@keboola/api-client 20.0.0 → 23.0.0

package/dist/{types-YEfQ5pAy.d.ts → types-GecGaYgv.d.cts}

@@ -4,6 +4,38 @@
  */
 
 type paths = {
+  '/manage/users': {
+    parameters: {
+      query?: never;
+      header?: never;
+      path?: never;
+      cookie?: never;
+    };
+    /**
+     * List users
+     * @description Returns all users (admins), each with their assigned features, MFA/super-admin state, and
+     *     membership counts (organizations, projects, maintainers).
+     *
+     *     Listing is allowed only for a super admin or a user with feature `can-manage-users`.
+     *
+     *     #### Filtering
+     *
+     *     * *q* - fulltext filter matched against the user name or email
+     *
+     *     #### Pagination
+     *
+     *     * *limit* - number of returned users; default value: 20
+     *     * *offset* - pagination offset
+     */
+    get: operations['get_/manage/users::UserListAction'];
+    put?: never;
+    post?: never;
+    delete?: never;
+    options?: never;
+    head?: never;
+    patch?: never;
+    trace?: never;
+  };
   '/manage/commands': {
     parameters: {
       query?: never;
@@ -615,6 +647,26 @@ type paths = {
     patch?: never;
     trace?: never;
   };
+  '/manage/internal/auth-bridge/exchange-oauth-token': {
+    parameters: {
+      query?: never;
+      header?: never;
+      path?: never;
+      cookie?: never;
+    };
+    get?: never;
+    put?: never;
+    /**
+     * Exchange a league OAuth token for a programmatic session (auth bridge)
+     * @description Validates a league OAuth `claudai` subject token and exchanges it for a project-pinned, Manage-less programmatic session. Used by the hosted Keboola MCP server via its Kubernetes-authenticated auth-bridge proxy.
+     */
+    post: operations['post_/manage/internal/auth-bridge/exchange-oauth-token::AuthBridgeOAuthExchangeAction'];
+    delete?: never;
+    options?: never;
+    head?: never;
+    patch?: never;
+    trace?: never;
+  };
   '/manage/internal/auth-bridge/resolve-storage-token': {
     parameters: {
       query?: never;
@@ -1868,7 +1920,7 @@ type paths = {
     put?: never;
     /**
      * Set project limits
-     * @description Changing project limits is allowed only for a super admin.
+     * @description Super admins may set any project limit. Admins with the "can-manage-project-limits" feature may set only a whitelisted subset of limits.
      */
     post: operations['post_/manage/projects/{projectId}/limits::ProjectSetLimitsAction'];
     delete?: never;
@@ -1993,31 +2045,6 @@ type paths = {
     patch?: never;
     trace?: never;
   };
-  '/manage/storage-backend': {
-    parameters: {
-      query?: never;
-      header?: never;
-      path?: never;
-      cookie?: never;
-    };
-    /**
-     * List backends
-     * @description Returns the list of registered storage backends (Snowflake, BigQuery).
-     */
-    get: operations['get_/manage/storage-backend::StorageBackendListAction'];
-    put?: never;
-    /**
-     * Create storage backend credentials
-     * @deprecated
-     * @description **Deprecated.** Generic storage-backend create endpoint. Use the backend-specific endpoints instead — `POST /manage/storage-backend/snowflake` or `POST /manage/storage-backend/bigquery`.
-     */
-    post: operations['post_/manage/storage-backend::StorageBackendCreateAction'];
-    delete?: never;
-    options?: never;
-    head?: never;
-    patch?: never;
-    trace?: never;
-  };
   '/manage/storage-backend/bigquery': {
     parameters: {
       query?: never;
@@ -2069,6 +2096,66 @@ type paths = {
     patch: operations['patch_/manage/storage-backend/{id}::StorageBackendUpdateAction'];
     trace?: never;
   };
+  '/manage/storage-backend': {
+    parameters: {
+      query?: never;
+      header?: never;
+      path?: never;
+      cookie?: never;
+    };
+    /**
+     * List backends
+     * @description Returns the list of registered storage backends (Snowflake, BigQuery).
+     */
+    get: operations['get_/manage/storage-backend::StorageBackendListAction'];
+    put?: never;
+    post?: never;
+    delete?: never;
+    options?: never;
+    head?: never;
+    patch?: never;
+    trace?: never;
+  };
+  '/manage/storage-backend/{id}/maintainers': {
+    parameters: {
+      query?: never;
+      header?: never;
+      path?: never;
+      cookie?: never;
+    };
+    /**
+     * List backend maintainers
+     * @description Returns the maintainers that have the storage backend identified by its numeric ID configured as one of their default backend connections.
+     */
+    get: operations['get_/manage/storage-backend/{id}/maintainers::StorageBackendMaintainerListAction'];
+    put?: never;
+    post?: never;
+    delete?: never;
+    options?: never;
+    head?: never;
+    patch?: never;
+    trace?: never;
+  };
+  '/manage/storage-backend/{id}/projects': {
+    parameters: {
+      query?: never;
+      header?: never;
+      path?: never;
+      cookie?: never;
+    };
+    /**
+     * List backend projects
+     * @description Returns the projects assigned to the storage backend identified by its numeric ID. Synapse-assigned projects are not counted (deprecated backend, intentionally excluded).
+     */
+    get: operations['get_/manage/storage-backend/{id}/projects::StorageBackendProjectListAction'];
+    put?: never;
+    post?: never;
+    delete?: never;
+    options?: never;
+    head?: never;
+    patch?: never;
+    trace?: never;
+  };
   '/manage/storage-backend/{id}/bigquery': {
     parameters: {
       query?: never;
@@ -2274,6 +2361,50 @@ type paths = {
     patch?: never;
     trace?: never;
   };
+  '/manage/users/{id}/super-admin': {
+    parameters: {
+      query?: never;
+      header?: never;
+      path?: never;
+      cookie?: never;
+    };
+    get?: never;
+    put?: never;
+    /**
+     * Grant super admin privilege to User
+     * @description Grants super admin privileges to the specified user. Requires the target user to already have
+     *     multi-factor authentication enabled — there is no way to override this precondition over the API
+     *     (use the `manage:user:set-super-admin --force-no-mfa` CLI command instead).
+     *
+     *     Only a super admin may grant this privilege; having the `can-manage-users` feature is not enough.
+     */
+    post: operations['post_/manage/users/{id}/super-admin::UserGrantSuperAdminAction'];
+    delete?: never;
+    options?: never;
+    head?: never;
+    patch?: never;
+    trace?: never;
+  };
+  '/manage/users/{id}/maintainers': {
+    parameters: {
+      query?: never;
+      header?: never;
+      path?: never;
+      cookie?: never;
+    };
+    /**
+     * List user's maintainers
+     * @description Returns the maintainers the user is a member of.
+     */
+    get: operations['get_/manage/users/{id}/maintainers::UserListMaintainersAction'];
+    put?: never;
+    post?: never;
+    delete?: never;
+    options?: never;
+    head?: never;
+    patch?: never;
+    trace?: never;
+  };
   '/manage/users/{idOrEmail}/metadata': {
     parameters: {
       query?: never;
@@ -2305,6 +2436,46 @@ type paths = {
     patch?: never;
     trace?: never;
   };
+  '/manage/users/{id}/organizations': {
+    parameters: {
+      query?: never;
+      header?: never;
+      path?: never;
+      cookie?: never;
+    };
+    /**
+     * List user's organizations
+     * @description Returns the organizations the user is a member of, each with the membership creation date, who invited the user (if known), and the organization's maintainer.
+     */
+    get: operations['get_/manage/users/{id}/organizations::UserListOrganizationsAction'];
+    put?: never;
+    post?: never;
+    delete?: never;
+    options?: never;
+    head?: never;
+    patch?: never;
+    trace?: never;
+  };
+  '/manage/users/{id}/projects': {
+    parameters: {
+      query?: never;
+      header?: never;
+      path?: never;
+      cookie?: never;
+    };
+    /**
+     * List user's projects
+     * @description Returns the projects the user is a member of, including role, membership status, expiration, creation date, reason, and who invited the user (if known).
+     */
+    get: operations['get_/manage/users/{id}/projects::UserListProjectsAction'];
+    put?: never;
+    post?: never;
+    delete?: never;
+    options?: never;
+    head?: never;
+    patch?: never;
+    trace?: never;
+  };
   '/manage/users/{idOrEmail}/features/{featureName}': {
     parameters: {
       query?: never;
@@ -2372,6 +2543,14 @@ type paths = {
 };
 type components = {
   schemas: {
+    UserListRequest: {
+      /** @description Fulltext filter matched against the user name or email (substring, case-insensitive). */
+      q?: string | null;
+      /** @description Maximum number of users to return. Default value: 20. */
+      limit?: number | null;
+      /** @description Pagination offset. Default value: 0. */
+      offset?: number | null;
+    };
     /** @description CLI command enqueue request payload. */
     EnqueueCommandRequest: {
       /**
@@ -2778,11 +2957,6 @@ type components = {
       defaultFileStorageId?: number | null;
     };
     SamlConfigCompleteSetupRequest: {
-      /**
-       * @description One-time setup token from initial configuration
-       * @example a1b2c3d4e5f6g7h8i9j0k1l2m3n4o5p6q7r8s9t0u1v2w3x4y5z6
-       */
-      setupToken: string;
       /**
        * @description Identity Provider entity ID
        * @example http://www.okta.com/exk123456
@@ -2821,6 +2995,12 @@ type components = {
       designAdminEmail?: string | null;
       /** @description Email domains this IdP is allowed to assert (at least one). A login is denied unless the asserted email's domain is in this list. Domains are globally unique across SAML configurations. */
       permittedEmailDomains: string[];
+      /**
+       * @description Membership restriction mode (optional, defaults to "none"). With "permittedDomains", membership in the maintainer and its organizations and projects is restricted to the permitted email domains.
+       * @example permittedDomains
+       * @enum {string|null}
+       */
+      membershipRestriction?: 'none' | 'permittedDomains' | null;
     };
     SamlConfigCreateRequest: {
       /**
@@ -2838,6 +3018,12 @@ type components = {
        * @example SAML SSO for Acme employees using Okta
        */
       description?: string | null;
+      /**
+       * @description Membership restriction mode (optional, defaults to "none"). With "permittedDomains", membership in the maintainer and its organizations and projects is restricted to the permitted email domains once the config is active.
+       * @example permittedDomains
+       * @enum {string|null}
+       */
+      membershipRestriction?: 'none' | 'permittedDomains' | null;
     };
     SamlConfigUpdateRequest: {
       name?: string | null;
@@ -2863,6 +3049,11 @@ type components = {
       loginUrlParams?: Record<string, never> | null;
       /** @description Replace the allowed email domains (at least one). Omit to leave unchanged. */
       permittedEmailDomains?: string[] | null;
+      /**
+       * @description Membership restriction mode. With "permittedDomains", membership in the maintainer and its organizations and projects is restricted to the permitted email domains. Omit to leave unchanged.
+       * @enum {string|null}
+       */
+      membershipRestriction?: 'none' | 'permittedDomains' | null;
     };
     OrganizationMetadataRequest: {
       /**
@@ -3046,18 +3237,19 @@ type components = {
        */
       bqExternalSharingRoleName?: string | null;
     };
-    /** @description Partial update of a storage backend; at least one of `username`, `password`, `useDynamicBackends`, `owner`, `technicalOwner` or `technicalOwnerContactEmails` must be supplied. Individual attributes are optional on their own. */
+    StorageBackendProjectListRequest: {
+      /** @description Maximum number of projects to return. Default value: 100. */
+      limit?: number | null;
+      /** @description Pagination offset. Default value: 0. */
+      offset?: number | null;
+    };
+    /** @description Partial update of a storage backend; at least one of `username`, `useDynamicBackends`, `owner`, `technicalOwner` or `technicalOwnerContactEmails` must be supplied. Individual attributes are optional on their own. */
     StorageBackendUpdateRequest: {
       /**
        * @description Backend username.
        * @example keboola
        */
       username?: string | null;
-      /**
-       * @description Backend password.
-       * @example 1234
-       */
-      password?: string | null;
       /**
        * @description Only for backends supporting dynamic sizing (Snowflake). When enabled, new projects get dynamic backends assigned automatically.
        * @example false
@@ -3152,6 +3344,60 @@ type components = {
       /** @description Identifier of the project to top up. Must be a positive integer. */
       idProject: number;
     };
+    UserListResponse: {
+      /**
+       * @description User identifier.
+       * @example 2
+       */
+      id: number;
+      /**
+       * @description User full name.
+       * @example Martin
+       */
+      name: string;
+      /**
+       * @description User email address.
+       * @example martin@keboola.com
+       */
+      email: string;
+      /**
+       * @description Whether MFA is enabled for the user.
+       * @example true
+       */
+      mfaEnabled: boolean;
+      /**
+       * @description List of assigned features.
+       * @example [
+       *       "inline-manual"
+       *     ]
+       */
+      features: string[];
+      /**
+       * @description Whether the user can access logs.
+       * @example true
+       */
+      canAccessLogs: boolean;
+      /**
+       * @description Whether the user has super admin privileges.
+       * @example true
+       */
+      isSuperAdmin: boolean;
+      /**
+       * @description Number of organizations the user is a member of.
+       * @example 2
+       */
+      organizationsCount: number;
+      /**
+       * @description Number of projects the user is a member of.
+       * @example 5
+       */
+      projectsCount: number;
+      /**
+       * @description Number of maintainers the user is a member of.
+       * @example 1
+       */
+      maintainersCount: number;
+    }[];
     EnqueueCommandResponse: {
       /**
        * @description Identifier of the enqueued command execution; this ID is appended to all logs produced by the command.
@@ -3426,6 +3672,17 @@ type components = {
       deletedTime: string;
       /** Format: date-time */
       purgedTime?: string | null;
+      /** @description Organization the project belongs to. */
+      organization: {
+        id?: number;
+        name?: string;
+        /** Format: date-time */
+        created?: string;
+        allowAutoJoin?: boolean;
+        crmId?: string | null;
+        activityCenterProjectId?: number | null;
+        mfaRequired?: boolean;
+      };
     };
     DeletedProjectsListResponse: components['schemas']['DeletedProjectResponse'][];
     /**
@@ -3656,10 +3913,28 @@ type components = {
         name?: string;
       };
     };
-    TokenVerifyResponse: {
-      id: string;
-      /** @description Optional provided only in specific cases. */
-      token: string;
+    UserLoggedInResponse: {
+      id: number;
+      email: string;
+      name: string;
+    };
+    CliTokenResponse: {
+      /** @description Opaque bearer access token for API authentication. */
+      accessToken: string;
+      /** @description Refresh token for obtaining new access tokens. */
+      refreshToken: string;
+      /** @description Token type. Always "Bearer". */
+      tokenType: string;
+      /** @description Access token lifetime in seconds. */
+      expiresIn: number;
+      /** @description Unique session identifier. */
+      sessionId: string;
+      user: components['schemas']['UserLoggedInResponse'];
+    };
+    TokenVerifyResponse: {
+      id: string;
+      /** @description Optional provided only in specific cases. */
+      token: string;
       /** Format: date-time */
       created: string;
       /** Format: date-time */
@@ -4611,6 +4886,26 @@ type components = {
       /** @description SAML2 public key for security integration (only present when SSO is enabled) */
       securityIntegrationKey?: string | null;
     };
+    StorageBackendBigqueryResponse: {
+      /** @description Root credentials identifier. */
+      id: number;
+      /** @description Storage backend type. Always "bigquery" for this response. */
+      backend: string;
+      /** @description Backend region. */
+      region: string;
+      /** @description Associated GCP account owner (e.g. keboola, client-<name>). */
+      owner: string;
+      /** @description Technical owner who manages the account. One of: keboola, internal, kbdb, byodb. */
+      technicalOwner: string;
+      /** @description Contact emails of the technical owner. */
+      technicalOwnerContactEmails: string[];
+      /** @description GCP service account credentials in JSON form. */
+      credentials?: Record<string, never> | null;
+      /** @description GCP folder identifier under which projects are created. */
+      folderId?: string | null;
+      /** @description Name of the custom IAM role pre-configured for Analytics Hub external bucket sharing. When set, the bucket sharing setup guide surfaces this role name to the user. When null, the guide falls back to recommending the built-in roles/analyticshub.listingAdmin role. */
+      bqExternalSharingRoleName?: string | null;
+    };
     StorageBackendDetailResponse: {
       /** @description Root credentials identifier. */
       id: number;
@@ -4673,28 +4968,43 @@ type components = {
       isSsoConfigured?: boolean | null;
       /** @description Array of technical owner contact emails for SAML2 certificate rotation notifications. */
       technicalOwnerContactEmails: string[];
+      /** @description Number of projects assigned to this backend, unlike stats.projectsCount which only counts projects with data (buckets) on it. Synapse-assigned projects are not counted (deprecated backend, intentionally excluded). */
+      assignedProjectsCount: number;
+      /** @description Number of maintainers with this backend as a default connection. */
+      assignedMaintainersCount: number;
+      /** @description Detail endpoint only (absent on the list endpoint). Backend internal login type, e.g. default, snowflake-service-keypair, snowflake-person-keypair. */
+      loginType: string;
+      /**
+       * Format: date-time
+       * @description Detail endpoint only (absent on the list endpoint). Most recent enabledAt of an active Snowflake RSA key-pair certificate; null for password-based backends.
+       */
+      keyPairLastRotatedAt?: string | null;
     };
     StorageBackendListResponse: components['schemas']['StorageBackendDetailResponse'][];
-    StorageBackendBigqueryResponse: {
-      /** @description Root credentials identifier. */
+    StorageBackendMaintainerListResponse: {
+      /**
+       * @description Maintainer identifier.
+       * @example 1
+       */
       id: number;
-      /** @description Storage backend type. Always "bigquery" for this response. */
-      backend: string;
-      /** @description Backend region. */
-      region: string;
-      /** @description Associated GCP account owner (e.g. keboola, client-<name>). */
-      owner: string;
-      /** @description Technical owner who manages the account. One of: keboola, internal, kbdb, byodb. */
-      technicalOwner: string;
-      /** @description Contact emails of the technical owner. */
-      technicalOwnerContactEmails: string[];
-      /** @description GCP service account credentials in JSON form. */
-      credentials?: Record<string, never> | null;
-      /** @description GCP folder identifier under which projects are created. */
-      folderId?: string | null;
-      /** @description Name of the custom IAM role pre-configured for Analytics Hub external bucket sharing. When set, the bucket sharing setup guide surfaces this role name to the user. When null, the guide falls back to recommending the built-in roles/analyticshub.listingAdmin role. */
-      bqExternalSharingRoleName?: string | null;
-    };
+      /**
+       * @description Maintainer name.
+       * @example Test maintainer
+       */
+      name: string;
+    }[];
+    StorageBackendProjectListResponse: {
+      /**
+       * @description Project identifier.
+       * @example 771
+       */
+      id: number;
+      /**
+       * @description Project name.
+       * @example Test project
+       */
+      name: string;
+    }[];
     /**
      * @example {
      *       "id": 13702,
@@ -4844,6 +5154,73 @@ type components = {
         commitSha?: string | null;
       };
     };
+    UserListMaintainersResponse: {
+      maintainer: {
+        /** @example 123 */
+        id: number;
+        /** @example Keboola CZ */
+        name: string | null;
+      };
+    }[];
+    UserListOrganizationsResponse: {
+      organization: {
+        /** @example 1 */
+        id: number;
+        /** @example Keboola Tests */
+        name: string;
+      };
+      /**
+       * Format: date-time
+       * @example 2014-11-11T08:40:51+0000
+       */
+      created: string | null;
+      invitedBy: {
+        /** @example 1 */
+        id: number;
+        /** @example Martin */
+        name: string;
+        /** @example martin@keboola.com */
+        email: string;
+      } | null;
+      maintainer: {
+        /** @example 123 */
+        id: number;
+        /** @example Keboola CZ */
+        name: string | null;
+      };
+    }[];
+    UserListProjectsResponse: {
+      project: {
+        /** @example 4088 */
+        id: number;
+        /** @example Test project */
+        name: string;
+      };
+      /** @example admin */
+      role: string;
+      /** @example active */
+      status: string;
+      /**
+       * Format: date-time
+       * @example null
+       */
+      expires: string | null;
+      /**
+       * Format: date-time
+       * @example 2016-02-29T08:01:13+0000
+       */
+      created: string | null;
+      /** @example  */
+      reason: string;
+      invitedBy: {
+        /** @example 1 */
+        id: number;
+        /** @example Martin */
+        name: string;
+        /** @example martin@keboola.com */
+        email: string;
+      } | null;
+    }[];
     TryTopUpRequest2: {
       /** @description Identifier of the project to top up. Must be a positive integer. */
       idProject: number;
@@ -4857,6 +5234,47 @@ type components = {
   pathItems: never;
 };
 type operations = {
+  'get_/manage/users::UserListAction': {
+    parameters: {
+      query?: {
+        /** @description Fulltext filter matched against the user name or email (substring, case-insensitive). */
+        q?: string | null;
+        /** @description Maximum number of users to return. Default value: 20. */
+        limit?: number | null;
+        /** @description Pagination offset. Default value: 0. */
+        offset?: number | null;
+      };
+      header?: never;
+      path?: never;
+      cookie?: never;
+    };
+    requestBody?: never;
+    responses: {
+      /** @description List of users. */
+      200: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          'application/json': components['schemas']['UserListResponse'];
+        };
+      };
+      /** @description Returned when the Manage token is missing or invalid. */
+      401: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Returned when the current admin cannot list users. */
+      403: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+    };
+  };
   'post_/manage/commands::CommandEnqueueAction': {
     parameters: {
       query?: never;
@@ -5759,7 +6177,13 @@ type operations = {
            *       "isDeleted": true,
            *       "deletedTime": "2018-02-11T14:25:15+0100",
            *       "purgedTime": null,
-           *       "isBYODB": false
+           *       "isBYODB": false,
+           *       "organization": {
+           *         "id": 1,
+           *         "name": "Keboola Tests",
+           *         "created": "",
+           *         "allowAutoJoin": true
+           *       }
            *     }
            */
           'application/json': components['schemas']['DeletedProjectResponse'];
@@ -6111,7 +6535,7 @@ type operations = {
         };
         content?: never;
       };
-      /** @description Returned when the current admin is not a super admin. */
+      /** @description Returned when the current admin is neither a super admin nor holds the can-manage-features feature. */
       403: {
         headers: {
           [name: string]: unknown;
@@ -6455,7 +6879,7 @@ type operations = {
         };
         content?: never;
       };
-      /** @description Returned when the current admin is not a super admin. */
+      /** @description Returned when the current admin is neither a super admin nor holds the can-manage-features feature. */
       403: {
         headers: {
           [name: string]: unknown;
@@ -7161,6 +7585,43 @@ type operations = {
       };
     };
   };
+  'post_/manage/internal/auth-bridge/exchange-oauth-token::AuthBridgeOAuthExchangeAction': {
+    parameters: {
+      query?: never;
+      header: {
+        /** @description League OAuth `claudai` access token to exchange. */
+        'X-Subject-Token': string;
+      };
+      path?: never;
+      cookie?: never;
+    };
+    requestBody?: never;
+    responses: {
+      /** @description Programmatic session issued. */
+      200: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          'application/json': components['schemas']['CliTokenResponse'];
+        };
+      };
+      /** @description Returned when the subject token is missing, invalid, or not bound to an active admin. */
+      401: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Returned when the caller is not Kubernetes-authenticated or the token lacks the required scope. */
+      403: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+    };
+  };
   'post_/manage/internal/auth-bridge/resolve-storage-token::AuthBridgeStorageTokenResolveAction': {
     parameters: {
       query?: never;
@@ -8305,12 +8766,20 @@ type operations = {
             customerSlug?: string;
             name?: string;
             isActive?: boolean;
+            /** @enum {string} */
+            membershipRestriction?: 'none' | 'permittedDomains';
             message?: string;
             loginUrl?: string;
+            /** @description Present when membershipRestriction is permittedDomains and organizations under the maintainer still allow Auto Join. */
+            warnings?: {
+              code?: string;
+              message?: string;
+              organizationIds?: number[];
+            }[];
           };
         };
       };
-      /** @description Invalid or expired setup token, or invalid request data */
+      /** @description Invalid request data */
       400: {
         headers: {
           [name: string]: unknown;
@@ -8332,6 +8801,17 @@ type operations = {
           };
         };
       };
+      /** @description SAML configuration is already active */
+      409: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          'application/json': {
+            error?: string;
+          };
+        };
+      };
     };
   };
   'get_/manage/maintainers/{maintainerId}/saml::SamlConfigListAction': {
@@ -8404,9 +8884,6 @@ type operations = {
             customerSlug?: string;
             name?: string;
             isActive?: boolean;
-            setupToken?: string;
-            /** Format: date-time */
-            setupTokenExpiresAt?: string;
             spConfiguration?: {
               entityId?: string;
               acsUrl?: string;
@@ -8555,7 +9032,15 @@ type operations = {
             id?: number;
             maintainerId?: number;
             customerSlug?: string;
+            /** @enum {string} */
+            membershipRestriction?: 'none' | 'permittedDomains';
             message?: string;
+            /** @description Present when membershipRestriction is permittedDomains and organizations under the maintainer still allow Auto Join. */
+            warnings?: {
+              code?: string;
+              message?: string;
+              organizationIds?: number[];
+            }[];
           };
         };
       };
@@ -10178,6 +10663,13 @@ type operations = {
         };
         content?: never;
       };
+      /** @description Returned when the token does not have permission to list project templates. */
+      403: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
     };
   };
   'delete_/manage/project-templates/{templateId}/features/{featureName}::ProjectTemplateRemoveFeatureAction': {
@@ -12521,7 +13013,7 @@ type operations = {
         };
         content?: never;
       };
-      /** @description Returned when the token does not have permission to set project limits (super admin only). */
+      /** @description Returned when the token cannot set project limits, or a non-super-admin attempts to set a limit outside the managed whitelist. */
       403: {
         headers: {
           [name: string]: unknown;
@@ -12779,22 +13271,46 @@ type operations = {
       };
     };
   };
-  'get_/manage/storage-backend::StorageBackendListAction': {
+  'post_/manage/storage-backend/bigquery::StorageBackendCreateBigqueryAction': {
     parameters: {
       query?: never;
       header?: never;
       path?: never;
       cookie?: never;
     };
-    requestBody?: never;
+    requestBody: {
+      content: {
+        'application/json': components['schemas']['StorageBackendCreateBigqueryRequest'];
+      };
+    };
     responses: {
-      /** @description Storage backend credentials list. */
+      /** @description BigQuery storage backend credentials created. */
       200: {
         headers: {
           [name: string]: unknown;
         };
         content: {
-          'application/json': components['schemas']['StorageBackendListResponse'];
+          /**
+           * @example {
+           *       "id": 12,
+           *       "region": "us-east-1",
+           *       "backend": "bigquery",
+           *       "credentials": {
+           *         "type": "service_account",
+           *         "project_id": "123456789",
+           *         "private_key_id": "xxx",
+           *         "client_email": "something@else.iam.gserviceaccount.com",
+           *         "client_id": "123456789",
+           *         "auth_uri": "https://accounts.google.com/o/oauth2/auth",
+           *         "token_uri": "https://oauth2.googleapis.com/token",
+           *         "auth_provider_x509_cert_url": "https://www.googleapis.com/oauth2/v1/certs",
+           *         "client_x509_cert_url": "https://www.googleapis.com/robot/v1/metadata/x509/something"
+           *       },
+           *       "folderId": 123,
+           *       "bqExternalSharingRoleName": "roles/custom.analyticsHubListingAdmin"
+           *     }
+           */
+          'application/json': components['schemas']['StorageBackendBigqueryResponse'];
         };
       };
       /** @description Returned when the Manage token is missing or invalid. */
@@ -12811,35 +13327,55 @@ type operations = {
         };
         content?: never;
       };
+      /** @description Returned when the BigQuery backend cannot be assigned (validation of GCP project / folder fails). */
+      422: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
     };
   };
-  'post_/manage/storage-backend::StorageBackendCreateAction': {
+  'get_/manage/storage-backend/{id}::StorageBackendDetailAction': {
     parameters: {
       query?: never;
       header?: never;
-      path?: never;
+      path: {
+        /**
+         * @description Backend ID.
+         * @example 123
+         */
+        id: number;
+      };
       cookie?: never;
     };
     requestBody?: never;
     responses: {
-      /** @description Storage backend credentials created. */
+      /** @description Storage backend credentials detail. */
       200: {
         headers: {
           [name: string]: unknown;
         };
         content: {
-          'application/json': components['schemas']['StorageBackendResponse'];
+          'application/json': components['schemas']['StorageBackendDetailResponse'];
         };
       };
-      /** @description Returned when the backend is not supported or connection test fails. */
-      400: {
+      /** @description Returned when the Manage token is missing or invalid. */
+      401: {
         headers: {
           [name: string]: unknown;
         };
         content?: never;
       };
-      /** @description Returned when support for the backend was discontinued. */
-      409: {
+      /** @description Returned when the current admin is not a super admin. */
+      403: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Returned when the storage backend with the given ID does not exist. */
+      404: {
         headers: {
           [name: string]: unknown;
         };
@@ -12847,47 +13383,34 @@ type operations = {
       };
     };
   };
-  'post_/manage/storage-backend/bigquery::StorageBackendCreateBigqueryAction': {
+  'delete_/manage/storage-backend/{id}::StorageBackendDeleteAction': {
     parameters: {
       query?: never;
       header?: never;
-      path?: never;
-      cookie?: never;
-    };
-    requestBody: {
-      content: {
-        'application/json': components['schemas']['StorageBackendCreateBigqueryRequest'];
+      path: {
+        /**
+         * @description Id of storage backend.
+         * @example 123
+         */
+        id: number;
       };
+      cookie?: never;
     };
+    requestBody?: never;
     responses: {
-      /** @description BigQuery storage backend credentials created. */
-      200: {
+      /** @description Storage backend deleted. */
+      204: {
         headers: {
           [name: string]: unknown;
         };
-        content: {
-          /**
-           * @example {
-           *       "id": 12,
-           *       "region": "us-east-1",
-           *       "backend": "bigquery",
-           *       "credentials": {
-           *         "type": "service_account",
-           *         "project_id": "123456789",
-           *         "private_key_id": "xxx",
-           *         "client_email": "something@else.iam.gserviceaccount.com",
-           *         "client_id": "123456789",
-           *         "auth_uri": "https://accounts.google.com/o/oauth2/auth",
-           *         "token_uri": "https://oauth2.googleapis.com/token",
-           *         "auth_provider_x509_cert_url": "https://www.googleapis.com/oauth2/v1/certs",
-           *         "client_x509_cert_url": "https://www.googleapis.com/robot/v1/metadata/x509/something"
-           *       },
-           *       "folderId": 123,
-           *       "bqExternalSharingRoleName": "roles/custom.analyticsHubListingAdmin"
-           *     }
-           */
-          'application/json': components['schemas']['StorageBackendBigqueryResponse'];
+        content?: never;
+      };
+      /** @description Returned when the storage backend is still in use by projects or workspaces. */
+      400: {
+        headers: {
+          [name: string]: unknown;
         };
+        content?: never;
       };
       /** @description Returned when the Manage token is missing or invalid. */
       401: {
@@ -12903,8 +13426,8 @@ type operations = {
         };
         content?: never;
       };
-      /** @description Returned when the BigQuery backend cannot be assigned (validation of GCP project / folder fails). */
-      422: {
+      /** @description Returned when the storage backend with the given ID does not exist. */
+      404: {
         headers: {
           [name: string]: unknown;
         };
@@ -12912,7 +13435,7 @@ type operations = {
       };
     };
   };
-  'get_/manage/storage-backend/{id}::StorageBackendDetailAction': {
+  'patch_/manage/storage-backend/{id}::StorageBackendUpdateAction': {
     parameters: {
       query?: never;
       header?: never;
@@ -12925,17 +13448,39 @@ type operations = {
       };
       cookie?: never;
     };
-    requestBody?: never;
+    requestBody: {
+      content: {
+        'application/json': components['schemas']['StorageBackendUpdateRequest'];
+      };
+    };
     responses: {
-      /** @description Storage backend credentials detail. */
+      /** @description Storage backend credentials updated. */
       200: {
         headers: {
           [name: string]: unknown;
         };
         content: {
-          'application/json': components['schemas']['StorageBackendDetailResponse'];
+          /**
+           * @example {
+           *       "id": 123,
+           *       "host": "sapi-37-demo.snowflakecomputing.com",
+           *       "backend": "snowflake",
+           *       "region": "us-east-1",
+           *       "technicalOwnerContactEmails": [
+           *         "devel@keboola.com"
+           *       ]
+           *     }
+           */
+          'application/json': components['schemas']['StorageBackendResponse'];
         };
       };
+      /** @description Returned when the backend connection test fails or the request payload is invalid. */
+      400: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
       /** @description Returned when the Manage token is missing or invalid. */
       401: {
         headers: {
@@ -12959,35 +13504,64 @@ type operations = {
       };
     };
   };
-  'delete_/manage/storage-backend/{id}::StorageBackendDeleteAction': {
+  'get_/manage/storage-backend::StorageBackendListAction': {
     parameters: {
       query?: never;
       header?: never;
-      path: {
-        /**
-         * @description Id of storage backend.
-         * @example 123
-         */
-        id: number;
-      };
+      path?: never;
       cookie?: never;
     };
     requestBody?: never;
     responses: {
-      /** @description Storage backend deleted. */
-      204: {
+      /** @description Storage backend credentials list. */
+      200: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          'application/json': components['schemas']['StorageBackendListResponse'];
+        };
+      };
+      /** @description Returned when the Manage token is missing or invalid. */
+      401: {
         headers: {
           [name: string]: unknown;
         };
         content?: never;
       };
-      /** @description Returned when the storage backend is still in use by projects or workspaces. */
-      400: {
+      /** @description Returned when the current admin is not a super admin. */
+      403: {
         headers: {
           [name: string]: unknown;
         };
         content?: never;
       };
+    };
+  };
+  'get_/manage/storage-backend/{id}/maintainers::StorageBackendMaintainerListAction': {
+    parameters: {
+      query?: never;
+      header?: never;
+      path: {
+        /**
+         * @description Backend ID.
+         * @example 1
+         */
+        id: number;
+      };
+      cookie?: never;
+    };
+    requestBody?: never;
+    responses: {
+      /** @description List of maintainers with the backend set as a default connection. */
+      200: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          'application/json': components['schemas']['StorageBackendMaintainerListResponse'];
+        };
+      };
       /** @description Returned when the Manage token is missing or invalid. */
       401: {
         headers: {
@@ -13011,52 +13585,41 @@ type operations = {
       };
     };
   };
-  'patch_/manage/storage-backend/{id}::StorageBackendUpdateAction': {
+  'get_/manage/storage-backend/{id}/projects::StorageBackendProjectListAction': {
     parameters: {
-      query?: never;
+      query?: {
+        /**
+         * @description Maximum number of projects to return. Default value: 100.
+         * @example 100
+         */
+        limit?: number;
+        /**
+         * @description Pagination offset. Default value: 0.
+         * @example 0
+         */
+        offset?: number;
+      };
       header?: never;
       path: {
         /**
          * @description Backend ID.
-         * @example 123
+         * @example 1
          */
         id: number;
       };
       cookie?: never;
     };
-    requestBody: {
-      content: {
-        'application/json': components['schemas']['StorageBackendUpdateRequest'];
-      };
-    };
+    requestBody?: never;
     responses: {
-      /** @description Storage backend credentials updated. */
+      /** @description List of projects assigned to the backend. */
       200: {
         headers: {
           [name: string]: unknown;
         };
         content: {
-          /**
-           * @example {
-           *       "id": 123,
-           *       "host": "sapi-37-demo.snowflakecomputing.com",
-           *       "backend": "snowflake",
-           *       "region": "us-east-1",
-           *       "technicalOwnerContactEmails": [
-           *         "devel@keboola.com"
-           *       ]
-           *     }
-           */
-          'application/json': components['schemas']['StorageBackendResponse'];
+          'application/json': components['schemas']['StorageBackendProjectListResponse'];
         };
       };
-      /** @description Returned when the backend connection test fails or the request payload is invalid. */
-      400: {
-        headers: {
-          [name: string]: unknown;
-        };
-        content?: never;
-      };
       /** @description Returned when the Manage token is missing or invalid. */
       401: {
         headers: {
@@ -13695,6 +14258,120 @@ type operations = {
       };
     };
   };
+  'post_/manage/users/{id}/super-admin::UserGrantSuperAdminAction': {
+    parameters: {
+      query?: never;
+      header?: never;
+      path: {
+        /**
+         * @description User identifier.
+         * @example 2
+         */
+        id: number;
+      };
+      cookie?: never;
+    };
+    requestBody?: never;
+    responses: {
+      /** @description Updated user detail. */
+      200: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          /**
+           * @example {
+           *       "id": 2,
+           *       "name": "Martin",
+           *       "email": "martin@keboola.com",
+           *       "features": [
+           *         "inline-manual"
+           *       ],
+           *       "mfaEnabled": true,
+           *       "canAccessLogs": true,
+           *       "isSuperAdmin": true
+           *     }
+           */
+          'application/json': components['schemas']['UserResponse'];
+        };
+      };
+      /** @description Returned when the Manage token is missing or invalid. */
+      401: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Returned when the current admin is not a super admin. */
+      403: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Returned when the user does not exist. */
+      404: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Returned when the target user does not have MFA enabled. */
+      422: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+    };
+  };
+  'get_/manage/users/{id}/maintainers::UserListMaintainersAction': {
+    parameters: {
+      query?: never;
+      header?: never;
+      path: {
+        /**
+         * @description User identifier.
+         * @example 2
+         */
+        id: number;
+      };
+      cookie?: never;
+    };
+    requestBody?: never;
+    responses: {
+      /** @description List of the user's maintainers. */
+      200: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          'application/json': components['schemas']['UserListMaintainersResponse'];
+        };
+      };
+      /** @description Returned when the Manage token is missing or invalid. */
+      401: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Returned when the current admin cannot access this user. */
+      403: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Returned when the user does not exist. */
+      404: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+    };
+  };
   'get_/manage/users/{idOrEmail}/metadata::UserListMetadataAction': {
     parameters: {
       query?: never;
@@ -13896,6 +14573,100 @@ type operations = {
       };
     };
   };
+  'get_/manage/users/{id}/organizations::UserListOrganizationsAction': {
+    parameters: {
+      query?: never;
+      header?: never;
+      path: {
+        /**
+         * @description User identifier.
+         * @example 2
+         */
+        id: number;
+      };
+      cookie?: never;
+    };
+    requestBody?: never;
+    responses: {
+      /** @description List of the user's organizations. */
+      200: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          'application/json': components['schemas']['UserListOrganizationsResponse'];
+        };
+      };
+      /** @description Returned when the Manage token is missing or invalid. */
+      401: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Returned when the current admin cannot access this user. */
+      403: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Returned when the user does not exist. */
+      404: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+    };
+  };
+  'get_/manage/users/{id}/projects::UserListProjectsAction': {
+    parameters: {
+      query?: never;
+      header?: never;
+      path: {
+        /**
+         * @description User identifier.
+         * @example 2
+         */
+        id: number;
+      };
+      cookie?: never;
+    };
+    requestBody?: never;
+    responses: {
+      /** @description List of the user's projects. */
+      200: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          'application/json': components['schemas']['UserListProjectsResponse'];
+        };
+      };
+      /** @description Returned when the Manage token is missing or invalid. */
+      401: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Returned when the current admin cannot access this user. */
+      403: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Returned when the user does not exist. */
+      404: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+    };
+  };
   'delete_/manage/users/{idOrEmail}/features/{featureName}::UserRemoveFeatureAction': {
     parameters: {
       query?: never;
@@ -14081,19 +14852,10 @@ type operations = {
 };
 
 /** A single deleted project as returned by `GET /manage/deleted-projects` or
- * `GET /manage/deleted-projects/{projectId}`.
- *
- * The live API always returns the owning `organization`, but the generated
- * `DeletedProjectResponse` schema omits it — overlaid here via intersection (live > generated schema).
- * It is `optional` because the typed source (the generated schema) does not guarantee it; consumers
- * access it defensively until the backend OpenAPI is regenerated. Minimal shape (id + name) = all the
- * UI consumes. See docs/prototype-specs/m7-api-discrepancy-report.md. */
-type DeletedProject = components['schemas']['DeletedProjectResponse'] & {
-    organization?: {
-        id: number;
-        name: string;
-    };
-};
+ * `GET /manage/deleted-projects/{projectId}`. The generated schema models the owning `organization`
+ * (added to the backend OpenAPI by keboola/connection#7794), so no overlay is needed; note its
+ * `id`/`name` members are optional in the spec, so consumers access them defensively. */
+type DeletedProject = components['schemas']['DeletedProjectResponse'];
 /** Query parameters accepted by `GET /manage/deleted-projects`. */
 type DeletedProjectsListQuery = components['schemas']['DeletedProjectsListRequest'];
 /** The enqueued-command response returned by `POST /manage/deleted-projects/{id}/purge`. */
@@ -14123,6 +14885,15 @@ type GetAllFeaturesQuery = {
     type?: FeatureType;
 };
 
+type FileStorageS3 = components['schemas']['FileStorageS3Response'];
+type FileStorageAbs = components['schemas']['FileStorageAbsResponse'];
+type FileStorageGcs = Omit<components['schemas']['FileStorageGcsResponse'], 'gcsCredentials'> & {
+    gcsCredentials: Record<string, unknown>;
+};
+/** Union of all registered file storages across providers, as returned by the
+ * `GET /manage/file-storage-{s3,abs,gcs}` list endpoints. */
+type FileStorage = FileStorageS3 | FileStorageAbs | FileStorageGcs;
+
 type UpdateOrganizationBody = paths['/manage/organizations/{id}']['patch']['requestBody']['content']['application/json'] & {
     mfaRequired?: boolean;
     crmId?: string | null;
@@ -14204,6 +14975,8 @@ type MetadataItem = {
 
 /** Body for PUT /manage/projects/{projectId} — derived from the generated schema. */
 type UpdateProjectBody = components['schemas']['ProjectUpdateRequest'];
+/** Item of GET /manage/project-templates. */
+type ProjectTemplate = components['schemas']['ProjectTemplateResponse'];
 /** Body for POST /manage/projects/{projectId}/organizations. */
 type MoveProjectBody = paths['/manage/projects/{projectId}/organizations']['post']['requestBody']['content']['application/json'];
 /** Body for POST /manage/projects/{projectId}/disabled — no schema entry; hand-written per live API.
@@ -14216,6 +14989,14 @@ type SetProjectDisabledBody = {
 } | {
     isDisabled: false;
 };
+/** Body for `POST /manage/projects/{projectId}/limits`. Super admins may set any limit; admins
+ * holding the `can-manage-project-limits` feature may set only the whitelisted subset. */
+type SetProjectLimitsBody = {
+    limits: {
+        name: string;
+        value: number;
+    }[];
+};
 type GetProjectPath = {
     projectId: number | string;
 };
@@ -14369,6 +15150,29 @@ type Project = {
     usersCount?: number;
 };
 
+/** A storage backend's full detail as returned by `GET /manage/storage-backend/{id}` — id, owner,
+ * technical owner, host/URL, stats, creator and backend-kind-specific fields.
+ *
+ * `assignedProjectsCount` / `assignedMaintainersCount` / `loginType` are required in the generated
+ * schema but weakened to optional here (live behavior > generated schema): the list endpoint
+ * (`GET /manage/storage-backend`) reuses this schema while `loginType` (like
+ * `keyPairLastRotatedAt`) is detail-only per the generated JSDoc, and during the pre-deploy window
+ * a stack that hasn't shipped the M9.1 connection change omits all of them. Consumers access them
+ * defensively; drop the overlay if the backend ever splits the list/detail response schemas. */
+type StorageBackend = Omit<components['schemas']['StorageBackendDetailResponse'], 'assignedProjectsCount' | 'assignedMaintainersCount' | 'loginType'> & {
+    assignedProjectsCount?: number;
+    assignedMaintainersCount?: number;
+    loginType?: string;
+};
+/** A project assigned to a storage backend, as returned by
+ * `GET /manage/storage-backend/{id}/projects`. */
+type StorageBackendProject = components['schemas']['StorageBackendProjectListResponse'][number];
+/** A maintainer assigned to a storage backend, as returned by
+ * `GET /manage/storage-backend/{id}/maintainers`. */
+type StorageBackendMaintainer = components['schemas']['StorageBackendMaintainerListResponse'][number];
+/** Query parameters accepted by `GET /manage/storage-backend/{id}/projects`. */
+type GetStorageBackendProjectsQuery = NonNullable<operations['get_/manage/storage-backend/{id}/projects::StorageBackendProjectListAction']['parameters']['query']>;
+
 type AddUserFeaturePath = {
     userIdOrMail: string;
 };
@@ -14390,5 +15194,11 @@ type User = {
     isSuperAdmin: boolean;
     canApproveMergeRequests: boolean;
 };
+type UserDetail = components['schemas']['UserResponse'];
+type UserListItem = components['schemas']['UserListResponse'][number];
+type UserOrganizationMembership = components['schemas']['UserListOrganizationsResponse'][number];
+type UserProjectMembership = components['schemas']['UserListProjectsResponse'][number];
+type UserMaintainerMembership = components['schemas']['UserListMaintainersResponse'][number];
+type GetUsersQuery = NonNullable<operations['get_/manage/users::UserListAction']['parameters']['query']>;
 
-export type { FeatureType as $, AddMaintainerUserBody as A, ProjectMetadataItem as B, CreateMaintainerBody as C, DeletedProjectsListQuery as D, SetProjectMetadataPath as E, Feature as F, GetAllFeaturesQuery as G, SetProjectMetadataBody as H, GetProjectReviewersPath as I, Reviewer as J, SetProjectReviewersPath as K, ListProjectUsersPath as L, Maintainer as M, SetProjectReviewersBody as N, OrganizationDetail as O, Project as P, UpdateProjectBody as Q, RemoveProjectFeaturePath as R, SetMaintainerMetadataBody as S, MoveProjectBody as T, UpdateMaintainerBody as U, SetProjectDisabledBody as V, AddUserFeatureBody as W, AddUserFeaturePath as X, RemoveUserFeaturePath as Y, components as Z, AdminUser as _, DeletedProject as a, MaintainerInvitationDetail as a0, Organization as a1, OrganizationInvitationDetail as a2, OrganizationListItem as a3, OrganizationMaintainer as a4, OrganizationProject as a5, ProjectInvitableRole as a6, ProjectInvitationDetail as a7, ProjectMetadataInput as a8, DeletedProjectPurgeResult as b, MaintainerDetail as c, MaintainerUser as d, CreateMaintainerInvitationBody as e, CreateMaintainerOrganizationBody as f, MetadataItem as g, UpdateOrganizationBody as h, AddOrganizationUserBody as i, CreateOrganizationInvitationBody as j, CreateOrganizationProjectBody as k, SetOrganizationMetadataBody as l, FeatureProject as m, FeatureAdmin as n, GetProjectPath as o, CreateProjectFeaturePath as p, CreateProjectFeatureBody as q, User as r, ListProjectInvitationsPath as s, CreateProjectInvitationPath as t, CreateProjectInvitationBody as u, DeleteProjectInvitationPath as v, AddProjectUserPath as w, AddProjectUserBody as x, RemoveProjectUserPath as y, GetProjectMetadataPath as z };
+export type { ProjectMetadataItem as $, AddMaintainerUserBody as A, GetProjectPath as B, CreateMaintainerBody as C, DeleteProjectInvitationPath as D, GetProjectReviewersPath as E, Feature as F, GetAllFeaturesQuery as G, GetStorageBackendProjectsQuery as H, GetUsersQuery as I, ListProjectUsersPath as J, MaintainerDetail as K, ListProjectInvitationsPath as L, Maintainer as M, MaintainerInvitationDetail as N, MaintainerUser as O, MetadataItem as P, MoveProjectBody as Q, Organization as R, OrganizationDetail as S, OrganizationInvitationDetail as T, OrganizationListItem as U, OrganizationMaintainer as V, OrganizationProject as W, Project as X, ProjectInvitableRole as Y, ProjectInvitationDetail as Z, ProjectMetadataInput as _, AddOrganizationUserBody as a, ProjectTemplate as a0, RemoveProjectFeaturePath as a1, RemoveProjectUserPath as a2, RemoveUserFeaturePath as a3, Reviewer as a4, SetMaintainerMetadataBody as a5, SetOrganizationMetadataBody as a6, SetProjectDisabledBody as a7, SetProjectLimitsBody as a8, SetProjectMetadataBody as a9, SetProjectMetadataPath as aa, SetProjectReviewersBody as ab, SetProjectReviewersPath as ac, StorageBackend as ad, StorageBackendMaintainer as ae, StorageBackendProject as af, UpdateMaintainerBody as ag, UpdateOrganizationBody as ah, UpdateProjectBody as ai, User as aj, UserDetail as ak, UserListItem as al, UserMaintainerMembership as am, UserOrganizationMembership as an, UserProjectMembership as ao, AddProjectUserBody as b, components as c, AddProjectUserPath as d, AddUserFeatureBody as e, AddUserFeaturePath as f, AdminUser as g, CreateMaintainerInvitationBody as h, CreateMaintainerOrganizationBody as i, CreateOrganizationInvitationBody as j, CreateOrganizationProjectBody as k, CreateProjectFeatureBody as l, CreateProjectFeaturePath as m, CreateProjectInvitationBody as n, CreateProjectInvitationPath as o, DeletedProject as p, DeletedProjectPurgeResult as q, DeletedProjectsListQuery as r, FeatureAdmin as s, FeatureProject as t, FeatureType as u, FileStorage as v, FileStorageAbs as w, FileStorageGcs as x, FileStorageS3 as y, GetProjectMetadataPath as z };