feat(api): add max_port_admission_level to organizations policies

Author: stainless-app[bot]

.stats.yml

@@ -1,4 +1,4 @@
 configured_endpoints: 193
 openapi_spec_url: https://storage.googleapis.com/stainless-sdk-openapi-specs/gitpod%2Fgitpod-174838e2894923e3ff69ca22fed3c1588b9578d0f38f286a58a038b16ba9db81.yml
-openapi_spec_hash: 5331987cbc46299f3170b063b9bf06c1
-config_hash: 4447d1e1149a80d1bec70d353fb8acbf
+openapi_spec_hash: 805193dd7418d079e23e6cdb594e4e59
+config_hash: a2977efc262539c5e31ba0e6dfb6a0a1

src/gitpod/resources/organizations/policies.py

@@ -6,6 +6,7 @@
 
 import httpx
 
+from ...types import AdmissionLevel
 from ..._types import Body, Omit, Query, Headers, NotGiven, SequenceNotStr, omit, not_given
 from ..._utils import maybe_transform, async_maybe_transform
 from ..._compat import cached_property
@@ -18,6 +19,7 @@
 )
 from ..._base_client import make_request_options
 from ...types.organizations import policy_update_params, policy_retrieve_params
+from ...types.admission_level import AdmissionLevel
 from ...types.organizations.veto_exec_policy_param import VetoExecPolicyParam
 from ...types.organizations.policy_retrieve_response import PolicyRetrieveResponse
 
@@ -109,6 +111,7 @@ def update(
         maximum_environments_per_user: Optional[str] | Omit = omit,
         maximum_environment_timeout: Optional[str] | Omit = omit,
         maximum_running_environments_per_user: Optional[str] | Omit = omit,
+        max_port_admission_level: Optional[AdmissionLevel] | Omit = omit,
         members_create_projects: Optional[bool] | Omit = omit,
         members_require_projects: Optional[bool] | Omit = omit,
         port_sharing_disabled: Optional[bool] | Omit = omit,
@@ -201,6 +204,11 @@ def update(
           maximum_running_environments_per_user: maximum_running_environments_per_user limits simultaneously running environments
               per user
 
+          max_port_admission_level: max_port_admission_level caps the maximum admission level a user-opened port may
+              use. UNSPECIFIED means no cap (any AdmissionLevel value is allowed). System
+              ports (VS Code Browser, agents) are exempt. The legacy port_sharing_disabled
+              field, when true, takes precedence and blocks all user-initiated port sharing.
+
           members_create_projects: members_create_projects controls whether members can create projects
 
           members_require_projects: members_require_projects controls whether environments can only be created from
@@ -245,6 +253,7 @@ def update(
                     "maximum_environments_per_user": maximum_environments_per_user,
                     "maximum_environment_timeout": maximum_environment_timeout,
                     "maximum_running_environments_per_user": maximum_running_environments_per_user,
+                    "max_port_admission_level": max_port_admission_level,
                     "members_create_projects": members_create_projects,
                     "members_require_projects": members_require_projects,
                     "port_sharing_disabled": port_sharing_disabled,
@@ -349,6 +358,7 @@ async def update(
         maximum_environments_per_user: Optional[str] | Omit = omit,
         maximum_environment_timeout: Optional[str] | Omit = omit,
         maximum_running_environments_per_user: Optional[str] | Omit = omit,
+        max_port_admission_level: Optional[AdmissionLevel] | Omit = omit,
         members_create_projects: Optional[bool] | Omit = omit,
         members_require_projects: Optional[bool] | Omit = omit,
         port_sharing_disabled: Optional[bool] | Omit = omit,
@@ -441,6 +451,11 @@ async def update(
           maximum_running_environments_per_user: maximum_running_environments_per_user limits simultaneously running environments
               per user
 
+          max_port_admission_level: max_port_admission_level caps the maximum admission level a user-opened port may
+              use. UNSPECIFIED means no cap (any AdmissionLevel value is allowed). System
+              ports (VS Code Browser, agents) are exempt. The legacy port_sharing_disabled
+              field, when true, takes precedence and blocks all user-initiated port sharing.
+
           members_create_projects: members_create_projects controls whether members can create projects
 
           members_require_projects: members_require_projects controls whether environments can only be created from
@@ -485,6 +500,7 @@ async def update(
                     "maximum_environments_per_user": maximum_environments_per_user,
                     "maximum_environment_timeout": maximum_environment_timeout,
                     "maximum_running_environments_per_user": maximum_running_environments_per_user,
+                    "max_port_admission_level": max_port_admission_level,
                     "members_create_projects": members_create_projects,
                     "members_require_projects": members_require_projects,
                     "port_sharing_disabled": port_sharing_disabled,

src/gitpod/types/organizations/policy_update_params.py

@@ -7,6 +7,7 @@
 
 from ..._types import SequenceNotStr
 from ..._utils import PropertyInfo
+from ..admission_level import AdmissionLevel
 from .veto_exec_policy_param import VetoExecPolicyParam
 from .conversation_sharing_policy import ConversationSharingPolicy
 
@@ -98,6 +99,14 @@ class PolicyUpdateParams(TypedDict, total=False):
     per user
     """
 
+    max_port_admission_level: Annotated[Optional[AdmissionLevel], PropertyInfo(alias="maxPortAdmissionLevel")]
+    """
+    max_port_admission_level caps the maximum admission level a user-opened port may
+    use. UNSPECIFIED means no cap (any AdmissionLevel value is allowed). System
+    ports (VS Code Browser, agents) are exempt. The legacy port_sharing_disabled
+    field, when true, takes precedence and blocks all user-initiated port sharing.
+    """
+
     members_create_projects: Annotated[Optional[bool], PropertyInfo(alias="membersCreateProjects")]
     """members_create_projects controls whether members can create projects"""
 

tests/api_resources/organizations/test_policies.py

@@ -84,6 +84,7 @@ def test_method_update_with_all_params(self, client: Gitpod) -> None:
             maximum_environments_per_user="20",
             maximum_environment_timeout="3600s",
             maximum_running_environments_per_user="5",
+            max_port_admission_level="ADMISSION_LEVEL_UNSPECIFIED",
             members_create_projects=True,
             members_require_projects=True,
             port_sharing_disabled=True,
@@ -203,6 +204,7 @@ async def test_method_update_with_all_params(self, async_client: AsyncGitpod) ->
             maximum_environments_per_user="20",
             maximum_environment_timeout="3600s",
             maximum_running_environments_per_user="5",
+            max_port_admission_level="ADMISSION_LEVEL_UNSPECIFIED",
             members_create_projects=True,
             members_require_projects=True,
             port_sharing_disabled=True,