@appwrite.io/console 15.3.0 → 15.5.0

package/types/services/oauth-2.d.ts

@@ -31,7 +31,7 @@ export declare class Oauth2 {
     /**
      * Begin the OAuth2 authorization flow. When called without a session, the user is redirected to the consent screen without grant ID. When called with a session, the redirect URL includes param for grant ID. You can pass Accept header of `application/json` to receive a JSON response instead of a redirect.
      *
-     * @param {string} params.clientId - OAuth2 client ID.
+     * @param {string} params.clientId - OAuth2 client ID. Either a registered app ID or an HTTPS client ID metadata document URL.
      * @param {string} params.redirectUri - Redirect URI where visitor will be redirected after authorization, whether successful or not.
      * @param {string} params.responseType - OAuth2 / OIDC response type. One of `code` (Authorization Code Flow), `id_token` (Implicit Flow, OIDC login only), or `code id_token` (Hybrid Flow).
      * @param {string} params.scope - Space-separated OAuth2 scopes. Can include project scopes, and built-in scopes: `openid`, `email`, `profile`, `phone`.
@@ -43,6 +43,7 @@ export declare class Oauth2 {
      * @param {number} params.maxAge - OIDC max_age paraleter for customization of consent screen. Maximum allowable elapsed time in seconds since the user last authenticated. If exceeded, re-authentication is required.
      * @param {string} params.authorizationDetails - Rich authorization request. JSON array of objects, each with a `type` and project-defined fields
      * @param {string} params.resource - RFC 8707 resource indicator URI or URI list. Each value must be an absolute URI without a fragment.
+     * @param {string} params.audience - Compatibility alias for a single OAuth2 resource indicator URI.
      * @param {string} params.requestUri - OAuth2 authorization request handle returned by the pushed authorization request endpoint.
      * @throws {AppwriteException}
      * @returns {Promise<Models.Oauth2Authorize>}
@@ -60,12 +61,13 @@ export declare class Oauth2 {
         maxAge?: number;
         authorizationDetails?: string;
         resource?: string;
+        audience?: string;
         requestUri?: string;
     }): Promise<Models.Oauth2Authorize>;
     /**
      * Begin the OAuth2 authorization flow. When called without a session, the user is redirected to the consent screen without grant ID. When called with a session, the redirect URL includes param for grant ID. You can pass Accept header of `application/json` to receive a JSON response instead of a redirect.
      *
-     * @param {string} clientId - OAuth2 client ID.
+     * @param {string} clientId - OAuth2 client ID. Either a registered app ID or an HTTPS client ID metadata document URL.
      * @param {string} redirectUri - Redirect URI where visitor will be redirected after authorization, whether successful or not.
      * @param {string} responseType - OAuth2 / OIDC response type. One of `code` (Authorization Code Flow), `id_token` (Implicit Flow, OIDC login only), or `code id_token` (Hybrid Flow).
      * @param {string} scope - Space-separated OAuth2 scopes. Can include project scopes, and built-in scopes: `openid`, `email`, `profile`, `phone`.
@@ -77,19 +79,79 @@ export declare class Oauth2 {
      * @param {number} maxAge - OIDC max_age paraleter for customization of consent screen. Maximum allowable elapsed time in seconds since the user last authenticated. If exceeded, re-authentication is required.
      * @param {string} authorizationDetails - Rich authorization request. JSON array of objects, each with a `type` and project-defined fields
      * @param {string} resource - RFC 8707 resource indicator URI or URI list. Each value must be an absolute URI without a fragment.
+     * @param {string} audience - Compatibility alias for a single OAuth2 resource indicator URI.
      * @param {string} requestUri - OAuth2 authorization request handle returned by the pushed authorization request endpoint.
      * @throws {AppwriteException}
      * @returns {Promise<Models.Oauth2Authorize>}
      * @deprecated Use the object parameter style method for a better developer experience.
      */
-    authorize(clientId?: string, redirectUri?: string, responseType?: string, scope?: string, state?: string, nonce?: string, codeChallenge?: string, codeChallengeMethod?: string, prompt?: string, maxAge?: number, authorizationDetails?: string, resource?: string, requestUri?: string): Promise<Models.Oauth2Authorize>;
+    authorize(clientId?: string, redirectUri?: string, responseType?: string, scope?: string, state?: string, nonce?: string, codeChallenge?: string, codeChallengeMethod?: string, prompt?: string, maxAge?: number, authorizationDetails?: string, resource?: string, audience?: string, requestUri?: string): Promise<Models.Oauth2Authorize>;
+    /**
+     * Begin the OAuth2 authorization flow. When called without a session, the user is redirected to the consent screen without grant ID. When called with a session, the redirect URL includes param for grant ID. You can pass Accept header of `application/json` to receive a JSON response instead of a redirect.
+     *
+     * @param {string} params.clientId - OAuth2 client ID. Either a registered app ID or an HTTPS client ID metadata document URL.
+     * @param {string} params.redirectUri - Redirect URI where visitor will be redirected after authorization, whether successful or not.
+     * @param {string} params.responseType - OAuth2 / OIDC response type. One of `code` (Authorization Code Flow), `id_token` (Implicit Flow, OIDC login only), or `code id_token` (Hybrid Flow).
+     * @param {string} params.scope - Space-separated OAuth2 scopes. Can include project scopes, and built-in scopes: `openid`, `email`, `profile`, `phone`.
+     * @param {string} params.state - OAuth2 state. You receive this back in the redirect URI.
+     * @param {string} params.nonce - OIDC nonce parameter to prevent replay attacks. Required when response_type includes `id_token`.
+     * @param {string} params.codeChallenge - PKCE code challenge. Required when OAuth2 app is public.
+     * @param {string} params.codeChallengeMethod - PKCE code challenge method. Required when OAuth2 app is public.
+     * @param {string} params.prompt - OIDC prompt parameter for customization of consent screen. Space-separated list of: none, login, consent, select_account.
+     * @param {number} params.maxAge - OIDC max_age paraleter for customization of consent screen. Maximum allowable elapsed time in seconds since the user last authenticated. If exceeded, re-authentication is required.
+     * @param {string} params.authorizationDetails - Rich authorization request. JSON array of objects, each with a `type` and project-defined fields
+     * @param {string} params.resource - RFC 8707 resource indicator URI or URI list. Each value must be an absolute URI without a fragment.
+     * @param {string} params.audience - Compatibility alias for a single OAuth2 resource indicator URI.
+     * @param {string} params.requestUri - OAuth2 authorization request handle returned by the pushed authorization request endpoint.
+     * @throws {AppwriteException}
+     * @returns {Promise<Models.Oauth2Authorize>}
+     */
+    authorizePost(params?: {
+        clientId?: string;
+        redirectUri?: string;
+        responseType?: string;
+        scope?: string;
+        state?: string;
+        nonce?: string;
+        codeChallenge?: string;
+        codeChallengeMethod?: string;
+        prompt?: string;
+        maxAge?: number;
+        authorizationDetails?: string;
+        resource?: string;
+        audience?: string;
+        requestUri?: string;
+    }): Promise<Models.Oauth2Authorize>;
+    /**
+     * Begin the OAuth2 authorization flow. When called without a session, the user is redirected to the consent screen without grant ID. When called with a session, the redirect URL includes param for grant ID. You can pass Accept header of `application/json` to receive a JSON response instead of a redirect.
+     *
+     * @param {string} clientId - OAuth2 client ID. Either a registered app ID or an HTTPS client ID metadata document URL.
+     * @param {string} redirectUri - Redirect URI where visitor will be redirected after authorization, whether successful or not.
+     * @param {string} responseType - OAuth2 / OIDC response type. One of `code` (Authorization Code Flow), `id_token` (Implicit Flow, OIDC login only), or `code id_token` (Hybrid Flow).
+     * @param {string} scope - Space-separated OAuth2 scopes. Can include project scopes, and built-in scopes: `openid`, `email`, `profile`, `phone`.
+     * @param {string} state - OAuth2 state. You receive this back in the redirect URI.
+     * @param {string} nonce - OIDC nonce parameter to prevent replay attacks. Required when response_type includes `id_token`.
+     * @param {string} codeChallenge - PKCE code challenge. Required when OAuth2 app is public.
+     * @param {string} codeChallengeMethod - PKCE code challenge method. Required when OAuth2 app is public.
+     * @param {string} prompt - OIDC prompt parameter for customization of consent screen. Space-separated list of: none, login, consent, select_account.
+     * @param {number} maxAge - OIDC max_age paraleter for customization of consent screen. Maximum allowable elapsed time in seconds since the user last authenticated. If exceeded, re-authentication is required.
+     * @param {string} authorizationDetails - Rich authorization request. JSON array of objects, each with a `type` and project-defined fields
+     * @param {string} resource - RFC 8707 resource indicator URI or URI list. Each value must be an absolute URI without a fragment.
+     * @param {string} audience - Compatibility alias for a single OAuth2 resource indicator URI.
+     * @param {string} requestUri - OAuth2 authorization request handle returned by the pushed authorization request endpoint.
+     * @throws {AppwriteException}
+     * @returns {Promise<Models.Oauth2Authorize>}
+     * @deprecated Use the object parameter style method for a better developer experience.
+     */
+    authorizePost(clientId?: string, redirectUri?: string, responseType?: string, scope?: string, state?: string, nonce?: string, codeChallenge?: string, codeChallengeMethod?: string, prompt?: string, maxAge?: number, authorizationDetails?: string, resource?: string, audience?: string, requestUri?: string): Promise<Models.Oauth2Authorize>;
     /**
      * Start the OAuth2 Device Authorization Grant. Returns the device code, user code, verification URL, expiration, and polling interval.
      *
-     * @param {string} params.clientId - OAuth2 client ID.
+     * @param {string} params.clientId - OAuth2 client ID. Either a registered app ID or an HTTPS client ID metadata document URL.
      * @param {string} params.scope - Space-separated OAuth2 scopes. Can include project scopes, and built-in scopes: `openid`, `email`, `profile`.
      * @param {string} params.authorizationDetails - Rich authorization request. JSON array of objects, each with a `type` and project-defined fields
      * @param {string} params.resource - RFC 8707 resource indicator URI or URI list. Each value must be an absolute URI without a fragment.
+     * @param {string} params.audience - Compatibility alias for a single OAuth2 resource indicator URI.
      * @throws {AppwriteException}
      * @returns {Promise<Models.Oauth2DeviceAuthorization>}
      */
@@ -98,19 +160,21 @@ export declare class Oauth2 {
         scope?: string;
         authorizationDetails?: string;
         resource?: string;
+        audience?: string;
     }): Promise<Models.Oauth2DeviceAuthorization>;
     /**
      * Start the OAuth2 Device Authorization Grant. Returns the device code, user code, verification URL, expiration, and polling interval.
      *
-     * @param {string} clientId - OAuth2 client ID.
+     * @param {string} clientId - OAuth2 client ID. Either a registered app ID or an HTTPS client ID metadata document URL.
      * @param {string} scope - Space-separated OAuth2 scopes. Can include project scopes, and built-in scopes: `openid`, `email`, `profile`.
      * @param {string} authorizationDetails - Rich authorization request. JSON array of objects, each with a `type` and project-defined fields
      * @param {string} resource - RFC 8707 resource indicator URI or URI list. Each value must be an absolute URI without a fragment.
+     * @param {string} audience - Compatibility alias for a single OAuth2 resource indicator URI.
      * @throws {AppwriteException}
      * @returns {Promise<Models.Oauth2DeviceAuthorization>}
      * @deprecated Use the object parameter style method for a better developer experience.
      */
-    createDeviceAuthorization(clientId?: string, scope?: string, authorizationDetails?: string, resource?: string): Promise<Models.Oauth2DeviceAuthorization>;
+    createDeviceAuthorization(clientId?: string, scope?: string, authorizationDetails?: string, resource?: string, audience?: string): Promise<Models.Oauth2DeviceAuthorization>;
     /**
      * Exchange a device flow user code for an OAuth2 grant. The authenticated user is bound to the pending grant. Pass the returned grant ID to the get grant endpoint to render the consent screen, then to the approve or reject endpoint to complete the flow.
      *
@@ -183,6 +247,40 @@ export declare class Oauth2 {
      * @deprecated Use the object parameter style method for a better developer experience.
      */
     logout(idTokenHint?: string, logoutHint?: string, clientId?: string, postLogoutRedirectUri?: string, state?: string, uiLocales?: string): Promise<{}>;
+    /**
+     * OpenID Connect RP-Initiated Logout. Ends the user session and revokes the tokens issued to the app identified by the `id_token_hint`, then redirects the user to `post_logout_redirect_uri` when it matches a URI registered on the app.
+     *
+     * @param {string} params.idTokenHint - ID Token previously issued to the app, used as proof of the logout request. Required to end the session; signature and issuer are validated while expiry is ignored.
+     * @param {string} params.logoutHint - Hint about the user that is logging out. Accepted for OIDC compatibility.
+     * @param {string} params.clientId - OAuth2 client ID. When both `client_id` and `id_token_hint` are provided, they must identify the same app.
+     * @param {string} params.postLogoutRedirectUri - URI to redirect the user to after logout. Must exactly match a URI registered in the app's `postLogoutRedirectUris`.
+     * @param {string} params.state - Opaque value passed back unchanged in the `state` query param of the post-logout redirect.
+     * @param {string} params.uiLocales - Preferred languages for any logout UI, as space-separated BCP47 tags. Accepted for OIDC compatibility.
+     * @throws {AppwriteException}
+     * @returns {Promise<{}>}
+     */
+    logoutPost(params?: {
+        idTokenHint?: string;
+        logoutHint?: string;
+        clientId?: string;
+        postLogoutRedirectUri?: string;
+        state?: string;
+        uiLocales?: string;
+    }): Promise<{}>;
+    /**
+     * OpenID Connect RP-Initiated Logout. Ends the user session and revokes the tokens issued to the app identified by the `id_token_hint`, then redirects the user to `post_logout_redirect_uri` when it matches a URI registered on the app.
+     *
+     * @param {string} idTokenHint - ID Token previously issued to the app, used as proof of the logout request. Required to end the session; signature and issuer are validated while expiry is ignored.
+     * @param {string} logoutHint - Hint about the user that is logging out. Accepted for OIDC compatibility.
+     * @param {string} clientId - OAuth2 client ID. When both `client_id` and `id_token_hint` are provided, they must identify the same app.
+     * @param {string} postLogoutRedirectUri - URI to redirect the user to after logout. Must exactly match a URI registered in the app's `postLogoutRedirectUris`.
+     * @param {string} state - Opaque value passed back unchanged in the `state` query param of the post-logout redirect.
+     * @param {string} uiLocales - Preferred languages for any logout UI, as space-separated BCP47 tags. Accepted for OIDC compatibility.
+     * @throws {AppwriteException}
+     * @returns {Promise<{}>}
+     * @deprecated Use the object parameter style method for a better developer experience.
+     */
+    logoutPost(idTokenHint?: string, logoutHint?: string, clientId?: string, postLogoutRedirectUri?: string, state?: string, uiLocales?: string): Promise<{}>;
     /**
      * List the organizations the OAuth2 access token can access. Resolves the token's `organization` authorization details, expanding the `*` wildcard into the concrete set of organizations the user can see.
      *
@@ -211,7 +309,7 @@ export declare class Oauth2 {
     /**
      * Store an OAuth2 authorization request server-side and receive a short-lived request_uri handle for the authorize endpoint.
      *
-     * @param {string} params.clientId - OAuth2 client ID.
+     * @param {string} params.clientId - OAuth2 client ID. Either a registered app ID or an HTTPS client ID metadata document URL.
      * @param {string} params.redirectUri - Redirect URI where visitor will be redirected after authorization, whether successful or not.
      * @param {string} params.responseType - OAuth2 / OIDC response type.
      * @param {string} params.scope - Space-separated OAuth2 scopes. Can include project scopes, and built-in scopes: `openid`, `email`, `profile`, `phone`.
@@ -223,6 +321,7 @@ export declare class Oauth2 {
      * @param {number} params.maxAge - OIDC max_age parameter for customization of consent screen.
      * @param {string} params.authorizationDetails - Rich authorization request. JSON array of objects, each with a `type` and project-defined fields
      * @param {string} params.resource - RFC 8707 resource indicator URI or URI list. Each value must be an absolute URI without a fragment.
+     * @param {string} params.audience - Compatibility alias for a single OAuth2 resource indicator URI.
      * @throws {AppwriteException}
      * @returns {Promise<Models.Oauth2PAR>}
      */
@@ -230,7 +329,7 @@ export declare class Oauth2 {
         clientId: string;
         redirectUri: string;
         responseType: string;
-        scope: string;
+        scope?: string;
         state?: string;
         nonce?: string;
         codeChallenge?: string;
@@ -239,11 +338,12 @@ export declare class Oauth2 {
         maxAge?: number;
         authorizationDetails?: string;
         resource?: string;
+        audience?: string;
     }): Promise<Models.Oauth2PAR>;
     /**
      * Store an OAuth2 authorization request server-side and receive a short-lived request_uri handle for the authorize endpoint.
      *
-     * @param {string} clientId - OAuth2 client ID.
+     * @param {string} clientId - OAuth2 client ID. Either a registered app ID or an HTTPS client ID metadata document URL.
      * @param {string} redirectUri - Redirect URI where visitor will be redirected after authorization, whether successful or not.
      * @param {string} responseType - OAuth2 / OIDC response type.
      * @param {string} scope - Space-separated OAuth2 scopes. Can include project scopes, and built-in scopes: `openid`, `email`, `profile`, `phone`.
@@ -255,11 +355,12 @@ export declare class Oauth2 {
      * @param {number} maxAge - OIDC max_age parameter for customization of consent screen.
      * @param {string} authorizationDetails - Rich authorization request. JSON array of objects, each with a `type` and project-defined fields
      * @param {string} resource - RFC 8707 resource indicator URI or URI list. Each value must be an absolute URI without a fragment.
+     * @param {string} audience - Compatibility alias for a single OAuth2 resource indicator URI.
      * @throws {AppwriteException}
      * @returns {Promise<Models.Oauth2PAR>}
      * @deprecated Use the object parameter style method for a better developer experience.
      */
-    createPAR(clientId: string, redirectUri: string, responseType: string, scope: string, state?: string, nonce?: string, codeChallenge?: string, codeChallengeMethod?: string, prompt?: string, maxAge?: number, authorizationDetails?: string, resource?: string): Promise<Models.Oauth2PAR>;
+    createPAR(clientId: string, redirectUri: string, responseType: string, scope?: string, state?: string, nonce?: string, codeChallenge?: string, codeChallengeMethod?: string, prompt?: string, maxAge?: number, authorizationDetails?: string, resource?: string, audience?: string): Promise<Models.Oauth2PAR>;
     /**
      * List the projects the OAuth2 access token can access. Resolves the token's `project` authorization details, expanding the `*` wildcard into the concrete set of projects the user can see.
      *
@@ -309,7 +410,7 @@ export declare class Oauth2 {
      *
      * @param {string} params.token - The access or refresh token to revoke.
      * @param {string} params.tokenTypeHint - Type of token to revoke (access_token or refresh_token).
-     * @param {string} params.clientId - OAuth2 client ID.
+     * @param {string} params.clientId - OAuth2 client ID. Either a registered app ID or an HTTPS client ID metadata document URL.
      * @param {string} params.clientSecret - OAuth2 client secret. Required for confidential apps; omitted for public apps.
      * @throws {AppwriteException}
      * @returns {Promise<{}>}
@@ -325,7 +426,7 @@ export declare class Oauth2 {
      *
      * @param {string} token - The access or refresh token to revoke.
      * @param {string} tokenTypeHint - Type of token to revoke (access_token or refresh_token).
-     * @param {string} clientId - OAuth2 client ID.
+     * @param {string} clientId - OAuth2 client ID. Either a registered app ID or an HTTPS client ID metadata document URL.
      * @param {string} clientSecret - OAuth2 client secret. Required for confidential apps; omitted for public apps.
      * @throws {AppwriteException}
      * @returns {Promise<{}>}
@@ -339,11 +440,12 @@ export declare class Oauth2 {
      * @param {string} params.code - Authorization code to be exchanged for access and refresh tokens. Required for `authorization_code` grant type.
      * @param {string} params.refreshToken - Refresh token to be exchanged for a new access and refresh tokens. Required for `refresh_token` grant type.
      * @param {string} params.deviceCode - Device code obtained from the device authorization endpoint. Required for `urn:ietf:params:oauth:grant-type:device_code` grant type.
-     * @param {string} params.clientId - OAuth2 client ID.
+     * @param {string} params.clientId - OAuth2 client ID. Either a registered app ID or an HTTPS client ID metadata document URL.
      * @param {string} params.clientSecret - OAuth2 client secret. Required for confidential apps.
      * @param {string} params.codeVerifier - PKCE code verifier. Required for public apps.
      * @param {string} params.redirectUri - Redirect URI. Required for `authorization_code` grant type.
      * @param {string} params.resource - RFC 8707 resource indicator URI or URI list. Each value must be an absolute URI without a fragment.
+     * @param {string} params.audience - Compatibility alias for a single OAuth2 resource indicator URI.
      * @throws {AppwriteException}
      * @returns {Promise<Models.Oauth2Token>}
      */
@@ -357,6 +459,7 @@ export declare class Oauth2 {
         codeVerifier?: string;
         redirectUri?: string;
         resource?: string;
+        audience?: string;
     }): Promise<Models.Oauth2Token>;
     /**
      * Exchange an OAuth2 authorization code, refresh token, or device code for access and refresh tokens.
@@ -365,14 +468,15 @@ export declare class Oauth2 {
      * @param {string} code - Authorization code to be exchanged for access and refresh tokens. Required for `authorization_code` grant type.
      * @param {string} refreshToken - Refresh token to be exchanged for a new access and refresh tokens. Required for `refresh_token` grant type.
      * @param {string} deviceCode - Device code obtained from the device authorization endpoint. Required for `urn:ietf:params:oauth:grant-type:device_code` grant type.
-     * @param {string} clientId - OAuth2 client ID.
+     * @param {string} clientId - OAuth2 client ID. Either a registered app ID or an HTTPS client ID metadata document URL.
      * @param {string} clientSecret - OAuth2 client secret. Required for confidential apps.
      * @param {string} codeVerifier - PKCE code verifier. Required for public apps.
      * @param {string} redirectUri - Redirect URI. Required for `authorization_code` grant type.
      * @param {string} resource - RFC 8707 resource indicator URI or URI list. Each value must be an absolute URI without a fragment.
+     * @param {string} audience - Compatibility alias for a single OAuth2 resource indicator URI.
      * @throws {AppwriteException}
      * @returns {Promise<Models.Oauth2Token>}
      * @deprecated Use the object parameter style method for a better developer experience.
      */
-    createToken(grantType: string, code?: string, refreshToken?: string, deviceCode?: string, clientId?: string, clientSecret?: string, codeVerifier?: string, redirectUri?: string, resource?: string): Promise<Models.Oauth2Token>;
+    createToken(grantType: string, code?: string, refreshToken?: string, deviceCode?: string, clientId?: string, clientSecret?: string, codeVerifier?: string, redirectUri?: string, resource?: string, audience?: string): Promise<Models.Oauth2Token>;
 }

package/types/services/organization.d.ts

@@ -38,6 +38,110 @@ export declare class Organization {
      * @returns {Promise<{}>}
      */
     delete(): Promise<{}>;
+    /**
+     * List app installations on the organization. Any organization member can read installations.
+     *
+     * @param {string[]} params.queries - Array of query strings generated using the Query class provided by the SDK. [Learn more about queries](https://appwrite.io/docs/queries). Maximum of 100 queries are allowed, each 4096 characters long.
+     * @param {boolean} params.total - When set to false, the total count returned will be 0 and will not be calculated.
+     * @throws {AppwriteException}
+     * @returns {Promise<Models.AppInstallationList>}
+     */
+    listInstallations(params?: {
+        queries?: string[];
+        total?: boolean;
+    }): Promise<Models.AppInstallationList>;
+    /**
+     * List app installations on the organization. Any organization member can read installations.
+     *
+     * @param {string[]} queries - Array of query strings generated using the Query class provided by the SDK. [Learn more about queries](https://appwrite.io/docs/queries). Maximum of 100 queries are allowed, each 4096 characters long.
+     * @param {boolean} total - When set to false, the total count returned will be 0 and will not be calculated.
+     * @throws {AppwriteException}
+     * @returns {Promise<Models.AppInstallationList>}
+     * @deprecated Use the object parameter style method for a better developer experience.
+     */
+    listInstallations(queries?: string[], total?: boolean): Promise<Models.AppInstallationList>;
+    /**
+     * Install an app on the organization. Only organization members with the owner role can install apps. The installation is granted the scopes the app currently requests.
+     *
+     * @param {string} params.appId - Application unique ID.
+     * @param {string} params.authorizationDetails - Authorization details granted to the installation as a JSON array of objects, each with a `type` and app-defined fields. The Appwrite Console stores authorized project IDs here.
+     * @throws {AppwriteException}
+     * @returns {Promise<Models.AppInstallation>}
+     */
+    createInstallation(params: {
+        appId: string;
+        authorizationDetails?: string;
+    }): Promise<Models.AppInstallation>;
+    /**
+     * Install an app on the organization. Only organization members with the owner role can install apps. The installation is granted the scopes the app currently requests.
+     *
+     * @param {string} appId - Application unique ID.
+     * @param {string} authorizationDetails - Authorization details granted to the installation as a JSON array of objects, each with a `type` and app-defined fields. The Appwrite Console stores authorized project IDs here.
+     * @throws {AppwriteException}
+     * @returns {Promise<Models.AppInstallation>}
+     * @deprecated Use the object parameter style method for a better developer experience.
+     */
+    createInstallation(appId: string, authorizationDetails?: string): Promise<Models.AppInstallation>;
+    /**
+     * Get an app installation on the organization by its unique ID. Any organization member can read installations.
+     *
+     * @param {string} params.installationId - Installation unique ID.
+     * @throws {AppwriteException}
+     * @returns {Promise<Models.AppInstallation>}
+     */
+    getInstallation(params: {
+        installationId: string;
+    }): Promise<Models.AppInstallation>;
+    /**
+     * Get an app installation on the organization by its unique ID. Any organization member can read installations.
+     *
+     * @param {string} installationId - Installation unique ID.
+     * @throws {AppwriteException}
+     * @returns {Promise<Models.AppInstallation>}
+     * @deprecated Use the object parameter style method for a better developer experience.
+     */
+    getInstallation(installationId: string): Promise<Models.AppInstallation>;
+    /**
+     * Update an app installation on the organization. Only organization members with the owner role can update installations. The installation's granted scopes are refreshed to the scopes the app currently requests; previously issued installation access tokens are revoked.
+     *
+     * @param {string} params.installationId - Installation unique ID.
+     * @param {string} params.authorizationDetails - Authorization details granted to the installation as a JSON array of objects, each with a `type` and app-defined fields. Omit to keep the current value.
+     * @throws {AppwriteException}
+     * @returns {Promise<Models.AppInstallation>}
+     */
+    updateInstallation(params: {
+        installationId: string;
+        authorizationDetails?: string;
+    }): Promise<Models.AppInstallation>;
+    /**
+     * Update an app installation on the organization. Only organization members with the owner role can update installations. The installation's granted scopes are refreshed to the scopes the app currently requests; previously issued installation access tokens are revoked.
+     *
+     * @param {string} installationId - Installation unique ID.
+     * @param {string} authorizationDetails - Authorization details granted to the installation as a JSON array of objects, each with a `type` and app-defined fields. Omit to keep the current value.
+     * @throws {AppwriteException}
+     * @returns {Promise<Models.AppInstallation>}
+     * @deprecated Use the object parameter style method for a better developer experience.
+     */
+    updateInstallation(installationId: string, authorizationDetails?: string): Promise<Models.AppInstallation>;
+    /**
+     * Uninstall an app from the organization by its installation ID. Only organization members with the owner role can remove installations. Previously issued installation access tokens are revoked.
+     *
+     * @param {string} params.installationId - Installation unique ID.
+     * @throws {AppwriteException}
+     * @returns {Promise<{}>}
+     */
+    deleteInstallation(params: {
+        installationId: string;
+    }): Promise<{}>;
+    /**
+     * Uninstall an app from the organization by its installation ID. Only organization members with the owner role can remove installations. Previously issued installation access tokens are revoked.
+     *
+     * @param {string} installationId - Installation unique ID.
+     * @throws {AppwriteException}
+     * @returns {Promise<{}>}
+     * @deprecated Use the object parameter style method for a better developer experience.
+     */
+    deleteInstallation(installationId: string): Promise<{}>;
     /**
      * Get a list of all API keys from the current organization.
      *

package/types/services/postgresql.d.ts

@@ -31,6 +31,7 @@ export declare class Postgresql {
      * @param {string} params.specification - Specification identifier. Drives the allocated CPU, memory, storage, storage class, and connection ceiling.
      * @param {number} params.replicas - Number of high availability replicas (0-5). High availability is enabled when greater than 0.
      * @param {string} params.syncMode - Replication sync mode preference. Allowed values: async, sync, quorum.
+     * @param {string} params.standbyRegion - Standby region for a cross-region replica. When set, a replica is provisioned in this region for cross-region high availability. Must differ from the database region.
      * @param {number} params.networkIdleTimeoutSeconds - Connection idle timeout in seconds.
      * @param {string[]} params.networkIPAllowlist - IP addresses/CIDR ranges allowed to connect.
      * @param {number} params.idleTimeoutMinutes - Minutes of inactivity before container scales to zero.
@@ -39,7 +40,7 @@ export declare class Postgresql {
      * @param {boolean} params.storageAutoscaling - Enable automatic storage expansion when usage exceeds threshold.
      * @param {number} params.storageAutoscalingThresholdPercent - Storage usage percentage (50-95) that triggers automatic expansion.
      * @param {number} params.storageAutoscalingMaxGb - Maximum storage size in GB for autoscaling. 0 means no limit.
-     * @param {string} params.api - Product API that owns this database: nativedb (raw, direct-access), tablesdb, documentsdb, or vectorsdb. tablesdb/documentsdb/vectorsdb databases are reached only through their product APIs.
+     * @param {string} params.api - Product API that owns this database: tablesdb, documentsdb, or vectorsdb. Omit for a raw database reached directly; its api is its engine. tablesdb/documentsdb/vectorsdb databases are reached only through their product APIs.
      * @throws {AppwriteException}
      * @returns {Promise<Models.DedicatedDatabase>}
      */
@@ -50,6 +51,7 @@ export declare class Postgresql {
         specification?: string;
         replicas?: number;
         syncMode?: string;
+        standbyRegion?: string;
         networkIdleTimeoutSeconds?: number;
         networkIPAllowlist?: string[];
         idleTimeoutMinutes?: number;
@@ -69,6 +71,7 @@ export declare class Postgresql {
      * @param {string} specification - Specification identifier. Drives the allocated CPU, memory, storage, storage class, and connection ceiling.
      * @param {number} replicas - Number of high availability replicas (0-5). High availability is enabled when greater than 0.
      * @param {string} syncMode - Replication sync mode preference. Allowed values: async, sync, quorum.
+     * @param {string} standbyRegion - Standby region for a cross-region replica. When set, a replica is provisioned in this region for cross-region high availability. Must differ from the database region.
      * @param {number} networkIdleTimeoutSeconds - Connection idle timeout in seconds.
      * @param {string[]} networkIPAllowlist - IP addresses/CIDR ranges allowed to connect.
      * @param {number} idleTimeoutMinutes - Minutes of inactivity before container scales to zero.
@@ -77,12 +80,12 @@ export declare class Postgresql {
      * @param {boolean} storageAutoscaling - Enable automatic storage expansion when usage exceeds threshold.
      * @param {number} storageAutoscalingThresholdPercent - Storage usage percentage (50-95) that triggers automatic expansion.
      * @param {number} storageAutoscalingMaxGb - Maximum storage size in GB for autoscaling. 0 means no limit.
-     * @param {string} api - Product API that owns this database: nativedb (raw, direct-access), tablesdb, documentsdb, or vectorsdb. tablesdb/documentsdb/vectorsdb databases are reached only through their product APIs.
+     * @param {string} api - Product API that owns this database: tablesdb, documentsdb, or vectorsdb. Omit for a raw database reached directly; its api is its engine. tablesdb/documentsdb/vectorsdb databases are reached only through their product APIs.
      * @throws {AppwriteException}
      * @returns {Promise<Models.DedicatedDatabase>}
      * @deprecated Use the object parameter style method for a better developer experience.
      */
-    create(databaseId: string, name: string, version?: string, specification?: string, replicas?: number, syncMode?: string, networkIdleTimeoutSeconds?: number, networkIPAllowlist?: string[], idleTimeoutMinutes?: number, pitr?: boolean, pitrRetentionDays?: number, storageAutoscaling?: boolean, storageAutoscalingThresholdPercent?: number, storageAutoscalingMaxGb?: number, api?: string): Promise<Models.DedicatedDatabase>;
+    create(databaseId: string, name: string, version?: string, specification?: string, replicas?: number, syncMode?: string, standbyRegion?: string, networkIdleTimeoutSeconds?: number, networkIPAllowlist?: string[], idleTimeoutMinutes?: number, pitr?: boolean, pitrRetentionDays?: number, storageAutoscaling?: boolean, storageAutoscalingThresholdPercent?: number, storageAutoscalingMaxGb?: number, api?: string): Promise<Models.DedicatedDatabase>;
     /**
      * List the dedicated database specifications available on the current plan. Each specification reports its resource limits, pricing, and whether it is enabled for the organization.
      *
@@ -118,6 +121,8 @@ export declare class Postgresql {
      * @param {string} params.specification - Specification. Changes cpu, memory, storage, connection ceiling, and node pool based on specification config. Resource changes are applied via rolling cutover with zero downtime.
      * @param {number} params.replicas - Number of high availability replicas (0-5). High availability is enabled when greater than 0.
      * @param {string} params.syncMode - Replication sync mode preference. Allowed values: async, sync, quorum.
+     * @param {number} params.crossRegionReplicas - Number of cross-region standby replicas (0-1). Cross-region replication is enabled when greater than 0.
+     * @param {string} params.standbyRegion - Standby region for the cross-region replica. Required when enabling cross-region replication and no standby region is already configured. Must differ from the database region.
      * @param {number} params.networkIdleTimeoutSeconds - Connection idle timeout in seconds (60-86400).
      * @param {string[]} params.networkIPAllowlist - IP addresses/CIDR ranges allowed to connect.
      * @param {number} params.idleTimeoutMinutes - Minutes before container scales to zero.
@@ -143,6 +148,8 @@ export declare class Postgresql {
         specification?: string;
         replicas?: number;
         syncMode?: string;
+        crossRegionReplicas?: number;
+        standbyRegion?: string;
         networkIdleTimeoutSeconds?: number;
         networkIPAllowlist?: string[];
         idleTimeoutMinutes?: number;
@@ -168,6 +175,8 @@ export declare class Postgresql {
      * @param {string} specification - Specification. Changes cpu, memory, storage, connection ceiling, and node pool based on specification config. Resource changes are applied via rolling cutover with zero downtime.
      * @param {number} replicas - Number of high availability replicas (0-5). High availability is enabled when greater than 0.
      * @param {string} syncMode - Replication sync mode preference. Allowed values: async, sync, quorum.
+     * @param {number} crossRegionReplicas - Number of cross-region standby replicas (0-1). Cross-region replication is enabled when greater than 0.
+     * @param {string} standbyRegion - Standby region for the cross-region replica. Required when enabling cross-region replication and no standby region is already configured. Must differ from the database region.
      * @param {number} networkIdleTimeoutSeconds - Connection idle timeout in seconds (60-86400).
      * @param {string[]} networkIPAllowlist - IP addresses/CIDR ranges allowed to connect.
      * @param {number} idleTimeoutMinutes - Minutes before container scales to zero.
@@ -187,7 +196,7 @@ export declare class Postgresql {
      * @returns {Promise<Models.DedicatedDatabase>}
      * @deprecated Use the object parameter style method for a better developer experience.
      */
-    update(databaseId: string, name?: string, status?: string, specification?: string, replicas?: number, syncMode?: string, networkIdleTimeoutSeconds?: number, networkIPAllowlist?: string[], idleTimeoutMinutes?: number, pitr?: boolean, pitrRetentionDays?: number, storageAutoscaling?: boolean, storageAutoscalingThresholdPercent?: number, storageAutoscalingMaxGb?: number, metricsTraceSampleRate?: number, metricsSlowQueryLogThresholdMs?: number, sqlApiEnabled?: boolean, sqlApiAllowedStatements?: string[], sqlApiMaxRows?: number, sqlApiMaxBytes?: number, sqlApiTimeoutSeconds?: number): Promise<Models.DedicatedDatabase>;
+    update(databaseId: string, name?: string, status?: string, specification?: string, replicas?: number, syncMode?: string, crossRegionReplicas?: number, standbyRegion?: string, networkIdleTimeoutSeconds?: number, networkIPAllowlist?: string[], idleTimeoutMinutes?: number, pitr?: boolean, pitrRetentionDays?: number, storageAutoscaling?: boolean, storageAutoscalingThresholdPercent?: number, storageAutoscalingMaxGb?: number, metricsTraceSampleRate?: number, metricsSlowQueryLogThresholdMs?: number, sqlApiEnabled?: boolean, sqlApiAllowedStatements?: string[], sqlApiMaxRows?: number, sqlApiMaxBytes?: number, sqlApiTimeoutSeconds?: number): Promise<Models.DedicatedDatabase>;
     /**
      * Delete a dedicated database. This action is irreversible. The database status will be set to 'deleting' and all resources will be cleaned up. Deletion is allowed from any state, and repeating the call re-dispatches the cleanup.
      *

package/types/services/project.d.ts

@@ -353,11 +353,13 @@ export declare class Project {
      * @param {number} params.refreshTokenDuration - Refresh token duration in seconds for confidential clients (server-side apps that authenticate with a client secret). Leave empty to use default 1 year.
      * @param {number} params.publicAccessTokenDuration - Access token duration in seconds for public clients (SPAs, mobile, and native apps that cannot keep a client secret). Leave empty to use default 1 hour.
      * @param {number} params.publicRefreshTokenDuration - Refresh token duration in seconds for public clients (SPAs, mobile, and native apps that cannot keep a client secret). Leave empty to use default 30 days.
+     * @param {number} params.installationAccessTokenDuration - Access token duration in seconds for app installation access tokens. Leave empty to use default 1 hour.
      * @param {boolean} params.confidentialPkce - When enabled, PKCE is required for confidential clients (server-side flows using client_secret). PKCE is always required for public clients regardless of this setting.
      * @param {string} params.verificationUrl - URL to your application page where users enter the device flow user code. Required to enable the Device Authorization Grant.
      * @param {number} params.userCodeLength - Number of characters in the device flow user code, excluding the formatting separator. Shorter codes are easier to type but weaker; pair short codes with short expiry. Leave empty to use default 8.
      * @param {string} params.userCodeFormat - Character set for device flow user codes: `numeric` (digits only — best for numeric keypads and TV remotes), `alphabetic` (letters only), or `alphanumeric` (letters and digits — highest entropy per character). Defaults to `alphanumeric`.
      * @param {number} params.deviceCodeDuration - Lifetime in seconds of device flow device codes and user codes. Device codes are intentionally short-lived. Leave empty to use default 600.
+     * @param {string[]} params.defaultScopes - List of OAuth2 scopes used when an authorization request omits the scope parameter. Every default scope must also be allowed by the OAuth2 server. Maximum of 100 scopes are allowed, each up to 128 characters long.
      * @throws {AppwriteException}
      * @returns {Promise<Models.Project>}
      */
@@ -370,11 +372,13 @@ export declare class Project {
         refreshTokenDuration?: number;
         publicAccessTokenDuration?: number;
         publicRefreshTokenDuration?: number;
+        installationAccessTokenDuration?: number;
         confidentialPkce?: boolean;
         verificationUrl?: string;
         userCodeLength?: number;
         userCodeFormat?: string;
         deviceCodeDuration?: number;
+        defaultScopes?: string[];
     }): Promise<Models.Project>;
     /**
      * Update the OAuth2 server (OIDC provider) configuration.
@@ -387,16 +391,18 @@ export declare class Project {
      * @param {number} refreshTokenDuration - Refresh token duration in seconds for confidential clients (server-side apps that authenticate with a client secret). Leave empty to use default 1 year.
      * @param {number} publicAccessTokenDuration - Access token duration in seconds for public clients (SPAs, mobile, and native apps that cannot keep a client secret). Leave empty to use default 1 hour.
      * @param {number} publicRefreshTokenDuration - Refresh token duration in seconds for public clients (SPAs, mobile, and native apps that cannot keep a client secret). Leave empty to use default 30 days.
+     * @param {number} installationAccessTokenDuration - Access token duration in seconds for app installation access tokens. Leave empty to use default 1 hour.
      * @param {boolean} confidentialPkce - When enabled, PKCE is required for confidential clients (server-side flows using client_secret). PKCE is always required for public clients regardless of this setting.
      * @param {string} verificationUrl - URL to your application page where users enter the device flow user code. Required to enable the Device Authorization Grant.
      * @param {number} userCodeLength - Number of characters in the device flow user code, excluding the formatting separator. Shorter codes are easier to type but weaker; pair short codes with short expiry. Leave empty to use default 8.
      * @param {string} userCodeFormat - Character set for device flow user codes: `numeric` (digits only — best for numeric keypads and TV remotes), `alphabetic` (letters only), or `alphanumeric` (letters and digits — highest entropy per character). Defaults to `alphanumeric`.
      * @param {number} deviceCodeDuration - Lifetime in seconds of device flow device codes and user codes. Device codes are intentionally short-lived. Leave empty to use default 600.
+     * @param {string[]} defaultScopes - List of OAuth2 scopes used when an authorization request omits the scope parameter. Every default scope must also be allowed by the OAuth2 server. Maximum of 100 scopes are allowed, each up to 128 characters long.
      * @throws {AppwriteException}
      * @returns {Promise<Models.Project>}
      * @deprecated Use the object parameter style method for a better developer experience.
      */
-    updateOAuth2Server(enabled: boolean, authorizationUrl: string, scopes?: string[], authorizationDetailsTypes?: string[], accessTokenDuration?: number, refreshTokenDuration?: number, publicAccessTokenDuration?: number, publicRefreshTokenDuration?: number, confidentialPkce?: boolean, verificationUrl?: string, userCodeLength?: number, userCodeFormat?: string, deviceCodeDuration?: number): Promise<Models.Project>;
+    updateOAuth2Server(enabled: boolean, authorizationUrl: string, scopes?: string[], authorizationDetailsTypes?: string[], accessTokenDuration?: number, refreshTokenDuration?: number, publicAccessTokenDuration?: number, publicRefreshTokenDuration?: number, installationAccessTokenDuration?: number, confidentialPkce?: boolean, verificationUrl?: string, userCodeLength?: number, userCodeFormat?: string, deviceCodeDuration?: number, defaultScopes?: string[]): Promise<Models.Project>;
     /**
      * Update the project OAuth2 Amazon configuration.
      *
@@ -453,6 +459,31 @@ export declare class Project {
      * @deprecated Use the object parameter style method for a better developer experience.
      */
     updateOAuth2Apple(serviceId?: string, keyId?: string, teamId?: string, p8File?: string, enabled?: boolean): Promise<Models.OAuth2Apple>;
+    /**
+     * Update the project OAuth2 Appwrite configuration.
+     *
+     * @param {string} params.clientId - 'Client ID' of Appwrite OAuth2 app. For example: 6a42000000000000b5a0
+     * @param {string} params.clientSecret - 'Client Secret' of Appwrite OAuth2 app. For example: b86afd000000000000000000000000000000000000000000000000000ced5f93
+     * @param {boolean} params.enabled - OAuth2 sign-in method status. Set to true to enable new session creation. Setting to true will trigger end-to-end credentials validation, and will throw if the credentials are invalid.
+     * @throws {AppwriteException}
+     * @returns {Promise<Models.OAuth2Appwrite>}
+     */
+    updateOAuth2Appwrite(params?: {
+        clientId?: string;
+        clientSecret?: string;
+        enabled?: boolean;
+    }): Promise<Models.OAuth2Appwrite>;
+    /**
+     * Update the project OAuth2 Appwrite configuration.
+     *
+     * @param {string} clientId - 'Client ID' of Appwrite OAuth2 app. For example: 6a42000000000000b5a0
+     * @param {string} clientSecret - 'Client Secret' of Appwrite OAuth2 app. For example: b86afd000000000000000000000000000000000000000000000000000ced5f93
+     * @param {boolean} enabled - OAuth2 sign-in method status. Set to true to enable new session creation. Setting to true will trigger end-to-end credentials validation, and will throw if the credentials are invalid.
+     * @throws {AppwriteException}
+     * @returns {Promise<Models.OAuth2Appwrite>}
+     * @deprecated Use the object parameter style method for a better developer experience.
+     */
+    updateOAuth2Appwrite(clientId?: string, clientSecret?: string, enabled?: boolean): Promise<Models.OAuth2Appwrite>;
     /**
      * Update the project OAuth2 Auth0 configuration.
      *

package/types/services/projects.d.ts

@@ -186,31 +186,6 @@ export declare class Projects {
      * @deprecated Use the object parameter style method for a better developer experience.
      */
     listDevKeys(projectId: string, queries?: string[]): Promise<Models.DevKeyList>;
-    /**
-     * Create a new project dev key. Dev keys are project specific and allow you to bypass rate limits and get better error logging during development. Strictly meant for development purposes only.
-     *
-     * @param {string} params.projectId - Project unique ID.
-     * @param {string} params.name - Key name. Max length: 128 chars.
-     * @param {string} params.expire - Expiration time in [ISO 8601](https://www.iso.org/iso-8601-date-and-time-format.html) format.
-     * @throws {AppwriteException}
-     * @returns {Promise<Models.DevKey>}
-     */
-    createDevKey(params: {
-        projectId: string;
-        name: string;
-        expire: string;
-    }): Promise<Models.DevKey>;
-    /**
-     * Create a new project dev key. Dev keys are project specific and allow you to bypass rate limits and get better error logging during development. Strictly meant for development purposes only.
-     *
-     * @param {string} projectId - Project unique ID.
-     * @param {string} name - Key name. Max length: 128 chars.
-     * @param {string} expire - Expiration time in [ISO 8601](https://www.iso.org/iso-8601-date-and-time-format.html) format.
-     * @throws {AppwriteException}
-     * @returns {Promise<Models.DevKey>}
-     * @deprecated Use the object parameter style method for a better developer experience.
-     */
-    createDevKey(projectId: string, name: string, expire: string): Promise<Models.DevKey>;
     /**
      * Get a project\'s dev key by its unique ID. Dev keys are project specific and allow you to bypass rate limits and get better error logging during development.
      *