@appwrite.io/console 15.3.0 → 15.4.0

package/types/services/oauth-2.d.ts

@@ -31,7 +31,7 @@ export declare class Oauth2 {
     /**
      * Begin the OAuth2 authorization flow. When called without a session, the user is redirected to the consent screen without grant ID. When called with a session, the redirect URL includes param for grant ID. You can pass Accept header of `application/json` to receive a JSON response instead of a redirect.
      *
-     * @param {string} params.clientId - OAuth2 client ID.
+     * @param {string} params.clientId - OAuth2 client ID. Either a registered app ID or an HTTPS client ID metadata document URL.
      * @param {string} params.redirectUri - Redirect URI where visitor will be redirected after authorization, whether successful or not.
      * @param {string} params.responseType - OAuth2 / OIDC response type. One of `code` (Authorization Code Flow), `id_token` (Implicit Flow, OIDC login only), or `code id_token` (Hybrid Flow).
      * @param {string} params.scope - Space-separated OAuth2 scopes. Can include project scopes, and built-in scopes: `openid`, `email`, `profile`, `phone`.
@@ -43,6 +43,7 @@ export declare class Oauth2 {
      * @param {number} params.maxAge - OIDC max_age paraleter for customization of consent screen. Maximum allowable elapsed time in seconds since the user last authenticated. If exceeded, re-authentication is required.
      * @param {string} params.authorizationDetails - Rich authorization request. JSON array of objects, each with a `type` and project-defined fields
      * @param {string} params.resource - RFC 8707 resource indicator URI or URI list. Each value must be an absolute URI without a fragment.
+     * @param {string} params.audience - Compatibility alias for a single OAuth2 resource indicator URI.
      * @param {string} params.requestUri - OAuth2 authorization request handle returned by the pushed authorization request endpoint.
      * @throws {AppwriteException}
      * @returns {Promise<Models.Oauth2Authorize>}
@@ -60,12 +61,13 @@ export declare class Oauth2 {
         maxAge?: number;
         authorizationDetails?: string;
         resource?: string;
+        audience?: string;
         requestUri?: string;
     }): Promise<Models.Oauth2Authorize>;
     /**
      * Begin the OAuth2 authorization flow. When called without a session, the user is redirected to the consent screen without grant ID. When called with a session, the redirect URL includes param for grant ID. You can pass Accept header of `application/json` to receive a JSON response instead of a redirect.
      *
-     * @param {string} clientId - OAuth2 client ID.
+     * @param {string} clientId - OAuth2 client ID. Either a registered app ID or an HTTPS client ID metadata document URL.
      * @param {string} redirectUri - Redirect URI where visitor will be redirected after authorization, whether successful or not.
      * @param {string} responseType - OAuth2 / OIDC response type. One of `code` (Authorization Code Flow), `id_token` (Implicit Flow, OIDC login only), or `code id_token` (Hybrid Flow).
      * @param {string} scope - Space-separated OAuth2 scopes. Can include project scopes, and built-in scopes: `openid`, `email`, `profile`, `phone`.
@@ -77,19 +79,79 @@ export declare class Oauth2 {
      * @param {number} maxAge - OIDC max_age paraleter for customization of consent screen. Maximum allowable elapsed time in seconds since the user last authenticated. If exceeded, re-authentication is required.
      * @param {string} authorizationDetails - Rich authorization request. JSON array of objects, each with a `type` and project-defined fields
      * @param {string} resource - RFC 8707 resource indicator URI or URI list. Each value must be an absolute URI without a fragment.
+     * @param {string} audience - Compatibility alias for a single OAuth2 resource indicator URI.
      * @param {string} requestUri - OAuth2 authorization request handle returned by the pushed authorization request endpoint.
      * @throws {AppwriteException}
      * @returns {Promise<Models.Oauth2Authorize>}
      * @deprecated Use the object parameter style method for a better developer experience.
      */
-    authorize(clientId?: string, redirectUri?: string, responseType?: string, scope?: string, state?: string, nonce?: string, codeChallenge?: string, codeChallengeMethod?: string, prompt?: string, maxAge?: number, authorizationDetails?: string, resource?: string, requestUri?: string): Promise<Models.Oauth2Authorize>;
+    authorize(clientId?: string, redirectUri?: string, responseType?: string, scope?: string, state?: string, nonce?: string, codeChallenge?: string, codeChallengeMethod?: string, prompt?: string, maxAge?: number, authorizationDetails?: string, resource?: string, audience?: string, requestUri?: string): Promise<Models.Oauth2Authorize>;
+    /**
+     * Begin the OAuth2 authorization flow. When called without a session, the user is redirected to the consent screen without grant ID. When called with a session, the redirect URL includes param for grant ID. You can pass Accept header of `application/json` to receive a JSON response instead of a redirect.
+     *
+     * @param {string} params.clientId - OAuth2 client ID. Either a registered app ID or an HTTPS client ID metadata document URL.
+     * @param {string} params.redirectUri - Redirect URI where visitor will be redirected after authorization, whether successful or not.
+     * @param {string} params.responseType - OAuth2 / OIDC response type. One of `code` (Authorization Code Flow), `id_token` (Implicit Flow, OIDC login only), or `code id_token` (Hybrid Flow).
+     * @param {string} params.scope - Space-separated OAuth2 scopes. Can include project scopes, and built-in scopes: `openid`, `email`, `profile`, `phone`.
+     * @param {string} params.state - OAuth2 state. You receive this back in the redirect URI.
+     * @param {string} params.nonce - OIDC nonce parameter to prevent replay attacks. Required when response_type includes `id_token`.
+     * @param {string} params.codeChallenge - PKCE code challenge. Required when OAuth2 app is public.
+     * @param {string} params.codeChallengeMethod - PKCE code challenge method. Required when OAuth2 app is public.
+     * @param {string} params.prompt - OIDC prompt parameter for customization of consent screen. Space-separated list of: none, login, consent, select_account.
+     * @param {number} params.maxAge - OIDC max_age paraleter for customization of consent screen. Maximum allowable elapsed time in seconds since the user last authenticated. If exceeded, re-authentication is required.
+     * @param {string} params.authorizationDetails - Rich authorization request. JSON array of objects, each with a `type` and project-defined fields
+     * @param {string} params.resource - RFC 8707 resource indicator URI or URI list. Each value must be an absolute URI without a fragment.
+     * @param {string} params.audience - Compatibility alias for a single OAuth2 resource indicator URI.
+     * @param {string} params.requestUri - OAuth2 authorization request handle returned by the pushed authorization request endpoint.
+     * @throws {AppwriteException}
+     * @returns {Promise<Models.Oauth2Authorize>}
+     */
+    authorizePost(params?: {
+        clientId?: string;
+        redirectUri?: string;
+        responseType?: string;
+        scope?: string;
+        state?: string;
+        nonce?: string;
+        codeChallenge?: string;
+        codeChallengeMethod?: string;
+        prompt?: string;
+        maxAge?: number;
+        authorizationDetails?: string;
+        resource?: string;
+        audience?: string;
+        requestUri?: string;
+    }): Promise<Models.Oauth2Authorize>;
+    /**
+     * Begin the OAuth2 authorization flow. When called without a session, the user is redirected to the consent screen without grant ID. When called with a session, the redirect URL includes param for grant ID. You can pass Accept header of `application/json` to receive a JSON response instead of a redirect.
+     *
+     * @param {string} clientId - OAuth2 client ID. Either a registered app ID or an HTTPS client ID metadata document URL.
+     * @param {string} redirectUri - Redirect URI where visitor will be redirected after authorization, whether successful or not.
+     * @param {string} responseType - OAuth2 / OIDC response type. One of `code` (Authorization Code Flow), `id_token` (Implicit Flow, OIDC login only), or `code id_token` (Hybrid Flow).
+     * @param {string} scope - Space-separated OAuth2 scopes. Can include project scopes, and built-in scopes: `openid`, `email`, `profile`, `phone`.
+     * @param {string} state - OAuth2 state. You receive this back in the redirect URI.
+     * @param {string} nonce - OIDC nonce parameter to prevent replay attacks. Required when response_type includes `id_token`.
+     * @param {string} codeChallenge - PKCE code challenge. Required when OAuth2 app is public.
+     * @param {string} codeChallengeMethod - PKCE code challenge method. Required when OAuth2 app is public.
+     * @param {string} prompt - OIDC prompt parameter for customization of consent screen. Space-separated list of: none, login, consent, select_account.
+     * @param {number} maxAge - OIDC max_age paraleter for customization of consent screen. Maximum allowable elapsed time in seconds since the user last authenticated. If exceeded, re-authentication is required.
+     * @param {string} authorizationDetails - Rich authorization request. JSON array of objects, each with a `type` and project-defined fields
+     * @param {string} resource - RFC 8707 resource indicator URI or URI list. Each value must be an absolute URI without a fragment.
+     * @param {string} audience - Compatibility alias for a single OAuth2 resource indicator URI.
+     * @param {string} requestUri - OAuth2 authorization request handle returned by the pushed authorization request endpoint.
+     * @throws {AppwriteException}
+     * @returns {Promise<Models.Oauth2Authorize>}
+     * @deprecated Use the object parameter style method for a better developer experience.
+     */
+    authorizePost(clientId?: string, redirectUri?: string, responseType?: string, scope?: string, state?: string, nonce?: string, codeChallenge?: string, codeChallengeMethod?: string, prompt?: string, maxAge?: number, authorizationDetails?: string, resource?: string, audience?: string, requestUri?: string): Promise<Models.Oauth2Authorize>;
     /**
      * Start the OAuth2 Device Authorization Grant. Returns the device code, user code, verification URL, expiration, and polling interval.
      *
-     * @param {string} params.clientId - OAuth2 client ID.
+     * @param {string} params.clientId - OAuth2 client ID. Either a registered app ID or an HTTPS client ID metadata document URL.
      * @param {string} params.scope - Space-separated OAuth2 scopes. Can include project scopes, and built-in scopes: `openid`, `email`, `profile`.
      * @param {string} params.authorizationDetails - Rich authorization request. JSON array of objects, each with a `type` and project-defined fields
      * @param {string} params.resource - RFC 8707 resource indicator URI or URI list. Each value must be an absolute URI without a fragment.
+     * @param {string} params.audience - Compatibility alias for a single OAuth2 resource indicator URI.
      * @throws {AppwriteException}
      * @returns {Promise<Models.Oauth2DeviceAuthorization>}
      */
@@ -98,19 +160,21 @@ export declare class Oauth2 {
         scope?: string;
         authorizationDetails?: string;
         resource?: string;
+        audience?: string;
     }): Promise<Models.Oauth2DeviceAuthorization>;
     /**
      * Start the OAuth2 Device Authorization Grant. Returns the device code, user code, verification URL, expiration, and polling interval.
      *
-     * @param {string} clientId - OAuth2 client ID.
+     * @param {string} clientId - OAuth2 client ID. Either a registered app ID or an HTTPS client ID metadata document URL.
      * @param {string} scope - Space-separated OAuth2 scopes. Can include project scopes, and built-in scopes: `openid`, `email`, `profile`.
      * @param {string} authorizationDetails - Rich authorization request. JSON array of objects, each with a `type` and project-defined fields
      * @param {string} resource - RFC 8707 resource indicator URI or URI list. Each value must be an absolute URI without a fragment.
+     * @param {string} audience - Compatibility alias for a single OAuth2 resource indicator URI.
      * @throws {AppwriteException}
      * @returns {Promise<Models.Oauth2DeviceAuthorization>}
      * @deprecated Use the object parameter style method for a better developer experience.
      */
-    createDeviceAuthorization(clientId?: string, scope?: string, authorizationDetails?: string, resource?: string): Promise<Models.Oauth2DeviceAuthorization>;
+    createDeviceAuthorization(clientId?: string, scope?: string, authorizationDetails?: string, resource?: string, audience?: string): Promise<Models.Oauth2DeviceAuthorization>;
     /**
      * Exchange a device flow user code for an OAuth2 grant. The authenticated user is bound to the pending grant. Pass the returned grant ID to the get grant endpoint to render the consent screen, then to the approve or reject endpoint to complete the flow.
      *
@@ -183,6 +247,40 @@ export declare class Oauth2 {
      * @deprecated Use the object parameter style method for a better developer experience.
      */
     logout(idTokenHint?: string, logoutHint?: string, clientId?: string, postLogoutRedirectUri?: string, state?: string, uiLocales?: string): Promise<{}>;
+    /**
+     * OpenID Connect RP-Initiated Logout. Ends the user session and revokes the tokens issued to the app identified by the `id_token_hint`, then redirects the user to `post_logout_redirect_uri` when it matches a URI registered on the app.
+     *
+     * @param {string} params.idTokenHint - ID Token previously issued to the app, used as proof of the logout request. Required to end the session; signature and issuer are validated while expiry is ignored.
+     * @param {string} params.logoutHint - Hint about the user that is logging out. Accepted for OIDC compatibility.
+     * @param {string} params.clientId - OAuth2 client ID. When both `client_id` and `id_token_hint` are provided, they must identify the same app.
+     * @param {string} params.postLogoutRedirectUri - URI to redirect the user to after logout. Must exactly match a URI registered in the app's `postLogoutRedirectUris`.
+     * @param {string} params.state - Opaque value passed back unchanged in the `state` query param of the post-logout redirect.
+     * @param {string} params.uiLocales - Preferred languages for any logout UI, as space-separated BCP47 tags. Accepted for OIDC compatibility.
+     * @throws {AppwriteException}
+     * @returns {Promise<{}>}
+     */
+    logoutPost(params?: {
+        idTokenHint?: string;
+        logoutHint?: string;
+        clientId?: string;
+        postLogoutRedirectUri?: string;
+        state?: string;
+        uiLocales?: string;
+    }): Promise<{}>;
+    /**
+     * OpenID Connect RP-Initiated Logout. Ends the user session and revokes the tokens issued to the app identified by the `id_token_hint`, then redirects the user to `post_logout_redirect_uri` when it matches a URI registered on the app.
+     *
+     * @param {string} idTokenHint - ID Token previously issued to the app, used as proof of the logout request. Required to end the session; signature and issuer are validated while expiry is ignored.
+     * @param {string} logoutHint - Hint about the user that is logging out. Accepted for OIDC compatibility.
+     * @param {string} clientId - OAuth2 client ID. When both `client_id` and `id_token_hint` are provided, they must identify the same app.
+     * @param {string} postLogoutRedirectUri - URI to redirect the user to after logout. Must exactly match a URI registered in the app's `postLogoutRedirectUris`.
+     * @param {string} state - Opaque value passed back unchanged in the `state` query param of the post-logout redirect.
+     * @param {string} uiLocales - Preferred languages for any logout UI, as space-separated BCP47 tags. Accepted for OIDC compatibility.
+     * @throws {AppwriteException}
+     * @returns {Promise<{}>}
+     * @deprecated Use the object parameter style method for a better developer experience.
+     */
+    logoutPost(idTokenHint?: string, logoutHint?: string, clientId?: string, postLogoutRedirectUri?: string, state?: string, uiLocales?: string): Promise<{}>;
     /**
      * List the organizations the OAuth2 access token can access. Resolves the token's `organization` authorization details, expanding the `*` wildcard into the concrete set of organizations the user can see.
      *
@@ -211,7 +309,7 @@ export declare class Oauth2 {
     /**
      * Store an OAuth2 authorization request server-side and receive a short-lived request_uri handle for the authorize endpoint.
      *
-     * @param {string} params.clientId - OAuth2 client ID.
+     * @param {string} params.clientId - OAuth2 client ID. Either a registered app ID or an HTTPS client ID metadata document URL.
      * @param {string} params.redirectUri - Redirect URI where visitor will be redirected after authorization, whether successful or not.
      * @param {string} params.responseType - OAuth2 / OIDC response type.
      * @param {string} params.scope - Space-separated OAuth2 scopes. Can include project scopes, and built-in scopes: `openid`, `email`, `profile`, `phone`.
@@ -223,6 +321,7 @@ export declare class Oauth2 {
      * @param {number} params.maxAge - OIDC max_age parameter for customization of consent screen.
      * @param {string} params.authorizationDetails - Rich authorization request. JSON array of objects, each with a `type` and project-defined fields
      * @param {string} params.resource - RFC 8707 resource indicator URI or URI list. Each value must be an absolute URI without a fragment.
+     * @param {string} params.audience - Compatibility alias for a single OAuth2 resource indicator URI.
      * @throws {AppwriteException}
      * @returns {Promise<Models.Oauth2PAR>}
      */
@@ -230,7 +329,7 @@ export declare class Oauth2 {
         clientId: string;
         redirectUri: string;
         responseType: string;
-        scope: string;
+        scope?: string;
         state?: string;
         nonce?: string;
         codeChallenge?: string;
@@ -239,11 +338,12 @@ export declare class Oauth2 {
         maxAge?: number;
         authorizationDetails?: string;
         resource?: string;
+        audience?: string;
     }): Promise<Models.Oauth2PAR>;
     /**
      * Store an OAuth2 authorization request server-side and receive a short-lived request_uri handle for the authorize endpoint.
      *
-     * @param {string} clientId - OAuth2 client ID.
+     * @param {string} clientId - OAuth2 client ID. Either a registered app ID or an HTTPS client ID metadata document URL.
      * @param {string} redirectUri - Redirect URI where visitor will be redirected after authorization, whether successful or not.
      * @param {string} responseType - OAuth2 / OIDC response type.
      * @param {string} scope - Space-separated OAuth2 scopes. Can include project scopes, and built-in scopes: `openid`, `email`, `profile`, `phone`.
@@ -255,11 +355,12 @@ export declare class Oauth2 {
      * @param {number} maxAge - OIDC max_age parameter for customization of consent screen.
      * @param {string} authorizationDetails - Rich authorization request. JSON array of objects, each with a `type` and project-defined fields
      * @param {string} resource - RFC 8707 resource indicator URI or URI list. Each value must be an absolute URI without a fragment.
+     * @param {string} audience - Compatibility alias for a single OAuth2 resource indicator URI.
      * @throws {AppwriteException}
      * @returns {Promise<Models.Oauth2PAR>}
      * @deprecated Use the object parameter style method for a better developer experience.
      */
-    createPAR(clientId: string, redirectUri: string, responseType: string, scope: string, state?: string, nonce?: string, codeChallenge?: string, codeChallengeMethod?: string, prompt?: string, maxAge?: number, authorizationDetails?: string, resource?: string): Promise<Models.Oauth2PAR>;
+    createPAR(clientId: string, redirectUri: string, responseType: string, scope?: string, state?: string, nonce?: string, codeChallenge?: string, codeChallengeMethod?: string, prompt?: string, maxAge?: number, authorizationDetails?: string, resource?: string, audience?: string): Promise<Models.Oauth2PAR>;
     /**
      * List the projects the OAuth2 access token can access. Resolves the token's `project` authorization details, expanding the `*` wildcard into the concrete set of projects the user can see.
      *
@@ -309,7 +410,7 @@ export declare class Oauth2 {
      *
      * @param {string} params.token - The access or refresh token to revoke.
      * @param {string} params.tokenTypeHint - Type of token to revoke (access_token or refresh_token).
-     * @param {string} params.clientId - OAuth2 client ID.
+     * @param {string} params.clientId - OAuth2 client ID. Either a registered app ID or an HTTPS client ID metadata document URL.
      * @param {string} params.clientSecret - OAuth2 client secret. Required for confidential apps; omitted for public apps.
      * @throws {AppwriteException}
      * @returns {Promise<{}>}
@@ -325,7 +426,7 @@ export declare class Oauth2 {
      *
      * @param {string} token - The access or refresh token to revoke.
      * @param {string} tokenTypeHint - Type of token to revoke (access_token or refresh_token).
-     * @param {string} clientId - OAuth2 client ID.
+     * @param {string} clientId - OAuth2 client ID. Either a registered app ID or an HTTPS client ID metadata document URL.
      * @param {string} clientSecret - OAuth2 client secret. Required for confidential apps; omitted for public apps.
      * @throws {AppwriteException}
      * @returns {Promise<{}>}
@@ -339,11 +440,12 @@ export declare class Oauth2 {
      * @param {string} params.code - Authorization code to be exchanged for access and refresh tokens. Required for `authorization_code` grant type.
      * @param {string} params.refreshToken - Refresh token to be exchanged for a new access and refresh tokens. Required for `refresh_token` grant type.
      * @param {string} params.deviceCode - Device code obtained from the device authorization endpoint. Required for `urn:ietf:params:oauth:grant-type:device_code` grant type.
-     * @param {string} params.clientId - OAuth2 client ID.
+     * @param {string} params.clientId - OAuth2 client ID. Either a registered app ID or an HTTPS client ID metadata document URL.
      * @param {string} params.clientSecret - OAuth2 client secret. Required for confidential apps.
      * @param {string} params.codeVerifier - PKCE code verifier. Required for public apps.
      * @param {string} params.redirectUri - Redirect URI. Required for `authorization_code` grant type.
      * @param {string} params.resource - RFC 8707 resource indicator URI or URI list. Each value must be an absolute URI without a fragment.
+     * @param {string} params.audience - Compatibility alias for a single OAuth2 resource indicator URI.
      * @throws {AppwriteException}
      * @returns {Promise<Models.Oauth2Token>}
      */
@@ -357,6 +459,7 @@ export declare class Oauth2 {
         codeVerifier?: string;
         redirectUri?: string;
         resource?: string;
+        audience?: string;
     }): Promise<Models.Oauth2Token>;
     /**
      * Exchange an OAuth2 authorization code, refresh token, or device code for access and refresh tokens.
@@ -365,14 +468,15 @@ export declare class Oauth2 {
      * @param {string} code - Authorization code to be exchanged for access and refresh tokens. Required for `authorization_code` grant type.
      * @param {string} refreshToken - Refresh token to be exchanged for a new access and refresh tokens. Required for `refresh_token` grant type.
      * @param {string} deviceCode - Device code obtained from the device authorization endpoint. Required for `urn:ietf:params:oauth:grant-type:device_code` grant type.
-     * @param {string} clientId - OAuth2 client ID.
+     * @param {string} clientId - OAuth2 client ID. Either a registered app ID or an HTTPS client ID metadata document URL.
      * @param {string} clientSecret - OAuth2 client secret. Required for confidential apps.
      * @param {string} codeVerifier - PKCE code verifier. Required for public apps.
      * @param {string} redirectUri - Redirect URI. Required for `authorization_code` grant type.
      * @param {string} resource - RFC 8707 resource indicator URI or URI list. Each value must be an absolute URI without a fragment.
+     * @param {string} audience - Compatibility alias for a single OAuth2 resource indicator URI.
      * @throws {AppwriteException}
      * @returns {Promise<Models.Oauth2Token>}
      * @deprecated Use the object parameter style method for a better developer experience.
      */
-    createToken(grantType: string, code?: string, refreshToken?: string, deviceCode?: string, clientId?: string, clientSecret?: string, codeVerifier?: string, redirectUri?: string, resource?: string): Promise<Models.Oauth2Token>;
+    createToken(grantType: string, code?: string, refreshToken?: string, deviceCode?: string, clientId?: string, clientSecret?: string, codeVerifier?: string, redirectUri?: string, resource?: string, audience?: string): Promise<Models.Oauth2Token>;
 }

package/types/services/postgresql.d.ts

@@ -31,6 +31,7 @@ export declare class Postgresql {
      * @param {string} params.specification - Specification identifier. Drives the allocated CPU, memory, storage, storage class, and connection ceiling.
      * @param {number} params.replicas - Number of high availability replicas (0-5). High availability is enabled when greater than 0.
      * @param {string} params.syncMode - Replication sync mode preference. Allowed values: async, sync, quorum.
+     * @param {string} params.standbyRegion - Standby region for a cross-region replica. When set, a replica is provisioned in this region for cross-region high availability. Must differ from the database region.
      * @param {number} params.networkIdleTimeoutSeconds - Connection idle timeout in seconds.
      * @param {string[]} params.networkIPAllowlist - IP addresses/CIDR ranges allowed to connect.
      * @param {number} params.idleTimeoutMinutes - Minutes of inactivity before container scales to zero.
@@ -39,7 +40,7 @@ export declare class Postgresql {
      * @param {boolean} params.storageAutoscaling - Enable automatic storage expansion when usage exceeds threshold.
      * @param {number} params.storageAutoscalingThresholdPercent - Storage usage percentage (50-95) that triggers automatic expansion.
      * @param {number} params.storageAutoscalingMaxGb - Maximum storage size in GB for autoscaling. 0 means no limit.
-     * @param {string} params.api - Product API that owns this database: nativedb (raw, direct-access), tablesdb, documentsdb, or vectorsdb. tablesdb/documentsdb/vectorsdb databases are reached only through their product APIs.
+     * @param {string} params.api - Product API that owns this database: tablesdb, documentsdb, or vectorsdb. Omit for a raw database reached directly; its api is its engine. tablesdb/documentsdb/vectorsdb databases are reached only through their product APIs.
      * @throws {AppwriteException}
      * @returns {Promise<Models.DedicatedDatabase>}
      */
@@ -50,6 +51,7 @@ export declare class Postgresql {
         specification?: string;
         replicas?: number;
         syncMode?: string;
+        standbyRegion?: string;
         networkIdleTimeoutSeconds?: number;
         networkIPAllowlist?: string[];
         idleTimeoutMinutes?: number;
@@ -69,6 +71,7 @@ export declare class Postgresql {
      * @param {string} specification - Specification identifier. Drives the allocated CPU, memory, storage, storage class, and connection ceiling.
      * @param {number} replicas - Number of high availability replicas (0-5). High availability is enabled when greater than 0.
      * @param {string} syncMode - Replication sync mode preference. Allowed values: async, sync, quorum.
+     * @param {string} standbyRegion - Standby region for a cross-region replica. When set, a replica is provisioned in this region for cross-region high availability. Must differ from the database region.
      * @param {number} networkIdleTimeoutSeconds - Connection idle timeout in seconds.
      * @param {string[]} networkIPAllowlist - IP addresses/CIDR ranges allowed to connect.
      * @param {number} idleTimeoutMinutes - Minutes of inactivity before container scales to zero.
@@ -77,12 +80,12 @@ export declare class Postgresql {
      * @param {boolean} storageAutoscaling - Enable automatic storage expansion when usage exceeds threshold.
      * @param {number} storageAutoscalingThresholdPercent - Storage usage percentage (50-95) that triggers automatic expansion.
      * @param {number} storageAutoscalingMaxGb - Maximum storage size in GB for autoscaling. 0 means no limit.
-     * @param {string} api - Product API that owns this database: nativedb (raw, direct-access), tablesdb, documentsdb, or vectorsdb. tablesdb/documentsdb/vectorsdb databases are reached only through their product APIs.
+     * @param {string} api - Product API that owns this database: tablesdb, documentsdb, or vectorsdb. Omit for a raw database reached directly; its api is its engine. tablesdb/documentsdb/vectorsdb databases are reached only through their product APIs.
      * @throws {AppwriteException}
      * @returns {Promise<Models.DedicatedDatabase>}
      * @deprecated Use the object parameter style method for a better developer experience.
      */
-    create(databaseId: string, name: string, version?: string, specification?: string, replicas?: number, syncMode?: string, networkIdleTimeoutSeconds?: number, networkIPAllowlist?: string[], idleTimeoutMinutes?: number, pitr?: boolean, pitrRetentionDays?: number, storageAutoscaling?: boolean, storageAutoscalingThresholdPercent?: number, storageAutoscalingMaxGb?: number, api?: string): Promise<Models.DedicatedDatabase>;
+    create(databaseId: string, name: string, version?: string, specification?: string, replicas?: number, syncMode?: string, standbyRegion?: string, networkIdleTimeoutSeconds?: number, networkIPAllowlist?: string[], idleTimeoutMinutes?: number, pitr?: boolean, pitrRetentionDays?: number, storageAutoscaling?: boolean, storageAutoscalingThresholdPercent?: number, storageAutoscalingMaxGb?: number, api?: string): Promise<Models.DedicatedDatabase>;
     /**
      * List the dedicated database specifications available on the current plan. Each specification reports its resource limits, pricing, and whether it is enabled for the organization.
      *
@@ -118,6 +121,8 @@ export declare class Postgresql {
      * @param {string} params.specification - Specification. Changes cpu, memory, storage, connection ceiling, and node pool based on specification config. Resource changes are applied via rolling cutover with zero downtime.
      * @param {number} params.replicas - Number of high availability replicas (0-5). High availability is enabled when greater than 0.
      * @param {string} params.syncMode - Replication sync mode preference. Allowed values: async, sync, quorum.
+     * @param {number} params.crossRegionReplicas - Number of cross-region standby replicas (0-1). Cross-region replication is enabled when greater than 0.
+     * @param {string} params.standbyRegion - Standby region for the cross-region replica. Required when enabling cross-region replication and no standby region is already configured. Must differ from the database region.
      * @param {number} params.networkIdleTimeoutSeconds - Connection idle timeout in seconds (60-86400).
      * @param {string[]} params.networkIPAllowlist - IP addresses/CIDR ranges allowed to connect.
      * @param {number} params.idleTimeoutMinutes - Minutes before container scales to zero.
@@ -143,6 +148,8 @@ export declare class Postgresql {
         specification?: string;
         replicas?: number;
         syncMode?: string;
+        crossRegionReplicas?: number;
+        standbyRegion?: string;
         networkIdleTimeoutSeconds?: number;
         networkIPAllowlist?: string[];
         idleTimeoutMinutes?: number;
@@ -168,6 +175,8 @@ export declare class Postgresql {
      * @param {string} specification - Specification. Changes cpu, memory, storage, connection ceiling, and node pool based on specification config. Resource changes are applied via rolling cutover with zero downtime.
      * @param {number} replicas - Number of high availability replicas (0-5). High availability is enabled when greater than 0.
      * @param {string} syncMode - Replication sync mode preference. Allowed values: async, sync, quorum.
+     * @param {number} crossRegionReplicas - Number of cross-region standby replicas (0-1). Cross-region replication is enabled when greater than 0.
+     * @param {string} standbyRegion - Standby region for the cross-region replica. Required when enabling cross-region replication and no standby region is already configured. Must differ from the database region.
      * @param {number} networkIdleTimeoutSeconds - Connection idle timeout in seconds (60-86400).
      * @param {string[]} networkIPAllowlist - IP addresses/CIDR ranges allowed to connect.
      * @param {number} idleTimeoutMinutes - Minutes before container scales to zero.
@@ -187,7 +196,7 @@ export declare class Postgresql {
      * @returns {Promise<Models.DedicatedDatabase>}
      * @deprecated Use the object parameter style method for a better developer experience.
      */
-    update(databaseId: string, name?: string, status?: string, specification?: string, replicas?: number, syncMode?: string, networkIdleTimeoutSeconds?: number, networkIPAllowlist?: string[], idleTimeoutMinutes?: number, pitr?: boolean, pitrRetentionDays?: number, storageAutoscaling?: boolean, storageAutoscalingThresholdPercent?: number, storageAutoscalingMaxGb?: number, metricsTraceSampleRate?: number, metricsSlowQueryLogThresholdMs?: number, sqlApiEnabled?: boolean, sqlApiAllowedStatements?: string[], sqlApiMaxRows?: number, sqlApiMaxBytes?: number, sqlApiTimeoutSeconds?: number): Promise<Models.DedicatedDatabase>;
+    update(databaseId: string, name?: string, status?: string, specification?: string, replicas?: number, syncMode?: string, crossRegionReplicas?: number, standbyRegion?: string, networkIdleTimeoutSeconds?: number, networkIPAllowlist?: string[], idleTimeoutMinutes?: number, pitr?: boolean, pitrRetentionDays?: number, storageAutoscaling?: boolean, storageAutoscalingThresholdPercent?: number, storageAutoscalingMaxGb?: number, metricsTraceSampleRate?: number, metricsSlowQueryLogThresholdMs?: number, sqlApiEnabled?: boolean, sqlApiAllowedStatements?: string[], sqlApiMaxRows?: number, sqlApiMaxBytes?: number, sqlApiTimeoutSeconds?: number): Promise<Models.DedicatedDatabase>;
     /**
      * Delete a dedicated database. This action is irreversible. The database status will be set to 'deleting' and all resources will be cleaned up. Deletion is allowed from any state, and repeating the call re-dispatches the cleanup.
      *

package/types/services/project.d.ts

@@ -358,6 +358,7 @@ export declare class Project {
      * @param {number} params.userCodeLength - Number of characters in the device flow user code, excluding the formatting separator. Shorter codes are easier to type but weaker; pair short codes with short expiry. Leave empty to use default 8.
      * @param {string} params.userCodeFormat - Character set for device flow user codes: `numeric` (digits only — best for numeric keypads and TV remotes), `alphabetic` (letters only), or `alphanumeric` (letters and digits — highest entropy per character). Defaults to `alphanumeric`.
      * @param {number} params.deviceCodeDuration - Lifetime in seconds of device flow device codes and user codes. Device codes are intentionally short-lived. Leave empty to use default 600.
+     * @param {string[]} params.defaultScopes - List of OAuth2 scopes used when an authorization request omits the scope parameter. Every default scope must also be allowed by the OAuth2 server. Maximum of 100 scopes are allowed, each up to 128 characters long.
      * @throws {AppwriteException}
      * @returns {Promise<Models.Project>}
      */
@@ -375,6 +376,7 @@ export declare class Project {
         userCodeLength?: number;
         userCodeFormat?: string;
         deviceCodeDuration?: number;
+        defaultScopes?: string[];
     }): Promise<Models.Project>;
     /**
      * Update the OAuth2 server (OIDC provider) configuration.
@@ -392,11 +394,12 @@ export declare class Project {
      * @param {number} userCodeLength - Number of characters in the device flow user code, excluding the formatting separator. Shorter codes are easier to type but weaker; pair short codes with short expiry. Leave empty to use default 8.
      * @param {string} userCodeFormat - Character set for device flow user codes: `numeric` (digits only — best for numeric keypads and TV remotes), `alphabetic` (letters only), or `alphanumeric` (letters and digits — highest entropy per character). Defaults to `alphanumeric`.
      * @param {number} deviceCodeDuration - Lifetime in seconds of device flow device codes and user codes. Device codes are intentionally short-lived. Leave empty to use default 600.
+     * @param {string[]} defaultScopes - List of OAuth2 scopes used when an authorization request omits the scope parameter. Every default scope must also be allowed by the OAuth2 server. Maximum of 100 scopes are allowed, each up to 128 characters long.
      * @throws {AppwriteException}
      * @returns {Promise<Models.Project>}
      * @deprecated Use the object parameter style method for a better developer experience.
      */
-    updateOAuth2Server(enabled: boolean, authorizationUrl: string, scopes?: string[], authorizationDetailsTypes?: string[], accessTokenDuration?: number, refreshTokenDuration?: number, publicAccessTokenDuration?: number, publicRefreshTokenDuration?: number, confidentialPkce?: boolean, verificationUrl?: string, userCodeLength?: number, userCodeFormat?: string, deviceCodeDuration?: number): Promise<Models.Project>;
+    updateOAuth2Server(enabled: boolean, authorizationUrl: string, scopes?: string[], authorizationDetailsTypes?: string[], accessTokenDuration?: number, refreshTokenDuration?: number, publicAccessTokenDuration?: number, publicRefreshTokenDuration?: number, confidentialPkce?: boolean, verificationUrl?: string, userCodeLength?: number, userCodeFormat?: string, deviceCodeDuration?: number, defaultScopes?: string[]): Promise<Models.Project>;
     /**
      * Update the project OAuth2 Amazon configuration.
      *
@@ -453,6 +456,31 @@ export declare class Project {
      * @deprecated Use the object parameter style method for a better developer experience.
      */
     updateOAuth2Apple(serviceId?: string, keyId?: string, teamId?: string, p8File?: string, enabled?: boolean): Promise<Models.OAuth2Apple>;
+    /**
+     * Update the project OAuth2 Appwrite configuration.
+     *
+     * @param {string} params.clientId - 'Client ID' of Appwrite OAuth2 app. For example: 6a42000000000000b5a0
+     * @param {string} params.clientSecret - 'Client Secret' of Appwrite OAuth2 app. For example: b86afd000000000000000000000000000000000000000000000000000ced5f93
+     * @param {boolean} params.enabled - OAuth2 sign-in method status. Set to true to enable new session creation. Setting to true will trigger end-to-end credentials validation, and will throw if the credentials are invalid.
+     * @throws {AppwriteException}
+     * @returns {Promise<Models.OAuth2Appwrite>}
+     */
+    updateOAuth2Appwrite(params?: {
+        clientId?: string;
+        clientSecret?: string;
+        enabled?: boolean;
+    }): Promise<Models.OAuth2Appwrite>;
+    /**
+     * Update the project OAuth2 Appwrite configuration.
+     *
+     * @param {string} clientId - 'Client ID' of Appwrite OAuth2 app. For example: 6a42000000000000b5a0
+     * @param {string} clientSecret - 'Client Secret' of Appwrite OAuth2 app. For example: b86afd000000000000000000000000000000000000000000000000000ced5f93
+     * @param {boolean} enabled - OAuth2 sign-in method status. Set to true to enable new session creation. Setting to true will trigger end-to-end credentials validation, and will throw if the credentials are invalid.
+     * @throws {AppwriteException}
+     * @returns {Promise<Models.OAuth2Appwrite>}
+     * @deprecated Use the object parameter style method for a better developer experience.
+     */
+    updateOAuth2Appwrite(clientId?: string, clientSecret?: string, enabled?: boolean): Promise<Models.OAuth2Appwrite>;
     /**
      * Update the project OAuth2 Auth0 configuration.
      *

package/types/services/sites.d.ts

@@ -4,7 +4,6 @@ import { Framework } from '../enums/framework';
 import { BuildRuntime } from '../enums/build-runtime';
 import { Adapter } from '../enums/adapter';
 import { SiteTemplateUseCase } from '../enums/site-template-use-case';
-import { UsageRange } from '../enums/usage-range';
 import { TemplateReferenceType } from '../enums/template-reference-type';
 import { VCSReferenceType } from '../enums/vcs-reference-type';
 import { DeploymentDownloadType } from '../enums/deployment-download-type';
@@ -194,25 +193,6 @@ export declare class Sites {
      * @deprecated Use the object parameter style method for a better developer experience.
      */
     getTemplate(templateId: string): Promise<Models.TemplateSite>;
-    /**
-     * Get usage metrics and statistics for all sites in the project. View statistics including total deployments, builds, logs, storage usage, and compute time. The response includes both current totals and historical data for each metric. Use the optional range parameter to specify the time window for historical data: 24h (last 24 hours), 30d (last 30 days), or 90d (last 90 days). If not specified, defaults to 30 days.
-     *
-     * @param {UsageRange} params.range - Date range.
-     * @throws {AppwriteException}
-     * @returns {Promise<Models.UsageSites>}
-     */
-    listUsage(params?: {
-        range?: UsageRange;
-    }): Promise<Models.UsageSites>;
-    /**
-     * Get usage metrics and statistics for all sites in the project. View statistics including total deployments, builds, logs, storage usage, and compute time. The response includes both current totals and historical data for each metric. Use the optional range parameter to specify the time window for historical data: 24h (last 24 hours), 30d (last 30 days), or 90d (last 90 days). If not specified, defaults to 30 days.
-     *
-     * @param {UsageRange} range - Date range.
-     * @throws {AppwriteException}
-     * @returns {Promise<Models.UsageSites>}
-     * @deprecated Use the object parameter style method for a better developer experience.
-     */
-    listUsage(range?: UsageRange): Promise<Models.UsageSites>;
     /**
      * Get a site by its unique ID.
      *
@@ -566,6 +546,7 @@ export declare class Sites {
      * @param {string} params.siteId - Site ID.
      * @param {string} params.deploymentId - Deployment ID.
      * @param {DeploymentDownloadType} params.type - Deployment file to download. Can be: "source", "output".
+     * @param {string} params.token - Presigned source-download token for accessing this deployment without a session (jobs-service).
      * @throws {AppwriteException}
      * @returns {string}
      */
@@ -573,6 +554,7 @@ export declare class Sites {
         siteId: string;
         deploymentId: string;
         type?: DeploymentDownloadType;
+        token?: string;
     }): string;
     /**
      * Get a site deployment content by its unique ID. The endpoint response return with a 'Content-Disposition: attachment' header that tells the browser to start downloading the file to user downloads directory.
@@ -580,11 +562,12 @@ export declare class Sites {
      * @param {string} siteId - Site ID.
      * @param {string} deploymentId - Deployment ID.
      * @param {DeploymentDownloadType} type - Deployment file to download. Can be: "source", "output".
+     * @param {string} token - Presigned source-download token for accessing this deployment without a session (jobs-service).
      * @throws {AppwriteException}
      * @returns {string}
      * @deprecated Use the object parameter style method for a better developer experience.
      */
-    getDeploymentDownload(siteId: string, deploymentId: string, type?: DeploymentDownloadType): string;
+    getDeploymentDownload(siteId: string, deploymentId: string, type?: DeploymentDownloadType, token?: string): string;
     /**
      * Cancel an ongoing site deployment build. If the build is already in progress, it will be stopped and marked as canceled. If the build hasn't started yet, it will be marked as canceled without executing. You cannot cancel builds that have already completed (status 'ready') or failed. The response includes the final build status and details.
      *
@@ -676,28 +659,6 @@ export declare class Sites {
      * @deprecated Use the object parameter style method for a better developer experience.
      */
     deleteLog(siteId: string, logId: string): Promise<{}>;
-    /**
-     * Get usage metrics and statistics for a for a specific site. View statistics including total deployments, builds, executions, storage usage, and compute time. The response includes both current totals and historical data for each metric. Use the optional range parameter to specify the time window for historical data: 24h (last 24 hours), 30d (last 30 days), or 90d (last 90 days). If not specified, defaults to 30 days.
-     *
-     * @param {string} params.siteId - Site ID.
-     * @param {UsageRange} params.range - Date range.
-     * @throws {AppwriteException}
-     * @returns {Promise<Models.UsageSite>}
-     */
-    getUsage(params: {
-        siteId: string;
-        range?: UsageRange;
-    }): Promise<Models.UsageSite>;
-    /**
-     * Get usage metrics and statistics for a for a specific site. View statistics including total deployments, builds, executions, storage usage, and compute time. The response includes both current totals and historical data for each metric. Use the optional range parameter to specify the time window for historical data: 24h (last 24 hours), 30d (last 30 days), or 90d (last 90 days). If not specified, defaults to 30 days.
-     *
-     * @param {string} siteId - Site ID.
-     * @param {UsageRange} range - Date range.
-     * @throws {AppwriteException}
-     * @returns {Promise<Models.UsageSite>}
-     * @deprecated Use the object parameter style method for a better developer experience.
-     */
-    getUsage(siteId: string, range?: UsageRange): Promise<Models.UsageSite>;
     /**
      * Get a list of all variables of a specific site.
      *

package/types/services/storage.d.ts

@@ -3,7 +3,6 @@ import type { Models } from '../models';
 import { Compression } from '../enums/compression';
 import { ImageGravity } from '../enums/image-gravity';
 import { ImageFormat } from '../enums/image-format';
-import { UsageRange } from '../enums/usage-range';
 export declare class Storage {
     client: Client;
     constructor(client: Client);
@@ -419,49 +418,4 @@ export declare class Storage {
      * @deprecated Use the object parameter style method for a better developer experience.
      */
     getFileView(bucketId: string, fileId: string, token?: string): string;
-    /**
-     * Get usage metrics and statistics for all buckets in the project. You can view the total number of buckets, files, storage usage. The response includes both current totals and historical data over time. Use the optional range parameter to specify the time window for historical data: 24h (last 24 hours), 30d (last 30 days), or 90d (last 90 days). If not specified, range defaults to 30 days.
-     *
-     *
-     * @param {UsageRange} params.range - Date range.
-     * @throws {AppwriteException}
-     * @returns {Promise<Models.UsageStorage>}
-     */
-    getUsage(params?: {
-        range?: UsageRange;
-    }): Promise<Models.UsageStorage>;
-    /**
-     * Get usage metrics and statistics for all buckets in the project. You can view the total number of buckets, files, storage usage. The response includes both current totals and historical data over time. Use the optional range parameter to specify the time window for historical data: 24h (last 24 hours), 30d (last 30 days), or 90d (last 90 days). If not specified, range defaults to 30 days.
-     *
-     *
-     * @param {UsageRange} range - Date range.
-     * @throws {AppwriteException}
-     * @returns {Promise<Models.UsageStorage>}
-     * @deprecated Use the object parameter style method for a better developer experience.
-     */
-    getUsage(range?: UsageRange): Promise<Models.UsageStorage>;
-    /**
-     * Get usage metrics and statistics a specific bucket in the project. You can view the total number of files, storage usage. The response includes both current totals and historical data over time. Use the optional range parameter to specify the time window for historical data: 24h (last 24 hours), 30d (last 30 days), or 90d (last 90 days). If not specified, range defaults to 30 days.
-     *
-     *
-     * @param {string} params.bucketId - Bucket ID.
-     * @param {UsageRange} params.range - Date range.
-     * @throws {AppwriteException}
-     * @returns {Promise<Models.UsageBuckets>}
-     */
-    getBucketUsage(params: {
-        bucketId: string;
-        range?: UsageRange;
-    }): Promise<Models.UsageBuckets>;
-    /**
-     * Get usage metrics and statistics a specific bucket in the project. You can view the total number of files, storage usage. The response includes both current totals and historical data over time. Use the optional range parameter to specify the time window for historical data: 24h (last 24 hours), 30d (last 30 days), or 90d (last 90 days). If not specified, range defaults to 30 days.
-     *
-     *
-     * @param {string} bucketId - Bucket ID.
-     * @param {UsageRange} range - Date range.
-     * @throws {AppwriteException}
-     * @returns {Promise<Models.UsageBuckets>}
-     * @deprecated Use the object parameter style method for a better developer experience.
-     */
-    getBucketUsage(bucketId: string, range?: UsageRange): Promise<Models.UsageBuckets>;
 }