feat(rbac): agent RBAC/ACL scenes and resource-locator check bundles (#41768)

Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
This commit is contained in:
Xiyuan Chenandautofix-ci[bot] authored and GitHub committed 2026-09-07 04:39:43 +00:00
1 parent 60e983c493
commit 86134ea99e
152 files changed
+5360 -3405

No files matched your search

File diff suppressed because it is too large. Load diff
@@ -527,30 +527,6 @@ export type PluginCategoryListResponse = {
plugins: Array<PluginCategoryInstalledPluginResponse>
}
export type AccessPolicyList = {
data?: Array<AccessPolicy>
pagination?: Pagination | null
}
export type AccessPolicy = {
category?: string
created_at?: number
description?: string
id: string
is_builtin?: boolean
name: string
permission_keys?: Array<string>
policy_key?: string
resource_type: string
tenant_id?: string
updated_at?: number
}
export type AccessPolicyBindingState = {
binding_id: string
is_locked?: boolean
}
export type DeleteMemberBindingsRequest = {
account_ids?: Array<string>
}
@@ -563,8 +539,8 @@ export type RoleBindingsResponse = {
data?: Array<AccessPolicyRoleBinding>
}
export type AppAccessMatrix = {
app_id?: string
export type AgentAccessMatrix = {
agent_id?: string
items?: Array<AccessMatrixItem>
}
@@ -594,6 +570,11 @@ export type ResourceWhitelistConfig = {
automatic_include_workspace_members: boolean
}
export type AppAccessMatrix = {
app_id?: string
items?: Array<AccessMatrixItem>
}
export type DatasetAccessMatrix = {
dataset_id?: string
items?: Array<AccessMatrixItem>
@@ -609,6 +590,7 @@ export type ReplaceMemberRolesRequest = {
}
export type MyPermissionsResponse = {
agent?: ResourcePermissionSnapshot
app?: ResourcePermissionSnapshot
dataset?: ResourcePermissionSnapshot
workspace?: WorkspacePermissionSnapshot
@@ -618,23 +600,6 @@ export type PermissionCatalogResponse = {
groups?: Array<PermissionCatalogGroup>
}
export type RbacRoleList = {
data?: Array<RbacRole>
pagination?: Pagination | null
}
export type RbacRole = {
category?: string
description?: string
id: string
is_builtin?: boolean
name: string
permission_keys?: Array<string>
role_tag?: string
tenant_id?: string | null
type: string
}
export type MembersInRoleList = {
data?: Array<MembersInRole>
pagination?: Pagination | null
@@ -1690,13 +1655,6 @@ export type PluginCategoryInstalledPluginResponse = {
version: string
}
export type Pagination = {
current_page?: number
per_page?: number
total_count?: number
total_pages?: number
}
export type AccessPolicyMemberBinding = {
access_policy_id: string
account_id: string
@@ -1725,6 +1683,39 @@ export type ResourceUserAccessPolicies = {
roles?: Array<RbacRole>
}
export type Pagination = {
current_page?: number
per_page?: number
total_count?: number
total_pages?: number
}
export type AccessPolicy = {
category?: string
created_at?: number
description?: string
id: string
is_builtin?: boolean
name: string
permission_keys?: Array<string>
policy_key?: string
resource_type: string
tenant_id?: string
updated_at?: number
}
export type RbacRole = {
category?: string
description?: string
id: string
is_builtin?: boolean
name: string
permission_keys?: Array<string>
role_tag?: string
tenant_id?: string | null
type: string
}
export type ResourcePermissionSnapshot = {
default_permission_keys?: Array<string>
overrides?: Array<ResourcePermissionKeys>
@@ -4372,7 +4363,9 @@ export type GetWorkspacesCurrentRbacAccessPoliciesData = {
}
export type GetWorkspacesCurrentRbacAccessPoliciesResponses = {
200: AccessPolicyList
200: {
[key: string]: unknown
}
}
export type GetWorkspacesCurrentRbacAccessPoliciesResponse =
@@ -4386,7 +4379,9 @@ export type PostWorkspacesCurrentRbacAccessPoliciesData = {
}
export type PostWorkspacesCurrentRbacAccessPoliciesResponses = {
201: AccessPolicy
200: {
[key: string]: unknown
}
}
export type PostWorkspacesCurrentRbacAccessPoliciesResponse =
@@ -4402,7 +4397,9 @@ export type DeleteWorkspacesCurrentRbacAccessPoliciesByPolicyIdData = {
}
export type DeleteWorkspacesCurrentRbacAccessPoliciesByPolicyIdResponses = {
200: AccessPolicy
200: {
[key: string]: unknown
}
}
export type DeleteWorkspacesCurrentRbacAccessPoliciesByPolicyIdResponse =
@@ -4418,7 +4415,9 @@ export type GetWorkspacesCurrentRbacAccessPoliciesByPolicyIdData = {
}
export type GetWorkspacesCurrentRbacAccessPoliciesByPolicyIdResponses = {
200: AccessPolicy
200: {
[key: string]: unknown
}
}
export type GetWorkspacesCurrentRbacAccessPoliciesByPolicyIdResponse =
@@ -4434,7 +4433,9 @@ export type PutWorkspacesCurrentRbacAccessPoliciesByPolicyIdData = {
}
export type PutWorkspacesCurrentRbacAccessPoliciesByPolicyIdResponses = {
200: AccessPolicy
200: {
[key: string]: unknown
}
}
export type PutWorkspacesCurrentRbacAccessPoliciesByPolicyIdResponse =
@@ -4450,7 +4451,9 @@ export type PostWorkspacesCurrentRbacAccessPoliciesByPolicyIdCopyData = {
}
export type PostWorkspacesCurrentRbacAccessPoliciesByPolicyIdCopyResponses = {
201: AccessPolicy
200: {
[key: string]: unknown
}
}
export type PostWorkspacesCurrentRbacAccessPoliciesByPolicyIdCopyResponse =
@@ -4466,7 +4469,9 @@ export type PutWorkspacesCurrentRbacAccessPolicyBindingsByBindingIdLockData = {
}
export type PutWorkspacesCurrentRbacAccessPolicyBindingsByBindingIdLockResponses = {
200: AccessPolicyBindingState
200: {
[key: string]: unknown
}
}
export type PutWorkspacesCurrentRbacAccessPolicyBindingsByBindingIdLockResponse =
@@ -4482,12 +4487,171 @@ export type PutWorkspacesCurrentRbacAccessPolicyBindingsByBindingIdUnlockData =
}
export type PutWorkspacesCurrentRbacAccessPolicyBindingsByBindingIdUnlockResponses = {
200: AccessPolicyBindingState
200: {
[key: string]: unknown
}
}
export type PutWorkspacesCurrentRbacAccessPolicyBindingsByBindingIdUnlockResponse =
PutWorkspacesCurrentRbacAccessPolicyBindingsByBindingIdUnlockResponses[keyof PutWorkspacesCurrentRbacAccessPolicyBindingsByBindingIdUnlockResponses]
export type DeleteWorkspacesCurrentRbacAgentsByAgentIdAccessPoliciesByPolicyIdMemberBindingsData = {
body: DeleteMemberBindingsRequest
path: {
agent_id: string
policy_id: string
}
query?: never
url: '/workspaces/current/rbac/agents/{agent_id}/access-policies/{policy_id}/member-bindings'
}
export type DeleteWorkspacesCurrentRbacAgentsByAgentIdAccessPoliciesByPolicyIdMemberBindingsResponses =
{
200: MemberBindingsResponse
}
export type DeleteWorkspacesCurrentRbacAgentsByAgentIdAccessPoliciesByPolicyIdMemberBindingsResponse =
DeleteWorkspacesCurrentRbacAgentsByAgentIdAccessPoliciesByPolicyIdMemberBindingsResponses[keyof DeleteWorkspacesCurrentRbacAgentsByAgentIdAccessPoliciesByPolicyIdMemberBindingsResponses]
export type GetWorkspacesCurrentRbacAgentsByAgentIdAccessPoliciesByPolicyIdMemberBindingsData = {
body?: never
path: {
agent_id: string
policy_id: string
}
query?: never
url: '/workspaces/current/rbac/agents/{agent_id}/access-policies/{policy_id}/member-bindings'
}
export type GetWorkspacesCurrentRbacAgentsByAgentIdAccessPoliciesByPolicyIdMemberBindingsResponses =
{
200: MemberBindingsResponse
}
export type GetWorkspacesCurrentRbacAgentsByAgentIdAccessPoliciesByPolicyIdMemberBindingsResponse =
GetWorkspacesCurrentRbacAgentsByAgentIdAccessPoliciesByPolicyIdMemberBindingsResponses[keyof GetWorkspacesCurrentRbacAgentsByAgentIdAccessPoliciesByPolicyIdMemberBindingsResponses]
export type GetWorkspacesCurrentRbacAgentsByAgentIdAccessPoliciesByPolicyIdRoleBindingsData = {
body?: never
path: {
agent_id: string
policy_id: string
}
query?: never
url: '/workspaces/current/rbac/agents/{agent_id}/access-policies/{policy_id}/role-bindings'
}
export type GetWorkspacesCurrentRbacAgentsByAgentIdAccessPoliciesByPolicyIdRoleBindingsResponses = {
200: RoleBindingsResponse
}
export type GetWorkspacesCurrentRbacAgentsByAgentIdAccessPoliciesByPolicyIdRoleBindingsResponse =
GetWorkspacesCurrentRbacAgentsByAgentIdAccessPoliciesByPolicyIdRoleBindingsResponses[keyof GetWorkspacesCurrentRbacAgentsByAgentIdAccessPoliciesByPolicyIdRoleBindingsResponses]
export type GetWorkspacesCurrentRbacAgentsByAgentIdAccessPolicyData = {
body?: never
path: {
agent_id: string
}
query?: {
language?: 'en' | 'ja' | 'zh'
}
url: '/workspaces/current/rbac/agents/{agent_id}/access-policy'
}
export type GetWorkspacesCurrentRbacAgentsByAgentIdAccessPolicyResponses = {
200: AgentAccessMatrix
}
export type GetWorkspacesCurrentRbacAgentsByAgentIdAccessPolicyResponse =
GetWorkspacesCurrentRbacAgentsByAgentIdAccessPolicyResponses[keyof GetWorkspacesCurrentRbacAgentsByAgentIdAccessPolicyResponses]
export type GetWorkspacesCurrentRbacAgentsByAgentIdUserAccessPoliciesData = {
body?: never
path: {
agent_id: string
}
query?: {
language?: 'en' | 'ja' | 'zh'
limit?: number
page?: number
reverse?: boolean
}
url: '/workspaces/current/rbac/agents/{agent_id}/user-access-policies'
}
export type GetWorkspacesCurrentRbacAgentsByAgentIdUserAccessPoliciesResponses = {
200: ResourceUserAccessPoliciesResponse
}
export type GetWorkspacesCurrentRbacAgentsByAgentIdUserAccessPoliciesResponse =
GetWorkspacesCurrentRbacAgentsByAgentIdUserAccessPoliciesResponses[keyof GetWorkspacesCurrentRbacAgentsByAgentIdUserAccessPoliciesResponses]
export type PutWorkspacesCurrentRbacAgentsByAgentIdUsersByTargetAccountIdAccessPoliciesData = {
body: ReplaceUserAccessPolicies
path: {
agent_id: string
target_account_id: string
}
query?: never
url: '/workspaces/current/rbac/agents/{agent_id}/users/{target_account_id}/access-policies'
}
export type PutWorkspacesCurrentRbacAgentsByAgentIdUsersByTargetAccountIdAccessPoliciesResponses = {
200: ReplaceUserAccessPoliciesResponse
}
export type PutWorkspacesCurrentRbacAgentsByAgentIdUsersByTargetAccountIdAccessPoliciesResponse =
PutWorkspacesCurrentRbacAgentsByAgentIdUsersByTargetAccountIdAccessPoliciesResponses[keyof PutWorkspacesCurrentRbacAgentsByAgentIdUsersByTargetAccountIdAccessPoliciesResponses]
export type GetWorkspacesCurrentRbacAgentsByAgentIdWhitelistData = {
body?: never
path: {
agent_id: string
}
query?: never
url: '/workspaces/current/rbac/agents/{agent_id}/whitelist'
}
export type GetWorkspacesCurrentRbacAgentsByAgentIdWhitelistResponses = {
200: ResourceWhitelist
}
export type GetWorkspacesCurrentRbacAgentsByAgentIdWhitelistResponse =
GetWorkspacesCurrentRbacAgentsByAgentIdWhitelistResponses[keyof GetWorkspacesCurrentRbacAgentsByAgentIdWhitelistResponses]
export type PutWorkspacesCurrentRbacAgentsByAgentIdWhitelistData = {
body: ResourceAccessScopeRequest
path: {
agent_id: string
}
query?: never
url: '/workspaces/current/rbac/agents/{agent_id}/whitelist'
}
export type PutWorkspacesCurrentRbacAgentsByAgentIdWhitelistResponses = {
200: ResourceWhitelist
}
export type PutWorkspacesCurrentRbacAgentsByAgentIdWhitelistResponse =
PutWorkspacesCurrentRbacAgentsByAgentIdWhitelistResponses[keyof PutWorkspacesCurrentRbacAgentsByAgentIdWhitelistResponses]
export type GetWorkspacesCurrentRbacAgentsByAgentIdWhitelistConfigData = {
body?: never
path: {
agent_id: string
}
query?: never
url: '/workspaces/current/rbac/agents/{agent_id}/whitelist_config'
}
export type GetWorkspacesCurrentRbacAgentsByAgentIdWhitelistConfigResponses = {
200: ResourceWhitelistConfig
}
export type GetWorkspacesCurrentRbacAgentsByAgentIdWhitelistConfigResponse =
GetWorkspacesCurrentRbacAgentsByAgentIdWhitelistConfigResponses[keyof GetWorkspacesCurrentRbacAgentsByAgentIdWhitelistConfigResponses]
export type DeleteWorkspacesCurrentRbacAppsByAppIdAccessPoliciesByPolicyIdMemberBindingsData = {
body: DeleteMemberBindingsRequest
path: {
@@ -4865,6 +5029,20 @@ export type GetWorkspacesCurrentRbacRolePermissionsCatalogResponses = {
export type GetWorkspacesCurrentRbacRolePermissionsCatalogResponse =
GetWorkspacesCurrentRbacRolePermissionsCatalogResponses[keyof GetWorkspacesCurrentRbacRolePermissionsCatalogResponses]
export type GetWorkspacesCurrentRbacRolePermissionsCatalogAgentData = {
body?: never
path?: never
query?: never
url: '/workspaces/current/rbac/role-permissions/catalog/agent'
}
export type GetWorkspacesCurrentRbacRolePermissionsCatalogAgentResponses = {
200: PermissionCatalogResponse
}
export type GetWorkspacesCurrentRbacRolePermissionsCatalogAgentResponse =
GetWorkspacesCurrentRbacRolePermissionsCatalogAgentResponses[keyof GetWorkspacesCurrentRbacRolePermissionsCatalogAgentResponses]
export type GetWorkspacesCurrentRbacRolePermissionsCatalogAppData = {
body?: never
path?: never
@@ -4901,7 +5079,9 @@ export type GetWorkspacesCurrentRbacRolesData = {
}
export type GetWorkspacesCurrentRbacRolesResponses = {
200: RbacRoleList
200: {
[key: string]: unknown
}
}
export type GetWorkspacesCurrentRbacRolesResponse =
@@ -4915,7 +5095,9 @@ export type PostWorkspacesCurrentRbacRolesData = {
}
export type PostWorkspacesCurrentRbacRolesResponses = {
201: RbacRole
200: {
[key: string]: unknown
}
}
export type PostWorkspacesCurrentRbacRolesResponse =
@@ -4931,7 +5113,9 @@ export type DeleteWorkspacesCurrentRbacRolesByRoleIdData = {
}
export type DeleteWorkspacesCurrentRbacRolesByRoleIdResponses = {
200: RbacRole
200: {
[key: string]: unknown
}
}
export type DeleteWorkspacesCurrentRbacRolesByRoleIdResponse =
@@ -4947,7 +5131,9 @@ export type GetWorkspacesCurrentRbacRolesByRoleIdData = {
}
export type GetWorkspacesCurrentRbacRolesByRoleIdResponses = {
200: RbacRole
200: {
[key: string]: unknown
}
}
export type GetWorkspacesCurrentRbacRolesByRoleIdResponse =
@@ -4963,7 +5149,9 @@ export type PutWorkspacesCurrentRbacRolesByRoleIdData = {
}
export type PutWorkspacesCurrentRbacRolesByRoleIdResponses = {
200: RbacRole
200: {
[key: string]: unknown
}
}
export type PutWorkspacesCurrentRbacRolesByRoleIdResponse =
@@ -4979,7 +5167,9 @@ export type PostWorkspacesCurrentRbacRolesByRoleIdCopyData = {
}
export type PostWorkspacesCurrentRbacRolesByRoleIdCopyResponses = {
201: RbacRole
200: {
[key: string]: unknown
}
}
export type PostWorkspacesCurrentRbacRolesByRoleIdCopyResponse =
@@ -5001,6 +5191,69 @@ export type GetWorkspacesCurrentRbacRolesByRoleIdMembersResponses = {
export type GetWorkspacesCurrentRbacRolesByRoleIdMembersResponse =
GetWorkspacesCurrentRbacRolesByRoleIdMembersResponses[keyof GetWorkspacesCurrentRbacRolesByRoleIdMembersResponses]
export type PutWorkspacesCurrentRbacWorkspaceAgentsAccessPoliciesByPolicyIdBindingsData = {
body: ReplaceBindingsRequest
path: {
policy_id: string
}
query?: never
url: '/workspaces/current/rbac/workspace/agents/access-policies/{policy_id}/bindings'
}
export type PutWorkspacesCurrentRbacWorkspaceAgentsAccessPoliciesByPolicyIdBindingsResponses = {
200: AccessMatrixItem
}
export type PutWorkspacesCurrentRbacWorkspaceAgentsAccessPoliciesByPolicyIdBindingsResponse =
PutWorkspacesCurrentRbacWorkspaceAgentsAccessPoliciesByPolicyIdBindingsResponses[keyof PutWorkspacesCurrentRbacWorkspaceAgentsAccessPoliciesByPolicyIdBindingsResponses]
export type GetWorkspacesCurrentRbacWorkspaceAgentsAccessPoliciesByPolicyIdMemberBindingsData = {
body?: never
path: {
policy_id: string
}
query?: never
url: '/workspaces/current/rbac/workspace/agents/access-policies/{policy_id}/member-bindings'
}
export type GetWorkspacesCurrentRbacWorkspaceAgentsAccessPoliciesByPolicyIdMemberBindingsResponses =
{
200: MemberBindingsResponse
}
export type GetWorkspacesCurrentRbacWorkspaceAgentsAccessPoliciesByPolicyIdMemberBindingsResponse =
GetWorkspacesCurrentRbacWorkspaceAgentsAccessPoliciesByPolicyIdMemberBindingsResponses[keyof GetWorkspacesCurrentRbacWorkspaceAgentsAccessPoliciesByPolicyIdMemberBindingsResponses]
export type GetWorkspacesCurrentRbacWorkspaceAgentsAccessPoliciesByPolicyIdRoleBindingsData = {
body?: never
path: {
policy_id: string
}
query?: never
url: '/workspaces/current/rbac/workspace/agents/access-policies/{policy_id}/role-bindings'
}
export type GetWorkspacesCurrentRbacWorkspaceAgentsAccessPoliciesByPolicyIdRoleBindingsResponses = {
200: RoleBindingsResponse
}
export type GetWorkspacesCurrentRbacWorkspaceAgentsAccessPoliciesByPolicyIdRoleBindingsResponse =
GetWorkspacesCurrentRbacWorkspaceAgentsAccessPoliciesByPolicyIdRoleBindingsResponses[keyof GetWorkspacesCurrentRbacWorkspaceAgentsAccessPoliciesByPolicyIdRoleBindingsResponses]
export type GetWorkspacesCurrentRbacWorkspaceAgentsAccessPolicyData = {
body?: never
path?: never
query?: never
url: '/workspaces/current/rbac/workspace/agents/access-policy'
}
export type GetWorkspacesCurrentRbacWorkspaceAgentsAccessPolicyResponses = {
200: WorkspaceAccessMatrix
}
export type GetWorkspacesCurrentRbacWorkspaceAgentsAccessPolicyResponse =
GetWorkspacesCurrentRbacWorkspaceAgentsAccessPolicyResponses[keyof GetWorkspacesCurrentRbacWorkspaceAgentsAccessPolicyResponses]
export type PutWorkspacesCurrentRbacWorkspaceAppsAccessPoliciesByPolicyIdBindingsData = {
body: ReplaceBindingsRequest
path: {
@@ -373,31 +373,6 @@ export const zParserGithubUpload = z.object({
version: z.string(),
})
/**
* AccessPolicy
*/
export const zAccessPolicy = z.object({
category: z.string().optional().default(''),
created_at: z.int().optional().default(0),
description: z.string().optional().default(''),
id: z.string(),
is_builtin: z.boolean().optional().default(false),
name: z.string(),
permission_keys: z.array(z.string()).optional(),
policy_key: z.string().optional().default(''),
resource_type: z.string(),
tenant_id: z.string().optional().default(''),
updated_at: z.int().optional().default(0),
})
/**
* AccessPolicyBindingState
*/
export const zAccessPolicyBindingState = z.object({
binding_id: z.string(),
is_locked: z.boolean().optional().default(false),
})
/**
* _DeleteMemberBindingsRequest
*/
@@ -413,13 +388,6 @@ export const zReplaceUserAccessPolicies = z.object({
account_ids: z.array(z.string()).optional(),
})
/**
* ReplaceUserAccessPoliciesResponse
*/
export const zReplaceUserAccessPoliciesResponse = z.object({
access_policies: z.array(zAccessPolicy).optional(),
})
/**
* ResourceWhitelist
*/
@@ -448,29 +416,6 @@ export const zReplaceMemberRolesRequest = z.object({
role_ids: z.array(z.string()).optional().default([]),
})
/**
* RBACRole
*/
export const zRbacRole = z.object({
category: z.string().optional().default(''),
description: z.string().optional().default(''),
id: z.string(),
is_builtin: z.boolean().optional().default(false),
name: z.string(),
permission_keys: z.array(z.string()).optional(),
role_tag: z.string().optional().default(''),
tenant_id: z.string().nullish(),
type: z.string(),
})
/**
* MemberRolesResponse
*/
export const zMemberRolesResponse = z.object({
account_id: z.string(),
roles: z.array(zRbacRole).optional(),
})
/**
* _ReplaceBindingsRequest
*/
@@ -1256,32 +1201,6 @@ export const zPluginPermissionResponse = z.object({
install_permission: zTenantPluginInstallPermission,
})
/**
* Pagination
*/
export const zPagination = z.object({
current_page: z.int().optional().default(0),
per_page: z.int().optional().default(0),
total_count: z.int().optional().default(0),
total_pages: z.int().optional().default(0),
})
/**
* _AccessPolicyList
*/
export const zAccessPolicyList = z.object({
data: z.array(zAccessPolicy).optional(),
pagination: zPagination.nullish(),
})
/**
* _RBACRoleList
*/
export const zRbacRoleList = z.object({
data: z.array(zRbacRole).optional(),
pagination: zPagination.nullish(),
})
/**
* AccessPolicyMemberBinding
*/
@@ -1324,6 +1243,63 @@ export const zRoleBindingsResponse = z.object({
data: z.array(zAccessPolicyRoleBinding).optional(),
})
/**
* Pagination
*/
export const zPagination = z.object({
current_page: z.int().optional().default(0),
per_page: z.int().optional().default(0),
total_count: z.int().optional().default(0),
total_pages: z.int().optional().default(0),
})
/**
* AccessPolicy
*/
export const zAccessPolicy = z.object({
category: z.string().optional().default(''),
created_at: z.int().optional().default(0),
description: z.string().optional().default(''),
id: z.string(),
is_builtin: z.boolean().optional().default(false),
name: z.string(),
permission_keys: z.array(z.string()).optional(),
policy_key: z.string().optional().default(''),
resource_type: z.string(),
tenant_id: z.string().optional().default(''),
updated_at: z.int().optional().default(0),
})
/**
* ReplaceUserAccessPoliciesResponse
*/
export const zReplaceUserAccessPoliciesResponse = z.object({
access_policies: z.array(zAccessPolicy).optional(),
})
/**
* RBACRole
*/
export const zRbacRole = z.object({
category: z.string().optional().default(''),
description: z.string().optional().default(''),
id: z.string(),
is_builtin: z.boolean().optional().default(false),
name: z.string(),
permission_keys: z.array(z.string()).optional(),
role_tag: z.string().optional().default(''),
tenant_id: z.string().nullish(),
type: z.string(),
})
/**
* MemberRolesResponse
*/
export const zMemberRolesResponse = z.object({
account_id: z.string(),
roles: z.array(zRbacRole).optional(),
})
/**
* WorkspacePermissionSnapshot
*/
@@ -1379,6 +1355,14 @@ export const zAccessMatrixItem = z.object({
roles: z.array(zAccessPolicyRole).optional(),
})
/**
* AgentAccessMatrix
*/
export const zAgentAccessMatrix = z.object({
agent_id: z.string().optional().default(''),
items: z.array(zAccessMatrixItem).optional(),
})
/**
* AppAccessMatrix
*/
@@ -2553,6 +2537,7 @@ export const zResourcePermissionSnapshot = z.object({
* MyPermissionsResponse
*/
export const zMyPermissionsResponse = z.object({
agent: zResourcePermissionSnapshot.optional(),
app: zResourcePermissionSnapshot.optional(),
dataset: zResourcePermissionSnapshot.optional(),
workspace: zWorkspacePermissionSnapshot.optional(),
@@ -4843,12 +4828,12 @@ export const zGetWorkspacesCurrentPluginByCategoryListResponse = zPluginCategory
/**
* Success
*/
export const zGetWorkspacesCurrentRbacAccessPoliciesResponse = zAccessPolicyList
export const zGetWorkspacesCurrentRbacAccessPoliciesResponse = z.record(z.string(), z.unknown())
/**
* Policy created
* Success
*/
export const zPostWorkspacesCurrentRbacAccessPoliciesResponse = zAccessPolicy
export const zPostWorkspacesCurrentRbacAccessPoliciesResponse = z.record(z.string(), z.unknown())
export const zDeleteWorkspacesCurrentRbacAccessPoliciesByPolicyIdPath = z.object({
policy_id: z.uuid(),
@@ -4857,7 +4842,10 @@ export const zDeleteWorkspacesCurrentRbacAccessPoliciesByPolicyIdPath = z.object
/**
* Success
*/
export const zDeleteWorkspacesCurrentRbacAccessPoliciesByPolicyIdResponse = zAccessPolicy
export const zDeleteWorkspacesCurrentRbacAccessPoliciesByPolicyIdResponse = z.record(
z.string(),
z.unknown(),
)
export const zGetWorkspacesCurrentRbacAccessPoliciesByPolicyIdPath = z.object({
policy_id: z.uuid(),
@@ -4866,7 +4854,10 @@ export const zGetWorkspacesCurrentRbacAccessPoliciesByPolicyIdPath = z.object({
/**
* Success
*/
export const zGetWorkspacesCurrentRbacAccessPoliciesByPolicyIdResponse = zAccessPolicy
export const zGetWorkspacesCurrentRbacAccessPoliciesByPolicyIdResponse = z.record(
z.string(),
z.unknown(),
)
export const zPutWorkspacesCurrentRbacAccessPoliciesByPolicyIdPath = z.object({
policy_id: z.uuid(),
@@ -4875,16 +4866,22 @@ export const zPutWorkspacesCurrentRbacAccessPoliciesByPolicyIdPath = z.object({
/**
* Success
*/
export const zPutWorkspacesCurrentRbacAccessPoliciesByPolicyIdResponse = zAccessPolicy
export const zPutWorkspacesCurrentRbacAccessPoliciesByPolicyIdResponse = z.record(
z.string(),
z.unknown(),
)
export const zPostWorkspacesCurrentRbacAccessPoliciesByPolicyIdCopyPath = z.object({
policy_id: z.uuid(),
})
/**
* Policy copied
* Success
*/
export const zPostWorkspacesCurrentRbacAccessPoliciesByPolicyIdCopyResponse = zAccessPolicy
export const zPostWorkspacesCurrentRbacAccessPoliciesByPolicyIdCopyResponse = z.record(
z.string(),
z.unknown(),
)
export const zPutWorkspacesCurrentRbacAccessPolicyBindingsByBindingIdLockPath = z.object({
binding_id: z.uuid(),
@@ -4893,8 +4890,10 @@ export const zPutWorkspacesCurrentRbacAccessPolicyBindingsByBindingIdLockPath =
/**
* Success
*/
export const zPutWorkspacesCurrentRbacAccessPolicyBindingsByBindingIdLockResponse =
zAccessPolicyBindingState
export const zPutWorkspacesCurrentRbacAccessPolicyBindingsByBindingIdLockResponse = z.record(
z.string(),
z.unknown(),
)
export const zPutWorkspacesCurrentRbacAccessPolicyBindingsByBindingIdUnlockPath = z.object({
binding_id: z.uuid(),
@@ -4903,8 +4902,124 @@ export const zPutWorkspacesCurrentRbacAccessPolicyBindingsByBindingIdUnlockPath
/**
* Success
*/
export const zPutWorkspacesCurrentRbacAccessPolicyBindingsByBindingIdUnlockResponse =
zAccessPolicyBindingState
export const zPutWorkspacesCurrentRbacAccessPolicyBindingsByBindingIdUnlockResponse = z.record(
z.string(),
z.unknown(),
)
export const zDeleteWorkspacesCurrentRbacAgentsByAgentIdAccessPoliciesByPolicyIdMemberBindingsBody =
zDeleteMemberBindingsRequest
export const zDeleteWorkspacesCurrentRbacAgentsByAgentIdAccessPoliciesByPolicyIdMemberBindingsPath =
z.object({
agent_id: z.uuid(),
policy_id: z.string(),
})
/**
* Success
*/
export const zDeleteWorkspacesCurrentRbacAgentsByAgentIdAccessPoliciesByPolicyIdMemberBindingsResponse =
zMemberBindingsResponse
export const zGetWorkspacesCurrentRbacAgentsByAgentIdAccessPoliciesByPolicyIdMemberBindingsPath =
z.object({
agent_id: z.uuid(),
policy_id: z.string(),
})
/**
* Success
*/
export const zGetWorkspacesCurrentRbacAgentsByAgentIdAccessPoliciesByPolicyIdMemberBindingsResponse =
zMemberBindingsResponse
export const zGetWorkspacesCurrentRbacAgentsByAgentIdAccessPoliciesByPolicyIdRoleBindingsPath =
z.object({
agent_id: z.uuid(),
policy_id: z.uuid(),
})
/**
* Success
*/
export const zGetWorkspacesCurrentRbacAgentsByAgentIdAccessPoliciesByPolicyIdRoleBindingsResponse =
zRoleBindingsResponse
export const zGetWorkspacesCurrentRbacAgentsByAgentIdAccessPolicyPath = z.object({
agent_id: z.uuid(),
})
export const zGetWorkspacesCurrentRbacAgentsByAgentIdAccessPolicyQuery = z.object({
language: z.enum(['en', 'ja', 'zh']).optional(),
})
/**
* Success
*/
export const zGetWorkspacesCurrentRbacAgentsByAgentIdAccessPolicyResponse = zAgentAccessMatrix
export const zGetWorkspacesCurrentRbacAgentsByAgentIdUserAccessPoliciesPath = z.object({
agent_id: z.uuid(),
})
export const zGetWorkspacesCurrentRbacAgentsByAgentIdUserAccessPoliciesQuery = z.object({
language: z.enum(['en', 'ja', 'zh']).optional(),
limit: z.int().gte(1).lte(99999).optional(),
page: z.int().gte(1).optional(),
reverse: z.boolean().optional(),
})
/**
* Success
*/
export const zGetWorkspacesCurrentRbacAgentsByAgentIdUserAccessPoliciesResponse =
zResourceUserAccessPoliciesResponse
export const zPutWorkspacesCurrentRbacAgentsByAgentIdUsersByTargetAccountIdAccessPoliciesBody =
zReplaceUserAccessPolicies
export const zPutWorkspacesCurrentRbacAgentsByAgentIdUsersByTargetAccountIdAccessPoliciesPath =
z.object({
agent_id: z.uuid(),
target_account_id: z.uuid(),
})
/**
* Success
*/
export const zPutWorkspacesCurrentRbacAgentsByAgentIdUsersByTargetAccountIdAccessPoliciesResponse =
zReplaceUserAccessPoliciesResponse
export const zGetWorkspacesCurrentRbacAgentsByAgentIdWhitelistPath = z.object({
agent_id: z.uuid(),
})
/**
* Success
*/
export const zGetWorkspacesCurrentRbacAgentsByAgentIdWhitelistResponse = zResourceWhitelist
export const zPutWorkspacesCurrentRbacAgentsByAgentIdWhitelistBody = zResourceAccessScopeRequest
export const zPutWorkspacesCurrentRbacAgentsByAgentIdWhitelistPath = z.object({
agent_id: z.uuid(),
})
/**
* Success
*/
export const zPutWorkspacesCurrentRbacAgentsByAgentIdWhitelistResponse = zResourceWhitelist
export const zGetWorkspacesCurrentRbacAgentsByAgentIdWhitelistConfigPath = z.object({
agent_id: z.uuid(),
})
/**
* Success
*/
export const zGetWorkspacesCurrentRbacAgentsByAgentIdWhitelistConfigResponse =
zResourceWhitelistConfig
export const zDeleteWorkspacesCurrentRbacAppsByAppIdAccessPoliciesByPolicyIdMemberBindingsBody =
zDeleteMemberBindingsRequest
@@ -5163,6 +5278,12 @@ export const zGetWorkspacesCurrentRbacMyPermissionsResponse = zMyPermissionsResp
*/
export const zGetWorkspacesCurrentRbacRolePermissionsCatalogResponse = zPermissionCatalogResponse
/**
* Success
*/
export const zGetWorkspacesCurrentRbacRolePermissionsCatalogAgentResponse =
zPermissionCatalogResponse
/**
* Success
*/
@@ -5177,12 +5298,12 @@ export const zGetWorkspacesCurrentRbacRolePermissionsCatalogDatasetResponse =
/**
* Success
*/
export const zGetWorkspacesCurrentRbacRolesResponse = zRbacRoleList
export const zGetWorkspacesCurrentRbacRolesResponse = z.record(z.string(), z.unknown())
/**
* Role created
* Success
*/
export const zPostWorkspacesCurrentRbacRolesResponse = zRbacRole
export const zPostWorkspacesCurrentRbacRolesResponse = z.record(z.string(), z.unknown())
export const zDeleteWorkspacesCurrentRbacRolesByRoleIdPath = z.object({
role_id: z.uuid(),
@@ -5191,7 +5312,7 @@ export const zDeleteWorkspacesCurrentRbacRolesByRoleIdPath = z.object({
/**
* Success
*/
export const zDeleteWorkspacesCurrentRbacRolesByRoleIdResponse = zRbacRole
export const zDeleteWorkspacesCurrentRbacRolesByRoleIdResponse = z.record(z.string(), z.unknown())
export const zGetWorkspacesCurrentRbacRolesByRoleIdPath = z.object({
role_id: z.uuid(),
@@ -5200,7 +5321,7 @@ export const zGetWorkspacesCurrentRbacRolesByRoleIdPath = z.object({
/**
* Success
*/
export const zGetWorkspacesCurrentRbacRolesByRoleIdResponse = zRbacRole
export const zGetWorkspacesCurrentRbacRolesByRoleIdResponse = z.record(z.string(), z.unknown())
export const zPutWorkspacesCurrentRbacRolesByRoleIdPath = z.object({
role_id: z.uuid(),
@@ -5209,16 +5330,16 @@ export const zPutWorkspacesCurrentRbacRolesByRoleIdPath = z.object({
/**
* Success
*/
export const zPutWorkspacesCurrentRbacRolesByRoleIdResponse = zRbacRole
export const zPutWorkspacesCurrentRbacRolesByRoleIdResponse = z.record(z.string(), z.unknown())
export const zPostWorkspacesCurrentRbacRolesByRoleIdCopyPath = z.object({
role_id: z.uuid(),
})
/**
* Role copied
* Success
*/
export const zPostWorkspacesCurrentRbacRolesByRoleIdCopyResponse = zRbacRole
export const zPostWorkspacesCurrentRbacRolesByRoleIdCopyResponse = z.record(z.string(), z.unknown())
export const zGetWorkspacesCurrentRbacRolesByRoleIdMembersPath = z.object({
role_id: z.uuid(),
@@ -5229,6 +5350,47 @@ export const zGetWorkspacesCurrentRbacRolesByRoleIdMembersPath = z.object({
*/
export const zGetWorkspacesCurrentRbacRolesByRoleIdMembersResponse = zMembersInRoleList
export const zPutWorkspacesCurrentRbacWorkspaceAgentsAccessPoliciesByPolicyIdBindingsBody =
zReplaceBindingsRequest
export const zPutWorkspacesCurrentRbacWorkspaceAgentsAccessPoliciesByPolicyIdBindingsPath =
z.object({
policy_id: z.uuid(),
})
/**
* Success
*/
export const zPutWorkspacesCurrentRbacWorkspaceAgentsAccessPoliciesByPolicyIdBindingsResponse =
zAccessMatrixItem
export const zGetWorkspacesCurrentRbacWorkspaceAgentsAccessPoliciesByPolicyIdMemberBindingsPath =
z.object({
policy_id: z.uuid(),
})
/**
* Success
*/
export const zGetWorkspacesCurrentRbacWorkspaceAgentsAccessPoliciesByPolicyIdMemberBindingsResponse =
zMemberBindingsResponse
export const zGetWorkspacesCurrentRbacWorkspaceAgentsAccessPoliciesByPolicyIdRoleBindingsPath =
z.object({
policy_id: z.uuid(),
})
/**
* Success
*/
export const zGetWorkspacesCurrentRbacWorkspaceAgentsAccessPoliciesByPolicyIdRoleBindingsResponse =
zRoleBindingsResponse
/**
* Success
*/
export const zGetWorkspacesCurrentRbacWorkspaceAgentsAccessPolicyResponse = zWorkspaceAccessMatrix
export const zPutWorkspacesCurrentRbacWorkspaceAppsAccessPoliciesByPolicyIdBindingsBody =
zReplaceBindingsRequest