@epilot/cli 0.1.47 → 0.1.49

package/README.md

@@ -29,7 +29,7 @@ npm install -g @epilot/cli
 
 <!-- usage-help -->
 ```
-epilot v0.1.47 — CLI for epilot APIs
+epilot v0.1.49 — CLI for epilot APIs
 
 USAGE
   epilot <api> <operationId> [params...] [flags]

package/definitions/blueprint-manifest.json

@@ -41,6 +41,10 @@
     {
       "name": "Patches",
       "description": "Manage blueprint patches for mass rollouts"
+    },
+    {
+      "name": "Uniqueness Criteria",
+      "description": "Configure per-org field sets used to match existing resources during install"
     }
   ],
   "security": [
@@ -2964,6 +2968,118 @@
         }
       }
     },
+    "/v3/blueprint-manifest/blueprints/{blueprint_id}/deployments/{job_id}:restore": {
+      "post": {
+        "operationId": "restoreBlueprintDeploymentV3",
+        "summary": "Restore a specific deployment by job_id",
+        "description": "Roll a deployment back to its pre-install state. Two phases:\n\n  1. Upsert — re-applies the captured payloads via snapshot-api's\n     `:restore` (server-side; runs config-engine.apply with captured\n     target ids pre-seeded). Skipped for pure-create deployments\n     whose snapshot was empty.\n  2. Delete sweep — for lineage rows of this blueprint instance not\n     present in the snapshot's captured set, deletes the live\n     resource via the type's adapter. Co-ownership / drift /\n     no-delete-capability skip the entry with the corresponding\n     reason.\n\nResolves `(blueprint_id, job_id)` to the entry in\n`Blueprint.deployments[]` and reads its `snapshot_id` and\n`destination_blueprint_id` — the caller never needs to handle\nsnapshot ids directly.\n\nAsync — returns 202 with a job id. Poll the job to track progress.\nThe per-instance lock (`installation_status === 'IN_PROGRESS'`)\nrejects concurrent installs or restores with 409.\n",
+        "tags": [
+          "Blueprints"
+        ],
+        "parameters": [
+          {
+            "in": "path",
+            "name": "blueprint_id",
+            "required": true,
+            "schema": {
+              "$ref": "#/components/schemas/BlueprintID"
+            }
+          },
+          {
+            "in": "path",
+            "name": "job_id",
+            "required": true,
+            "schema": {
+              "$ref": "#/components/schemas/BlueprintJobID"
+            }
+          }
+        ],
+        "responses": {
+          "202": {
+            "description": "Restore job started",
+            "headers": {
+              "Location": {
+                "description": "URL to poll the job",
+                "schema": {
+                  "type": "string"
+                }
+              }
+            },
+            "content": {
+              "application/json": {
+                "schema": {
+                  "type": "object",
+                  "properties": {
+                    "job_id": {
+                      "$ref": "#/components/schemas/BlueprintJobID"
+                    },
+                    "blueprint_instance_id": {
+                      "$ref": "#/components/schemas/BlueprintID"
+                    },
+                    "snapshot_id": {
+                      "type": "string"
+                    }
+                  }
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "Deployment has no snapshot, or the snapshot is not in a `completed` state."
+          },
+          "404": {
+            "description": "Blueprint not found, or no deployment with the given job_id on this blueprint."
+          },
+          "409": {
+            "description": "Another install or restore is in flight for this blueprint instance."
+          }
+        }
+      }
+    },
+    "/v3/blueprint-manifest/blueprints/{blueprint_id}/deployments/{job_id}/restore-preview": {
+      "get": {
+        "operationId": "getRestorePreview",
+        "summary": "Predicted outcome of reverting a deployment",
+        "description": "Computes what would happen if the user triggered a restore on this\ndeployment, without performing any writes. The forecast uses the\nsnapshot's captured resources (when present) plus the current lineage\nstate plus per-adapter gates (co-ownership, no-delete-capability,\nheuristic-match, drift when wired).\n\nIdempotent and side-effect free. Safe to call repeatedly. The result\nmay shift between calls if operators edit destination resources or\nanother blueprint adopts a shared resource in the meantime.\n",
+        "tags": [
+          "Blueprints"
+        ],
+        "parameters": [
+          {
+            "in": "path",
+            "name": "blueprint_id",
+            "required": true,
+            "schema": {
+              "$ref": "#/components/schemas/BlueprintID"
+            }
+          },
+          {
+            "in": "path",
+            "name": "job_id",
+            "required": true,
+            "description": "The install job whose deployment is being previewed.",
+            "schema": {
+              "$ref": "#/components/schemas/BlueprintJobID"
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Predicted outcome. `failed`-action items are absent here — the\npreview can't forecast errors.\n",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/RestoreOutcome"
+                }
+              }
+            }
+          },
+          "404": {
+            "description": "Blueprint or deployment not found."
+          }
+        }
+      }
+    },
     "/v3/blueprint-manifest/blueprints/{blueprint_id}/lineage": {
       "get": {
         "operationId": "getBlueprintLineageV3",
@@ -3006,10 +3122,184 @@
           }
         }
       }
+    },
+    "/v1/blueprint-manifest/uniqueness-criteria": {
+      "get": {
+        "operationId": "listUniquenessCriteria",
+        "summary": "listUniquenessCriteria",
+        "description": "List all custom uniqueness criteria configured for the caller's organization.\nThese overrides are applied during install (V2 and V3) when matching incoming\nresources against existing ones in the destination org, replacing the default\nper-resource-type field set with the caller's chosen fields (AND-combined).\n",
+        "tags": [
+          "Uniqueness Criteria"
+        ],
+        "responses": {
+          "200": {
+            "description": "All configured criteria for the org",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "type": "object",
+                  "properties": {
+                    "results": {
+                      "type": "array",
+                      "items": {
+                        "$ref": "#/components/schemas/UniquenessCriteria"
+                      }
+                    }
+                  }
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/v1/blueprint-manifest/uniqueness-criteria/{resource_type}": {
+      "parameters": [
+        {
+          "in": "path",
+          "required": true,
+          "name": "resource_type",
+          "schema": {
+            "$ref": "#/components/schemas/UniquenessCriteriaResourceType"
+          }
+        }
+      ],
+      "get": {
+        "operationId": "getUniquenessCriteria",
+        "summary": "getUniquenessCriteria",
+        "description": "Get the configured uniqueness criteria for a specific resource type, if any.",
+        "tags": [
+          "Uniqueness Criteria"
+        ],
+        "responses": {
+          "200": {
+            "description": "Configured criteria for the resource type",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/UniquenessCriteria"
+                }
+              }
+            }
+          },
+          "404": {
+            "description": "No custom criteria configured (defaults will be used)"
+          }
+        }
+      },
+      "put": {
+        "operationId": "putUniquenessCriteria",
+        "summary": "putUniquenessCriteria",
+        "description": "Set or replace the uniqueness criteria for a resource type. The provided fields\nmust be valid attributes on the resource's schema (the UI typically loads the\nschema to populate options). All listed fields are AND-combined during matching.\n",
+        "tags": [
+          "Uniqueness Criteria"
+        ],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "type": "object",
+                "required": [
+                  "fields"
+                ],
+                "properties": {
+                  "fields": {
+                    "type": "array",
+                    "minItems": 1,
+                    "items": {
+                      "type": "string"
+                    }
+                  }
+                }
+              }
+            }
+          }
+        },
+        "responses": {
+          "200": {
+            "description": "Stored criteria",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/UniquenessCriteria"
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "Invalid resource type or field list"
+          }
+        }
+      },
+      "delete": {
+        "operationId": "deleteUniquenessCriteria",
+        "summary": "deleteUniquenessCriteria",
+        "description": "Remove the custom criteria for a resource type, reverting to the default fields.",
+        "tags": [
+          "Uniqueness Criteria"
+        ],
+        "responses": {
+          "204": {
+            "description": "Criteria deleted (defaults will be used)"
+          }
+        }
+      }
     }
   },
   "components": {
     "schemas": {
+      "UniquenessCriteriaResourceType": {
+        "type": "string",
+        "description": "Resource type for which custom uniqueness criteria can be configured.",
+        "enum": [
+          "emailtemplate",
+          "product",
+          "price",
+          "tax",
+          "coupon",
+          "product_recommendation",
+          "file",
+          "document_template",
+          "schema",
+          "taxonomy",
+          "notification_template",
+          "family",
+          "permission",
+          "journey"
+        ]
+      },
+      "UniquenessCriteria": {
+        "type": "object",
+        "required": [
+          "org_id",
+          "resource_type",
+          "fields",
+          "updated_at"
+        ],
+        "properties": {
+          "org_id": {
+            "type": "string"
+          },
+          "resource_type": {
+            "$ref": "#/components/schemas/UniquenessCriteriaResourceType"
+          },
+          "fields": {
+            "type": "array",
+            "minItems": 1,
+            "items": {
+              "type": "string"
+            }
+          },
+          "updated_at": {
+            "type": "string",
+            "format": "date-time"
+          },
+          "updated_by": {
+            "type": "string"
+          }
+        }
+      },
       "LineageEntry": {
         "type": "object",
         "properties": {
@@ -3292,6 +3582,104 @@
                     "PARTIAL_SUCCESS",
                     "FAILED"
                   ]
+                },
+                "restore_details": {
+                  "type": "object",
+                  "description": "Restore lifecycle metadata for this deployment.",
+                  "properties": {
+                    "has_revertible_changes": {
+                      "type": "boolean",
+                      "description": "Whether this sync changed destination resources in a way that can\nbe reverted. `false` means the sync completed without create,\nupdate, internal-update, or delete impacts, so there is no revert\naction to offer.\n"
+                    },
+                    "resource_impact_summary": {
+                      "type": "object",
+                      "description": "Counts of resource impact values from the V3 apply result.",
+                      "properties": {
+                        "create": {
+                          "type": "integer",
+                          "minimum": 0
+                        },
+                        "update": {
+                          "type": "integer",
+                          "minimum": 0
+                        },
+                        "internal_update": {
+                          "type": "integer",
+                          "minimum": 0
+                        },
+                        "delete": {
+                          "type": "integer",
+                          "minimum": 0
+                        },
+                        "no_op": {
+                          "type": "integer",
+                          "minimum": 0
+                        },
+                        "ignored": {
+                          "type": "integer",
+                          "minimum": 0
+                        }
+                      }
+                    },
+                    "last_restore_job_id": {
+                      "type": "string",
+                      "description": "BlueprintInstallationJob id of the most recent restore that ran\nagainst this deployment. Used by the FE to keep the restore-status\nbadge visible across page reloads. Frontends poll this job to\nrender the latest restore outcome.\n"
+                    },
+                    "last_restore_at": {
+                      "type": "string",
+                      "format": "date-time",
+                      "description": "Timestamp of the most recent restore that ran against this\ndeployment. Stamped when the restore sweep finishes. Used by the\nFE to show when a sync was reverted.\n"
+                    },
+                    "last_restored_by": {
+                      "type": "object",
+                      "description": "Identity of the caller who triggered the most recent restore.\nStamped when the restore sweep finishes. Used by the FE to show\nwho reverted a sync.\n",
+                      "properties": {
+                        "name": {
+                          "type": "string",
+                          "description": "Display name (email or token name) of the restorer."
+                        },
+                        "user_id": {
+                          "type": "string",
+                          "description": "User id of the restorer, when triggered by a user."
+                        }
+                      }
+                    },
+                    "status": {
+                      "type": "string",
+                      "description": "Computed server-side from `(job_id, restore_details.last_restore_job_id, installation_status)`.\n`available` when the deployment is restorable but has no prior\nrestore (including pure-create deployments without `snapshot_id`,\nreverted via sweep-only);\n`in_progress` while an install or restore is running on this\nblueprint instance;\n`restored` / `partially_restored` / `restore_failed` reflect the\nterminal status of the job referenced by `last_restore_job_id`;\n`unavailable` means there is no revert action, for example\nmalformed deployment rows missing `job_id` or no-change syncs.\n",
+                      "enum": [
+                        "available",
+                        "in_progress",
+                        "restored",
+                        "partially_restored",
+                        "restore_failed",
+                        "unavailable"
+                      ]
+                    }
+                  }
+                },
+                "has_revertible_changes": {
+                  "type": "boolean",
+                  "deprecated": true,
+                  "description": "Deprecated. Use `restore_details.has_revertible_changes`.\n"
+                },
+                "last_restore_job_id": {
+                  "type": "string",
+                  "deprecated": true,
+                  "description": "Deprecated. Use `restore_details.last_restore_job_id`.\n"
+                },
+                "restore_status": {
+                  "type": "string",
+                  "deprecated": true,
+                  "description": "Deprecated. Use `restore_details.status`.\n",
+                  "enum": [
+                    "available",
+                    "in_progress",
+                    "restored",
+                    "partially_restored",
+                    "restore_failed",
+                    "unavailable"
+                  ]
                 }
               }
             }
@@ -3884,6 +4272,12 @@
           {
             "type": "object",
             "properties": {
+              "job_type": {
+                "type": "string",
+                "enum": [
+                  "export"
+                ]
+              },
               "blueprint_id": {
                 "$ref": "#/components/schemas/BlueprintID"
               },
@@ -3911,6 +4305,12 @@
           {
             "type": "object",
             "properties": {
+              "job_type": {
+                "type": "string",
+                "enum": [
+                  "install"
+                ]
+              },
               "source_blueprint_id": {
                 "$ref": "#/components/schemas/BlueprintID"
               },
@@ -3970,6 +4370,64 @@
           }
         ]
       },
+      "BlueprintRestoreJob": {
+        "allOf": [
+          {
+            "$ref": "#/components/schemas/CommonBlueprintJobFields"
+          },
+          {
+            "type": "object",
+            "properties": {
+              "job_type": {
+                "type": "string",
+                "enum": [
+                  "restore"
+                ]
+              },
+              "destination_blueprint_id": {
+                "$ref": "#/components/schemas/BlueprintID"
+              },
+              "destination_org_id": {
+                "type": "string"
+              },
+              "install_job_id": {
+                "type": "string",
+                "nullable": true,
+                "description": "The install job whose deployment is being reverted. Maps back\nto the entry in `Blueprint.deployments[]`.\n"
+              },
+              "snapshot_id": {
+                "type": "string",
+                "nullable": true,
+                "description": "The snapshot driving Phase 1 of the restore. Null for sweep-only\nrestores (pure-create deployments with no captured manifest).\n"
+              },
+              "sync_engine": {
+                "type": "string",
+                "enum": [
+                  "v3"
+                ]
+              },
+              "status": {
+                "type": "string",
+                "enum": [
+                  "IN_PROGRESS",
+                  "SUCCESS",
+                  "PARTIAL_SUCCESS",
+                  "FAILED"
+                ]
+              },
+              "restore_result": {
+                "nullable": true,
+                "description": "Absent while the job is still IN_PROGRESS.",
+                "allOf": [
+                  {
+                    "$ref": "#/components/schemas/RestoreOutcome"
+                  }
+                ]
+              }
+            }
+          }
+        ]
+      },
       "V3ResourceProgressEntry": {
         "type": "object",
         "required": [
@@ -4009,6 +4467,84 @@
           }
         }
       },
+      "RestoreOutcomeItem": {
+        "type": "object",
+        "required": [
+          "lineage_id",
+          "type",
+          "action"
+        ],
+        "properties": {
+          "lineage_id": {
+            "type": "string"
+          },
+          "type": {
+            "type": "string"
+          },
+          "name": {
+            "type": "string",
+            "nullable": true
+          },
+          "target_id": {
+            "type": "string",
+            "nullable": true
+          },
+          "action": {
+            "type": "string",
+            "description": "On `restore-preview`: the action the restore would take.\nOn `restore_result`: the action that was applied.\n`failed` only appears on `restore_result`.\n",
+            "enum": [
+              "restore",
+              "delete",
+              "skip",
+              "failed"
+            ]
+          },
+          "reason": {
+            "type": "string",
+            "nullable": true,
+            "description": "Only set when `action == skip`.",
+            "enum": [
+              "modified",
+              "co_owned",
+              "delete_unsupported",
+              "heuristic_match"
+            ]
+          },
+          "last_synced_at": {
+            "type": "string",
+            "format": "date-time",
+            "nullable": true,
+            "description": "Only set when `reason == modified`. From the lineage row's last install write."
+          },
+          "current_updated_at": {
+            "type": "string",
+            "format": "date-time",
+            "nullable": true,
+            "description": "Only set when `reason == modified`. From the destination resource's current state."
+          },
+          "error_message": {
+            "type": "string",
+            "nullable": true,
+            "description": "Only set when `action == failed`."
+          }
+        }
+      },
+      "RestoreOutcome": {
+        "type": "object",
+        "properties": {
+          "snapshot_id": {
+            "type": "string",
+            "nullable": true,
+            "description": "The snapshot driving Phase 1 of the restore. Null/absent for\nsweep-only restores (pure-create deployments with no captured\nmanifest).\n"
+          },
+          "resources": {
+            "type": "array",
+            "items": {
+              "$ref": "#/components/schemas/RestoreOutcomeItem"
+            }
+          }
+        }
+      },
       "BlueprintJob": {
         "oneOf": [
           {
@@ -4017,6 +4553,9 @@
           {
             "$ref": "#/components/schemas/BlueprintInstallationJob"
           },
+          {
+            "$ref": "#/components/schemas/BlueprintRestoreJob"
+          },
           {
             "$ref": "#/components/schemas/BlueprintDependenciesSyncJob"
           },
@@ -4026,7 +4565,18 @@
           {
             "$ref": "#/components/schemas/BlueprintVerificationJob"
           }
-        ]
+        ],
+        "discriminator": {
+          "propertyName": "job_type",
+          "mapping": {
+            "export": "#/components/schemas/BlueprintExportJob",
+            "install": "#/components/schemas/BlueprintInstallationJob",
+            "restore": "#/components/schemas/BlueprintRestoreJob",
+            "dependencies_sync": "#/components/schemas/BlueprintDependenciesSyncJob",
+            "validate": "#/components/schemas/BlueprintValidateJob",
+            "verification": "#/components/schemas/BlueprintVerificationJob"
+          }
+        }
       },
       "BlueprintDependenciesSyncJob": {
         "allOf": [
@@ -4036,6 +4586,12 @@
           {
             "type": "object",
             "properties": {
+              "job_type": {
+                "type": "string",
+                "enum": [
+                  "dependencies_sync"
+                ]
+              },
               "blueprint_id": {
                 "$ref": "#/components/schemas/BlueprintID"
               },
@@ -4060,6 +4616,12 @@
           {
             "type": "object",
             "properties": {
+              "job_type": {
+                "type": "string",
+                "enum": [
+                  "validate"
+                ]
+              },
               "blueprint_id": {
                 "$ref": "#/components/schemas/BlueprintID"
               },
@@ -4094,6 +4656,12 @@
           {
             "type": "object",
             "properties": {
+              "job_type": {
+                "type": "string",
+                "enum": [
+                  "verification"
+                ]
+              },
               "source_org_id": {
                 "type": "string"
               },
@@ -4111,6 +4679,7 @@
                 "enum": [
                   "IN_PROGRESS",
                   "SUCCESS",
+                  "PARTIAL_SUCCESS",
                   "FAILED"
                 ]
               },
@@ -4142,6 +4711,7 @@
             "enum": [
               "IN_PROGRESS",
               "SUCCESS",
+              "PARTIAL_SUCCESS",
               "FAILED"
             ]
           },

package/definitions/snapshot.json

@@ -98,7 +98,6 @@
             "description": "Filter to snapshots containing one or more resources. Format\n`<type>:<id>`. Split on the first colon — the `<id>` half may\ncontain colons (e.g., role acl ids like `role:acl:internal:foo`).\nRepeat the param for multiple resources — results are OR-unioned.\nMaximum 50 pairs per request.\n",
             "schema": {
               "type": "array",
-              "maxItems": 50,
               "items": {
                 "type": "string",
                 "pattern": "^[^:]+:.+$"
@@ -143,6 +142,44 @@
         }
       }
     },
+    "/v1/snapshots:capture-org": {
+      "post": {
+        "operationId": "captureOrgSnapshot",
+        "summary": "captureOrgSnapshot",
+        "description": "Snapshot the caller's whole organization now. Fetches a fresh inventory\nof the org's configuration resources from configuration-hub-api, persists\nit as an inventory artifact, and starts a `scope: \"org\"` chunked capture.\nAsync — returns immediately with a snapshot ID; client polls `getSnapshot`\nand watches `capture_summary` fill in until `create.status` moves from\n`in_progress` to `completed` or `failed`.\n\nSensitive types (`access_token`, `environment_variable`), types with no\nengine adapter, and any `excluded_types` are dropped from the capture and\nrecorded in the snapshot's coverage report.\n",
+        "tags": [
+          "Snapshots"
+        ],
+        "requestBody": {
+          "required": false,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/CreateOrgSnapshotRequest"
+              }
+            }
+          }
+        },
+        "responses": {
+          "202": {
+            "description": "Org snapshot creation started",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/CreateSnapshotResponse"
+                }
+              }
+            }
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "422": {
+            "$ref": "#/components/responses/UnprocessableEntity"
+          }
+        }
+      }
+    },
     "/v1/snapshots/{id}": {
       "parameters": [
         {
@@ -214,10 +251,20 @@
       "post": {
         "operationId": "restoreSnapshot",
         "summary": "restoreSnapshot",
-        "description": "Restore a snapshot to the org. Async — returns immediately; client polls\n`getSnapshot` until the latest entry in `restores` moves from\n`in_progress` to `completed` or `failed`.\n\nv1: full restore only. Cherry-pick (`resources?` body filter) is an open\nquestion — see RFC OQ #1.\n",
+        "description": "Restore a snapshot to the org. Async — returns immediately; client polls\n`getSnapshot` until the latest entry in `restores` moves from\n`in_progress` to one of `completed | partial | failed`.\n\nv1: full restore only. Cherry-pick (`resources?` body filter) is an open\nquestion — see RFC OQ #1.\n",
         "tags": [
           "Snapshots"
         ],
+        "requestBody": {
+          "required": false,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/RestoreSnapshotRequest"
+              }
+            }
+          }
+        },
         "responses": {
           "202": {
             "description": "Restore started",
@@ -428,6 +475,16 @@
             }
           }
         }
+      },
+      "UnprocessableEntity": {
+        "description": "Unprocessable entity",
+        "content": {
+          "application/json": {
+            "schema": {
+              "$ref": "#/components/schemas/EmptyInventoryError"
+            }
+          }
+        }
       }
     },
     "schemas": {
@@ -446,6 +503,38 @@
           }
         }
       },
+      "EmptyInventoryError": {
+        "type": "object",
+        "required": [
+          "message",
+          "skipped_types"
+        ],
+        "description": "Returned (422) when the org inventory contains no capturable resources\nafter filtering out sensitive, unsupported, and excluded types. The\n`skipped_types` array explains why every type was dropped.\n",
+        "properties": {
+          "message": {
+            "type": "string",
+            "example": "No capturable resources in the org inventory"
+          },
+          "skipped_types": {
+            "type": "array",
+            "items": {
+              "type": "object",
+              "required": [
+                "type",
+                "reason"
+              ],
+              "properties": {
+                "type": {
+                  "type": "string"
+                },
+                "reason": {
+                  "type": "string"
+                }
+              }
+            }
+          }
+        }
+      },
       "ResourceRef": {
         "type": "object",
         "required": [
@@ -551,10 +640,11 @@
             "enum": [
               "manual",
               "sync",
-              "blueprint_install"
+              "blueprint_install",
+              "scheduled"
             ],
             "default": "manual",
-            "description": "What initiated this snapshot. `scheduled` may be added in a later\nphase for nightly backups (RFC OQ #3).\n"
+            "description": "What initiated this snapshot. `scheduled` is used for automatic\nnightly backups triggered by an org's EventBridge schedule\n(RFC — Scheduled org snapshots).\n"
           },
           "blueprint_instance_id": {
             "type": "string",
@@ -569,6 +659,45 @@
           }
         }
       },
+      "CreateOrgSnapshotRequest": {
+        "type": "object",
+        "description": "Request body for `captureOrgSnapshot`. All fields optional — an empty body\nsnapshots the whole org with a default name and the 90-day default TTL.\n",
+        "properties": {
+          "name": {
+            "type": "string",
+            "description": "Snapshot name. Defaults to \"Org snapshot — <ISO timestamp>\"."
+          },
+          "retention": {
+            "type": "object",
+            "description": "Retention window. Converted to an absolute `expires_at` at creation\ntime. Omit for the default 90-day TTL.\n",
+            "required": [
+              "value",
+              "unit"
+            ],
+            "properties": {
+              "value": {
+                "type": "integer",
+                "minimum": 1
+              },
+              "unit": {
+                "type": "string",
+                "enum": [
+                  "days",
+                  "weeks",
+                  "months"
+                ]
+              }
+            }
+          },
+          "excluded_types": {
+            "type": "array",
+            "description": "Resource types to exclude from the capture, in addition to the\nalways-excluded sensitive types (`access_token`,\n`environment_variable`).\n",
+            "items": {
+              "type": "string"
+            }
+          }
+        }
+      },
       "CreateSnapshotResponse": {
         "type": "object",
         "required": [
@@ -596,6 +725,22 @@
           }
         }
       },
+      "RestoreSnapshotRequest": {
+        "type": "object",
+        "description": "Both flags default to `false`, which restores every captured resource —\nConfig Hub's manual-restore semantics. blueprint-manifest-api sets\nboth `true` when reverting a blueprint install so user edits and\ncross-blueprint contributions survive. Each flag is independent so a\ncaller can preserve edits without preserving co-ownership (or vice\nversa). Skipped resources surface under `Operation.skipped`.\n",
+        "properties": {
+          "preserve_modified": {
+            "type": "boolean",
+            "default": false,
+            "description": "When `true`, skip captured resources whose live destination payload\nhas diverged from the install-time fingerprint stored on lineage.\nSurfaces under `Operation.skipped` with `reason: 'modified'`.\n"
+          },
+          "preserve_co_owned": {
+            "type": "boolean",
+            "default": false,
+            "description": "When `true`, skip captured resources whose lineage row carries\nanother blueprint instance's id (co-ownership ≥2). Surfaces under\n`Operation.skipped` with `reason: 'co_owned'`.\n"
+          }
+        }
+      },
       "RestoreSnapshotResponse": {
         "type": "object",
         "required": [
@@ -643,7 +788,8 @@
             "enum": [
               "manual",
               "sync",
-              "blueprint_install"
+              "blueprint_install",
+              "scheduled"
             ]
           },
           "blueprint_instance_id": {
@@ -669,6 +815,47 @@
           "matched_count": {
             "type": "integer",
             "description": "Number of `resource` filter pairs from the request that are\ncontained in this snapshot. Present only on `listSnapshots`\nresponses where the caller passed at least one `resource`\nfilter — absent on `getSnapshot` and on unfiltered list calls.\nDrives the coverage badge in Config Hub's snapshot picker.\n"
+          },
+          "scope": {
+            "type": "string",
+            "enum": [
+              "selection",
+              "org"
+            ],
+            "description": "Capture scope. `selection` (default for manual/sync/blueprint_install)\nmeans only the explicitly listed resources were snapshotted.\n`org` means a full org inventory was discovered and captured\n(scheduled snapshots set this automatically).\n"
+          },
+          "expires_at": {
+            "type": "string",
+            "format": "date-time",
+            "description": "ISO-8601 timestamp after which this snapshot will be deleted.\nDerived from the org's retention setting at capture time for\nscheduled snapshots; not set for manual snapshots (which use\na hardcoded 90-day TTL written directly as a DynamoDB `ttl` epoch).\n"
+          },
+          "capture_summary": {
+            "type": "object",
+            "description": "Per-snapshot coverage report set by the capture worker on completion.\nRecords how many resources were attempted, captured, skipped\n(unsupported type or explicitly excluded), and failed.\n",
+            "required": [
+              "total",
+              "captured",
+              "skipped",
+              "failed"
+            ],
+            "properties": {
+              "total": {
+                "type": "integer",
+                "description": "Total resources in the inventory that were attempted."
+              },
+              "captured": {
+                "type": "integer",
+                "description": "Resources successfully fetched and written to the manifest."
+              },
+              "skipped": {
+                "type": "integer",
+                "description": "Resources skipped — type not supported by config-engine or\nexcluded from capture (e.g. access_token, environment_variable).\n"
+              },
+              "failed": {
+                "type": "integer",
+                "description": "Resources where the fetch call returned an error."
+              }
+            }
           }
         }
       },
@@ -701,14 +888,43 @@
             "enum": [
               "in_progress",
               "completed",
+              "partial",
               "failed"
-            ]
+            ],
+            "description": "`partial` indicates the operation completed but skipped at least\none resource — see `skipped`. Only populated by restores triggered\nwith `mode: 'preserve_edits'`.\n"
           },
           "error": {
             "type": "string"
           },
           "triggered_by": {
             "$ref": "#/components/schemas/CallerIdentity"
+          },
+          "skipped": {
+            "type": "array",
+            "description": "Per-resource skips, populated only for restores triggered with\n`mode: 'preserve_edits'`. Empty / absent for Config Hub's\ndefault overwrite-mode restores.\n",
+            "items": {
+              "$ref": "#/components/schemas/SkippedResource"
+            }
+          }
+        }
+      },
+      "SkippedResource": {
+        "type": "object",
+        "required": [
+          "lineage_id",
+          "reason"
+        ],
+        "properties": {
+          "lineage_id": {
+            "type": "string"
+          },
+          "reason": {
+            "type": "string",
+            "enum": [
+              "modified",
+              "co_owned"
+            ],
+            "description": "- `modified` — current destination payload's fingerprint differs\n  from the install-time fingerprint on the lineage row.\n- `co_owned` — lineage row has ≥2 distinct\n  `blueprint_instance_ids`; restoring would unilaterally affect\n  another blueprint instance's contribution.\n"
           }
         }
       },

package/dist/bin/epilot.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   API_LIST
-} from "../chunk-VOOQ4GMS.js";
+} from "../chunk-44NTPQBR.js";
 
 // bin/epilot.ts
 import { runMain } from "citty";
@@ -11,7 +11,7 @@ import { defineCommand } from "citty";
 var main = defineCommand({
   meta: {
     name: "epilot",
-    version: "0.1.47",
+    version: "0.1.49",
     description: "CLI for epilot APIs"
   },
   args: {
@@ -30,8 +30,8 @@ var main = defineCommand({
     auth: () => import("../auth-CN5EFFDE.js").then((m) => m.default),
     profile: () => import("../profile-OZJL5ZPT.js").then((m) => m.default),
     config: () => import("../config-DGZIMLZK.js").then((m) => m.default),
-    completion: () => import("../completion-EKYW2Z3F.js").then((m) => m.default),
-    upgrade: () => import("../upgrade-FCRZPJWQ.js").then((m) => m.default),
+    completion: () => import("../completion-4HOIJNFX.js").then((m) => m.default),
+    upgrade: () => import("../upgrade-EXMK4UHK.js").then((m) => m.default),
     "access-token": () => import("../access-token-WWE6BDJH.js").then((m) => m.default),
     address: () => import("../address-EH3C4CVB.js").then((m) => m.default),
     "address-suggestions": () => import("../address-suggestions-RRSLOBFW.js").then((m) => m.default),
@@ -134,13 +134,13 @@ process.stderr.on("error", (err) => {
   if (err.code === "EPIPE") process.exit(0);
   throw err;
 });
-var VERSION = true ? "0.1.47" : (await null).default.version;
+var VERSION = true ? "0.1.49" : (await null).default.version;
 var reorderedArgv = hoistFlagsAfterSubcommand(process.argv.slice(2));
 process.argv = [process.argv[0], process.argv[1], ...reorderedArgv];
 var args = process.argv.slice(2);
 var completionsIdx = args.indexOf("--_completions");
 if (completionsIdx >= 0) {
-  const { handleCompletions } = await import("../completion-EKYW2Z3F.js");
+  const { handleCompletions } = await import("../completion-4HOIJNFX.js");
   handleCompletions(args[completionsIdx + 1], args[completionsIdx + 2]);
   process.exit(0);
 }

package/dist/{chunk-VOOQ4GMS.js → chunk-44NTPQBR.js}

@@ -155,7 +155,7 @@ var API_LIST = [
     kebabName: "blueprint-manifest",
     title: "Blueprint Manifest API",
     serverUrl: "https://blueprint-manifest.sls.epilot.io",
-    operationCount: 55,
+    operationCount: 61,
     operationIds: [
       "getJob",
       "createExport",
@@ -211,7 +211,13 @@ var API_LIST = [
       "updateMarketplaceListingVersion",
       "publishMarketplaceListingVersion",
       "installBlueprintV3",
-      "getBlueprintLineageV3"
+      "restoreBlueprintDeploymentV3",
+      "getRestorePreview",
+      "getBlueprintLineageV3",
+      "listUniquenessCriteria",
+      "getUniquenessCriteria",
+      "putUniquenessCriteria",
+      "deleteUniquenessCriteria"
     ]
   },
   {
@@ -1173,10 +1179,11 @@ var API_LIST = [
     kebabName: "snapshot",
     title: "Snapshot API",
     serverUrl: "https://snapshot.sls.epilot.io",
-    operationCount: 8,
+    operationCount: 9,
     operationIds: [
       "listSnapshots",
       "createSnapshot",
+      "captureOrgSnapshot",
       "getSnapshot",
       "deleteSnapshot",
       "restoreSnapshot",

package/dist/{completion-EKYW2Z3F.js → completion-4HOIJNFX.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   API_LIST
-} from "./chunk-VOOQ4GMS.js";
+} from "./chunk-44NTPQBR.js";
 import {
   DIM,
   GREEN,

package/dist/{upgrade-FCRZPJWQ.js → upgrade-EXMK4UHK.js}

@@ -72,7 +72,7 @@ ${GREEN}${BOLD}Upgraded to @epilot/cli@${latest}${RESET}
   }
 });
 var getCurrentVersion = () => {
-  if (true) return "0.1.47";
+  if (true) return "0.1.49";
   try {
     const output = execSync("npm ls -g @epilot/cli --depth=0 --json 2>/dev/null", {
       encoding: "utf-8",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@epilot/cli",
-  "version": "0.1.47",
+  "version": "0.1.49",
   "description": "CLI for epilot APIs",
   "type": "module",
   "bin": {