@confighub/rtk-query 0.4.5 → 0.4.7

package/dist/index.d.cts

@@ -1349,7 +1349,7 @@ type BulkDeleteChangeOrdersApiArg = {
       An example conjunction is:
       `CreatedAt >= '2025-01-07' AND Slug = 'test' AND Labels.mykey = 'myvalue'`.
       
-      Supported attributes for filtering on ChangeOrder: AbortedReason, AdoptedEndTagID, Annotations, ChangeOrderID, CreatedAt, DeleteGates, Description, DisplayName, EndTagID, InScopeSpaceIDs, Labels, OrganizationID, ReleasedRestoredSpaceIDs, ReleasedSpaceIDs, ResolvedSpaceIDs, RestoreTagID, RestoredSpaceIDs, SkippedUnits, Slug, SpaceID, StartTagID, State, UpdateType, UpdatedAt.
+      Supported attributes for filtering on ChangeOrder: AbortedReason, AdoptedEndTagID, Annotations, ChangeOrderID, CreatedAt, DeleteGates, Description, DisplayName, EndTagID, InScopeSpaceIDs, InvocationID, Labels, OrganizationID, Parameters, ReleasedRestoredSpaceIDs, ReleasedSpaceIDs, ResolvedSpaceIDs, RestoreTagID, RestoredSpaceIDs, SkippedUnits, Slug, SpaceID, StartTagID, State, UnitFilterID, UpdateType, UpdatedAt, WhereUnit.
       
       The whole string must be query-encoded. */
     where?: string;
@@ -1385,7 +1385,7 @@ type BulkDeleteChangeOrdersApiArg = {
       The attribute names are case-sensitive, PascalCase, and
       expected in a comma-separated list format as in the JSON encoding.
       
-      Supported attributes for ChangeOrder are EndTagID, OrganizationID, RestoreTagID, SpaceID, StartTagID.
+      Supported attributes for ChangeOrder are EndTagID, InvocationID, OrganizationID, RestoreTagID, SpaceID, StartTagID, UnitFilterID.
       
       The whole string must be query-encoded. */
     include?: string;
@@ -1427,7 +1427,7 @@ type ListAllChangeOrdersApiArg = {
       An example conjunction is:
       `CreatedAt >= '2025-01-07' AND Slug = 'test' AND Labels.mykey = 'myvalue'`.
       
-      Supported attributes for filtering on ChangeOrder: AbortedReason, AdoptedEndTagID, Annotations, ChangeOrderID, CreatedAt, DeleteGates, Description, DisplayName, EndTagID, InScopeSpaceIDs, Labels, OrganizationID, ReleasedRestoredSpaceIDs, ReleasedSpaceIDs, ResolvedSpaceIDs, RestoreTagID, RestoredSpaceIDs, SkippedUnits, Slug, SpaceID, StartTagID, State, UpdateType, UpdatedAt.
+      Supported attributes for filtering on ChangeOrder: AbortedReason, AdoptedEndTagID, Annotations, ChangeOrderID, CreatedAt, DeleteGates, Description, DisplayName, EndTagID, InScopeSpaceIDs, InvocationID, Labels, OrganizationID, Parameters, ReleasedRestoredSpaceIDs, ReleasedSpaceIDs, ResolvedSpaceIDs, RestoreTagID, RestoredSpaceIDs, SkippedUnits, Slug, SpaceID, StartTagID, State, UnitFilterID, UpdateType, UpdatedAt, WhereUnit.
       
       The whole string must be query-encoded. */
     where?: string;
@@ -1463,7 +1463,7 @@ type ListAllChangeOrdersApiArg = {
       The attribute names are case-sensitive, PascalCase, and
       expected in a comma-separated list format as in the JSON encoding.
       
-      Supported attributes for ChangeOrder are EndTagID, OrganizationID, RestoreTagID, SpaceID, StartTagID.
+      Supported attributes for ChangeOrder are EndTagID, InvocationID, OrganizationID, RestoreTagID, SpaceID, StartTagID, UnitFilterID.
       
       The whole string must be query-encoded. */
     include?: string;
@@ -1513,7 +1513,7 @@ type BulkPatchChangeOrdersApiArg = {
       An example conjunction is:
       `CreatedAt >= '2025-01-07' AND Slug = 'test' AND Labels.mykey = 'myvalue'`.
       
-      Supported attributes for filtering on ChangeOrder: AbortedReason, AdoptedEndTagID, Annotations, ChangeOrderID, CreatedAt, DeleteGates, Description, DisplayName, EndTagID, InScopeSpaceIDs, Labels, OrganizationID, ReleasedRestoredSpaceIDs, ReleasedSpaceIDs, ResolvedSpaceIDs, RestoreTagID, RestoredSpaceIDs, SkippedUnits, Slug, SpaceID, StartTagID, State, UpdateType, UpdatedAt.
+      Supported attributes for filtering on ChangeOrder: AbortedReason, AdoptedEndTagID, Annotations, ChangeOrderID, CreatedAt, DeleteGates, Description, DisplayName, EndTagID, InScopeSpaceIDs, InvocationID, Labels, OrganizationID, Parameters, ReleasedRestoredSpaceIDs, ReleasedSpaceIDs, ResolvedSpaceIDs, RestoreTagID, RestoredSpaceIDs, SkippedUnits, Slug, SpaceID, StartTagID, State, UnitFilterID, UpdateType, UpdatedAt, WhereUnit.
       
       The whole string must be query-encoded. */
     where?: string;
@@ -1549,7 +1549,7 @@ type BulkPatchChangeOrdersApiArg = {
       The attribute names are case-sensitive, PascalCase, and
       expected in a comma-separated list format as in the JSON encoding.
       
-      Supported attributes for ChangeOrder are EndTagID, OrganizationID, RestoreTagID, SpaceID, StartTagID.
+      Supported attributes for ChangeOrder are EndTagID, InvocationID, OrganizationID, RestoreTagID, SpaceID, StartTagID, UnitFilterID.
       
       The whole string must be query-encoded. */
     include?: string;
@@ -1568,15 +1568,19 @@ type BulkPatchChangeOrdersApiArg = {
         DisplayName?: string | null;
         EndTagID?: string | null;
         InScopeSpaceIDs?: (string | null)[] | null;
+        InvocationID?: string | null;
         /** An optional map of Label key/value pairs to specify identifying attributes of entities for the purpose of grouping and filtering them. */
         Labels?: {
             [key: string]: string | null;
         } | null;
+        Parameters?: object | null;
         /** Unique URL-safe identifier for the entity. */
         Slug?: string | null;
+        UnitFilterID?: string | null;
         UpdateType?: string | null;
         /** An entity-specific sequence number used for optimistic concurrency control. The value read must be sent in calls to Update. */
         Version?: number | null;
+        WhereUnit?: string | null;
     };
 };
 type BulkCreateChangeOrdersApiResponse = /** status 200 OK */ ChangeOrderCreateOrUpdateResponseRead[] | /** status 207 Multi-Status (partial success) */ ChangeOrderCreateOrUpdateResponseRead[];
@@ -1615,7 +1619,7 @@ type BulkCreateChangeOrdersApiArg = {
       An example conjunction is:
       `CreatedAt >= '2025-01-07' AND Slug = 'test' AND Labels.mykey = 'myvalue'`.
       
-      Supported attributes for filtering on ChangeOrder: AbortedReason, AdoptedEndTagID, Annotations, ChangeOrderID, CreatedAt, DeleteGates, Description, DisplayName, EndTagID, InScopeSpaceIDs, Labels, OrganizationID, ReleasedRestoredSpaceIDs, ReleasedSpaceIDs, ResolvedSpaceIDs, RestoreTagID, RestoredSpaceIDs, SkippedUnits, Slug, SpaceID, StartTagID, State, UpdateType, UpdatedAt.
+      Supported attributes for filtering on ChangeOrder: AbortedReason, AdoptedEndTagID, Annotations, ChangeOrderID, CreatedAt, DeleteGates, Description, DisplayName, EndTagID, InScopeSpaceIDs, InvocationID, Labels, OrganizationID, Parameters, ReleasedRestoredSpaceIDs, ReleasedSpaceIDs, ResolvedSpaceIDs, RestoreTagID, RestoredSpaceIDs, SkippedUnits, Slug, SpaceID, StartTagID, State, UnitFilterID, UpdateType, UpdatedAt, WhereUnit.
       
       The whole string must be query-encoded. */
     where?: string;
@@ -1651,7 +1655,7 @@ type BulkCreateChangeOrdersApiArg = {
       The attribute names are case-sensitive, PascalCase, and
       expected in a comma-separated list format as in the JSON encoding.
       
-      Supported attributes for ChangeOrder are EndTagID, OrganizationID, RestoreTagID, SpaceID, StartTagID.
+      Supported attributes for ChangeOrder are EndTagID, InvocationID, OrganizationID, RestoreTagID, SpaceID, StartTagID, UnitFilterID.
       
       The whole string must be query-encoded. */
     include?: string;
@@ -1730,15 +1734,19 @@ type BulkCreateChangeOrdersApiArg = {
         DisplayName?: string | null;
         EndTagID?: string | null;
         InScopeSpaceIDs?: (string | null)[] | null;
+        InvocationID?: string | null;
         /** An optional map of Label key/value pairs to specify identifying attributes of entities for the purpose of grouping and filtering them. */
         Labels?: {
             [key: string]: string | null;
         } | null;
+        Parameters?: object | null;
         /** Unique URL-safe identifier for the entity. */
         Slug?: string | null;
+        UnitFilterID?: string | null;
         UpdateType?: string | null;
         /** An entity-specific sequence number used for optimistic concurrency control. The value read must be sent in calls to Update. */
         Version?: number | null;
+        WhereUnit?: string | null;
     };
 };
 type BulkDeleteChangeSetsApiResponse = /** status 200 OK */ DeleteResponse[] | /** status 207 Multi-Status: Mixed success and failure results */ DeleteResponse[];
@@ -2654,6 +2662,8 @@ type InvokeFunctionsOnOrgApiArg = {
     guards?: string;
     /** Must match ChangeSetID of affected Units unless in dry run mode; not valid when invoked on Revisions */
     changeSetId?: string;
+    /** ChangeOrder to promote, which must have UpdateType Invoke. What runs then comes from the ChangeOrder rather than from the request body, which may not carry functions, triggers or invocations of its own; that is what holds every Space in scope to the same change. Only the Units the ChangeOrder covers are reached, a Unit that has already taken it is passed over, and every Unit reached is marked with the ChangeOrder's start and end Tags -- both on the head, with no Revision made, where the invocation changed nothing. Not valid when invoked on Revisions. */
+    changeOrder?: string;
     /** User-defined category for the Mutation. Must be alphanumeric, at most 64 characters. The prefix 'ConfigHub' is reserved. */
     subgroup?: string;
     /** Source of additional configuration data to pass to functions that need it (e.g., vet-immutable). Supports named revision specifiers: LastReleasedRevisionNum, HeadRevisionNum. Can be prefixed with 'Before:' (e.g., Before:HeadRevisionNum). May be repeated for multiple sources. */
@@ -2692,7 +2702,7 @@ type InvokeFunctionsOnOrgApiArg = {
       An example conjunction is:
       `CreatedAt >= '2025-01-07' AND Slug = 'test' AND Labels.mykey = 'myvalue'`.
       
-      Supported attributes for filtering on Unit: Annotations, ApplyGates, ApplyWarnings, ApprovedBy, BridgeWorkerID, ChangeSetID, Conflicts, CreatedAt, DataHash, DeleteGates, DestroyGates, DisplayName, FromLinkID, HeadRevisionNum, HeadUnitActionNum, HeadUnitEventNum, Labels, LastActionAt, LastChangeDescription, LastReleasedRevisionNum, NeededPaths, OrganizationID, ProvidedPaths, ProviderType, Slug, SpaceID, TargetID, TargetOptions, ToolchainType, UnitID, UpdatedAt, UpstreamRevisionNum, UpstreamSpaceID, UpstreamUnitID, Values.
+      Supported attributes for filtering on Unit: Annotations, ApplyGates, ApplyWarnings, ApprovedBy, BridgeWorkerID, ChangeSetID, Conflicts, CreatedAt, DataHash, DeleteGates, DestroyGates, DisplayName, FromLinkID, HeadRevisionID, HeadRevisionNum, HeadUnitActionNum, HeadUnitEventNum, Labels, LastActionAt, LastChangeDescription, LastReleasedRevisionNum, NeededPaths, OrganizationID, ProvidedPaths, ProviderType, Slug, SpaceID, TargetID, TargetOptions, ToolchainType, UnitID, UpdatedAt, UpstreamRevisionNum, UpstreamSpaceID, UpstreamUnitID, ValidationErrors, ValidationWarnings, Values.
       
       Finding all units created by cloning can be done using the expression `UpstreamRevisionNum > 0`. Clones of a specific unit can be found by additionally filtering based on `UpstreamUnitID`. Unapplied units can be found using `LastReleasedRevisionNum = 0`. Units with unapplied changes can be found with `HeadRevisionNum > LastReleasedRevisionNum`.
       
@@ -2714,8 +2724,10 @@ type InvokeFunctionsOnOrgApiArg = {
     include?: string;
     /** Resource type: Resource type to match for the desired ToolchainType, for example apps/v1/Deployment */
     resourceType?: string;
-    /** Where data: The specified string is an expression for the purpose of evaluating whether the configuration data matches the filter. It supports conjunctions using `AND` of relational expressions of the form *path* *operator* *literal*. The path specifications are dot-separated, for both map fields and array indices, as in `spec.template.spec.containers.0.image = 'ghcr.io/headlamp-k8s/headlamp:latest' AND spec.replicas > 1`. Path expressions support `*` for wildcard array or map segments and `?key=value` syntax for associative matches of array elements containing objects with a `key` attribute. Strings support the following operators: `<`, `>`, `<=`, `>=`, `=`, `!=`, `LIKE`, `ILIKE`, `~~`, `!~~`, `~`, `!~`, `~*`, `!~*`, `IN`, `NOT IN`. String pattern operators: `LIKE` and `~~` for pattern matching with `%` and `_` wildcards, `ILIKE` for case-insensitive pattern matching, `!~~` for NOT LIKE. String regex operators: `~` for regex matching, `~*` for case-insensitive regex, `!~` and `!~*` for regex not matching (case-sensitive and insensitive). Integers support the following operators: `<`, `>`, `<=`, `>=`, `=`, `!=`, `IN`, `NOT IN`. Boolean values support equality and inequality only. The `IN` and `NOT IN` operators accept a comma-separated list of values in parentheses, such as `spec.template.spec.containers.0.image#reference IN (':latest', ':arm64-latest')`. The syntax `.|` requires the preceding path to exist; otherwise the relation `!=` will always return true regardless what it is compared with. String literals are quoted with single quotes, such as `'string'`. Integer and boolean literals are also supported for attributes of those types. The whole string must be query-encoded. */
+    /** Where data: The specified string is an expression for the purpose of evaluating whether the configuration data matches the filter. It supports conjunctions using `AND` of relational expressions of the form *path* *operator* *literal*. The path specifications are dot-separated, for both map fields and array indices, as in `spec.template.spec.containers.0.image = 'ghcr.io/headlamp-k8s/headlamp:latest' AND spec.replicas > 1`. Path expressions support `*` for wildcard array or map segments and `?key=value` syntax for associative matches of array elements containing objects with a `key` attribute. Strings support the following operators: `<`, `>`, `<=`, `>=`, `=`, `!=`, `LIKE`, `ILIKE`, `~~`, `!~~`, `~`, `!~`, `~*`, `!~*`, `IN`, `NOT IN`. String pattern operators: `LIKE` and `~~` for pattern matching with `%` and `_` wildcards, `ILIKE` for case-insensitive pattern matching, `!~~` for NOT LIKE. String regex operators: `~` for regex matching, `~*` for case-insensitive regex, `!~` and `!~*` for regex not matching (case-sensitive and insensitive). Integers support the following operators: `<`, `>`, `<=`, `>=`, `=`, `!=`, `IN`, `NOT IN`. Boolean values support equality and inequality only. The `IN` and `NOT IN` operators accept a comma-separated list of values in parentheses, such as `spec.template.spec.containers.0.image#reference IN (':latest', ':arm64-latest')`. The syntax `.|` splits the path: the left side selects, and the right side is a property of what was selected. On the right side of a `.|`, and only there, `!=` is true when the property is absent: `spec.containers.*.|image != 'nginx'` selects the containers and asks that none of their images be nginx, which a container with no image satisfies. Everywhere else a path that is not present is not a match, `!=` included. String literals are quoted with single quotes, such as `'string'`. Integer and boolean literals are also supported for attributes of those types. The whole string must be query-encoded. */
     whereData?: string;
+    /** Which engine answers where_data and resource_type: `sql` (the default) evaluates the expression against the stored resource projection in a single query, falling back to the function engine for the expressions it cannot translate; `function` invokes the where-filter function on each candidate Unit, reading every one's configuration; `shadow` runs both, answers with `function`, and logs any disagreement. Temporary: `function` is the escape hatch for one release, after which this parameter goes away. */
+    whereDataEngine?: string;
     /** Where expression to match Triggers. Matched triggers are invoked on each unit to filter by validation results. Use with triggers_passed to control whether passing or failing units are returned (default: failing). */
     whereTrigger?: string;
     /** Filter UUID (with From=Trigger). The filter's matching triggers are invoked on units to filter by validation results. Can be combined with where_trigger. */
@@ -4119,7 +4131,7 @@ type ListAllRevisionsApiArg = {
       An example conjunction is:
       `CreatedAt >= '2025-01-07' AND Slug = 'test' AND Labels.mykey = 'myvalue'`.
       
-      Supported attributes for filtering on Revision: ApplyGates, ApplyWarnings, ApprovedBy, ChangeOrders, ChangeSetID, Conflicts, CreatedAt, DataHash, Description, OrganizationID, Releases, RevisionID, RevisionNum, Source, SpaceID, Tags, UnitID, UpdatedAt, UserAgent, UserID.
+      Supported attributes for filtering on Revision: ApplyGates, ApplyWarnings, ApprovedBy, ChangeOrders, ChangeSetID, Conflicts, CreatedAt, DataHash, Description, NeededPaths, OrganizationID, ProvidedPaths, Releases, RevisionID, RevisionNum, Source, SpaceID, Tags, UnitID, UpdatedAt, UserAgent, UserID, ValidationErrors, ValidationPassed, ValidationWarnings, Values.
       
       To list tagged Revisions use `Tags ? '<tag-id>'`.
       
@@ -4178,7 +4190,7 @@ type ListAllRevisionsApiArg = {
       
       Field names are case-sensitive and PascalCase, as in the JSON encoding. Sort direction defaults to ASC when the 'DIRECTION:' prefix is omitted.
       
-      Supported attributes for ordering Revision: ApplyGates, ApplyWarnings, ApprovedBy, ChangeOrders, ChangeSetID, Conflicts, CreatedAt, DataHash, Description, OrganizationID, Releases, RevisionID, RevisionNum, Source, SpaceID, Tags, UnitID, UpdatedAt, UserAgent, UserID.
+      Supported attributes for ordering Revision: ApplyGates, ApplyWarnings, ApprovedBy, ChangeOrders, ChangeSetID, Conflicts, CreatedAt, DataHash, Description, NeededPaths, OrganizationID, ProvidedPaths, Releases, RevisionID, RevisionNum, Source, SpaceID, Tags, UnitID, UpdatedAt, UserAgent, UserID, ValidationErrors, ValidationPassed, ValidationWarnings, Values.
       
       Example: 'DESC:CreatedAt' or 'DisplayName,DESC:CreatedAt'.
       
@@ -4231,7 +4243,7 @@ type SearchRevisionDataApiArg = {
       An example conjunction is:
       `CreatedAt >= '2025-01-07' AND Slug = 'test' AND Labels.mykey = 'myvalue'`.
       
-      Supported attributes for filtering on Revision: ApplyGates, ApplyWarnings, ApprovedBy, ChangeOrders, ChangeSetID, Conflicts, CreatedAt, DataHash, Description, OrganizationID, Releases, RevisionID, RevisionNum, Source, SpaceID, Tags, UnitID, UpdatedAt, UserAgent, UserID.
+      Supported attributes for filtering on Revision: ApplyGates, ApplyWarnings, ApprovedBy, ChangeOrders, ChangeSetID, Conflicts, CreatedAt, DataHash, Description, NeededPaths, OrganizationID, ProvidedPaths, Releases, RevisionID, RevisionNum, Source, SpaceID, Tags, UnitID, UpdatedAt, UserAgent, UserID, ValidationErrors, ValidationPassed, ValidationWarnings, Values.
       
       To list tagged Revisions use `Tags ? '<tag-id>'`.
       
@@ -4290,7 +4302,7 @@ type SearchRevisionDataApiArg = {
       
       Field names are case-sensitive and PascalCase, as in the JSON encoding. Sort direction defaults to ASC when the 'DIRECTION:' prefix is omitted.
       
-      Supported attributes for ordering Revision: ApplyGates, ApplyWarnings, ApprovedBy, ChangeOrders, ChangeSetID, Conflicts, CreatedAt, DataHash, Description, OrganizationID, Releases, RevisionID, RevisionNum, Source, SpaceID, Tags, UnitID, UpdatedAt, UserAgent, UserID.
+      Supported attributes for ordering Revision: ApplyGates, ApplyWarnings, ApprovedBy, ChangeOrders, ChangeSetID, Conflicts, CreatedAt, DataHash, Description, NeededPaths, OrganizationID, ProvidedPaths, Releases, RevisionID, RevisionNum, Source, SpaceID, Tags, UnitID, UpdatedAt, UserAgent, UserID, ValidationErrors, ValidationPassed, ValidationWarnings, Values.
       
       Example: 'DESC:CreatedAt' or 'DisplayName,DESC:CreatedAt'.
       
@@ -4344,7 +4356,7 @@ type SearchRevisionMutationSourcesApiArg = {
       An example conjunction is:
       `CreatedAt >= '2025-01-07' AND Slug = 'test' AND Labels.mykey = 'myvalue'`.
       
-      Supported attributes for filtering on Revision: ApplyGates, ApplyWarnings, ApprovedBy, ChangeOrders, ChangeSetID, Conflicts, CreatedAt, DataHash, Description, OrganizationID, Releases, RevisionID, RevisionNum, Source, SpaceID, Tags, UnitID, UpdatedAt, UserAgent, UserID.
+      Supported attributes for filtering on Revision: ApplyGates, ApplyWarnings, ApprovedBy, ChangeOrders, ChangeSetID, Conflicts, CreatedAt, DataHash, Description, NeededPaths, OrganizationID, ProvidedPaths, Releases, RevisionID, RevisionNum, Source, SpaceID, Tags, UnitID, UpdatedAt, UserAgent, UserID, ValidationErrors, ValidationPassed, ValidationWarnings, Values.
       
       To list tagged Revisions use `Tags ? '<tag-id>'`.
       
@@ -4403,7 +4415,7 @@ type SearchRevisionMutationSourcesApiArg = {
       
       Field names are case-sensitive and PascalCase, as in the JSON encoding. Sort direction defaults to ASC when the 'DIRECTION:' prefix is omitted.
       
-      Supported attributes for ordering Revision: ApplyGates, ApplyWarnings, ApprovedBy, ChangeOrders, ChangeSetID, Conflicts, CreatedAt, DataHash, Description, OrganizationID, Releases, RevisionID, RevisionNum, Source, SpaceID, Tags, UnitID, UpdatedAt, UserAgent, UserID.
+      Supported attributes for ordering Revision: ApplyGates, ApplyWarnings, ApprovedBy, ChangeOrders, ChangeSetID, Conflicts, CreatedAt, DataHash, Description, NeededPaths, OrganizationID, ProvidedPaths, Releases, RevisionID, RevisionNum, Source, SpaceID, Tags, UnitID, UpdatedAt, UserAgent, UserID, ValidationErrors, ValidationPassed, ValidationWarnings, Values.
       
       Example: 'DESC:CreatedAt' or 'DisplayName,DESC:CreatedAt'.
       
@@ -5039,7 +5051,7 @@ type ListChangeOrdersApiArg = {
       An example conjunction is:
       `CreatedAt >= '2025-01-07' AND Slug = 'test' AND Labels.mykey = 'myvalue'`.
       
-      Supported attributes for filtering on ChangeOrder: AbortedReason, AdoptedEndTagID, Annotations, ChangeOrderID, CreatedAt, DeleteGates, Description, DisplayName, EndTagID, InScopeSpaceIDs, Labels, OrganizationID, ReleasedRestoredSpaceIDs, ReleasedSpaceIDs, ResolvedSpaceIDs, RestoreTagID, RestoredSpaceIDs, SkippedUnits, Slug, SpaceID, StartTagID, State, UpdateType, UpdatedAt.
+      Supported attributes for filtering on ChangeOrder: AbortedReason, AdoptedEndTagID, Annotations, ChangeOrderID, CreatedAt, DeleteGates, Description, DisplayName, EndTagID, InScopeSpaceIDs, InvocationID, Labels, OrganizationID, Parameters, ReleasedRestoredSpaceIDs, ReleasedSpaceIDs, ResolvedSpaceIDs, RestoreTagID, RestoredSpaceIDs, SkippedUnits, Slug, SpaceID, StartTagID, State, UnitFilterID, UpdateType, UpdatedAt, WhereUnit.
       
       The whole string must be query-encoded. */
     where?: string;
@@ -5075,7 +5087,7 @@ type ListChangeOrdersApiArg = {
       The attribute names are case-sensitive, PascalCase, and
       expected in a comma-separated list format as in the JSON encoding.
       
-      Supported attributes for ChangeOrder are EndTagID, OrganizationID, RestoreTagID, SpaceID, StartTagID.
+      Supported attributes for ChangeOrder are EndTagID, InvocationID, OrganizationID, RestoreTagID, SpaceID, StartTagID, UnitFilterID.
       
       The whole string must be query-encoded. */
     include?: string;
@@ -5115,7 +5127,7 @@ type GetChangeOrderApiArg = {
       The attribute names are case-sensitive, PascalCase, and
       expected in a comma-separated list format as in the JSON encoding.
       
-      Supported attributes for ChangeOrder are EndTagID, OrganizationID, RestoreTagID, SpaceID, StartTagID.
+      Supported attributes for ChangeOrder are EndTagID, InvocationID, OrganizationID, RestoreTagID, SpaceID, StartTagID, UnitFilterID.
       
       The whole string must be query-encoded. */
     include?: string;
@@ -5153,15 +5165,19 @@ type PatchChangeOrderApiArg = {
         DisplayName?: string | null;
         EndTagID?: string | null;
         InScopeSpaceIDs?: (string | null)[] | null;
+        InvocationID?: string | null;
         /** An optional map of Label key/value pairs to specify identifying attributes of entities for the purpose of grouping and filtering them. */
         Labels?: {
             [key: string]: string | null;
         } | null;
+        Parameters?: object | null;
         /** Unique URL-safe identifier for the entity. */
         Slug?: string | null;
+        UnitFilterID?: string | null;
         UpdateType?: string | null;
         /** An entity-specific sequence number used for optimistic concurrency control. The value read must be sent in calls to Update. */
         Version?: number | null;
+        WhereUnit?: string | null;
     };
 };
 type UpdateChangeOrderApiResponse = 
@@ -5586,6 +5602,8 @@ type InvokeFunctionsApiArg = {
     guards?: string;
     /** Must match ChangeSetID of affected Units unless in dry run mode; not valid when invoked on Revisions */
     changeSetId?: string;
+    /** ChangeOrder to promote, which must have UpdateType Invoke. What runs then comes from the ChangeOrder rather than from the request body, which may not carry functions, triggers or invocations of its own; that is what holds every Space in scope to the same change. Only the Units the ChangeOrder covers are reached, a Unit that has already taken it is passed over, and every Unit reached is marked with the ChangeOrder's start and end Tags -- both on the head, with no Revision made, where the invocation changed nothing. Not valid when invoked on Revisions. */
+    changeOrder?: string;
     /** User-defined category for the Mutation. Must be alphanumeric, at most 64 characters. The prefix 'ConfigHub' is reserved. */
     subgroup?: string;
     /** Source of additional configuration data to pass to functions that need it (e.g., vet-immutable). Supports named revision specifiers: LastReleasedRevisionNum, HeadRevisionNum. Can be prefixed with 'Before:' (e.g., Before:HeadRevisionNum). May be repeated for multiple sources. */
@@ -5624,7 +5642,7 @@ type InvokeFunctionsApiArg = {
       An example conjunction is:
       `CreatedAt >= '2025-01-07' AND Slug = 'test' AND Labels.mykey = 'myvalue'`.
       
-      Supported attributes for filtering on Unit: Annotations, ApplyGates, ApplyWarnings, ApprovedBy, BridgeWorkerID, ChangeSetID, Conflicts, CreatedAt, DataHash, DeleteGates, DestroyGates, DisplayName, FromLinkID, HeadRevisionNum, HeadUnitActionNum, HeadUnitEventNum, Labels, LastActionAt, LastChangeDescription, LastReleasedRevisionNum, NeededPaths, OrganizationID, ProvidedPaths, ProviderType, Slug, SpaceID, TargetID, TargetOptions, ToolchainType, UnitID, UpdatedAt, UpstreamRevisionNum, UpstreamSpaceID, UpstreamUnitID, Values.
+      Supported attributes for filtering on Unit: Annotations, ApplyGates, ApplyWarnings, ApprovedBy, BridgeWorkerID, ChangeSetID, Conflicts, CreatedAt, DataHash, DeleteGates, DestroyGates, DisplayName, FromLinkID, HeadRevisionID, HeadRevisionNum, HeadUnitActionNum, HeadUnitEventNum, Labels, LastActionAt, LastChangeDescription, LastReleasedRevisionNum, NeededPaths, OrganizationID, ProvidedPaths, ProviderType, Slug, SpaceID, TargetID, TargetOptions, ToolchainType, UnitID, UpdatedAt, UpstreamRevisionNum, UpstreamSpaceID, UpstreamUnitID, ValidationErrors, ValidationWarnings, Values.
       
       Finding all units created by cloning can be done using the expression `UpstreamRevisionNum > 0`. Clones of a specific unit can be found by additionally filtering based on `UpstreamUnitID`. Unapplied units can be found using `LastReleasedRevisionNum = 0`. Units with unapplied changes can be found with `HeadRevisionNum > LastReleasedRevisionNum`.
       
@@ -5646,8 +5664,10 @@ type InvokeFunctionsApiArg = {
     include?: string;
     /** Resource type: Resource type to match for the desired ToolchainType, for example apps/v1/Deployment */
     resourceType?: string;
-    /** Where data: The specified string is an expression for the purpose of evaluating whether the configuration data matches the filter. It supports conjunctions using `AND` of relational expressions of the form *path* *operator* *literal*. The path specifications are dot-separated, for both map fields and array indices, as in `spec.template.spec.containers.0.image = 'ghcr.io/headlamp-k8s/headlamp:latest' AND spec.replicas > 1`. Path expressions support `*` for wildcard array or map segments and `?key=value` syntax for associative matches of array elements containing objects with a `key` attribute. Strings support the following operators: `<`, `>`, `<=`, `>=`, `=`, `!=`, `LIKE`, `ILIKE`, `~~`, `!~~`, `~`, `!~`, `~*`, `!~*`, `IN`, `NOT IN`. String pattern operators: `LIKE` and `~~` for pattern matching with `%` and `_` wildcards, `ILIKE` for case-insensitive pattern matching, `!~~` for NOT LIKE. String regex operators: `~` for regex matching, `~*` for case-insensitive regex, `!~` and `!~*` for regex not matching (case-sensitive and insensitive). Integers support the following operators: `<`, `>`, `<=`, `>=`, `=`, `!=`, `IN`, `NOT IN`. Boolean values support equality and inequality only. The `IN` and `NOT IN` operators accept a comma-separated list of values in parentheses, such as `spec.template.spec.containers.0.image#reference IN (':latest', ':arm64-latest')`. The syntax `.|` requires the preceding path to exist; otherwise the relation `!=` will always return true regardless what it is compared with. String literals are quoted with single quotes, such as `'string'`. Integer and boolean literals are also supported for attributes of those types. The whole string must be query-encoded. */
+    /** Where data: The specified string is an expression for the purpose of evaluating whether the configuration data matches the filter. It supports conjunctions using `AND` of relational expressions of the form *path* *operator* *literal*. The path specifications are dot-separated, for both map fields and array indices, as in `spec.template.spec.containers.0.image = 'ghcr.io/headlamp-k8s/headlamp:latest' AND spec.replicas > 1`. Path expressions support `*` for wildcard array or map segments and `?key=value` syntax for associative matches of array elements containing objects with a `key` attribute. Strings support the following operators: `<`, `>`, `<=`, `>=`, `=`, `!=`, `LIKE`, `ILIKE`, `~~`, `!~~`, `~`, `!~`, `~*`, `!~*`, `IN`, `NOT IN`. String pattern operators: `LIKE` and `~~` for pattern matching with `%` and `_` wildcards, `ILIKE` for case-insensitive pattern matching, `!~~` for NOT LIKE. String regex operators: `~` for regex matching, `~*` for case-insensitive regex, `!~` and `!~*` for regex not matching (case-sensitive and insensitive). Integers support the following operators: `<`, `>`, `<=`, `>=`, `=`, `!=`, `IN`, `NOT IN`. Boolean values support equality and inequality only. The `IN` and `NOT IN` operators accept a comma-separated list of values in parentheses, such as `spec.template.spec.containers.0.image#reference IN (':latest', ':arm64-latest')`. The syntax `.|` splits the path: the left side selects, and the right side is a property of what was selected. On the right side of a `.|`, and only there, `!=` is true when the property is absent: `spec.containers.*.|image != 'nginx'` selects the containers and asks that none of their images be nginx, which a container with no image satisfies. Everywhere else a path that is not present is not a match, `!=` included. String literals are quoted with single quotes, such as `'string'`. Integer and boolean literals are also supported for attributes of those types. The whole string must be query-encoded. */
     whereData?: string;
+    /** Which engine answers where_data and resource_type: `sql` (the default) evaluates the expression against the stored resource projection in a single query, falling back to the function engine for the expressions it cannot translate; `function` invokes the where-filter function on each candidate Unit, reading every one's configuration; `shadow` runs both, answers with `function`, and logs any disagreement. Temporary: `function` is the escape hatch for one release, after which this parameter goes away. */
+    whereDataEngine?: string;
     /** Where expression to match Triggers. Matched triggers are invoked on each unit to filter by validation results. Use with triggers_passed to control whether passing or failing units are returned (default: failing). */
     whereTrigger?: string;
     /** Filter UUID (with From=Trigger). The filter's matching triggers are invoked on units to filter by validation results. Can be combined with where_trigger. */
@@ -6663,7 +6683,7 @@ to execute on events.
 
 Triggers can be either validating (checking configuration validity without modifying it)
 or mutating (making changes to the configuration). They can be disabled, and validating
-triggers can be set to Warn mode to produce non-blocking ApplyWarnings instead of ApplyGates. */ TriggerRead;
+triggers can be set to Warn mode to produce non-blocking ValidationWarnings instead of ValidationErrors. */ TriggerRead;
 type CreateTriggerApiArg = {
     /** Unique identifier for a space_id */
     spaceId: string;
@@ -6712,7 +6732,7 @@ to execute on events.
 
 Triggers can be either validating (checking configuration validity without modifying it)
 or mutating (making changes to the configuration). They can be disabled, and validating
-triggers can be set to Warn mode to produce non-blocking ApplyWarnings instead of ApplyGates. */ TriggerRead;
+triggers can be set to Warn mode to produce non-blocking ValidationWarnings instead of ValidationErrors. */ TriggerRead;
 type PatchTriggerApiArg = {
     /** Unique identifier for a space_id */
     spaceId: string;
@@ -6773,7 +6793,7 @@ to execute on events.
 
 Triggers can be either validating (checking configuration validity without modifying it)
 or mutating (making changes to the configuration). They can be disabled, and validating
-triggers can be set to Warn mode to produce non-blocking ApplyWarnings instead of ApplyGates. */ TriggerRead;
+triggers can be set to Warn mode to produce non-blocking ValidationWarnings instead of ValidationErrors. */ TriggerRead;
 type UpdateTriggerApiArg = {
     /** Unique identifier for a space_id */
     spaceId: string;
@@ -6819,7 +6839,7 @@ type ListUnitsApiArg = {
       An example conjunction is:
       `CreatedAt >= '2025-01-07' AND Slug = 'test' AND Labels.mykey = 'myvalue'`.
       
-      Supported attributes for filtering on Unit: Annotations, ApplyGates, ApplyWarnings, ApprovedBy, BridgeWorkerID, ChangeSetID, Conflicts, CreatedAt, DataHash, DeleteGates, DestroyGates, DisplayName, FromLinkID, HeadRevisionNum, HeadUnitActionNum, HeadUnitEventNum, Labels, LastActionAt, LastChangeDescription, LastReleasedRevisionNum, NeededPaths, OrganizationID, ProvidedPaths, ProviderType, Slug, SpaceID, TargetID, TargetOptions, ToolchainType, UnitID, UpdatedAt, UpstreamRevisionNum, UpstreamSpaceID, UpstreamUnitID, Values.
+      Supported attributes for filtering on Unit: Annotations, ApplyGates, ApplyWarnings, ApprovedBy, BridgeWorkerID, ChangeSetID, Conflicts, CreatedAt, DataHash, DeleteGates, DestroyGates, DisplayName, FromLinkID, HeadRevisionID, HeadRevisionNum, HeadUnitActionNum, HeadUnitEventNum, Labels, LastActionAt, LastChangeDescription, LastReleasedRevisionNum, NeededPaths, OrganizationID, ProvidedPaths, ProviderType, Slug, SpaceID, TargetID, TargetOptions, ToolchainType, UnitID, UpdatedAt, UpstreamRevisionNum, UpstreamSpaceID, UpstreamUnitID, ValidationErrors, ValidationWarnings, Values.
       
       Finding all units created by cloning can be done using the expression `UpstreamRevisionNum > 0`. Clones of a specific unit can be found by additionally filtering based on `UpstreamUnitID`. Unapplied units can be found using `LastReleasedRevisionNum = 0`. Units with unapplied changes can be found with `HeadRevisionNum > LastReleasedRevisionNum`.
       
@@ -6872,8 +6892,10 @@ type ListUnitsApiArg = {
     select?: string;
     /** Resource type: Resource type to match for the desired ToolchainType, for example apps/v1/Deployment */
     resourceType?: string;
-    /** Where data: The specified string is an expression for the purpose of evaluating whether the configuration data matches the filter. It supports conjunctions using `AND` of relational expressions of the form *path* *operator* *literal*. The path specifications are dot-separated, for both map fields and array indices, as in `spec.template.spec.containers.0.image = 'ghcr.io/headlamp-k8s/headlamp:latest' AND spec.replicas > 1`. Path expressions support `*` for wildcard array or map segments and `?key=value` syntax for associative matches of array elements containing objects with a `key` attribute. Strings support the following operators: `<`, `>`, `<=`, `>=`, `=`, `!=`, `LIKE`, `ILIKE`, `~~`, `!~~`, `~`, `!~`, `~*`, `!~*`, `IN`, `NOT IN`. String pattern operators: `LIKE` and `~~` for pattern matching with `%` and `_` wildcards, `ILIKE` for case-insensitive pattern matching, `!~~` for NOT LIKE. String regex operators: `~` for regex matching, `~*` for case-insensitive regex, `!~` and `!~*` for regex not matching (case-sensitive and insensitive). Integers support the following operators: `<`, `>`, `<=`, `>=`, `=`, `!=`, `IN`, `NOT IN`. Boolean values support equality and inequality only. The `IN` and `NOT IN` operators accept a comma-separated list of values in parentheses, such as `spec.template.spec.containers.0.image#reference IN (':latest', ':arm64-latest')`. The syntax `.|` requires the preceding path to exist; otherwise the relation `!=` will always return true regardless what it is compared with. String literals are quoted with single quotes, such as `'string'`. Integer and boolean literals are also supported for attributes of those types. The whole string must be query-encoded. */
+    /** Where data: The specified string is an expression for the purpose of evaluating whether the configuration data matches the filter. It supports conjunctions using `AND` of relational expressions of the form *path* *operator* *literal*. The path specifications are dot-separated, for both map fields and array indices, as in `spec.template.spec.containers.0.image = 'ghcr.io/headlamp-k8s/headlamp:latest' AND spec.replicas > 1`. Path expressions support `*` for wildcard array or map segments and `?key=value` syntax for associative matches of array elements containing objects with a `key` attribute. Strings support the following operators: `<`, `>`, `<=`, `>=`, `=`, `!=`, `LIKE`, `ILIKE`, `~~`, `!~~`, `~`, `!~`, `~*`, `!~*`, `IN`, `NOT IN`. String pattern operators: `LIKE` and `~~` for pattern matching with `%` and `_` wildcards, `ILIKE` for case-insensitive pattern matching, `!~~` for NOT LIKE. String regex operators: `~` for regex matching, `~*` for case-insensitive regex, `!~` and `!~*` for regex not matching (case-sensitive and insensitive). Integers support the following operators: `<`, `>`, `<=`, `>=`, `=`, `!=`, `IN`, `NOT IN`. Boolean values support equality and inequality only. The `IN` and `NOT IN` operators accept a comma-separated list of values in parentheses, such as `spec.template.spec.containers.0.image#reference IN (':latest', ':arm64-latest')`. The syntax `.|` splits the path: the left side selects, and the right side is a property of what was selected. On the right side of a `.|`, and only there, `!=` is true when the property is absent: `spec.containers.*.|image != 'nginx'` selects the containers and asks that none of their images be nginx, which a container with no image satisfies. Everywhere else a path that is not present is not a match, `!=` included. String literals are quoted with single quotes, such as `'string'`. Integer and boolean literals are also supported for attributes of those types. The whole string must be query-encoded. */
     whereData?: string;
+    /** Which engine answers where_data and resource_type: `sql` (the default) evaluates the expression against the stored resource projection in a single query, falling back to the function engine for the expressions it cannot translate; `function` invokes the where-filter function on each candidate Unit, reading every one's configuration; `shadow` runs both, answers with `function`, and logs any disagreement. Temporary: `function` is the escape hatch for one release, after which this parameter goes away. */
+    whereDataEngine?: string;
     /** Where expression to match Triggers. Matched triggers are invoked on each unit to filter by validation results. Use with triggers_passed to control whether passing or failing units are returned (default: failing). */
     whereTrigger?: string;
     /** Filter UUID (with From=Trigger). The filter's matching triggers are invoked on units to filter by validation results. Can be combined with where_trigger. */
@@ -7582,7 +7604,7 @@ type ListExtendedRevisionsApiArg = {
       An example conjunction is:
       `CreatedAt >= '2025-01-07' AND Slug = 'test' AND Labels.mykey = 'myvalue'`.
       
-      Supported attributes for filtering on Revision: ApplyGates, ApplyWarnings, ApprovedBy, ChangeOrders, ChangeSetID, Conflicts, CreatedAt, DataHash, Description, OrganizationID, Releases, RevisionID, RevisionNum, Source, SpaceID, Tags, UnitID, UpdatedAt, UserAgent, UserID.
+      Supported attributes for filtering on Revision: ApplyGates, ApplyWarnings, ApprovedBy, ChangeOrders, ChangeSetID, Conflicts, CreatedAt, DataHash, Description, NeededPaths, OrganizationID, ProvidedPaths, Releases, RevisionID, RevisionNum, Source, SpaceID, Tags, UnitID, UpdatedAt, UserAgent, UserID, ValidationErrors, ValidationPassed, ValidationWarnings, Values.
       
       To list a tagged Revision use `Tags ? '<tag-id>'`.
       
@@ -7641,7 +7663,7 @@ type ListExtendedRevisionsApiArg = {
       
       Field names are case-sensitive and PascalCase, as in the JSON encoding. Sort direction defaults to ASC when the 'DIRECTION:' prefix is omitted.
       
-      Supported attributes for ordering Revision: ApplyGates, ApplyWarnings, ApprovedBy, ChangeOrders, ChangeSetID, Conflicts, CreatedAt, DataHash, Description, OrganizationID, Releases, RevisionID, RevisionNum, Source, SpaceID, Tags, UnitID, UpdatedAt, UserAgent, UserID.
+      Supported attributes for ordering Revision: ApplyGates, ApplyWarnings, ApprovedBy, ChangeOrders, ChangeSetID, Conflicts, CreatedAt, DataHash, Description, NeededPaths, OrganizationID, ProvidedPaths, Releases, RevisionID, RevisionNum, Source, SpaceID, Tags, UnitID, UpdatedAt, UserAgent, UserID, ValidationErrors, ValidationPassed, ValidationWarnings, Values.
       
       Example: 'DESC:CreatedAt' or 'DisplayName,DESC:CreatedAt'.
       
@@ -7682,7 +7704,7 @@ type GetExtendedRevisionApiArg = {
       
       Field names are case-sensitive and PascalCase, as in the JSON encoding. Sort direction defaults to ASC when the 'DIRECTION:' prefix is omitted.
       
-      Supported attributes for ordering Revision: ApplyGates, ApplyWarnings, ApprovedBy, ChangeOrders, ChangeSetID, Conflicts, CreatedAt, DataHash, Description, OrganizationID, Releases, RevisionID, RevisionNum, Source, SpaceID, Tags, UnitID, UpdatedAt, UserAgent, UserID.
+      Supported attributes for ordering Revision: ApplyGates, ApplyWarnings, ApprovedBy, ChangeOrders, ChangeSetID, Conflicts, CreatedAt, DataHash, Description, NeededPaths, OrganizationID, ProvidedPaths, Releases, RevisionID, RevisionNum, Source, SpaceID, Tags, UnitID, UpdatedAt, UserAgent, UserID, ValidationErrors, ValidationPassed, ValidationWarnings, Values.
       
       Example: 'DESC:CreatedAt' or 'DisplayName,DESC:CreatedAt'.
       
@@ -9294,7 +9316,7 @@ type BulkDeleteUnitsApiArg = {
       An example conjunction is:
       `CreatedAt >= '2025-01-07' AND Slug = 'test' AND Labels.mykey = 'myvalue'`.
       
-      Supported attributes for filtering on Unit: Annotations, ApplyGates, ApplyWarnings, ApprovedBy, BridgeWorkerID, ChangeSetID, Conflicts, CreatedAt, DataHash, DeleteGates, DestroyGates, DisplayName, FromLinkID, HeadRevisionNum, HeadUnitActionNum, HeadUnitEventNum, Labels, LastActionAt, LastChangeDescription, LastReleasedRevisionNum, NeededPaths, OrganizationID, ProvidedPaths, ProviderType, Slug, SpaceID, TargetID, TargetOptions, ToolchainType, UnitID, UpdatedAt, UpstreamRevisionNum, UpstreamSpaceID, UpstreamUnitID, Values.
+      Supported attributes for filtering on Unit: Annotations, ApplyGates, ApplyWarnings, ApprovedBy, BridgeWorkerID, ChangeSetID, Conflicts, CreatedAt, DataHash, DeleteGates, DestroyGates, DisplayName, FromLinkID, HeadRevisionID, HeadRevisionNum, HeadUnitActionNum, HeadUnitEventNum, Labels, LastActionAt, LastChangeDescription, LastReleasedRevisionNum, NeededPaths, OrganizationID, ProvidedPaths, ProviderType, Slug, SpaceID, TargetID, TargetOptions, ToolchainType, UnitID, UpdatedAt, UpstreamRevisionNum, UpstreamSpaceID, UpstreamUnitID, ValidationErrors, ValidationWarnings, Values.
       
       Finding all units created by cloning can be done using the expression `UpstreamRevisionNum > 0`. Clones of a specific unit can be found by additionally filtering based on `UpstreamUnitID`. Unapplied units can be found using `LastReleasedRevisionNum = 0`. Units with unapplied changes can be found with `HeadRevisionNum > LastReleasedRevisionNum`.
       
@@ -9373,7 +9395,7 @@ type ListAllUnitsApiArg = {
       An example conjunction is:
       `CreatedAt >= '2025-01-07' AND Slug = 'test' AND Labels.mykey = 'myvalue'`.
       
-      Supported attributes for filtering on Unit: Annotations, ApplyGates, ApplyWarnings, ApprovedBy, BridgeWorkerID, ChangeSetID, Conflicts, CreatedAt, DataHash, DeleteGates, DestroyGates, DisplayName, FromLinkID, HeadRevisionNum, HeadUnitActionNum, HeadUnitEventNum, Labels, LastActionAt, LastChangeDescription, LastReleasedRevisionNum, NeededPaths, OrganizationID, ProvidedPaths, ProviderType, Slug, SpaceID, TargetID, TargetOptions, ToolchainType, UnitID, UpdatedAt, UpstreamRevisionNum, UpstreamSpaceID, UpstreamUnitID, Values.
+      Supported attributes for filtering on Unit: Annotations, ApplyGates, ApplyWarnings, ApprovedBy, BridgeWorkerID, ChangeSetID, Conflicts, CreatedAt, DataHash, DeleteGates, DestroyGates, DisplayName, FromLinkID, HeadRevisionID, HeadRevisionNum, HeadUnitActionNum, HeadUnitEventNum, Labels, LastActionAt, LastChangeDescription, LastReleasedRevisionNum, NeededPaths, OrganizationID, ProvidedPaths, ProviderType, Slug, SpaceID, TargetID, TargetOptions, ToolchainType, UnitID, UpdatedAt, UpstreamRevisionNum, UpstreamSpaceID, UpstreamUnitID, ValidationErrors, ValidationWarnings, Values.
       
       Finding all units created by cloning can be done using the expression `UpstreamRevisionNum > 0`. Clones of a specific unit can be found by additionally filtering based on `UpstreamUnitID`. Unapplied units can be found using `LastReleasedRevisionNum = 0`. Units with unapplied changes can be found with `HeadRevisionNum > LastReleasedRevisionNum`.
       
@@ -9426,8 +9448,10 @@ type ListAllUnitsApiArg = {
     select?: string;
     /** Resource type: Resource type to match for the desired ToolchainType, for example apps/v1/Deployment */
     resourceType?: string;
-    /** Where data: The specified string is an expression for the purpose of evaluating whether the configuration data matches the filter. It supports conjunctions using `AND` of relational expressions of the form *path* *operator* *literal*. The path specifications are dot-separated, for both map fields and array indices, as in `spec.template.spec.containers.0.image = 'ghcr.io/headlamp-k8s/headlamp:latest' AND spec.replicas > 1`. Path expressions support `*` for wildcard array or map segments and `?key=value` syntax for associative matches of array elements containing objects with a `key` attribute. Strings support the following operators: `<`, `>`, `<=`, `>=`, `=`, `!=`, `LIKE`, `ILIKE`, `~~`, `!~~`, `~`, `!~`, `~*`, `!~*`, `IN`, `NOT IN`. String pattern operators: `LIKE` and `~~` for pattern matching with `%` and `_` wildcards, `ILIKE` for case-insensitive pattern matching, `!~~` for NOT LIKE. String regex operators: `~` for regex matching, `~*` for case-insensitive regex, `!~` and `!~*` for regex not matching (case-sensitive and insensitive). Integers support the following operators: `<`, `>`, `<=`, `>=`, `=`, `!=`, `IN`, `NOT IN`. Boolean values support equality and inequality only. The `IN` and `NOT IN` operators accept a comma-separated list of values in parentheses, such as `spec.template.spec.containers.0.image#reference IN (':latest', ':arm64-latest')`. The syntax `.|` requires the preceding path to exist; otherwise the relation `!=` will always return true regardless what it is compared with. String literals are quoted with single quotes, such as `'string'`. Integer and boolean literals are also supported for attributes of those types. The whole string must be query-encoded. */
+    /** Where data: The specified string is an expression for the purpose of evaluating whether the configuration data matches the filter. It supports conjunctions using `AND` of relational expressions of the form *path* *operator* *literal*. The path specifications are dot-separated, for both map fields and array indices, as in `spec.template.spec.containers.0.image = 'ghcr.io/headlamp-k8s/headlamp:latest' AND spec.replicas > 1`. Path expressions support `*` for wildcard array or map segments and `?key=value` syntax for associative matches of array elements containing objects with a `key` attribute. Strings support the following operators: `<`, `>`, `<=`, `>=`, `=`, `!=`, `LIKE`, `ILIKE`, `~~`, `!~~`, `~`, `!~`, `~*`, `!~*`, `IN`, `NOT IN`. String pattern operators: `LIKE` and `~~` for pattern matching with `%` and `_` wildcards, `ILIKE` for case-insensitive pattern matching, `!~~` for NOT LIKE. String regex operators: `~` for regex matching, `~*` for case-insensitive regex, `!~` and `!~*` for regex not matching (case-sensitive and insensitive). Integers support the following operators: `<`, `>`, `<=`, `>=`, `=`, `!=`, `IN`, `NOT IN`. Boolean values support equality and inequality only. The `IN` and `NOT IN` operators accept a comma-separated list of values in parentheses, such as `spec.template.spec.containers.0.image#reference IN (':latest', ':arm64-latest')`. The syntax `.|` splits the path: the left side selects, and the right side is a property of what was selected. On the right side of a `.|`, and only there, `!=` is true when the property is absent: `spec.containers.*.|image != 'nginx'` selects the containers and asks that none of their images be nginx, which a container with no image satisfies. Everywhere else a path that is not present is not a match, `!=` included. String literals are quoted with single quotes, such as `'string'`. Integer and boolean literals are also supported for attributes of those types. The whole string must be query-encoded. */
     whereData?: string;
+    /** Which engine answers where_data and resource_type: `sql` (the default) evaluates the expression against the stored resource projection in a single query, falling back to the function engine for the expressions it cannot translate; `function` invokes the where-filter function on each candidate Unit, reading every one's configuration; `shadow` runs both, answers with `function`, and logs any disagreement. Temporary: `function` is the escape hatch for one release, after which this parameter goes away. */
+    whereDataEngine?: string;
     /** Where expression to match Triggers. Matched triggers are invoked on each unit to filter by validation results. Use with triggers_passed to control whether passing or failing units are returned (default: failing). */
     whereTrigger?: string;
     /** Filter UUID (with From=Trigger). The filter's matching triggers are invoked on units to filter by validation results. Can be combined with where_trigger. */
@@ -9473,7 +9497,7 @@ type BulkPatchUnitsApiArg = {
       An example conjunction is:
       `CreatedAt >= '2025-01-07' AND Slug = 'test' AND Labels.mykey = 'myvalue'`.
       
-      Supported attributes for filtering on Unit: Annotations, ApplyGates, ApplyWarnings, ApprovedBy, BridgeWorkerID, ChangeSetID, Conflicts, CreatedAt, DataHash, DeleteGates, DestroyGates, DisplayName, FromLinkID, HeadRevisionNum, HeadUnitActionNum, HeadUnitEventNum, Labels, LastActionAt, LastChangeDescription, LastReleasedRevisionNum, NeededPaths, OrganizationID, ProvidedPaths, ProviderType, Slug, SpaceID, TargetID, TargetOptions, ToolchainType, UnitID, UpdatedAt, UpstreamRevisionNum, UpstreamSpaceID, UpstreamUnitID, Values.
+      Supported attributes for filtering on Unit: Annotations, ApplyGates, ApplyWarnings, ApprovedBy, BridgeWorkerID, ChangeSetID, Conflicts, CreatedAt, DataHash, DeleteGates, DestroyGates, DisplayName, FromLinkID, HeadRevisionID, HeadRevisionNum, HeadUnitActionNum, HeadUnitEventNum, Labels, LastActionAt, LastChangeDescription, LastReleasedRevisionNum, NeededPaths, OrganizationID, ProvidedPaths, ProviderType, Slug, SpaceID, TargetID, TargetOptions, ToolchainType, UnitID, UpdatedAt, UpstreamRevisionNum, UpstreamSpaceID, UpstreamUnitID, ValidationErrors, ValidationWarnings, Values.
       
       Finding all units created by cloning can be done using the expression `UpstreamRevisionNum > 0`. Clones of a specific unit can be found by additionally filtering based on `UpstreamUnitID`. Unapplied units can be found using `LastReleasedRevisionNum = 0`. Units with unapplied changes can be found with `HeadRevisionNum > LastReleasedRevisionNum`.
       
@@ -9675,7 +9699,7 @@ type BulkCreateUnitsApiArg = {
       An example conjunction is:
       `CreatedAt >= '2025-01-07' AND Slug = 'test' AND Labels.mykey = 'myvalue'`.
       
-      Supported attributes for filtering on Unit: Annotations, ApplyGates, ApplyWarnings, ApprovedBy, BridgeWorkerID, ChangeSetID, Conflicts, CreatedAt, DataHash, DeleteGates, DestroyGates, DisplayName, FromLinkID, HeadRevisionNum, HeadUnitActionNum, HeadUnitEventNum, Labels, LastActionAt, LastChangeDescription, LastReleasedRevisionNum, NeededPaths, OrganizationID, ProvidedPaths, ProviderType, Slug, SpaceID, TargetID, TargetOptions, ToolchainType, UnitID, UpdatedAt, UpstreamRevisionNum, UpstreamSpaceID, UpstreamUnitID, Values.
+      Supported attributes for filtering on Unit: Annotations, ApplyGates, ApplyWarnings, ApprovedBy, BridgeWorkerID, ChangeSetID, Conflicts, CreatedAt, DataHash, DeleteGates, DestroyGates, DisplayName, FromLinkID, HeadRevisionID, HeadRevisionNum, HeadUnitActionNum, HeadUnitEventNum, Labels, LastActionAt, LastChangeDescription, LastReleasedRevisionNum, NeededPaths, OrganizationID, ProvidedPaths, ProviderType, Slug, SpaceID, TargetID, TargetOptions, ToolchainType, UnitID, UpdatedAt, UpstreamRevisionNum, UpstreamSpaceID, UpstreamUnitID, ValidationErrors, ValidationWarnings, Values.
       
       Finding all units created by cloning can be done using the expression `UpstreamRevisionNum > 0`. Clones of a specific unit can be found by additionally filtering based on `UpstreamUnitID`. Unapplied units can be found using `LastReleasedRevisionNum = 0`. Units with unapplied changes can be found with `HeadRevisionNum > LastReleasedRevisionNum`.
       
@@ -9895,7 +9919,7 @@ type BulkApproveUnitsApiArg = {
       An example conjunction is:
       `CreatedAt >= '2025-01-07' AND Slug = 'test' AND Labels.mykey = 'myvalue'`.
       
-      Supported attributes for filtering on Unit: Annotations, ApplyGates, ApplyWarnings, ApprovedBy, BridgeWorkerID, ChangeSetID, Conflicts, CreatedAt, DataHash, DeleteGates, DestroyGates, DisplayName, FromLinkID, HeadRevisionNum, HeadUnitActionNum, HeadUnitEventNum, Labels, LastActionAt, LastChangeDescription, LastReleasedRevisionNum, NeededPaths, OrganizationID, ProvidedPaths, ProviderType, Slug, SpaceID, TargetID, TargetOptions, ToolchainType, UnitID, UpdatedAt, UpstreamRevisionNum, UpstreamSpaceID, UpstreamUnitID, Values.
+      Supported attributes for filtering on Unit: Annotations, ApplyGates, ApplyWarnings, ApprovedBy, BridgeWorkerID, ChangeSetID, Conflicts, CreatedAt, DataHash, DeleteGates, DestroyGates, DisplayName, FromLinkID, HeadRevisionID, HeadRevisionNum, HeadUnitActionNum, HeadUnitEventNum, Labels, LastActionAt, LastChangeDescription, LastReleasedRevisionNum, NeededPaths, OrganizationID, ProvidedPaths, ProviderType, Slug, SpaceID, TargetID, TargetOptions, ToolchainType, UnitID, UpdatedAt, UpstreamRevisionNum, UpstreamSpaceID, UpstreamUnitID, ValidationErrors, ValidationWarnings, Values.
       
       Finding all units created by cloning can be done using the expression `UpstreamRevisionNum > 0`. Clones of a specific unit can be found by additionally filtering based on `UpstreamUnitID`. Unapplied units can be found using `LastReleasedRevisionNum = 0`. Units with unapplied changes can be found with `HeadRevisionNum > LastReleasedRevisionNum`.
       
@@ -9976,7 +10000,7 @@ type BulkCancelUnitsApiArg = {
       An example conjunction is:
       `CreatedAt >= '2025-01-07' AND Slug = 'test' AND Labels.mykey = 'myvalue'`.
       
-      Supported attributes for filtering on Unit: Annotations, ApplyGates, ApplyWarnings, ApprovedBy, BridgeWorkerID, ChangeSetID, Conflicts, CreatedAt, DataHash, DeleteGates, DestroyGates, DisplayName, FromLinkID, HeadRevisionNum, HeadUnitActionNum, HeadUnitEventNum, Labels, LastActionAt, LastChangeDescription, LastReleasedRevisionNum, NeededPaths, OrganizationID, ProvidedPaths, ProviderType, Slug, SpaceID, TargetID, TargetOptions, ToolchainType, UnitID, UpdatedAt, UpstreamRevisionNum, UpstreamSpaceID, UpstreamUnitID, Values.
+      Supported attributes for filtering on Unit: Annotations, ApplyGates, ApplyWarnings, ApprovedBy, BridgeWorkerID, ChangeSetID, Conflicts, CreatedAt, DataHash, DeleteGates, DestroyGates, DisplayName, FromLinkID, HeadRevisionID, HeadRevisionNum, HeadUnitActionNum, HeadUnitEventNum, Labels, LastActionAt, LastChangeDescription, LastReleasedRevisionNum, NeededPaths, OrganizationID, ProvidedPaths, ProviderType, Slug, SpaceID, TargetID, TargetOptions, ToolchainType, UnitID, UpdatedAt, UpstreamRevisionNum, UpstreamSpaceID, UpstreamUnitID, ValidationErrors, ValidationWarnings, Values.
       
       Finding all units created by cloning can be done using the expression `UpstreamRevisionNum > 0`. Clones of a specific unit can be found by additionally filtering based on `UpstreamUnitID`. Unapplied units can be found using `LastReleasedRevisionNum = 0`. Units with unapplied changes can be found with `HeadRevisionNum > LastReleasedRevisionNum`.
       
@@ -10055,7 +10079,7 @@ type BulkTagUnitsApiArg = {
       An example conjunction is:
       `CreatedAt >= '2025-01-07' AND Slug = 'test' AND Labels.mykey = 'myvalue'`.
       
-      Supported attributes for filtering on Unit: Annotations, ApplyGates, ApplyWarnings, ApprovedBy, BridgeWorkerID, ChangeSetID, Conflicts, CreatedAt, DataHash, DeleteGates, DestroyGates, DisplayName, FromLinkID, HeadRevisionNum, HeadUnitActionNum, HeadUnitEventNum, Labels, LastActionAt, LastChangeDescription, LastReleasedRevisionNum, NeededPaths, OrganizationID, ProvidedPaths, ProviderType, Slug, SpaceID, TargetID, TargetOptions, ToolchainType, UnitID, UpdatedAt, UpstreamRevisionNum, UpstreamSpaceID, UpstreamUnitID, Values.
+      Supported attributes for filtering on Unit: Annotations, ApplyGates, ApplyWarnings, ApprovedBy, BridgeWorkerID, ChangeSetID, Conflicts, CreatedAt, DataHash, DeleteGates, DestroyGates, DisplayName, FromLinkID, HeadRevisionID, HeadRevisionNum, HeadUnitActionNum, HeadUnitEventNum, Labels, LastActionAt, LastChangeDescription, LastReleasedRevisionNum, NeededPaths, OrganizationID, ProvidedPaths, ProviderType, Slug, SpaceID, TargetID, TargetOptions, ToolchainType, UnitID, UpdatedAt, UpstreamRevisionNum, UpstreamSpaceID, UpstreamUnitID, ValidationErrors, ValidationWarnings, Values.
       
       Finding all units created by cloning can be done using the expression `UpstreamRevisionNum > 0`. Clones of a specific unit can be found by additionally filtering based on `UpstreamUnitID`. Unapplied units can be found using `LastReleasedRevisionNum = 0`. Units with unapplied changes can be found with `HeadRevisionNum > LastReleasedRevisionNum`.
       
@@ -10204,7 +10228,7 @@ type SearchUnitDataApiArg = {
       An example conjunction is:
       `CreatedAt >= '2025-01-07' AND Slug = 'test' AND Labels.mykey = 'myvalue'`.
       
-      Supported attributes for filtering on Unit: Annotations, ApplyGates, ApplyWarnings, ApprovedBy, BridgeWorkerID, ChangeSetID, Conflicts, CreatedAt, DataHash, DeleteGates, DestroyGates, DisplayName, FromLinkID, HeadRevisionNum, HeadUnitActionNum, HeadUnitEventNum, Labels, LastActionAt, LastChangeDescription, LastReleasedRevisionNum, NeededPaths, OrganizationID, ProvidedPaths, ProviderType, Slug, SpaceID, TargetID, TargetOptions, ToolchainType, UnitID, UpdatedAt, UpstreamRevisionNum, UpstreamSpaceID, UpstreamUnitID, Values.
+      Supported attributes for filtering on Unit: Annotations, ApplyGates, ApplyWarnings, ApprovedBy, BridgeWorkerID, ChangeSetID, Conflicts, CreatedAt, DataHash, DeleteGates, DestroyGates, DisplayName, FromLinkID, HeadRevisionID, HeadRevisionNum, HeadUnitActionNum, HeadUnitEventNum, Labels, LastActionAt, LastChangeDescription, LastReleasedRevisionNum, NeededPaths, OrganizationID, ProvidedPaths, ProviderType, Slug, SpaceID, TargetID, TargetOptions, ToolchainType, UnitID, UpdatedAt, UpstreamRevisionNum, UpstreamSpaceID, UpstreamUnitID, ValidationErrors, ValidationWarnings, Values.
       
       Finding all units created by cloning can be done using the expression `UpstreamRevisionNum > 0`. Clones of a specific unit can be found by additionally filtering based on `UpstreamUnitID`. Unapplied units can be found using `LastReleasedRevisionNum = 0`. Units with unapplied changes can be found with `HeadRevisionNum > LastReleasedRevisionNum`.
       
@@ -10257,8 +10281,10 @@ type SearchUnitDataApiArg = {
     select?: string;
     /** Resource type: Resource type to match for the desired ToolchainType, for example apps/v1/Deployment */
     resourceType?: string;
-    /** Where data: The specified string is an expression for the purpose of evaluating whether the configuration data matches the filter. It supports conjunctions using `AND` of relational expressions of the form *path* *operator* *literal*. The path specifications are dot-separated, for both map fields and array indices, as in `spec.template.spec.containers.0.image = 'ghcr.io/headlamp-k8s/headlamp:latest' AND spec.replicas > 1`. Path expressions support `*` for wildcard array or map segments and `?key=value` syntax for associative matches of array elements containing objects with a `key` attribute. Strings support the following operators: `<`, `>`, `<=`, `>=`, `=`, `!=`, `LIKE`, `ILIKE`, `~~`, `!~~`, `~`, `!~`, `~*`, `!~*`, `IN`, `NOT IN`. String pattern operators: `LIKE` and `~~` for pattern matching with `%` and `_` wildcards, `ILIKE` for case-insensitive pattern matching, `!~~` for NOT LIKE. String regex operators: `~` for regex matching, `~*` for case-insensitive regex, `!~` and `!~*` for regex not matching (case-sensitive and insensitive). Integers support the following operators: `<`, `>`, `<=`, `>=`, `=`, `!=`, `IN`, `NOT IN`. Boolean values support equality and inequality only. The `IN` and `NOT IN` operators accept a comma-separated list of values in parentheses, such as `spec.template.spec.containers.0.image#reference IN (':latest', ':arm64-latest')`. The syntax `.|` requires the preceding path to exist; otherwise the relation `!=` will always return true regardless what it is compared with. String literals are quoted with single quotes, such as `'string'`. Integer and boolean literals are also supported for attributes of those types. The whole string must be query-encoded. */
+    /** Where data: The specified string is an expression for the purpose of evaluating whether the configuration data matches the filter. It supports conjunctions using `AND` of relational expressions of the form *path* *operator* *literal*. The path specifications are dot-separated, for both map fields and array indices, as in `spec.template.spec.containers.0.image = 'ghcr.io/headlamp-k8s/headlamp:latest' AND spec.replicas > 1`. Path expressions support `*` for wildcard array or map segments and `?key=value` syntax for associative matches of array elements containing objects with a `key` attribute. Strings support the following operators: `<`, `>`, `<=`, `>=`, `=`, `!=`, `LIKE`, `ILIKE`, `~~`, `!~~`, `~`, `!~`, `~*`, `!~*`, `IN`, `NOT IN`. String pattern operators: `LIKE` and `~~` for pattern matching with `%` and `_` wildcards, `ILIKE` for case-insensitive pattern matching, `!~~` for NOT LIKE. String regex operators: `~` for regex matching, `~*` for case-insensitive regex, `!~` and `!~*` for regex not matching (case-sensitive and insensitive). Integers support the following operators: `<`, `>`, `<=`, `>=`, `=`, `!=`, `IN`, `NOT IN`. Boolean values support equality and inequality only. The `IN` and `NOT IN` operators accept a comma-separated list of values in parentheses, such as `spec.template.spec.containers.0.image#reference IN (':latest', ':arm64-latest')`. The syntax `.|` splits the path: the left side selects, and the right side is a property of what was selected. On the right side of a `.|`, and only there, `!=` is true when the property is absent: `spec.containers.*.|image != 'nginx'` selects the containers and asks that none of their images be nginx, which a container with no image satisfies. Everywhere else a path that is not present is not a match, `!=` included. String literals are quoted with single quotes, such as `'string'`. Integer and boolean literals are also supported for attributes of those types. The whole string must be query-encoded. */
     whereData?: string;
+    /** Which engine answers where_data and resource_type: `sql` (the default) evaluates the expression against the stored resource projection in a single query, falling back to the function engine for the expressions it cannot translate; `function` invokes the where-filter function on each candidate Unit, reading every one's configuration; `shadow` runs both, answers with `function`, and logs any disagreement. Temporary: `function` is the escape hatch for one release, after which this parameter goes away. */
+    whereDataEngine?: string;
     /** Where expression to match Triggers. Matched triggers are invoked on each unit to filter by validation results. Use with triggers_passed to control whether passing or failing units are returned (default: failing). */
     whereTrigger?: string;
     /** Filter UUID (with From=Trigger). The filter's matching triggers are invoked on units to filter by validation results. Can be combined with where_trigger. */
@@ -10398,7 +10424,7 @@ type SearchUnitMutationSourcesApiArg = {
       An example conjunction is:
       `CreatedAt >= '2025-01-07' AND Slug = 'test' AND Labels.mykey = 'myvalue'`.
       
-      Supported attributes for filtering on Unit: Annotations, ApplyGates, ApplyWarnings, ApprovedBy, BridgeWorkerID, ChangeSetID, Conflicts, CreatedAt, DataHash, DeleteGates, DestroyGates, DisplayName, FromLinkID, HeadRevisionNum, HeadUnitActionNum, HeadUnitEventNum, Labels, LastActionAt, LastChangeDescription, LastReleasedRevisionNum, NeededPaths, OrganizationID, ProvidedPaths, ProviderType, Slug, SpaceID, TargetID, TargetOptions, ToolchainType, UnitID, UpdatedAt, UpstreamRevisionNum, UpstreamSpaceID, UpstreamUnitID, Values.
+      Supported attributes for filtering on Unit: Annotations, ApplyGates, ApplyWarnings, ApprovedBy, BridgeWorkerID, ChangeSetID, Conflicts, CreatedAt, DataHash, DeleteGates, DestroyGates, DisplayName, FromLinkID, HeadRevisionID, HeadRevisionNum, HeadUnitActionNum, HeadUnitEventNum, Labels, LastActionAt, LastChangeDescription, LastReleasedRevisionNum, NeededPaths, OrganizationID, ProvidedPaths, ProviderType, Slug, SpaceID, TargetID, TargetOptions, ToolchainType, UnitID, UpdatedAt, UpstreamRevisionNum, UpstreamSpaceID, UpstreamUnitID, ValidationErrors, ValidationWarnings, Values.
       
       Finding all units created by cloning can be done using the expression `UpstreamRevisionNum > 0`. Clones of a specific unit can be found by additionally filtering based on `UpstreamUnitID`. Unapplied units can be found using `LastReleasedRevisionNum = 0`. Units with unapplied changes can be found with `HeadRevisionNum > LastReleasedRevisionNum`.
       
@@ -10451,8 +10477,10 @@ type SearchUnitMutationSourcesApiArg = {
     select?: string;
     /** Resource type: Resource type to match for the desired ToolchainType, for example apps/v1/Deployment */
     resourceType?: string;
-    /** Where data: The specified string is an expression for the purpose of evaluating whether the configuration data matches the filter. It supports conjunctions using `AND` of relational expressions of the form *path* *operator* *literal*. The path specifications are dot-separated, for both map fields and array indices, as in `spec.template.spec.containers.0.image = 'ghcr.io/headlamp-k8s/headlamp:latest' AND spec.replicas > 1`. Path expressions support `*` for wildcard array or map segments and `?key=value` syntax for associative matches of array elements containing objects with a `key` attribute. Strings support the following operators: `<`, `>`, `<=`, `>=`, `=`, `!=`, `LIKE`, `ILIKE`, `~~`, `!~~`, `~`, `!~`, `~*`, `!~*`, `IN`, `NOT IN`. String pattern operators: `LIKE` and `~~` for pattern matching with `%` and `_` wildcards, `ILIKE` for case-insensitive pattern matching, `!~~` for NOT LIKE. String regex operators: `~` for regex matching, `~*` for case-insensitive regex, `!~` and `!~*` for regex not matching (case-sensitive and insensitive). Integers support the following operators: `<`, `>`, `<=`, `>=`, `=`, `!=`, `IN`, `NOT IN`. Boolean values support equality and inequality only. The `IN` and `NOT IN` operators accept a comma-separated list of values in parentheses, such as `spec.template.spec.containers.0.image#reference IN (':latest', ':arm64-latest')`. The syntax `.|` requires the preceding path to exist; otherwise the relation `!=` will always return true regardless what it is compared with. String literals are quoted with single quotes, such as `'string'`. Integer and boolean literals are also supported for attributes of those types. The whole string must be query-encoded. */
+    /** Where data: The specified string is an expression for the purpose of evaluating whether the configuration data matches the filter. It supports conjunctions using `AND` of relational expressions of the form *path* *operator* *literal*. The path specifications are dot-separated, for both map fields and array indices, as in `spec.template.spec.containers.0.image = 'ghcr.io/headlamp-k8s/headlamp:latest' AND spec.replicas > 1`. Path expressions support `*` for wildcard array or map segments and `?key=value` syntax for associative matches of array elements containing objects with a `key` attribute. Strings support the following operators: `<`, `>`, `<=`, `>=`, `=`, `!=`, `LIKE`, `ILIKE`, `~~`, `!~~`, `~`, `!~`, `~*`, `!~*`, `IN`, `NOT IN`. String pattern operators: `LIKE` and `~~` for pattern matching with `%` and `_` wildcards, `ILIKE` for case-insensitive pattern matching, `!~~` for NOT LIKE. String regex operators: `~` for regex matching, `~*` for case-insensitive regex, `!~` and `!~*` for regex not matching (case-sensitive and insensitive). Integers support the following operators: `<`, `>`, `<=`, `>=`, `=`, `!=`, `IN`, `NOT IN`. Boolean values support equality and inequality only. The `IN` and `NOT IN` operators accept a comma-separated list of values in parentheses, such as `spec.template.spec.containers.0.image#reference IN (':latest', ':arm64-latest')`. The syntax `.|` splits the path: the left side selects, and the right side is a property of what was selected. On the right side of a `.|`, and only there, `!=` is true when the property is absent: `spec.containers.*.|image != 'nginx'` selects the containers and asks that none of their images be nginx, which a container with no image satisfies. Everywhere else a path that is not present is not a match, `!=` included. String literals are quoted with single quotes, such as `'string'`. Integer and boolean literals are also supported for attributes of those types. The whole string must be query-encoded. */
     whereData?: string;
+    /** Which engine answers where_data and resource_type: `sql` (the default) evaluates the expression against the stored resource projection in a single query, falling back to the function engine for the expressions it cannot translate; `function` invokes the where-filter function on each candidate Unit, reading every one's configuration; `shadow` runs both, answers with `function`, and logs any disagreement. Temporary: `function` is the escape hatch for one release, after which this parameter goes away. */
+    whereDataEngine?: string;
     /** Where expression to match Triggers. Matched triggers are invoked on each unit to filter by validation results. Use with triggers_passed to control whether passing or failing units are returned (default: failing). */
     whereTrigger?: string;
     /** Filter UUID (with From=Trigger). The filter's matching triggers are invoked on units to filter by validation results. Can be combined with where_trigger. */
@@ -11846,22 +11874,32 @@ type ChangeOrder = {
     DisplayName?: string;
     /** EndTagID is the identifier of the set of Revisions that end the ChangeOrder. The ChangeOrder always mints this Tag itself; supplying one at creation adopts its marks as the boundary, and the supplied Tag is recorded as AdoptedEndTagID and never written to. Without one the boundary is each Unit's head Revision. */
     EndTagID?: string;
-    /** InScopeSpaceIDs is where the ChangeOrder is headed: the Spaces it propagates into, supplied by the client rather than derived from a query. Empty names a change without saying where it is headed, in which case the Spaces the ChangeOrder's Links reach when its scope is derived are recorded instead. ResolvedSpaceIDs and ReleasedSpaceIDs are measured against it. Editing it re-derives what the ChangeOrder covers. */
+    /** InScopeSpaceIDs is where the ChangeOrder is headed: the Spaces it propagates into, supplied by the client rather than derived from a query. Empty names a change without saying where it is headed, in which case the Spaces the ChangeOrder's Links reach when its scope is derived are recorded instead; an Invoke ChangeOrder has no Links to fall back on and requires a non-empty list. ResolvedSpaceIDs and ReleasedSpaceIDs are measured against it. Editing it re-derives what the ChangeOrder covers. */
     InScopeSpaceIDs?: Uuid[];
+    /** InvocationID is the Invocation an Invoke ChangeOrder runs. Required for that UpdateType and refused for the others. Naming it here is what makes every Space in scope receive the same update: the invoke API takes what it runs from the ChangeOrder. Immutable. */
+    InvocationID?: string;
     /** An optional map of Label key/value pairs to specify identifying attributes of entities for the purpose of grouping and filtering them. */
     Labels?: {
         [key: string]: string;
     };
     /** Unique identifier for an organization. */
     OrganizationID?: string;
+    /** Parameters supplies values for the declared Parameters of a parameterized Invocation, keyed by parameter name, validated against the declaration the way ParameterizedInvocations are on a direct call. One set for the whole ChangeOrder, not one per Space. Immutable. */
+    Parameters?: {
+        [key: string]: any;
+    };
     /** Unique URL-safe identifier for the entity. */
     Slug: string;
     /** Unique identifier for a space. */
     SpaceID?: string;
-    /** UpdateType is the Link UpdateType this ChangeOrder follows when propagating. UpgradeUnit, the clone lineage, is the default; MergeUnits is the other supported value. */
+    /** UnitFilterID references a Filter (with From=Unit) narrowing the same selection as WhereUnit, conjoined with it. Refused on the other UpdateTypes. Immutable. */
+    UnitFilterID?: string;
+    /** UpdateType is how this ChangeOrder propagates. UpgradeUnit, the clone lineage, is the default, and MergeUnits is the other Link type it follows; both take the change from Revisions the source Unit already has. Invoke is the third: the change is one Invocation run in each Space in scope, and the ChangeOrder is created before any of it has happened. */
     UpdateType?: string;
     /** An entity-specific sequence number used for optimistic concurrency control. The value read must be sent in calls to Update. */
     Version?: number;
+    /** WhereUnit narrows which Units of each Space in scope an Invoke ChangeOrder covers, and is refused on the other UpdateTypes. Empty covers every Unit. Unlike InScopeSpaceIDs it is asked again on every read, so a Unit added to a Space afterwards counts against that Space. Immutable. */
+    WhereUnit?: string;
 };
 type ChangeOrderRead = {
     /** AbortedReason says why the ChangeOrder was given up on. Setting it is what aborts one: a ChangeOrder with a reason is Aborted whatever its Links say. */
@@ -11890,19 +11928,25 @@ type ChangeOrderRead = {
     EndTagID?: string;
     /** The type of entity. */
     EntityType?: string;
-    /** InScopeSpaceIDs is where the ChangeOrder is headed: the Spaces it propagates into, supplied by the client rather than derived from a query. Empty names a change without saying where it is headed, in which case the Spaces the ChangeOrder's Links reach when its scope is derived are recorded instead. ResolvedSpaceIDs and ReleasedSpaceIDs are measured against it. Editing it re-derives what the ChangeOrder covers. */
+    /** InScopeSpaceIDs is where the ChangeOrder is headed: the Spaces it propagates into, supplied by the client rather than derived from a query. Empty names a change without saying where it is headed, in which case the Spaces the ChangeOrder's Links reach when its scope is derived are recorded instead; an Invoke ChangeOrder has no Links to fall back on and requires a non-empty list. ResolvedSpaceIDs and ReleasedSpaceIDs are measured against it. Editing it re-derives what the ChangeOrder covers. */
     InScopeSpaceIDs?: Uuid[];
+    /** InvocationID is the Invocation an Invoke ChangeOrder runs. Required for that UpdateType and refused for the others. Naming it here is what makes every Space in scope receive the same update: the invoke API takes what it runs from the ChangeOrder. Immutable. */
+    InvocationID?: string;
     /** An optional map of Label key/value pairs to specify identifying attributes of entities for the purpose of grouping and filtering them. */
     Labels?: {
         [key: string]: string;
     };
     /** Unique identifier for an organization. */
     OrganizationID?: string;
+    /** Parameters supplies values for the declared Parameters of a parameterized Invocation, keyed by parameter name, validated against the declaration the way ParameterizedInvocations are on a direct call. One set for the whole ChangeOrder, not one per Space. Immutable. */
+    Parameters?: {
+        [key: string]: any;
+    };
     /** ReleasedRestoredSpaceIDs is where the undoing has been released: the Spaces in RestoredSpaceIDs whose Units are released at or past the Revision the restore Tag marks. Covering ReleasedSpaceIDs is what State reports as RestoreReleased. Derived when the ChangeOrder is read. */
     ReleasedRestoredSpaceIDs?: Uuid[];
     /** ReleasedSpaceIDs is where the ChangeOrder has been released: the Spaces in scope whose Units in the Space's release are applied at or past the Revision the end Tag marks. Derived when the ChangeOrder is read. */
     ReleasedSpaceIDs?: Uuid[];
-    /** ResolvedSpaceIDs is where the ChangeOrder has been fully propagated to: the Spaces in scope whose Links of its UpdateType have all merged it, plus the Space it resides in. Derived when the ChangeOrder is read. */
+    /** ResolvedSpaceIDs is where the ChangeOrder has been fully propagated to: the Spaces in scope whose Links of its UpdateType have all merged it, plus the Space it resides in. For an Invoke ChangeOrder it is the Spaces in scope where every Unit WhereUnit selects carries the end Tag, and its own Space counts only if it is one of them. Derived when the ChangeOrder is read. */
     ResolvedSpaceIDs?: Uuid[];
     /** RestoreTagID is the Tag marking the Revisions that undid the ChangeOrder. The first restore mints it; every restore after that marks with the same Tag. Empty until something has been restored. */
     RestoreTagID?: string;
@@ -11922,12 +11966,16 @@ type ChangeOrderRead = {
     StartTagID?: string;
     /** State is how far the ChangeOrder has got: New until a Space other than its own has taken it, InProgress while some have and some have not, Resolved once every Space in scope has, Released once every Space in scope has released what it took, Aborted whenever AbortedReason is set, Restored once every Space that had taken it has been restored to the Revisions before it, and RestoreReleased once every Space that had released it has released the restored Revisions. Derived when the ChangeOrder is read. */
     State?: string;
-    /** UpdateType is the Link UpdateType this ChangeOrder follows when propagating. UpgradeUnit, the clone lineage, is the default; MergeUnits is the other supported value. */
+    /** UnitFilterID references a Filter (with From=Unit) narrowing the same selection as WhereUnit, conjoined with it. Refused on the other UpdateTypes. Immutable. */
+    UnitFilterID?: string;
+    /** UpdateType is how this ChangeOrder propagates. UpgradeUnit, the clone lineage, is the default, and MergeUnits is the other Link type it follows; both take the change from Revisions the source Unit already has. Invoke is the third: the change is one Invocation run in each Space in scope, and the ChangeOrder is created before any of it has happened. */
     UpdateType?: string;
     /** The timestamp when the entity was last updated in "2023-01-01T12:00:00Z" format. */
     UpdatedAt?: string;
     /** An entity-specific sequence number used for optimistic concurrency control. The value read must be sent in calls to Update. */
     Version?: number;
+    /** WhereUnit narrows which Units of each Space in scope an Invoke ChangeOrder covers, and is refused on the other UpdateTypes. Empty covers every Unit. Unlike InScopeSpaceIDs it is asked again on every read, so a Unit added to a Space afterwards counts against that Space. Immutable. */
+    WhereUnit?: string;
 };
 type Tag = {
     /** An optional map of Annotation key/value pairs for tools to attach information to entities. */
@@ -11995,67 +12043,78 @@ type TagRead = {
     /** An entity-specific sequence number used for optimistic concurrency control. The value read must be sent in calls to Update. */
     Version?: number;
 };
-type ExtendedChangeOrder = {
-    ChangeOrder?: ChangeOrder;
-    EndTag?: Tag;
-    Error?: ResponseError;
-    Organization?: Organization;
-    RestoreTag?: Tag;
-    Space?: Space;
-    StartTag?: Tag;
+type FunctionArgument = {
+    Evaluator?: string;
+    ParameterName?: string;
+    Value?: string | number | boolean;
 };
-type ExtendedChangeOrderRead = {
-    ChangeOrder?: ChangeOrderRead;
-    EndTag?: TagRead;
-    Error?: ResponseError;
-    Organization?: OrganizationRead;
-    RestoreTag?: TagRead;
-    Space?: SpaceRead;
-    StartTag?: TagRead;
+type ClearanceRequirement = {
+    /** The guard key this requirement is about */
+    Key?: string;
+    /** Exists, In, NotIn, or DoesNotExist */
+    Operator?: string;
+    /** The values In and NotIn compare against; unused by Exists and DoesNotExist */
+    Values?: string[];
 };
-type ChangeOrderCreateOrUpdateResponse = {
-    ChangeOrder?: ChangeOrder;
-    Error?: ResponseError;
+type Clearance = ClearanceRequirement[];
+type GuardStamp = {
+    [key: string]: string;
 };
-type ChangeOrderCreateOrUpdateResponseRead = {
-    ChangeOrder?: ChangeOrderRead;
-    Error?: ResponseError;
+type FunctionInvocation = {
+    /** Function arguments */
+    Arguments?: FunctionArgument[] | null;
+    Clearance?: Clearance;
+    /** Function name */
+    FunctionName?: string;
+    Guards?: GuardStamp;
+    /** Caller-supplied parameter values for expanding templated argument Values; transient, not persisted */
+    Params?: {
+        [key: string]: any;
+    };
+    /** Per-invocation resource filter. AND-combined with the request-level WhereResource. Same path syntax as the request-level field (see ParseAndValidateWhereResource). */
+    WhereResource?: string;
 };
-type ChangeSet = {
+type FunctionInvocationList = FunctionInvocation[] | null;
+type Invocation = {
     /** An optional map of Annotation key/value pairs for tools to attach information to entities. */
     Annotations?: {
         [key: string]: string;
     };
-    /** ChangeSetID uniquely identifies a changeset within the system. */
-    ChangeSetID?: string;
+    /** Unique identifier for a Bridge Worker to execute the functions specified by the Invocation. If unspecified, use the builtin function executor. */
+    BridgeWorkerID?: string;
     /** An optional set of gates that, if any is present, will block deletion. */
     DeleteGates?: {
         [key: string]: boolean;
     };
-    /** Description is a human-readable description of the change. */
-    Description?: string;
     /** Friendly name for the entity. */
     DisplayName?: string;
+    FunctionInvocations: FunctionInvocationList;
+    /** InvocationID uniquely identifies a invocation within the system. */
+    InvocationID?: string;
     /** An optional map of Label key/value pairs to specify identifying attributes of entities for the purpose of grouping and filtering them. */
     Labels?: {
         [key: string]: string;
     };
     /** Unique identifier for an organization. */
     OrganizationID?: string;
+    Parameters?: FunctionParameter[];
     /** Unique URL-safe identifier for the entity. */
     Slug: string;
     /** Unique identifier for a space. */
     SpaceID?: string;
+    /** ToolchainType specifies the type of toolchain this invocation works with.
+              This determines which configuration formats the invocation can process. */
+    ToolchainType: string;
     /** An entity-specific sequence number used for optimistic concurrency control. The value read must be sent in calls to Update. */
     Version?: number;
 };
-type ChangeSetRead = {
+type InvocationRead = {
     /** An optional map of Annotation key/value pairs for tools to attach information to entities. */
     Annotations?: {
         [key: string]: string;
     };
-    /** ChangeSetID uniquely identifies a changeset within the system. */
-    ChangeSetID?: string;
+    /** Unique identifier for a Bridge Worker to execute the functions specified by the Invocation. If unspecified, use the builtin function executor. */
+    BridgeWorkerID?: string;
     /** The timestamp when the entity was created in "2023-01-01T12:00:00Z" format. */
     CreatedAt?: string;
     /** An auto-incrementing sequence number used for pagination. */
@@ -12064,61 +12123,36 @@ type ChangeSetRead = {
     DeleteGates?: {
         [key: string]: boolean;
     };
-    /** Description is a human-readable description of the change. */
-    Description?: string;
     /** Friendly name for the entity. */
     DisplayName?: string;
-    /** EndTagID is the identifier of the set of revisions that end the ChangeSet. */
-    EndTagID?: string;
     /** The type of entity. */
     EntityType?: string;
+    FunctionInvocations: FunctionInvocationList;
+    /** SHA256 hash of the functions and their arguments encoded as hexadecimal. */
+    Hash?: string;
+    /** InvocationID uniquely identifies a invocation within the system. */
+    InvocationID?: string;
     /** An optional map of Label key/value pairs to specify identifying attributes of entities for the purpose of grouping and filtering them. */
     Labels?: {
         [key: string]: string;
     };
     /** Unique identifier for an organization. */
     OrganizationID?: string;
+    Parameters?: FunctionParameter[];
     /** Unique URL-safe identifier for the entity. */
     Slug: string;
     /** Unique identifier for a space. */
     SpaceID?: string;
     /** Slug of the Space this entity belongs to. (readonly) */
     SpaceSlug?: string;
-    /** StartTagID is the identifier of the set of revisions that begin the ChangeSet. */
-    StartTagID?: string;
-    /** StartTagIsPriorRevision reports whether the start Tag marks the Revision before the ChangeSet, making the ChangeSet the half-open interval (start, end]. False, the original meaning, means it marks the ChangeSet's first Revision. */
-    StartTagIsPriorRevision?: boolean;
-    /** State represents the current state of the ChangeSet. */
-    State?: string;
+    /** ToolchainType specifies the type of toolchain this invocation works with.
+              This determines which configuration formats the invocation can process. */
+    ToolchainType: string;
     /** The timestamp when the entity was last updated in "2023-01-01T12:00:00Z" format. */
     UpdatedAt?: string;
     /** An entity-specific sequence number used for optimistic concurrency control. The value read must be sent in calls to Update. */
     Version?: number;
 };
-type ExtendedChangeSet = {
-    ChangeSet?: ChangeSet;
-    EndTag?: Tag;
-    Error?: ResponseError;
-    Organization?: Organization;
-    Space?: Space;
-    StartTag?: Tag;
-};
-type ExtendedChangeSetRead = {
-    ChangeSet?: ChangeSetRead;
-    EndTag?: TagRead;
-    Error?: ResponseError;
-    Organization?: OrganizationRead;
-    Space?: SpaceRead;
-    StartTag?: TagRead;
-};
-type ChangeSetCreateOrUpdateResponse = {
-    ChangeSet?: ChangeSet;
-    Error?: ResponseError;
-};
-type ChangeSetCreateOrUpdateResponseRead = {
-    ChangeSet?: ChangeSetRead;
-    Error?: ResponseError;
-};
 type Filter = {
     /** An optional map of Annotation key/value pairs for tools to attach information to entities. */
     Annotations?: {
@@ -12203,6 +12237,134 @@ type FilterRead = {
     /** WhereData specifies a filter expression for configuration data. Valid only for Units. (optional) */
     WhereData?: string;
 };
+type ExtendedChangeOrder = {
+    ChangeOrder?: ChangeOrder;
+    EndTag?: Tag;
+    Error?: ResponseError;
+    Invocation?: Invocation;
+    Organization?: Organization;
+    RestoreTag?: Tag;
+    Space?: Space;
+    StartTag?: Tag;
+    UnitFilter?: Filter;
+};
+type ExtendedChangeOrderRead = {
+    ChangeOrder?: ChangeOrderRead;
+    EndTag?: TagRead;
+    Error?: ResponseError;
+    Invocation?: InvocationRead;
+    Organization?: OrganizationRead;
+    RestoreTag?: TagRead;
+    Space?: SpaceRead;
+    StartTag?: TagRead;
+    UnitFilter?: FilterRead;
+};
+type ChangeOrderCreateOrUpdateResponse = {
+    ChangeOrder?: ChangeOrder;
+    Error?: ResponseError;
+};
+type ChangeOrderCreateOrUpdateResponseRead = {
+    ChangeOrder?: ChangeOrderRead;
+    Error?: ResponseError;
+};
+type ChangeSet = {
+    /** An optional map of Annotation key/value pairs for tools to attach information to entities. */
+    Annotations?: {
+        [key: string]: string;
+    };
+    /** ChangeSetID uniquely identifies a changeset within the system. */
+    ChangeSetID?: string;
+    /** An optional set of gates that, if any is present, will block deletion. */
+    DeleteGates?: {
+        [key: string]: boolean;
+    };
+    /** Description is a human-readable description of the change. */
+    Description?: string;
+    /** Friendly name for the entity. */
+    DisplayName?: string;
+    /** An optional map of Label key/value pairs to specify identifying attributes of entities for the purpose of grouping and filtering them. */
+    Labels?: {
+        [key: string]: string;
+    };
+    /** Unique identifier for an organization. */
+    OrganizationID?: string;
+    /** Unique URL-safe identifier for the entity. */
+    Slug: string;
+    /** Unique identifier for a space. */
+    SpaceID?: string;
+    /** An entity-specific sequence number used for optimistic concurrency control. The value read must be sent in calls to Update. */
+    Version?: number;
+};
+type ChangeSetRead = {
+    /** An optional map of Annotation key/value pairs for tools to attach information to entities. */
+    Annotations?: {
+        [key: string]: string;
+    };
+    /** ChangeSetID uniquely identifies a changeset within the system. */
+    ChangeSetID?: string;
+    /** The timestamp when the entity was created in "2023-01-01T12:00:00Z" format. */
+    CreatedAt?: string;
+    /** An auto-incrementing sequence number used for pagination. */
+    CursorID?: number;
+    /** An optional set of gates that, if any is present, will block deletion. */
+    DeleteGates?: {
+        [key: string]: boolean;
+    };
+    /** Description is a human-readable description of the change. */
+    Description?: string;
+    /** Friendly name for the entity. */
+    DisplayName?: string;
+    /** EndTagID is the identifier of the set of revisions that end the ChangeSet. */
+    EndTagID?: string;
+    /** The type of entity. */
+    EntityType?: string;
+    /** An optional map of Label key/value pairs to specify identifying attributes of entities for the purpose of grouping and filtering them. */
+    Labels?: {
+        [key: string]: string;
+    };
+    /** Unique identifier for an organization. */
+    OrganizationID?: string;
+    /** Unique URL-safe identifier for the entity. */
+    Slug: string;
+    /** Unique identifier for a space. */
+    SpaceID?: string;
+    /** Slug of the Space this entity belongs to. (readonly) */
+    SpaceSlug?: string;
+    /** StartTagID is the identifier of the set of revisions that begin the ChangeSet. */
+    StartTagID?: string;
+    /** StartTagIsPriorRevision reports whether the start Tag marks the Revision before the ChangeSet, making the ChangeSet the half-open interval (start, end]. False, the original meaning, means it marks the ChangeSet's first Revision. */
+    StartTagIsPriorRevision?: boolean;
+    /** State represents the current state of the ChangeSet. */
+    State?: string;
+    /** The timestamp when the entity was last updated in "2023-01-01T12:00:00Z" format. */
+    UpdatedAt?: string;
+    /** An entity-specific sequence number used for optimistic concurrency control. The value read must be sent in calls to Update. */
+    Version?: number;
+};
+type ExtendedChangeSet = {
+    ChangeSet?: ChangeSet;
+    EndTag?: Tag;
+    Error?: ResponseError;
+    Organization?: Organization;
+    Space?: Space;
+    StartTag?: Tag;
+};
+type ExtendedChangeSetRead = {
+    ChangeSet?: ChangeSetRead;
+    EndTag?: TagRead;
+    Error?: ResponseError;
+    Organization?: OrganizationRead;
+    Space?: SpaceRead;
+    StartTag?: TagRead;
+};
+type ChangeSetCreateOrUpdateResponse = {
+    ChangeSet?: ChangeSet;
+    Error?: ResponseError;
+};
+type ChangeSetCreateOrUpdateResponseRead = {
+    ChangeSet?: ChangeSetRead;
+    Error?: ResponseError;
+};
 type ExtendedFilter = {
     Error?: ResponseError;
     Filter?: Filter;
@@ -12343,38 +12505,6 @@ type FunctionInvocationsResponse = {
     /** Slug of the Unit */
     UnitSlug?: string;
 };
-type FunctionArgument = {
-    Evaluator?: string;
-    ParameterName?: string;
-    Value?: string | number | boolean;
-};
-type ClearanceRequirement = {
-    /** The guard key this requirement is about */
-    Key?: string;
-    /** Exists, In, NotIn, or DoesNotExist */
-    Operator?: string;
-    /** The values In and NotIn compare against; unused by Exists and DoesNotExist */
-    Values?: string[];
-};
-type Clearance = ClearanceRequirement[];
-type GuardStamp = {
-    [key: string]: string;
-};
-type FunctionInvocation = {
-    /** Function arguments */
-    Arguments?: FunctionArgument[] | null;
-    Clearance?: Clearance;
-    /** Function name */
-    FunctionName?: string;
-    Guards?: GuardStamp;
-    /** Caller-supplied parameter values for expanding templated argument Values; transient, not persisted */
-    Params?: {
-        [key: string]: any;
-    };
-    /** Per-invocation resource filter. AND-combined with the request-level WhereResource. Same path syntax as the request-level field (see ParseAndValidateWhereResource). */
-    WhereResource?: string;
-};
-type FunctionInvocationList = FunctionInvocation[] | null;
 type ParameterizedInvocationRef = {
     InvocationID?: string;
     Parameters?: {
@@ -12400,7 +12530,10 @@ type FunctionInvocationsRequest = {
     ToolchainType?: string;
     /** Triggers is a list of Trigger IDs to execute. The triggers must be within the same Organization. Triggers will be executed after the FunctionInvocations list. Functions are grouped by executor (built-in vs bridge worker) and executed in phases: general mutating functions first, then final mutating functions (like ensure-context), then validating functions. Functions that don't match the unit's toolchain type are ignored. */
     Triggers?: Uuid[];
+    /** Deprecated: use UpdateValidationResults, which this means the same thing as. Setting either has the same effect. */
     UpdateApplyGates?: boolean;
+    /** UpdateValidationResults indicates that the results of Trigger execution should be used to update ValidationErrors and ValidationWarnings on the affected Units. Requires Triggers to be specified. */
+    UpdateValidationResults?: boolean;
     /** WhereResource restricts which resources functions operate on using ConfigHub metadata path expressions (ConfigHub.ResourceName, ConfigHub.ResourceNameWithoutScope, ConfigHub.ResourceType, ConfigHub.ResourceCategory). */
     WhereResource?: string;
 };
@@ -12428,84 +12561,6 @@ type ApiInfoRead = {
     /** Deprecated and always empty. Workers connect over long polling on the main API port; there is no separate worker port. */
     WorkerPort?: string;
 };
-type Invocation = {
-    /** An optional map of Annotation key/value pairs for tools to attach information to entities. */
-    Annotations?: {
-        [key: string]: string;
-    };
-    /** Unique identifier for a Bridge Worker to execute the functions specified by the Invocation. If unspecified, use the builtin function executor. */
-    BridgeWorkerID?: string;
-    /** An optional set of gates that, if any is present, will block deletion. */
-    DeleteGates?: {
-        [key: string]: boolean;
-    };
-    /** Friendly name for the entity. */
-    DisplayName?: string;
-    FunctionInvocations: FunctionInvocationList;
-    /** InvocationID uniquely identifies a invocation within the system. */
-    InvocationID?: string;
-    /** An optional map of Label key/value pairs to specify identifying attributes of entities for the purpose of grouping and filtering them. */
-    Labels?: {
-        [key: string]: string;
-    };
-    /** Unique identifier for an organization. */
-    OrganizationID?: string;
-    Parameters?: FunctionParameter[];
-    /** Unique URL-safe identifier for the entity. */
-    Slug: string;
-    /** Unique identifier for a space. */
-    SpaceID?: string;
-    /** ToolchainType specifies the type of toolchain this invocation works with.
-              This determines which configuration formats the invocation can process. */
-    ToolchainType: string;
-    /** An entity-specific sequence number used for optimistic concurrency control. The value read must be sent in calls to Update. */
-    Version?: number;
-};
-type InvocationRead = {
-    /** An optional map of Annotation key/value pairs for tools to attach information to entities. */
-    Annotations?: {
-        [key: string]: string;
-    };
-    /** Unique identifier for a Bridge Worker to execute the functions specified by the Invocation. If unspecified, use the builtin function executor. */
-    BridgeWorkerID?: string;
-    /** The timestamp when the entity was created in "2023-01-01T12:00:00Z" format. */
-    CreatedAt?: string;
-    /** An auto-incrementing sequence number used for pagination. */
-    CursorID?: number;
-    /** An optional set of gates that, if any is present, will block deletion. */
-    DeleteGates?: {
-        [key: string]: boolean;
-    };
-    /** Friendly name for the entity. */
-    DisplayName?: string;
-    /** The type of entity. */
-    EntityType?: string;
-    FunctionInvocations: FunctionInvocationList;
-    /** SHA256 hash of the functions and their arguments encoded as hexadecimal. */
-    Hash?: string;
-    /** InvocationID uniquely identifies a invocation within the system. */
-    InvocationID?: string;
-    /** An optional map of Label key/value pairs to specify identifying attributes of entities for the purpose of grouping and filtering them. */
-    Labels?: {
-        [key: string]: string;
-    };
-    /** Unique identifier for an organization. */
-    OrganizationID?: string;
-    Parameters?: FunctionParameter[];
-    /** Unique URL-safe identifier for the entity. */
-    Slug: string;
-    /** Unique identifier for a space. */
-    SpaceID?: string;
-    /** Slug of the Space this entity belongs to. (readonly) */
-    SpaceSlug?: string;
-    /** ToolchainType specifies the type of toolchain this invocation works with.
-              This determines which configuration formats the invocation can process. */
-    ToolchainType: string;
-    /** The timestamp when the entity was last updated in "2023-01-01T12:00:00Z" format. */
-    UpdatedAt?: string;
-    /** An entity-specific sequence number used for optimistic concurrency control. The value read must be sent in calls to Update. */
-    Version?: number;
-};
 type ExtendedInvocation = {
     BridgeWorker?: BridgeWorker;
     Error?: ResponseError;
@@ -12674,11 +12729,11 @@ type UnitRead = {
     Annotations?: {
         [key: string]: string;
     };
-    /** A map of "<space slug>/<trigger slug>/<function name>" to true of Triggers invoking validating functions that did not pass on the latest configuration data. These block Apply operations. */
+    /** Deprecated: use ValidationErrors, which this is a copy of. Returned for compatibility with clients written before the field was renamed; it cannot be set. */
     ApplyGates?: {
         [key: string]: boolean;
     };
-    /** A map of "<space slug>/<trigger slug>/<function name>" to true of Triggers with Warn=true invoking validating functions that did not pass on the latest configuration data. These do not block Apply operations. */
+    /** Deprecated: use ValidationWarnings, which this is a copy of. Returned for compatibility with clients written before the field was renamed; it cannot be set. */
     ApplyWarnings?: {
         [key: string]: boolean;
     };
@@ -12713,6 +12768,8 @@ type UnitRead = {
     FromLinkID?: Uuid[];
     /** Sequence number the head Mutation. */
     HeadMutationNum?: number;
+    /** Unique identifier of the head Revision -- the same Revision HeadRevisionNum numbers. Use include=HeadRevisionNum to expand it. */
+    HeadRevisionID?: string;
     /** Sequence number the head Revision. */
     HeadRevisionNum?: number;
     /** Sequence number of the head unit action (queued operation). */
@@ -12760,10 +12817,18 @@ type UnitRead = {
     UpstreamSpaceID?: string;
     /** Unique identifier for Unit this unit was cloned from, if any. To change or remove the upstream unit, change or delete the corresponding Link of UpdateType UpgradeUnit from this Unit to the upstream Unit. */
     UpstreamUnitID?: string;
+    /** A map of "<space slug>/<trigger slug>/<function name>" to true of Triggers invoking validating functions that did not pass on the latest configuration data. These block Release operations. */
+    ValidationErrors?: {
+        [key: string]: boolean;
+    };
     /** A map from gate/warning name to the list of validation results that caused the gate or warning. */
     ValidationResults?: {
         [key: string]: ValidationResultList;
     };
+    /** A map of "<space slug>/<trigger slug>/<function name>" to true of Triggers with Warn=true invoking validating functions that did not pass on the latest configuration data. These do not block Release operations. */
+    ValidationWarnings?: {
+        [key: string]: boolean;
+    };
     /** Map from "<trigger slug>/<attribute name>" to the first output Value with that attribute name of the function invocation specified by the Trigger. */
     Values?: {
         [key: string]: string;
@@ -13514,14 +13579,6 @@ type ExtendedResourceRead = {
     ViewColumns?: ViewColumn[];
 };
 type Revision = {
-    /** A map of "<space slug>/<trigger slug>/<function name>" to true of Triggers invoking validating functions that did not pass on the configuration data at this Revision. These block Apply operations. */
-    ApplyGates?: {
-        [key: string]: boolean;
-    };
-    /** A map of "<space slug>/<trigger slug>/<function name>" to true of Triggers with Warn=true invoking validating functions that did not pass on the configuration data at this Revision. These do not block Apply operations. */
-    ApplyWarnings?: {
-        [key: string]: boolean;
-    };
     /** the users that have approved the latest version of the config data for the Unit. */
     ApprovedBy?: Uuid[];
     /** Unique identifier for the ChangeSet to which this Revision belongs. Optional. Revisions are not required to belong to ChangeSets. */
@@ -13531,9 +13588,13 @@ type Revision = {
     DataHash?: string;
     /** User description of the change. It is copied from the LastChangeDescription field of the Unit at the time the change was made that created the Revision. */
     Description?: string;
+    /** Attribute paths this Revision's configuration needs from upstream Units via NeedsProvides Links. */
+    NeededPaths?: AttributeValue[];
     /** Unique identifier for an Organization. */
     OrganizationID?: string;
     PathAnnotations?: PathAnnotationList;
+    /** Attribute paths this Revision's configuration provides to downstream Units via NeedsProvides Links. */
+    ProvidedPaths?: AttributeInfo[];
     /** A set (map) of ReleaseIDs of any Releases that have bundled this Revision. The string values have no particular meaning for now. */
     Releases?: {
         [key: string]: string;
@@ -13556,15 +13617,35 @@ type Revision = {
     UserAgent?: string;
     /** UserID if change was made by a user. Automated changes, such as by triggers and resolve, are currently made with the UserID "00000000-0000-0000-0000-000000000000". */
     UserID?: string;
+    /** A map of "<space slug>/<trigger slug>/<function name>" to true of Triggers invoking validating functions that did not pass on the configuration data at this Revision. These block Release operations. */
+    ValidationErrors?: {
+        [key: string]: boolean;
+    };
+    /** A map of "<space slug>/<trigger slug>/<function name>" to true of Triggers invoking validating functions that executed and passed on the configuration data at this Revision. Disjoint from ValidationErrors and ValidationWarnings. */
+    ValidationPassed?: {
+        [key: string]: boolean;
+    };
+    /** A map from gate/warning name to the validation results that caused it, for the configuration data at this Revision. */
+    ValidationResults?: {
+        [key: string]: ValidationResultList;
+    };
+    /** A map of "<space slug>/<trigger slug>/<function name>" to true of Triggers with Warn=true invoking validating functions that did not pass on the configuration data at this Revision. These do not block Release operations. */
+    ValidationWarnings?: {
+        [key: string]: boolean;
+    };
+    /** Map from "<trigger slug>/<attribute name>" to the first output Value with that attribute name of the function invocation specified by the Trigger, as of this Revision. */
+    Values?: {
+        [key: string]: string;
+    };
     /** An entity-specific sequence number used for optimistic concurrency control. The value read must be sent in calls to Update. */
     Version?: number;
 };
 type RevisionRead = {
-    /** A map of "<space slug>/<trigger slug>/<function name>" to true of Triggers invoking validating functions that did not pass on the configuration data at this Revision. These block Apply operations. */
+    /** Deprecated: use ValidationErrors, which this is a copy of. Returned for compatibility with clients written before the field was renamed; it cannot be set. */
     ApplyGates?: {
         [key: string]: boolean;
     };
-    /** A map of "<space slug>/<trigger slug>/<function name>" to true of Triggers with Warn=true invoking validating functions that did not pass on the configuration data at this Revision. These do not block Apply operations. */
+    /** Deprecated: use ValidationWarnings, which this is a copy of. Returned for compatibility with clients written before the field was renamed; it cannot be set. */
     ApplyWarnings?: {
         [key: string]: boolean;
     };
@@ -13588,9 +13669,13 @@ type RevisionRead = {
     Description?: string;
     /** The type of entity. */
     EntityType?: string;
+    /** Attribute paths this Revision's configuration needs from upstream Units via NeedsProvides Links. */
+    NeededPaths?: AttributeValue[];
     /** Unique identifier for an Organization. */
     OrganizationID?: string;
     PathAnnotations?: PathAnnotationList;
+    /** Attribute paths this Revision's configuration provides to downstream Units via NeedsProvides Links. */
+    ProvidedPaths?: AttributeInfo[];
     /** A set (map) of ReleaseIDs of any Releases that have bundled this Revision. The string values have no particular meaning for now. */
     Releases?: {
         [key: string]: string;
@@ -13619,6 +13704,26 @@ type RevisionRead = {
     UserAgent?: string;
     /** UserID if change was made by a user. Automated changes, such as by triggers and resolve, are currently made with the UserID "00000000-0000-0000-0000-000000000000". */
     UserID?: string;
+    /** A map of "<space slug>/<trigger slug>/<function name>" to true of Triggers invoking validating functions that did not pass on the configuration data at this Revision. These block Release operations. */
+    ValidationErrors?: {
+        [key: string]: boolean;
+    };
+    /** A map of "<space slug>/<trigger slug>/<function name>" to true of Triggers invoking validating functions that executed and passed on the configuration data at this Revision. Disjoint from ValidationErrors and ValidationWarnings. */
+    ValidationPassed?: {
+        [key: string]: boolean;
+    };
+    /** A map from gate/warning name to the validation results that caused it, for the configuration data at this Revision. */
+    ValidationResults?: {
+        [key: string]: ValidationResultList;
+    };
+    /** A map of "<space slug>/<trigger slug>/<function name>" to true of Triggers with Warn=true invoking validating functions that did not pass on the configuration data at this Revision. These do not block Release operations. */
+    ValidationWarnings?: {
+        [key: string]: boolean;
+    };
+    /** Map from "<trigger slug>/<attribute name>" to the first output Value with that attribute name of the function invocation specified by the Trigger, as of this Revision. */
+    Values?: {
+        [key: string]: string;
+    };
     /** An entity-specific sequence number used for optimistic concurrency control. The value read must be sent in calls to Update. */
     Version?: number;
 };
@@ -13768,7 +13873,7 @@ type Trigger = {
     UnitFilterID?: string;
     /** An entity-specific sequence number used for optimistic concurrency control. The value read must be sent in calls to Update. */
     Version?: number;
-    /** Warn indicates whether this trigger produces ApplyWarnings instead of ApplyGates when its validating function fails. ApplyWarnings are non-blocking. */
+    /** Warn indicates whether this trigger produces ValidationWarnings instead of ValidationErrors when its validating function fails. ValidationWarnings are non-blocking. */
     Warn?: boolean;
     /** Restricts which resources within a Unit's configuration data the Trigger's function operates on, using ConfigHub metadata path expressions. */
     WhereResource?: string;
@@ -13849,7 +13954,7 @@ type TriggerRead = {
     Validating?: boolean;
     /** An entity-specific sequence number used for optimistic concurrency control. The value read must be sent in calls to Update. */
     Version?: number;
-    /** Warn indicates whether this trigger produces ApplyWarnings instead of ApplyGates when its validating function fails. ApplyWarnings are non-blocking. */
+    /** Warn indicates whether this trigger produces ValidationWarnings instead of ValidationErrors when its validating function fails. ValidationWarnings are non-blocking. */
     Warn?: boolean;
     /** Restricts which resources within a Unit's configuration data the Trigger's function operates on, using ConfigHub metadata path expressions. */
     WhereResource?: string;