@epilot/app-client 0.13.7 → 0.14.1

package/dist/definition.js

@@ -1 +1 @@
-(()=>{"use strict";var e={330(e,r,t){var n=this&&this.__importDefault||function(e){return e&&e.__esModule?e:{default:e}};Object.defineProperty(r,"__esModule",{value:!0});var o=n(t(466));r.default=o.default},466(e){e.exports=JSON.parse('{"openapi":"3.1.0","info":{"title":"","version":""},"servers":[{"url":"https://app.sls.epilot.io"}],"paths":{"/v1/public/app/{appId}/components/{componentId}":{"parameters":[{"name":"appId","in":"path","required":true,"description":"ID of the app configuration to install"},{"name":"componentId","in":"path","required":true,"description":"ID of the component to retrieve"}],"get":{"operationId":"getPublicFacingComponent","responses":{}}},"/v1/app-configurations":{"get":{"operationId":"listConfigurations","parameters":[{"name":"page","in":"query"},{"name":"pageSize","in":"query"}],"responses":{}},"post":{"operationId":"createConfiguration","requestBody":{"$ref":"#/components/requestBodies/CreateConfigRequest"},"responses":{}}},"/v1/app-configurations/public":{"get":{"operationId":"listPublicConfigurations","parameters":[{"name":"page","in":"query"},{"name":"pageSize","in":"query"}],"responses":{}}},"/v1/app-configurations/public/{appId}":{"parameters":[{"name":"appId","in":"path","required":true,"description":"ID of the app configuration to install"}],"get":{"operationId":"getPublicConfiguration","parameters":[{"name":"version","in":"query"}],"responses":{}}},"/v1/app-configurations/{appId}":{"parameters":[{"name":"appId","in":"path","required":true,"description":"ID of the app configuration"}],"get":{"operationId":"getConfiguration","parameters":[{"name":"version","in":"query"}],"responses":{}},"patch":{"operationId":"patchMetadata","requestBody":{"$ref":"#/components/requestBodies/PatchConfigMetadataRequest"},"responses":{}},"delete":{"operationId":"deleteConfiguration","responses":{}}},"/v1/app-configurations/{appId}/events":{"post":{"operationId":"queryEvents","parameters":[{"name":"appId","in":"path","required":true}],"requestBody":{"required":true,"content":{"application/json":{}}},"responses":{}}},"/v1/app-configurations/{appId}/bundle":{"post":{"operationId":"createBundleUploadUrl","parameters":[{"name":"appId","in":"path","required":true}],"requestBody":{"$ref":"#/components/requestBodies/CreateBundlePresignedRequest"},"responses":{}}},"/v1/app-configurations/{appId}/zip":{"post":{"operationId":"createZipUploadUrl","parameters":[{"name":"appId","in":"path","required":true}],"requestBody":{"content":{"application/json":{}}},"responses":{}}},"/v1/app-configurations/{appId}/logo":{"parameters":[{"name":"appId","in":"path","required":true,"description":"ID of the app configuration"}],"post":{"operationId":"createLogoUploadUrl","requestBody":{"$ref":"#/components/requestBodies/CreateLogoPresignedRequest"},"responses":{}},"delete":{"operationId":"deleteLogo","responses":{}}},"/v1/app-configurations/{appId}/versions":{"get":{"operationId":"listVersions","parameters":[{"name":"appId","in":"path","required":true},{"name":"page","in":"query"},{"name":"pageSize","in":"query"}],"responses":{}}},"/v1/app-configurations/{appId}/versions/{version}":{"get":{"operationId":"getVersion","parameters":[{"name":"appId","in":"path","required":true},{"name":"version","in":"path","required":true}],"responses":{}},"delete":{"operationId":"deleteVersion","parameters":[{"name":"appId","in":"path","required":true},{"name":"version","in":"path","required":true}],"responses":{}},"patch":{"operationId":"patchVersion","parameters":[{"name":"appId","in":"path","required":true},{"name":"version","in":"path","required":true}],"requestBody":{"$ref":"#/components/requestBodies/PatchVersionRequest"},"responses":{}}},"/v1/app-configurations/{appId}/versions/{version}/review":{"get":{"operationId":"getReview","parameters":[{"name":"appId","in":"path","required":true},{"name":"version","in":"path","required":true}],"responses":{}},"post":{"operationId":"createReview","parameters":[{"name":"appId","in":"path","required":true},{"name":"version","in":"path","required":true}],"requestBody":{"$ref":"#/components/requestBodies/CreateReviewRequest"},"responses":{}}},"/v1/app-configurations/{appId}/versions/{version}/components":{"post":{"operationId":"createComponent","parameters":[{"name":"appId","in":"path","required":true},{"name":"version","in":"path","required":true}],"requestBody":{"$ref":"#/components/requestBodies/UpsertComponentRequest"},"responses":{}}},"/v1/app-configurations/{appId}/versions/{version}/components/{componentId}":{"patch":{"operationId":"patchComponent","parameters":[{"name":"appId","in":"path","required":true},{"name":"version","in":"path","required":true},{"name":"componentId","in":"path","required":true}],"requestBody":{"$ref":"#/components/requestBodies/UpsertComponentRequest"},"responses":{}},"delete":{"operationId":"deleteComponent","parameters":[{"name":"appId","in":"path","required":true},{"name":"version","in":"path","required":true},{"name":"componentId","in":"path","required":true}],"responses":{}}},"/v1/app-configurations/{appId}/versions/{sourceVersion}/clone-to/{targetVersion}":{"post":{"operationId":"cloneVersion","parameters":[{"name":"appId","in":"path","required":true},{"name":"sourceVersion","in":"path","required":true},{"name":"targetVersion","in":"path","required":true}],"responses":{}}},"/v1/app":{"get":{"operationId":"listInstallations","parameters":[{"name":"componentType","in":"query"},{"name":"enabled","in":"query"},{"name":"page","in":"query"},{"name":"pageSize","in":"query"}],"responses":{}}},"/v1/app/{appId}":{"get":{"operationId":"getInstallation","parameters":[{"name":"appId","in":"path","required":true}],"responses":{}},"post":{"operationId":"install","parameters":[{"name":"appId","in":"path","required":true}],"requestBody":{"$ref":"#/components/requestBodies/InstallRequest"},"responses":{}},"patch":{"operationId":"patchInstallation","parameters":[{"name":"appId","in":"path","required":true}],"requestBody":{"$ref":"#/components/requestBodies/InstallRequest"},"responses":{}},"delete":{"operationId":"uninstall","parameters":[{"name":"appId","in":"path","required":true}],"responses":{}}},"/v1/app/{appId}/promote-to/{version}":{"post":{"operationId":"promoteVersion","parameters":[{"name":"appId","in":"path","required":true},{"name":"version","in":"path","required":true}],"responses":{}}},"/v1/app-events":{"post":{"operationId":"ingestEvent","requestBody":{"required":true,"content":{"application/json":{}}},"responses":{}}},"/v1/public/app/{appId}/proxy/{proxyName}/{path}":{"parameters":[{"name":"appId","in":"path","required":true,"description":"ID of the installed app"},{"name":"proxyName","in":"path","required":true,"description":"Name of the proxy target as defined in the app manifest"},{"name":"path","in":"path","required":true,"description":"Path to forward to the proxy target"}],"get":{"operationId":"publicProxyGet","responses":{}},"post":{"operationId":"publicProxyPost","requestBody":{"content":{"application/json":{}}},"responses":{}},"put":{"operationId":"publicProxyPut","requestBody":{"content":{"application/json":{}}},"responses":{}},"patch":{"operationId":"publicProxyPatch","requestBody":{"content":{"application/json":{}}},"responses":{}},"delete":{"operationId":"publicProxyDelete","responses":{}}}},"components":{"requestBodies":{"CreateReviewRequest":{"required":true,"content":{"application/json":{}}},"CreateLogoPresignedRequest":{"required":true,"content":{"application/json":{}}},"CreateBundlePresignedRequest":{"required":true,"content":{"application/json":{}}},"PatchConfigMetadataRequest":{"required":true,"content":{"application/json":{}}},"PatchVersionRequest":{"required":true,"content":{"application/json":{}}},"UpsertComponentRequest":{"required":true,"content":{"application/json":{}}},"CreateConfigRequest":{"required":true,"content":{"application/json":{}}},"InstallRequest":{"content":{"application/json":{}}}}}}')}},r={},t=function t(n){var o=r[n];if(void 0!==o)return o.exports;var p=r[n]={exports:{}};return e[n].call(p.exports,p,p.exports,t),p.exports}(330),n=exports;for(var o in t)n[o]=t[o];t.__esModule&&Object.defineProperty(n,"__esModule",{value:!0})})();
+(()=>{"use strict";var e={330(e,r,t){var n=this&&this.__importDefault||function(e){return e&&e.__esModule?e:{default:e}};Object.defineProperty(r,"__esModule",{value:!0});var o=n(t(466));r.default=o.default},466(e){e.exports=JSON.parse('{"openapi":"3.1.0","info":{"title":"","version":""},"servers":[{"url":"https://app.sls.epilot.io"}],"paths":{"/v1/public/app/{appId}/components/{componentId}":{"parameters":[{"name":"appId","in":"path","required":true,"description":"ID of the app configuration to install"},{"name":"componentId","in":"path","required":true,"description":"ID of the component to retrieve"}],"get":{"operationId":"getPublicFacingComponent","responses":{}}},"/v1/app-configurations":{"get":{"operationId":"listConfigurations","parameters":[{"name":"page","in":"query"},{"name":"pageSize","in":"query"}],"responses":{}},"post":{"operationId":"createConfiguration","requestBody":{"$ref":"#/components/requestBodies/CreateConfigRequest"},"responses":{}}},"/v1/app-configurations/public":{"get":{"operationId":"listPublicConfigurations","parameters":[{"name":"page","in":"query"},{"name":"pageSize","in":"query"}],"responses":{}}},"/v1/app-configurations/public/{appId}":{"parameters":[{"name":"appId","in":"path","required":true,"description":"ID of the app configuration to install"}],"get":{"operationId":"getPublicConfiguration","parameters":[{"name":"version","in":"query"}],"responses":{}}},"/v1/app-configurations/{appId}":{"parameters":[{"name":"appId","in":"path","required":true,"description":"ID of the app configuration"}],"get":{"operationId":"getConfiguration","parameters":[{"name":"version","in":"query"}],"responses":{}},"patch":{"operationId":"patchMetadata","requestBody":{"$ref":"#/components/requestBodies/PatchConfigMetadataRequest"},"responses":{}},"delete":{"operationId":"deleteConfiguration","responses":{}}},"/v1/app-configurations/{appId}/events":{"post":{"operationId":"queryEvents","parameters":[{"name":"appId","in":"path","required":true}],"requestBody":{"required":true,"content":{"application/json":{}}},"responses":{}}},"/v1/app-configurations/{appId}/bundle":{"post":{"operationId":"createBundleUploadUrl","parameters":[{"name":"appId","in":"path","required":true}],"requestBody":{"$ref":"#/components/requestBodies/CreateBundlePresignedRequest"},"responses":{}}},"/v1/app-configurations/{appId}/zip":{"post":{"operationId":"createZipUploadUrl","parameters":[{"name":"appId","in":"path","required":true}],"requestBody":{"content":{"application/json":{}}},"responses":{}}},"/v1/app-configurations/{appId}/logo":{"parameters":[{"name":"appId","in":"path","required":true,"description":"ID of the app configuration"}],"post":{"operationId":"createLogoUploadUrl","requestBody":{"$ref":"#/components/requestBodies/CreateLogoPresignedRequest"},"responses":{}},"delete":{"operationId":"deleteLogo","responses":{}}},"/v1/app-configurations/{appId}/versions":{"get":{"operationId":"listVersions","parameters":[{"name":"appId","in":"path","required":true},{"name":"page","in":"query"},{"name":"pageSize","in":"query"}],"responses":{}}},"/v1/app-configurations/{appId}/versions/{version}":{"get":{"operationId":"getVersion","parameters":[{"name":"appId","in":"path","required":true},{"name":"version","in":"path","required":true}],"responses":{}},"delete":{"operationId":"deleteVersion","parameters":[{"name":"appId","in":"path","required":true},{"name":"version","in":"path","required":true}],"responses":{}},"patch":{"operationId":"patchVersion","parameters":[{"name":"appId","in":"path","required":true},{"name":"version","in":"path","required":true}],"requestBody":{"$ref":"#/components/requestBodies/PatchVersionRequest"},"responses":{}}},"/v1/app-configurations/{appId}/versions/{version}/review":{"get":{"operationId":"getReview","parameters":[{"name":"appId","in":"path","required":true},{"name":"version","in":"path","required":true}],"responses":{}},"post":{"operationId":"createReview","parameters":[{"name":"appId","in":"path","required":true},{"name":"version","in":"path","required":true}],"requestBody":{"$ref":"#/components/requestBodies/CreateReviewRequest"},"responses":{}}},"/v1/app-configurations/{appId}/versions/{version}/components":{"post":{"operationId":"createComponent","parameters":[{"name":"appId","in":"path","required":true},{"name":"version","in":"path","required":true}],"requestBody":{"$ref":"#/components/requestBodies/UpsertComponentRequest"},"responses":{}}},"/v1/app-configurations/{appId}/versions/{version}/components/{componentId}":{"patch":{"operationId":"patchComponent","parameters":[{"name":"appId","in":"path","required":true},{"name":"version","in":"path","required":true},{"name":"componentId","in":"path","required":true}],"requestBody":{"$ref":"#/components/requestBodies/UpsertComponentRequest"},"responses":{}},"delete":{"operationId":"deleteComponent","parameters":[{"name":"appId","in":"path","required":true},{"name":"version","in":"path","required":true},{"name":"componentId","in":"path","required":true}],"responses":{}}},"/v1/app-configurations/{appId}/versions/{sourceVersion}/clone-to/{targetVersion}":{"post":{"operationId":"cloneVersion","parameters":[{"name":"appId","in":"path","required":true},{"name":"sourceVersion","in":"path","required":true},{"name":"targetVersion","in":"path","required":true}],"responses":{}}},"/v1/app":{"get":{"operationId":"listInstallations","parameters":[{"name":"componentType","in":"query"},{"name":"enabled","in":"query"},{"name":"page","in":"query"},{"name":"pageSize","in":"query"}],"responses":{}}},"/v1/app/{appId}":{"get":{"operationId":"getInstallation","parameters":[{"name":"appId","in":"path","required":true}],"responses":{}},"post":{"operationId":"install","parameters":[{"name":"appId","in":"path","required":true}],"requestBody":{"$ref":"#/components/requestBodies/InstallRequest"},"responses":{}},"patch":{"operationId":"patchInstallation","parameters":[{"name":"appId","in":"path","required":true}],"requestBody":{"$ref":"#/components/requestBodies/InstallRequest"},"responses":{}},"delete":{"operationId":"uninstall","parameters":[{"name":"appId","in":"path","required":true}],"responses":{}}},"/v1/app/{appId}/promote-to/{version}":{"post":{"operationId":"promoteVersion","parameters":[{"name":"appId","in":"path","required":true},{"name":"version","in":"path","required":true}],"responses":{}}},"/v1/app/{appId}/options/resolve":{"post":{"operationId":"resolveOptions","parameters":[{"name":"appId","in":"path","required":true}],"requestBody":{"content":{"application/json":{}}},"responses":{}}},"/v1/app-events":{"post":{"operationId":"ingestEvent","requestBody":{"required":true,"content":{"application/json":{}}},"responses":{}}},"/v1/public/app/{appId}/proxy/{proxyName}/{path}":{"parameters":[{"name":"appId","in":"path","required":true,"description":"ID of the installed app"},{"name":"proxyName","in":"path","required":true,"description":"Name of the proxy target as defined in the app manifest"},{"name":"path","in":"path","required":true,"description":"Path to forward to the proxy target"},{"name":"query","in":"query","required":false,"style":"form","explode":true,"description":"Free-form query parameters, forwarded unchanged to the proxy target"}],"get":{"operationId":"publicProxyGet","responses":{}},"post":{"operationId":"publicProxyPost","requestBody":{"content":{"application/json":{}}},"responses":{}},"put":{"operationId":"publicProxyPut","requestBody":{"content":{"application/json":{}}},"responses":{}},"patch":{"operationId":"publicProxyPatch","requestBody":{"content":{"application/json":{}}},"responses":{}},"delete":{"operationId":"publicProxyDelete","responses":{}}}},"components":{"requestBodies":{"CreateReviewRequest":{"required":true,"content":{"application/json":{}}},"CreateLogoPresignedRequest":{"required":true,"content":{"application/json":{}}},"CreateBundlePresignedRequest":{"required":true,"content":{"application/json":{}}},"PatchConfigMetadataRequest":{"required":true,"content":{"application/json":{}}},"PatchVersionRequest":{"required":true,"content":{"application/json":{}}},"UpsertComponentRequest":{"required":true,"content":{"application/json":{}}},"CreateConfigRequest":{"required":true,"content":{"application/json":{}}},"InstallRequest":{"content":{"application/json":{}}}}}}')}},r={},t=function t(n){var o=r[n];if(void 0!==o)return o.exports;var p=r[n]={exports:{}};return e[n].call(p.exports,p,p.exports,t),p.exports}(330),n=exports;for(var o in t)n[o]=t[o];t.__esModule&&Object.defineProperty(n,"__esModule",{value:!0})})();

package/dist/openapi-runtime.json

@@ -490,6 +490,24 @@
         "responses": {}
       }
     },
+    "/v1/app/{appId}/options/resolve": {
+      "post": {
+        "operationId": "resolveOptions",
+        "parameters": [
+          {
+            "name": "appId",
+            "in": "path",
+            "required": true
+          }
+        ],
+        "requestBody": {
+          "content": {
+            "application/json": {}
+          }
+        },
+        "responses": {}
+      }
+    },
     "/v1/app-events": {
       "post": {
         "operationId": "ingestEvent",
@@ -521,6 +539,14 @@
           "in": "path",
           "required": true,
           "description": "Path to forward to the proxy target"
+        },
+        {
+          "name": "query",
+          "in": "query",
+          "required": false,
+          "style": "form",
+          "explode": true,
+          "description": "Free-form query parameters, forwarded unchanged to the proxy target"
         }
       ],
       "get": {

package/dist/openapi.d.ts

@@ -105,6 +105,21 @@ declare namespace Components {
              */
             role_id?: string | null;
             grants?: /* Required grants for the app in order to call APIs for the installing tenant */ Schemas.Grants;
+            /**
+             * Replaces the full set of server-side functions for this version
+             */
+            functions?: /**
+             * A named server-side function belonging to the app. Runs in the epilot code-execution sandbox with an installation-scoped app token. Functions with a schedule are executed automatically once per installation.
+             *
+             */
+            Schemas.FunctionDefinition[];
+            /**
+             * Replaces the full set of app-level option declarations for this version.
+             * Option keys must be unique app-wide; `secret`-touching options are always
+             * sensitive and must not declare `sensitive: false`.
+             *
+             */
+            options?: /* Options for the component configuration */ Schemas.Options[];
         }
         export type UpsertComponentRequest = Schemas.BaseComponent;
     }
@@ -155,9 +170,9 @@ declare namespace Components {
              */
             target: string; // ^https://
             /**
-             * Authentication strategy
+             * Authentication strategy. 'basic' sends an HTTP Basic Authorization header built server-side from the 'username' and 'password' component options.
              */
-            auth_type: "header" | "bearer" | "oauth2" | "none";
+            auth_type: "header" | "bearer" | "basic" | "oauth2" | "none";
             /**
              * Header name for 'header' auth type
              */
@@ -277,6 +292,15 @@ declare namespace Components {
              * List of options for the app component
              */
             options?: /* Options for the component configuration */ Options[];
+            /**
+             * Keys of app-level options this component uses. Narrows which options are
+             * folded back into `options` for legacy consumers (e.g. which values a journey
+             * block receives in its public args) — a scoping hint, never a security
+             * boundary. Stamped automatically by the component-options migration; may also
+             * be declared by the app developer.
+             *
+             */
+            uses_options?: string[];
             surfaces?: {
                 [key: string]: any;
             };
@@ -316,6 +340,15 @@ declare namespace Components {
              * List of options for the app component
              */
             options?: /* Options for the component configuration */ Options[];
+            /**
+             * Keys of app-level options this component uses. Narrows which options are
+             * folded back into `options` for legacy consumers (e.g. which values a journey
+             * block receives in its public args) — a scoping hint, never a security
+             * boundary. Stamped automatically by the component-options migration; may also
+             * be declared by the app developer.
+             *
+             */
+            uses_options?: string[];
             surfaces?: {
                 [key: string]: any;
             };
@@ -504,7 +537,7 @@ declare namespace Components {
         /**
          * Type of app component
          */
-        export type ComponentType = "CUSTOM_JOURNEY_BLOCK" | "CUSTOM_PORTAL_BLOCK" | "PORTAL_EXTENSION" | "CUSTOM_FLOW_ACTION" | "ERP_INFORM_TOOLKIT" | "CUSTOM_CAPABILITY" | "EXTERNAL_PRODUCT_CATALOG" | "CUSTOM_PAGE" | "API_PROXY";
+        export type ComponentType = "CUSTOM_JOURNEY_BLOCK" | "CUSTOM_PORTAL_BLOCK" | "PORTAL_EXTENSION" | "CUSTOM_FLOW_ACTION" | "ERP_INFORM_TOOLKIT" | "CUSTOM_CAPABILITY" | "EXTERNAL_PRODUCT_CATALOG" | "CUSTOM_PAGE" | "API_PROXY" | "APP_FUNCTION";
         /**
          * Configuration of the published app
          */
@@ -612,6 +645,18 @@ declare namespace Components {
                 updated_by?: string;
             };
             components: BaseComponent[];
+            /**
+             * Server-side functions of the app, including scheduled functions
+             */
+            functions?: /**
+             * A named server-side function belonging to the app. Runs in the epilot code-execution sandbox with an installation-scoped app token. Functions with a schedule are executed automatically once per installation.
+             *
+             */
+            FunctionDefinition[];
+            /**
+             * App-level option declarations (with sensitivity) of this version
+             */
+            options?: /* Options for the component configuration */ Options[];
             /**
              * Visibility of the app version
              */
@@ -790,6 +835,18 @@ declare namespace Components {
              */
             owner_org_id: string;
             components: BaseComponent[];
+            /**
+             * Server-side functions of the app, including scheduled functions
+             */
+            functions?: /**
+             * A named server-side function belonging to the app. Runs in the epilot code-execution sandbox with an installation-scoped app token. Functions with a schedule are executed automatically once per installation.
+             *
+             */
+            FunctionDefinition[];
+            /**
+             * App-level option declarations (with sensitivity) of this version
+             */
+            options?: /* Options for the component configuration */ Options[];
             /**
              * Visibility of the app version
              */
@@ -869,12 +926,24 @@ declare namespace Components {
         }
         export interface CustomFlowActionComponent {
             component_type: "CUSTOM_FLOW_ACTION";
-            configuration: CustomFlowConfig;
+            configuration: /**
+             * Configuration of a flow action component. `external_integration` calls an external HTTP endpoint; `function` runs a workflow-type app function in the epilot sandbox.
+             *
+             */
+            CustomFlowConfig;
             surfaces?: {
                 flow_action_config?: AppBridgeSurfaceConfig;
             };
         }
-        export type CustomFlowConfig = ExternalIntegrationCustomActionConfig | SandboxCustomActionConfig;
+        /**
+         * Configuration of a flow action component. `external_integration` calls an external HTTP endpoint; `function` runs a workflow-type app function in the epilot sandbox.
+         *
+         */
+        export type CustomFlowConfig = /**
+         * Configuration of a flow action component. `external_integration` calls an external HTTP endpoint; `function` runs a workflow-type app function in the epilot sandbox.
+         *
+         */
+        ExternalIntegrationCustomActionConfig | FunctionRefCustomActionConfig;
         export interface CustomPageComponent {
             component_type: "CUSTOM_PAGE";
             configuration: CustomPageConfig;
@@ -997,6 +1066,10 @@ declare namespace Components {
                  * Filter by correlation ID for tracing
                  */
                 correlation_id?: string;
+                /**
+                 * Case-insensitive substring match over event details and component id
+                 */
+                search?: string;
             };
             aggregation?: {
                 /**
@@ -1011,6 +1084,11 @@ declare namespace Components {
             pagination?: {
                 page?: number;
                 page_size?: number;
+                /**
+                 * Cursor: only return events strictly older than this timestamp. Use the timestamp of the last received event to fetch the next page; more efficient than increasing page/page_size.
+                 *
+                 */
+                before?: string; // date-time
             };
             sort?: {
                 field?: "timestamp" | "event_type" | "component_id";
@@ -1176,6 +1254,93 @@ declare namespace Components {
                 };
             };
         }
+        /**
+         * A named server-side function belonging to the app. Runs in the epilot code-execution sandbox with an installation-scoped app token. Functions with a schedule are executed automatically once per installation.
+         *
+         */
+        export interface FunctionDefinition {
+            /**
+             * Unique function name within the app
+             */
+            name: string; // ^[a-z0-9][a-z0-9-]{0,63}$
+            /**
+             * Where the function can be used. `workflow` functions are referenced by CUSTOM_FLOW_ACTION components (type `function`) and run with entity context. `scheduled` functions run automatically per installation on their cron schedule.
+             *
+             */
+            type: "workflow" | "scheduled";
+            /**
+             * Human-readable display name of the function, shown to installing organizations (e.g. in the scheduled-functions summary)
+             *
+             */
+            label?: {
+                /**
+                 * English translation
+                 */
+                en?: string | null;
+                /**
+                 * German translation
+                 */
+                de: string;
+            };
+            /**
+             * Description of the function
+             */
+            description?: {
+                /**
+                 * English translation
+                 */
+                en?: string | null;
+                /**
+                 * German translation
+                 */
+                de: string;
+            };
+            /**
+             * JavaScript code to execute. Must declare a top-level `async function handler(input, context)`. Maximum size: 300KB (hard limit). Security restrictions: eval() and Function() constructor are not allowed.
+             *
+             */
+            code: string;
+            /**
+             * Cron trigger for the function, executed once per installation. Standard 5-field cron expression (e.g. "0 3 * * *") or rate expression (e.g. "rate(30 minutes)"). Minimum interval: 15 minutes. Scheduled runs are limited to 60 seconds.
+             *
+             * example:
+             * rate(30 minutes)
+             */
+            schedule?: string;
+            /**
+             * IANA timezone the cron expression is evaluated in
+             */
+            schedule_timezone?: string;
+            /**
+             * Behavior when the previous scheduled run is still active
+             */
+            schedule_overlap?: "skip";
+            /**
+             * DEPRECATED and ignored — functions receive the app's full effective option keyspace (sensitive values included) via input.app_options. Kept for manifest compatibility.
+             *
+             */
+            secrets?: string[];
+        }
+        export interface FunctionRefCustomActionConfig {
+            /**
+             * Name of the custom action
+             */
+            name?: string;
+            /**
+             * Description of the custom action
+             */
+            description?: string;
+            /**
+             * Wait for callback_url to be called before completing the action
+             */
+            wait_for_callback?: boolean;
+            type: "function";
+            /**
+             * Name of a `workflow`-type function of the same app version. The component provides the org-facing contract (name, options, config surface); the referenced function provides the code.
+             *
+             */
+            function_name: string;
+        }
         /**
          * Required grants for the app in order to call APIs for the installing tenant
          */
@@ -1213,6 +1378,10 @@ declare namespace Components {
              * Name of the app
              */
             name: string;
+            /**
+             * Public URL of the app logo, if one has been uploaded
+             */
+            icon_url?: string;
             /**
              * Configuration values for the app components
              */
@@ -1221,6 +1390,22 @@ declare namespace Components {
              * List of component configurations for the installed version
              */
             components: BaseComponent[];
+            /**
+             * Server-side functions of the installed version, including scheduled functions
+             */
+            functions?: /**
+             * A named server-side function belonging to the app. Runs in the epilot code-execution sandbox with an installation-scoped app token. Functions with a schedule are executed automatically once per installation.
+             *
+             */
+            FunctionDefinition[];
+            /**
+             * Effective app-level options of the installation: declared top-level options plus
+             * component-level options lifted to the app keyspace, each with its configured
+             * `value`. Values of sensitive options (secrets) are never included — they carry
+             * `configured` and `value_updated_at` instead.
+             *
+             */
+            options?: /* Options for the component configuration */ Options[];
             /**
              * Version of the app that is installed
              */
@@ -1256,6 +1441,55 @@ declare namespace Components {
              */
             _manifest?: string /* uuid */[];
         }
+        /**
+         * Review entry including app ownership info, used by internal admin endpoints
+         */
+        export interface InternalReview {
+            /**
+             * Version of the app that is under review
+             */
+            version?: string;
+            /**
+             * Status of the review
+             */
+            review_status?: "approved" | "rejected" | "pending";
+            /**
+             * Timestamp of the review
+             */
+            requested_at?: string;
+            /**
+             * User ID of the reviewer
+             */
+            requested_by?: string;
+            /**
+             * Email of the technical contact
+             */
+            technical_contact?: string;
+            /**
+             * Email of the marketing contact
+             */
+            marketing_contact?: string;
+            /**
+             * URL of the demo
+             */
+            demo_url?: string;
+            /**
+             * ID of the app configuration
+             */
+            app_id?: string;
+            /**
+             * Organization ID of the app owner
+             */
+            org_id?: string;
+            /**
+             * Identity of the internal reviewer who approved the review
+             */
+            reviewed_by?: string;
+            /**
+             * Timestamp of the approval
+             */
+            reviewed_at?: string;
+        }
         export interface JourneyBlockComponent {
             component_type: "CUSTOM_JOURNEY_BLOCK";
             configuration: JourneyBlockConfig;
@@ -1439,10 +1673,42 @@ declare namespace Components {
              *
              */
             type: "text" | "number" | "boolean" | "secret" | "object";
+            /**
+             * Write-only, server-side only value — like a sensitive environment variable
+             * (app-level options only). Sensitive values are never serialized in any response;
+             * they are resolvable only via server-side channels (API proxy injection, function
+             * `secrets` allowlist, the internal options/resolve endpoint). Non-sensitive values
+             * are readable wherever the app runs, including the end-customer browser (journey and
+             * portal runtime). Forced to true for `secret`-touching options. Default: false.
+             *
+             */
+            sensitive?: boolean;
+            /**
+             * Serialized instead of `value` for sensitive options (secrets): true when a
+             * value is stored.
+             *
+             */
+            configured?: boolean;
+            /**
+             * Compatibility marker: this option is declared at app level and folded back
+             * into the component's options so existing consumers (journey runtime, portal
+             * blocks, older services) keep working unchanged. New consumers should read
+             * app-level options from the installation's `options` array instead.
+             *
+             */
+            lifted?: boolean;
+            /**
+             * Timestamp of the last value change. Only returned for sensitive options
+             * (alongside `configured`) so installers can see when a secret was last rotated.
+             *
+             */
+            value_updated_at?: string;
         }
         export interface OptionsRef {
             /**
-             * ID of the component these values are for
+             * ID of the component these values are for. Use the sentinel `$app` for
+             * app-level option values (options declared at the manifest top level).
+             *
              */
             component_id: string;
             options: Option[];
@@ -2643,6 +2909,18 @@ declare namespace Components {
                 billing_frequency?: /* How often the subscription is billed */ BillingFrequency;
             };
             components: BaseComponent[];
+            /**
+             * Server-side functions of the app, including scheduled functions
+             */
+            functions?: /**
+             * A named server-side function belonging to the app. Runs in the epilot code-execution sandbox with an installation-scoped app token. Functions with a schedule are executed automatically once per installation.
+             *
+             */
+            FunctionDefinition[];
+            /**
+             * App-level option declarations (with sensitivity) of this version
+             */
+            options?: /* Options for the component configuration */ Options[];
             /**
              * Flag to indicate if the app is in beta.
              */
@@ -2725,28 +3003,6 @@ declare namespace Components {
              */
             key: string;
         }
-        export interface SandboxCustomActionConfig {
-            /**
-             * Name of the custom action
-             */
-            name?: string;
-            /**
-             * Description of the custom action
-             */
-            description?: string;
-            /**
-             * Wait for callback_url to be called before completing the action
-             */
-            wait_for_callback?: boolean;
-            type: "sandbox";
-            sandbox_settings?: {
-                /**
-                 * JavaScript code to execute for the sandbox action. Maximum size: 300KB (hard limit). Code is stored as raw JavaScript and will be syntax-validated on save. Security restrictions: eval() and Function() constructor are not allowed.
-                 *
-                 */
-                code?: string;
-            };
-        }
         export interface TextArg {
             type?: "text";
         }
@@ -3342,6 +3598,29 @@ declare namespace Paths {
             }
         }
     }
+    namespace ResolveOptions {
+        namespace Parameters {
+            export type AppId = string;
+        }
+        export interface PathParameters {
+            appId: Parameters.AppId;
+        }
+        export interface RequestBody {
+            /**
+             * Narrow the response to these option keys
+             */
+            keys?: string[];
+        }
+        namespace Responses {
+            export interface $200 {
+                options?: /* Options for the component configuration */ Components.Schemas.Options[];
+            }
+            export interface $403 {
+            }
+            export interface $404 {
+            }
+        }
+    }
     namespace Uninstall {
         namespace Parameters {
             export type AppId = string;
@@ -3395,12 +3674,18 @@ declare namespace Paths {
             export type AppId = string;
             export type Path = string;
             export type ProxyName = string;
+            export interface Query {
+                [name: string]: any;
+            }
         }
         export interface PathParameters {
             appId: Parameters.AppId;
             proxyName: Parameters.ProxyName;
             path: Parameters.Path;
         }
+        export interface QueryParameters {
+            query?: Parameters.Query;
+        }
     }
 }
 
@@ -3697,6 +3982,16 @@ export interface OperationMethods {
     data?: any,
     config?: AxiosRequestConfig  
   ): OperationResponse<Paths.PromoteVersion.Responses.$200>
+  /**
+   * resolveOptions - resolveOptions
+   * 
+   * Resolve the effective app-level options of an installation, including decrypted sensitive values (secrets). This endpoint accepts epilot internal-auth tokens exclusively (internal service calls, e.g. automation-workers or the customer portal API) — no user token, API key, or app token can call it, regardless of roles. Every call is audit-logged with the caller identity.
+   */
+  'resolveOptions'(
+    parameters?: Parameters<Paths.ResolveOptions.PathParameters> | null,
+    data?: Paths.ResolveOptions.RequestBody,
+    config?: AxiosRequestConfig  
+  ): OperationResponse<Paths.ResolveOptions.Responses.$200>
   /**
    * ingestEvent - ingestEvent
    * 
@@ -3713,7 +4008,7 @@ export interface OperationMethods {
    * Forward a GET request to a registered proxy target from a public-facing component (e.g. journey blocks)
    */
   'publicProxyGet'(
-    parameters?: Parameters<Paths.V1PublicApp$AppIdProxy$ProxyName$Path.PathParameters> | null,
+    parameters?: Parameters<Paths.V1PublicApp$AppIdProxy$ProxyName$Path.QueryParameters & Paths.V1PublicApp$AppIdProxy$ProxyName$Path.PathParameters> | null,
     data?: any,
     config?: AxiosRequestConfig  
   ): OperationResponse<Paths.PublicProxyGet.Responses.$200>
@@ -3723,7 +4018,7 @@ export interface OperationMethods {
    * Forward a PUT request to a registered proxy target from a public-facing component
    */
   'publicProxyPut'(
-    parameters?: Parameters<Paths.V1PublicApp$AppIdProxy$ProxyName$Path.PathParameters> | null,
+    parameters?: Parameters<Paths.V1PublicApp$AppIdProxy$ProxyName$Path.QueryParameters & Paths.V1PublicApp$AppIdProxy$ProxyName$Path.PathParameters> | null,
     data?: Paths.PublicProxyPut.RequestBody,
     config?: AxiosRequestConfig  
   ): OperationResponse<Paths.PublicProxyPut.Responses.$200>
@@ -3733,7 +4028,7 @@ export interface OperationMethods {
    * Forward a POST request to a registered proxy target from a public-facing component (e.g. journey blocks)
    */
   'publicProxyPost'(
-    parameters?: Parameters<Paths.V1PublicApp$AppIdProxy$ProxyName$Path.PathParameters> | null,
+    parameters?: Parameters<Paths.V1PublicApp$AppIdProxy$ProxyName$Path.QueryParameters & Paths.V1PublicApp$AppIdProxy$ProxyName$Path.PathParameters> | null,
     data?: Paths.PublicProxyPost.RequestBody,
     config?: AxiosRequestConfig  
   ): OperationResponse<Paths.PublicProxyPost.Responses.$200>
@@ -3743,7 +4038,7 @@ export interface OperationMethods {
    * Forward a PATCH request to a registered proxy target from a public-facing component
    */
   'publicProxyPatch'(
-    parameters?: Parameters<Paths.V1PublicApp$AppIdProxy$ProxyName$Path.PathParameters> | null,
+    parameters?: Parameters<Paths.V1PublicApp$AppIdProxy$ProxyName$Path.QueryParameters & Paths.V1PublicApp$AppIdProxy$ProxyName$Path.PathParameters> | null,
     data?: Paths.PublicProxyPatch.RequestBody,
     config?: AxiosRequestConfig  
   ): OperationResponse<Paths.PublicProxyPatch.Responses.$200>
@@ -3753,7 +4048,7 @@ export interface OperationMethods {
    * Forward a DELETE request to a registered proxy target from a public-facing component
    */
   'publicProxyDelete'(
-    parameters?: Parameters<Paths.V1PublicApp$AppIdProxy$ProxyName$Path.PathParameters> | null,
+    parameters?: Parameters<Paths.V1PublicApp$AppIdProxy$ProxyName$Path.QueryParameters & Paths.V1PublicApp$AppIdProxy$ProxyName$Path.PathParameters> | null,
     data?: any,
     config?: AxiosRequestConfig  
   ): OperationResponse<Paths.PublicProxyDelete.Responses.$200>
@@ -4087,6 +4382,18 @@ export interface PathsDictionary {
       config?: AxiosRequestConfig  
     ): OperationResponse<Paths.PromoteVersion.Responses.$200>
   }
+  ['/v1/app/{appId}/options/resolve']: {
+    /**
+     * resolveOptions - resolveOptions
+     * 
+     * Resolve the effective app-level options of an installation, including decrypted sensitive values (secrets). This endpoint accepts epilot internal-auth tokens exclusively (internal service calls, e.g. automation-workers or the customer portal API) — no user token, API key, or app token can call it, regardless of roles. Every call is audit-logged with the caller identity.
+     */
+    'post'(
+      parameters?: Parameters<Paths.ResolveOptions.PathParameters> | null,
+      data?: Paths.ResolveOptions.RequestBody,
+      config?: AxiosRequestConfig  
+    ): OperationResponse<Paths.ResolveOptions.Responses.$200>
+  }
   ['/v1/app-events']: {
     /**
      * ingestEvent - ingestEvent
@@ -4106,7 +4413,7 @@ export interface PathsDictionary {
      * Forward a GET request to a registered proxy target from a public-facing component (e.g. journey blocks)
      */
     'get'(
-      parameters?: Parameters<Paths.V1PublicApp$AppIdProxy$ProxyName$Path.PathParameters> | null,
+      parameters?: Parameters<Paths.V1PublicApp$AppIdProxy$ProxyName$Path.QueryParameters & Paths.V1PublicApp$AppIdProxy$ProxyName$Path.PathParameters> | null,
       data?: any,
       config?: AxiosRequestConfig  
     ): OperationResponse<Paths.PublicProxyGet.Responses.$200>
@@ -4116,7 +4423,7 @@ export interface PathsDictionary {
      * Forward a POST request to a registered proxy target from a public-facing component (e.g. journey blocks)
      */
     'post'(
-      parameters?: Parameters<Paths.V1PublicApp$AppIdProxy$ProxyName$Path.PathParameters> | null,
+      parameters?: Parameters<Paths.V1PublicApp$AppIdProxy$ProxyName$Path.QueryParameters & Paths.V1PublicApp$AppIdProxy$ProxyName$Path.PathParameters> | null,
       data?: Paths.PublicProxyPost.RequestBody,
       config?: AxiosRequestConfig  
     ): OperationResponse<Paths.PublicProxyPost.Responses.$200>
@@ -4126,7 +4433,7 @@ export interface PathsDictionary {
      * Forward a PUT request to a registered proxy target from a public-facing component
      */
     'put'(
-      parameters?: Parameters<Paths.V1PublicApp$AppIdProxy$ProxyName$Path.PathParameters> | null,
+      parameters?: Parameters<Paths.V1PublicApp$AppIdProxy$ProxyName$Path.QueryParameters & Paths.V1PublicApp$AppIdProxy$ProxyName$Path.PathParameters> | null,
       data?: Paths.PublicProxyPut.RequestBody,
       config?: AxiosRequestConfig  
     ): OperationResponse<Paths.PublicProxyPut.Responses.$200>
@@ -4136,7 +4443,7 @@ export interface PathsDictionary {
      * Forward a PATCH request to a registered proxy target from a public-facing component
      */
     'patch'(
-      parameters?: Parameters<Paths.V1PublicApp$AppIdProxy$ProxyName$Path.PathParameters> | null,
+      parameters?: Parameters<Paths.V1PublicApp$AppIdProxy$ProxyName$Path.QueryParameters & Paths.V1PublicApp$AppIdProxy$ProxyName$Path.PathParameters> | null,
       data?: Paths.PublicProxyPatch.RequestBody,
       config?: AxiosRequestConfig  
     ): OperationResponse<Paths.PublicProxyPatch.Responses.$200>
@@ -4146,7 +4453,7 @@ export interface PathsDictionary {
      * Forward a DELETE request to a registered proxy target from a public-facing component
      */
     'delete'(
-      parameters?: Parameters<Paths.V1PublicApp$AppIdProxy$ProxyName$Path.PathParameters> | null,
+      parameters?: Parameters<Paths.V1PublicApp$AppIdProxy$ProxyName$Path.QueryParameters & Paths.V1PublicApp$AppIdProxy$ProxyName$Path.PathParameters> | null,
       data?: any,
       config?: AxiosRequestConfig  
     ): OperationResponse<Paths.PublicProxyDelete.Responses.$200>
@@ -4192,8 +4499,11 @@ export type ExternalProductCatalogComponent = Components.Schemas.ExternalProduct
 export type ExternalProductCatalogConfig = Components.Schemas.ExternalProductCatalogConfig;
 export type ExternalProductCatalogHookProductRecommendations = Components.Schemas.ExternalProductCatalogHookProductRecommendations;
 export type ExternalProductCatalogHookProducts = Components.Schemas.ExternalProductCatalogHookProducts;
+export type FunctionDefinition = Components.Schemas.FunctionDefinition;
+export type FunctionRefCustomActionConfig = Components.Schemas.FunctionRefCustomActionConfig;
 export type Grants = Components.Schemas.Grants;
 export type Installation = Components.Schemas.Installation;
+export type InternalReview = Components.Schemas.InternalReview;
 export type JourneyBlockComponent = Components.Schemas.JourneyBlockComponent;
 export type JourneyBlockComponentArgs = Components.Schemas.JourneyBlockComponentArgs;
 export type JourneyBlockConfig = Components.Schemas.JourneyBlockConfig;
@@ -4229,6 +4539,5 @@ export type RawEvents = Components.Schemas.RawEvents;
 export type Review = Components.Schemas.Review;
 export type Role = Components.Schemas.Role;
 export type S3Reference = Components.Schemas.S3Reference;
-export type SandboxCustomActionConfig = Components.Schemas.SandboxCustomActionConfig;
 export type TextArg = Components.Schemas.TextArg;
 export type TranslatedString = Components.Schemas.TranslatedString;

package/dist/openapi.json

@@ -1438,6 +1438,70 @@
         }
       }
     },
+    "/v1/app/{appId}/options/resolve": {
+      "post": {
+        "summary": "resolveOptions",
+        "description": "Resolve the effective app-level options of an installation, including decrypted sensitive values (secrets). This endpoint accepts epilot internal-auth tokens exclusively (internal service calls, e.g. automation-workers or the customer portal API) — no user token, API key, or app token can call it, regardless of roles. Every call is audit-logged with the caller identity.",
+        "operationId": "resolveOptions",
+        "tags": [
+          "App Installation"
+        ],
+        "parameters": [
+          {
+            "name": "appId",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            }
+          }
+        ],
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": {
+                "type": "object",
+                "properties": {
+                  "keys": {
+                    "type": "array",
+                    "items": {
+                      "type": "string"
+                    },
+                    "description": "Narrow the response to these option keys"
+                  }
+                }
+              }
+            }
+          }
+        },
+        "responses": {
+          "200": {
+            "description": "Effective options with resolved values",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "type": "object",
+                  "properties": {
+                    "options": {
+                      "type": "array",
+                      "items": {
+                        "$ref": "#/components/schemas/Options"
+                      }
+                    }
+                  }
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "Caller is not authenticated with an internal-auth token"
+          },
+          "404": {
+            "description": "App installation not found"
+          }
+        }
+      }
+    },
     "/v1/app-events": {
       "post": {
         "summary": "ingestEvent",
@@ -1501,6 +1565,18 @@
             "type": "string"
           },
           "description": "Path to forward to the proxy target"
+        },
+        {
+          "name": "query",
+          "in": "query",
+          "required": false,
+          "style": "form",
+          "explode": true,
+          "schema": {
+            "type": "object",
+            "additionalProperties": true
+          },
+          "description": "Free-form query parameters, forwarded unchanged to the proxy target"
         }
       ],
       "get": {
@@ -1812,6 +1888,20 @@
                 },
                 "grants": {
                   "$ref": "#/components/schemas/Grants"
+                },
+                "functions": {
+                  "type": "array",
+                  "items": {
+                    "$ref": "#/components/schemas/FunctionDefinition"
+                  },
+                  "description": "Replaces the full set of server-side functions for this version"
+                },
+                "options": {
+                  "type": "array",
+                  "items": {
+                    "$ref": "#/components/schemas/Options"
+                  },
+                  "description": "Replaces the full set of app-level option declarations for this version.\nOption keys must be unique app-wide; `secret`-touching options are always\nsensitive and must not declare `sensitive: false`.\n"
                 }
               }
             }
@@ -1965,6 +2055,25 @@
               "object"
             ],
             "description": "The type of this option. `object` declares a structured value whose fields are listed\nunder `fields`. Combine with `repeatable: true` to express a list of these objects.\n"
+          },
+          "sensitive": {
+            "type": "boolean",
+            "description": "Write-only, server-side only value — like a sensitive environment variable\n(app-level options only). Sensitive values are never serialized in any response;\nthey are resolvable only via server-side channels (API proxy injection, function\n`secrets` allowlist, the internal options/resolve endpoint). Non-sensitive values\nare readable wherever the app runs, including the end-customer browser (journey and\nportal runtime). Forced to true for `secret`-touching options. Default: false.\n"
+          },
+          "configured": {
+            "type": "boolean",
+            "readOnly": true,
+            "description": "Serialized instead of `value` for sensitive options (secrets): true when a\nvalue is stored.\n"
+          },
+          "lifted": {
+            "type": "boolean",
+            "readOnly": true,
+            "description": "Compatibility marker: this option is declared at app level and folded back\ninto the component's options so existing consumers (journey runtime, portal\nblocks, older services) keep working unchanged. New consumers should read\napp-level options from the installation's `options` array instead.\n"
+          },
+          "value_updated_at": {
+            "type": "string",
+            "readOnly": true,
+            "description": "Timestamp of the last value change. Only returned for sensitive options\n(alongside `configured`) so installers can see when a secret was last rotated.\n"
           }
         }
       },
@@ -2029,7 +2138,7 @@
         "properties": {
           "component_id": {
             "type": "string",
-            "description": "ID of the component these values are for"
+            "description": "ID of the component these values are for. Use the sentinel `$app` for\napp-level option values (options declared at the manifest top level).\n"
           },
           "options": {
             "type": "array",
@@ -2069,10 +2178,87 @@
           "CUSTOM_CAPABILITY",
           "EXTERNAL_PRODUCT_CATALOG",
           "CUSTOM_PAGE",
-          "API_PROXY"
+          "API_PROXY",
+          "APP_FUNCTION"
         ],
         "description": "Type of app component"
       },
+      "FunctionDefinition": {
+        "type": "object",
+        "description": "A named server-side function belonging to the app. Runs in the epilot code-execution sandbox with an installation-scoped app token. Functions with a schedule are executed automatically once per installation.\n",
+        "required": [
+          "name",
+          "type",
+          "code"
+        ],
+        "properties": {
+          "name": {
+            "type": "string",
+            "description": "Unique function name within the app",
+            "pattern": "^[a-z0-9][a-z0-9-]{0,63}$"
+          },
+          "type": {
+            "type": "string",
+            "enum": [
+              "workflow",
+              "scheduled"
+            ],
+            "description": "Where the function can be used. `workflow` functions are referenced by CUSTOM_FLOW_ACTION components (type `function`) and run with entity context. `scheduled` functions run automatically per installation on their cron schedule.\n"
+          },
+          "label": {
+            "allOf": [
+              {
+                "description": "Human-readable display name of the function, shown to installing organizations (e.g. in the scheduled-functions summary)\n"
+              },
+              {
+                "$ref": "#/components/schemas/TranslatedString"
+              }
+            ]
+          },
+          "description": {
+            "allOf": [
+              {
+                "description": "Description of the function"
+              },
+              {
+                "$ref": "#/components/schemas/TranslatedString"
+              }
+            ]
+          },
+          "code": {
+            "type": "string",
+            "maxLength": 307200,
+            "description": "JavaScript code to execute. Must declare a top-level `async function handler(input, context)`. Maximum size: 300KB (hard limit). Security restrictions: eval() and Function() constructor are not allowed.\n"
+          },
+          "schedule": {
+            "type": "string",
+            "maxLength": 100,
+            "description": "Cron trigger for the function, executed once per installation. Standard 5-field cron expression (e.g. \"0 3 * * *\") or rate expression (e.g. \"rate(30 minutes)\"). Minimum interval: 15 minutes. Scheduled runs are limited to 60 seconds.\n",
+            "example": "rate(30 minutes)"
+          },
+          "schedule_timezone": {
+            "type": "string",
+            "description": "IANA timezone the cron expression is evaluated in",
+            "default": "Europe/Berlin"
+          },
+          "schedule_overlap": {
+            "type": "string",
+            "enum": [
+              "skip"
+            ],
+            "default": "skip",
+            "description": "Behavior when the previous scheduled run is still active"
+          },
+          "secrets": {
+            "type": "array",
+            "items": {
+              "type": "string"
+            },
+            "deprecated": true,
+            "description": "DEPRECATED and ignored — functions receive the app's full effective option keyspace (sensitive values included) via input.app_options. Kept for manifest compatibility.\n"
+          }
+        }
+      },
       "Author": {
         "type": "object",
         "required": [
@@ -2159,6 +2345,13 @@
             },
             "description": "List of options for the app component"
           },
+          "uses_options": {
+            "type": "array",
+            "items": {
+              "type": "string"
+            },
+            "description": "Keys of app-level options this component uses. Narrows which options are\nfolded back into `options` for legacy consumers (e.g. which values a journey\nblock receives in its public args) — a scoping hint, never a security\nboundary. Stamped automatically by the component-options migration; may also\nbe declared by the app developer.\n"
+          },
           "surfaces": {
             "type": "object"
           }
@@ -2486,7 +2679,7 @@
           }
         ]
       },
-      "SandboxCustomActionConfig": {
+      "FunctionRefCustomActionConfig": {
         "allOf": [
           {
             "$ref": "#/components/schemas/BaseCustomActionConfig"
@@ -2497,41 +2690,37 @@
               "type": {
                 "type": "string",
                 "enum": [
-                  "sandbox"
+                  "function"
                 ]
               },
-              "sandbox_settings": {
-                "type": "object",
-                "properties": {
-                  "code": {
-                    "type": "string",
-                    "description": "JavaScript code to execute for the sandbox action. Maximum size: 300KB (hard limit). Code is stored as raw JavaScript and will be syntax-validated on save. Security restrictions: eval() and Function() constructor are not allowed.\n",
-                    "maxLength": 307200
-                  }
-                }
+              "function_name": {
+                "type": "string",
+                "description": "Name of a `workflow`-type function of the same app version. The component provides the org-facing contract (name, options, config surface); the referenced function provides the code.\n"
               }
             },
             "required": [
-              "type"
+              "type",
+              "function_name"
             ]
           }
         ]
       },
       "CustomFlowConfig": {
         "type": "object",
+        "description": "Configuration of a flow action component. `external_integration` calls an external HTTP endpoint; `function` runs a workflow-type app function in the epilot sandbox.\n",
         "oneOf": [
           {
             "$ref": "#/components/schemas/ExternalIntegrationCustomActionConfig"
           },
           {
-            "$ref": "#/components/schemas/SandboxCustomActionConfig"
+            "$ref": "#/components/schemas/FunctionRefCustomActionConfig"
           }
         ],
         "discriminator": {
           "propertyName": "type",
           "mapping": {
             "external_integration": "#/components/schemas/ExternalIntegrationCustomActionConfig",
-            "sandbox": "#/components/schemas/SandboxCustomActionConfig"
+            "function": "#/components/schemas/FunctionRefCustomActionConfig"
           }
         }
       },
@@ -4563,6 +4752,39 @@
           }
         }
       },
+      "InternalReview": {
+        "description": "Review entry including app ownership info, used by internal admin endpoints",
+        "allOf": [
+          {
+            "$ref": "#/components/schemas/Review"
+          },
+          {
+            "type": "object",
+            "properties": {
+              "app_id": {
+                "type": "string",
+                "description": "ID of the app configuration",
+                "readOnly": true
+              },
+              "org_id": {
+                "type": "string",
+                "description": "Organization ID of the app owner",
+                "readOnly": true
+              },
+              "reviewed_by": {
+                "type": "string",
+                "description": "Identity of the internal reviewer who approved the review",
+                "readOnly": true
+              },
+              "reviewed_at": {
+                "type": "string",
+                "description": "Timestamp of the approval",
+                "readOnly": true
+              }
+            }
+          }
+        ]
+      },
       "ConfigurationMetadata": {
         "description": "Basic metadata about your app configuration which does not get versioned",
         "type": "object",
@@ -4708,6 +4930,22 @@
             },
             "minItems": 0
           },
+          "functions": {
+            "type": "array",
+            "items": {
+              "$ref": "#/components/schemas/FunctionDefinition"
+            },
+            "minItems": 0,
+            "description": "Server-side functions of the app, including scheduled functions"
+          },
+          "options": {
+            "type": "array",
+            "items": {
+              "$ref": "#/components/schemas/Options"
+            },
+            "minItems": 0,
+            "description": "App-level option declarations (with sensitivity) of this version"
+          },
           "visibility": {
             "type": "string",
             "enum": [
@@ -4816,10 +5054,11 @@
             "enum": [
               "header",
               "bearer",
+              "basic",
               "oauth2",
               "none"
             ],
-            "description": "Authentication strategy"
+            "description": "Authentication strategy. 'basic' sends an HTTP Basic Authorization header built server-side from the 'username' and 'password' component options."
           },
           "auth_header": {
             "type": "string",
@@ -4915,6 +5154,11 @@
             "description": "Name of the app",
             "readOnly": true
           },
+          "icon_url": {
+            "type": "string",
+            "description": "Public URL of the app logo, if one has been uploaded",
+            "readOnly": true
+          },
           "option_values": {
             "type": "array",
             "items": {
@@ -4931,6 +5175,22 @@
             "minLength": 0,
             "readOnly": true
           },
+          "functions": {
+            "description": "Server-side functions of the installed version, including scheduled functions",
+            "type": "array",
+            "items": {
+              "$ref": "#/components/schemas/FunctionDefinition"
+            },
+            "readOnly": true
+          },
+          "options": {
+            "description": "Effective app-level options of the installation: declared top-level options plus\ncomponent-level options lifted to the app keyspace, each with its configured\n`value`. Values of sensitive options (secrets) are never included — they carry\n`configured` and `value_updated_at` instead.\n",
+            "type": "array",
+            "items": {
+              "$ref": "#/components/schemas/Options"
+            },
+            "readOnly": true
+          },
           "installed_version": {
             "type": "string",
             "description": "Version of the app that is installed",
@@ -5038,6 +5298,22 @@
             },
             "minItems": 0
           },
+          "functions": {
+            "type": "array",
+            "items": {
+              "$ref": "#/components/schemas/FunctionDefinition"
+            },
+            "minItems": 0,
+            "description": "Server-side functions of the app, including scheduled functions"
+          },
+          "options": {
+            "type": "array",
+            "items": {
+              "$ref": "#/components/schemas/Options"
+            },
+            "minItems": 0,
+            "description": "App-level option declarations (with sensitivity) of this version"
+          },
           "is_beta": {
             "type": "boolean",
             "description": "Flag to indicate if the app is in beta.",
@@ -5288,6 +5564,11 @@
               "correlation_id": {
                 "type": "string",
                 "description": "Filter by correlation ID for tracing"
+              },
+              "search": {
+                "type": "string",
+                "maxLength": 200,
+                "description": "Case-insensitive substring match over event details and component id"
               }
             }
           },
@@ -5338,6 +5619,11 @@
                 "minimum": 1,
                 "maximum": 1000,
                 "default": 100
+              },
+              "before": {
+                "type": "string",
+                "format": "date-time",
+                "description": "Cursor: only return events strictly older than this timestamp. Use the timestamp of the last received event to fetch the next page; more efficient than increasing page/page_size.\n"
               }
             }
           },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@epilot/app-client",
-  "version": "0.13.7",
+  "version": "0.14.1",
   "description": "JavaScript client library for the epilot App API",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",