter 'engineName' is not null or undefined
+            assertParamExists('resetAccountPrivileges', 'engineName', engineName)
+            // verify required parameter 'orgName' is not null or undefined
+            assertParamExists('resetAccountPrivileges', 'orgName', orgName)
+            // verify required parameter 'clusterName' is not null or undefined
+            assertParamExists('resetAccountPrivileges', 'clusterName', clusterName)
+            // verify required parameter 'accountName' is not null or undefined
+            assertParamExists('resetAccountPrivileges', 'accountName', accountName)
+            const localVarPath = `/admin/v1/data/{engineName}/organizations/{orgName}/clusters/{clusterName}/accounts/{accountName}/object-privileges/reset`
+                .replace(`{${"engineName"}}`, encodeURIComponent(String(engineName)))
+                .replace(`{${"orgName"}}`, encodeURIComponent(String(orgName)))
+                .replace(`{${"clusterName"}}`, encodeURIComponent(String(clusterName)))
+                .replace(`{${"accountName"}}`, encodeURIComponent(String(accountName)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'DELETE', ...baseOptions, ...options};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication BearerToken required
+            // http bearer authentication required
+            await setBearerAuthToObject(localVarHeaderParameter, configuration)
+
+            // authentication DigestAuth required
+            await setApiKeyToObject(localVarHeaderParameter, "Authorization", configuration)
+
+            if (subjectType !== undefined) {
+                localVarQueryParameter['subjectType'] = subjectType;
+            }
+
+            if (host !== undefined) {
+                localVarQueryParameter['host'] = host;
+            }
+
+            if (subjectQualifiers !== undefined) {
+                localVarQueryParameter['subjectQualifiers'] = subjectQualifiers;
+            }
+
+
+    
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
+
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
         /**
          * 
          * @summary Reset consumer offset of topic
@@ -21808,6 +21946,25 @@ export const SharedApiFp = function(configuration?: Configuration) {
             const localVarOperationServerBasePath = operationServerMap['SharedApi.patchOrgParameter']?.[localVarOperationServerIndex]?.url;
             return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
         },
+        /**
+         * MySQL only. Clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections.
+         * @summary Preview clearing all MySQL account privileges
+         * @param {string} engineName 
+         * @param {string} orgName 
+         * @param {string} clusterName 
+         * @param {string} accountName 
+         * @param {ObjectPrivilegeSubjectType} [subjectType] Native subject kind; path account name identifies the subject.
+         * @param {string} [host] Deprecated MySQL host alias. Prefer subjectQualifiers. Do not specify host in both.
+         * @param {string} [subjectQualifiers] JSON identity qualifiers; MySQL host defaults to %.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async previewAccountPrivilegeReset(engineName: string, orgName: string, clusterName: string, accountName: string, subjectType?: ObjectPrivilegeSubjectType, host?: string, subjectQualifiers?: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<Array<ObjectPrivilegeResetStep>>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.previewAccountPrivilegeReset(engineName, orgName, clusterName, accountName, subjectType, host, subjectQualifiers, options);
+            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+            const localVarOperationServerBasePath = operationServerMap['SharedApi.previewAccountPrivilegeReset']?.[localVarOperationServerIndex]?.url;
+            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
         /**
          * 
          * @summary Produce message to topic
@@ -22368,6 +22525,25 @@ export const SharedApiFp = function(configuration?: Configuration) {
             const localVarOperationServerBasePath = operationServerMap['SharedApi.reconfigureCluster']?.[localVarOperationServerIndex]?.url;
             return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
         },
+        /**
+         * MySQL only. Clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections.
+         * @summary Clear all MySQL account privileges
+         * @param {string} engineName 
+         * @param {string} orgName 
+         * @param {string} clusterName 
+         * @param {string} accountName 
+         * @param {ObjectPrivilegeSubjectType} [subjectType] Native subject kind; path account name identifies the subject.
+         * @param {string} [host] Deprecated MySQL host alias. Prefer subjectQualifiers. Do not specify host in both.
+         * @param {string} [subjectQualifiers] JSON identity qualifiers; MySQL host defaults to %.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async resetAccountPrivileges(engineName: string, orgName: string, clusterName: string, accountName: string, subjectType?: ObjectPrivilegeSubjectType, host?: string, subjectQualifiers?: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<void>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.resetAccountPrivileges(engineName, orgName, clusterName, accountName, subjectType, host, subjectQualifiers, options);
+            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+            const localVarOperationServerBasePath = operationServerMap['SharedApi.resetAccountPrivileges']?.[localVarOperationServerIndex]?.url;
+            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
         /**
          * 
          * @summary Reset consumer offset of topic
@@ -25614,6 +25790,16 @@ export const SharedApiFactory = function (configuration?: Configuration, basePat
         patchOrgParameter(requestParameters: SharedApiPatchOrgParameterRequest, options?: RawAxiosRequestConfig): AxiosPromise<OrgParameter> {
             return localVarFp.patchOrgParameter(requestParameters.orgName, requestParameters.parameterName, requestParameters.orgParameter, options).then((request) => request(axios, basePath));
         },
+        /**
+         * MySQL only. Clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections.
+         * @summary Preview clearing all MySQL account privileges
+         * @param {SharedApiPreviewAccountPrivilegeResetRequest} requestParameters Request parameters.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        previewAccountPrivilegeReset(requestParameters: SharedApiPreviewAccountPrivilegeResetRequest, options?: RawAxiosRequestConfig): AxiosPromise<Array<ObjectPrivilegeResetStep>> {
+            return localVarFp.previewAccountPrivilegeReset(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.accountName, requestParameters.subjectType, requestParameters.host, requestParameters.subjectQualifiers, options).then((request) => request(axios, basePath));
+        },
         /**
          * 
          * @summary Produce message to topic
@@ -25893,6 +26079,16 @@ export const SharedApiFactory = function (configuration?: Configuration, basePat
         reconfigureCluster(requestParameters: SharedApiReconfigureClusterRequest, options?: RawAxiosRequestConfig): AxiosPromise<OpsRequestName> {
             return localVarFp.reconfigureCluster(requestParameters.orgName, requestParameters.clusterName, requestParameters.body, options).then((request) => request(axios, basePath));
         },
+        /**
+         * MySQL only. Clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections.
+         * @summary Clear all MySQL account privileges
+         * @param {SharedApiResetAccountPrivilegesRequest} requestParameters Request parameters.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        resetAccountPrivileges(requestParameters: SharedApiResetAccountPrivilegesRequest, options?: RawAxiosRequestConfig): AxiosPromise<void> {
+            return localVarFp.resetAccountPrivileges(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.accountName, requestParameters.subjectType, requestParameters.host, requestParameters.subjectQualifiers, options).then((request) => request(axios, basePath));
+        },
         /**
          * 
          * @summary Reset consumer offset of topic
@@ -28826,6 +29022,16 @@ export interface SharedApiInterface {
      */
     patchOrgParameter(requestParameters: SharedApiPatchOrgParameterRequest, options?: RawAxiosRequestConfig): AxiosPromise<OrgParameter>;
 
+    /**
+     * MySQL only. Clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections.
+     * @summary Preview clearing all MySQL account privileges
+     * @param {SharedApiPreviewAccountPrivilegeResetRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof SharedApiInterface
+     */
+    previewAccountPrivilegeReset(requestParameters: SharedApiPreviewAccountPrivilegeResetRequest, options?: RawAxiosRequestConfig): AxiosPromise<Array<ObjectPrivilegeResetStep>>;
+
     /**
      * 
      * @summary Produce message to topic
@@ -29105,6 +29311,16 @@ export interface SharedApiInterface {
      */
     reconfigureCluster(requestParameters: SharedApiReconfigureClusterRequest, options?: RawAxiosRequestConfig): AxiosPromise<OpsRequestName>;
 
+    /**
+     * MySQL only. Clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections.
+     * @summary Clear all MySQL account privileges
+     * @param {SharedApiResetAccountPrivilegesRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof SharedApiInterface
+     */
+    resetAccountPrivileges(requestParameters: SharedApiResetAccountPrivilegesRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+
     /**
      * 
      * @summary Reset consumer offset of topic
@@ -37076,6 +37292,62 @@ export interface SharedApiPatchOrgParameterRequest {
     readonly orgParameter: OrgParameter
 }
 
+/**
+ * Request parameters for previewAccountPrivilegeReset operation in SharedApi.
+ * @export
+ * @interface SharedApiPreviewAccountPrivilegeResetRequest
+ */
+export interface SharedApiPreviewAccountPrivilegeResetRequest {
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiPreviewAccountPrivilegeReset
+     */
+    readonly engineName: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiPreviewAccountPrivilegeReset
+     */
+    readonly orgName: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiPreviewAccountPrivilegeReset
+     */
+    readonly clusterName: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiPreviewAccountPrivilegeReset
+     */
+    readonly accountName: string
+
+    /**
+     * Native subject kind; path account name identifies the subject.
+     * @type {ObjectPrivilegeSubjectType}
+     * @memberof SharedApiPreviewAccountPrivilegeReset
+     */
+    readonly subjectType?: ObjectPrivilegeSubjectType
+
+    /**
+     * Deprecated MySQL host alias. Prefer subjectQualifiers. Do not specify host in both.
+     * @type {string}
+     * @memberof SharedApiPreviewAccountPrivilegeReset
+     */
+    readonly host?: string
+
+    /**
+     * JSON identity qualifiers; MySQL host defaults to %.
+     * @type {string}
+     * @memberof SharedApiPreviewAccountPrivilegeReset
+     */
+    readonly subjectQualifiers?: string
+}
+
 /**
  * Request parameters for produceKafkaTopicMessage operation in SharedApi.
  * @export
@@ -38833,6 +39105,62 @@ export interface SharedApiReconfigureClusterRequest {
     readonly body: ReconfigureCreate
 }
 
+/**
+ * Request parameters for resetAccountPrivileges operation in SharedApi.
+ * @export
+ * @interface SharedApiResetAccountPrivilegesRequest
+ */
+export interface SharedApiResetAccountPrivilegesRequest {
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiResetAccountPrivileges
+     */
+    readonly engineName: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiResetAccountPrivileges
+     */
+    readonly orgName: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiResetAccountPrivileges
+     */
+    readonly clusterName: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiResetAccountPrivileges
+     */
+    readonly accountName: string
+
+    /**
+     * Native subject kind; path account name identifies the subject.
+     * @type {ObjectPrivilegeSubjectType}
+     * @memberof SharedApiResetAccountPrivileges
+     */
+    readonly subjectType?: ObjectPrivilegeSubjectType
+
+    /**
+     * Deprecated MySQL host alias. Prefer subjectQualifiers. Do not specify host in both.
+     * @type {string}
+     * @memberof SharedApiResetAccountPrivileges
+     */
+    readonly host?: string
+
+    /**
+     * JSON identity qualifiers; MySQL host defaults to %.
+     * @type {string}
+     * @memberof SharedApiResetAccountPrivileges
+     */
+    readonly subjectQualifiers?: string
+}
+
 /**
  * Request parameters for resetKafkaTopicConsumerOffset operation in SharedApi.
  * @export
@@ -43490,6 +43818,18 @@ export class SharedApi extends BaseAPI implements SharedApiInterface {
         return SharedApiFp(this.configuration).patchOrgParameter(requestParameters.orgName, requestParameters.parameterName, requestParameters.orgParameter, options).then((request) => request(this.axios, this.basePath));
     }
 
+    /**
+     * MySQL only. Clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections.
+     * @summary Preview clearing all MySQL account privileges
+     * @param {SharedApiPreviewAccountPrivilegeResetRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof SharedApi
+     */
+    public previewAccountPrivilegeReset(requestParameters: SharedApiPreviewAccountPrivilegeResetRequest, options?: RawAxiosRequestConfig) {
+        return SharedApiFp(this.configuration).previewAccountPrivilegeReset(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.accountName, requestParameters.subjectType, requestParameters.host, requestParameters.subjectQualifiers, options).then((request) => request(this.axios, this.basePath));
+    }
+
     /**
      * 
      * @summary Produce message to topic
@@ -43825,6 +44165,18 @@ export class SharedApi extends BaseAPI implements SharedApiInterface {
         return SharedApiFp(this.configuration).reconfigureCluster(requestParameters.orgName, requestParameters.clusterName, requestParameters.body, options).then((request) => request(this.axios, this.basePath));
     }
 
+    /**
+     * MySQL only. Clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections.
+     * @summary Clear all MySQL account privileges
+     * @param {SharedApiResetAccountPrivilegesRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof SharedApi
+     */
+    public resetAccountPrivileges(requestParameters: SharedApiResetAccountPrivilegesRequest, options?: RawAxiosRequestConfig) {
+        return SharedApiFp(this.configuration).resetAccountPrivileges(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.accountName, requestParameters.subjectType, requestParameters.host, requestParameters.subjectQualifiers, options).then((request) => request(this.axios, this.basePath));
+    }
+
     /**
      * 
      * @summary Reset consumer offset of topic

package/src/adminapi/models/component-item-create.ts

@@ -29,6 +29,18 @@ import type { InstanceTemplateCreate } from './instance-template-create';
  * @interface ComponentItemCreate
  */
 export interface ComponentItemCreate {
+    /**
+     * Optional host group in this environment and the explicitly selected availabilityZone. Requires availabilityZone; no upper-level host group is inherited.
+     * @type {string}
+     * @memberof ComponentItemCreate
+     */
+    'nodeGroup'?: string;
+    /**
+     * Single AZ for explicit component placement. Must be enabled in the environment and is required when nodeGroup is specified. An omitted nodeGroup does not inherit the cluster host group. Omitting both retains cluster scheduling.
+     * @type {string}
+     * @memberof ComponentItemCreate
+     */
+    'availabilityZone'?: string;
     /**
      * component type, refer to componentDef and support NamePrefix
      * @type {string}

package/src/adminapi/models/component-item.ts

@@ -19,6 +19,9 @@ import type { ComponentNetwork } from './component-network';
 // May contain unused imports in some cases
 // @ts-ignore
 import type { ComponentVolumeItem } from './component-volume-item';
+// May contain unused imports in some cases
+// @ts-ignore
+import type { InstanceTemplateCreate } from './instance-template-create';
 
 /**
  * ComponentItem is the information of a component
@@ -26,6 +29,24 @@ import type { ComponentVolumeItem } from './component-volume-item';
  * @interface ComponentItem
  */
 export interface ComponentItem {
+    /**
+     * Optional host group in this environment. Explicit placement does not inherit an upper-level host group.
+     * @type {string}
+     * @memberof ComponentItem
+     */
+    'nodeGroup'?: string;
+    /**
+     * Explicit component AZ selection, if configured.
+     * @type {string}
+     * @memberof ComponentItem
+     */
+    'availabilityZone'?: string;
+    /**
+     * Instance template assignments with effective replicas, placement and storage class, and user-provided env, labels and annotations.
+     * @type {Array<InstanceTemplateCreate>}
+     * @memberof ComponentItem
+     */
+    'instanceTemplates'?: Array<InstanceTemplateCreate>;
     /**
      * component name
      * @type {string}

package/src/adminapi/models/index.ts

@@ -763,6 +763,7 @@ export * from './object-privilege-object-list';
 export * from './object-privilege-prerequisite-check';
 export * from './object-privilege-prerequisite-status';
 export * from './object-privilege-qualifier';
+export * from './object-privilege-reset-step';
 export * from './object-privilege-snapshot';
 export * from './object-privilege-spec';
 export * from './object-privilege-subject';
@@ -854,6 +855,7 @@ export * from './persistent-volume-claim-list';
 export * from './pg-create-extension-opt';
 export * from './pg-extension';
 export * from './pg-extension-available-database-schema';
+export * from './placement-scope';
 export * from './platform-component';
 export * from './platform-component-details';
 export * from './platform-component-pod';

package/src/adminapi/models/instance-template-attribute.ts

@@ -24,7 +24,6 @@ export const InstanceTemplateAttribute = {
     env: 'env',
     annotations: 'annotations',
     labels: 'labels',
-    availabilityZone: 'availabilityZone',
     storageClass: 'storageClass'
 } as const;
 

package/src/adminapi/models/instance-template-create.ts

@@ -18,11 +18,17 @@
 import type { InstanceTemplateCreateEnvInner } from './instance-template-create-env-inner';
 
 /**
- * Create assignment for one instance template. name and replicas are required. env, annotations, labels, availabilityZone, and storageClass are optional overlays onto the chart-rendered instance. The request must include every chart-rendered instance template exactly once. A template with an explicit zone uses single-zone scheduling: hostname anti-affinity follows the scheduling policy, while explicit rules and additional topology keys are preserved. Component scheduling remains unchanged; templates without a zone inherit it, including its zone anti-affinity constraints. Chart instance scheduling policies are cleared; an omitted or empty availabilityZone leaves the instance policy unset to inherit the component policy. 
+ * Create assignment for one instance template. name and replicas are required. env, annotations, labels, availabilityZone, nodeGroup and storageClass are optional overlays. The request must include every chart-rendered instance template exactly once. Explicit placement requires availabilityZone and optionally accepts nodeGroup, without inheriting upper-level AZ or NodeGroup. Omitting both leaves SchedulingPolicy unset for KubeBlocks default inheritance. Hostname, user scheduling rules and additional topology keys are preserved.
  * @export
  * @interface InstanceTemplateCreate
  */
 export interface InstanceTemplateCreate {
+    /**
+     * Optional host group in this environment and the explicitly selected availabilityZone. Requires availabilityZone; no upper-level host group is inherited.
+     * @type {string}
+     * @memberof InstanceTemplateCreate
+     */
+    'nodeGroup'?: string;
     /**
      * Instance template name; must match a chart-rendered instance.
      * @type {string}
@@ -36,7 +42,7 @@ export interface InstanceTemplateCreate {
      */
     'replicas': number;
     /**
-     * Availability zone for this template (topology.kubernetes.io/zone); omitted or empty inherits the component zone selection. Must be enabled in the environment. If the request explicitly supplies a non-empty cluster availabilityZones list, the template zone must also belong to that list.
+     * Single AZ for explicit template placement (topology.kubernetes.io/zone). Must be enabled in the environment and is required when nodeGroup is specified. An omitted nodeGroup does not inherit the component or cluster host group. Omitting both leaves SchedulingPolicy unset for KubeBlocks inheritance.
      * @type {string}
      * @memberof InstanceTemplateCreate
      */
@@ -60,7 +66,7 @@ export interface InstanceTemplateCreate {
      */
     'annotations'?: { [key: string]: string; };
     /**
-     * Label map (string key to string value). Merged into this template; same-name keys overwritten. Chart keys are not deleted.
+     * Label map (string key to string value). Merged into this template; same-name keys overwritten. Chart keys are not deleted. The apps.kubeblocks.io/instance-template label is managed by the system and must equal the template name if supplied.
      * @type {{ [key: string]: string; }}
      * @memberof InstanceTemplateCreate
      */

package/src/adminapi/models/instance.ts

@@ -62,6 +62,12 @@ export interface Instance {
      * @memberof Instance
      */
     'componentDef'?: string;
+    /**
+     * Instance template name within the actual component. Omitted when no template identity is available.
+     * @type {string}
+     * @memberof Instance
+     */
+    'instanceTemplate'?: string;
     /**
      * component type, refer to componentDef and support NamePrefix
      * @type {string}

package/src/adminapi/models/mode-option.ts

@@ -40,6 +40,9 @@ import type { ModeOptionValuesMappings } from './mode-option-values-mappings';
 // May contain unused imports in some cases
 // @ts-ignore
 import type { ModeServiceRef } from './mode-service-ref';
+// May contain unused imports in some cases
+// @ts-ignore
+import type { PlacementScope } from './placement-scope';
 
 /**
  * 
@@ -47,6 +50,12 @@ import type { ModeServiceRef } from './mode-service-ref';
  * @interface ModeOption
  */
 export interface ModeOption {
+    /**
+     * 
+     * @type {PlacementScope}
+     * @memberof ModeOption
+     */
+    'placementScope'?: PlacementScope;
     /**
      * 
      * @type {string}

package/src/adminapi/models/object-privilege-reset-step.ts

@@ -0,0 +1,36 @@
+/* tslint:disable */
+/* eslint-disable */
+/**
+ * Admin API
+ * The Admin API is used to manage the ApeCloud platform. 
+ *
+ * The version of the OpenAPI document: 1.0.0
+ * Contact: support@apecloud.com
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+
+
+
+/**
+ * One ordered, engine-generated step of an account privilege reset.
+ * @export
+ * @interface ObjectPrivilegeResetStep
+ */
+export interface ObjectPrivilegeResetStep {
+    /**
+     * Connection database in which this statement must run. Omitted when no particular database is required, as with MySQL account-wide REVOKE. This is execution context, not the scope of objects affected by the SQL.
+     * @type {string}
+     * @memberof ObjectPrivilegeResetStep
+     */
+    'databaseName'?: string;
+    /**
+     * Engine-generated SQL for display. Callers cannot submit or modify these steps for execution; reset rebuilds the plan from current grants.
+     * @type {string}
+     * @memberof ObjectPrivilegeResetStep
+     */
+    'sql': string;
+}
+