@geolens/sdk 1.13.1 → 1.14.1

package/dist/client/types.gen.d.ts

@@ -985,32 +985,26 @@ export type AuditLogResponse = {
 };
 /**
  * BackfillResponse
+ *
+ * Acknowledgement that a backfill run was queued (fix(#1542)).
+ *
+ * The run itself happens on the job queue, so this carries no counts — a full
+ * regenerate takes minutes and used to hold the HTTP request open past the
+ * 600s edge timeout. Poll ``GET /jobs/{job_id}`` for the run's status.
  */
 export type BackfillResponse = {
     /**
-     * Processed
-     *
-     * Number of records processed in this backfill batch.
-     */
-    processed: number;
-    /**
-     * Created
-     *
-     * Number of new embeddings created.
-     */
-    created: number;
-    /**
-     * Skipped
+     * Job Id
      *
-     * Number of records skipped because an embedding already existed.
+     * Identifier of the queued backfill job; poll /jobs/{job_id}.
      */
-    skipped: number;
+    job_id: string;
     /**
-     * Errors
+     * Status
      *
-     * Number of records that failed during embedding generation.
+     * Job status at enqueue time ('pending').
      */
-    errors: number;
+    status: string;
 };
 /**
  * BasemapConfig
@@ -1210,6 +1204,12 @@ export type BrandingResponse = {
      * Whether to show the 'Powered by GeoLens' label in public and shared footers. Badge-removal writes are restricted controls.
      */
     show_badge: boolean;
+    /**
+     * Privacy Url
+     *
+     * Operator-configured privacy-policy URL shown on the login and register pages, or null when unset (no link is shown). Must be an absolute http(s) URL with no embedded credentials; a query string or fragment is allowed and preserved as-is.
+     */
+    privacy_url?: string | null;
 };
 /**
  * BulkDeleteItem
@@ -4140,15 +4140,21 @@ export type EmbeddingStatsResponse = {
     /**
      * Embedded Records
      *
-     * Number of records that have an embedding stored.
+     * Number of records with an embedding for the ACTIVE embedding model — the only vectors semantic search can use.
      */
     embedded_records: number;
     /**
      * Missing Records
      *
-     * Number of records still missing embeddings.
+     * Number of records without an active-model embedding (total_records - embedded_records).
      */
     missing_records: number;
+    /**
+     * Stale Records
+     *
+     * Subset of missing_records whose only stored embeddings belong to other models. Regenerating all embeddings clears these; generating missing ones does not.
+     */
+    stale_records: number;
     /**
      * Coverage Percent
      *
@@ -4671,6 +4677,10 @@ export type JobStatusResponse = {
      * Rows Processed
      */
     rows_processed?: number | null;
+    /**
+     * Rows Failed
+     */
+    rows_failed?: number | null;
     /**
      * Archive Failed
      */
@@ -9899,7 +9909,7 @@ export type TileConfigResponse = {
     /**
      * Public App Url
      *
-     * Browser-facing app URL used for share links and OAuth redirects.
+     * Explicitly configured PUBLIC_APP_URL, or null when unset. Never derived from PUBLIC_API_URL or from the request, because a share or embed URL built on a derived value points at a host that does not serve the app.
      */
     public_app_url?: string | null;
     /**
@@ -11146,6 +11156,10 @@ export type TriggerBackfillAdminBackfillEmbeddingsPostErrors = {
      * Not found
      */
     404: ProblemDetail;
+    /**
+     * Conflict — resource state prevents the operation
+     */
+    409: ProblemDetail;
     /**
      * Validation error
      */
@@ -11159,11 +11173,7 @@ export type TriggerBackfillAdminBackfillEmbeddingsPostErrors = {
      */
     500: ProblemDetail;
     /**
-     * Bad gateway — an upstream provider failed
-     */
-    502: ProblemDetail;
-    /**
-     * Service unavailable — the database could not serve the request
+     * Service unavailable — the background job queue could not be reached
      */
     503: ProblemDetail;
 };
@@ -13089,6 +13099,14 @@ export type CreateDownloadTokenEndpointAuthDownloadTokenDatasetIdPostResponses =
 export type CreateDownloadTokenEndpointAuthDownloadTokenDatasetIdPostResponse = CreateDownloadTokenEndpointAuthDownloadTokenDatasetIdPostResponses[keyof CreateDownloadTokenEndpointAuthDownloadTokenDatasetIdPostResponses];
 export type LoginAuthLoginPostData = {
     body: BodyLoginAuthLoginPost;
+    headers?: {
+        /**
+         * X-Geolens-Auth-Mode
+         *
+         * Browser session-transport negotiation. Send `cookie` to carry the refresh token in an httpOnly `geolens_refresh` cookie, paired with a script-readable `geolens_csrf` cookie, and receive a null `refresh_token` in the response body. When the header is absent (the default) the refresh token is returned in the response body, which is the contract every non-browser caller uses.
+         */
+        'X-GeoLens-Auth-Mode'?: string | null;
+    };
     path?: never;
     query?: never;
     url: '/auth/login';
@@ -13140,6 +13158,14 @@ export type LogoutAuthLogoutPostData = {
      * Body
      */
     body?: RefreshRequest | null;
+    headers?: {
+        /**
+         * X-Csrf-Token
+         *
+         * Double-submit CSRF token, enforced only when the refresh cookie is what authenticates the call. Echo the value of the `geolens_csrf` cookie issued alongside the refresh cookie. Callers presenting a refresh token in the request body do not send it.
+         */
+        'X-CSRF-Token'?: string | null;
+    };
     path?: never;
     query?: never;
     url: '/auth/logout/';
@@ -13483,6 +13509,20 @@ export type RefreshAuthRefreshPostData = {
      * Body
      */
     body?: RefreshRequest | null;
+    headers?: {
+        /**
+         * X-Geolens-Auth-Mode
+         *
+         * Browser session-transport negotiation. Send `cookie` to carry the refresh token in an httpOnly `geolens_refresh` cookie, paired with a script-readable `geolens_csrf` cookie, and receive a null `refresh_token` in the response body. When the header is absent (the default) the refresh token is returned in the response body, which is the contract every non-browser caller uses.
+         */
+        'X-GeoLens-Auth-Mode'?: string | null;
+        /**
+         * X-Csrf-Token
+         *
+         * Double-submit CSRF token, enforced only when the refresh cookie is what authenticates the call. Echo the value of the `geolens_csrf` cookie issued alongside the refresh cookie. Callers presenting a refresh token in the request body do not send it.
+         */
+        'X-CSRF-Token'?: string | null;
+    };
     path?: never;
     query?: never;
     url: '/auth/refresh/';
@@ -14169,6 +14209,10 @@ export type ListCollectionsCollectionsGetErrors = {
      * Bad request — invalid query parameters or payload
      */
     400: ProblemDetail;
+    /**
+     * Unauthenticated — a credential was supplied and could not be resolved (expired, revoked, or malformed). Sending no credential at all is not an error on these operations; they answer anonymously with the public subset. Neither is sending an unresolvable credential alongside a capability that authorizes the request on its own — a valid X-Embed-Token or a valid signed tile template (sig, exp, scope). Those are served and the unrelated credential is ignored.
+     */
+    401: ProblemDetail;
     /**
      * Not found
      */
@@ -14205,6 +14249,10 @@ export type GetCollectionMetadataCollectionsDatasetsGetErrors = {
      * Bad request — invalid query parameters or payload
      */
     400: ProblemDetail;
+    /**
+     * Unauthenticated — a credential was supplied and could not be resolved (expired, revoked, or malformed). Sending no credential at all is not an error on these operations; they answer anonymously with the public subset. Neither is sending an unresolvable credential alongside a capability that authorizes the request on its own — a valid X-Embed-Token or a valid signed tile template (sig, exp, scope). Those are served and the unrelated credential is ignored.
+     */
+    401: ProblemDetail;
     /**
      * Not found
      */
@@ -14361,6 +14409,10 @@ export type CollectionItemsCollectionsDatasetsItemsGetErrors = {
      * Bad request — invalid query parameters or payload
      */
     400: ProblemDetail;
+    /**
+     * Unauthenticated — a credential was supplied and could not be resolved (expired, revoked, or malformed). Sending no credential at all is not an error on these operations; they answer anonymously with the public subset. Neither is sending an unresolvable credential alongside a capability that authorizes the request on its own — a valid X-Embed-Token or a valid signed tile template (sig, exp, scope). Those are served and the unrelated credential is ignored.
+     */
+    401: ProblemDetail;
     /**
      * Not found
      */
@@ -14402,6 +14454,10 @@ export type GetCollectionItemCollectionsDatasetsItemsRecordIdGetErrors = {
      * Bad request — invalid query parameters or payload
      */
     400: ProblemDetail;
+    /**
+     * Unauthenticated — a credential was supplied and could not be resolved (expired, revoked, or malformed). Sending no credential at all is not an error on these operations; they answer anonymously with the public subset. Neither is sending an unresolvable credential alongside a capability that authorizes the request on its own — a valid X-Embed-Token or a valid signed tile template (sig, exp, scope). Those are served and the unrelated credential is ignored.
+     */
+    401: ProblemDetail;
     /**
      * Not found
      */
@@ -14553,6 +14609,10 @@ export type GetDatasetCollectionCollectionsDatasetIdGetErrors = {
      * Bad request — invalid query parameters or payload
      */
     400: ProblemDetail;
+    /**
+     * Unauthenticated — a credential was supplied and could not be resolved (expired, revoked, or malformed). Sending no credential at all is not an error on these operations; they answer anonymously with the public subset. Neither is sending an unresolvable credential alongside a capability that authorizes the request on its own — a valid X-Embed-Token or a valid signed tile template (sig, exp, scope). Those are served and the unrelated credential is ignored.
+     */
+    401: ProblemDetail;
     /**
      * Not found
      */
@@ -14635,6 +14695,10 @@ export type GetCollectionItemsCollectionsDatasetIdItemsGetErrors = {
      * Bad request — invalid query parameters or payload
      */
     400: ProblemDetail;
+    /**
+     * Unauthenticated — a credential was supplied and could not be resolved (expired, revoked, or malformed). Sending no credential at all is not an error on these operations; they answer anonymously with the public subset. Neither is sending an unresolvable credential alongside a capability that authorizes the request on its own — a valid X-Embed-Token or a valid signed tile template (sig, exp, scope). Those are served and the unrelated credential is ignored.
+     */
+    401: ProblemDetail;
     /**
      * Not found
      */
@@ -14751,6 +14815,10 @@ export type GetCollectionItemFeatureCollectionsDatasetIdItemsFeatureIdGetErrors
      * Bad request — invalid query parameters or payload
      */
     400: ProblemDetail;
+    /**
+     * Unauthenticated — a credential was supplied and could not be resolved (expired, revoked, or malformed). Sending no credential at all is not an error on these operations; they answer anonymously with the public subset. Neither is sending an unresolvable credential alongside a capability that authorizes the request on its own — a valid X-Embed-Token or a valid signed tile template (sig, exp, scope). Those are served and the unrelated credential is ignored.
+     */
+    401: ProblemDetail;
     /**
      * Not found
      */
@@ -15282,6 +15350,10 @@ export type GetDcatUs3CatalogDatasetsDcatUs30GetErrors = {
      * Bad request — invalid query parameters or payload
      */
     400: ProblemDetail;
+    /**
+     * Unauthenticated — a credential was supplied and could not be resolved (expired, revoked, or malformed). Sending no credential at all is not an error on these operations; they answer anonymously with the public subset. Neither is sending an unresolvable credential alongside a capability that authorizes the request on its own — a valid X-Embed-Token or a valid signed tile template (sig, exp, scope). Those are served and the unrelated credential is ignored.
+     */
+    401: ProblemDetail;
     /**
      * Not found
      */
@@ -15317,6 +15389,10 @@ export type ValidateDcatUs3CatalogDatasetsDcatUs30ValidationGetErrors = {
      * Bad request — invalid query parameters or payload
      */
     400: ProblemDetail;
+    /**
+     * Unauthenticated — a credential was supplied and could not be resolved (expired, revoked, or malformed). Sending no credential at all is not an error on these operations; they answer anonymously with the public subset. Neither is sending an unresolvable credential alongside a capability that authorizes the request on its own — a valid X-Embed-Token or a valid signed tile template (sig, exp, scope). Those are served and the unrelated credential is ignored.
+     */
+    401: ProblemDetail;
     /**
      * Not found
      */
@@ -15365,6 +15441,10 @@ export type GetDcatCatalogDatasetsDcatGetErrors = {
      * Bad request — invalid query parameters or payload
      */
     400: ProblemDetail;
+    /**
+     * Unauthenticated — a credential was supplied and could not be resolved (expired, revoked, or malformed). Sending no credential at all is not an error on these operations; they answer anonymously with the public subset. Neither is sending an unresolvable credential alongside a capability that authorizes the request on its own — a valid X-Embed-Token or a valid signed tile template (sig, exp, scope). Those are served and the unrelated credential is ignored.
+     */
+    401: ProblemDetail;
     /**
      * Not found
      */
@@ -15400,6 +15480,10 @@ export type ValidateDcat3CatalogDatasetsDcatValidationGetErrors = {
      * Bad request — invalid query parameters or payload
      */
     400: ProblemDetail;
+    /**
+     * Unauthenticated — a credential was supplied and could not be resolved (expired, revoked, or malformed). Sending no credential at all is not an error on these operations; they answer anonymously with the public subset. Neither is sending an unresolvable credential alongside a capability that authorizes the request on its own — a valid X-Embed-Token or a valid signed tile template (sig, exp, scope). Those are served and the unrelated credential is ignored.
+     */
+    401: ProblemDetail;
     /**
      * Not found
      */
@@ -15448,6 +15532,10 @@ export type GetGeodcatApCatalogDatasetsGeodcatApGetErrors = {
      * Bad request — invalid query parameters or payload
      */
     400: ProblemDetail;
+    /**
+     * Unauthenticated — a credential was supplied and could not be resolved (expired, revoked, or malformed). Sending no credential at all is not an error on these operations; they answer anonymously with the public subset. Neither is sending an unresolvable credential alongside a capability that authorizes the request on its own — a valid X-Embed-Token or a valid signed tile template (sig, exp, scope). Those are served and the unrelated credential is ignored.
+     */
+    401: ProblemDetail;
     /**
      * Not found
      */
@@ -15483,6 +15571,10 @@ export type ValidateGeodcatApCatalogDatasetsGeodcatApValidationGetErrors = {
      * Bad request — invalid query parameters or payload
      */
     400: ProblemDetail;
+    /**
+     * Unauthenticated — a credential was supplied and could not be resolved (expired, revoked, or malformed). Sending no credential at all is not an error on these operations; they answer anonymously with the public subset. Neither is sending an unresolvable credential alongside a capability that authorizes the request on its own — a valid X-Embed-Token or a valid signed tile template (sig, exp, scope). Those are served and the unrelated credential is ignored.
+     */
+    401: ProblemDetail;
     /**
      * Not found
      */
@@ -16237,6 +16329,10 @@ export type GetDcatUs3RecordDatasetsDatasetIdDcatUs30GetErrors = {
      * Bad request — invalid query parameters or payload
      */
     400: ProblemDetail;
+    /**
+     * Unauthenticated — a credential was supplied and could not be resolved (expired, revoked, or malformed). Sending no credential at all is not an error on these operations; they answer anonymously with the public subset. Neither is sending an unresolvable credential alongside a capability that authorizes the request on its own — a valid X-Embed-Token or a valid signed tile template (sig, exp, scope). Those are served and the unrelated credential is ignored.
+     */
+    401: ProblemDetail;
     /**
      * Not found
      */
@@ -16277,6 +16373,10 @@ export type ValidateDcatUs3RecordDatasetsDatasetIdDcatUs30ValidationGetErrors =
      * Bad request — invalid query parameters or payload
      */
     400: ProblemDetail;
+    /**
+     * Unauthenticated — a credential was supplied and could not be resolved (expired, revoked, or malformed). Sending no credential at all is not an error on these operations; they answer anonymously with the public subset. Neither is sending an unresolvable credential alongside a capability that authorizes the request on its own — a valid X-Embed-Token or a valid signed tile template (sig, exp, scope). Those are served and the unrelated credential is ignored.
+     */
+    401: ProblemDetail;
     /**
      * Not found
      */
@@ -16317,6 +16417,10 @@ export type GetDcatRecordDatasetsDatasetIdDcatGetErrors = {
      * Bad request — invalid query parameters or payload
      */
     400: ProblemDetail;
+    /**
+     * Unauthenticated — a credential was supplied and could not be resolved (expired, revoked, or malformed). Sending no credential at all is not an error on these operations; they answer anonymously with the public subset. Neither is sending an unresolvable credential alongside a capability that authorizes the request on its own — a valid X-Embed-Token or a valid signed tile template (sig, exp, scope). Those are served and the unrelated credential is ignored.
+     */
+    401: ProblemDetail;
     /**
      * Not found
      */
@@ -16357,6 +16461,10 @@ export type ValidateDcat3RecordDatasetsDatasetIdDcatValidationGetErrors = {
      * Bad request — invalid query parameters or payload
      */
     400: ProblemDetail;
+    /**
+     * Unauthenticated — a credential was supplied and could not be resolved (expired, revoked, or malformed). Sending no credential at all is not an error on these operations; they answer anonymously with the public subset. Neither is sending an unresolvable credential alongside a capability that authorizes the request on its own — a valid X-Embed-Token or a valid signed tile template (sig, exp, scope). Those are served and the unrelated credential is ignored.
+     */
+    401: ProblemDetail;
     /**
      * Not found
      */
@@ -16397,6 +16505,10 @@ export type DownloadCogDatasetsDatasetIdDownloadCogGetErrors = {
      * Bad request — invalid query parameters or payload
      */
     400: ProblemDetail;
+    /**
+     * Unauthenticated — a credential was supplied and could not be resolved (expired, revoked, or malformed). Sending no credential at all is not an error on these operations; they answer anonymously with the public subset. Neither is sending an unresolvable credential alongside a capability that authorizes the request on its own — a valid X-Embed-Token or a valid signed tile template (sig, exp, scope). Those are served and the unrelated credential is ignored.
+     */
+    401: ProblemDetail;
     /**
      * Forbidden — caller lacks access to this resource
      */
@@ -16468,6 +16580,10 @@ export type ExportDatasetEndpointDatasetsDatasetIdExportGetErrors = {
      * Bad request — invalid query parameters or payload
      */
     400: ProblemDetail;
+    /**
+     * Unauthenticated — a credential was supplied and could not be resolved (expired, revoked, or malformed). Sending no credential at all is not an error on these operations; they answer anonymously with the public subset. Neither is sending an unresolvable credential alongside a capability that authorizes the request on its own — a valid X-Embed-Token or a valid signed tile template (sig, exp, scope). Those are served and the unrelated credential is ignored.
+     */
+    401: ProblemDetail;
     /**
      * Forbidden — caller lacks access to this resource
      */
@@ -17301,6 +17417,10 @@ export type GetGeodcatApRecordDatasetsDatasetIdGeodcatApGetErrors = {
      * Bad request — invalid query parameters or payload
      */
     400: ProblemDetail;
+    /**
+     * Unauthenticated — a credential was supplied and could not be resolved (expired, revoked, or malformed). Sending no credential at all is not an error on these operations; they answer anonymously with the public subset. Neither is sending an unresolvable credential alongside a capability that authorizes the request on its own — a valid X-Embed-Token or a valid signed tile template (sig, exp, scope). Those are served and the unrelated credential is ignored.
+     */
+    401: ProblemDetail;
     /**
      * Not found
      */
@@ -17341,6 +17461,10 @@ export type ValidateGeodcatApRecordDatasetsDatasetIdGeodcatApValidationGetErrors
      * Bad request — invalid query parameters or payload
      */
     400: ProblemDetail;
+    /**
+     * Unauthenticated — a credential was supplied and could not be resolved (expired, revoked, or malformed). Sending no credential at all is not an error on these operations; they answer anonymously with the public subset. Neither is sending an unresolvable credential alongside a capability that authorizes the request on its own — a valid X-Embed-Token or a valid signed tile template (sig, exp, scope). Those are served and the unrelated credential is ignored.
+     */
+    401: ProblemDetail;
     /**
      * Not found
      */
@@ -23167,6 +23291,10 @@ export type SearchDatasetsEndpointSearchDatasetsGetErrors = {
      * Bad request — invalid query parameters or payload
      */
     400: ProblemDetail;
+    /**
+     * Unauthenticated — a credential was supplied and could not be resolved (expired, revoked, or malformed). Sending no credential at all is not an error on these operations; they answer anonymously with the public subset. Neither is sending an unresolvable credential alongside a capability that authorizes the request on its own — a valid X-Embed-Token or a valid signed tile template (sig, exp, scope). Those are served and the unrelated credential is ignored.
+     */
+    401: ProblemDetail;
     /**
      * Validation Error
      */
@@ -23266,6 +23394,10 @@ export type SearchFacetsEndpointSearchFacetsGetData = {
     url: '/search/facets/';
 };
 export type SearchFacetsEndpointSearchFacetsGetErrors = {
+    /**
+     * Unauthenticated — a credential was supplied and could not be resolved (expired, revoked, or malformed). Sending no credential at all is not an error on these operations; they answer anonymously with the public subset. Neither is sending an unresolvable credential alongside a capability that authorizes the request on its own — a valid X-Embed-Token or a valid signed tile template (sig, exp, scope). Those are served and the unrelated credential is ignored.
+     */
+    401: ProblemDetail;
     /**
      * Validation Error
      */
@@ -24791,6 +24923,10 @@ export type LandingPageStacGetErrors = {
      * Bad request — invalid standards parameters
      */
     400: ProblemDetail;
+    /**
+     * Unauthenticated — a credential was supplied and could not be resolved (expired, revoked, or malformed). Sending no credential at all is not an error on these operations; they answer anonymously with the public subset. Neither is sending an unresolvable credential alongside a capability that authorizes the request on its own — a valid X-Embed-Token or a valid signed tile template (sig, exp, scope). Those are served and the unrelated credential is ignored.
+     */
+    401: ProblemDetail;
     /**
      * Too many requests — retry after the advertised interval
      */
@@ -24823,6 +24959,10 @@ export type GetCollectionsStacCollectionsGetErrors = {
      * Bad request — invalid standards parameters
      */
     400: ProblemDetail;
+    /**
+     * Unauthenticated — a credential was supplied and could not be resolved (expired, revoked, or malformed). Sending no credential at all is not an error on these operations; they answer anonymously with the public subset. Neither is sending an unresolvable credential alongside a capability that authorizes the request on its own — a valid X-Embed-Token or a valid signed tile template (sig, exp, scope). Those are served and the unrelated credential is ignored.
+     */
+    401: ProblemDetail;
     /**
      * Too many requests — retry after the advertised interval
      */
@@ -24860,6 +25000,10 @@ export type GetCollectionStacCollectionsCollectionIdGetErrors = {
      * Bad request — invalid standards parameters
      */
     400: ProblemDetail;
+    /**
+     * Unauthenticated — a credential was supplied and could not be resolved (expired, revoked, or malformed). Sending no credential at all is not an error on these operations; they answer anonymously with the public subset. Neither is sending an unresolvable credential alongside a capability that authorizes the request on its own — a valid X-Embed-Token or a valid signed tile template (sig, exp, scope). Those are served and the unrelated credential is ignored.
+     */
+    401: ProblemDetail;
     /**
      * Not found
      */
@@ -24926,6 +25070,10 @@ export type GetCollectionItemsStacCollectionsCollectionIdItemsGetErrors = {
      * Bad request — invalid query parameters or payload
      */
     400: ProblemDetail;
+    /**
+     * Unauthenticated — a credential was supplied and could not be resolved (expired, revoked, or malformed). Sending no credential at all is not an error on these operations; they answer anonymously with the public subset. Neither is sending an unresolvable credential alongside a capability that authorizes the request on its own — a valid X-Embed-Token or a valid signed tile template (sig, exp, scope). Those are served and the unrelated credential is ignored.
+     */
+    401: ProblemDetail;
     /**
      * Not found
      */
@@ -24971,6 +25119,10 @@ export type GetCollectionItemStacCollectionsCollectionIdItemsItemIdGetErrors = {
      * Bad request — invalid standards parameters
      */
     400: ProblemDetail;
+    /**
+     * Unauthenticated — a credential was supplied and could not be resolved (expired, revoked, or malformed). Sending no credential at all is not an error on these operations; they answer anonymously with the public subset. Neither is sending an unresolvable credential alongside a capability that authorizes the request on its own — a valid X-Embed-Token or a valid signed tile template (sig, exp, scope). Those are served and the unrelated credential is ignored.
+     */
+    401: ProblemDetail;
     /**
      * Not found
      */
@@ -25040,6 +25192,10 @@ export type GetItemStacItemsItemIdGetErrors = {
      * Bad request — invalid standards parameters
      */
     400: ProblemDetail;
+    /**
+     * Unauthenticated — a credential was supplied and could not be resolved (expired, revoked, or malformed). Sending no credential at all is not an error on these operations; they answer anonymously with the public subset. Neither is sending an unresolvable credential alongside a capability that authorizes the request on its own — a valid X-Embed-Token or a valid signed tile template (sig, exp, scope). Those are served and the unrelated credential is ignored.
+     */
+    401: ProblemDetail;
     /**
      * Not found
      */
@@ -25119,6 +25275,10 @@ export type SearchGetStacSearchGetErrors = {
      * Bad request — invalid query parameters or payload
      */
     400: ProblemDetail;
+    /**
+     * Unauthenticated — a credential was supplied and could not be resolved (expired, revoked, or malformed). Sending no credential at all is not an error on these operations; they answer anonymously with the public subset. Neither is sending an unresolvable credential alongside a capability that authorizes the request on its own — a valid X-Embed-Token or a valid signed tile template (sig, exp, scope). Those are served and the unrelated credential is ignored.
+     */
+    401: ProblemDetail;
     /**
      * Not found
      */
@@ -25155,6 +25315,10 @@ export type SearchPostStacSearchPostErrors = {
      * Bad request — invalid query parameters or payload
      */
     400: ProblemDetail;
+    /**
+     * Unauthenticated — a credential was supplied and could not be resolved (expired, revoked, or malformed). Sending no credential at all is not an error on these operations; they answer anonymously with the public subset. Neither is sending an unresolvable credential alongside a capability that authorizes the request on its own — a valid X-Embed-Token or a valid signed tile template (sig, exp, scope). Those are served and the unrelated credential is ignored.
+     */
+    401: ProblemDetail;
     /**
      * Not found
      */
@@ -25233,6 +25397,10 @@ export type ClusterTileEndpointTilesClustersTablePathZxyPbfGetErrors = {
      * Bad request — invalid query parameters or payload
      */
     400: ProblemDetail;
+    /**
+     * Unauthenticated — a credential was supplied and could not be resolved (expired, revoked, or malformed). Sending no credential at all is not an error on these operations; they answer anonymously with the public subset. Neither is sending an unresolvable credential alongside a capability that authorizes the request on its own — a valid X-Embed-Token or a valid signed tile template (sig, exp, scope). Those are served and the unrelated credential is ignored.
+     */
+    401: ProblemDetail;
     /**
      * Not found
      */
@@ -25324,6 +25492,10 @@ export type RasterTileProxyTilesRasterProxyDatasetIdZxyFmtGetErrors = {
      * Bad request — invalid query parameters or payload
      */
     400: ProblemDetail;
+    /**
+     * Unauthenticated — a credential was supplied and could not be resolved (expired, revoked, or malformed). Sending no credential at all is not an error on these operations; they answer anonymously with the public subset. Neither is sending an unresolvable credential alongside a capability that authorizes the request on its own — a valid X-Embed-Token or a valid signed tile template (sig, exp, scope). Those are served and the unrelated credential is ignored.
+     */
+    401: ProblemDetail;
     /**
      * Not found
      */
@@ -25364,6 +25536,10 @@ export type GetTileTokenTilesTokenDatasetIdGetErrors = {
      * Bad request — invalid query parameters or payload
      */
     400: ProblemDetail;
+    /**
+     * Unauthenticated — a credential was supplied and could not be resolved (expired, revoked, or malformed). Sending no credential at all is not an error on these operations; they answer anonymously with the public subset. Neither is sending an unresolvable credential alongside a capability that authorizes the request on its own — a valid X-Embed-Token or a valid signed tile template (sig, exp, scope). Those are served and the unrelated credential is ignored.
+     */
+    401: ProblemDetail;
     /**
      * Not found
      */
@@ -25408,6 +25584,10 @@ export type GetTileTokensBatchTilesTokensPostErrors = {
      * Bad request — invalid query parameters or payload
      */
     400: ProblemDetail;
+    /**
+     * Unauthenticated — a credential was supplied and could not be resolved (expired, revoked, or malformed). Sending no credential at all is not an error on these operations; they answer anonymously with the public subset. Neither is sending an unresolvable credential alongside a capability that authorizes the request on its own — a valid X-Embed-Token or a valid signed tile template (sig, exp, scope). Those are served and the unrelated credential is ignored.
+     */
+    401: ProblemDetail;
     /**
      * Not found
      */
@@ -25478,6 +25658,10 @@ export type TileEndpointTilesTablePathZxyPbfGetErrors = {
      * Bad request — invalid query parameters or payload
      */
     400: ProblemDetail;
+    /**
+     * Unauthenticated — a credential was supplied and could not be resolved (expired, revoked, or malformed). Sending no credential at all is not an error on these operations; they answer anonymously with the public subset. Neither is sending an unresolvable credential alongside a capability that authorizes the request on its own — a valid X-Embed-Token or a valid signed tile template (sig, exp, scope). Those are served and the unrelated credential is ignored.
+     */
+    401: ProblemDetail;
     /**
      * Not found
      */