@appwrite.io/console 15.3.0 → 15.5.0

package/types/services/account.d.ts

@@ -177,6 +177,135 @@ export declare class Account {
      * @deprecated Use the object parameter style method for a better developer experience.
      */
     deleteBillingAddress(billingAddressId: string): Promise<{}>;
+    /**
+     * Get a list of the OAuth2 consents the current user has given to third-party apps.
+     *
+     * @param {string[]} params.queries - Array of query strings generated using the Query class provided by the SDK. [Learn more about queries](https://appwrite.io/docs/queries). Maximum of 100 queries are allowed, each 4096 characters long.
+     * @param {boolean} params.total - When set to false, the total count returned will be 0 and will not be calculated.
+     * @throws {AppwriteException}
+     * @returns {Promise<Models.Oauth2ConsentList>}
+     */
+    listConsents(params?: {
+        queries?: string[];
+        total?: boolean;
+    }): Promise<Models.Oauth2ConsentList>;
+    /**
+     * Get a list of the OAuth2 consents the current user has given to third-party apps.
+     *
+     * @param {string[]} queries - Array of query strings generated using the Query class provided by the SDK. [Learn more about queries](https://appwrite.io/docs/queries). Maximum of 100 queries are allowed, each 4096 characters long.
+     * @param {boolean} total - When set to false, the total count returned will be 0 and will not be calculated.
+     * @throws {AppwriteException}
+     * @returns {Promise<Models.Oauth2ConsentList>}
+     * @deprecated Use the object parameter style method for a better developer experience.
+     */
+    listConsents(queries?: string[], total?: boolean): Promise<Models.Oauth2ConsentList>;
+    /**
+     * Get an OAuth2 consent the current user has given to a third-party app by its unique ID.
+     *
+     * @param {string} params.consentId - Consent unique ID.
+     * @throws {AppwriteException}
+     * @returns {Promise<Models.Oauth2Consent>}
+     */
+    getConsent(params: {
+        consentId: string;
+    }): Promise<Models.Oauth2Consent>;
+    /**
+     * Get an OAuth2 consent the current user has given to a third-party app by its unique ID.
+     *
+     * @param {string} consentId - Consent unique ID.
+     * @throws {AppwriteException}
+     * @returns {Promise<Models.Oauth2Consent>}
+     * @deprecated Use the object parameter style method for a better developer experience.
+     */
+    getConsent(consentId: string): Promise<Models.Oauth2Consent>;
+    /**
+     * Delete an OAuth2 consent by its unique ID. All token families issued under the consent are revoked, and the app must ask for consent again to regain access.
+     *
+     * @param {string} params.consentId - Consent unique ID.
+     * @throws {AppwriteException}
+     * @returns {Promise<{}>}
+     */
+    deleteConsent(params: {
+        consentId: string;
+    }): Promise<{}>;
+    /**
+     * Delete an OAuth2 consent by its unique ID. All token families issued under the consent are revoked, and the app must ask for consent again to regain access.
+     *
+     * @param {string} consentId - Consent unique ID.
+     * @throws {AppwriteException}
+     * @returns {Promise<{}>}
+     * @deprecated Use the object parameter style method for a better developer experience.
+     */
+    deleteConsent(consentId: string): Promise<{}>;
+    /**
+     * Get a list of the token families issued under an OAuth2 consent. Each entry represents one authorized device or session; the token secrets themselves are never returned.
+     *
+     * @param {string} params.consentId - Consent unique ID.
+     * @param {string[]} params.queries - Array of query strings generated using the Query class provided by the SDK. [Learn more about queries](https://appwrite.io/docs/queries). Maximum of 100 queries are allowed, each 4096 characters long.
+     * @param {boolean} params.total - When set to false, the total count returned will be 0 and will not be calculated.
+     * @throws {AppwriteException}
+     * @returns {Promise<Models.Oauth2ConsentTokenList>}
+     */
+    listConsentTokens(params: {
+        consentId: string;
+        queries?: string[];
+        total?: boolean;
+    }): Promise<Models.Oauth2ConsentTokenList>;
+    /**
+     * Get a list of the token families issued under an OAuth2 consent. Each entry represents one authorized device or session; the token secrets themselves are never returned.
+     *
+     * @param {string} consentId - Consent unique ID.
+     * @param {string[]} queries - Array of query strings generated using the Query class provided by the SDK. [Learn more about queries](https://appwrite.io/docs/queries). Maximum of 100 queries are allowed, each 4096 characters long.
+     * @param {boolean} total - When set to false, the total count returned will be 0 and will not be calculated.
+     * @throws {AppwriteException}
+     * @returns {Promise<Models.Oauth2ConsentTokenList>}
+     * @deprecated Use the object parameter style method for a better developer experience.
+     */
+    listConsentTokens(consentId: string, queries?: string[], total?: boolean): Promise<Models.Oauth2ConsentTokenList>;
+    /**
+     * Get a token family issued under an OAuth2 consent by its unique ID. The token secrets themselves are never returned.
+     *
+     * @param {string} params.consentId - Consent unique ID.
+     * @param {string} params.tokenId - Token unique ID.
+     * @throws {AppwriteException}
+     * @returns {Promise<Models.Oauth2ConsentToken>}
+     */
+    getConsentToken(params: {
+        consentId: string;
+        tokenId: string;
+    }): Promise<Models.Oauth2ConsentToken>;
+    /**
+     * Get a token family issued under an OAuth2 consent by its unique ID. The token secrets themselves are never returned.
+     *
+     * @param {string} consentId - Consent unique ID.
+     * @param {string} tokenId - Token unique ID.
+     * @throws {AppwriteException}
+     * @returns {Promise<Models.Oauth2ConsentToken>}
+     * @deprecated Use the object parameter style method for a better developer experience.
+     */
+    getConsentToken(consentId: string, tokenId: string): Promise<Models.Oauth2ConsentToken>;
+    /**
+     * Delete a token family issued under an OAuth2 consent by its unique ID. The access and refresh tokens of the family stop working immediately; other token families and the consent itself are unaffected.
+     *
+     * @param {string} params.consentId - Consent unique ID.
+     * @param {string} params.tokenId - Token unique ID.
+     * @throws {AppwriteException}
+     * @returns {Promise<{}>}
+     */
+    deleteConsentToken(params: {
+        consentId: string;
+        tokenId: string;
+    }): Promise<{}>;
+    /**
+     * Delete a token family issued under an OAuth2 consent by its unique ID. The access and refresh tokens of the family stop working immediately; other token families and the consent itself are unaffected.
+     *
+     * @param {string} consentId - Consent unique ID.
+     * @param {string} tokenId - Token unique ID.
+     * @throws {AppwriteException}
+     * @returns {Promise<{}>}
+     * @deprecated Use the object parameter style method for a better developer experience.
+     */
+    deleteConsentToken(consentId: string, tokenId: string): Promise<{}>;
     /**
      * Get coupon details for an account.
      *
@@ -1076,7 +1205,7 @@ export declare class Account {
      * A user is limited to 10 active sessions at a time by default. [Learn more about session limits](https://appwrite.io/docs/authentication-security#limits).
      *
      *
-     * @param {OAuthProvider} params.provider - OAuth2 Provider. Currently, supported providers are: amazon, apple, auth0, authentik, autodesk, bitbucket, bitly, box, dailymotion, discord, disqus, dropbox, etsy, facebook, figma, fusionauth, github, gitlab, google, keycloak, kick, linkedin, microsoft, notion, oidc, okta, paypal, paypalSandbox, podio, salesforce, slack, spotify, stripe, tradeshift, tradeshiftBox, twitch, wordpress, x, yahoo, yammer, yandex, zoho, zoom.
+     * @param {OAuthProvider} params.provider - OAuth2 Provider. Currently, supported providers are: amazon, apple, appwrite, auth0, authentik, autodesk, bitbucket, bitly, box, dailymotion, discord, disqus, dropbox, etsy, facebook, figma, fusionauth, github, gitlab, google, keycloak, kick, linkedin, microsoft, notion, oidc, okta, paypal, paypalSandbox, podio, salesforce, slack, spotify, stripe, tradeshift, tradeshiftBox, twitch, wordpress, x, yahoo, yammer, yandex, zoho, zoom.
      * @param {string} params.success - URL to redirect back to your app after a successful login attempt.  Only URLs from hostnames in your project's platform list are allowed. This requirement helps to prevent an [open redirect](https://cheatsheetseries.owasp.org/cheatsheets/Unvalidated_Redirects_and_Forwards_Cheat_Sheet.html) attack against your project API.
      * @param {string} params.failure - URL to redirect back to your app after a failed login attempt.  Only URLs from hostnames in your project's platform list are allowed. This requirement helps to prevent an [open redirect](https://cheatsheetseries.owasp.org/cheatsheets/Unvalidated_Redirects_and_Forwards_Cheat_Sheet.html) attack against your project API.
      * @param {string[]} params.scopes - A list of custom OAuth2 scopes. Check each provider internal docs for a list of supported scopes. Maximum of 100 scopes are allowed, each 4096 characters long.
@@ -1097,7 +1226,7 @@ export declare class Account {
      * A user is limited to 10 active sessions at a time by default. [Learn more about session limits](https://appwrite.io/docs/authentication-security#limits).
      *
      *
-     * @param {OAuthProvider} provider - OAuth2 Provider. Currently, supported providers are: amazon, apple, auth0, authentik, autodesk, bitbucket, bitly, box, dailymotion, discord, disqus, dropbox, etsy, facebook, figma, fusionauth, github, gitlab, google, keycloak, kick, linkedin, microsoft, notion, oidc, okta, paypal, paypalSandbox, podio, salesforce, slack, spotify, stripe, tradeshift, tradeshiftBox, twitch, wordpress, x, yahoo, yammer, yandex, zoho, zoom.
+     * @param {OAuthProvider} provider - OAuth2 Provider. Currently, supported providers are: amazon, apple, appwrite, auth0, authentik, autodesk, bitbucket, bitly, box, dailymotion, discord, disqus, dropbox, etsy, facebook, figma, fusionauth, github, gitlab, google, keycloak, kick, linkedin, microsoft, notion, oidc, okta, paypal, paypalSandbox, podio, salesforce, slack, spotify, stripe, tradeshift, tradeshiftBox, twitch, wordpress, x, yahoo, yammer, yandex, zoho, zoom.
      * @param {string} success - URL to redirect back to your app after a successful login attempt.  Only URLs from hostnames in your project's platform list are allowed. This requirement helps to prevent an [open redirect](https://cheatsheetseries.owasp.org/cheatsheets/Unvalidated_Redirects_and_Forwards_Cheat_Sheet.html) attack against your project API.
      * @param {string} failure - URL to redirect back to your app after a failed login attempt.  Only URLs from hostnames in your project's platform list are allowed. This requirement helps to prevent an [open redirect](https://cheatsheetseries.owasp.org/cheatsheets/Unvalidated_Redirects_and_Forwards_Cheat_Sheet.html) attack against your project API.
      * @param {string[]} scopes - A list of custom OAuth2 scopes. Check each provider internal docs for a list of supported scopes. Maximum of 100 scopes are allowed, each 4096 characters long.
@@ -1353,7 +1482,7 @@ export declare class Account {
      *
      * A user is limited to 10 active sessions at a time by default. [Learn more about session limits](https://appwrite.io/docs/authentication-security#limits).
      *
-     * @param {OAuthProvider} params.provider - OAuth2 Provider. Currently, supported providers are: amazon, apple, auth0, authentik, autodesk, bitbucket, bitly, box, dailymotion, discord, disqus, dropbox, etsy, facebook, figma, fusionauth, github, gitlab, google, keycloak, kick, linkedin, microsoft, notion, oidc, okta, paypal, paypalSandbox, podio, salesforce, slack, spotify, stripe, tradeshift, tradeshiftBox, twitch, wordpress, x, yahoo, yammer, yandex, zoho, zoom.
+     * @param {OAuthProvider} params.provider - OAuth2 Provider. Currently, supported providers are: amazon, apple, appwrite, auth0, authentik, autodesk, bitbucket, bitly, box, dailymotion, discord, disqus, dropbox, etsy, facebook, figma, fusionauth, github, gitlab, google, keycloak, kick, linkedin, microsoft, notion, oidc, okta, paypal, paypalSandbox, podio, salesforce, slack, spotify, stripe, tradeshift, tradeshiftBox, twitch, wordpress, x, yahoo, yammer, yandex, zoho, zoom.
      * @param {string} params.success - URL to redirect back to your app after a successful login attempt.  Only URLs from hostnames in your project's platform list are allowed. This requirement helps to prevent an [open redirect](https://cheatsheetseries.owasp.org/cheatsheets/Unvalidated_Redirects_and_Forwards_Cheat_Sheet.html) attack against your project API.
      * @param {string} params.failure - URL to redirect back to your app after a failed login attempt.  Only URLs from hostnames in your project's platform list are allowed. This requirement helps to prevent an [open redirect](https://cheatsheetseries.owasp.org/cheatsheets/Unvalidated_Redirects_and_Forwards_Cheat_Sheet.html) attack against your project API.
      * @param {string[]} params.scopes - A list of custom OAuth2 scopes. Check each provider internal docs for a list of supported scopes. Maximum of 100 scopes are allowed, each 4096 characters long.
@@ -1373,7 +1502,7 @@ export declare class Account {
      *
      * A user is limited to 10 active sessions at a time by default. [Learn more about session limits](https://appwrite.io/docs/authentication-security#limits).
      *
-     * @param {OAuthProvider} provider - OAuth2 Provider. Currently, supported providers are: amazon, apple, auth0, authentik, autodesk, bitbucket, bitly, box, dailymotion, discord, disqus, dropbox, etsy, facebook, figma, fusionauth, github, gitlab, google, keycloak, kick, linkedin, microsoft, notion, oidc, okta, paypal, paypalSandbox, podio, salesforce, slack, spotify, stripe, tradeshift, tradeshiftBox, twitch, wordpress, x, yahoo, yammer, yandex, zoho, zoom.
+     * @param {OAuthProvider} provider - OAuth2 Provider. Currently, supported providers are: amazon, apple, appwrite, auth0, authentik, autodesk, bitbucket, bitly, box, dailymotion, discord, disqus, dropbox, etsy, facebook, figma, fusionauth, github, gitlab, google, keycloak, kick, linkedin, microsoft, notion, oidc, okta, paypal, paypalSandbox, podio, salesforce, slack, spotify, stripe, tradeshift, tradeshiftBox, twitch, wordpress, x, yahoo, yammer, yandex, zoho, zoom.
      * @param {string} success - URL to redirect back to your app after a successful login attempt.  Only URLs from hostnames in your project's platform list are allowed. This requirement helps to prevent an [open redirect](https://cheatsheetseries.owasp.org/cheatsheets/Unvalidated_Redirects_and_Forwards_Cheat_Sheet.html) attack against your project API.
      * @param {string} failure - URL to redirect back to your app after a failed login attempt.  Only URLs from hostnames in your project's platform list are allowed. This requirement helps to prevent an [open redirect](https://cheatsheetseries.owasp.org/cheatsheets/Unvalidated_Redirects_and_Forwards_Cheat_Sheet.html) attack against your project API.
      * @param {string[]} scopes - A list of custom OAuth2 scopes. Check each provider internal docs for a list of supported scopes. Maximum of 100 scopes are allowed, each 4096 characters long.

package/types/services/apps.d.ts

@@ -30,7 +30,7 @@ export declare class Apps {
      *
      * @param {string} params.appId - Application ID. Choose a custom ID or generate a random ID with `ID.unique()`. Valid chars are a-z, A-Z, 0-9, period, hyphen, and underscore. Can't start with a special char. Max length is 36 chars.
      * @param {string} params.name - Application name.
-     * @param {string[]} params.redirectUris - Redirect URIs (array of valid URLs).
+     * @param {string[]} params.redirectUris - Redirect URIs. Each must be an https URL, an http loopback URL (localhost, 127.0.0.1, [::1]), or a private-use scheme URI (e.g. com.example.app:/oauth), and must not contain a fragment.
      * @param {string} params.description - Application description shown to users during OAuth2 consent.
      * @param {string} params.clientUri - Application homepage URL shown to users during OAuth2 consent.
      * @param {string} params.logoUri - Application logo URL shown to users during OAuth2 consent.
@@ -42,7 +42,7 @@ export declare class Apps {
      * @param {string[]} params.images - Application image URLs shown to users during OAuth2 consent. Maximum of 100 images are allowed.
      * @param {string} params.supportUrl - Application support URL shown to users during OAuth2 consent.
      * @param {string} params.dataDeletionUrl - Application data deletion URL shown to users during OAuth2 consent.
-     * @param {string[]} params.postLogoutRedirectUris - Post-logout redirect URIs for OpenID Connect RP-Initiated Logout (array of valid URLs). After ending the user session, the logout endpoint only redirects to URIs in this list.
+     * @param {string[]} params.postLogoutRedirectUris - Post-logout redirect URIs for OpenID Connect RP-Initiated Logout. Each must be an https URL, an http loopback URL, or a private-use scheme URI, and must not contain a fragment. After ending the user session, the logout endpoint only redirects to URIs in this list.
      * @param {boolean} params.enabled - Is application enabled?
      * @param {string} params.type - OAuth2 client type. Use `public` for SPAs, mobile, and native apps that cannot keep a `client_secret` — PKCE is then required at the token endpoint. Use `confidential` for server-side clients that present a `client_secret`. Defaults to `confidential`.
      * @param {boolean} params.deviceFlow - Allow this client to use the OAuth2 Device Authorization Grant (RFC 8628) for input-constrained devices such as TVs and CLIs. Defaults to false.
@@ -76,7 +76,7 @@ export declare class Apps {
      *
      * @param {string} appId - Application ID. Choose a custom ID or generate a random ID with `ID.unique()`. Valid chars are a-z, A-Z, 0-9, period, hyphen, and underscore. Can't start with a special char. Max length is 36 chars.
      * @param {string} name - Application name.
-     * @param {string[]} redirectUris - Redirect URIs (array of valid URLs).
+     * @param {string[]} redirectUris - Redirect URIs. Each must be an https URL, an http loopback URL (localhost, 127.0.0.1, [::1]), or a private-use scheme URI (e.g. com.example.app:/oauth), and must not contain a fragment.
      * @param {string} description - Application description shown to users during OAuth2 consent.
      * @param {string} clientUri - Application homepage URL shown to users during OAuth2 consent.
      * @param {string} logoUri - Application logo URL shown to users during OAuth2 consent.
@@ -88,7 +88,7 @@ export declare class Apps {
      * @param {string[]} images - Application image URLs shown to users during OAuth2 consent. Maximum of 100 images are allowed.
      * @param {string} supportUrl - Application support URL shown to users during OAuth2 consent.
      * @param {string} dataDeletionUrl - Application data deletion URL shown to users during OAuth2 consent.
-     * @param {string[]} postLogoutRedirectUris - Post-logout redirect URIs for OpenID Connect RP-Initiated Logout (array of valid URLs). After ending the user session, the logout endpoint only redirects to URIs in this list.
+     * @param {string[]} postLogoutRedirectUris - Post-logout redirect URIs for OpenID Connect RP-Initiated Logout. Each must be an https URL, an http loopback URL, or a private-use scheme URI, and must not contain a fragment. After ending the user session, the logout endpoint only redirects to URIs in this list.
      * @param {boolean} enabled - Is application enabled?
      * @param {string} type - OAuth2 client type. Use `public` for SPAs, mobile, and native apps that cannot keep a `client_secret` — PKCE is then required at the token endpoint. Use `confidential` for server-side clients that present a `client_secret`. Defaults to `confidential`.
      * @param {boolean} deviceFlow - Allow this client to use the OAuth2 Device Authorization Grant (RFC 8628) for input-constrained devices such as TVs and CLIs. Defaults to false.
@@ -98,10 +98,24 @@ export declare class Apps {
      * @deprecated Use the object parameter style method for a better developer experience.
      */
     create(appId: string, name: string, redirectUris: string[], description?: string, clientUri?: string, logoUri?: string, privacyPolicyUrl?: string, termsUrl?: string, contacts?: string[], tagline?: string, tags?: string[], images?: string[], supportUrl?: string, dataDeletionUrl?: string, postLogoutRedirectUris?: string[], enabled?: boolean, type?: string, deviceFlow?: boolean, teamId?: string): Promise<Models.App>;
+    /**
+     * List scopes an application can request when installed on a team.
+     *
+     * @throws {AppwriteException}
+     * @returns {Promise<Models.AppScopeList>}
+     */
+    listInstallationScopes(): Promise<Models.AppScopeList>;
+    /**
+     * List scopes an application can request during the OAuth2 flow.
+     *
+     * @throws {AppwriteException}
+     * @returns {Promise<Models.AppScopeList>}
+     */
+    listOAuth2Scopes(): Promise<Models.AppScopeList>;
     /**
      * Get an application by its unique ID.
      *
-     * @param {string} params.appId - Application unique ID.
+     * @param {string} params.appId - Application unique ID or HTTPS client ID metadata document URL.
      * @throws {AppwriteException}
      * @returns {Promise<Models.App>}
      */
@@ -111,7 +125,7 @@ export declare class Apps {
     /**
      * Get an application by its unique ID.
      *
-     * @param {string} appId - Application unique ID.
+     * @param {string} appId - Application unique ID or HTTPS client ID metadata document URL.
      * @throws {AppwriteException}
      * @returns {Promise<Models.App>}
      * @deprecated Use the object parameter style method for a better developer experience.
@@ -134,10 +148,12 @@ export declare class Apps {
      * @param {string} params.supportUrl - Application support URL shown to users during OAuth2 consent.
      * @param {string} params.dataDeletionUrl - Application data deletion URL shown to users during OAuth2 consent.
      * @param {boolean} params.enabled - Is application enabled?
-     * @param {string[]} params.redirectUris - Redirect URIs (array of valid URLs).
-     * @param {string[]} params.postLogoutRedirectUris - Post-logout redirect URIs for OpenID Connect RP-Initiated Logout (array of valid URLs). After ending the user session, the logout endpoint only redirects to URIs in this list.
+     * @param {string[]} params.redirectUris - Redirect URIs. Each must be an https URL, an http loopback URL (localhost, 127.0.0.1, [::1]), or a private-use scheme URI (e.g. com.example.app:/oauth), and must not contain a fragment.
+     * @param {string[]} params.postLogoutRedirectUris - Post-logout redirect URIs for OpenID Connect RP-Initiated Logout. Each must be an https URL, an http loopback URL, or a private-use scheme URI, and must not contain a fragment. After ending the user session, the logout endpoint only redirects to URIs in this list.
      * @param {string} params.type - OAuth2 client type. Use `public` for SPAs, mobile, and native apps that cannot keep a `client_secret` — PKCE is then required at the token endpoint. Use `confidential` for server-side clients that present a `client_secret`. Defaults to `confidential`.
      * @param {boolean} params.deviceFlow - Allow this client to use the OAuth2 Device Authorization Grant (RFC 8628) for input-constrained devices such as TVs and CLIs. Defaults to false.
+     * @param {string[]} params.installationScopes - Scopes the application requests when installed on a team. Organization-level and project-level scopes only; use the list scopes endpoint with `type=installation` to discover available values. Maximum of 100 scopes are allowed.
+     * @param {string} params.installationRedirectUrl - URL users are redirected to after creating or updating an installation of this application. Must be an https URL, an http loopback URL (localhost, 127.0.0.1, [::1]), or a private-use scheme URI, and must not contain a fragment. Leave empty for no redirect.
      * @throws {AppwriteException}
      * @returns {Promise<Models.App>}
      */
@@ -160,6 +176,8 @@ export declare class Apps {
         postLogoutRedirectUris?: string[];
         type?: string;
         deviceFlow?: boolean;
+        installationScopes?: string[];
+        installationRedirectUrl?: string;
     }): Promise<Models.App>;
     /**
      * Update an application by its unique ID.
@@ -178,15 +196,17 @@ export declare class Apps {
      * @param {string} supportUrl - Application support URL shown to users during OAuth2 consent.
      * @param {string} dataDeletionUrl - Application data deletion URL shown to users during OAuth2 consent.
      * @param {boolean} enabled - Is application enabled?
-     * @param {string[]} redirectUris - Redirect URIs (array of valid URLs).
-     * @param {string[]} postLogoutRedirectUris - Post-logout redirect URIs for OpenID Connect RP-Initiated Logout (array of valid URLs). After ending the user session, the logout endpoint only redirects to URIs in this list.
+     * @param {string[]} redirectUris - Redirect URIs. Each must be an https URL, an http loopback URL (localhost, 127.0.0.1, [::1]), or a private-use scheme URI (e.g. com.example.app:/oauth), and must not contain a fragment.
+     * @param {string[]} postLogoutRedirectUris - Post-logout redirect URIs for OpenID Connect RP-Initiated Logout. Each must be an https URL, an http loopback URL, or a private-use scheme URI, and must not contain a fragment. After ending the user session, the logout endpoint only redirects to URIs in this list.
      * @param {string} type - OAuth2 client type. Use `public` for SPAs, mobile, and native apps that cannot keep a `client_secret` — PKCE is then required at the token endpoint. Use `confidential` for server-side clients that present a `client_secret`. Defaults to `confidential`.
      * @param {boolean} deviceFlow - Allow this client to use the OAuth2 Device Authorization Grant (RFC 8628) for input-constrained devices such as TVs and CLIs. Defaults to false.
+     * @param {string[]} installationScopes - Scopes the application requests when installed on a team. Organization-level and project-level scopes only; use the list scopes endpoint with `type=installation` to discover available values. Maximum of 100 scopes are allowed.
+     * @param {string} installationRedirectUrl - URL users are redirected to after creating or updating an installation of this application. Must be an https URL, an http loopback URL (localhost, 127.0.0.1, [::1]), or a private-use scheme URI, and must not contain a fragment. Leave empty for no redirect.
      * @throws {AppwriteException}
      * @returns {Promise<Models.App>}
      * @deprecated Use the object parameter style method for a better developer experience.
      */
-    update(appId: string, name: string, description?: string, clientUri?: string, logoUri?: string, privacyPolicyUrl?: string, termsUrl?: string, contacts?: string[], tagline?: string, tags?: string[], images?: string[], supportUrl?: string, dataDeletionUrl?: string, enabled?: boolean, redirectUris?: string[], postLogoutRedirectUris?: string[], type?: string, deviceFlow?: boolean): Promise<Models.App>;
+    update(appId: string, name: string, description?: string, clientUri?: string, logoUri?: string, privacyPolicyUrl?: string, termsUrl?: string, contacts?: string[], tagline?: string, tags?: string[], images?: string[], supportUrl?: string, dataDeletionUrl?: string, enabled?: boolean, redirectUris?: string[], postLogoutRedirectUris?: string[], type?: string, deviceFlow?: boolean, installationScopes?: string[], installationRedirectUrl?: string): Promise<Models.App>;
     /**
      * Delete an application by its unique ID.
      *
@@ -206,6 +226,116 @@ export declare class Apps {
      * @deprecated Use the object parameter style method for a better developer experience.
      */
     delete(appId: string): Promise<{}>;
+    /**
+     * List app keys for an application.
+     *
+     * @param {string} params.appId - Application unique ID.
+     * @param {string[]} params.queries - Array of query strings generated using the Query class provided by the SDK. [Learn more about queries](https://appwrite.io/docs/queries). Maximum of 100 queries are allowed, each 4096 characters long.
+     * @param {boolean} params.total - When set to false, the total count returned will be 0 and will not be calculated.
+     * @throws {AppwriteException}
+     * @returns {Promise<Models.AppKeyList>}
+     */
+    listKeys(params: {
+        appId: string;
+        queries?: string[];
+        total?: boolean;
+    }): Promise<Models.AppKeyList>;
+    /**
+     * List app keys for an application.
+     *
+     * @param {string} appId - Application unique ID.
+     * @param {string[]} queries - Array of query strings generated using the Query class provided by the SDK. [Learn more about queries](https://appwrite.io/docs/queries). Maximum of 100 queries are allowed, each 4096 characters long.
+     * @param {boolean} total - When set to false, the total count returned will be 0 and will not be calculated.
+     * @throws {AppwriteException}
+     * @returns {Promise<Models.AppKeyList>}
+     * @deprecated Use the object parameter style method for a better developer experience.
+     */
+    listKeys(appId: string, queries?: string[], total?: boolean): Promise<Models.AppKeyList>;
+    /**
+     * Create a new app key for an application. App keys carry no scopes; send one in the `X-Appwrite-Key` header alongside the `X-Appwrite-App` header to list the application's installations and create installation access tokens.
+     *
+     * @param {string} params.appId - Application unique ID.
+     * @throws {AppwriteException}
+     * @returns {Promise<Models.AppKey>}
+     */
+    createKey(params: {
+        appId: string;
+    }): Promise<Models.AppKey>;
+    /**
+     * Create a new app key for an application. App keys carry no scopes; send one in the `X-Appwrite-Key` header alongside the `X-Appwrite-App` header to list the application's installations and create installation access tokens.
+     *
+     * @param {string} appId - Application unique ID.
+     * @throws {AppwriteException}
+     * @returns {Promise<Models.AppKey>}
+     * @deprecated Use the object parameter style method for a better developer experience.
+     */
+    createKey(appId: string): Promise<Models.AppKey>;
+    /**
+     * Get an app key by its unique ID.
+     *
+     * @param {string} params.appId - Application unique ID.
+     * @param {string} params.keyId - App key unique ID.
+     * @throws {AppwriteException}
+     * @returns {Promise<Models.AppKey>}
+     */
+    getKey(params: {
+        appId: string;
+        keyId: string;
+    }): Promise<Models.AppKey>;
+    /**
+     * Get an app key by its unique ID.
+     *
+     * @param {string} appId - Application unique ID.
+     * @param {string} keyId - App key unique ID.
+     * @throws {AppwriteException}
+     * @returns {Promise<Models.AppKey>}
+     * @deprecated Use the object parameter style method for a better developer experience.
+     */
+    getKey(appId: string, keyId: string): Promise<Models.AppKey>;
+    /**
+     * Delete an app key by its unique ID.
+     *
+     * @param {string} params.appId - Application unique ID.
+     * @param {string} params.keyId - App key unique ID.
+     * @throws {AppwriteException}
+     * @returns {Promise<{}>}
+     */
+    deleteKey(params: {
+        appId: string;
+        keyId: string;
+    }): Promise<{}>;
+    /**
+     * Delete an app key by its unique ID.
+     *
+     * @param {string} appId - Application unique ID.
+     * @param {string} keyId - App key unique ID.
+     * @throws {AppwriteException}
+     * @returns {Promise<{}>}
+     * @deprecated Use the object parameter style method for a better developer experience.
+     */
+    deleteKey(appId: string, keyId: string): Promise<{}>;
+    /**
+     * Update the labels of an application. Labels are read-only for clients; only a server SDK using a project API key can set them. Replaces the previous labels.
+     *
+     * @param {string} params.appId - Application unique ID.
+     * @param {string[]} params.labels - Array of application labels. Replaces the previous labels. Maximum of 1000 labels are allowed, each up to 36 alphanumeric characters long.
+     * @throws {AppwriteException}
+     * @returns {Promise<Models.App>}
+     */
+    updateLabels(params: {
+        appId: string;
+        labels: string[];
+    }): Promise<Models.App>;
+    /**
+     * Update the labels of an application. Labels are read-only for clients; only a server SDK using a project API key can set them. Replaces the previous labels.
+     *
+     * @param {string} appId - Application unique ID.
+     * @param {string[]} labels - Array of application labels. Replaces the previous labels. Maximum of 1000 labels are allowed, each up to 36 alphanumeric characters long.
+     * @throws {AppwriteException}
+     * @returns {Promise<Models.App>}
+     * @deprecated Use the object parameter style method for a better developer experience.
+     */
+    updateLabels(appId: string, labels: string[]): Promise<Models.App>;
     /**
      * List client secrets for an application.
      *

package/types/services/backups.d.ts

@@ -211,14 +211,19 @@ export declare class Backups {
     /**
      * Create and trigger a new restoration for a backup on a project.
      *
-     * When restoring a DocumentsDB or VectorsDB database to a new resource, pass `newSpecification` to provision the restored database on a different specification than the archived one (for example, restoring onto a larger or smaller dedicated database). Use `serverless` to restore onto the shared pool, or a dedicated specification slug to restore onto a dedicated database of that size. The specification must be permitted by the organization's plan. `newSpecification` is not supported for legacy/TablesDB databases or for bucket restores.
+     * For a backup of one database, the restoration resolves its destination before it is queued. Pass `newResourceId` to restore into that database ID, including the archived database ID to overwrite it. When `newResourceId` is omitted, a new database ID is generated and returned in `options`.
+     *
+     * The restoration migration records the archived database in `resourceId` and `resourceType`, and the resolved database in `destinationResourceId` and `destinationResourceType`. Database types are stored canonically as `database`, `documentsdb`, or `vectorsdb`. Project-wide restorations leave these fields empty because they do not have a single source or destination database.
+     *
+     * To list every migration related to one database, use its canonical type in a nested `OR(AND(...), AND(...), AND(...))` across the root, parent, and destination relation pairs: `(resourceType, resourceId)`, `(parentResourceType, parentResourceId)`, and `(destinationResourceType, destinationResourceId)`. Legacy and TablesDB databases use `database`; the operational `resourceType` of a table migration is not rewritten to `tablesdb`.
+     *
+     * When restoring a DocumentsDB or VectorsDB database to a new resource from a dedicated source, the restore provisions a fresh dedicated backing database at the source database's own specification.
      *
      *
      * @param {string} params.archiveId - Backup archive ID to restore
      * @param {BackupServices[]} params.services - Array of services to restore
-     * @param {string} params.newResourceId - Unique Id. Choose a custom ID or generate a random ID with `ID.unique()`. Valid chars are a-z, A-Z, 0-9, period, hyphen, and underscore. Can't start with a special char. Max length is 36 chars.
+     * @param {string} params.newResourceId - Destination resource ID. Omit to generate a new ID, or pass the archived resource ID to overwrite it. Valid chars are a-z, A-Z, 0-9, period, hyphen, and underscore. Can't start with a special char. Max length is 36 chars.
      * @param {string} params.newResourceName - Database name. Max length: 128 chars.
-     * @param {string} params.newSpecification - Specification to provision the restored database on, when restoring a DocumentsDB or VectorsDB database to a new resource. Defaults to the archived database's specification. Use `serverless` for the shared pool or a dedicated specification slug.
      * @throws {AppwriteException}
      * @returns {Promise<Models.BackupRestoration>}
      */
@@ -227,24 +232,28 @@ export declare class Backups {
         services: BackupServices[];
         newResourceId?: string;
         newResourceName?: string;
-        newSpecification?: string;
     }): Promise<Models.BackupRestoration>;
     /**
      * Create and trigger a new restoration for a backup on a project.
      *
-     * When restoring a DocumentsDB or VectorsDB database to a new resource, pass `newSpecification` to provision the restored database on a different specification than the archived one (for example, restoring onto a larger or smaller dedicated database). Use `serverless` to restore onto the shared pool, or a dedicated specification slug to restore onto a dedicated database of that size. The specification must be permitted by the organization's plan. `newSpecification` is not supported for legacy/TablesDB databases or for bucket restores.
+     * For a backup of one database, the restoration resolves its destination before it is queued. Pass `newResourceId` to restore into that database ID, including the archived database ID to overwrite it. When `newResourceId` is omitted, a new database ID is generated and returned in `options`.
+     *
+     * The restoration migration records the archived database in `resourceId` and `resourceType`, and the resolved database in `destinationResourceId` and `destinationResourceType`. Database types are stored canonically as `database`, `documentsdb`, or `vectorsdb`. Project-wide restorations leave these fields empty because they do not have a single source or destination database.
+     *
+     * To list every migration related to one database, use its canonical type in a nested `OR(AND(...), AND(...), AND(...))` across the root, parent, and destination relation pairs: `(resourceType, resourceId)`, `(parentResourceType, parentResourceId)`, and `(destinationResourceType, destinationResourceId)`. Legacy and TablesDB databases use `database`; the operational `resourceType` of a table migration is not rewritten to `tablesdb`.
+     *
+     * When restoring a DocumentsDB or VectorsDB database to a new resource from a dedicated source, the restore provisions a fresh dedicated backing database at the source database's own specification.
      *
      *
      * @param {string} archiveId - Backup archive ID to restore
      * @param {BackupServices[]} services - Array of services to restore
-     * @param {string} newResourceId - Unique Id. Choose a custom ID or generate a random ID with `ID.unique()`. Valid chars are a-z, A-Z, 0-9, period, hyphen, and underscore. Can't start with a special char. Max length is 36 chars.
+     * @param {string} newResourceId - Destination resource ID. Omit to generate a new ID, or pass the archived resource ID to overwrite it. Valid chars are a-z, A-Z, 0-9, period, hyphen, and underscore. Can't start with a special char. Max length is 36 chars.
      * @param {string} newResourceName - Database name. Max length: 128 chars.
-     * @param {string} newSpecification - Specification to provision the restored database on, when restoring a DocumentsDB or VectorsDB database to a new resource. Defaults to the archived database's specification. Use `serverless` for the shared pool or a dedicated specification slug.
      * @throws {AppwriteException}
      * @returns {Promise<Models.BackupRestoration>}
      * @deprecated Use the object parameter style method for a better developer experience.
      */
-    createRestoration(archiveId: string, services: BackupServices[], newResourceId?: string, newResourceName?: string, newSpecification?: string): Promise<Models.BackupRestoration>;
+    createRestoration(archiveId: string, services: BackupServices[], newResourceId?: string, newResourceName?: string): Promise<Models.BackupRestoration>;
     /**
      * List all backup restorations for a project.
      *

package/types/services/databases.d.ts

@@ -1,6 +1,5 @@
 import { Client } from '../client';
 import type { Models } from '../models';
-import { UsageRange } from '../enums/usage-range';
 import { RelationshipType } from '../enums/relationship-type';
 import { RelationMutate } from '../enums/relation-mutate';
 import { DatabasesIndexType } from '../enums/databases-index-type';
@@ -191,26 +190,6 @@ export declare class Databases {
      * @deprecated Use the object parameter style method for a better developer experience.
      */
     createOperations(transactionId: string, operations?: object[]): Promise<Models.Transaction>;
-    /**
-     * List usage metrics and statistics for all databases in the project. You can view the total number of databases, collections, documents, and storage usage. The response includes both current totals and historical data over time. Use the optional range parameter to specify the time window for historical data: 24h (last 24 hours), 30d (last 30 days), or 90d (last 90 days). If not specified, range defaults to 30 days.
-     *
-     * @param {UsageRange} params.range - Date range.
-     * @throws {AppwriteException}
-     * @returns {Promise<Models.UsageDatabases>}
-     * @deprecated This API has been deprecated since 1.8.0. Please use `TablesDB.listUsage` instead.
-     */
-    listUsage(params?: {
-        range?: UsageRange;
-    }): Promise<Models.UsageDatabases>;
-    /**
-     * List usage metrics and statistics for all databases in the project. You can view the total number of databases, collections, documents, and storage usage. The response includes both current totals and historical data over time. Use the optional range parameter to specify the time window for historical data: 24h (last 24 hours), 30d (last 30 days), or 90d (last 90 days). If not specified, range defaults to 30 days.
-     *
-     * @param {UsageRange} range - Date range.
-     * @throws {AppwriteException}
-     * @returns {Promise<Models.UsageDatabases>}
-     * @deprecated Use the object parameter style method for a better developer experience.
-     */
-    listUsage(range?: UsageRange): Promise<Models.UsageDatabases>;
     /**
      * Get a database by its unique ID. This endpoint response returns a JSON object with the database metadata.
      *
@@ -2408,53 +2387,4 @@ export declare class Databases {
      * @deprecated Use the object parameter style method for a better developer experience.
      */
     deleteIndex(databaseId: string, collectionId: string, key: string): Promise<{}>;
-    /**
-     * Get usage metrics and statistics for a collection. Returning the total number of documents. The response includes both current totals and historical data over time. Use the optional range parameter to specify the time window for historical data: 24h (last 24 hours), 30d (last 30 days), or 90d (last 90 days). If not specified, range defaults to 30 days.
-     *
-     * @param {string} params.databaseId - Database ID.
-     * @param {string} params.collectionId - Collection ID.
-     * @param {UsageRange} params.range - Date range.
-     * @throws {AppwriteException}
-     * @returns {Promise<Models.UsageCollection>}
-     * @deprecated This API has been deprecated since 1.8.0. Please use `TablesDB.getTableUsage` instead.
-     */
-    getCollectionUsage(params: {
-        databaseId: string;
-        collectionId: string;
-        range?: UsageRange;
-    }): Promise<Models.UsageCollection>;
-    /**
-     * Get usage metrics and statistics for a collection. Returning the total number of documents. The response includes both current totals and historical data over time. Use the optional range parameter to specify the time window for historical data: 24h (last 24 hours), 30d (last 30 days), or 90d (last 90 days). If not specified, range defaults to 30 days.
-     *
-     * @param {string} databaseId - Database ID.
-     * @param {string} collectionId - Collection ID.
-     * @param {UsageRange} range - Date range.
-     * @throws {AppwriteException}
-     * @returns {Promise<Models.UsageCollection>}
-     * @deprecated Use the object parameter style method for a better developer experience.
-     */
-    getCollectionUsage(databaseId: string, collectionId: string, range?: UsageRange): Promise<Models.UsageCollection>;
-    /**
-     * Get usage metrics and statistics for a database. You can view the total number of collections, documents, and storage usage. The response includes both current totals and historical data over time. Use the optional range parameter to specify the time window for historical data: 24h (last 24 hours), 30d (last 30 days), or 90d (last 90 days). If not specified, range defaults to 30 days.
-     *
-     * @param {string} params.databaseId - Database ID.
-     * @param {UsageRange} params.range - Date range.
-     * @throws {AppwriteException}
-     * @returns {Promise<Models.UsageDatabase>}
-     * @deprecated This API has been deprecated since 1.8.0. Please use `TablesDB.getUsage` instead.
-     */
-    getUsage(params: {
-        databaseId: string;
-        range?: UsageRange;
-    }): Promise<Models.UsageDatabase>;
-    /**
-     * Get usage metrics and statistics for a database. You can view the total number of collections, documents, and storage usage. The response includes both current totals and historical data over time. Use the optional range parameter to specify the time window for historical data: 24h (last 24 hours), 30d (last 30 days), or 90d (last 90 days). If not specified, range defaults to 30 days.
-     *
-     * @param {string} databaseId - Database ID.
-     * @param {UsageRange} range - Date range.
-     * @throws {AppwriteException}
-     * @returns {Promise<Models.UsageDatabase>}
-     * @deprecated Use the object parameter style method for a better developer experience.
-     */
-    getUsage(databaseId: string, range?: UsageRange): Promise<Models.UsageDatabase>;
 }