@keboola/api-client 20.0.0 → 21.0.0

package/dist/{types-YEfQ5pAy.d.cts → types-DJLceKR0.d.cts}

@@ -615,6 +615,26 @@ type paths = {
     patch?: never;
     trace?: never;
   };
+  '/manage/internal/auth-bridge/exchange-oauth-token': {
+    parameters: {
+      query?: never;
+      header?: never;
+      path?: never;
+      cookie?: never;
+    };
+    get?: never;
+    put?: never;
+    /**
+     * Exchange a league OAuth token for a programmatic session (auth bridge)
+     * @description Validates a league OAuth `claudai` subject token and exchanges it for a project-pinned, Manage-less programmatic session. Used by the hosted Keboola MCP server via its Kubernetes-authenticated auth-bridge proxy.
+     */
+    post: operations['post_/manage/internal/auth-bridge/exchange-oauth-token::AuthBridgeOAuthExchangeAction'];
+    delete?: never;
+    options?: never;
+    head?: never;
+    patch?: never;
+    trace?: never;
+  };
   '/manage/internal/auth-bridge/resolve-storage-token': {
     parameters: {
       query?: never;
@@ -1868,7 +1888,7 @@ type paths = {
     put?: never;
     /**
      * Set project limits
-     * @description Changing project limits is allowed only for a super admin.
+     * @description Super admins may set any project limit. Admins with the "can-manage-project-limits" feature may set only a whitelisted subset of limits.
      */
     post: operations['post_/manage/projects/{projectId}/limits::ProjectSetLimitsAction'];
     delete?: never;
@@ -1993,31 +2013,6 @@ type paths = {
     patch?: never;
     trace?: never;
   };
-  '/manage/storage-backend': {
-    parameters: {
-      query?: never;
-      header?: never;
-      path?: never;
-      cookie?: never;
-    };
-    /**
-     * List backends
-     * @description Returns the list of registered storage backends (Snowflake, BigQuery).
-     */
-    get: operations['get_/manage/storage-backend::StorageBackendListAction'];
-    put?: never;
-    /**
-     * Create storage backend credentials
-     * @deprecated
-     * @description **Deprecated.** Generic storage-backend create endpoint. Use the backend-specific endpoints instead — `POST /manage/storage-backend/snowflake` or `POST /manage/storage-backend/bigquery`.
-     */
-    post: operations['post_/manage/storage-backend::StorageBackendCreateAction'];
-    delete?: never;
-    options?: never;
-    head?: never;
-    patch?: never;
-    trace?: never;
-  };
   '/manage/storage-backend/bigquery': {
     parameters: {
       query?: never;
@@ -2069,6 +2064,66 @@ type paths = {
     patch: operations['patch_/manage/storage-backend/{id}::StorageBackendUpdateAction'];
     trace?: never;
   };
+  '/manage/storage-backend': {
+    parameters: {
+      query?: never;
+      header?: never;
+      path?: never;
+      cookie?: never;
+    };
+    /**
+     * List backends
+     * @description Returns the list of registered storage backends (Snowflake, BigQuery).
+     */
+    get: operations['get_/manage/storage-backend::StorageBackendListAction'];
+    put?: never;
+    post?: never;
+    delete?: never;
+    options?: never;
+    head?: never;
+    patch?: never;
+    trace?: never;
+  };
+  '/manage/storage-backend/{id}/maintainers': {
+    parameters: {
+      query?: never;
+      header?: never;
+      path?: never;
+      cookie?: never;
+    };
+    /**
+     * List backend maintainers
+     * @description Returns the maintainers that have the storage backend identified by its numeric ID configured as one of their default backend connections.
+     */
+    get: operations['get_/manage/storage-backend/{id}/maintainers::StorageBackendMaintainerListAction'];
+    put?: never;
+    post?: never;
+    delete?: never;
+    options?: never;
+    head?: never;
+    patch?: never;
+    trace?: never;
+  };
+  '/manage/storage-backend/{id}/projects': {
+    parameters: {
+      query?: never;
+      header?: never;
+      path?: never;
+      cookie?: never;
+    };
+    /**
+     * List backend projects
+     * @description Returns the projects assigned to the storage backend identified by its numeric ID. Synapse-assigned projects are not counted (deprecated backend, intentionally excluded).
+     */
+    get: operations['get_/manage/storage-backend/{id}/projects::StorageBackendProjectListAction'];
+    put?: never;
+    post?: never;
+    delete?: never;
+    options?: never;
+    head?: never;
+    patch?: never;
+    trace?: never;
+  };
   '/manage/storage-backend/{id}/bigquery': {
     parameters: {
       query?: never;
@@ -2821,6 +2876,12 @@ type components = {
       designAdminEmail?: string | null;
       /** @description Email domains this IdP is allowed to assert (at least one). A login is denied unless the asserted email's domain is in this list. Domains are globally unique across SAML configurations. */
       permittedEmailDomains: string[];
+      /**
+       * @description Membership restriction mode (optional, defaults to "none"). With "permittedDomains", membership in the maintainer and its organizations and projects is restricted to the permitted email domains.
+       * @example permittedDomains
+       * @enum {string|null}
+       */
+      membershipRestriction?: 'none' | 'permittedDomains' | null;
     };
     SamlConfigCreateRequest: {
       /**
@@ -2838,6 +2899,12 @@ type components = {
        * @example SAML SSO for Acme employees using Okta
        */
       description?: string | null;
+      /**
+       * @description Membership restriction mode (optional, defaults to "none"). With "permittedDomains", membership in the maintainer and its organizations and projects is restricted to the permitted email domains once the config is active.
+       * @example permittedDomains
+       * @enum {string|null}
+       */
+      membershipRestriction?: 'none' | 'permittedDomains' | null;
     };
     SamlConfigUpdateRequest: {
       name?: string | null;
@@ -2863,6 +2930,11 @@ type components = {
       loginUrlParams?: Record<string, never> | null;
       /** @description Replace the allowed email domains (at least one). Omit to leave unchanged. */
       permittedEmailDomains?: string[] | null;
+      /**
+       * @description Membership restriction mode. With "permittedDomains", membership in the maintainer and its organizations and projects is restricted to the permitted email domains. Omit to leave unchanged.
+       * @enum {string|null}
+       */
+      membershipRestriction?: 'none' | 'permittedDomains' | null;
     };
     OrganizationMetadataRequest: {
       /**
@@ -3046,18 +3118,19 @@ type components = {
        */
       bqExternalSharingRoleName?: string | null;
     };
-    /** @description Partial update of a storage backend; at least one of `username`, `password`, `useDynamicBackends`, `owner`, `technicalOwner` or `technicalOwnerContactEmails` must be supplied. Individual attributes are optional on their own. */
+    StorageBackendProjectListRequest: {
+      /** @description Maximum number of projects to return. Default value: 100. */
+      limit?: number | null;
+      /** @description Pagination offset. Default value: 0. */
+      offset?: number | null;
+    };
+    /** @description Partial update of a storage backend; at least one of `username`, `useDynamicBackends`, `owner`, `technicalOwner` or `technicalOwnerContactEmails` must be supplied. Individual attributes are optional on their own. */
     StorageBackendUpdateRequest: {
       /**
        * @description Backend username.
        * @example keboola
        */
       username?: string | null;
-      /**
-       * @description Backend password.
-       * @example 1234
-       */
-      password?: string | null;
       /**
        * @description Only for backends supporting dynamic sizing (Snowflake). When enabled, new projects get dynamic backends assigned automatically.
        * @example false
@@ -3426,6 +3499,17 @@ type components = {
       deletedTime: string;
       /** Format: date-time */
       purgedTime?: string | null;
+      /** @description Organization the project belongs to. */
+      organization: {
+        id?: number;
+        name?: string;
+        /** Format: date-time */
+        created?: string;
+        allowAutoJoin?: boolean;
+        crmId?: string | null;
+        activityCenterProjectId?: number | null;
+        mfaRequired?: boolean;
+      };
     };
     DeletedProjectsListResponse: components['schemas']['DeletedProjectResponse'][];
     /**
@@ -3656,6 +3740,24 @@ type components = {
         name?: string;
       };
     };
+    UserLoggedInResponse: {
+      id: number;
+      email: string;
+      name: string;
+    };
+    CliTokenResponse: {
+      /** @description Opaque bearer access token for API authentication. */
+      accessToken: string;
+      /** @description Refresh token for obtaining new access tokens. */
+      refreshToken: string;
+      /** @description Token type. Always "Bearer". */
+      tokenType: string;
+      /** @description Access token lifetime in seconds. */
+      expiresIn: number;
+      /** @description Unique session identifier. */
+      sessionId: string;
+      user: components['schemas']['UserLoggedInResponse'];
+    };
     TokenVerifyResponse: {
       id: string;
       /** @description Optional provided only in specific cases. */
@@ -4611,6 +4713,26 @@ type components = {
       /** @description SAML2 public key for security integration (only present when SSO is enabled) */
       securityIntegrationKey?: string | null;
     };
+    StorageBackendBigqueryResponse: {
+      /** @description Root credentials identifier. */
+      id: number;
+      /** @description Storage backend type. Always "bigquery" for this response. */
+      backend: string;
+      /** @description Backend region. */
+      region: string;
+      /** @description Associated GCP account owner (e.g. keboola, client-<name>). */
+      owner: string;
+      /** @description Technical owner who manages the account. One of: keboola, internal, kbdb, byodb. */
+      technicalOwner: string;
+      /** @description Contact emails of the technical owner. */
+      technicalOwnerContactEmails: string[];
+      /** @description GCP service account credentials in JSON form. */
+      credentials?: Record<string, never> | null;
+      /** @description GCP folder identifier under which projects are created. */
+      folderId?: string | null;
+      /** @description Name of the custom IAM role pre-configured for Analytics Hub external bucket sharing. When set, the bucket sharing setup guide surfaces this role name to the user. When null, the guide falls back to recommending the built-in roles/analyticshub.listingAdmin role. */
+      bqExternalSharingRoleName?: string | null;
+    };
     StorageBackendDetailResponse: {
       /** @description Root credentials identifier. */
       id: number;
@@ -4673,28 +4795,43 @@ type components = {
       isSsoConfigured?: boolean | null;
       /** @description Array of technical owner contact emails for SAML2 certificate rotation notifications. */
       technicalOwnerContactEmails: string[];
+      /** @description Number of projects assigned to this backend, unlike stats.projectsCount which only counts projects with data (buckets) on it. Synapse-assigned projects are not counted (deprecated backend, intentionally excluded). */
+      assignedProjectsCount: number;
+      /** @description Number of maintainers with this backend as a default connection. */
+      assignedMaintainersCount: number;
+      /** @description Detail endpoint only (absent on the list endpoint). Backend internal login type, e.g. default, snowflake-service-keypair, snowflake-person-keypair. */
+      loginType: string;
+      /**
+       * Format: date-time
+       * @description Detail endpoint only (absent on the list endpoint). Most recent enabledAt of an active Snowflake RSA key-pair certificate; null for password-based backends.
+       */
+      keyPairLastRotatedAt?: string | null;
     };
     StorageBackendListResponse: components['schemas']['StorageBackendDetailResponse'][];
-    StorageBackendBigqueryResponse: {
-      /** @description Root credentials identifier. */
+    StorageBackendMaintainerListResponse: {
+      /**
+       * @description Maintainer identifier.
+       * @example 1
+       */
       id: number;
-      /** @description Storage backend type. Always "bigquery" for this response. */
-      backend: string;
-      /** @description Backend region. */
-      region: string;
-      /** @description Associated GCP account owner (e.g. keboola, client-<name>). */
-      owner: string;
-      /** @description Technical owner who manages the account. One of: keboola, internal, kbdb, byodb. */
-      technicalOwner: string;
-      /** @description Contact emails of the technical owner. */
-      technicalOwnerContactEmails: string[];
-      /** @description GCP service account credentials in JSON form. */
-      credentials?: Record<string, never> | null;
-      /** @description GCP folder identifier under which projects are created. */
-      folderId?: string | null;
-      /** @description Name of the custom IAM role pre-configured for Analytics Hub external bucket sharing. When set, the bucket sharing setup guide surfaces this role name to the user. When null, the guide falls back to recommending the built-in roles/analyticshub.listingAdmin role. */
-      bqExternalSharingRoleName?: string | null;
-    };
+      /**
+       * @description Maintainer name.
+       * @example Test maintainer
+       */
+      name: string;
+    }[];
+    StorageBackendProjectListResponse: {
+      /**
+       * @description Project identifier.
+       * @example 771
+       */
+      id: number;
+      /**
+       * @description Project name.
+       * @example Test project
+       */
+      name: string;
+    }[];
     /**
      * @example {
      *       "id": 13702,
@@ -5759,7 +5896,13 @@ type operations = {
            *       "isDeleted": true,
            *       "deletedTime": "2018-02-11T14:25:15+0100",
            *       "purgedTime": null,
-           *       "isBYODB": false
+           *       "isBYODB": false,
+           *       "organization": {
+           *         "id": 1,
+           *         "name": "Keboola Tests",
+           *         "created": "",
+           *         "allowAutoJoin": true
+           *       }
            *     }
            */
           'application/json': components['schemas']['DeletedProjectResponse'];
@@ -6111,7 +6254,7 @@ type operations = {
         };
         content?: never;
       };
-      /** @description Returned when the current admin is not a super admin. */
+      /** @description Returned when the current admin is neither a super admin nor holds the can-manage-features feature. */
       403: {
         headers: {
           [name: string]: unknown;
@@ -6455,7 +6598,7 @@ type operations = {
         };
         content?: never;
       };
-      /** @description Returned when the current admin is not a super admin. */
+      /** @description Returned when the current admin is neither a super admin nor holds the can-manage-features feature. */
       403: {
         headers: {
           [name: string]: unknown;
@@ -7161,6 +7304,43 @@ type operations = {
       };
     };
   };
+  'post_/manage/internal/auth-bridge/exchange-oauth-token::AuthBridgeOAuthExchangeAction': {
+    parameters: {
+      query?: never;
+      header: {
+        /** @description League OAuth `claudai` access token to exchange. */
+        'X-Subject-Token': string;
+      };
+      path?: never;
+      cookie?: never;
+    };
+    requestBody?: never;
+    responses: {
+      /** @description Programmatic session issued. */
+      200: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          'application/json': components['schemas']['CliTokenResponse'];
+        };
+      };
+      /** @description Returned when the subject token is missing, invalid, or not bound to an active admin. */
+      401: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Returned when the caller is not Kubernetes-authenticated or the token lacks the required scope. */
+      403: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+    };
+  };
   'post_/manage/internal/auth-bridge/resolve-storage-token::AuthBridgeStorageTokenResolveAction': {
     parameters: {
       query?: never;
@@ -8305,8 +8485,16 @@ type operations = {
             customerSlug?: string;
             name?: string;
             isActive?: boolean;
+            /** @enum {string} */
+            membershipRestriction?: 'none' | 'permittedDomains';
             message?: string;
             loginUrl?: string;
+            /** @description Present when membershipRestriction is permittedDomains and organizations under the maintainer still allow Auto Join. */
+            warnings?: {
+              code?: string;
+              message?: string;
+              organizationIds?: number[];
+            }[];
           };
         };
       };
@@ -8555,7 +8743,15 @@ type operations = {
             id?: number;
             maintainerId?: number;
             customerSlug?: string;
+            /** @enum {string} */
+            membershipRestriction?: 'none' | 'permittedDomains';
             message?: string;
+            /** @description Present when membershipRestriction is permittedDomains and organizations under the maintainer still allow Auto Join. */
+            warnings?: {
+              code?: string;
+              message?: string;
+              organizationIds?: number[];
+            }[];
           };
         };
       };
@@ -10178,6 +10374,13 @@ type operations = {
         };
         content?: never;
       };
+      /** @description Returned when the token does not have permission to list project templates. */
+      403: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
     };
   };
   'delete_/manage/project-templates/{templateId}/features/{featureName}::ProjectTemplateRemoveFeatureAction': {
@@ -12521,7 +12724,7 @@ type operations = {
         };
         content?: never;
       };
-      /** @description Returned when the token does not have permission to set project limits (super admin only). */
+      /** @description Returned when the token cannot set project limits, or a non-super-admin attempts to set a limit outside the managed whitelist. */
       403: {
         headers: {
           [name: string]: unknown;
@@ -12779,74 +12982,6 @@ type operations = {
       };
     };
   };
-  'get_/manage/storage-backend::StorageBackendListAction': {
-    parameters: {
-      query?: never;
-      header?: never;
-      path?: never;
-      cookie?: never;
-    };
-    requestBody?: never;
-    responses: {
-      /** @description Storage backend credentials list. */
-      200: {
-        headers: {
-          [name: string]: unknown;
-        };
-        content: {
-          'application/json': components['schemas']['StorageBackendListResponse'];
-        };
-      };
-      /** @description Returned when the Manage token is missing or invalid. */
-      401: {
-        headers: {
-          [name: string]: unknown;
-        };
-        content?: never;
-      };
-      /** @description Returned when the current admin is not a super admin. */
-      403: {
-        headers: {
-          [name: string]: unknown;
-        };
-        content?: never;
-      };
-    };
-  };
-  'post_/manage/storage-backend::StorageBackendCreateAction': {
-    parameters: {
-      query?: never;
-      header?: never;
-      path?: never;
-      cookie?: never;
-    };
-    requestBody?: never;
-    responses: {
-      /** @description Storage backend credentials created. */
-      200: {
-        headers: {
-          [name: string]: unknown;
-        };
-        content: {
-          'application/json': components['schemas']['StorageBackendResponse'];
-        };
-      };
-      /** @description Returned when the backend is not supported or connection test fails. */
-      400: {
-        headers: {
-          [name: string]: unknown;
-        };
-        content?: never;
-      };
-      /** @description Returned when support for the backend was discontinued. */
-      409: {
-        headers: {
-          [name: string]: unknown;
-        };
-        content?: never;
-      };
-    };
-  };
   'post_/manage/storage-backend/bigquery::StorageBackendCreateBigqueryAction': {
     parameters: {
       query?: never;
@@ -13080,6 +13215,145 @@ type operations = {
       };
     };
   };
+  'get_/manage/storage-backend::StorageBackendListAction': {
+    parameters: {
+      query?: never;
+      header?: never;
+      path?: never;
+      cookie?: never;
+    };
+    requestBody?: never;
+    responses: {
+      /** @description Storage backend credentials list. */
+      200: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          'application/json': components['schemas']['StorageBackendListResponse'];
+        };
+      };
+      /** @description Returned when the Manage token is missing or invalid. */
+      401: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Returned when the current admin is not a super admin. */
+      403: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+    };
+  };
+  'get_/manage/storage-backend/{id}/maintainers::StorageBackendMaintainerListAction': {
+    parameters: {
+      query?: never;
+      header?: never;
+      path: {
+        /**
+         * @description Backend ID.
+         * @example 1
+         */
+        id: number;
+      };
+      cookie?: never;
+    };
+    requestBody?: never;
+    responses: {
+      /** @description List of maintainers with the backend set as a default connection. */
+      200: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          'application/json': components['schemas']['StorageBackendMaintainerListResponse'];
+        };
+      };
+      /** @description Returned when the Manage token is missing or invalid. */
+      401: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Returned when the current admin is not a super admin. */
+      403: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Returned when the storage backend with the given ID does not exist. */
+      404: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+    };
+  };
+  'get_/manage/storage-backend/{id}/projects::StorageBackendProjectListAction': {
+    parameters: {
+      query?: {
+        /**
+         * @description Maximum number of projects to return. Default value: 100.
+         * @example 100
+         */
+        limit?: number;
+        /**
+         * @description Pagination offset. Default value: 0.
+         * @example 0
+         */
+        offset?: number;
+      };
+      header?: never;
+      path: {
+        /**
+         * @description Backend ID.
+         * @example 1
+         */
+        id: number;
+      };
+      cookie?: never;
+    };
+    requestBody?: never;
+    responses: {
+      /** @description List of projects assigned to the backend. */
+      200: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          'application/json': components['schemas']['StorageBackendProjectListResponse'];
+        };
+      };
+      /** @description Returned when the Manage token is missing or invalid. */
+      401: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Returned when the current admin is not a super admin. */
+      403: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Returned when the storage backend with the given ID does not exist. */
+      404: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+    };
+  };
   'patch_/manage/storage-backend/{id}/bigquery::StorageBackendUpdateBigqueryAction': {
     parameters: {
       query?: never;
@@ -14081,19 +14355,11 @@ type operations = {
 };
 
 /** A single deleted project as returned by `GET /manage/deleted-projects` or
- * `GET /manage/deleted-projects/{projectId}`.
- *
- * The live API always returns the owning `organization`, but the generated
- * `DeletedProjectResponse` schema omits it — overlaid here via intersection (live > generated schema).
- * It is `optional` because the typed source (the generated schema) does not guarantee it; consumers
- * access it defensively until the backend OpenAPI is regenerated. Minimal shape (id + name) = all the
- * UI consumes. See docs/prototype-specs/m7-api-discrepancy-report.md. */
-type DeletedProject = components['schemas']['DeletedProjectResponse'] & {
-    organization?: {
-        id: number;
-        name: string;
-    };
-};
+ * `GET /manage/deleted-projects/{projectId}`. The generated schema now models the owning
+ * `organization` (added to the backend OpenAPI after M7 — see
+ * docs/prototype-specs/m7-api-discrepancy-report.md), so no overlay is needed; note its `id`/`name`
+ * members are optional in the spec, so consumers access them defensively. */
+type DeletedProject = components['schemas']['DeletedProjectResponse'];
 /** Query parameters accepted by `GET /manage/deleted-projects`. */
 type DeletedProjectsListQuery = components['schemas']['DeletedProjectsListRequest'];
 /** The enqueued-command response returned by `POST /manage/deleted-projects/{id}/purge`. */
@@ -14123,6 +14389,15 @@ type GetAllFeaturesQuery = {
     type?: FeatureType;
 };
 
+type FileStorageS3 = components['schemas']['FileStorageS3Response'];
+type FileStorageAbs = components['schemas']['FileStorageAbsResponse'];
+type FileStorageGcs = Omit<components['schemas']['FileStorageGcsResponse'], 'gcsCredentials'> & {
+    gcsCredentials: Record<string, unknown>;
+};
+/** Union of all registered file storages across providers, as returned by the
+ * `GET /manage/file-storage-{s3,abs,gcs}` list endpoints. */
+type FileStorage = FileStorageS3 | FileStorageAbs | FileStorageGcs;
+
 type UpdateOrganizationBody = paths['/manage/organizations/{id}']['patch']['requestBody']['content']['application/json'] & {
     mfaRequired?: boolean;
     crmId?: string | null;
@@ -14204,6 +14479,8 @@ type MetadataItem = {
 
 /** Body for PUT /manage/projects/{projectId} — derived from the generated schema. */
 type UpdateProjectBody = components['schemas']['ProjectUpdateRequest'];
+/** Item of GET /manage/project-templates. */
+type ProjectTemplate = components['schemas']['ProjectTemplateResponse'];
 /** Body for POST /manage/projects/{projectId}/organizations. */
 type MoveProjectBody = paths['/manage/projects/{projectId}/organizations']['post']['requestBody']['content']['application/json'];
 /** Body for POST /manage/projects/{projectId}/disabled — no schema entry; hand-written per live API.
@@ -14216,6 +14493,14 @@ type SetProjectDisabledBody = {
 } | {
     isDisabled: false;
 };
+/** Body for `POST /manage/projects/{projectId}/limits`. Super admins may set any limit; admins
+ * holding the `can-manage-project-limits` feature may set only the whitelisted subset. */
+type SetProjectLimitsBody = {
+    limits: {
+        name: string;
+        value: number;
+    }[];
+};
 type GetProjectPath = {
     projectId: number | string;
 };
@@ -14369,6 +14654,29 @@ type Project = {
     usersCount?: number;
 };
 
+/** A storage backend's full detail as returned by `GET /manage/storage-backend/{id}` — id, owner,
+ * technical owner, host/URL, stats, creator and backend-kind-specific fields.
+ *
+ * `assignedProjectsCount` / `assignedMaintainersCount` / `loginType` are required in the generated
+ * schema but weakened to optional here (live behavior > generated schema): the list endpoint
+ * (`GET /manage/storage-backend`) reuses this schema while `loginType` (like
+ * `keyPairLastRotatedAt`) is detail-only per the generated JSDoc, and during the pre-deploy window
+ * a stack that hasn't shipped the M9.1 connection change omits all of them. Consumers access them
+ * defensively; drop the overlay if the backend ever splits the list/detail response schemas. */
+type StorageBackend = Omit<components['schemas']['StorageBackendDetailResponse'], 'assignedProjectsCount' | 'assignedMaintainersCount' | 'loginType'> & {
+    assignedProjectsCount?: number;
+    assignedMaintainersCount?: number;
+    loginType?: string;
+};
+/** A project assigned to a storage backend, as returned by
+ * `GET /manage/storage-backend/{id}/projects`. */
+type StorageBackendProject = components['schemas']['StorageBackendProjectListResponse'][number];
+/** A maintainer assigned to a storage backend, as returned by
+ * `GET /manage/storage-backend/{id}/maintainers`. */
+type StorageBackendMaintainer = components['schemas']['StorageBackendMaintainerListResponse'][number];
+/** Query parameters accepted by `GET /manage/storage-backend/{id}/projects`. */
+type GetStorageBackendProjectsQuery = NonNullable<operations['get_/manage/storage-backend/{id}/projects::StorageBackendProjectListAction']['parameters']['query']>;
+
 type AddUserFeaturePath = {
     userIdOrMail: string;
 };
@@ -14391,4 +14699,4 @@ type User = {
     canApproveMergeRequests: boolean;
 };
 
-export type { FeatureType as $, AddMaintainerUserBody as A, ProjectMetadataItem as B, CreateMaintainerBody as C, DeletedProjectsListQuery as D, SetProjectMetadataPath as E, Feature as F, GetAllFeaturesQuery as G, SetProjectMetadataBody as H, GetProjectReviewersPath as I, Reviewer as J, SetProjectReviewersPath as K, ListProjectUsersPath as L, Maintainer as M, SetProjectReviewersBody as N, OrganizationDetail as O, Project as P, UpdateProjectBody as Q, RemoveProjectFeaturePath as R, SetMaintainerMetadataBody as S, MoveProjectBody as T, UpdateMaintainerBody as U, SetProjectDisabledBody as V, AddUserFeatureBody as W, AddUserFeaturePath as X, RemoveUserFeaturePath as Y, components as Z, AdminUser as _, DeletedProject as a, MaintainerInvitationDetail as a0, Organization as a1, OrganizationInvitationDetail as a2, OrganizationListItem as a3, OrganizationMaintainer as a4, OrganizationProject as a5, ProjectInvitableRole as a6, ProjectInvitationDetail as a7, ProjectMetadataInput as a8, DeletedProjectPurgeResult as b, MaintainerDetail as c, MaintainerUser as d, CreateMaintainerInvitationBody as e, CreateMaintainerOrganizationBody as f, MetadataItem as g, UpdateOrganizationBody as h, AddOrganizationUserBody as i, CreateOrganizationInvitationBody as j, CreateOrganizationProjectBody as k, SetOrganizationMetadataBody as l, FeatureProject as m, FeatureAdmin as n, GetProjectPath as o, CreateProjectFeaturePath as p, CreateProjectFeatureBody as q, User as r, ListProjectInvitationsPath as s, CreateProjectInvitationPath as t, CreateProjectInvitationBody as u, DeleteProjectInvitationPath as v, AddProjectUserPath as w, AddProjectUserBody as x, RemoveProjectUserPath as y, GetProjectMetadataPath as z };
+export type { ProjectTemplate as $, AddMaintainerUserBody as A, GetProjectPath as B, CreateMaintainerBody as C, DeleteProjectInvitationPath as D, GetProjectReviewersPath as E, Feature as F, GetAllFeaturesQuery as G, GetStorageBackendProjectsQuery as H, ListProjectUsersPath as I, MaintainerDetail as J, MaintainerInvitationDetail as K, ListProjectInvitationsPath as L, Maintainer as M, MaintainerUser as N, MetadataItem as O, MoveProjectBody as P, Organization as Q, OrganizationDetail as R, OrganizationInvitationDetail as S, OrganizationListItem as T, OrganizationMaintainer as U, OrganizationProject as V, Project as W, ProjectInvitableRole as X, ProjectInvitationDetail as Y, ProjectMetadataInput as Z, ProjectMetadataItem as _, AddOrganizationUserBody as a, RemoveProjectFeaturePath as a0, RemoveProjectUserPath as a1, RemoveUserFeaturePath as a2, Reviewer as a3, SetMaintainerMetadataBody as a4, SetOrganizationMetadataBody as a5, SetProjectDisabledBody as a6, SetProjectLimitsBody as a7, SetProjectMetadataBody as a8, SetProjectMetadataPath as a9, SetProjectReviewersBody as aa, SetProjectReviewersPath as ab, StorageBackend as ac, StorageBackendMaintainer as ad, StorageBackendProject as ae, UpdateMaintainerBody as af, UpdateOrganizationBody as ag, UpdateProjectBody as ah, User as ai, AddProjectUserBody as b, components as c, AddProjectUserPath as d, AddUserFeatureBody as e, AddUserFeaturePath as f, AdminUser as g, CreateMaintainerInvitationBody as h, CreateMaintainerOrganizationBody as i, CreateOrganizationInvitationBody as j, CreateOrganizationProjectBody as k, CreateProjectFeatureBody as l, CreateProjectFeaturePath as m, CreateProjectInvitationBody as n, CreateProjectInvitationPath as o, DeletedProject as p, DeletedProjectPurgeResult as q, DeletedProjectsListQuery as r, FeatureAdmin as s, FeatureProject as t, FeatureType as u, FileStorage as v, FileStorageAbs as w, FileStorageGcs as x, FileStorageS3 as y, GetProjectMetadataPath as z };