sim 2.2.7-preview.202.1 → 2.2.7

package/dist/generated/v2-api.d.ts

@@ -130,6 +130,24 @@ type ActivateWorkflowVersionResponseRef5 = {
 export type ActivateWorkflowVersionResponse = {
     data: ActivateWorkflowVersionResponseRef4;
 };
+/** `POST /api/v2/organizations/[organizationId]/domains` */
+export type AddOrganizationDomainParams = {
+    organizationId: string;
+};
+export type AddOrganizationDomainQuery = Record<string, unknown>;
+export type AddOrganizationDomainBody = {
+    domain: string;
+};
+export type AddOrganizationDomainResponse = {
+    data: {
+        id: string;
+        domain: string;
+        status: 'pending' | 'verified';
+        verifiedAt: string | null;
+        challengeHost: string;
+        txtRecordValue: string | null;
+    };
+};
 /** `POST /api/v2/organizations/[organizationId]/permission-groups/[groupId]/members` */
 export type AddPermissionGroupMemberParams = {
     organizationId: string;
@@ -2854,6 +2872,18 @@ type DeleteSkillResponseRef0 = {
 export type DeleteSkillResponse = {
     data: DeleteSkillResponseRef0;
 };
+/** `DELETE /api/v2/organizations/[organizationId]/sso/providers/[providerId]` */
+export type DeleteSsoProviderParams = {
+    organizationId: string;
+    providerId: string;
+};
+export type DeleteSsoProviderQuery = Record<string, unknown>;
+export type DeleteSsoProviderResponse = {
+    data: {
+        providerId: string;
+        deleted: true;
+    };
+};
 /** `DELETE /api/v2/tables/[tableId]` */
 export type DeleteTableParams = {
     tableId: string;
@@ -4559,6 +4589,39 @@ type GetSkillResponseRef0 = {
 export type GetSkillResponse = {
     data: GetSkillResponseRef0;
 };
+/** `GET /api/v2/organizations/[organizationId]/sso/policy` */
+export type GetSsoPolicyParams = {
+    organizationId: string;
+};
+export type GetSsoPolicyQuery = Record<string, unknown>;
+export type GetSsoPolicyResponse = {
+    data: {
+        requireSso: boolean;
+        hasVerifiedProvider: boolean;
+        isEnforced: boolean;
+    };
+};
+/** `GET /api/v2/organizations/[organizationId]/sso/providers/[providerId]` */
+export type GetSsoProviderParams = {
+    organizationId: string;
+    providerId: string;
+};
+export type GetSsoProviderQuery = Record<string, unknown>;
+export type GetSsoProviderResponse = {
+    data: {
+        id: string;
+        providerId: string;
+        providerType: 'oidc' | 'saml';
+        domain: string;
+        domainKey: string;
+        issuer: string;
+        oidcConfig: string | null;
+        samlConfig: string | null;
+        jitProvisioningEnabled: boolean;
+        domainVerified: boolean;
+        isPrimary: boolean;
+    };
+};
 /** `GET /api/v2/tables/[tableId]` */
 export type GetTableParams = {
     tableId: string;
@@ -5602,6 +5665,31 @@ export type ListConnectorTypesResponse = {
     data: Array<ListConnectorTypesResponseRef0 | ListConnectorTypesResponseRef2>;
     nextCursor: string | null;
 };
+/** `GET /api/v2/credentials/[credentialId]/members` */
+export type ListCredentialMembersParams = {
+    credentialId: string;
+};
+export type ListCredentialMembersQuery = {
+    workspaceId: string;
+    limit?: number;
+    cursor?: string;
+    sortBy?: 'email' | 'name';
+    sortOrder?: 'asc' | 'desc';
+};
+export type ListCredentialMembersResponse = {
+    data: Array<{
+        id: string;
+        userId: string;
+        role: 'admin' | 'member';
+        status: 'active' | 'pending' | 'revoked';
+        joinedAt: string | null;
+        userName: string | null;
+        userEmail: string | null;
+        userImage: string | null;
+        roleSource: 'explicit' | 'workspace-admin';
+    }>;
+    nextCursor: string | null;
+};
 /** `GET /api/v2/credentials/providers` */
 export type ListCredentialProvidersQuery = {
     workspaceId: string;
@@ -6374,6 +6462,27 @@ export type ListOrganizationAccessRequestsResponse = {
     data: Array<ListOrganizationAccessRequestsResponseRef0>;
     nextCursor: string | null;
 };
+/** `GET /api/v2/organizations/[organizationId]/domains` */
+export type ListOrganizationDomainsParams = {
+    organizationId: string;
+};
+export type ListOrganizationDomainsQuery = {
+    limit?: number;
+    cursor?: string;
+    sortBy?: 'domain';
+    sortOrder?: 'asc' | 'desc';
+};
+export type ListOrganizationDomainsResponse = {
+    data: Array<{
+        id: string;
+        domain: string;
+        status: 'pending' | 'verified';
+        verifiedAt: string | null;
+        challengeHost: string;
+        txtRecordValue: string | null;
+    }>;
+    nextCursor: string | null;
+};
 /** `GET /api/v2/organizations/[organizationId]/invitations` */
 export type ListOrganizationInvitationsParams = {
     organizationId: string;
@@ -6722,6 +6831,32 @@ export type ListSkillsResponse = {
     data: Array<ListSkillsResponseRef0>;
     nextCursor: string | null;
 };
+/** `GET /api/v2/organizations/[organizationId]/sso/providers` */
+export type ListSsoProvidersParams = {
+    organizationId: string;
+};
+export type ListSsoProvidersQuery = {
+    limit?: number;
+    cursor?: string;
+    sortBy?: 'providerId' | 'domain';
+    sortOrder?: 'asc' | 'desc';
+};
+export type ListSsoProvidersResponse = {
+    data: Array<{
+        id: string;
+        providerId: string;
+        providerType: 'oidc' | 'saml';
+        domain: string;
+        domainKey: string;
+        issuer: string;
+        oidcConfig: string | null;
+        samlConfig: string | null;
+        jitProvisioningEnabled: boolean;
+        domainVerified: boolean;
+        isPrimary: boolean;
+    }>;
+    nextCursor: string | null;
+};
 /** `GET /api/v2/tables/[tableId]/dispatches` */
 export type ListTableDispatchesParams = {
     tableId: string;
@@ -8162,6 +8297,32 @@ type RelocateWorkflowFolderResponseRef0 = {
 export type RelocateWorkflowFolderResponse = {
     data: RelocateWorkflowFolderResponseRef0;
 };
+/** `DELETE /api/v2/credentials/[credentialId]/members/[userId]` */
+export type RemoveCredentialMemberParams = {
+    credentialId: string;
+    userId: string;
+};
+export type RemoveCredentialMemberQuery = {
+    workspaceId: string;
+};
+export type RemoveCredentialMemberResponse = {
+    data: {
+        userId: string;
+        revoked: true;
+    };
+};
+/** `DELETE /api/v2/organizations/[organizationId]/domains/[domainId]` */
+export type RemoveOrganizationDomainParams = {
+    organizationId: string;
+    domainId: string;
+};
+export type RemoveOrganizationDomainQuery = Record<string, unknown>;
+export type RemoveOrganizationDomainResponse = {
+    data: {
+        id: string;
+        deleted: true;
+    };
+};
 /** `DELETE /api/v2/organizations/[organizationId]/members/[userId]` */
 export type RemoveOrganizationMemberParams = {
     organizationId: string;
@@ -8922,6 +9083,61 @@ type RunRowEnrichmentResponseRef0 = {
 export type RunRowEnrichmentResponse = {
     data: RunRowEnrichmentResponseRef0;
 };
+/** `POST /api/v2/organizations/[organizationId]/sso/providers` */
+export type SaveSsoProviderParams = {
+    organizationId: string;
+};
+export type SaveSsoProviderQuery = Record<string, unknown>;
+export type SaveSsoProviderBody = {
+    providerType: 'oidc';
+    providerId: string;
+    issuer: string;
+    domain: string;
+    jitProvisioningEnabled?: boolean;
+    mapping?: {
+        id?: string;
+        email?: string;
+        name?: string;
+        image?: string;
+    };
+    clientId: string;
+    clientSecret: string;
+    scopes?: Array<string>;
+    pkce?: boolean;
+    authorizationEndpoint?: string;
+    tokenEndpoint?: string;
+    userInfoEndpoint?: string;
+    skipUserInfoEndpoint?: boolean;
+    jwksEndpoint?: string;
+} | {
+    providerType: 'saml';
+    providerId: string;
+    issuer: string;
+    domain: string;
+    jitProvisioningEnabled?: boolean;
+    mapping?: {
+        id?: string;
+        email?: string;
+        name?: string;
+        image?: string;
+    };
+    entryPoint: string;
+    cert: string;
+    callbackUrl?: string;
+    audience?: string;
+    wantAssertionsSigned?: boolean;
+    signatureAlgorithm?: string;
+    digestAlgorithm?: string;
+    identifierFormat?: string;
+    idpMetadata?: string;
+};
+export type SaveSsoProviderResponse = {
+    data: {
+        providerId: string;
+        providerType: 'oidc' | 'saml';
+        created: boolean;
+    };
+};
 /** `GET /api/v2/files/search` */
 export type SearchFileContentQuery = {
     workspaceId: string;
@@ -9038,6 +9254,19 @@ type SearchTableRowsResponseRef1 = {
 export type SearchTableRowsResponse = {
     data: SearchTableRowsResponseRef1;
 };
+/** `POST /api/v2/organizations/[organizationId]/sso/providers/[providerId]/primary` */
+export type SetPrimarySsoProviderParams = {
+    organizationId: string;
+    providerId: string;
+};
+export type SetPrimarySsoProviderQuery = Record<string, unknown>;
+export type SetPrimarySsoProviderBody = Record<string, unknown>;
+export type SetPrimarySsoProviderResponse = {
+    data: {
+        providerId: string;
+        domain: string;
+    };
+};
 /** `PUT /api/v2/secrets/[name]` */
 export type SetSecretParams = {
     name: string;
@@ -9815,6 +10044,21 @@ type UpdateSkillResponseRef0 = {
 export type UpdateSkillResponse = {
     data: UpdateSkillResponseRef0;
 };
+/** `PATCH /api/v2/organizations/[organizationId]/sso/policy` */
+export type UpdateSsoPolicyParams = {
+    organizationId: string;
+};
+export type UpdateSsoPolicyQuery = Record<string, unknown>;
+export type UpdateSsoPolicyBody = {
+    requireSso: boolean;
+};
+export type UpdateSsoPolicyResponse = {
+    data: {
+        requireSso: boolean;
+        hasVerifiedProvider: boolean;
+        isEnforced: boolean;
+    };
+};
 /** `PATCH /api/v2/tables/[tableId]` */
 export type UpdateTableParams = {
     tableId: string;
@@ -10246,6 +10490,24 @@ type UploadKnowledgeDocumentResponseRef0 = {
 export type UploadKnowledgeDocumentResponse = {
     data: UploadKnowledgeDocumentResponseRef0;
 };
+/** `POST /api/v2/credentials/[credentialId]/members` */
+export type UpsertCredentialMemberParams = {
+    credentialId: string;
+};
+export type UpsertCredentialMemberQuery = {
+    workspaceId: string;
+};
+export type UpsertCredentialMemberBody = {
+    userId: string;
+    role: 'admin' | 'member';
+};
+export type UpsertCredentialMemberResponse = {
+    data: {
+        userId: string;
+        role: 'admin' | 'member';
+        created: boolean;
+    };
+};
 /** `PATCH /api/v2/files/[fileId]/share` */
 export type UpsertFileShareParams = {
     fileId: string;
@@ -10307,6 +10569,23 @@ type UpsertTableRowResponseRef3 = {
 export type UpsertTableRowResponse = {
     data: UpsertTableRowResponseRef3;
 };
+/** `POST /api/v2/organizations/[organizationId]/domains/[domainId]/verify` */
+export type VerifyOrganizationDomainParams = {
+    organizationId: string;
+    domainId: string;
+};
+export type VerifyOrganizationDomainQuery = Record<string, unknown>;
+export type VerifyOrganizationDomainBody = Record<string, unknown>;
+export type VerifyOrganizationDomainResponse = {
+    data: {
+        id: string;
+        domain: string;
+        status: 'pending' | 'verified';
+        verifiedAt: string | null;
+        challengeHost: string;
+        txtRecordValue: string | null;
+    };
+};
 /**
  * Every v2 operation, keyed by name.
  *
@@ -10385,6 +10664,24 @@ export declare const V2_OPERATIONS: {
         readonly summary: 'Activate Workflow Version';
         readonly workspaceKeyUnsupported: true;
     };
+    readonly addOrganizationDomain: {
+        readonly method: 'POST';
+        readonly path: '/api/v2/organizations/[organizationId]/domains';
+        readonly pathParams: readonly ['organizationId'];
+        readonly pathParamDocs: {
+            readonly organizationId: 'Organization whose single sign-on settings and verified domains are managed.';
+        };
+        readonly responseMode: 'json';
+        readonly summary: 'Add Organization Domain';
+        readonly workspaceKeyUnsupported: true;
+        readonly body: {
+            readonly domain: {
+                readonly kind: 'string';
+                readonly required: true;
+                readonly describe: 'Domain to claim and verify through a DNS TXT record.';
+            };
+        };
+    };
     readonly addPermissionGroupMember: {
         readonly method: 'POST';
         readonly path: '/api/v2/organizations/[organizationId]/permission-groups/[groupId]/members';
@@ -12345,6 +12642,18 @@ export declare const V2_OPERATIONS: {
             };
         };
     };
+    readonly deleteSsoProvider: {
+        readonly method: 'DELETE';
+        readonly path: '/api/v2/organizations/[organizationId]/sso/providers/[providerId]';
+        readonly pathParams: readonly ['organizationId', 'providerId'];
+        readonly pathParamDocs: {
+            readonly organizationId: 'Organization whose single sign-on settings and verified domains are managed.';
+            readonly providerId: 'Identity provider identifier.';
+        };
+        readonly responseMode: 'json';
+        readonly summary: 'Delete SSO Provider';
+        readonly workspaceKeyUnsupported: true;
+    };
     readonly deleteTable: {
         readonly method: 'DELETE';
         readonly path: '/api/v2/tables/[tableId]';
@@ -13525,6 +13834,29 @@ export declare const V2_OPERATIONS: {
             };
         };
     };
+    readonly getSsoPolicy: {
+        readonly method: 'GET';
+        readonly path: '/api/v2/organizations/[organizationId]/sso/policy';
+        readonly pathParams: readonly ['organizationId'];
+        readonly pathParamDocs: {
+            readonly organizationId: 'Organization whose single sign-on settings and verified domains are managed.';
+        };
+        readonly responseMode: 'json';
+        readonly summary: 'Get SSO Policy';
+        readonly workspaceKeyUnsupported: true;
+    };
+    readonly getSsoProvider: {
+        readonly method: 'GET';
+        readonly path: '/api/v2/organizations/[organizationId]/sso/providers/[providerId]';
+        readonly pathParams: readonly ['organizationId', 'providerId'];
+        readonly pathParamDocs: {
+            readonly organizationId: 'Organization whose single sign-on settings and verified domains are managed.';
+            readonly providerId: 'Identity provider identifier.';
+        };
+        readonly responseMode: 'json';
+        readonly summary: 'Get SSO Provider';
+        readonly workspaceKeyUnsupported: true;
+    };
     readonly getTable: {
         readonly method: 'GET';
         readonly path: '/api/v2/tables/[tableId]';
@@ -14153,6 +14485,45 @@ export declare const V2_OPERATIONS: {
             };
         };
     };
+    readonly listCredentialMembers: {
+        readonly method: 'GET';
+        readonly path: '/api/v2/credentials/[credentialId]/members';
+        readonly pathParams: readonly ['credentialId'];
+        readonly pathParamDocs: {
+            readonly credentialId: 'Credential whose sharing grants are managed.';
+        };
+        readonly responseMode: 'json';
+        readonly summary: 'List Credential Members';
+        readonly workspaceKeyUnsupported: true;
+        readonly query: {
+            readonly workspaceId: {
+                readonly kind: 'string';
+                readonly required: true;
+                readonly describe: 'Workspace expected to own the credential.';
+            };
+            readonly limit: {
+                readonly kind: 'integer';
+                readonly default: 50;
+                readonly describe: 'Maximum credential members to return per page. Must be a whole number from 1 to 100. Defaults to 50.';
+            };
+            readonly cursor: {
+                readonly kind: 'string';
+                readonly describe: 'Opaque cursor from the previous page. Send it back with the same sort and filters; only `limit` may change. Change anything else and pagination must restart without a cursor.';
+            };
+            readonly sortBy: {
+                readonly kind: 'enum';
+                readonly values: readonly ['email', 'name'];
+                readonly default: 'email';
+                readonly describe: 'Field used to sort the result. Sorting by `name` is case-sensitive and follows the storage collation, so do not rely on a case-insensitive order.';
+            };
+            readonly sortOrder: {
+                readonly kind: 'enum';
+                readonly values: readonly ['asc', 'desc'];
+                readonly default: 'asc';
+                readonly describe: 'Sort direction.';
+            };
+        };
+    };
     readonly listCredentialProviders: {
         readonly method: 'GET';
         readonly path: '/api/v2/credentials/providers';
@@ -14986,6 +15357,40 @@ export declare const V2_OPERATIONS: {
             };
         };
     };
+    readonly listOrganizationDomains: {
+        readonly method: 'GET';
+        readonly path: '/api/v2/organizations/[organizationId]/domains';
+        readonly pathParams: readonly ['organizationId'];
+        readonly pathParamDocs: {
+            readonly organizationId: 'Organization whose single sign-on settings and verified domains are managed.';
+        };
+        readonly responseMode: 'json';
+        readonly summary: 'List Organization Domains';
+        readonly workspaceKeyUnsupported: true;
+        readonly query: {
+            readonly limit: {
+                readonly kind: 'integer';
+                readonly default: 50;
+                readonly describe: 'Maximum domain claims to return per page. Must be a whole number from 1 to 100. Defaults to 50.';
+            };
+            readonly cursor: {
+                readonly kind: 'string';
+                readonly describe: 'Opaque cursor from the previous page. Send it back with the same sort and filters; only `limit` may change. Change anything else and pagination must restart without a cursor.';
+            };
+            readonly sortBy: {
+                readonly kind: 'enum';
+                readonly values: readonly ['domain'];
+                readonly default: 'domain';
+                readonly describe: 'Field used to sort the result.';
+            };
+            readonly sortOrder: {
+                readonly kind: 'enum';
+                readonly values: readonly ['asc', 'desc'];
+                readonly default: 'asc';
+                readonly describe: 'Sort direction.';
+            };
+        };
+    };
     readonly listOrganizationInvitations: {
         readonly method: 'GET';
         readonly path: '/api/v2/organizations/[organizationId]/invitations';
@@ -15510,6 +15915,40 @@ export declare const V2_OPERATIONS: {
             };
         };
     };
+    readonly listSsoProviders: {
+        readonly method: 'GET';
+        readonly path: '/api/v2/organizations/[organizationId]/sso/providers';
+        readonly pathParams: readonly ['organizationId'];
+        readonly pathParamDocs: {
+            readonly organizationId: 'Organization whose single sign-on settings and verified domains are managed.';
+        };
+        readonly responseMode: 'json';
+        readonly summary: 'List SSO Providers';
+        readonly workspaceKeyUnsupported: true;
+        readonly query: {
+            readonly limit: {
+                readonly kind: 'integer';
+                readonly default: 50;
+                readonly describe: 'Maximum identity providers to return per page. Must be a whole number from 1 to 100. Defaults to 50.';
+            };
+            readonly cursor: {
+                readonly kind: 'string';
+                readonly describe: 'Opaque cursor from the previous page. Send it back with the same sort and filters; only `limit` may change. Change anything else and pagination must restart without a cursor.';
+            };
+            readonly sortBy: {
+                readonly kind: 'enum';
+                readonly values: readonly ['providerId', 'domain'];
+                readonly default: 'providerId';
+                readonly describe: 'Field used to sort the result.';
+            };
+            readonly sortOrder: {
+                readonly kind: 'enum';
+                readonly values: readonly ['asc', 'desc'];
+                readonly default: 'asc';
+                readonly describe: 'Sort direction.';
+            };
+        };
+    };
     readonly listTableDispatches: {
         readonly method: 'GET';
         readonly path: '/api/v2/tables/[tableId]/dispatches';
@@ -16617,6 +17056,37 @@ export declare const V2_OPERATIONS: {
             };
         };
     };
+    readonly removeCredentialMember: {
+        readonly method: 'DELETE';
+        readonly path: '/api/v2/credentials/[credentialId]/members/[userId]';
+        readonly pathParams: readonly ['credentialId', 'userId'];
+        readonly pathParamDocs: {
+            readonly credentialId: 'Credential whose sharing grants are managed.';
+            readonly userId: 'User whose explicit grant will be revoked.';
+        };
+        readonly responseMode: 'json';
+        readonly summary: 'Remove Credential Member';
+        readonly workspaceKeyUnsupported: true;
+        readonly query: {
+            readonly workspaceId: {
+                readonly kind: 'string';
+                readonly required: true;
+                readonly describe: 'Workspace expected to own the credential.';
+            };
+        };
+    };
+    readonly removeOrganizationDomain: {
+        readonly method: 'DELETE';
+        readonly path: '/api/v2/organizations/[organizationId]/domains/[domainId]';
+        readonly pathParams: readonly ['organizationId', 'domainId'];
+        readonly pathParamDocs: {
+            readonly organizationId: 'Organization whose single sign-on settings and verified domains are managed.';
+            readonly domainId: 'Domain claim owned by this organization.';
+        };
+        readonly responseMode: 'json';
+        readonly summary: 'Remove Organization Domain';
+        readonly workspaceKeyUnsupported: true;
+    };
     readonly removeOrganizationMember: {
         readonly method: 'DELETE';
         readonly path: '/api/v2/organizations/[organizationId]/members/[userId]';
@@ -17089,6 +17559,288 @@ export declare const V2_OPERATIONS: {
             };
         };
     };
+    readonly saveSsoProvider: {
+        readonly method: 'POST';
+        readonly path: '/api/v2/organizations/[organizationId]/sso/providers';
+        readonly pathParams: readonly ['organizationId'];
+        readonly pathParamDocs: {
+            readonly organizationId: 'Organization whose single sign-on settings and verified domains are managed.';
+        };
+        readonly responseMode: 'json';
+        readonly summary: 'Save SSO Provider';
+        readonly workspaceKeyUnsupported: true;
+        readonly body: {
+            readonly providerType: {
+                readonly kind: 'enum';
+                readonly required: true;
+                readonly values: readonly ['oidc', 'saml'];
+                readonly describe: 'oidc: Configure an OpenID Connect identity provider. saml: Configure a SAML identity provider.';
+            };
+            readonly providerId: {
+                readonly kind: 'string';
+                readonly required: true;
+                readonly describe: 'Globally unique provider ID; saving an existing provider replaces its supplied configuration.';
+            };
+            readonly issuer: {
+                readonly kind: 'string';
+                readonly required: true;
+                readonly describe: 'Identity provider issuer URL.';
+            };
+            readonly domain: {
+                readonly kind: 'string';
+                readonly required: true;
+                readonly describe: 'Email domain already verified by this organization.';
+            };
+            readonly jitProvisioningEnabled: {
+                readonly kind: 'boolean';
+                readonly default: true;
+                readonly describe: 'Allow SSO sign-in to provision organization membership, subject to eligibility and available seats.';
+            };
+            readonly mapping: {
+                readonly kind: 'object';
+                readonly default: {
+                    readonly id: 'sub';
+                    readonly email: 'email';
+                    readonly name: 'name';
+                    readonly image: 'picture';
+                };
+                readonly describe: 'Identity-provider claims mapped to user fields.';
+            };
+            readonly clientId: {
+                readonly kind: 'string';
+                readonly describe: 'Identity provider client identifier. Available when providerType is oidc. Required when providerType is oidc.';
+            };
+            readonly clientSecret: {
+                readonly kind: 'string';
+                readonly describe: 'Write-only client secret; the redacted marker from Get SSO Provider preserves an existing secret. Available when providerType is oidc. Required when providerType is oidc.';
+            };
+            readonly scopes: {
+                readonly kind: 'array';
+                readonly default: readonly ['openid', 'profile', 'email'];
+                readonly describe: 'OIDC scopes; offline_access is omitted. Available when providerType is oidc.';
+            };
+            readonly pkce: {
+                readonly kind: 'boolean';
+                readonly default: true;
+                readonly describe: 'Use PKCE for the authorization flow. Available when providerType is oidc.';
+            };
+            readonly authorizationEndpoint: {
+                readonly kind: 'string';
+                readonly describe: 'Optional authorization endpoint; otherwise resolved through issuer discovery. Available when providerType is oidc.';
+            };
+            readonly tokenEndpoint: {
+                readonly kind: 'string';
+                readonly describe: 'Optional token endpoint; otherwise resolved through issuer discovery. Available when providerType is oidc.';
+            };
+            readonly userInfoEndpoint: {
+                readonly kind: 'string';
+                readonly describe: 'Optional UserInfo endpoint. Available when providerType is oidc.';
+            };
+            readonly skipUserInfoEndpoint: {
+                readonly kind: 'boolean';
+                readonly default: false;
+                readonly describe: 'Read identity claims from the ID token instead of calling UserInfo. Available when providerType is oidc.';
+            };
+            readonly jwksEndpoint: {
+                readonly kind: 'string';
+                readonly describe: 'Optional signing-key endpoint; otherwise resolved through issuer discovery. Available when providerType is oidc.';
+            };
+            readonly entryPoint: {
+                readonly kind: 'string';
+                readonly describe: 'Identity provider SAML sign-in endpoint. Available when providerType is saml. Required when providerType is saml.';
+            };
+            readonly cert: {
+                readonly kind: 'string';
+                readonly describe: 'Identity provider signing certificate. Available when providerType is saml. Required when providerType is saml.';
+            };
+            readonly callbackUrl: {
+                readonly kind: 'string';
+                readonly describe: 'SAML callback URL; defaults to this provider’s Sim callback. Available when providerType is saml.';
+            };
+            readonly audience: {
+                readonly kind: 'string';
+                readonly describe: 'SAML audience; omission preserves the saved value. Available when providerType is saml.';
+            };
+            readonly wantAssertionsSigned: {
+                readonly kind: 'boolean';
+                readonly describe: 'Require signed assertions; omission preserves the saved value. Available when providerType is saml.';
+            };
+            readonly signatureAlgorithm: {
+                readonly kind: 'string';
+                readonly describe: 'Signature algorithm accepted by the SAML configuration validator; omission preserves the saved value. Available when providerType is saml.';
+            };
+            readonly digestAlgorithm: {
+                readonly kind: 'string';
+                readonly describe: 'Digest algorithm accepted by the SAML configuration validator; omission preserves the saved value. Available when providerType is saml.';
+            };
+            readonly identifierFormat: {
+                readonly kind: 'string';
+                readonly describe: 'SAML NameID format; omission clears the saved value. Available when providerType is saml.';
+            };
+            readonly idpMetadata: {
+                readonly kind: 'string';
+                readonly describe: 'Identity provider metadata XML; omission clears the saved document. Available when providerType is saml.';
+            };
+        };
+        readonly bodyDiscriminator: {
+            readonly field: 'providerType';
+            readonly variants: {
+                readonly oidc: {
+                    readonly providerType: {
+                        readonly kind: 'string';
+                        readonly required: true;
+                        readonly describe: 'Configure an OpenID Connect identity provider.';
+                    };
+                    readonly providerId: {
+                        readonly kind: 'string';
+                        readonly required: true;
+                        readonly describe: 'Globally unique provider ID; saving an existing provider replaces its supplied configuration.';
+                    };
+                    readonly issuer: {
+                        readonly kind: 'string';
+                        readonly required: true;
+                        readonly describe: 'Identity provider issuer URL.';
+                    };
+                    readonly domain: {
+                        readonly kind: 'string';
+                        readonly required: true;
+                        readonly describe: 'Email domain already verified by this organization.';
+                    };
+                    readonly jitProvisioningEnabled: {
+                        readonly kind: 'boolean';
+                        readonly default: true;
+                        readonly describe: 'Allow SSO sign-in to provision organization membership, subject to eligibility and available seats.';
+                    };
+                    readonly mapping: {
+                        readonly kind: 'object';
+                        readonly default: {
+                            readonly id: 'sub';
+                            readonly email: 'email';
+                            readonly name: 'name';
+                            readonly image: 'picture';
+                        };
+                        readonly describe: 'Identity-provider claims mapped to user fields.';
+                    };
+                    readonly clientId: {
+                        readonly kind: 'string';
+                        readonly required: true;
+                        readonly describe: 'Identity provider client identifier.';
+                    };
+                    readonly clientSecret: {
+                        readonly kind: 'string';
+                        readonly required: true;
+                        readonly describe: 'Write-only client secret; the redacted marker from Get SSO Provider preserves an existing secret.';
+                    };
+                    readonly scopes: {
+                        readonly kind: 'array';
+                        readonly default: readonly ['openid', 'profile', 'email'];
+                        readonly describe: 'OIDC scopes; offline_access is omitted.';
+                    };
+                    readonly pkce: {
+                        readonly kind: 'boolean';
+                        readonly default: true;
+                        readonly describe: 'Use PKCE for the authorization flow.';
+                    };
+                    readonly authorizationEndpoint: {
+                        readonly kind: 'string';
+                        readonly describe: 'Optional authorization endpoint; otherwise resolved through issuer discovery.';
+                    };
+                    readonly tokenEndpoint: {
+                        readonly kind: 'string';
+                        readonly describe: 'Optional token endpoint; otherwise resolved through issuer discovery.';
+                    };
+                    readonly userInfoEndpoint: {
+                        readonly kind: 'string';
+                        readonly describe: 'Optional UserInfo endpoint.';
+                    };
+                    readonly skipUserInfoEndpoint: {
+                        readonly kind: 'boolean';
+                        readonly default: false;
+                        readonly describe: 'Read identity claims from the ID token instead of calling UserInfo.';
+                    };
+                    readonly jwksEndpoint: {
+                        readonly kind: 'string';
+                        readonly describe: 'Optional signing-key endpoint; otherwise resolved through issuer discovery.';
+                    };
+                };
+                readonly saml: {
+                    readonly providerType: {
+                        readonly kind: 'string';
+                        readonly required: true;
+                        readonly describe: 'Configure a SAML identity provider.';
+                    };
+                    readonly providerId: {
+                        readonly kind: 'string';
+                        readonly required: true;
+                        readonly describe: 'Globally unique provider ID; saving an existing provider replaces its supplied configuration.';
+                    };
+                    readonly issuer: {
+                        readonly kind: 'string';
+                        readonly required: true;
+                        readonly describe: 'Identity provider issuer URL.';
+                    };
+                    readonly domain: {
+                        readonly kind: 'string';
+                        readonly required: true;
+                        readonly describe: 'Email domain already verified by this organization.';
+                    };
+                    readonly jitProvisioningEnabled: {
+                        readonly kind: 'boolean';
+                        readonly default: true;
+                        readonly describe: 'Allow SSO sign-in to provision organization membership, subject to eligibility and available seats.';
+                    };
+                    readonly mapping: {
+                        readonly kind: 'object';
+                        readonly default: {
+                            readonly id: 'sub';
+                            readonly email: 'email';
+                            readonly name: 'name';
+                            readonly image: 'picture';
+                        };
+                        readonly describe: 'Identity-provider claims mapped to user fields.';
+                    };
+                    readonly entryPoint: {
+                        readonly kind: 'string';
+                        readonly required: true;
+                        readonly describe: 'Identity provider SAML sign-in endpoint.';
+                    };
+                    readonly cert: {
+                        readonly kind: 'string';
+                        readonly required: true;
+                        readonly describe: 'Identity provider signing certificate.';
+                    };
+                    readonly callbackUrl: {
+                        readonly kind: 'string';
+                        readonly describe: 'SAML callback URL; defaults to this provider’s Sim callback.';
+                    };
+                    readonly audience: {
+                        readonly kind: 'string';
+                        readonly describe: 'SAML audience; omission preserves the saved value.';
+                    };
+                    readonly wantAssertionsSigned: {
+                        readonly kind: 'boolean';
+                        readonly describe: 'Require signed assertions; omission preserves the saved value.';
+                    };
+                    readonly signatureAlgorithm: {
+                        readonly kind: 'string';
+                        readonly describe: 'Signature algorithm accepted by the SAML configuration validator; omission preserves the saved value.';
+                    };
+                    readonly digestAlgorithm: {
+                        readonly kind: 'string';
+                        readonly describe: 'Digest algorithm accepted by the SAML configuration validator; omission preserves the saved value.';
+                    };
+                    readonly identifierFormat: {
+                        readonly kind: 'string';
+                        readonly describe: 'SAML NameID format; omission clears the saved value.';
+                    };
+                    readonly idpMetadata: {
+                        readonly kind: 'string';
+                        readonly describe: 'Identity provider metadata XML; omission clears the saved document.';
+                    };
+                };
+            };
+        };
+    };
     readonly searchFileContent: {
         readonly method: 'GET';
         readonly path: '/api/v2/files/search';
@@ -17208,6 +17960,18 @@ export declare const V2_OPERATIONS: {
             };
         };
     };
+    readonly setPrimarySsoProvider: {
+        readonly method: 'POST';
+        readonly path: '/api/v2/organizations/[organizationId]/sso/providers/[providerId]/primary';
+        readonly pathParams: readonly ['organizationId', 'providerId'];
+        readonly pathParamDocs: {
+            readonly organizationId: 'Organization whose single sign-on settings and verified domains are managed.';
+            readonly providerId: 'Identity provider identifier.';
+        };
+        readonly responseMode: 'json';
+        readonly summary: 'Set Primary SSO Provider';
+        readonly workspaceKeyUnsupported: true;
+    };
     readonly setSecret: {
         readonly method: 'PUT';
         readonly path: '/api/v2/secrets/[name]';
@@ -17999,6 +18763,24 @@ export declare const V2_OPERATIONS: {
             };
         };
     };
+    readonly updateSsoPolicy: {
+        readonly method: 'PATCH';
+        readonly path: '/api/v2/organizations/[organizationId]/sso/policy';
+        readonly pathParams: readonly ['organizationId'];
+        readonly pathParamDocs: {
+            readonly organizationId: 'Organization whose single sign-on settings and verified domains are managed.';
+        };
+        readonly responseMode: 'json';
+        readonly summary: 'Update SSO Policy';
+        readonly workspaceKeyUnsupported: true;
+        readonly body: {
+            readonly requireSso: {
+                readonly kind: 'boolean';
+                readonly required: true;
+                readonly describe: 'Require organization SSO on future sign-ins; existing sessions remain active.';
+            };
+        };
+    };
     readonly updateTable: {
         readonly method: 'PATCH';
         readonly path: '/api/v2/tables/[tableId]';
@@ -18333,6 +19115,37 @@ export declare const V2_OPERATIONS: {
             };
         };
     };
+    readonly upsertCredentialMember: {
+        readonly method: 'POST';
+        readonly path: '/api/v2/credentials/[credentialId]/members';
+        readonly pathParams: readonly ['credentialId'];
+        readonly pathParamDocs: {
+            readonly credentialId: 'Credential whose sharing grants are managed.';
+        };
+        readonly responseMode: 'json';
+        readonly summary: 'Upsert Credential Member';
+        readonly workspaceKeyUnsupported: true;
+        readonly query: {
+            readonly workspaceId: {
+                readonly kind: 'string';
+                readonly required: true;
+                readonly describe: 'Workspace expected to own the credential.';
+            };
+        };
+        readonly body: {
+            readonly userId: {
+                readonly kind: 'string';
+                readonly required: true;
+                readonly describe: 'Existing workspace member to grant or change access for.';
+            };
+            readonly role: {
+                readonly kind: 'enum';
+                readonly required: true;
+                readonly values: readonly ['admin', 'member'];
+                readonly describe: 'Credential role to grant; workspace administrators cannot be demoted.';
+            };
+        };
+    };
     readonly upsertFileShare: {
         readonly method: 'PATCH';
         readonly path: '/api/v2/files/[fileId]/share';
@@ -18395,6 +19208,18 @@ export declare const V2_OPERATIONS: {
             };
         };
     };
+    readonly verifyOrganizationDomain: {
+        readonly method: 'POST';
+        readonly path: '/api/v2/organizations/[organizationId]/domains/[domainId]/verify';
+        readonly pathParams: readonly ['organizationId', 'domainId'];
+        readonly pathParamDocs: {
+            readonly organizationId: 'Organization whose single sign-on settings and verified domains are managed.';
+            readonly domainId: 'Domain claim owned by this organization.';
+        };
+        readonly responseMode: 'json';
+        readonly summary: 'Verify Organization Domain';
+        readonly workspaceKeyUnsupported: true;
+    };
 };
 export type V2OperationName = keyof typeof V2_OPERATIONS;
 export {};