fix(mux): uniform id/name search across list endpoints, close cross-tenant IDOR (#10267)

Author: stainless-app[bot]

.stats.yml

@@ -1,4 +1,4 @@
 configured_endpoints: 119
-openapi_spec_url: https://storage.googleapis.com/stainless-sdk-openapi-specs/runloop-ai/runloop-b5badb6102d613aecce0a0297348c441712c818729f6251970808e9abf494aee.yml
-openapi_spec_hash: 3634342312dab3641c1f26a54b448dd2
+openapi_spec_url: https://storage.googleapis.com/stainless-sdk-openapi-specs/runloop-ai/runloop-0e8f05634e48dcbabeafbb1ab71297b2c506f028ffc92a1f01767147e1244a77.yml
+openapi_spec_hash: 46d01fb341301ea07b9860151d9043f7
 config_hash: 9f32651e6269089b5d6c33594b992232

src/runloop_api_client/resources/axons/axons.py

@@ -153,6 +153,7 @@ def list(
         include_total_count: bool | Omit = omit,
         limit: int | Omit = omit,
         name: str | Omit = omit,
+        search: str | Omit = omit,
         starting_after: str | Omit = omit,
         # Use the following arguments if you need to pass additional parameters to the API that aren't available via kwargs.
         # The extra values given here take precedence over values defined on the client or passed to this method.
@@ -174,6 +175,8 @@ def list(
 
           name: Filter by axon name (prefix match supported).
 
+          search: Search by axon ID or name.
+
           starting_after: Load the next page of data starting after the item with the given ID.
 
           extra_headers: Send extra headers
@@ -198,6 +201,7 @@ def list(
                         "include_total_count": include_total_count,
                         "limit": limit,
                         "name": name,
+                        "search": search,
                         "starting_after": starting_after,
                     },
                     axon_list_params.AxonListParams,
@@ -424,6 +428,7 @@ def list(
         include_total_count: bool | Omit = omit,
         limit: int | Omit = omit,
         name: str | Omit = omit,
+        search: str | Omit = omit,
         starting_after: str | Omit = omit,
         # Use the following arguments if you need to pass additional parameters to the API that aren't available via kwargs.
         # The extra values given here take precedence over values defined on the client or passed to this method.
@@ -445,6 +450,8 @@ def list(
 
           name: Filter by axon name (prefix match supported).
 
+          search: Search by axon ID or name.
+
           starting_after: Load the next page of data starting after the item with the given ID.
 
           extra_headers: Send extra headers
@@ -469,6 +476,7 @@ def list(
                         "include_total_count": include_total_count,
                         "limit": limit,
                         "name": name,
+                        "search": search,
                         "starting_after": starting_after,
                     },
                     axon_list_params.AxonListParams,

src/runloop_api_client/resources/benchmark_jobs.py

@@ -134,6 +134,7 @@ def list(
         include_total_count: bool | Omit = omit,
         limit: int | Omit = omit,
         name: str | Omit = omit,
+        search: str | Omit = omit,
         starting_after: str | Omit = omit,
         # Use the following arguments if you need to pass additional parameters to the API that aren't available via kwargs.
         # The extra values given here take precedence over values defined on the client or passed to this method.
@@ -153,6 +154,8 @@ def list(
 
           name: Filter by name
 
+          search: Search by benchmark job ID or name.
+
           starting_after: Load the next page of data starting after the item with the given ID.
 
           extra_headers: Send extra headers
@@ -175,6 +178,7 @@ def list(
                         "include_total_count": include_total_count,
                         "limit": limit,
                         "name": name,
+                        "search": search,
                         "starting_after": starting_after,
                     },
                     benchmark_job_list_params.BenchmarkJobListParams,
@@ -294,6 +298,7 @@ async def list(
         include_total_count: bool | Omit = omit,
         limit: int | Omit = omit,
         name: str | Omit = omit,
+        search: str | Omit = omit,
         starting_after: str | Omit = omit,
         # Use the following arguments if you need to pass additional parameters to the API that aren't available via kwargs.
         # The extra values given here take precedence over values defined on the client or passed to this method.
@@ -313,6 +318,8 @@ async def list(
 
           name: Filter by name
 
+          search: Search by benchmark job ID or name.
+
           starting_after: Load the next page of data starting after the item with the given ID.
 
           extra_headers: Send extra headers
@@ -335,6 +342,7 @@ async def list(
                         "include_total_count": include_total_count,
                         "limit": limit,
                         "name": name,
+                        "search": search,
                         "starting_after": starting_after,
                     },
                     benchmark_job_list_params.BenchmarkJobListParams,

src/runloop_api_client/resources/benchmark_runs.py

@@ -85,6 +85,7 @@ def list(
         include_total_count: bool | Omit = omit,
         limit: int | Omit = omit,
         name: str | Omit = omit,
+        search: str | Omit = omit,
         starting_after: str | Omit = omit,
         state: str | Omit = omit,
         # Use the following arguments if you need to pass additional parameters to the API that aren't available via kwargs.
@@ -107,6 +108,8 @@ def list(
 
           name: Filter by name
 
+          search: Search by benchmark run ID or name.
+
           starting_after: Load the next page of data starting after the item with the given ID.
 
           state: Filter by state
@@ -133,6 +136,7 @@ def list(
                         "include_total_count": include_total_count,
                         "limit": limit,
                         "name": name,
+                        "search": search,
                         "starting_after": starting_after,
                         "state": state,
                     },
@@ -231,6 +235,7 @@ def list_scenario_runs(
         *,
         include_total_count: bool | Omit = omit,
         limit: int | Omit = omit,
+        search: str | Omit = omit,
         starting_after: str | Omit = omit,
         state: Literal["running", "scoring", "scored", "completed", "canceled", "timeout", "failed"] | Omit = omit,
         # Use the following arguments if you need to pass additional parameters to the API that aren't available via kwargs.
@@ -249,6 +254,8 @@ def list_scenario_runs(
 
           limit: The limit of items to return. Default is 20. Max is 5000.
 
+          search: Search by scenario run ID or name.
+
           starting_after: Load the next page of data starting after the item with the given ID.
 
           state: Filter by Scenario Run state
@@ -275,6 +282,7 @@ def list_scenario_runs(
                     {
                         "include_total_count": include_total_count,
                         "limit": limit,
+                        "search": search,
                         "starting_after": starting_after,
                         "state": state,
                     },
@@ -345,6 +353,7 @@ def list(
         include_total_count: bool | Omit = omit,
         limit: int | Omit = omit,
         name: str | Omit = omit,
+        search: str | Omit = omit,
         starting_after: str | Omit = omit,
         state: str | Omit = omit,
         # Use the following arguments if you need to pass additional parameters to the API that aren't available via kwargs.
@@ -367,6 +376,8 @@ def list(
 
           name: Filter by name
 
+          search: Search by benchmark run ID or name.
+
           starting_after: Load the next page of data starting after the item with the given ID.
 
           state: Filter by state
@@ -393,6 +404,7 @@ def list(
                         "include_total_count": include_total_count,
                         "limit": limit,
                         "name": name,
+                        "search": search,
                         "starting_after": starting_after,
                         "state": state,
                     },
@@ -491,6 +503,7 @@ def list_scenario_runs(
         *,
         include_total_count: bool | Omit = omit,
         limit: int | Omit = omit,
+        search: str | Omit = omit,
         starting_after: str | Omit = omit,
         state: Literal["running", "scoring", "scored", "completed", "canceled", "timeout", "failed"] | Omit = omit,
         # Use the following arguments if you need to pass additional parameters to the API that aren't available via kwargs.
@@ -509,6 +522,8 @@ def list_scenario_runs(
 
           limit: The limit of items to return. Default is 20. Max is 5000.
 
+          search: Search by scenario run ID or name.
+
           starting_after: Load the next page of data starting after the item with the given ID.
 
           state: Filter by Scenario Run state
@@ -535,6 +550,7 @@ def list_scenario_runs(
                     {
                         "include_total_count": include_total_count,
                         "limit": limit,
+                        "search": search,
                         "starting_after": starting_after,
                         "state": state,
                     },

src/runloop_api_client/resources/benchmarks.py

@@ -247,6 +247,7 @@ def list(
         include_total_count: bool | Omit = omit,
         limit: int | Omit = omit,
         name: str | Omit = omit,
+        search: str | Omit = omit,
         starting_after: str | Omit = omit,
         # Use the following arguments if you need to pass additional parameters to the API that aren't available via kwargs.
         # The extra values given here take precedence over values defined on the client or passed to this method.
@@ -266,6 +267,8 @@ def list(
 
           name: Filter by name
 
+          search: Search by benchmark ID or name.
+
           starting_after: Load the next page of data starting after the item with the given ID.
 
           extra_headers: Send extra headers
@@ -289,6 +292,7 @@ def list(
                         "include_total_count": include_total_count,
                         "limit": limit,
                         "name": name,
+                        "search": search,
                         "starting_after": starting_after,
                     },
                     benchmark_list_params.BenchmarkListParams,
@@ -351,6 +355,8 @@ def list_public(
         *,
         include_total_count: bool | Omit = omit,
         limit: int | Omit = omit,
+        name: str | Omit = omit,
+        search: str | Omit = omit,
         starting_after: str | Omit = omit,
         # Use the following arguments if you need to pass additional parameters to the API that aren't available via kwargs.
         # The extra values given here take precedence over values defined on the client or passed to this method.
@@ -368,6 +374,10 @@ def list_public(
 
           limit: The limit of items to return. Default is 20. Max is 5000.
 
+          name: Filter by name
+
+          search: Search by benchmark ID or name.
+
           starting_after: Load the next page of data starting after the item with the given ID.
 
           extra_headers: Send extra headers
@@ -390,6 +400,8 @@ def list_public(
                     {
                         "include_total_count": include_total_count,
                         "limit": limit,
+                        "name": name,
+                        "search": search,
                         "starting_after": starting_after,
                     },
                     benchmark_list_public_params.BenchmarkListPublicParams,
@@ -722,6 +734,7 @@ def list(
         include_total_count: bool | Omit = omit,
         limit: int | Omit = omit,
         name: str | Omit = omit,
+        search: str | Omit = omit,
         starting_after: str | Omit = omit,
         # Use the following arguments if you need to pass additional parameters to the API that aren't available via kwargs.
         # The extra values given here take precedence over values defined on the client or passed to this method.
@@ -741,6 +754,8 @@ def list(
 
           name: Filter by name
 
+          search: Search by benchmark ID or name.
+
           starting_after: Load the next page of data starting after the item with the given ID.
 
           extra_headers: Send extra headers
@@ -764,6 +779,7 @@ def list(
                         "include_total_count": include_total_count,
                         "limit": limit,
                         "name": name,
+                        "search": search,
                         "starting_after": starting_after,
                     },
                     benchmark_list_params.BenchmarkListParams,
@@ -826,6 +842,8 @@ def list_public(
         *,
         include_total_count: bool | Omit = omit,
         limit: int | Omit = omit,
+        name: str | Omit = omit,
+        search: str | Omit = omit,
         starting_after: str | Omit = omit,
         # Use the following arguments if you need to pass additional parameters to the API that aren't available via kwargs.
         # The extra values given here take precedence over values defined on the client or passed to this method.
@@ -843,6 +861,10 @@ def list_public(
 
           limit: The limit of items to return. Default is 20. Max is 5000.
 
+          name: Filter by name
+
+          search: Search by benchmark ID or name.
+
           starting_after: Load the next page of data starting after the item with the given ID.
 
           extra_headers: Send extra headers
@@ -865,6 +887,8 @@ def list_public(
                     {
                         "include_total_count": include_total_count,
                         "limit": limit,
+                        "name": name,
+                        "search": search,
                         "starting_after": starting_after,
                     },
                     benchmark_list_public_params.BenchmarkListPublicParams,

src/runloop_api_client/resources/gateway_configs.py

@@ -209,6 +209,7 @@ def list(
         include_total_count: bool | Omit = omit,
         limit: int | Omit = omit,
         name: str | Omit = omit,
+        search: str | Omit = omit,
         starting_after: str | Omit = omit,
         # Use the following arguments if you need to pass additional parameters to the API that aren't available via kwargs.
         # The extra values given here take precedence over values defined on the client or passed to this method.
@@ -231,6 +232,8 @@ def list(
 
           name: Filter by name (partial match supported).
 
+          search: Search by gateway config ID or name.
+
           starting_after: Load the next page of data starting after the item with the given ID.
 
           extra_headers: Send extra headers
@@ -255,6 +258,7 @@ def list(
                         "include_total_count": include_total_count,
                         "limit": limit,
                         "name": name,
+                        "search": search,
                         "starting_after": starting_after,
                     },
                     gateway_config_list_params.GatewayConfigListParams,
@@ -490,6 +494,7 @@ def list(
         include_total_count: bool | Omit = omit,
         limit: int | Omit = omit,
         name: str | Omit = omit,
+        search: str | Omit = omit,
         starting_after: str | Omit = omit,
         # Use the following arguments if you need to pass additional parameters to the API that aren't available via kwargs.
         # The extra values given here take precedence over values defined on the client or passed to this method.
@@ -512,6 +517,8 @@ def list(
 
           name: Filter by name (partial match supported).
 
+          search: Search by gateway config ID or name.
+
           starting_after: Load the next page of data starting after the item with the given ID.
 
           extra_headers: Send extra headers
@@ -536,6 +543,7 @@ def list(
                         "include_total_count": include_total_count,
                         "limit": limit,
                         "name": name,
+                        "search": search,
                         "starting_after": starting_after,
                     },
                     gateway_config_list_params.GatewayConfigListParams,