@geolens/sdk 1.17.0 → 1.18.1

package/dist/client/types.gen.d.ts

@@ -405,6 +405,24 @@ export type AdminJobResponse = {
      */
     created_at: string;
 };
+/**
+ * AdminPasswordReset
+ *
+ * Request body for POST /admin/users/{user_id}/reset-password/.
+ *
+ * Single-purpose for the same reason as SamlToLocalConversion above: the
+ * generic UserUpdate schema has no password field, so an admin-set password
+ * lands as its own audited action ('user.password_reset') rather than
+ * disappearing into 'user.update'.
+ */
+export type AdminPasswordReset = {
+    /**
+     * Password
+     *
+     * Replacement password for the account (policy: min 12 chars, 3+ character classes, at most 72 bytes UTF-8). The user can change this after their next login.
+     */
+    password: string;
+};
 /**
  * AdminShareTokenListResponse
  */
@@ -472,7 +490,7 @@ export type AdminUserCreate = {
     /**
      * Password
      *
-     * Initial password (policy: min 12 chars, 3+ character classes). The user can change this after first login.
+     * Initial password (policy: min 12 chars, 3+ character classes, at most 72 bytes UTF-8). The user can change this after first login.
      */
     password: string;
     /**
@@ -806,6 +824,56 @@ export type ApproveRequest = {
      */
     role: string;
 };
+/**
+ * ArcGISSignInRequest
+ *
+ * Portal address plus the credentials one generateToken call needs.
+ *
+ * No character policy on the two credential fields, deliberately. They are
+ * form-encoded into the outbound body, which percent-escapes every value,
+ * so neither a control character nor a separator can smuggle a second field
+ * into the request the way one can into a header line. The length bounds
+ * are here to keep an absurd body from reaching the portal at all.
+ */
+export type ArcGisSignInRequest = {
+    /**
+     * Portal Url
+     *
+     * ArcGIS portal URL, for example https://your-org.maps.arcgis.com. The /sharing/rest base is accepted too.
+     */
+    portal_url: string;
+    /**
+     * Username
+     *
+     * ArcGIS account name to sign in with.
+     */
+    username: string;
+    /**
+     * Password
+     *
+     * Password for that ArcGIS account.
+     */
+    password: string;
+};
+/**
+ * ArcGISSignInResponse
+ *
+ * The minted portal token and nothing else about the account.
+ */
+export type ArcGisSignInResponse = {
+    /**
+     * Token
+     *
+     * Short-lived ArcGIS portal token. Use it as the `token` field on probe, preview, commit and refresh.
+     */
+    token: string;
+    /**
+     * Expires At
+     *
+     * UTC instant at which the portal stops accepting the token.
+     */
+    expires_at: string;
+};
 /**
  * AttributeMetadataListResponse
  */
@@ -1480,7 +1548,7 @@ export type ChangePasswordRequest = {
     /**
      * New Password
      *
-     * New password (policy: min 12 chars, 3+ character classes: lowercase, uppercase, digits, symbols). The min_length=8 here is a schema floor; the runtime validator enforces the full policy.
+     * New password (policy: min 12 chars, 3+ character classes: lowercase, uppercase, digits, symbols; at most 72 bytes UTF-8). The min_length=8 here is a schema floor; the runtime validator enforces the full policy.
      */
     new_password: string;
 };
@@ -2164,6 +2232,10 @@ export type CommitRequest = {
      * CSV/Excel only: name of the WKT geometry column (alternative to x_column/y_column).
      */
     geom_column?: string | null;
+    /**
+     * Structured credential for a protected service. Mutually exclusive with the token field.
+     */
+    auth?: ServiceAuthRequest | null;
 };
 /**
  * CommitResponse
@@ -2847,9 +2919,13 @@ export type DatasetRefreshRequest = {
     /**
      * Token
      *
-     * Transient credential for a protected service. Used for this refresh only and never persisted: it is handed to the worker through a single-use, short-lived reference and is gone once claimed. A retry needs a new token.
+     * Transient credential for a protected service. Used for this refresh only and never persisted: it is handed to the worker through a single-use, short-lived reference and is gone once claimed. A retry needs a new token. Deprecated: use the auth object with method bearer.
      */
     token?: string | null;
+    /**
+     * Structured credential for a protected service. Mutually exclusive with the token field.
+     */
+    auth?: ServiceAuthRequest | null;
 };
 /**
  * DatasetRefreshResponse
@@ -3283,7 +3359,7 @@ export type DatasetResponse = {
     /**
      * Source Health Detail
      *
-     * Why the origin is not healthy, as one of a fixed set of GeoLens codes: blocked_by_policy, item_withdrawn, network_error, not_found, server_error, timeout, unauthorized, unexpected_status. Null when healthy or never probed. Never provider text, a URL, or a response body — nothing the origin sent is stored here.
+     * Why the origin is not healthy, as one of a fixed set of GeoLens codes: auth_required, blocked_by_policy, item_withdrawn, network_error, not_found, server_error, timeout, unauthorized, unexpected_status. Null when healthy or never probed. Never provider text, a URL, or a response body — nothing the origin sent is stored here.
      */
     source_health_detail?: string | null;
     /**
@@ -5139,6 +5215,10 @@ export type ManifestSource = {
      * Layer
      */
     layer?: string | null;
+    /**
+     * Checksum
+     */
+    checksum?: string | null;
 };
 /**
  * MapAccessResponse
@@ -5940,6 +6020,12 @@ export type MapStyleImportSummary = {
      * Warnings
      */
     warnings?: Array<MapStyleImportWarning>;
+    /**
+     * Warnings Truncated
+     *
+     * Warnings produced beyond the reported list
+     */
+    warnings_truncated?: number;
 };
 /**
  * MapStyleImportWarning
@@ -6828,6 +6914,41 @@ export type OgcLink = {
      */
     title?: string | null;
 };
+/**
+ * OGCRasterBand
+ *
+ * One entry in the raster:bands STAC extension array.
+ *
+ * fix(#1805 review round 3 P2): matches the shape service_records.py
+ * actually serializes per band. `statistics` matches the normalized
+ * band_info shape core/raster_bands.py (introduced by #1803, the raster
+ * lifecycle PR) produces on read; keep this in sync if that PR changes
+ * the per-band keys.
+ */
+export type OgcRasterBand = {
+    /**
+     * Name
+     */
+    name?: string | null;
+    /**
+     * Data Type
+     */
+    data_type?: string | null;
+    /**
+     * Nodata
+     */
+    nodata?: string | number | number | null;
+    /**
+     * Statistics
+     */
+    statistics?: {
+        [key: string]: unknown;
+    } | null;
+    /**
+     * Description
+     */
+    description?: string | null;
+};
 /**
  * OGCRecordLink
  *
@@ -7033,6 +7154,14 @@ export type OgcRecordProperties = {
      * Gsd
      */
     gsd?: number | null;
+    /**
+     * Res X
+     */
+    res_x?: number | null;
+    /**
+     * Res Y
+     */
+    res_y?: number | null;
     /**
      * Crs Is Geographic
      *
@@ -7051,6 +7180,23 @@ export type OgcRecordProperties = {
      * Dataset Count
      */
     dataset_count?: number | null;
+    /**
+     * Proj:Code
+     */
+    'proj:code'?: string | null;
+    /**
+     * Proj:Shape
+     *
+     * [height, width] in pixels.
+     */
+    'proj:shape'?: [
+        number,
+        number
+    ] | null;
+    /**
+     * Raster:Bands
+     */
+    'raster:bands'?: Array<OgcRasterBand> | null;
 };
 /**
  * OGCRecordResponse
@@ -7324,9 +7470,13 @@ export type ProbeRequest = {
     /**
      * Token
      *
-     * Optional auth token for protected services (passed as query parameter or bearer token depending on service type).
+     * Optional auth token for protected services (passed as query parameter or bearer token depending on service type). Deprecated: use the auth object with method bearer.
      */
     token?: string | null;
+    /**
+     * Structured credential for a protected service. Mutually exclusive with the token field.
+     */
+    auth?: ServiceAuthRequest | null;
 };
 /**
  * ProbeResponse
@@ -7924,14 +8074,26 @@ export type ReuploadCommitRequest = {
      * Srid Override
      */
     srid_override?: number | null;
+    /**
+     * Expected Origin Kind
+     *
+     * The dataset origin the client saw when it staged this replacement. When set, the commit is refused with 409 `origin_changed` if the dataset's origin no longer matches, so a service, STAC or registered-table binding established after the upload is not silently rebound to an upload. Optional: a client that omits it keeps the pre-#1768 behaviour.
+     */
+    expected_origin_kind?: 'upload' | 'postgis' | 'service' | 'stac' | 'created' | null;
     /**
      * Token
+     *
+     * Deprecated: use the auth object with method bearer.
      */
     token?: string | null;
     /**
      * Layer Name
      */
     layer_name?: string | null;
+    /**
+     * Structured credential for a protected service. Mutually exclusive with the token field.
+     */
+    auth?: ServiceAuthRequest | null;
 };
 /**
  * ReuploadCommitResponse
@@ -8052,12 +8214,18 @@ export type ReuploadServicePreviewRequest = {
     layer_id?: number | string | null;
     /**
      * Token
+     *
+     * Deprecated: use the auth object with method bearer.
      */
     token?: string | null;
     /**
      * Object Id Field
      */
     object_id_field?: string | null;
+    /**
+     * Structured credential for a protected service. Mutually exclusive with the token field.
+     */
+    auth?: ServiceAuthRequest | null;
 };
 /**
  * SSEActionsEvent
@@ -8338,9 +8506,52 @@ export type SchemaDiff = {
     /**
      * Row Count Delta
      *
-     * row_count_new minus row_count_old
+     * row_count_new minus row_count_old, or null when either side is unknown
+     */
+    row_count_delta: number | null;
+};
+/**
+ * ServiceAuthRequest
+ *
+ * How one request authenticates to the remote service it names.
+ */
+export type ServiceAuthRequest = {
+    /**
+     * Method
+     *
+     * How the credential is presented to the remote service. Omit the whole auth object for a public service.
+     */
+    method: 'bearer' | 'basic' | 'header';
+    /**
+     * Token
+     *
+     * Bearer token or API key, for method bearer.
+     */
+    token?: string | null;
+    /**
+     * Username
+     *
+     * Username, for method basic.
+     */
+    username?: string | null;
+    /**
+     * Password
+     *
+     * Password, for method basic.
      */
-    row_count_delta: number;
+    password?: string | null;
+    /**
+     * Header Name
+     *
+     * Name of the header the key is sent under, for method header.
+     */
+    header_name?: string | null;
+    /**
+     * Header Value
+     *
+     * Value of the header the key is sent under, for method header.
+     */
+    header_value?: string | null;
 };
 /**
  * ServiceHealth
@@ -8396,7 +8607,7 @@ export type ServicePreviewRequest = {
     /**
      * Token
      *
-     * Optional auth token for protected services.
+     * Optional auth token for protected services. Deprecated: use the auth object with method bearer.
      */
     token?: string | null;
     /**
@@ -8405,6 +8616,10 @@ export type ServicePreviewRequest = {
      * ArcGIS OID field name used for orderByFields during preview pagination.
      */
     object_id_field?: string | null;
+    /**
+     * Structured credential for a protected service. Mutually exclusive with the token field.
+     */
+    auth?: ServiceAuthRequest | null;
 };
 /**
  * ServicePreviewResponse
@@ -8822,7 +9037,7 @@ export type SourceHealthResponse = {
     /**
      * Source Health Detail
      *
-     * Why the origin is not healthy, as one of a fixed set of GeoLens codes: blocked_by_policy, item_withdrawn, network_error, not_found, server_error, timeout, unauthorized, unexpected_status. Null when healthy or never probed. Never provider text, a URL, or a response body — nothing the origin sent is stored here.
+     * Why the origin is not healthy, as one of a fixed set of GeoLens codes: auth_required, blocked_by_policy, item_withdrawn, network_error, not_found, server_error, timeout, unauthorized, unexpected_status. Null when healthy or never probed. Never provider text, a URL, or a response body — nothing the origin sent is stored here.
      */
     source_health_detail?: string | null;
     /**
@@ -10196,7 +10411,7 @@ export type UserCreate = {
     /**
      * Password
      *
-     * Plaintext password (policy: min 12 chars, 3+ character classes)
+     * Plaintext password (policy: min 12 chars, 3+ character classes, at most 72 bytes UTF-8)
      */
     password: string;
     /**
@@ -10910,6 +11125,10 @@ export type CreateApiKeyAdminApiKeysPostErrors = {
      * Not found
      */
     404: ProblemDetail;
+    /**
+     * Conflict — resource state prevents the operation
+     */
+    409: ProblemDetail;
     /**
      * Validation error
      */
@@ -12256,6 +12475,59 @@ export type RejectUserAdminUsersUserIdRejectPostResponses = {
     204: void;
 };
 export type RejectUserAdminUsersUserIdRejectPostResponse = RejectUserAdminUsersUserIdRejectPostResponses[keyof RejectUserAdminUsersUserIdRejectPostResponses];
+export type ResetUserPasswordAdminUsersUserIdResetPasswordPostData = {
+    body: AdminPasswordReset;
+    path: {
+        /**
+         * User Id
+         */
+        user_id: string;
+    };
+    query?: never;
+    url: '/admin/users/{user_id}/reset-password/';
+};
+export type ResetUserPasswordAdminUsersUserIdResetPasswordPostErrors = {
+    /**
+     * Bad request — invalid query parameters or payload
+     */
+    400: ProblemDetail;
+    /**
+     * Unauthorized — missing or invalid credentials
+     */
+    401: ProblemDetail;
+    /**
+     * Forbidden — caller lacks access to this resource
+     */
+    403: ProblemDetail;
+    /**
+     * Not found
+     */
+    404: ProblemDetail;
+    /**
+     * Validation error
+     */
+    422: ProblemDetail;
+    /**
+     * Too many requests — retry after the advertised interval
+     */
+    429: ProblemDetail;
+    /**
+     * Internal server error
+     */
+    500: ProblemDetail;
+    /**
+     * Service unavailable — the database could not serve the request
+     */
+    503: ProblemDetail;
+};
+export type ResetUserPasswordAdminUsersUserIdResetPasswordPostError = ResetUserPasswordAdminUsersUserIdResetPasswordPostErrors[keyof ResetUserPasswordAdminUsersUserIdResetPasswordPostErrors];
+export type ResetUserPasswordAdminUsersUserIdResetPasswordPostResponses = {
+    /**
+     * Successful Response
+     */
+    200: UserResponse;
+};
+export type ResetUserPasswordAdminUsersUserIdResetPasswordPostResponse = ResetUserPasswordAdminUsersUserIdResetPasswordPostResponses[keyof ResetUserPasswordAdminUsersUserIdResetPasswordPostResponses];
 export type AiAvailabilityEndpointAiAvailabilityGetData = {
     body?: never;
     path?: never;
@@ -16653,6 +16925,10 @@ export type DownloadCogDatasetsDatasetIdDownloadCogGetErrors = {
      * Not found
      */
     404: ProblemDetail;
+    /**
+     * Precondition failed — the caller's If-Match no longer matches the current representation
+     */
+    412: ProblemDetail;
     /**
      * Validation error
      */
@@ -16728,6 +17004,10 @@ export type ExportDatasetEndpointDatasetsDatasetIdExportGetErrors = {
      * Not found
      */
     404: ProblemDetail;
+    /**
+     * Precondition failed — the caller's If-Match no longer matches the current representation
+     */
+    412: ProblemDetail;
     /**
      * Payload too large
      */
@@ -23879,6 +24159,66 @@ export type GetSavedSearchEndpointSearchSavedSearchIdGetResponses = {
     200: SavedSearchResponse;
 };
 export type GetSavedSearchEndpointSearchSavedSearchIdGetResponse = GetSavedSearchEndpointSearchSavedSearchIdGetResponses[keyof GetSavedSearchEndpointSearchSavedSearchIdGetResponses];
+export type ArcgisSigninServicesArcgisSigninPostData = {
+    body: ArcGisSignInRequest;
+    path?: never;
+    query?: never;
+    url: '/services/arcgis/signin/';
+};
+export type ArcgisSigninServicesArcgisSigninPostErrors = {
+    /**
+     * Bad request — invalid payload
+     */
+    400: ProblemDetail;
+    /**
+     * Unauthorized — missing or invalid credentials
+     */
+    401: ProblemDetail;
+    /**
+     * Forbidden — caller lacks write access
+     */
+    403: ProblemDetail;
+    /**
+     * Not found
+     */
+    404: ProblemDetail;
+    /**
+     * Conflict — resource state prevents the operation
+     */
+    409: ProblemDetail;
+    /**
+     * Validation error
+     */
+    422: ProblemDetail;
+    /**
+     * Too many requests — retry after the advertised interval
+     */
+    429: ProblemDetail;
+    /**
+     * Internal server error
+     */
+    500: ProblemDetail;
+    /**
+     * Bad gateway — the ArcGIS portal could not be reached or did not answer with a sign-in response
+     */
+    502: ProblemDetail;
+    /**
+     * Service unavailable — the database could not serve the request
+     */
+    503: ProblemDetail;
+    /**
+     * Gateway timeout — the ArcGIS portal did not respond in time
+     */
+    504: ProblemDetail;
+};
+export type ArcgisSigninServicesArcgisSigninPostError = ArcgisSigninServicesArcgisSigninPostErrors[keyof ArcgisSigninServicesArcgisSigninPostErrors];
+export type ArcgisSigninServicesArcgisSigninPostResponses = {
+    /**
+     * Successful Response
+     */
+    200: ArcGisSignInResponse;
+};
+export type ArcgisSigninServicesArcgisSigninPostResponse = ArcgisSigninServicesArcgisSigninPostResponses[keyof ArcgisSigninServicesArcgisSigninPostResponses];
 export type ListConnectorsEndpointServicesConnectorsGetData = {
     body?: never;
     path?: never;
@@ -25770,19 +26110,19 @@ export type RasterTileProxyTilesRasterProxyDatasetIdZxyFmtGetData = {
         /**
          * Pmin
          *
-         * Lower percentile clip for stretch=percentile (0–100, default 2). Absent = current p2 behavior. Must be less than pmax.
+         * Lower percentile clip for stretch=percentile (0–100, default 2). Absent = current p2 behavior. Must be less than pmax. Ignored, and not validated, when stretch is not percentile.
          */
         pmin?: number | null;
         /**
          * Pmax
          *
-         * Upper percentile clip for stretch=percentile (0–100, default 98). Absent = current p98 behavior. Must be greater than pmin.
+         * Upper percentile clip for stretch=percentile (0–100, default 98). Absent = current p98 behavior. Must be greater than pmin. Ignored, and not validated, when stretch is not percentile.
          */
         pmax?: number | null;
         /**
          * Sigma
          *
-         * Standard-deviation multiplier for stretch=stddev (default 2.0). Absent = current 2.0σ behavior. Must be > 0.
+         * Standard-deviation multiplier for stretch=stddev (default 2.0). Absent = current 2.0σ behavior. Must be > 0. Ignored, and not validated, when stretch is not stddev.
          */
         sigma?: number | null;
     };