docs(api): clarify port_sharing_disabled behavior in organization policy

Author: stainless-app[bot]

.stats.yml

@@ -1,4 +1,4 @@
 configured_endpoints: 172
-openapi_spec_url: https://storage.googleapis.com/stainless-sdk-openapi-specs/gitpod%2Fgitpod-bb4e6859a80947948a22daab52f6d72617c89201cc0d06f94e4fedfc95eb6dbd.yml
-openapi_spec_hash: 76e9882895783cabd4c25a84c4c18ed0
+openapi_spec_url: https://storage.googleapis.com/stainless-sdk-openapi-specs/gitpod%2Fgitpod-4e76b45ac7aedb89d725b01fea9f009672c3f3b0117393178e034718095339a3.yml
+openapi_spec_hash: 11437695b49cfe5d28bef5d4ee65d696
 config_hash: 401f8a117c48e880889ed27a8403db29

src/gitpod/resources/organizations/policies.py

@@ -204,8 +204,9 @@ def update(
           members_require_projects: members_require_projects controls whether environments can only be created from
               projects by non-admin users
 
-          port_sharing_disabled: port_sharing_disabled controls whether port sharing is disabled in the
-              organization
+          port_sharing_disabled: port_sharing_disabled controls whether user-initiated port sharing is disabled
+              in the organization. System ports (VS Code Browser, agents) are always exempt
+              from this policy.
 
           require_custom_domain_access: require_custom_domain_access controls whether users must access via custom
               domain when one is configured. When true, access via app.gitpod.io is blocked.
@@ -439,8 +440,9 @@ async def update(
           members_require_projects: members_require_projects controls whether environments can only be created from
               projects by non-admin users
 
-          port_sharing_disabled: port_sharing_disabled controls whether port sharing is disabled in the
-              organization
+          port_sharing_disabled: port_sharing_disabled controls whether user-initiated port sharing is disabled
+              in the organization. System ports (VS Code Browser, agents) are always exempt
+              from this policy.
 
           require_custom_domain_access: require_custom_domain_access controls whether users must access via custom
               domain when one is configured. When true, access via app.gitpod.io is blocked.

src/gitpod/types/organizations/organization_policies.py

@@ -78,8 +78,9 @@ class OrganizationPolicies(BaseModel):
 
     port_sharing_disabled: bool = FieldInfo(alias="portSharingDisabled")
     """
-    port_sharing_disabled controls whether port sharing is disabled in the
-    organization
+    port_sharing_disabled controls whether user-initiated port sharing is disabled
+    in the organization. System ports (VS Code Browser, agents) are always exempt
+    from this policy.
     """
 
     require_custom_domain_access: bool = FieldInfo(alias="requireCustomDomainAccess")

src/gitpod/types/organizations/policy_update_params.py

@@ -109,8 +109,9 @@ class PolicyUpdateParams(TypedDict, total=False):
 
     port_sharing_disabled: Annotated[Optional[bool], PropertyInfo(alias="portSharingDisabled")]
     """
-    port_sharing_disabled controls whether port sharing is disabled in the
-    organization
+    port_sharing_disabled controls whether user-initiated port sharing is disabled
+    in the organization. System ports (VS Code Browser, agents) are always exempt
+    from this policy.
     """
 
     require_custom_domain_access: Annotated[Optional[bool], PropertyInfo(alias="requireCustomDomainAccess")]