openai 6.47.0 → 6.48.0

package/src/resources/admin/organization/audit-logs.ts

@@ -113,7 +113,91 @@ export interface AuditLogListResponse {
     | 'service_account.deleted'
     | 'user.added'
     | 'user.updated'
-    | 'user.deleted';
+    | 'user.deleted'
+    | 'tenant.metadata.updated'
+    | 'tenant.microsoft_entra_mapping.upserted'
+    | 'tenant.microsoft_entra_mapping.deleted'
+    | 'tenant.workload_identity.provider.created'
+    | 'tenant.workload_identity.provider.updated'
+    | 'tenant.workload_identity.provider.archived'
+    | 'tenant.workload_identity.mapping.created'
+    | 'tenant.workload_identity.mapping.updated'
+    | 'tenant.workload_identity.mapping.archived'
+    | 'tenant.workload_identity.binding.created'
+    | 'tenant.workload_identity.principal.provisioned'
+    | 'tenant.admin_api_key.created'
+    | 'tenant.admin_api_key.updated'
+    | 'tenant.admin_api_key.deleted'
+    | 'tenant.project_api_key.created'
+    | 'tenant.chatgpt_access_token.revoked'
+    | 'tenant.migration.completed'
+    | 'tenant.sso.migrated'
+    | 'tenant.domains.migrated'
+    | 'tenant.sso_connection.created'
+    | 'tenant.sso_connection.updated'
+    | 'tenant.sso_connection.deleted'
+    | 'tenant.sso_connection.setup.started'
+    | 'tenant.policy.created'
+    | 'tenant.policy.updated'
+    | 'tenant.policy.deleted'
+    | 'tenant.policy.attached'
+    | 'tenant.policy.detached'
+    | 'tenant.principal_authentication_policy.resolved'
+    | 'tenant.scim.setup.started'
+    | 'tenant.scim.deletion.requested'
+    | 'tenant.scim.directory.created'
+    | 'tenant.product_access_policy.updated'
+    | 'tenant.resource_share_grant.created'
+    | 'tenant.resource_share_grant.updated'
+    | 'tenant.resource_share_grant.accepted'
+    | 'tenant.resource_share_grant.declined'
+    | 'tenant.resource_share_grant.revoked'
+    | 'tenant.resource_share_grant.deleted'
+    | 'tenant.service_account.updated'
+    | 'tenant.service_account.deleted'
+    | 'tenant.service_account.token.revoked'
+    | 'tenant.billing.overage_limit.updated'
+    | 'tenant.billing.alerts.updated'
+    | 'tenant.billing.info.updated'
+    | 'tenant.usage_limit.workspace.updated'
+    | 'tenant.usage_limit.group.updated'
+    | 'tenant.usage_limit.user.updated'
+    | 'tenant.usage_limit.increase_request.updated'
+    | 'tenant.usage_limit.increase_request.resolved'
+    | 'tenant.group.created'
+    | 'tenant.group.updated'
+    | 'tenant.group.deleted'
+    | 'tenant.group.member.added'
+    | 'tenant.group.member.removed'
+    | 'tenant.migration_rollout.status.updated'
+    | 'tenant.migration_rollout.tier.updated'
+    | 'tenant.role.metadata.updated'
+    | 'tenant.custom_role.created'
+    | 'tenant.custom_role.updated'
+    | 'tenant.custom_role.deleted'
+    | 'tenant.role_assignment.created'
+    | 'tenant.role_assignment.deleted'
+    | 'tenant.resource_role_assignment.created'
+    | 'tenant.resource_role_assignment.deleted'
+    | 'tenant.resource_access.updated'
+    | 'tenant.resource_access.deleted'
+    | 'tenant.session_policy.created'
+    | 'tenant.session_policy.updated'
+    | 'tenant.session_policy.deleted'
+    | 'tenant.session_revocation.started'
+    | 'tenant.third_party_app_policy.updated'
+    | 'tenant.user.added'
+    | 'tenant.user.updated'
+    | 'tenant.user.removed'
+    | 'tenant.user.looked_up'
+    | 'tenant.user.invited'
+    | 'tenant.membership.revoked'
+    | 'tenant.api_organization_invite.upserted'
+    | 'tenant.api_organization_invite.deleted'
+    | 'tenant.chatgpt_workspace_invite.upserted'
+    | 'tenant.membership.accepted'
+    | 'tenant.membership.declined'
+    | 'tenant.workspace_invite_email_settings.updated';
 
   /**
    * The actor who performed the audit logged action.
@@ -1834,6 +1918,90 @@ export interface AuditLogListParams extends ConversationCursorPageParams {
     | 'user.added'
     | 'user.updated'
     | 'user.deleted'
+    | 'tenant.metadata.updated'
+    | 'tenant.microsoft_entra_mapping.upserted'
+    | 'tenant.microsoft_entra_mapping.deleted'
+    | 'tenant.workload_identity.provider.created'
+    | 'tenant.workload_identity.provider.updated'
+    | 'tenant.workload_identity.provider.archived'
+    | 'tenant.workload_identity.mapping.created'
+    | 'tenant.workload_identity.mapping.updated'
+    | 'tenant.workload_identity.mapping.archived'
+    | 'tenant.workload_identity.binding.created'
+    | 'tenant.workload_identity.principal.provisioned'
+    | 'tenant.admin_api_key.created'
+    | 'tenant.admin_api_key.updated'
+    | 'tenant.admin_api_key.deleted'
+    | 'tenant.project_api_key.created'
+    | 'tenant.chatgpt_access_token.revoked'
+    | 'tenant.migration.completed'
+    | 'tenant.sso.migrated'
+    | 'tenant.domains.migrated'
+    | 'tenant.sso_connection.created'
+    | 'tenant.sso_connection.updated'
+    | 'tenant.sso_connection.deleted'
+    | 'tenant.sso_connection.setup.started'
+    | 'tenant.policy.created'
+    | 'tenant.policy.updated'
+    | 'tenant.policy.deleted'
+    | 'tenant.policy.attached'
+    | 'tenant.policy.detached'
+    | 'tenant.principal_authentication_policy.resolved'
+    | 'tenant.scim.setup.started'
+    | 'tenant.scim.deletion.requested'
+    | 'tenant.scim.directory.created'
+    | 'tenant.product_access_policy.updated'
+    | 'tenant.resource_share_grant.created'
+    | 'tenant.resource_share_grant.updated'
+    | 'tenant.resource_share_grant.accepted'
+    | 'tenant.resource_share_grant.declined'
+    | 'tenant.resource_share_grant.revoked'
+    | 'tenant.resource_share_grant.deleted'
+    | 'tenant.service_account.updated'
+    | 'tenant.service_account.deleted'
+    | 'tenant.service_account.token.revoked'
+    | 'tenant.billing.overage_limit.updated'
+    | 'tenant.billing.alerts.updated'
+    | 'tenant.billing.info.updated'
+    | 'tenant.usage_limit.workspace.updated'
+    | 'tenant.usage_limit.group.updated'
+    | 'tenant.usage_limit.user.updated'
+    | 'tenant.usage_limit.increase_request.updated'
+    | 'tenant.usage_limit.increase_request.resolved'
+    | 'tenant.group.created'
+    | 'tenant.group.updated'
+    | 'tenant.group.deleted'
+    | 'tenant.group.member.added'
+    | 'tenant.group.member.removed'
+    | 'tenant.migration_rollout.status.updated'
+    | 'tenant.migration_rollout.tier.updated'
+    | 'tenant.role.metadata.updated'
+    | 'tenant.custom_role.created'
+    | 'tenant.custom_role.updated'
+    | 'tenant.custom_role.deleted'
+    | 'tenant.role_assignment.created'
+    | 'tenant.role_assignment.deleted'
+    | 'tenant.resource_role_assignment.created'
+    | 'tenant.resource_role_assignment.deleted'
+    | 'tenant.resource_access.updated'
+    | 'tenant.resource_access.deleted'
+    | 'tenant.session_policy.created'
+    | 'tenant.session_policy.updated'
+    | 'tenant.session_policy.deleted'
+    | 'tenant.session_revocation.started'
+    | 'tenant.third_party_app_policy.updated'
+    | 'tenant.user.added'
+    | 'tenant.user.updated'
+    | 'tenant.user.removed'
+    | 'tenant.user.looked_up'
+    | 'tenant.user.invited'
+    | 'tenant.membership.revoked'
+    | 'tenant.api_organization_invite.upserted'
+    | 'tenant.api_organization_invite.deleted'
+    | 'tenant.chatgpt_workspace_invite.upserted'
+    | 'tenant.membership.accepted'
+    | 'tenant.membership.declined'
+    | 'tenant.workspace_invite_email_settings.updated'
   >;
 
   /**

package/src/resources/admin/organization/projects/index.ts

@@ -78,7 +78,7 @@ export {
   type ServiceAccountListParams,
   type ServiceAccountDeleteParams,
   type ProjectServiceAccountsPage,
-} from './service-accounts';
+} from './service-accounts/index';
 export {
   SpendAlerts,
   type ProjectSpendAlert,

package/src/resources/admin/organization/projects/projects.ts

@@ -57,19 +57,6 @@ import {
   RoleUpdateParams,
   Roles,
 } from './roles';
-import * as ServiceAccountsAPI from './service-accounts';
-import {
-  ProjectServiceAccount,
-  ProjectServiceAccountsPage,
-  ServiceAccountCreateParams,
-  ServiceAccountCreateResponse,
-  ServiceAccountDeleteParams,
-  ServiceAccountDeleteResponse,
-  ServiceAccountListParams,
-  ServiceAccountRetrieveParams,
-  ServiceAccountUpdateParams,
-  ServiceAccounts,
-} from './service-accounts';
 import * as SpendAlertsAPI from './spend-alerts';
 import {
   ProjectSpendAlert,
@@ -93,6 +80,19 @@ import {
   ProjectGroup,
   ProjectGroupsPage,
 } from './groups/groups';
+import * as ServiceAccountsAPI from './service-accounts/service-accounts';
+import {
+  ProjectServiceAccount,
+  ProjectServiceAccountsPage,
+  ServiceAccountCreateParams,
+  ServiceAccountCreateResponse,
+  ServiceAccountDeleteParams,
+  ServiceAccountDeleteResponse,
+  ServiceAccountListParams,
+  ServiceAccountRetrieveParams,
+  ServiceAccountUpdateParams,
+  ServiceAccounts,
+} from './service-accounts/service-accounts';
 import * as UsersAPI from './users/users';
 import {
   ProjectUser,

package/src/resources/admin/organization/projects/service-accounts/api-keys.ts

@@ -0,0 +1,80 @@
+// File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
+
+import { APIResource } from '../../../../../core/resource';
+import { APIPromise } from '../../../../../core/api-promise';
+import { RequestOptions } from '../../../../../internal/request-options';
+import { path } from '../../../../../internal/utils/path';
+
+export class APIKeys extends APIResource {
+  /**
+   * Creates an API key for a service account in the project.
+   *
+   * @example
+   * ```ts
+   * const apiKey =
+   *   await client.admin.organization.projects.serviceAccounts.apiKeys.create(
+   *     'service_account_id',
+   *     { project_id: 'project_id' },
+   *   );
+   * ```
+   */
+  create(
+    serviceAccountID: string,
+    params: APIKeyCreateParams,
+    options?: RequestOptions,
+  ): APIPromise<APIKeyCreateResponse> {
+    const { project_id, ...body } = params;
+    return this._client.post(
+      path`/organization/projects/${project_id}/service_accounts/${serviceAccountID}/api_keys`,
+      { body, ...options, __security: { adminAPIKeyAuth: true } },
+    );
+  }
+}
+
+export interface APIKeyCreateResponse {
+  /**
+   * The identifier of the API key.
+   */
+  id: string;
+
+  /**
+   * The Unix timestamp (in seconds) when the API key was created.
+   */
+  created_at: number;
+
+  /**
+   * The name of the API key.
+   */
+  name: string;
+
+  /**
+   * The object type, which is always `organization.project.service_account.api_key`
+   */
+  object: 'organization.project.service_account.api_key';
+
+  /**
+   * The unredacted API key value.
+   */
+  value: string;
+}
+
+export interface APIKeyCreateParams {
+  /**
+   * Path param: The ID of the project.
+   */
+  project_id: string;
+
+  /**
+   * Body param: API key name.
+   */
+  name?: string;
+
+  /**
+   * Body param: API key scopes.
+   */
+  scopes?: Array<string>;
+}
+
+export declare namespace APIKeys {
+  export { type APIKeyCreateResponse as APIKeyCreateResponse, type APIKeyCreateParams as APIKeyCreateParams };
+}

package/src/resources/admin/organization/projects/service-accounts/index.ts

@@ -0,0 +1,15 @@
+// File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
+
+export { APIKeys, type APIKeyCreateResponse, type APIKeyCreateParams } from './api-keys';
+export {
+  ServiceAccounts,
+  type ProjectServiceAccount,
+  type ServiceAccountCreateResponse,
+  type ServiceAccountDeleteResponse,
+  type ServiceAccountCreateParams,
+  type ServiceAccountRetrieveParams,
+  type ServiceAccountUpdateParams,
+  type ServiceAccountListParams,
+  type ServiceAccountDeleteParams,
+  type ProjectServiceAccountsPage,
+} from './service-accounts';

package/src/resources/admin/organization/projects/service-accounts/service-accounts.ts

@@ -0,0 +1,284 @@
+// File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
+
+import { APIResource } from '../../../../../core/resource';
+import * as APIKeysAPI from './api-keys';
+import { APIKeyCreateParams, APIKeyCreateResponse, APIKeys } from './api-keys';
+import { APIPromise } from '../../../../../core/api-promise';
+import {
+  ConversationCursorPage,
+  type ConversationCursorPageParams,
+  PagePromise,
+} from '../../../../../core/pagination';
+import { RequestOptions } from '../../../../../internal/request-options';
+import { path } from '../../../../../internal/utils/path';
+
+export class ServiceAccounts extends APIResource {
+  apiKeys: APIKeysAPI.APIKeys = new APIKeysAPI.APIKeys(this._client);
+
+  /**
+   * Creates a new service account in the project. By default, this also returns an
+   * unredacted API key for the service account.
+   *
+   * @example
+   * ```ts
+   * const serviceAccount =
+   *   await client.admin.organization.projects.serviceAccounts.create(
+   *     'project_id',
+   *     { name: 'name' },
+   *   );
+   * ```
+   */
+  create(
+    projectID: string,
+    body: ServiceAccountCreateParams,
+    options?: RequestOptions,
+  ): APIPromise<ServiceAccountCreateResponse> {
+    return this._client.post(path`/organization/projects/${projectID}/service_accounts`, {
+      body,
+      ...options,
+      __security: { adminAPIKeyAuth: true },
+    });
+  }
+
+  /**
+   * Retrieves a service account in the project.
+   *
+   * @example
+   * ```ts
+   * const projectServiceAccount =
+   *   await client.admin.organization.projects.serviceAccounts.retrieve(
+   *     'service_account_id',
+   *     { project_id: 'project_id' },
+   *   );
+   * ```
+   */
+  retrieve(
+    serviceAccountID: string,
+    params: ServiceAccountRetrieveParams,
+    options?: RequestOptions,
+  ): APIPromise<ProjectServiceAccount> {
+    const { project_id } = params;
+    return this._client.get(path`/organization/projects/${project_id}/service_accounts/${serviceAccountID}`, {
+      ...options,
+      __security: { adminAPIKeyAuth: true },
+    });
+  }
+
+  /**
+   * Updates a service account in the project.
+   *
+   * @example
+   * ```ts
+   * const projectServiceAccount =
+   *   await client.admin.organization.projects.serviceAccounts.update(
+   *     'service_account_id',
+   *     { project_id: 'project_id' },
+   *   );
+   * ```
+   */
+  update(
+    serviceAccountID: string,
+    params: ServiceAccountUpdateParams,
+    options?: RequestOptions,
+  ): APIPromise<ProjectServiceAccount> {
+    const { project_id, ...body } = params;
+    return this._client.post(
+      path`/organization/projects/${project_id}/service_accounts/${serviceAccountID}`,
+      { body, ...options, __security: { adminAPIKeyAuth: true } },
+    );
+  }
+
+  /**
+   * Returns a list of service accounts in the project.
+   *
+   * @example
+   * ```ts
+   * // Automatically fetches more pages as needed.
+   * for await (const projectServiceAccount of client.admin.organization.projects.serviceAccounts.list(
+   *   'project_id',
+   * )) {
+   *   // ...
+   * }
+   * ```
+   */
+  list(
+    projectID: string,
+    query: ServiceAccountListParams | null | undefined = {},
+    options?: RequestOptions,
+  ): PagePromise<ProjectServiceAccountsPage, ProjectServiceAccount> {
+    return this._client.getAPIList(
+      path`/organization/projects/${projectID}/service_accounts`,
+      ConversationCursorPage<ProjectServiceAccount>,
+      { query, ...options, __security: { adminAPIKeyAuth: true } },
+    );
+  }
+
+  /**
+   * Deletes a service account from the project.
+   *
+   * Returns confirmation of service account deletion, or an error if the project is
+   * archived (archived projects have no service accounts).
+   *
+   * @example
+   * ```ts
+   * const serviceAccount =
+   *   await client.admin.organization.projects.serviceAccounts.delete(
+   *     'service_account_id',
+   *     { project_id: 'project_id' },
+   *   );
+   * ```
+   */
+  delete(
+    serviceAccountID: string,
+    params: ServiceAccountDeleteParams,
+    options?: RequestOptions,
+  ): APIPromise<ServiceAccountDeleteResponse> {
+    const { project_id } = params;
+    return this._client.delete(
+      path`/organization/projects/${project_id}/service_accounts/${serviceAccountID}`,
+      { ...options, __security: { adminAPIKeyAuth: true } },
+    );
+  }
+}
+
+export type ProjectServiceAccountsPage = ConversationCursorPage<ProjectServiceAccount>;
+
+/**
+ * Represents an individual service account in a project.
+ */
+export interface ProjectServiceAccount {
+  /**
+   * The identifier, which can be referenced in API endpoints
+   */
+  id: string;
+
+  /**
+   * The Unix timestamp (in seconds) of when the service account was created
+   */
+  created_at: number;
+
+  /**
+   * The name of the service account
+   */
+  name: string;
+
+  /**
+   * The object type, which is always `organization.project.service_account`
+   */
+  object: 'organization.project.service_account';
+
+  /**
+   * `owner`, `member`, or `none`
+   */
+  role: 'owner' | 'member' | 'none';
+}
+
+export interface ServiceAccountCreateResponse {
+  id: string;
+
+  api_key: ServiceAccountCreateResponse.APIKey | null;
+
+  created_at: number;
+
+  name: string;
+
+  object: 'organization.project.service_account';
+
+  /**
+   * Service accounts created with default project membership have role `member`.
+   * Accounts created with `create_service_account_only` have role `none`.
+   */
+  role: 'member' | 'none';
+}
+
+export namespace ServiceAccountCreateResponse {
+  export interface APIKey {
+    id: string;
+
+    created_at: number;
+
+    name: string;
+
+    /**
+     * The object type, which is always `organization.project.service_account.api_key`
+     */
+    object: 'organization.project.service_account.api_key';
+
+    value: string;
+  }
+}
+
+export interface ServiceAccountDeleteResponse {
+  id: string;
+
+  deleted: boolean;
+
+  object: 'organization.project.service_account.deleted';
+}
+
+export interface ServiceAccountCreateParams {
+  /**
+   * The name of the service account being created.
+   */
+  name: string;
+
+  /**
+   * Create the service account without default roles or an API key.
+   */
+  create_service_account_only?: boolean | null;
+}
+
+export interface ServiceAccountRetrieveParams {
+  /**
+   * The ID of the project.
+   */
+  project_id: string;
+}
+
+export interface ServiceAccountUpdateParams {
+  /**
+   * Path param: The ID of the project.
+   */
+  project_id: string;
+
+  /**
+   * Body param: The updated service account name.
+   */
+  name?: string;
+
+  /**
+   * Body param: The updated service account role.
+   */
+  role?: 'member' | 'owner';
+}
+
+export interface ServiceAccountListParams extends ConversationCursorPageParams {}
+
+export interface ServiceAccountDeleteParams {
+  /**
+   * The ID of the project.
+   */
+  project_id: string;
+}
+
+ServiceAccounts.APIKeys = APIKeys;
+
+export declare namespace ServiceAccounts {
+  export {
+    type ProjectServiceAccount as ProjectServiceAccount,
+    type ServiceAccountCreateResponse as ServiceAccountCreateResponse,
+    type ServiceAccountDeleteResponse as ServiceAccountDeleteResponse,
+    type ProjectServiceAccountsPage as ProjectServiceAccountsPage,
+    type ServiceAccountCreateParams as ServiceAccountCreateParams,
+    type ServiceAccountRetrieveParams as ServiceAccountRetrieveParams,
+    type ServiceAccountUpdateParams as ServiceAccountUpdateParams,
+    type ServiceAccountListParams as ServiceAccountListParams,
+    type ServiceAccountDeleteParams as ServiceAccountDeleteParams,
+  };
+
+  export {
+    APIKeys as APIKeys,
+    type APIKeyCreateResponse as APIKeyCreateResponse,
+    type APIKeyCreateParams as APIKeyCreateParams,
+  };
+}