@geolens/sdk 1.17.0 → 1.19.0

package/dist/client/types.gen.d.ts

@@ -4,7 +4,7 @@ export type ClientOptions = {
 /**
  * AIAvailabilityResponse
  *
- * Public-safe AI readiness signal (builder-audit #338 P1-11).
+ * Public-safe AI readiness signal (#338).
  *
  * Carries a single boolean and intentionally exposes NO provider name, model,
  * or key detail — it is readable by any non-admin editor holding
@@ -405,6 +405,24 @@ export type AdminJobResponse = {
      */
     created_at: string;
 };
+/**
+ * AdminPasswordReset
+ *
+ * Request body for POST /admin/users/{user_id}/reset-password/.
+ *
+ * Single-purpose for the same reason as SamlToLocalConversion above: the
+ * generic UserUpdate schema has no password field, so an admin-set password
+ * lands as its own audited action ('user.password_reset') rather than
+ * disappearing into 'user.update'.
+ */
+export type AdminPasswordReset = {
+    /**
+     * Password
+     *
+     * Replacement password for the account (policy: min 12 chars, 3+ character classes, at most 72 bytes UTF-8). The user can change this after their next login.
+     */
+    password: string;
+};
 /**
  * AdminShareTokenListResponse
  */
@@ -472,7 +490,7 @@ export type AdminUserCreate = {
     /**
      * Password
      *
-     * Initial password (policy: min 12 chars, 3+ character classes). The user can change this after first login.
+     * Initial password (policy: min 12 chars, 3+ character classes, at most 72 bytes UTF-8). The user can change this after first login.
      */
     password: string;
     /**
@@ -806,6 +824,56 @@ export type ApproveRequest = {
      */
     role: string;
 };
+/**
+ * ArcGISSignInRequest
+ *
+ * Portal address plus the credentials one generateToken call needs.
+ *
+ * No character policy on the two credential fields, deliberately. They are
+ * form-encoded into the outbound body, which percent-escapes every value,
+ * so neither a control character nor a separator can smuggle a second field
+ * into the request the way one can into a header line. The length bounds
+ * are here to keep an absurd body from reaching the portal at all.
+ */
+export type ArcGisSignInRequest = {
+    /**
+     * Portal Url
+     *
+     * ArcGIS portal URL, for example https://your-org.maps.arcgis.com. The /sharing/rest base is accepted too.
+     */
+    portal_url: string;
+    /**
+     * Username
+     *
+     * ArcGIS account name to sign in with.
+     */
+    username: string;
+    /**
+     * Password
+     *
+     * Password for that ArcGIS account.
+     */
+    password: string;
+};
+/**
+ * ArcGISSignInResponse
+ *
+ * The minted portal token and nothing else about the account.
+ */
+export type ArcGisSignInResponse = {
+    /**
+     * Token
+     *
+     * Short-lived ArcGIS portal token. Use it as the `token` field on probe, preview, commit and refresh.
+     */
+    token: string;
+    /**
+     * Expires At
+     *
+     * UTC instant at which the portal stops accepting the token.
+     */
+    expires_at: string;
+};
 /**
  * AttributeMetadataListResponse
  */
@@ -983,6 +1051,28 @@ export type AuditLogResponse = {
      */
     created_at: string;
 };
+/**
+ * BackfillEstimate
+ *
+ * How long each backfill action should take, before starting one.
+ *
+ * Both figures come from the throughput of the most recent completed run, so
+ * they describe this deployment's own provider rather than a generic rate.
+ */
+export type BackfillEstimate = {
+    /**
+     * Missing Seconds
+     *
+     * Estimated seconds to embed the records that lack a usable vector.
+     */
+    missing_seconds: number;
+    /**
+     * All Seconds
+     *
+     * Estimated seconds to regenerate every record in the catalog.
+     */
+    all_seconds: number;
+};
 /**
  * BackfillResponse
  *
@@ -1006,6 +1096,98 @@ export type BackfillResponse = {
      */
     status: string;
 };
+/**
+ * BackfillRunProgress
+ *
+ * The embedding backfill run currently holding the single run slot.
+ */
+export type BackfillRunProgress = {
+    /**
+     * Job Id
+     *
+     * Identifier of the run in flight.
+     */
+    job_id: string;
+    /**
+     * Status
+     *
+     * Job status: 'pending' or 'running'.
+     */
+    status: string;
+    /**
+     * Records Processed
+     *
+     * Records the run has embedded so far.
+     */
+    records_processed: number;
+    /**
+     * Records Total
+     *
+     * Records the run will embed in total. Null until the run has selected its records.
+     */
+    records_total?: number | null;
+    /**
+     * Started At
+     *
+     * When a worker picked the run up.
+     */
+    started_at?: string | null;
+    /**
+     * Heartbeat At
+     *
+     * Last time the running worker renewed its lease.
+     */
+    heartbeat_at?: string | null;
+};
+/**
+ * BackfillRunSummary
+ *
+ * One finished embedding backfill run.
+ */
+export type BackfillRunSummary = {
+    /**
+     * Job Id
+     *
+     * Identifier of the finished run.
+     */
+    job_id: string;
+    /**
+     * Status
+     *
+     * How the run ended: 'complete', 'failed' or 'cancelled'.
+     */
+    status: string;
+    /**
+     * Started At
+     *
+     * When a worker picked the run up.
+     */
+    started_at?: string | null;
+    /**
+     * Finished At
+     *
+     * When the run reached its final status.
+     */
+    finished_at?: string | null;
+    /**
+     * Records Processed
+     *
+     * Records the run embedded.
+     */
+    records_processed: number;
+    /**
+     * Records Failed
+     *
+     * Records the run could not embed, when the run recorded a count. A finished run with a non-zero figure here left coverage gaps.
+     */
+    records_failed?: number | null;
+    /**
+     * Error Code
+     *
+     * Short code identifying how a run failed, when it failed.
+     */
+    error_code?: string | null;
+};
 /**
  * BasemapConfig
  */
@@ -1051,13 +1233,13 @@ export type BasemapConfig = {
     /**
      * Sublayer Overrides
      *
-     * Per-sublayer style overrides keyed by semantic sublayer ID (e.g. 'road', 'boundary', 'building'). Key set is opaque — unknown future sublayer IDs are accepted without rejection. See CONTEXT.md D-01.
+     * Per-sublayer style overrides keyed by semantic sublayer ID (e.g. 'road', 'boundary', 'building'). The key set is opaque: a sublayer ID this release does not know is accepted and stored rather than rejected.
      */
     sublayer_overrides?: {
         [key: string]: SublayerOverride;
     } | null;
     /**
-     * Whether the basemap renders above ('top') or below ('bottom', default) the data layers. null/undefined loads as 'bottom' on the client. Phase 1051 UX-03 (jsonb-additive, no migration).
+     * Whether the basemap renders above ('top') or below ('bottom', default) the data layers. null/undefined loads as 'bottom' on the client.
      */
     basemap_position?: BasemapPosition | null;
     /**
@@ -1311,6 +1493,10 @@ export type BulkDeleteResultItem = {
      * Detail
      */
     detail?: string | null;
+    /**
+     * Code
+     */
+    code?: string | null;
 };
 /**
  * BulkRegisterItem
@@ -1480,7 +1666,7 @@ export type ChangePasswordRequest = {
     /**
      * New Password
      *
-     * New password (policy: min 12 chars, 3+ character classes: lowercase, uppercase, digits, symbols). The min_length=8 here is a schema floor; the runtime validator enforces the full policy.
+     * New password (policy: min 12 chars, 3+ character classes: lowercase, uppercase, digits, symbols; at most 72 bytes UTF-8). The min_length=8 here is a schema floor; the runtime validator enforces the full policy.
      */
     new_password: string;
 };
@@ -2107,7 +2293,7 @@ export type CommitRequest = {
     /**
      * Token
      *
-     * Optional confirmation token returned by the preview step. Required for some workflows.
+     * Optional auth token for a protected remote service, read only when the job imports a service layer (WFS, OGC API Features, or ArcGIS). At most 1000 characters. Never persisted to the database. Ignored on file-upload jobs. Deprecated: use the auth object with method bearer.
      */
     token?: string | null;
     /**
@@ -2164,6 +2350,16 @@ export type CommitRequest = {
      * CSV/Excel only: name of the WKT geometry column (alternative to x_column/y_column).
      */
     geom_column?: string | null;
+    /**
+     * Structured credential for a protected service. Mutually exclusive with the token field.
+     */
+    auth?: ServiceAuthRequest | null;
+    /**
+     * Strict Cog
+     *
+     * Raster only: reject a non-COG TIFF instead of converting it. False (the default) converts the source to a COG during ingest. True fails the job when the source is not already a compliant COG, and cannot be combined with resampling, nodata_override, srid_override or a compression other than the default DEFLATE: each of those is applied by a conversion, so the commit is refused with a 422 naming the fields that clash.
+     */
+    strict_cog?: boolean;
 };
 /**
  * CommitResponse
@@ -2847,9 +3043,13 @@ export type DatasetRefreshRequest = {
     /**
      * Token
      *
-     * Transient credential for a protected service. Used for this refresh only and never persisted: it is handed to the worker through a single-use, short-lived reference and is gone once claimed. A retry needs a new token.
+     * Transient credential for a protected service. Used for this refresh only and never persisted: it is handed to the worker through a single-use, short-lived reference and is gone once claimed. A retry needs a new token. Deprecated: use the auth object with method bearer.
      */
     token?: string | null;
+    /**
+     * Structured credential for a protected service. Mutually exclusive with the token field.
+     */
+    auth?: ServiceAuthRequest | null;
 };
 /**
  * DatasetRefreshResponse
@@ -3038,7 +3238,7 @@ export type DatasetRelationshipCreate = {
 /**
  * DatasetRelationshipListResponse
  *
- * Paginated list envelope for dataset FK relationships (GAP-033).
+ * Paginated list envelope for dataset FK relationships.
  *
  * Mirrors the ``{<entity>: [...], total: int}`` convention used by every other
  * paginated list endpoint (e.g. AttributeMetadataListResponse,
@@ -3283,7 +3483,7 @@ export type DatasetResponse = {
     /**
      * Source Health Detail
      *
-     * Why the origin is not healthy, as one of a fixed set of GeoLens codes: blocked_by_policy, item_withdrawn, network_error, not_found, server_error, timeout, unauthorized, unexpected_status. Null when healthy or never probed. Never provider text, a URL, or a response body — nothing the origin sent is stored here.
+     * Why the origin is not healthy, as one of a fixed set of GeoLens codes: auth_required, blocked_by_policy, item_withdrawn, network_error, not_found, server_error, timeout, unauthorized, unexpected_status. Null when healthy or never probed. Never provider text, a URL, or a response body — nothing the origin sent is stored here.
      */
     source_health_detail?: string | null;
     /**
@@ -4161,6 +4361,20 @@ export type EmbeddingStatsResponse = {
      * Embedding coverage as a percentage (0-100).
      */
     coverage_percent: number;
+    /**
+     * The backfill run in flight, or null when none is running.
+     */
+    current_run?: BackfillRunProgress | null;
+    /**
+     * Recent Runs
+     *
+     * The most recent finished backfill runs, newest first.
+     */
+    recent_runs?: Array<BackfillRunSummary>;
+    /**
+     * Expected duration of each backfill action, or null until one run has completed and measured this deployment's throughput.
+     */
+    estimate?: BackfillEstimate | null;
 };
 /**
  * EnterpriseTabsResponse
@@ -4695,7 +4909,7 @@ export type JobStatusResponse = {
     /**
      * Current Step
      */
-    current_step?: 'queued' | 'validating' | 'ogr2ogr' | 'finalize' | 'complete' | 'cog_convert' | 'quicklook' | 'analyzing' | 'registering' | null;
+    current_step?: 'queued' | 'downloading' | 'validating' | 'ogr2ogr' | 'finalize' | 'complete' | 'cog_convert' | 'quicklook' | 'analyzing' | 'registering' | null;
     /**
      * Rows Processed
      */
@@ -4902,7 +5116,7 @@ export type LayerInfo = {
     /**
      * Kind
      *
-     * Backend-classified layer kind. 'vector' = point/line/polygon feature data. 'raster' = imagery/coverage. Per Phase 1057 CLASS-07 D-09. Classification rule: raster IFF geometry_type contains 'raster', adapter is STAC, or layer has coverage_format/bands/mediaType:image*. Everything else (including geometry_type=None after D-05 ogrinfo drop) defaults to 'vector'.
+     * Backend-classified layer kind. 'vector' = point/line/polygon feature data. 'raster' = imagery/coverage. Classified as 'raster' when geometry_type contains 'raster', the adapter is STAC, the layer declares coverage_format or bands, or one of its links has a media type of image*. Everything else, including a layer with no geometry_type at all, defaults to 'vector'.
      */
     kind?: 'vector' | 'raster';
 };
@@ -5139,6 +5353,10 @@ export type ManifestSource = {
      * Layer
      */
     layer?: string | null;
+    /**
+     * Checksum
+     */
+    checksum?: string | null;
 };
 /**
  * MapAccessResponse
@@ -5676,6 +5894,10 @@ export type MapLayerResponse = {
      * Tile Version
      */
     tile_version?: number | null;
+    /**
+     * Publication Version
+     */
+    publication_version?: number | null;
     /**
      * Dataset Visibility
      */
@@ -5822,7 +6044,7 @@ export type MapSpriteEntry = {
 /**
  * MapStyleImportRequest
  *
- * Typed request body for POST /maps/import — API-01 / M-05.
+ * Typed request body for POST /maps/import.
  *
  * Mirrors the top-level keys of the MapLibre Style Specification that
  * ``parse_maplibre_style_import`` actually reads. ``extra="allow"`` keeps
@@ -5940,6 +6162,12 @@ export type MapStyleImportSummary = {
      * Warnings
      */
     warnings?: Array<MapStyleImportWarning>;
+    /**
+     * Warnings Truncated
+     *
+     * Warnings produced beyond the reported list
+     */
+    warnings_truncated?: number;
 };
 /**
  * MapStyleImportWarning
@@ -6087,7 +6315,7 @@ export type MapUpdate = {
     /**
      * Legend Title
      *
-     * Custom map-level legend title. Null/empty leaves the legend without a heading override (ENH-06).
+     * Custom map-level legend title. Null or empty leaves the legend without a heading override. At most 120 characters.
      */
     legend_title?: string | null;
 };
@@ -6149,7 +6377,7 @@ export type MetadataAssistRequest = {
 /**
  * NotificationStatusResponse
  *
- * Response for GET /settings/notifications/status/ (NOTIF-05 / NOTIF-06).
+ * Response for GET /settings/notifications/status/.
  *
  * Returns only boolean presence flags — never a secret value (SMTP password,
  * webhook URL, or webhook secret).
@@ -6180,8 +6408,7 @@ export type NotificationStatusResponse = {
  * Per-channel result from POST /settings/notifications/test/.
  *
  * The ``error`` field contains only the exception type name and a short
- * safe message — never the SMTP password, webhook URL, or webhook secret
- * (T-1229-09 / NOTIF-05).
+ * safe message — never the SMTP password, webhook URL, or webhook secret.
  */
 export type NotificationTestChannelResult = {
     /**
@@ -6206,11 +6433,11 @@ export type NotificationTestChannelResult = {
 /**
  * NotificationTestResponse
  *
- * Response for POST /settings/notifications/test/ (NOTIF-06).
+ * Response for POST /settings/notifications/test/.
  *
  * Always returns HTTP 200 — a channel delivery failure is captured in the
  * per-channel ``channels`` list rather than as a 5xx. Never contains secret
- * values (T-1229-09 / NOTIF-05).
+ * values.
  */
 export type NotificationTestResponse = {
     /**
@@ -6386,10 +6613,10 @@ export type OAuthProviderPublic = {
  * The 3 non-secret SAML fields (``idp_entity_id``, ``idp_sso_url``,
  * ``sp_entity_id``) ARE exposed so the admin UI can display them.
  *
- * Pitfall 11 interaction: those 3 fields are declared with ``deferred=True``
- * on the OAuth ORM model so community DBs (which lack the columns) do not
- * crash on SELECT. Pydantic's ``from_attributes=True`` would normally trigger
- * an implicit deferred load on attribute access, which fails under FastAPI's
+ * Those 3 fields are declared with ``deferred=True`` on the OAuth ORM
+ * model so community DBs (which lack the columns) do not crash on
+ * SELECT. Pydantic's ``from_attributes=True`` would normally trigger an
+ * implicit deferred load on attribute access, which fails under FastAPI's
  * async context with ``MissingGreenlet``. The ``model_validator(mode="before")``
  * below reads the SAML fields directly from ``obj.__dict__`` so unloaded
  * attributes default to None instead of triggering IO. SAML admin endpoints
@@ -6828,6 +7055,41 @@ export type OgcLink = {
      */
     title?: string | null;
 };
+/**
+ * OGCRasterBand
+ *
+ * One entry in the raster:bands STAC extension array.
+ *
+ * fix(#1805 review round 3 P2): matches the shape service_records.py
+ * actually serializes per band. `statistics` matches the normalized
+ * band_info shape core/raster_bands.py (introduced by #1803, the raster
+ * lifecycle PR) produces on read; keep this in sync if that PR changes
+ * the per-band keys.
+ */
+export type OgcRasterBand = {
+    /**
+     * Name
+     */
+    name?: string | null;
+    /**
+     * Data Type
+     */
+    data_type?: string | null;
+    /**
+     * Nodata
+     */
+    nodata?: string | number | number | null;
+    /**
+     * Statistics
+     */
+    statistics?: {
+        [key: string]: unknown;
+    } | null;
+    /**
+     * Description
+     */
+    description?: string | null;
+};
 /**
  * OGCRecordLink
  *
@@ -7033,6 +7295,14 @@ export type OgcRecordProperties = {
      * Gsd
      */
     gsd?: number | null;
+    /**
+     * Res X
+     */
+    res_x?: number | null;
+    /**
+     * Res Y
+     */
+    res_y?: number | null;
     /**
      * Crs Is Geographic
      *
@@ -7051,6 +7321,23 @@ export type OgcRecordProperties = {
      * Dataset Count
      */
     dataset_count?: number | null;
+    /**
+     * Proj:Code
+     */
+    'proj:code'?: string | null;
+    /**
+     * Proj:Shape
+     *
+     * [height, width] in pixels.
+     */
+    'proj:shape'?: [
+        number,
+        number
+    ] | null;
+    /**
+     * Raster:Bands
+     */
+    'raster:bands'?: Array<OgcRasterBand> | null;
 };
 /**
  * OGCRecordResponse
@@ -7101,7 +7388,7 @@ export type OgcRecordResponse = {
 /**
  * OgImageUploadRequest
  *
- * JSON body for PUT /maps/{map_id}/og-image/ (SHARE-08 Path A).
+ * JSON body for PUT /maps/{map_id}/og-image/.
  *
  * Accepts a base64 data URI up to 750 KB (as a string). This generous
  * ceiling accommodates a 1200x630 JPEG at quality 0.85, which encodes
@@ -7111,7 +7398,7 @@ export type OgcRecordResponse = {
  * empty/clearly-malformed URIs without false-positives.
  * - ``max_length=750_000``: ~562 KB decoded — generous for 1200x630 JPEG.
  * DO NOT raise ThumbnailUploadRequest.max_length to match this value;
- * the 100KB thumbnail cap is a locked contract (Phase 254 / D-03).
+ * the 100KB thumbnail cap is a locked contract.
  */
 export type OgImageUploadRequest = {
     /**
@@ -7324,9 +7611,13 @@ export type ProbeRequest = {
     /**
      * Token
      *
-     * Optional auth token for protected services (passed as query parameter or bearer token depending on service type).
+     * Optional auth token for protected services (passed as query parameter or bearer token depending on service type). Deprecated: use the auth object with method bearer.
      */
     token?: string | null;
+    /**
+     * Structured credential for a protected service. Mutually exclusive with the token field.
+     */
+    auth?: ServiceAuthRequest | null;
 };
 /**
  * ProbeResponse
@@ -7924,14 +8215,26 @@ export type ReuploadCommitRequest = {
      * Srid Override
      */
     srid_override?: number | null;
+    /**
+     * Expected Origin Kind
+     *
+     * The dataset origin the client saw when it staged this replacement. When set, the commit is refused with 409 `origin_changed` if the dataset's origin no longer matches, so a service, STAC or registered-table binding established after the upload is not silently rebound to an upload. Optional: a client that omits it keeps the pre-#1768 behaviour.
+     */
+    expected_origin_kind?: 'upload' | 'postgis' | 'service' | 'stac' | 'created' | null;
     /**
      * Token
+     *
+     * Deprecated: use the auth object with method bearer.
      */
     token?: string | null;
     /**
      * Layer Name
      */
     layer_name?: string | null;
+    /**
+     * Structured credential for a protected service. Mutually exclusive with the token field.
+     */
+    auth?: ServiceAuthRequest | null;
 };
 /**
  * ReuploadCommitResponse
@@ -8052,12 +8355,18 @@ export type ReuploadServicePreviewRequest = {
     layer_id?: number | string | null;
     /**
      * Token
+     *
+     * Deprecated: use the auth object with method bearer.
      */
     token?: string | null;
     /**
      * Object Id Field
      */
     object_id_field?: string | null;
+    /**
+     * Structured credential for a protected service. Mutually exclusive with the token field.
+     */
+    auth?: ServiceAuthRequest | null;
 };
 /**
  * SSEActionsEvent
@@ -8338,9 +8647,52 @@ export type SchemaDiff = {
     /**
      * Row Count Delta
      *
-     * row_count_new minus row_count_old
+     * row_count_new minus row_count_old, or null when either side is unknown
+     */
+    row_count_delta: number | null;
+};
+/**
+ * ServiceAuthRequest
+ *
+ * How one request authenticates to the remote service it names.
+ */
+export type ServiceAuthRequest = {
+    /**
+     * Method
+     *
+     * How the credential is presented to the remote service. Omit the whole auth object for a public service.
+     */
+    method: 'bearer' | 'basic' | 'header';
+    /**
+     * Token
+     *
+     * Bearer token or API key, for method bearer.
+     */
+    token?: string | null;
+    /**
+     * Username
+     *
+     * Username, for method basic.
+     */
+    username?: string | null;
+    /**
+     * Password
+     *
+     * Password, for method basic.
+     */
+    password?: string | null;
+    /**
+     * Header Name
+     *
+     * Name of the header the key is sent under, for method header.
+     */
+    header_name?: string | null;
+    /**
+     * Header Value
+     *
+     * Value of the header the key is sent under, for method header.
      */
-    row_count_delta: number;
+    header_value?: string | null;
 };
 /**
  * ServiceHealth
@@ -8396,7 +8748,7 @@ export type ServicePreviewRequest = {
     /**
      * Token
      *
-     * Optional auth token for protected services.
+     * Optional auth token for protected services. Deprecated: use the auth object with method bearer.
      */
     token?: string | null;
     /**
@@ -8405,6 +8757,10 @@ export type ServicePreviewRequest = {
      * ArcGIS OID field name used for orderByFields during preview pagination.
      */
     object_id_field?: string | null;
+    /**
+     * Structured credential for a protected service. Mutually exclusive with the token field.
+     */
+    auth?: ServiceAuthRequest | null;
 };
 /**
  * ServicePreviewResponse
@@ -8822,7 +9178,7 @@ export type SourceHealthResponse = {
     /**
      * Source Health Detail
      *
-     * Why the origin is not healthy, as one of a fixed set of GeoLens codes: blocked_by_policy, item_withdrawn, network_error, not_found, server_error, timeout, unauthorized, unexpected_status. Null when healthy or never probed. Never provider text, a URL, or a response body — nothing the origin sent is stored here.
+     * Why the origin is not healthy, as one of a fixed set of GeoLens codes: auth_required, blocked_by_policy, item_withdrawn, network_error, not_found, server_error, timeout, unauthorized, unexpected_status. Null when healthy or never probed. Never provider text, a URL, or a response body — nothing the origin sent is stored here.
      */
     source_health_detail?: string | null;
     /**
@@ -9086,6 +9442,16 @@ export type StacConnectRequest = {
      * STAC API root URL to connect to.
      */
     url: string;
+    /**
+     * Token
+     *
+     * Optional auth token for a protected STAC catalog. Deprecated: use the auth object with method bearer.
+     */
+    token?: string | null;
+    /**
+     * Structured credential for a protected service. Mutually exclusive with the token field.
+     */
+    auth?: ServiceAuthRequest | null;
 };
 /**
  * StacConnectResponse
@@ -9241,6 +9607,12 @@ export type StacImportRequest = {
      * Visibility for imported datasets.
      */
     visibility?: 'private' | 'restricted' | 'internal' | 'public';
+    /**
+     * Catalog Auth Required
+     *
+     * Whether browsing this catalog needed a credential. Set it when the search that produced these items carried one, so the first refresh asks for a credential instead of failing anonymously.
+     */
+    catalog_auth_required?: boolean;
 };
 /**
  * StacImportResponse
@@ -9694,6 +10066,16 @@ export type StacSearchRequest = {
      * Maximum items to return.
      */
     limit?: number;
+    /**
+     * Token
+     *
+     * Optional auth token for a protected STAC catalog. Deprecated: use the auth object with method bearer.
+     */
+    token?: string | null;
+    /**
+     * Structured credential for a protected service. Mutually exclusive with the token field.
+     */
+    auth?: ServiceAuthRequest | null;
 };
 /**
  * StacSearchResponse
@@ -9810,12 +10192,12 @@ export type StatusUpdateResponse = {
  * validation time (Pydantic ``ge``/``le`` constraints).
  *
  * The key set of ``BasemapConfig.sublayer_overrides`` is treated as opaque
- * (forward-compatible with future sublayer IDs) — see CONTEXT.md D-01.
+ * (forward-compatible with future sublayer IDs).
  *
  * Security:
- * extra="forbid" locks the D-14 scope guardrail: unknown style axes such
- * as dash patterns, line caps, halo blur, and text-font are rejected at
- * validation time (T-1059A-03).
+ * extra="forbid" locks the scope guardrail: unknown style axes such as
+ * dash patterns, line caps, halo blur, and text-font are rejected at
+ * validation time.
  */
 export type SublayerOverride = {
     /**
@@ -9857,7 +10239,7 @@ export type SublayerOverride = {
     /**
      * Opacity
      *
-     * Per-sublayer opacity (0-1), or null to use the basemap default. Composes on top of BasemapConfig.opacity (the whole-basemap master opacity): the rendered opacity is override.opacity * master_opacity (builder-audit #338 CORR-01). The UI opacity slider in BasemapSublayerEditorScene persists through this field: MapBuilderPage.handleSublayerOpacityChange -> setBasemapSublayerOpacity -> updateBasemapSublayerOverride writes config.sublayer_overrides[key].opacity.
+     * Per-sublayer opacity (0-1), or null to use the basemap default. Composes on top of BasemapConfig.opacity (the whole-basemap master opacity): the rendered opacity is override.opacity * master_opacity (#338). The UI opacity slider in BasemapSublayerEditorScene persists through this field: MapBuilderPage.handleSublayerOpacityChange -> setBasemapSublayerOpacity -> updateBasemapSublayerOverride writes config.sublayer_overrides[key].opacity.
      */
     opacity?: number | null;
 };
@@ -9920,9 +10302,9 @@ export type TerrainConfig = {
  * JSON body for PUT /maps/{map_id}/thumbnail/.
  *
  * Replaces a previous text/plain body shape that openapi-python-client
- * could not parse (would silently skip endpoint). See Phase 254 / SDK-01.
+ * could not parse (would silently skip endpoint).
  *
- * Phase 254 IN-02: ``data_uri`` carries explicit length bounds so
+ * ``data_uri`` carries explicit length bounds so
  * Pydantic surfaces a 422 with field-level detail (better SDK-consumer
  * UX than a generic 400) and the OpenAPI schema documents the limit.
  * The router still validates the ``data:image/`` prefix and base64
@@ -10150,7 +10532,7 @@ export type UploadResponse = {
     /**
      * Status
      *
-     * Initial job status. Always 'pending' on creation.
+     * Initial job status. 'pending' means the file is staged and ready to preview; 'running' means the server is still fetching it, as it is for a URL import.
      */
     status?: string;
     /**
@@ -10196,7 +10578,7 @@ export type UserCreate = {
     /**
      * Password
      *
-     * Plaintext password (policy: min 12 chars, 3+ character classes)
+     * Plaintext password (policy: min 12 chars, 3+ character classes, at most 72 bytes UTF-8)
      */
     password: string;
     /**
@@ -10910,6 +11292,10 @@ export type CreateApiKeyAdminApiKeysPostErrors = {
      * Not found
      */
     404: ProblemDetail;
+    /**
+     * Conflict — resource state prevents the operation
+     */
+    409: ProblemDetail;
     /**
      * Validation error
      */
@@ -12256,6 +12642,59 @@ export type RejectUserAdminUsersUserIdRejectPostResponses = {
     204: void;
 };
 export type RejectUserAdminUsersUserIdRejectPostResponse = RejectUserAdminUsersUserIdRejectPostResponses[keyof RejectUserAdminUsersUserIdRejectPostResponses];
+export type ResetUserPasswordAdminUsersUserIdResetPasswordPostData = {
+    body: AdminPasswordReset;
+    path: {
+        /**
+         * User Id
+         */
+        user_id: string;
+    };
+    query?: never;
+    url: '/admin/users/{user_id}/reset-password/';
+};
+export type ResetUserPasswordAdminUsersUserIdResetPasswordPostErrors = {
+    /**
+     * Bad request — invalid query parameters or payload
+     */
+    400: ProblemDetail;
+    /**
+     * Unauthorized — missing or invalid credentials
+     */
+    401: ProblemDetail;
+    /**
+     * Forbidden — caller lacks access to this resource
+     */
+    403: ProblemDetail;
+    /**
+     * Not found
+     */
+    404: ProblemDetail;
+    /**
+     * Validation error
+     */
+    422: ProblemDetail;
+    /**
+     * Too many requests — retry after the advertised interval
+     */
+    429: ProblemDetail;
+    /**
+     * Internal server error
+     */
+    500: ProblemDetail;
+    /**
+     * Service unavailable — the database could not serve the request
+     */
+    503: ProblemDetail;
+};
+export type ResetUserPasswordAdminUsersUserIdResetPasswordPostError = ResetUserPasswordAdminUsersUserIdResetPasswordPostErrors[keyof ResetUserPasswordAdminUsersUserIdResetPasswordPostErrors];
+export type ResetUserPasswordAdminUsersUserIdResetPasswordPostResponses = {
+    /**
+     * Successful Response
+     */
+    200: UserResponse;
+};
+export type ResetUserPasswordAdminUsersUserIdResetPasswordPostResponse = ResetUserPasswordAdminUsersUserIdResetPasswordPostResponses[keyof ResetUserPasswordAdminUsersUserIdResetPasswordPostResponses];
 export type AiAvailabilityEndpointAiAvailabilityGetData = {
     body?: never;
     path?: never;
@@ -14709,7 +15148,7 @@ export type GetCollectionItemsCollectionsDatasetIdItemsGetData = {
         /**
          * After Gid
          *
-         * Keyset cursor: returns features with gid > after_gid. Phase 269 H-24 primary pagination path; use the rel=next link for follow-up pages.
+         * Keyset cursor: returns features with gid > after_gid. The preferred pagination path; use the rel=next link for follow-up pages.
          */
         after_gid?: number | null;
         /**
@@ -14757,7 +15196,7 @@ export type GetCollectionItemsCollectionsDatasetIdItemsGetData = {
 };
 export type GetCollectionItemsCollectionsDatasetIdItemsGetErrors = {
     /**
-     * Bad request — invalid query parameters or payload
+     * Bad request. Either a query parameter is invalid, or the `filter` was refused. A CQL2 filter is refused when it names a queryable this collection does not publish, or uses an operator this server does not implement; when it is longer than 10,000 characters; when it nests deeper than the parser will walk; or when it expands to more than 1,000 bound parameters. The last two are resource bounds rather than syntax errors, so the filter can be valid CQL2 and still be declined: an `IN` list reaches the parameter ceiling well before the character limit, since `render_postcompile` expands it to one parameter per member. Both are answered deterministically, so a client that splits the filter and pages the results gets the same rows.
      */
     400: ProblemDetail;
     /**
@@ -16653,6 +17092,10 @@ export type DownloadCogDatasetsDatasetIdDownloadCogGetErrors = {
      * Not found
      */
     404: ProblemDetail;
+    /**
+     * Precondition failed — the caller's If-Match no longer matches the current representation
+     */
+    412: ProblemDetail;
     /**
      * Validation error
      */
@@ -16728,6 +17171,10 @@ export type ExportDatasetEndpointDatasetsDatasetIdExportGetErrors = {
      * Not found
      */
     404: ProblemDetail;
+    /**
+     * Precondition failed — the caller's If-Match no longer matches the current representation
+     */
+    412: ProblemDetail;
     /**
      * Payload too large
      */
@@ -16832,7 +17279,7 @@ export type ListFeaturesDatasetsDatasetIdFeaturesGetData = {
         /**
          * Offset
          *
-         * Legacy offset-based pagination. Phase 269 H-24 lowered the max limit to 200 from 1000.
+         * Legacy offset-based pagination. The companion limit is capped at 200 per page, and a high offset is costly to serve.
          */
         offset?: number;
         /**
@@ -18021,7 +18468,7 @@ export type ListDatasetRelationshipsDatasetsDatasetIdRelationshipsGetData = {
         /**
          * Limit
          *
-         * Maximum number of relationships to return (PERF-N16).
+         * Maximum number of relationships to return. Capped at 1000.
          */
         limit?: number;
     };
@@ -19274,7 +19721,7 @@ export type DiscoverTablesIngestDiscoverGetData = {
         /**
          * Limit
          *
-         * Maximum number of tables to return (PERF-11 bound).
+         * Maximum number of tables to return. Capped at 5000.
          */
         limit?: number;
     };
@@ -23879,6 +24326,66 @@ export type GetSavedSearchEndpointSearchSavedSearchIdGetResponses = {
     200: SavedSearchResponse;
 };
 export type GetSavedSearchEndpointSearchSavedSearchIdGetResponse = GetSavedSearchEndpointSearchSavedSearchIdGetResponses[keyof GetSavedSearchEndpointSearchSavedSearchIdGetResponses];
+export type ArcgisSigninServicesArcgisSigninPostData = {
+    body: ArcGisSignInRequest;
+    path?: never;
+    query?: never;
+    url: '/services/arcgis/signin/';
+};
+export type ArcgisSigninServicesArcgisSigninPostErrors = {
+    /**
+     * Bad request — invalid payload
+     */
+    400: ProblemDetail;
+    /**
+     * Unauthorized — missing or invalid credentials
+     */
+    401: ProblemDetail;
+    /**
+     * Forbidden — caller lacks write access
+     */
+    403: ProblemDetail;
+    /**
+     * Not found
+     */
+    404: ProblemDetail;
+    /**
+     * Conflict — resource state prevents the operation
+     */
+    409: ProblemDetail;
+    /**
+     * Validation error
+     */
+    422: ProblemDetail;
+    /**
+     * Too many requests — retry after the advertised interval
+     */
+    429: ProblemDetail;
+    /**
+     * Internal server error
+     */
+    500: ProblemDetail;
+    /**
+     * Bad gateway — the ArcGIS portal could not be reached or did not answer with a sign-in response
+     */
+    502: ProblemDetail;
+    /**
+     * Service unavailable — the database could not serve the request
+     */
+    503: ProblemDetail;
+    /**
+     * Gateway timeout — the ArcGIS portal did not respond in time
+     */
+    504: ProblemDetail;
+};
+export type ArcgisSigninServicesArcgisSigninPostError = ArcgisSigninServicesArcgisSigninPostErrors[keyof ArcgisSigninServicesArcgisSigninPostErrors];
+export type ArcgisSigninServicesArcgisSigninPostResponses = {
+    /**
+     * Successful Response
+     */
+    200: ArcGisSignInResponse;
+};
+export type ArcgisSigninServicesArcgisSigninPostResponse = ArcgisSigninServicesArcgisSigninPostResponses[keyof ArcgisSigninServicesArcgisSigninPostResponses];
 export type ListConnectorsEndpointServicesConnectorsGetData = {
     body?: never;
     path?: never;
@@ -25360,7 +25867,7 @@ export type GetCollectionItemsStacCollectionsCollectionIdItemsGetData = {
         /**
          * Offset
          *
-         * Legacy offset-based pagination. Phase 269 H-24 lowered the max limit to 200 and recommends keyset cursors via the rel=next link for deep paging.
+         * Legacy offset-based pagination. The page size is capped at 200; the rel=next link advances one page at a time, and a high offset is costly to serve.
          */
         offset?: number;
     };
@@ -25553,7 +26060,7 @@ export type SearchGetStacSearchGetData = {
         /**
          * Intersects
          *
-         * GeoJSON geometry for spatial intersection. SEC-FU-05 (sec-audit-20260519.md): max_length=10000 caps a multi-megabyte GeoJSON DoS-amplifier — fits ~150-vertex polygons at 2-decimal-place lat/lon coordinates.
+         * GeoJSON geometry for spatial intersection. At most 10000 characters, which fits a polygon of several hundred vertices at 2-decimal-place lat/lon coordinates.
          */
         intersects?: string | null;
         /**
@@ -25565,7 +26072,7 @@ export type SearchGetStacSearchGetData = {
         /**
          * Offset
          *
-         * Legacy offset-based pagination. Phase 269 H-24 lowered the max limit to 200 from 1000 to bound deep-paging cost.
+         * Legacy offset-based pagination. The page size is capped at 200; a high offset is costly to serve.
          */
         offset?: number;
     };
@@ -25770,19 +26277,19 @@ export type RasterTileProxyTilesRasterProxyDatasetIdZxyFmtGetData = {
         /**
          * Pmin
          *
-         * Lower percentile clip for stretch=percentile (0–100, default 2). Absent = current p2 behavior. Must be less than pmax.
+         * Lower percentile clip for stretch=percentile (0–100, default 2). Absent = current p2 behavior. Must be less than pmax. Ignored, and not validated, when stretch is not percentile.
          */
         pmin?: number | null;
         /**
          * Pmax
          *
-         * Upper percentile clip for stretch=percentile (0–100, default 98). Absent = current p98 behavior. Must be greater than pmin.
+         * Upper percentile clip for stretch=percentile (0–100, default 98). Absent = current p98 behavior. Must be greater than pmin. Ignored, and not validated, when stretch is not percentile.
          */
         pmax?: number | null;
         /**
          * Sigma
          *
-         * Standard-deviation multiplier for stretch=stddev (default 2.0). Absent = current 2.0σ behavior. Must be > 0.
+         * Standard-deviation multiplier for stretch=stddev (default 2.0). Absent = current 2.0σ behavior. Must be > 0. Ignored, and not validated, when stretch is not stddev.
          */
         sigma?: number | null;
     };