@epilot/app-client 0.13.8 → 0.15.0

package/dist/openapi.d.ts

@@ -8,6 +8,12 @@ import type {
 
 declare namespace Components {
     namespace RequestBodies {
+        export interface CloneVersionRequest {
+            /**
+             * Short description of what the new version will change
+             */
+            changelog?: string;
+        }
         export interface CreateBundlePresignedRequest {
             /**
              * Version of the app
@@ -105,6 +111,25 @@ declare namespace Components {
              */
             role_id?: string | null;
             grants?: /* Required grants for the app in order to call APIs for the installing tenant */ Schemas.Grants;
+            /**
+             * Replaces the full set of server-side functions for this version
+             */
+            functions?: /**
+             * A named server-side function belonging to the app. Runs in the epilot code-execution sandbox with an installation-scoped app token. Functions with a schedule are executed automatically once per installation.
+             *
+             */
+            Schemas.FunctionDefinition[];
+            /**
+             * Replaces the full set of app-level option declarations for this version.
+             * Option keys must be unique app-wide; `secret`-touching options are always
+             * sensitive and must not declare `sensitive: false`.
+             *
+             */
+            options?: /* An option declaration — a setting the installing org fills in. Declared at app level. */ Schemas.Options[];
+            /**
+             * Short description of what changed in this version
+             */
+            changelog?: string;
         }
         export type UpsertComponentRequest = Schemas.BaseComponent;
     }
@@ -155,9 +180,9 @@ declare namespace Components {
              */
             target: string; // ^https://
             /**
-             * Authentication strategy
+             * Authentication strategy. 'basic' sends an HTTP Basic Authorization header built server-side from the 'username' and 'password' component options.
              */
-            auth_type: "header" | "bearer" | "oauth2" | "none";
+            auth_type: "header" | "bearer" | "basic" | "oauth2" | "none";
             /**
              * Header name for 'header' auth type
              */
@@ -276,7 +301,16 @@ declare namespace Components {
             /**
              * List of options for the app component
              */
-            options?: /* Options for the component configuration */ Options[];
+            options?: /* An option declaration — a setting the installing org fills in. Declared at app level. */ Options[];
+            /**
+             * Keys of app-level options this component uses. Narrows which options are
+             * folded back into `options` for legacy consumers (e.g. which values a journey
+             * block receives in its public args) — a scoping hint, never a security
+             * boundary. Stamped automatically by the component-options migration; may also
+             * be declared by the app developer.
+             *
+             */
+            uses_options?: string[];
             surfaces?: {
                 [key: string]: any;
             };
@@ -315,7 +349,16 @@ declare namespace Components {
             /**
              * List of options for the app component
              */
-            options?: /* Options for the component configuration */ Options[];
+            options?: /* An option declaration — a setting the installing org fills in. Declared at app level. */ Options[];
+            /**
+             * Keys of app-level options this component uses. Narrows which options are
+             * folded back into `options` for legacy consumers (e.g. which values a journey
+             * block receives in its public args) — a scoping hint, never a security
+             * boundary. Stamped automatically by the component-options migration; may also
+             * be declared by the app developer.
+             *
+             */
+            uses_options?: string[];
             surfaces?: {
                 [key: string]: any;
             };
@@ -504,7 +547,7 @@ declare namespace Components {
         /**
          * Type of app component
          */
-        export type ComponentType = "CUSTOM_JOURNEY_BLOCK" | "CUSTOM_PORTAL_BLOCK" | "PORTAL_EXTENSION" | "CUSTOM_FLOW_ACTION" | "ERP_INFORM_TOOLKIT" | "CUSTOM_CAPABILITY" | "EXTERNAL_PRODUCT_CATALOG" | "CUSTOM_PAGE" | "API_PROXY";
+        export type ComponentType = "CUSTOM_JOURNEY_BLOCK" | "CUSTOM_PORTAL_BLOCK" | "PORTAL_EXTENSION" | "CUSTOM_FLOW_ACTION" | "ERP_INFORM_TOOLKIT" | "CUSTOM_CAPABILITY" | "EXTERNAL_PRODUCT_CATALOG" | "CUSTOM_PAGE" | "API_PROXY" | "APP_FUNCTION";
         /**
          * Configuration of the published app
          */
@@ -612,6 +655,18 @@ declare namespace Components {
                 updated_by?: string;
             };
             components: BaseComponent[];
+            /**
+             * Server-side functions of the app, including scheduled functions
+             */
+            functions?: /**
+             * A named server-side function belonging to the app. Runs in the epilot code-execution sandbox with an installation-scoped app token. Functions with a schedule are executed automatically once per installation.
+             *
+             */
+            FunctionDefinition[];
+            /**
+             * App-level option declarations (with sensitivity) of this version
+             */
+            options?: /* An option declaration — a setting the installing org fills in. Declared at app level. */ Options[];
             /**
              * Visibility of the app version
              */
@@ -790,6 +845,18 @@ declare namespace Components {
              */
             owner_org_id: string;
             components: BaseComponent[];
+            /**
+             * Server-side functions of the app, including scheduled functions
+             */
+            functions?: /**
+             * A named server-side function belonging to the app. Runs in the epilot code-execution sandbox with an installation-scoped app token. Functions with a schedule are executed automatically once per installation.
+             *
+             */
+            FunctionDefinition[];
+            /**
+             * App-level option declarations (with sensitivity) of this version
+             */
+            options?: /* An option declaration — a setting the installing org fills in. Declared at app level. */ Options[];
             /**
              * Visibility of the app version
              */
@@ -869,12 +936,24 @@ declare namespace Components {
         }
         export interface CustomFlowActionComponent {
             component_type: "CUSTOM_FLOW_ACTION";
-            configuration: CustomFlowConfig;
+            configuration: /**
+             * Configuration of a flow action component. `external_integration` calls an external HTTP endpoint; `function` runs a workflow-type app function in the epilot sandbox.
+             *
+             */
+            CustomFlowConfig;
             surfaces?: {
                 flow_action_config?: AppBridgeSurfaceConfig;
             };
         }
-        export type CustomFlowConfig = ExternalIntegrationCustomActionConfig | SandboxCustomActionConfig;
+        /**
+         * Configuration of a flow action component. `external_integration` calls an external HTTP endpoint; `function` runs a workflow-type app function in the epilot sandbox.
+         *
+         */
+        export type CustomFlowConfig = /**
+         * Configuration of a flow action component. `external_integration` calls an external HTTP endpoint; `function` runs a workflow-type app function in the epilot sandbox.
+         *
+         */
+        ExternalIntegrationCustomActionConfig | FunctionRefCustomActionConfig;
         export interface CustomPageComponent {
             component_type: "CUSTOM_PAGE";
             configuration: CustomPageConfig;
@@ -997,6 +1076,10 @@ declare namespace Components {
                  * Filter by correlation ID for tracing
                  */
                 correlation_id?: string;
+                /**
+                 * Case-insensitive substring match over event details and component id
+                 */
+                search?: string;
             };
             aggregation?: {
                 /**
@@ -1011,6 +1094,11 @@ declare namespace Components {
             pagination?: {
                 page?: number;
                 page_size?: number;
+                /**
+                 * Cursor: only return events strictly older than this timestamp. Use the timestamp of the last received event to fetch the next page; more efficient than increasing page/page_size.
+                 *
+                 */
+                before?: string; // date-time
             };
             sort?: {
                 field?: "timestamp" | "event_type" | "component_id";
@@ -1176,6 +1264,93 @@ declare namespace Components {
                 };
             };
         }
+        /**
+         * A named server-side function belonging to the app. Runs in the epilot code-execution sandbox with an installation-scoped app token. Functions with a schedule are executed automatically once per installation.
+         *
+         */
+        export interface FunctionDefinition {
+            /**
+             * Unique function name within the app
+             */
+            name: string; // ^[a-z0-9][a-z0-9-]{0,63}$
+            /**
+             * Where the function can be used. `workflow` functions are referenced by CUSTOM_FLOW_ACTION components (type `function`) and run with entity context. `scheduled` functions run automatically per installation on their cron schedule.
+             *
+             */
+            type: "workflow" | "scheduled";
+            /**
+             * Human-readable display name of the function, shown to installing organizations (e.g. in the scheduled-functions summary)
+             *
+             */
+            label?: {
+                /**
+                 * English translation
+                 */
+                en?: string | null;
+                /**
+                 * German translation
+                 */
+                de: string;
+            };
+            /**
+             * Description of the function
+             */
+            description?: {
+                /**
+                 * English translation
+                 */
+                en?: string | null;
+                /**
+                 * German translation
+                 */
+                de: string;
+            };
+            /**
+             * JavaScript code to execute. Must declare a top-level `async function handler(input, context)`. Maximum size: 300KB (hard limit). Security restrictions: eval() and Function() constructor are not allowed.
+             *
+             */
+            code: string;
+            /**
+             * Cron trigger for the function, executed once per installation. Standard 5-field cron expression (e.g. "0 3 * * *") or rate expression (e.g. "rate(30 minutes)"). Minimum interval: 15 minutes. Scheduled runs are limited to 60 seconds.
+             *
+             * example:
+             * rate(30 minutes)
+             */
+            schedule?: string;
+            /**
+             * IANA timezone the cron expression is evaluated in
+             */
+            schedule_timezone?: string;
+            /**
+             * Behavior when the previous scheduled run is still active
+             */
+            schedule_overlap?: "skip";
+            /**
+             * DEPRECATED and ignored — functions receive the app's full effective option keyspace (sensitive values included) via input.app_options. Kept for manifest compatibility.
+             *
+             */
+            secrets?: string[];
+        }
+        export interface FunctionRefCustomActionConfig {
+            /**
+             * Name of the custom action
+             */
+            name?: string;
+            /**
+             * Description of the custom action
+             */
+            description?: string;
+            /**
+             * Wait for callback_url to be called before completing the action
+             */
+            wait_for_callback?: boolean;
+            type: "function";
+            /**
+             * Name of a `workflow`-type function of the same app version. The component provides the org-facing contract (name, options, config surface); the referenced function provides the code.
+             *
+             */
+            function_name: string;
+        }
         /**
          * Required grants for the app in order to call APIs for the installing tenant
          */
@@ -1225,6 +1400,22 @@ declare namespace Components {
              * List of component configurations for the installed version
              */
             components: BaseComponent[];
+            /**
+             * Server-side functions of the installed version, including scheduled functions
+             */
+            functions?: /**
+             * A named server-side function belonging to the app. Runs in the epilot code-execution sandbox with an installation-scoped app token. Functions with a schedule are executed automatically once per installation.
+             *
+             */
+            FunctionDefinition[];
+            /**
+             * Effective app-level options of the installation: declared top-level options plus
+             * component-level options lifted to the app keyspace, each with its configured
+             * `value`. Values of sensitive options (secrets) are never included — they carry
+             * `configured` and `value_updated_at` instead.
+             *
+             */
+            options?: /* An option declaration — a setting the installing org fills in. Declared at app level. */ Options[];
             /**
              * Version of the app that is installed
              */
@@ -1260,6 +1451,55 @@ declare namespace Components {
              */
             _manifest?: string /* uuid */[];
         }
+        /**
+         * Review entry including app ownership info, used by internal admin endpoints
+         */
+        export interface InternalReview {
+            /**
+             * Version of the app that is under review
+             */
+            version?: string;
+            /**
+             * Status of the review
+             */
+            review_status?: "approved" | "rejected" | "pending";
+            /**
+             * Timestamp of the review
+             */
+            requested_at?: string;
+            /**
+             * User ID of the reviewer
+             */
+            requested_by?: string;
+            /**
+             * Email of the technical contact
+             */
+            technical_contact?: string;
+            /**
+             * Email of the marketing contact
+             */
+            marketing_contact?: string;
+            /**
+             * URL of the demo
+             */
+            demo_url?: string;
+            /**
+             * ID of the app configuration
+             */
+            app_id?: string;
+            /**
+             * Organization ID of the app owner
+             */
+            org_id?: string;
+            /**
+             * Identity of the internal reviewer who approved the review
+             */
+            reviewed_by?: string;
+            /**
+             * Timestamp of the approval
+             */
+            reviewed_at?: string;
+        }
         export interface JourneyBlockComponent {
             component_type: "CUSTOM_JOURNEY_BLOCK";
             configuration: JourneyBlockConfig;
@@ -1388,7 +1628,7 @@ declare namespace Components {
             value: any;
         }
         /**
-         * Options for the component configuration
+         * An option declaration — a setting the installing org fills in. Declared at app level.
          */
         export interface Options {
             /**
@@ -1443,10 +1683,42 @@ declare namespace Components {
              *
              */
             type: "text" | "number" | "boolean" | "secret" | "object";
+            /**
+             * Write-only, server-side only value — like a sensitive environment variable
+             * (app-level options only). Sensitive values are never serialized in any response;
+             * they are resolvable only via server-side channels (API proxy injection, function
+             * runs, the internal options/resolve endpoint). Non-sensitive values
+             * are readable wherever the app runs, including the end-customer browser (journey and
+             * portal runtime). Forced to true for `secret`-touching options. Default: false.
+             *
+             */
+            sensitive?: boolean;
+            /**
+             * Serialized instead of `value` for sensitive options (secrets): true when a
+             * value is stored.
+             *
+             */
+            configured?: boolean;
+            /**
+             * Compatibility marker: this option is declared at app level and folded back
+             * into the component's options so existing consumers (journey runtime, portal
+             * blocks, older services) keep working unchanged. New consumers should read
+             * app-level options from the installation's `options` array instead.
+             *
+             */
+            lifted?: boolean;
+            /**
+             * Timestamp of the last value change. Only returned for sensitive options
+             * (alongside `configured`) so installers can see when a secret was last rotated.
+             *
+             */
+            value_updated_at?: string;
         }
         export interface OptionsRef {
             /**
-             * ID of the component these values are for
+             * ID of the component these values are for. Use the sentinel `$app` for
+             * app-level option values (options declared at the manifest top level).
+             *
              */
             component_id: string;
             options: Option[];
@@ -1593,7 +1865,7 @@ declare namespace Components {
              *         { "id": "ht", "label": { "en": "High tariff" }, "aggregation_group": "consumption", "statistical_method": "sum", "unit": "kWh", "color": "primary", "precision": 2 },
              *         ...
              *       ],
-             *       "intervals": ["PT15M", "PT1H", "P1D", "P1M"],
+             *       "intervals": ["PT15M", "PT1H", "P1D", "P1M", "P1Y"],
              *       "data_range": { "from": "2024-01-01T00:00:00Z", "to": "2026-05-01T00:00:00Z" }
              *     }
              *   Each type option carries its own `statistical_method`, which describes the method already applied to that type's data and dictates the chart shape: `sum` is rendered as a bar chart; `min`, `average`, and `max` are rendered as a line chart. A single visualization can therefore mix bar-shaped types with line-shaped types. Defaults to `sum` when omitted.
@@ -1836,7 +2108,7 @@ declare namespace Components {
              * Intervals supported by the API. If omitted, it is assumed that all intervals are supported.
              *
              */
-            intervals?: ("PT15M" | "PT1H" | "P1D" | "P1M")[];
+            intervals?: ("PT15M" | "PT1H" | "P1D" | "P1M" | "P1Y")[];
             auth?: PortalExtensionAuthBlock;
             call: {
                 /**
@@ -2007,7 +2279,7 @@ declare namespace Components {
              * Intervals supported by the API. If omitted, it is assumed that all intervals are supported.
              *
              */
-            intervals?: ("PT15M" | "PT1H" | "P1D" | "P1M")[];
+            intervals?: ("PT15M" | "PT1H" | "P1D" | "P1M" | "P1Y")[];
             auth?: PortalExtensionAuthBlock;
             call: {
                 /**
@@ -2338,7 +2610,7 @@ declare namespace Components {
              * Intervals supported by the API. If omitted, it is assumed that all intervals are supported.
              *
              */
-            intervals?: ("PT15M" | "PT1H" | "P1D" | "P1M")[];
+            intervals?: ("PT15M" | "PT1H" | "P1D" | "P1M" | "P1Y")[];
             auth?: PortalExtensionAuthBlock;
             call: {
                 /**
@@ -2470,7 +2742,7 @@ declare namespace Components {
          *         { "id": "ht", "label": { "en": "High tariff" }, "aggregation_group": "consumption", "statistical_method": "sum", "unit": "kWh", "color": "primary", "precision": 2 },
          *         ...
          *       ],
-         *       "intervals": ["PT15M", "PT1H", "P1D", "P1M"],
+         *       "intervals": ["PT15M", "PT1H", "P1D", "P1M", "P1Y"],
          *       "data_range": { "from": "2024-01-01T00:00:00Z", "to": "2026-05-01T00:00:00Z" }
          *     }
          *   Each type option carries its own `statistical_method`, which describes the method already applied to that type's data and dictates the chart shape: `sum` is rendered as a bar chart; `min`, `average`, and `max` are rendered as a line chart. A single visualization can therefore mix bar-shaped types with line-shaped types. Defaults to `sum` when omitted.
@@ -2647,6 +2919,18 @@ declare namespace Components {
                 billing_frequency?: /* How often the subscription is billed */ BillingFrequency;
             };
             components: BaseComponent[];
+            /**
+             * Server-side functions of the app, including scheduled functions
+             */
+            functions?: /**
+             * A named server-side function belonging to the app. Runs in the epilot code-execution sandbox with an installation-scoped app token. Functions with a schedule are executed automatically once per installation.
+             *
+             */
+            FunctionDefinition[];
+            /**
+             * App-level option declarations (with sensitivity) of this version
+             */
+            options?: /* An option declaration — a setting the installing org fills in. Declared at app level. */ Options[];
             /**
              * Flag to indicate if the app is in beta.
              */
@@ -2729,28 +3013,6 @@ declare namespace Components {
              */
             key: string;
         }
-        export interface SandboxCustomActionConfig {
-            /**
-             * Name of the custom action
-             */
-            name?: string;
-            /**
-             * Description of the custom action
-             */
-            description?: string;
-            /**
-             * Wait for callback_url to be called before completing the action
-             */
-            wait_for_callback?: boolean;
-            type: "sandbox";
-            sandbox_settings?: {
-                /**
-                 * JavaScript code to execute for the sandbox action. Maximum size: 300KB (hard limit). Code is stored as raw JavaScript and will be syntax-validated on save. Security restrictions: eval() and Function() constructor are not allowed.
-                 *
-                 */
-                code?: string;
-            };
-        }
         export interface TextArg {
             type?: "text";
         }
@@ -2778,6 +3040,7 @@ declare namespace Paths {
             sourceVersion: Parameters.SourceVersion;
             targetVersion: Parameters.TargetVersion;
         }
+        export type RequestBody = Components.RequestBodies.CloneVersionRequest;
         namespace Responses {
             export interface $201 {
                 app_id?: string;
@@ -3346,6 +3609,29 @@ declare namespace Paths {
             }
         }
     }
+    namespace ResolveOptions {
+        namespace Parameters {
+            export type AppId = string;
+        }
+        export interface PathParameters {
+            appId: Parameters.AppId;
+        }
+        export interface RequestBody {
+            /**
+             * Narrow the response to these option keys
+             */
+            keys?: string[];
+        }
+        namespace Responses {
+            export interface $200 {
+                options?: /* An option declaration — a setting the installing org fills in. Declared at app level. */ Components.Schemas.Options[];
+            }
+            export interface $403 {
+            }
+            export interface $404 {
+            }
+        }
+    }
     namespace Uninstall {
         namespace Parameters {
             export type AppId = string;
@@ -3399,12 +3685,18 @@ declare namespace Paths {
             export type AppId = string;
             export type Path = string;
             export type ProxyName = string;
+            export interface Query {
+                [name: string]: any;
+            }
         }
         export interface PathParameters {
             appId: Parameters.AppId;
             proxyName: Parameters.ProxyName;
             path: Parameters.Path;
         }
+        export interface QueryParameters {
+            query?: Parameters.Query;
+        }
     }
 }
 
@@ -3638,7 +3930,7 @@ export interface OperationMethods {
    */
   'cloneVersion'(
     parameters?: Parameters<Paths.CloneVersion.PathParameters> | null,
-    data?: any,
+    data?: Paths.CloneVersion.RequestBody,
     config?: AxiosRequestConfig  
   ): OperationResponse<Paths.CloneVersion.Responses.$201>
   /**
@@ -3701,6 +3993,16 @@ export interface OperationMethods {
     data?: any,
     config?: AxiosRequestConfig  
   ): OperationResponse<Paths.PromoteVersion.Responses.$200>
+  /**
+   * resolveOptions - resolveOptions
+   * 
+   * Resolve the effective app-level options of an installation, including decrypted sensitive values (secrets). This endpoint accepts epilot internal-auth tokens exclusively (internal service calls, e.g. automation-workers or the customer portal API) — no user token, API key, or app token can call it, regardless of roles. Every call is audit-logged with the caller identity.
+   */
+  'resolveOptions'(
+    parameters?: Parameters<Paths.ResolveOptions.PathParameters> | null,
+    data?: Paths.ResolveOptions.RequestBody,
+    config?: AxiosRequestConfig  
+  ): OperationResponse<Paths.ResolveOptions.Responses.$200>
   /**
    * ingestEvent - ingestEvent
    * 
@@ -3717,7 +4019,7 @@ export interface OperationMethods {
    * Forward a GET request to a registered proxy target from a public-facing component (e.g. journey blocks)
    */
   'publicProxyGet'(
-    parameters?: Parameters<Paths.V1PublicApp$AppIdProxy$ProxyName$Path.PathParameters> | null,
+    parameters?: Parameters<Paths.V1PublicApp$AppIdProxy$ProxyName$Path.QueryParameters & Paths.V1PublicApp$AppIdProxy$ProxyName$Path.PathParameters> | null,
     data?: any,
     config?: AxiosRequestConfig  
   ): OperationResponse<Paths.PublicProxyGet.Responses.$200>
@@ -3727,7 +4029,7 @@ export interface OperationMethods {
    * Forward a PUT request to a registered proxy target from a public-facing component
    */
   'publicProxyPut'(
-    parameters?: Parameters<Paths.V1PublicApp$AppIdProxy$ProxyName$Path.PathParameters> | null,
+    parameters?: Parameters<Paths.V1PublicApp$AppIdProxy$ProxyName$Path.QueryParameters & Paths.V1PublicApp$AppIdProxy$ProxyName$Path.PathParameters> | null,
     data?: Paths.PublicProxyPut.RequestBody,
     config?: AxiosRequestConfig  
   ): OperationResponse<Paths.PublicProxyPut.Responses.$200>
@@ -3737,7 +4039,7 @@ export interface OperationMethods {
    * Forward a POST request to a registered proxy target from a public-facing component (e.g. journey blocks)
    */
   'publicProxyPost'(
-    parameters?: Parameters<Paths.V1PublicApp$AppIdProxy$ProxyName$Path.PathParameters> | null,
+    parameters?: Parameters<Paths.V1PublicApp$AppIdProxy$ProxyName$Path.QueryParameters & Paths.V1PublicApp$AppIdProxy$ProxyName$Path.PathParameters> | null,
     data?: Paths.PublicProxyPost.RequestBody,
     config?: AxiosRequestConfig  
   ): OperationResponse<Paths.PublicProxyPost.Responses.$200>
@@ -3747,7 +4049,7 @@ export interface OperationMethods {
    * Forward a PATCH request to a registered proxy target from a public-facing component
    */
   'publicProxyPatch'(
-    parameters?: Parameters<Paths.V1PublicApp$AppIdProxy$ProxyName$Path.PathParameters> | null,
+    parameters?: Parameters<Paths.V1PublicApp$AppIdProxy$ProxyName$Path.QueryParameters & Paths.V1PublicApp$AppIdProxy$ProxyName$Path.PathParameters> | null,
     data?: Paths.PublicProxyPatch.RequestBody,
     config?: AxiosRequestConfig  
   ): OperationResponse<Paths.PublicProxyPatch.Responses.$200>
@@ -3757,7 +4059,7 @@ export interface OperationMethods {
    * Forward a DELETE request to a registered proxy target from a public-facing component
    */
   'publicProxyDelete'(
-    parameters?: Parameters<Paths.V1PublicApp$AppIdProxy$ProxyName$Path.PathParameters> | null,
+    parameters?: Parameters<Paths.V1PublicApp$AppIdProxy$ProxyName$Path.QueryParameters & Paths.V1PublicApp$AppIdProxy$ProxyName$Path.PathParameters> | null,
     data?: any,
     config?: AxiosRequestConfig  
   ): OperationResponse<Paths.PublicProxyDelete.Responses.$200>
@@ -4021,7 +4323,7 @@ export interface PathsDictionary {
      */
     'post'(
       parameters?: Parameters<Paths.CloneVersion.PathParameters> | null,
-      data?: any,
+      data?: Paths.CloneVersion.RequestBody,
       config?: AxiosRequestConfig  
     ): OperationResponse<Paths.CloneVersion.Responses.$201>
   }
@@ -4091,6 +4393,18 @@ export interface PathsDictionary {
       config?: AxiosRequestConfig  
     ): OperationResponse<Paths.PromoteVersion.Responses.$200>
   }
+  ['/v1/app/{appId}/options/resolve']: {
+    /**
+     * resolveOptions - resolveOptions
+     * 
+     * Resolve the effective app-level options of an installation, including decrypted sensitive values (secrets). This endpoint accepts epilot internal-auth tokens exclusively (internal service calls, e.g. automation-workers or the customer portal API) — no user token, API key, or app token can call it, regardless of roles. Every call is audit-logged with the caller identity.
+     */
+    'post'(
+      parameters?: Parameters<Paths.ResolveOptions.PathParameters> | null,
+      data?: Paths.ResolveOptions.RequestBody,
+      config?: AxiosRequestConfig  
+    ): OperationResponse<Paths.ResolveOptions.Responses.$200>
+  }
   ['/v1/app-events']: {
     /**
      * ingestEvent - ingestEvent
@@ -4110,7 +4424,7 @@ export interface PathsDictionary {
      * Forward a GET request to a registered proxy target from a public-facing component (e.g. journey blocks)
      */
     'get'(
-      parameters?: Parameters<Paths.V1PublicApp$AppIdProxy$ProxyName$Path.PathParameters> | null,
+      parameters?: Parameters<Paths.V1PublicApp$AppIdProxy$ProxyName$Path.QueryParameters & Paths.V1PublicApp$AppIdProxy$ProxyName$Path.PathParameters> | null,
       data?: any,
       config?: AxiosRequestConfig  
     ): OperationResponse<Paths.PublicProxyGet.Responses.$200>
@@ -4120,7 +4434,7 @@ export interface PathsDictionary {
      * Forward a POST request to a registered proxy target from a public-facing component (e.g. journey blocks)
      */
     'post'(
-      parameters?: Parameters<Paths.V1PublicApp$AppIdProxy$ProxyName$Path.PathParameters> | null,
+      parameters?: Parameters<Paths.V1PublicApp$AppIdProxy$ProxyName$Path.QueryParameters & Paths.V1PublicApp$AppIdProxy$ProxyName$Path.PathParameters> | null,
       data?: Paths.PublicProxyPost.RequestBody,
       config?: AxiosRequestConfig  
     ): OperationResponse<Paths.PublicProxyPost.Responses.$200>
@@ -4130,7 +4444,7 @@ export interface PathsDictionary {
      * Forward a PUT request to a registered proxy target from a public-facing component
      */
     'put'(
-      parameters?: Parameters<Paths.V1PublicApp$AppIdProxy$ProxyName$Path.PathParameters> | null,
+      parameters?: Parameters<Paths.V1PublicApp$AppIdProxy$ProxyName$Path.QueryParameters & Paths.V1PublicApp$AppIdProxy$ProxyName$Path.PathParameters> | null,
       data?: Paths.PublicProxyPut.RequestBody,
       config?: AxiosRequestConfig  
     ): OperationResponse<Paths.PublicProxyPut.Responses.$200>
@@ -4140,7 +4454,7 @@ export interface PathsDictionary {
      * Forward a PATCH request to a registered proxy target from a public-facing component
      */
     'patch'(
-      parameters?: Parameters<Paths.V1PublicApp$AppIdProxy$ProxyName$Path.PathParameters> | null,
+      parameters?: Parameters<Paths.V1PublicApp$AppIdProxy$ProxyName$Path.QueryParameters & Paths.V1PublicApp$AppIdProxy$ProxyName$Path.PathParameters> | null,
       data?: Paths.PublicProxyPatch.RequestBody,
       config?: AxiosRequestConfig  
     ): OperationResponse<Paths.PublicProxyPatch.Responses.$200>
@@ -4150,7 +4464,7 @@ export interface PathsDictionary {
      * Forward a DELETE request to a registered proxy target from a public-facing component
      */
     'delete'(
-      parameters?: Parameters<Paths.V1PublicApp$AppIdProxy$ProxyName$Path.PathParameters> | null,
+      parameters?: Parameters<Paths.V1PublicApp$AppIdProxy$ProxyName$Path.QueryParameters & Paths.V1PublicApp$AppIdProxy$ProxyName$Path.PathParameters> | null,
       data?: any,
       config?: AxiosRequestConfig  
     ): OperationResponse<Paths.PublicProxyDelete.Responses.$200>
@@ -4196,8 +4510,11 @@ export type ExternalProductCatalogComponent = Components.Schemas.ExternalProduct
 export type ExternalProductCatalogConfig = Components.Schemas.ExternalProductCatalogConfig;
 export type ExternalProductCatalogHookProductRecommendations = Components.Schemas.ExternalProductCatalogHookProductRecommendations;
 export type ExternalProductCatalogHookProducts = Components.Schemas.ExternalProductCatalogHookProducts;
+export type FunctionDefinition = Components.Schemas.FunctionDefinition;
+export type FunctionRefCustomActionConfig = Components.Schemas.FunctionRefCustomActionConfig;
 export type Grants = Components.Schemas.Grants;
 export type Installation = Components.Schemas.Installation;
+export type InternalReview = Components.Schemas.InternalReview;
 export type JourneyBlockComponent = Components.Schemas.JourneyBlockComponent;
 export type JourneyBlockComponentArgs = Components.Schemas.JourneyBlockComponentArgs;
 export type JourneyBlockConfig = Components.Schemas.JourneyBlockConfig;
@@ -4233,6 +4550,5 @@ export type RawEvents = Components.Schemas.RawEvents;
 export type Review = Components.Schemas.Review;
 export type Role = Components.Schemas.Role;
 export type S3Reference = Components.Schemas.S3Reference;
-export type SandboxCustomActionConfig = Components.Schemas.SandboxCustomActionConfig;
 export type TextArg = Components.Schemas.TextArg;
 export type TranslatedString = Components.Schemas.TranslatedString;