@geolens/sdk 1.16.1 → 1.18.1

package/dist/client/types.gen.d.ts

@@ -405,6 +405,24 @@ export type AdminJobResponse = {
      */
     created_at: string;
 };
+/**
+ * AdminPasswordReset
+ *
+ * Request body for POST /admin/users/{user_id}/reset-password/.
+ *
+ * Single-purpose for the same reason as SamlToLocalConversion above: the
+ * generic UserUpdate schema has no password field, so an admin-set password
+ * lands as its own audited action ('user.password_reset') rather than
+ * disappearing into 'user.update'.
+ */
+export type AdminPasswordReset = {
+    /**
+     * Password
+     *
+     * Replacement password for the account (policy: min 12 chars, 3+ character classes, at most 72 bytes UTF-8). The user can change this after their next login.
+     */
+    password: string;
+};
 /**
  * AdminShareTokenListResponse
  */
@@ -472,7 +490,7 @@ export type AdminUserCreate = {
     /**
      * Password
      *
-     * Initial password (policy: min 12 chars, 3+ character classes). The user can change this after first login.
+     * Initial password (policy: min 12 chars, 3+ character classes, at most 72 bytes UTF-8). The user can change this after first login.
      */
     password: string;
     /**
@@ -806,6 +824,56 @@ export type ApproveRequest = {
      */
     role: string;
 };
+/**
+ * ArcGISSignInRequest
+ *
+ * Portal address plus the credentials one generateToken call needs.
+ *
+ * No character policy on the two credential fields, deliberately. They are
+ * form-encoded into the outbound body, which percent-escapes every value,
+ * so neither a control character nor a separator can smuggle a second field
+ * into the request the way one can into a header line. The length bounds
+ * are here to keep an absurd body from reaching the portal at all.
+ */
+export type ArcGisSignInRequest = {
+    /**
+     * Portal Url
+     *
+     * ArcGIS portal URL, for example https://your-org.maps.arcgis.com. The /sharing/rest base is accepted too.
+     */
+    portal_url: string;
+    /**
+     * Username
+     *
+     * ArcGIS account name to sign in with.
+     */
+    username: string;
+    /**
+     * Password
+     *
+     * Password for that ArcGIS account.
+     */
+    password: string;
+};
+/**
+ * ArcGISSignInResponse
+ *
+ * The minted portal token and nothing else about the account.
+ */
+export type ArcGisSignInResponse = {
+    /**
+     * Token
+     *
+     * Short-lived ArcGIS portal token. Use it as the `token` field on probe, preview, commit and refresh.
+     */
+    token: string;
+    /**
+     * Expires At
+     *
+     * UTC instant at which the portal stops accepting the token.
+     */
+    expires_at: string;
+};
 /**
  * AttributeMetadataListResponse
  */
@@ -1480,7 +1548,7 @@ export type ChangePasswordRequest = {
     /**
      * New Password
      *
-     * New password (policy: min 12 chars, 3+ character classes: lowercase, uppercase, digits, symbols). The min_length=8 here is a schema floor; the runtime validator enforces the full policy.
+     * New password (policy: min 12 chars, 3+ character classes: lowercase, uppercase, digits, symbols; at most 72 bytes UTF-8). The min_length=8 here is a schema floor; the runtime validator enforces the full policy.
      */
     new_password: string;
 };
@@ -2164,6 +2232,10 @@ export type CommitRequest = {
      * CSV/Excel only: name of the WKT geometry column (alternative to x_column/y_column).
      */
     geom_column?: string | null;
+    /**
+     * Structured credential for a protected service. Mutually exclusive with the token field.
+     */
+    auth?: ServiceAuthRequest | null;
 };
 /**
  * CommitResponse
@@ -2847,9 +2919,13 @@ export type DatasetRefreshRequest = {
     /**
      * Token
      *
-     * Transient credential for a protected service. Used for this refresh only and never persisted: it is handed to the worker through a single-use, short-lived reference and is gone once claimed. A retry needs a new token.
+     * Transient credential for a protected service. Used for this refresh only and never persisted: it is handed to the worker through a single-use, short-lived reference and is gone once claimed. A retry needs a new token. Deprecated: use the auth object with method bearer.
      */
     token?: string | null;
+    /**
+     * Structured credential for a protected service. Mutually exclusive with the token field.
+     */
+    auth?: ServiceAuthRequest | null;
 };
 /**
  * DatasetRefreshResponse
@@ -3283,7 +3359,7 @@ export type DatasetResponse = {
     /**
      * Source Health Detail
      *
-     * Why the origin is not healthy, as one of a fixed set of GeoLens codes: blocked_by_policy, item_withdrawn, network_error, not_found, server_error, timeout, unauthorized, unexpected_status. Null when healthy or never probed. Never provider text, a URL, or a response body — nothing the origin sent is stored here.
+     * Why the origin is not healthy, as one of a fixed set of GeoLens codes: auth_required, blocked_by_policy, item_withdrawn, network_error, not_found, server_error, timeout, unauthorized, unexpected_status. Null when healthy or never probed. Never provider text, a URL, or a response body — nothing the origin sent is stored here.
      */
     source_health_detail?: string | null;
     /**
@@ -4620,6 +4696,34 @@ export type InfrastructureResponse = {
         [key: string]: ProviderHealth;
     };
 };
+/**
+ * JobCancelResponse
+ *
+ * Outcome of ``POST /jobs/{id}/cancel`` (#1677).
+ *
+ * ``run_id`` is the ``dataset_refresh_runs`` row this cancel finalized, when
+ * the job had one bound (refreshes and reuploads do; plain imports don't).
+ * ``already`` is True when the job was cancelled before this request — the
+ * repeat is idempotent and nothing was written.
+ */
+export type JobCancelResponse = {
+    /**
+     * Id
+     */
+    id: string;
+    /**
+     * Status
+     */
+    status: 'cancelled';
+    /**
+     * Run Id
+     */
+    run_id: string | null;
+    /**
+     * Already
+     */
+    already?: boolean;
+};
 /**
  * JobStatusResponse
  */
@@ -5111,6 +5215,10 @@ export type ManifestSource = {
      * Layer
      */
     layer?: string | null;
+    /**
+     * Checksum
+     */
+    checksum?: string | null;
 };
 /**
  * MapAccessResponse
@@ -5912,6 +6020,12 @@ export type MapStyleImportSummary = {
      * Warnings
      */
     warnings?: Array<MapStyleImportWarning>;
+    /**
+     * Warnings Truncated
+     *
+     * Warnings produced beyond the reported list
+     */
+    warnings_truncated?: number;
 };
 /**
  * MapStyleImportWarning
@@ -6800,6 +6914,41 @@ export type OgcLink = {
      */
     title?: string | null;
 };
+/**
+ * OGCRasterBand
+ *
+ * One entry in the raster:bands STAC extension array.
+ *
+ * fix(#1805 review round 3 P2): matches the shape service_records.py
+ * actually serializes per band. `statistics` matches the normalized
+ * band_info shape core/raster_bands.py (introduced by #1803, the raster
+ * lifecycle PR) produces on read; keep this in sync if that PR changes
+ * the per-band keys.
+ */
+export type OgcRasterBand = {
+    /**
+     * Name
+     */
+    name?: string | null;
+    /**
+     * Data Type
+     */
+    data_type?: string | null;
+    /**
+     * Nodata
+     */
+    nodata?: string | number | number | null;
+    /**
+     * Statistics
+     */
+    statistics?: {
+        [key: string]: unknown;
+    } | null;
+    /**
+     * Description
+     */
+    description?: string | null;
+};
 /**
  * OGCRecordLink
  *
@@ -7005,6 +7154,14 @@ export type OgcRecordProperties = {
      * Gsd
      */
     gsd?: number | null;
+    /**
+     * Res X
+     */
+    res_x?: number | null;
+    /**
+     * Res Y
+     */
+    res_y?: number | null;
     /**
      * Crs Is Geographic
      *
@@ -7023,6 +7180,23 @@ export type OgcRecordProperties = {
      * Dataset Count
      */
     dataset_count?: number | null;
+    /**
+     * Proj:Code
+     */
+    'proj:code'?: string | null;
+    /**
+     * Proj:Shape
+     *
+     * [height, width] in pixels.
+     */
+    'proj:shape'?: [
+        number,
+        number
+    ] | null;
+    /**
+     * Raster:Bands
+     */
+    'raster:bands'?: Array<OgcRasterBand> | null;
 };
 /**
  * OGCRecordResponse
@@ -7296,9 +7470,13 @@ export type ProbeRequest = {
     /**
      * Token
      *
-     * Optional auth token for protected services (passed as query parameter or bearer token depending on service type).
+     * Optional auth token for protected services (passed as query parameter or bearer token depending on service type). Deprecated: use the auth object with method bearer.
      */
     token?: string | null;
+    /**
+     * Structured credential for a protected service. Mutually exclusive with the token field.
+     */
+    auth?: ServiceAuthRequest | null;
 };
 /**
  * ProbeResponse
@@ -7896,14 +8074,26 @@ export type ReuploadCommitRequest = {
      * Srid Override
      */
     srid_override?: number | null;
+    /**
+     * Expected Origin Kind
+     *
+     * The dataset origin the client saw when it staged this replacement. When set, the commit is refused with 409 `origin_changed` if the dataset's origin no longer matches, so a service, STAC or registered-table binding established after the upload is not silently rebound to an upload. Optional: a client that omits it keeps the pre-#1768 behaviour.
+     */
+    expected_origin_kind?: 'upload' | 'postgis' | 'service' | 'stac' | 'created' | null;
     /**
      * Token
+     *
+     * Deprecated: use the auth object with method bearer.
      */
     token?: string | null;
     /**
      * Layer Name
      */
     layer_name?: string | null;
+    /**
+     * Structured credential for a protected service. Mutually exclusive with the token field.
+     */
+    auth?: ServiceAuthRequest | null;
 };
 /**
  * ReuploadCommitResponse
@@ -8024,12 +8214,18 @@ export type ReuploadServicePreviewRequest = {
     layer_id?: number | string | null;
     /**
      * Token
+     *
+     * Deprecated: use the auth object with method bearer.
      */
     token?: string | null;
     /**
      * Object Id Field
      */
     object_id_field?: string | null;
+    /**
+     * Structured credential for a protected service. Mutually exclusive with the token field.
+     */
+    auth?: ServiceAuthRequest | null;
 };
 /**
  * SSEActionsEvent
@@ -8310,9 +8506,52 @@ export type SchemaDiff = {
     /**
      * Row Count Delta
      *
-     * row_count_new minus row_count_old
+     * row_count_new minus row_count_old, or null when either side is unknown
      */
-    row_count_delta: number;
+    row_count_delta: number | null;
+};
+/**
+ * ServiceAuthRequest
+ *
+ * How one request authenticates to the remote service it names.
+ */
+export type ServiceAuthRequest = {
+    /**
+     * Method
+     *
+     * How the credential is presented to the remote service. Omit the whole auth object for a public service.
+     */
+    method: 'bearer' | 'basic' | 'header';
+    /**
+     * Token
+     *
+     * Bearer token or API key, for method bearer.
+     */
+    token?: string | null;
+    /**
+     * Username
+     *
+     * Username, for method basic.
+     */
+    username?: string | null;
+    /**
+     * Password
+     *
+     * Password, for method basic.
+     */
+    password?: string | null;
+    /**
+     * Header Name
+     *
+     * Name of the header the key is sent under, for method header.
+     */
+    header_name?: string | null;
+    /**
+     * Header Value
+     *
+     * Value of the header the key is sent under, for method header.
+     */
+    header_value?: string | null;
 };
 /**
  * ServiceHealth
@@ -8368,7 +8607,7 @@ export type ServicePreviewRequest = {
     /**
      * Token
      *
-     * Optional auth token for protected services.
+     * Optional auth token for protected services. Deprecated: use the auth object with method bearer.
      */
     token?: string | null;
     /**
@@ -8377,6 +8616,10 @@ export type ServicePreviewRequest = {
      * ArcGIS OID field name used for orderByFields during preview pagination.
      */
     object_id_field?: string | null;
+    /**
+     * Structured credential for a protected service. Mutually exclusive with the token field.
+     */
+    auth?: ServiceAuthRequest | null;
 };
 /**
  * ServicePreviewResponse
@@ -8794,7 +9037,7 @@ export type SourceHealthResponse = {
     /**
      * Source Health Detail
      *
-     * Why the origin is not healthy, as one of a fixed set of GeoLens codes: blocked_by_policy, item_withdrawn, network_error, not_found, server_error, timeout, unauthorized, unexpected_status. Null when healthy or never probed. Never provider text, a URL, or a response body — nothing the origin sent is stored here.
+     * Why the origin is not healthy, as one of a fixed set of GeoLens codes: auth_required, blocked_by_policy, item_withdrawn, network_error, not_found, server_error, timeout, unauthorized, unexpected_status. Null when healthy or never probed. Never provider text, a URL, or a response body — nothing the origin sent is stored here.
      */
     source_health_detail?: string | null;
     /**
@@ -10132,6 +10375,29 @@ export type UploadResponse = {
      */
     message: string;
 };
+/**
+ * UrlUploadRequest
+ *
+ * Request body for the URL variant of upload (feat #1705).
+ *
+ * The server fetches the file itself (SSRF-validated, size-capped) and
+ * stages it exactly like a direct upload — preview and commit take over
+ * unchanged.
+ */
+export type UrlUploadRequest = {
+    /**
+     * Url
+     *
+     * HTTP(S) URL of the file to import. The server validates the URL against SSRF, downloads it with the configured size cap, and stages it like a direct upload.
+     */
+    url: string;
+    /**
+     * Filename
+     *
+     * Filename override for URLs whose path does not end in the actual file name (e.g. download links keyed by query id). Must carry an allowed extension. Defaults to the URL path's basename.
+     */
+    filename?: string | null;
+};
 /**
  * UserCreate
  */
@@ -10145,7 +10411,7 @@ export type UserCreate = {
     /**
      * Password
      *
-     * Plaintext password (policy: min 12 chars, 3+ character classes)
+     * Plaintext password (policy: min 12 chars, 3+ character classes, at most 72 bytes UTF-8)
      */
     password: string;
     /**
@@ -10859,6 +11125,10 @@ export type CreateApiKeyAdminApiKeysPostErrors = {
      * Not found
      */
     404: ProblemDetail;
+    /**
+     * Conflict — resource state prevents the operation
+     */
+    409: ProblemDetail;
     /**
      * Validation error
      */
@@ -12205,6 +12475,59 @@ export type RejectUserAdminUsersUserIdRejectPostResponses = {
     204: void;
 };
 export type RejectUserAdminUsersUserIdRejectPostResponse = RejectUserAdminUsersUserIdRejectPostResponses[keyof RejectUserAdminUsersUserIdRejectPostResponses];
+export type ResetUserPasswordAdminUsersUserIdResetPasswordPostData = {
+    body: AdminPasswordReset;
+    path: {
+        /**
+         * User Id
+         */
+        user_id: string;
+    };
+    query?: never;
+    url: '/admin/users/{user_id}/reset-password/';
+};
+export type ResetUserPasswordAdminUsersUserIdResetPasswordPostErrors = {
+    /**
+     * Bad request — invalid query parameters or payload
+     */
+    400: ProblemDetail;
+    /**
+     * Unauthorized — missing or invalid credentials
+     */
+    401: ProblemDetail;
+    /**
+     * Forbidden — caller lacks access to this resource
+     */
+    403: ProblemDetail;
+    /**
+     * Not found
+     */
+    404: ProblemDetail;
+    /**
+     * Validation error
+     */
+    422: ProblemDetail;
+    /**
+     * Too many requests — retry after the advertised interval
+     */
+    429: ProblemDetail;
+    /**
+     * Internal server error
+     */
+    500: ProblemDetail;
+    /**
+     * Service unavailable — the database could not serve the request
+     */
+    503: ProblemDetail;
+};
+export type ResetUserPasswordAdminUsersUserIdResetPasswordPostError = ResetUserPasswordAdminUsersUserIdResetPasswordPostErrors[keyof ResetUserPasswordAdminUsersUserIdResetPasswordPostErrors];
+export type ResetUserPasswordAdminUsersUserIdResetPasswordPostResponses = {
+    /**
+     * Successful Response
+     */
+    200: UserResponse;
+};
+export type ResetUserPasswordAdminUsersUserIdResetPasswordPostResponse = ResetUserPasswordAdminUsersUserIdResetPasswordPostResponses[keyof ResetUserPasswordAdminUsersUserIdResetPasswordPostResponses];
 export type AiAvailabilityEndpointAiAvailabilityGetData = {
     body?: never;
     path?: never;
@@ -16602,6 +16925,10 @@ export type DownloadCogDatasetsDatasetIdDownloadCogGetErrors = {
      * Not found
      */
     404: ProblemDetail;
+    /**
+     * Precondition failed — the caller's If-Match no longer matches the current representation
+     */
+    412: ProblemDetail;
     /**
      * Validation error
      */
@@ -16677,6 +17004,10 @@ export type ExportDatasetEndpointDatasetsDatasetIdExportGetErrors = {
      * Not found
      */
     404: ProblemDetail;
+    /**
+     * Precondition failed — the caller's If-Match no longer matches the current representation
+     */
+    412: ProblemDetail;
     /**
      * Payload too large
      */
@@ -19730,6 +20061,66 @@ export type CompletePresignedUploadIngestUploadPresignedJobIdCompletePostRespons
     200: UploadResponse;
 };
 export type CompletePresignedUploadIngestUploadPresignedJobIdCompletePostResponse = CompletePresignedUploadIngestUploadPresignedJobIdCompletePostResponses[keyof CompletePresignedUploadIngestUploadPresignedJobIdCompletePostResponses];
+export type UploadFromUrlIngestUploadUrlPostData = {
+    body: UrlUploadRequest;
+    path?: never;
+    query?: never;
+    url: '/ingest/upload/url';
+};
+export type UploadFromUrlIngestUploadUrlPostErrors = {
+    /**
+     * Bad request — invalid payload
+     */
+    400: ProblemDetail;
+    /**
+     * Unauthorized — missing or invalid credentials
+     */
+    401: ProblemDetail;
+    /**
+     * Forbidden — caller lacks write access
+     */
+    403: ProblemDetail;
+    /**
+     * Not found
+     */
+    404: ProblemDetail;
+    /**
+     * Conflict — resource state prevents the operation
+     */
+    409: ProblemDetail;
+    /**
+     * Payload too large
+     */
+    413: ProblemDetail;
+    /**
+     * Validation error
+     */
+    422: ProblemDetail;
+    /**
+     * Too many requests — retry after the advertised interval
+     */
+    429: ProblemDetail;
+    /**
+     * Internal server error
+     */
+    500: ProblemDetail;
+    /**
+     * Bad gateway — an upstream provider failed
+     */
+    502: ProblemDetail;
+    /**
+     * Service unavailable — the database could not serve the request
+     */
+    503: ProblemDetail;
+};
+export type UploadFromUrlIngestUploadUrlPostError = UploadFromUrlIngestUploadUrlPostErrors[keyof UploadFromUrlIngestUploadUrlPostErrors];
+export type UploadFromUrlIngestUploadUrlPostResponses = {
+    /**
+     * Successful Response
+     */
+    201: UploadResponse;
+};
+export type UploadFromUrlIngestUploadUrlPostResponse = UploadFromUrlIngestUploadUrlPostResponses[keyof UploadFromUrlIngestUploadUrlPostResponses];
 export type CreateVrtIngestVrtCreatePostData = {
     body: VrtCreateRequest;
     path?: never;
@@ -20056,6 +20447,63 @@ export type GetJobStatusJobsJobIdGetResponses = {
     200: JobStatusResponse;
 };
 export type GetJobStatusJobsJobIdGetResponse = GetJobStatusJobsJobIdGetResponses[keyof GetJobStatusJobsJobIdGetResponses];
+export type CancelJobJobsJobIdCancelPostData = {
+    body?: never;
+    path: {
+        /**
+         * Job Id
+         */
+        job_id: string;
+    };
+    query?: never;
+    url: '/jobs/{job_id}/cancel';
+};
+export type CancelJobJobsJobIdCancelPostErrors = {
+    /**
+     * Bad request — invalid query parameters or payload
+     */
+    400: ProblemDetail;
+    /**
+     * Unauthorized — missing or invalid credentials
+     */
+    401: ProblemDetail;
+    /**
+     * Forbidden — caller lacks access to this resource
+     */
+    403: ProblemDetail;
+    /**
+     * Not found
+     */
+    404: ProblemDetail;
+    /**
+     * Conflict — resource state prevents the operation
+     */
+    409: ProblemDetail;
+    /**
+     * Validation error
+     */
+    422: ProblemDetail;
+    /**
+     * Too many requests — retry after the advertised interval
+     */
+    429: ProblemDetail;
+    /**
+     * Internal server error
+     */
+    500: ProblemDetail;
+    /**
+     * Service unavailable — the database could not serve the request
+     */
+    503: ProblemDetail;
+};
+export type CancelJobJobsJobIdCancelPostError = CancelJobJobsJobIdCancelPostErrors[keyof CancelJobJobsJobIdCancelPostErrors];
+export type CancelJobJobsJobIdCancelPostResponses = {
+    /**
+     * Successful Response
+     */
+    200: JobCancelResponse;
+};
+export type CancelJobJobsJobIdCancelPostResponse = CancelJobJobsJobIdCancelPostResponses[keyof CancelJobJobsJobIdCancelPostResponses];
 export type RetryJobJobsJobIdRetryPostData = {
     body?: never;
     path: {
@@ -23711,6 +24159,66 @@ export type GetSavedSearchEndpointSearchSavedSearchIdGetResponses = {
     200: SavedSearchResponse;
 };
 export type GetSavedSearchEndpointSearchSavedSearchIdGetResponse = GetSavedSearchEndpointSearchSavedSearchIdGetResponses[keyof GetSavedSearchEndpointSearchSavedSearchIdGetResponses];
+export type ArcgisSigninServicesArcgisSigninPostData = {
+    body: ArcGisSignInRequest;
+    path?: never;
+    query?: never;
+    url: '/services/arcgis/signin/';
+};
+export type ArcgisSigninServicesArcgisSigninPostErrors = {
+    /**
+     * Bad request — invalid payload
+     */
+    400: ProblemDetail;
+    /**
+     * Unauthorized — missing or invalid credentials
+     */
+    401: ProblemDetail;
+    /**
+     * Forbidden — caller lacks write access
+     */
+    403: ProblemDetail;
+    /**
+     * Not found
+     */
+    404: ProblemDetail;
+    /**
+     * Conflict — resource state prevents the operation
+     */
+    409: ProblemDetail;
+    /**
+     * Validation error
+     */
+    422: ProblemDetail;
+    /**
+     * Too many requests — retry after the advertised interval
+     */
+    429: ProblemDetail;
+    /**
+     * Internal server error
+     */
+    500: ProblemDetail;
+    /**
+     * Bad gateway — the ArcGIS portal could not be reached or did not answer with a sign-in response
+     */
+    502: ProblemDetail;
+    /**
+     * Service unavailable — the database could not serve the request
+     */
+    503: ProblemDetail;
+    /**
+     * Gateway timeout — the ArcGIS portal did not respond in time
+     */
+    504: ProblemDetail;
+};
+export type ArcgisSigninServicesArcgisSigninPostError = ArcgisSigninServicesArcgisSigninPostErrors[keyof ArcgisSigninServicesArcgisSigninPostErrors];
+export type ArcgisSigninServicesArcgisSigninPostResponses = {
+    /**
+     * Successful Response
+     */
+    200: ArcGisSignInResponse;
+};
+export type ArcgisSigninServicesArcgisSigninPostResponse = ArcgisSigninServicesArcgisSigninPostResponses[keyof ArcgisSigninServicesArcgisSigninPostResponses];
 export type ListConnectorsEndpointServicesConnectorsGetData = {
     body?: never;
     path?: never;
@@ -25602,19 +26110,19 @@ export type RasterTileProxyTilesRasterProxyDatasetIdZxyFmtGetData = {
         /**
          * Pmin
          *
-         * Lower percentile clip for stretch=percentile (0–100, default 2). Absent = current p2 behavior. Must be less than pmax.
+         * Lower percentile clip for stretch=percentile (0–100, default 2). Absent = current p2 behavior. Must be less than pmax. Ignored, and not validated, when stretch is not percentile.
          */
         pmin?: number | null;
         /**
          * Pmax
          *
-         * Upper percentile clip for stretch=percentile (0–100, default 98). Absent = current p98 behavior. Must be greater than pmin.
+         * Upper percentile clip for stretch=percentile (0–100, default 98). Absent = current p98 behavior. Must be greater than pmin. Ignored, and not validated, when stretch is not percentile.
          */
         pmax?: number | null;
         /**
          * Sigma
          *
-         * Standard-deviation multiplier for stretch=stddev (default 2.0). Absent = current 2.0σ behavior. Must be > 0.
+         * Standard-deviation multiplier for stretch=stddev (default 2.0). Absent = current 2.0σ behavior. Must be > 0. Ignored, and not validated, when stretch is not stddev.
          */
         sigma?: number | null;
     };