@keboola/api-client 21.0.0 → 24.0.0

package/dist/{types-DJLceKR0.d.cts → types-Hj1CaKtV.d.ts}

@@ -1,9 +1,47 @@
+import { d as OpenapiPathType, O as OpenapiBodyType } from './types-gcShAmmi.js';
+
 /**
  * This file was auto-generated by openapi-typescript.
  * Do not make direct changes to the file.
  */
 
 type paths = {
+  '/manage/users': {
+    parameters: {
+      query?: never;
+      header?: never;
+      path?: never;
+      cookie?: never;
+    };
+    /**
+     * List users
+     * @description Returns all users (admins), each with their assigned features, MFA/super-admin state, and
+     *     membership counts (organizations, projects, maintainers).
+     *
+     *     Listing is allowed only for a super admin or a user with feature `can-manage-users`.
+     *
+     *     #### Filtering
+     *
+     *     * *q* - fulltext filter matched against the user name or email
+     *
+     *     #### Pagination
+     *
+     *     * *limit* - number of returned users; default value: 20
+     *     * *offset* - pagination offset
+     *
+     *     The response is a bare array with no total count — deliberately, as the consumer
+     *     (the control-ui Users section) pages with "load more until a short page is returned".
+     *     A short (or empty) page means the listing is exhausted.
+     */
+    get: operations['get_/manage/users::UserListAction'];
+    put?: never;
+    post?: never;
+    delete?: never;
+    options?: never;
+    head?: never;
+    patch?: never;
+    trace?: never;
+  };
   '/manage/commands': {
     parameters: {
       query?: never;
@@ -2329,6 +2367,50 @@ type paths = {
     patch?: never;
     trace?: never;
   };
+  '/manage/users/{id}/super-admin': {
+    parameters: {
+      query?: never;
+      header?: never;
+      path?: never;
+      cookie?: never;
+    };
+    get?: never;
+    put?: never;
+    /**
+     * Grant super admin privilege to User
+     * @description Grants super admin privileges to the specified user. Requires the target user to already have
+     *     multi-factor authentication enabled — there is no way to override this precondition over the API
+     *     (use the `manage:user:set-super-admin --force-no-mfa` CLI command instead).
+     *
+     *     Only a super admin may grant this privilege; having the `can-manage-users` feature is not enough.
+     */
+    post: operations['post_/manage/users/{id}/super-admin::UserGrantSuperAdminAction'];
+    delete?: never;
+    options?: never;
+    head?: never;
+    patch?: never;
+    trace?: never;
+  };
+  '/manage/users/{id}/maintainers': {
+    parameters: {
+      query?: never;
+      header?: never;
+      path?: never;
+      cookie?: never;
+    };
+    /**
+     * List user's maintainers
+     * @description Returns the maintainers the user is a member of.
+     */
+    get: operations['get_/manage/users/{id}/maintainers::UserListMaintainersAction'];
+    put?: never;
+    post?: never;
+    delete?: never;
+    options?: never;
+    head?: never;
+    patch?: never;
+    trace?: never;
+  };
   '/manage/users/{idOrEmail}/metadata': {
     parameters: {
       query?: never;
@@ -2360,6 +2442,46 @@ type paths = {
     patch?: never;
     trace?: never;
   };
+  '/manage/users/{id}/organizations': {
+    parameters: {
+      query?: never;
+      header?: never;
+      path?: never;
+      cookie?: never;
+    };
+    /**
+     * List user's organizations
+     * @description Returns the organizations the user is a member of, each with the membership creation date, who invited the user (if known), and the organization's maintainer.
+     */
+    get: operations['get_/manage/users/{id}/organizations::UserListOrganizationsAction'];
+    put?: never;
+    post?: never;
+    delete?: never;
+    options?: never;
+    head?: never;
+    patch?: never;
+    trace?: never;
+  };
+  '/manage/users/{id}/projects': {
+    parameters: {
+      query?: never;
+      header?: never;
+      path?: never;
+      cookie?: never;
+    };
+    /**
+     * List user's projects
+     * @description Returns the projects the user is a member of, including role, membership status, expiration, creation date, reason, and who invited the user (if known).
+     */
+    get: operations['get_/manage/users/{id}/projects::UserListProjectsAction'];
+    put?: never;
+    post?: never;
+    delete?: never;
+    options?: never;
+    head?: never;
+    patch?: never;
+    trace?: never;
+  };
   '/manage/users/{idOrEmail}/features/{featureName}': {
     parameters: {
       query?: never;
@@ -2427,6 +2549,14 @@ type paths = {
 };
 type components = {
   schemas: {
+    UserListRequest: {
+      /** @description Fulltext filter matched against the user name or email (substring, case-insensitive). */
+      q?: string | null;
+      /** @description Maximum number of users to return. Default value: 20. */
+      limit?: number | null;
+      /** @description Pagination offset. Default value: 0. */
+      offset?: number | null;
+    };
     /** @description CLI command enqueue request payload. */
     EnqueueCommandRequest: {
       /**
@@ -2833,11 +2963,6 @@ type components = {
       defaultFileStorageId?: number | null;
     };
     SamlConfigCompleteSetupRequest: {
-      /**
-       * @description One-time setup token from initial configuration
-       * @example a1b2c3d4e5f6g7h8i9j0k1l2m3n4o5p6q7r8s9t0u1v2w3x4y5z6
-       */
-      setupToken: string;
       /**
        * @description Identity Provider entity ID
        * @example http://www.okta.com/exk123456
@@ -3225,6 +3350,60 @@ type components = {
       /** @description Identifier of the project to top up. Must be a positive integer. */
       idProject: number;
     };
+    UserListResponse: {
+      /**
+       * @description User identifier.
+       * @example 2
+       */
+      id: number;
+      /**
+       * @description User full name.
+       * @example Martin
+       */
+      name: string;
+      /**
+       * @description User email address.
+       * @example martin@keboola.com
+       */
+      email: string;
+      /**
+       * @description Whether MFA is enabled for the user.
+       * @example true
+       */
+      mfaEnabled: boolean;
+      /**
+       * @description List of assigned features.
+       * @example [
+       *       "inline-manual"
+       *     ]
+       */
+      features: string[];
+      /**
+       * @description Whether the user can access logs.
+       * @example true
+       */
+      canAccessLogs: boolean;
+      /**
+       * @description Whether the user has super admin privileges.
+       * @example true
+       */
+      isSuperAdmin: boolean;
+      /**
+       * @description Number of organizations the user is a member of.
+       * @example 2
+       */
+      organizationsCount: number;
+      /**
+       * @description Number of projects the user is a member of.
+       * @example 5
+       */
+      projectsCount: number;
+      /**
+       * @description Number of maintainers the user is a member of.
+       * @example 1
+       */
+      maintainersCount: number;
+    }[];
     EnqueueCommandResponse: {
       /**
        * @description Identifier of the enqueued command execution; this ID is appended to all logs produced by the command.
@@ -4981,6 +5160,73 @@ type components = {
         commitSha?: string | null;
       };
     };
+    UserListMaintainersResponse: {
+      maintainer: {
+        /** @example 123 */
+        id: number;
+        /** @example Keboola CZ */
+        name: string | null;
+      };
+    }[];
+    UserListOrganizationsResponse: {
+      organization: {
+        /** @example 1 */
+        id: number;
+        /** @example Keboola Tests */
+        name: string;
+      };
+      /**
+       * Format: date-time
+       * @example 2014-11-11T08:40:51+00:00
+       */
+      created: string | null;
+      invitedBy: {
+        /** @example 1 */
+        id: number;
+        /** @example Martin */
+        name: string;
+        /** @example martin@keboola.com */
+        email: string;
+      } | null;
+      maintainer: {
+        /** @example 123 */
+        id: number;
+        /** @example Keboola CZ */
+        name: string | null;
+      };
+    }[];
+    UserListProjectsResponse: {
+      project: {
+        /** @example 4088 */
+        id: number;
+        /** @example Test project */
+        name: string;
+      };
+      /** @example admin */
+      role: string;
+      /** @example active */
+      status: string;
+      /**
+       * Format: date-time
+       * @example null
+       */
+      expires: string | null;
+      /**
+       * Format: date-time
+       * @example 2016-02-29T08:01:13+00:00
+       */
+      created: string | null;
+      /** @example  */
+      reason: string;
+      invitedBy: {
+        /** @example 1 */
+        id: number;
+        /** @example Martin */
+        name: string;
+        /** @example martin@keboola.com */
+        email: string;
+      } | null;
+    }[];
     TryTopUpRequest2: {
       /** @description Identifier of the project to top up. Must be a positive integer. */
       idProject: number;
@@ -4994,6 +5240,47 @@ type components = {
   pathItems: never;
 };
 type operations = {
+  'get_/manage/users::UserListAction': {
+    parameters: {
+      query?: {
+        /** @description Fulltext filter matched against the user name or email (substring, case-insensitive). */
+        q?: string | null;
+        /** @description Maximum number of users to return. Default value: 20. */
+        limit?: number | null;
+        /** @description Pagination offset. Default value: 0. */
+        offset?: number | null;
+      };
+      header?: never;
+      path?: never;
+      cookie?: never;
+    };
+    requestBody?: never;
+    responses: {
+      /** @description List of users. */
+      200: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          'application/json': components['schemas']['UserListResponse'];
+        };
+      };
+      /** @description Returned when the Manage token is missing or invalid. */
+      401: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Returned when the current admin cannot list users. */
+      403: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+    };
+  };
   'post_/manage/commands::CommandEnqueueAction': {
     parameters: {
       query?: never;
@@ -8498,7 +8785,7 @@ type operations = {
           };
         };
       };
-      /** @description Invalid or expired setup token, or invalid request data */
+      /** @description Invalid request data */
       400: {
         headers: {
           [name: string]: unknown;
@@ -8520,6 +8807,17 @@ type operations = {
           };
         };
       };
+      /** @description SAML configuration is already active */
+      409: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          'application/json': {
+            error?: string;
+          };
+        };
+      };
     };
   };
   'get_/manage/maintainers/{maintainerId}/saml::SamlConfigListAction': {
@@ -8592,9 +8890,6 @@ type operations = {
             customerSlug?: string;
             name?: string;
             isActive?: boolean;
-            setupToken?: string;
-            /** Format: date-time */
-            setupTokenExpiresAt?: string;
             spConfiguration?: {
               entityId?: string;
               acsUrl?: string;
@@ -13969,6 +14264,120 @@ type operations = {
       };
     };
   };
+  'post_/manage/users/{id}/super-admin::UserGrantSuperAdminAction': {
+    parameters: {
+      query?: never;
+      header?: never;
+      path: {
+        /**
+         * @description User identifier.
+         * @example 2
+         */
+        id: number;
+      };
+      cookie?: never;
+    };
+    requestBody?: never;
+    responses: {
+      /** @description Updated user detail. */
+      200: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          /**
+           * @example {
+           *       "id": 2,
+           *       "name": "Martin",
+           *       "email": "martin@keboola.com",
+           *       "features": [
+           *         "inline-manual"
+           *       ],
+           *       "mfaEnabled": true,
+           *       "canAccessLogs": true,
+           *       "isSuperAdmin": true
+           *     }
+           */
+          'application/json': components['schemas']['UserResponse'];
+        };
+      };
+      /** @description Returned when the Manage token is missing or invalid. */
+      401: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Returned when the current admin is not a super admin. */
+      403: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Returned when the user does not exist. */
+      404: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Returned when the target user does not have MFA enabled. */
+      422: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+    };
+  };
+  'get_/manage/users/{id}/maintainers::UserListMaintainersAction': {
+    parameters: {
+      query?: never;
+      header?: never;
+      path: {
+        /**
+         * @description User identifier.
+         * @example 2
+         */
+        id: number;
+      };
+      cookie?: never;
+    };
+    requestBody?: never;
+    responses: {
+      /** @description List of the user's maintainers. */
+      200: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          'application/json': components['schemas']['UserListMaintainersResponse'];
+        };
+      };
+      /** @description Returned when the Manage token is missing or invalid. */
+      401: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Returned when the current admin cannot access this user. */
+      403: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Returned when the user does not exist. */
+      404: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+    };
+  };
   'get_/manage/users/{idOrEmail}/metadata::UserListMetadataAction': {
     parameters: {
       query?: never;
@@ -14170,6 +14579,100 @@ type operations = {
       };
     };
   };
+  'get_/manage/users/{id}/organizations::UserListOrganizationsAction': {
+    parameters: {
+      query?: never;
+      header?: never;
+      path: {
+        /**
+         * @description User identifier.
+         * @example 2
+         */
+        id: number;
+      };
+      cookie?: never;
+    };
+    requestBody?: never;
+    responses: {
+      /** @description List of the user's organizations. */
+      200: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          'application/json': components['schemas']['UserListOrganizationsResponse'];
+        };
+      };
+      /** @description Returned when the Manage token is missing or invalid. */
+      401: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Returned when the current admin cannot access this user. */
+      403: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Returned when the user does not exist. */
+      404: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+    };
+  };
+  'get_/manage/users/{id}/projects::UserListProjectsAction': {
+    parameters: {
+      query?: never;
+      header?: never;
+      path: {
+        /**
+         * @description User identifier.
+         * @example 2
+         */
+        id: number;
+      };
+      cookie?: never;
+    };
+    requestBody?: never;
+    responses: {
+      /** @description List of the user's projects. */
+      200: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          'application/json': components['schemas']['UserListProjectsResponse'];
+        };
+      };
+      /** @description Returned when the Manage token is missing or invalid. */
+      401: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Returned when the current admin cannot access this user. */
+      403: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Returned when the user does not exist. */
+      404: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+    };
+  };
   'delete_/manage/users/{idOrEmail}/features/{featureName}::UserRemoveFeatureAction': {
     parameters: {
       query?: never;
@@ -14355,10 +14858,9 @@ type operations = {
 };
 
 /** A single deleted project as returned by `GET /manage/deleted-projects` or
- * `GET /manage/deleted-projects/{projectId}`. The generated schema now models the owning
- * `organization` (added to the backend OpenAPI after M7 — see
- * docs/prototype-specs/m7-api-discrepancy-report.md), so no overlay is needed; note its `id`/`name`
- * members are optional in the spec, so consumers access them defensively. */
+ * `GET /manage/deleted-projects/{projectId}`. The generated schema models the owning `organization`
+ * (added to the backend OpenAPI by keboola/connection#7794), so no overlay is needed; note its
+ * `id`/`name` members are optional in the spec, so consumers access them defensively. */
 type DeletedProject = components['schemas']['DeletedProjectResponse'];
 /** Query parameters accepted by `GET /manage/deleted-projects`. */
 type DeletedProjectsListQuery = components['schemas']['DeletedProjectsListRequest'];
@@ -14366,15 +14868,8 @@ type DeletedProjectsListQuery = components['schemas']['DeletedProjectsListReques
 type DeletedProjectPurgeResult = components['schemas']['EnqueueCommandResponse'];
 
 type FeatureType = 'project' | 'admin';
-type Feature = {
-    id: number;
-    name: string;
-    title: string;
+type Feature = Omit<components['schemas']['FeatureResponse'], 'type'> & {
     type: FeatureType;
-    description: string;
-    created: string;
-    canBeManageByAdmin: boolean;
-    canBeManagedViaAPI: boolean;
 };
 type FeatureProject = {
     id: number;
@@ -14397,6 +14892,18 @@ type FileStorageGcs = Omit<components['schemas']['FileStorageGcsResponse'], 'gcs
 /** Union of all registered file storages across providers, as returned by the
  * `GET /manage/file-storage-{s3,abs,gcs}` list endpoints. */
 type FileStorage = FileStorageS3 | FileStorageAbs | FileStorageGcs;
+type CreateFileStorageS3Body = components['schemas']['FileStorageCreateS3Request'];
+type CreateFileStorageAbsBody = components['schemas']['FileStorageCreateAbsRequest'];
+type CreateFileStorageGcsBody = components['schemas']['FileStorageCreateGcsRequest'];
+type RotateFileStorageS3Path = OpenapiPathType<paths['/manage/file-storage-s3/{fileStorageId}/credentials']['post']>;
+type RotateFileStorageS3Body = components['schemas']['FileStorageRotateS3Request'];
+type RotateFileStorageS3Input = RotateFileStorageS3Path & RotateFileStorageS3Body;
+type RotateFileStorageAbsPath = OpenapiPathType<paths['/manage/file-storage-abs/{fileStorageId}/credentials']['post']>;
+type RotateFileStorageAbsBody = components['schemas']['FileStorageRotateAbsRequest'];
+type RotateFileStorageAbsInput = RotateFileStorageAbsPath & RotateFileStorageAbsBody;
+type RotateFileStorageGcsPath = OpenapiPathType<paths['/manage/file-storage-gcs/{fileStorageId}/credentials']['post']>;
+type RotateFileStorageGcsBody = components['schemas']['FileStorageRotateGcsRequest'];
+type RotateFileStorageGcsInput = RotateFileStorageGcsPath & RotateFileStorageGcsBody;
 
 type UpdateOrganizationBody = paths['/manage/organizations/{id}']['patch']['requestBody']['content']['application/json'] & {
     mfaRequired?: boolean;
@@ -14443,6 +14950,24 @@ type OrganizationProject = {
     usersCount: number;
 };
 type AdminUser = components['schemas']['UserResponse'];
+/** The schema names this path parameter `id`; the public argument is the explicit `organizationId`. */
+type OrganizationPath = {
+    organizationId: number;
+};
+type UpdateOrganizationInput = OrganizationPath & UpdateOrganizationBody;
+type AddOrganizationUserInput = OrganizationPath & AddOrganizationUserBody;
+type CreateOrganizationInvitationInput = OrganizationPath & CreateOrganizationInvitationBody;
+type CreateOrganizationProjectInput = OrganizationPath & CreateOrganizationProjectBody;
+type SetOrganizationMetadataInput = OrganizationPath & SetOrganizationMetadataBody;
+type OrganizationUserPath = OrganizationPath & {
+    userId: number;
+};
+type OrganizationInvitationPath = OrganizationPath & {
+    invitationId: number;
+};
+type OrganizationMetadataItemPath = OrganizationPath & {
+    metadataId: number;
+};
 
 type CreateMaintainerBody = components['schemas']['CreateMaintainerRequest'];
 type UpdateMaintainerBody = components['schemas']['UpdateMaintainerRequest'];
@@ -14476,12 +15001,74 @@ type MetadataItem = {
     key: string;
     value: string;
 };
+type CreateSamlConfigPath = OpenapiPathType<paths['/manage/maintainers/{maintainerId}/saml']['post']>;
+type CreateSamlConfigBody = components['schemas']['SamlConfigCreateRequest'];
+type CreateSamlConfigInput = CreateSamlConfigPath & CreateSamlConfigBody;
+type SamlConfigPath = OpenapiPathType<paths['/manage/maintainers/{maintainerId}/saml/{configId}']['get']>;
+type UpdateSamlConfigBody = components['schemas']['SamlConfigUpdateRequest'];
+type UpdateSamlConfigInput = SamlConfigPath & UpdateSamlConfigBody;
+type CompleteSamlSetupBody = components['schemas']['SamlConfigCompleteSetupRequest'];
+type CompleteSamlSetupInput = SamlConfigPath & CompleteSamlSetupBody;
+/** The schema names this path parameter `id`; the public argument is the explicit `maintainerId`. */
+type MaintainerPath = {
+    maintainerId: number;
+};
+type UpdateMaintainerInput = MaintainerPath & UpdateMaintainerBody;
+type AddMaintainerUserInput = MaintainerPath & AddMaintainerUserBody;
+type CreateMaintainerInvitationInput = MaintainerPath & CreateMaintainerInvitationBody;
+type CreateMaintainerOrganizationInput = MaintainerPath & CreateMaintainerOrganizationBody;
+type SetMaintainerMetadataInput = MaintainerPath & SetMaintainerMetadataBody;
+type MaintainerUserPath = MaintainerPath & {
+    adminId: number;
+};
+type MaintainerInvitationPath = MaintainerPath & {
+    invitationId: number;
+};
+type MaintainerMetadataItemPath = MaintainerPath & {
+    metadataId: number;
+};
+
+type AddUserFeaturePath = {
+    userIdOrMail: string;
+};
+type AddUserFeatureBody = {
+    feature: string;
+};
+type RemoveUserFeaturePath = {
+    userIdOrMail: string;
+    feature: string;
+};
+type User = {
+    id: number;
+    name: string;
+    email: string;
+    mfaEnabled: boolean;
+    features: string[];
+    canAccessLogs: boolean;
+    role: 'guest' | 'readOnly' | 'admin' | 'share' | 'productionManager' | 'developer' | 'reviewer';
+    isSuperAdmin: boolean;
+    canApproveMergeRequests: boolean;
+};
+type UserDetail = components['schemas']['UserResponse'];
+type UserListItem = components['schemas']['UserListResponse'][number];
+type UserOrganizationMembership = components['schemas']['UserListOrganizationsResponse'][number];
+type UserProjectMembership = components['schemas']['UserListProjectsResponse'][number];
+type UserMaintainerMembership = components['schemas']['UserListMaintainersResponse'][number];
+type GetUsersQuery = NonNullable<operations['get_/manage/users::UserListAction']['parameters']['query']>;
+/** The schema path parameter is `idOrEmail`; these methods take a numeric `id`, as their neighbours do. */
+type UserPath = {
+    id: number;
+};
+type UpdateUserBody = OpenapiBodyType<paths['/manage/users/{idOrEmail}']['put']>;
+type UpdateUserInput = UserPath & UpdateUserBody;
+type SetUserMetadataBody = components['schemas']['MetadataRequest'];
+type SetUserMetadataInput = UserPath & SetUserMetadataBody;
+type DeleteUserMetadataPath = UserPath & {
+    metadataId: number;
+};
 
-/** Body for PUT /manage/projects/{projectId} — derived from the generated schema. */
 type UpdateProjectBody = components['schemas']['ProjectUpdateRequest'];
-/** Item of GET /manage/project-templates. */
 type ProjectTemplate = components['schemas']['ProjectTemplateResponse'];
-/** Body for POST /manage/projects/{projectId}/organizations. */
 type MoveProjectBody = paths['/manage/projects/{projectId}/organizations']['post']['requestBody']['content']['application/json'];
 /** Body for POST /manage/projects/{projectId}/disabled — no schema entry; hand-written per live API.
  * The backend requires `disableReason` when disabling (400 "Disable reason must be set"), so the
@@ -14563,14 +15150,8 @@ type ProjectMetadataItem = {
     key: string;
     value: string;
 };
-type ProjectMetadataInput = {
-    key: string;
-    value: string;
-};
-type SetProjectMetadataBody = {
-    provider: string;
-    metadata: ProjectMetadataInput[];
-};
+type SetProjectMetadataBody = components['schemas']['MetadataRequest'];
+type ProjectMetadataInput = SetProjectMetadataBody['metadata'][number];
 type GetProjectReviewersPath = {
     projectId: number;
 };
@@ -14589,15 +15170,18 @@ type ListProjectInvitationsPath = {
     projectId: number | string;
 };
 type ProjectInvitationDetail = components['schemas']['ProjectInvitationDetailResponse'];
-/** Roles the project write API (invite / add) accepts — a strict subset of the 7-value
- * `User['role']` union. The role `<Select>` must offer only these four. */
+/** The four roles a non-SOX project offers on invite / add — a subset of the 7-value `User['role']`
+ * union. A project with a protected default branch instead offers `productionManager`, `developer`
+ * and `reviewer`, so a role `<Select>` is only limited to these four off the SOX path. */
 type ProjectInvitableRole = 'admin' | 'guest' | 'readOnly' | 'share';
 type CreateProjectInvitationPath = {
     projectId: number;
 };
 type CreateProjectInvitationBody = {
     email: string;
-    role?: ProjectInvitableRole;
+    role?: User['role'];
+    /** After how many seconds the invitation and the resulting membership expire. */
+    expirationSeconds?: number;
 };
 type DeleteProjectInvitationPath = {
     projectId: number;
@@ -14614,45 +15198,62 @@ type RemoveProjectUserPath = {
     projectId: number;
     idOrEmail: number | string;
 };
-type Project = {
-    id: number;
-    name: string;
-    type: string;
-    region: string;
-    created?: string | null;
-    expires?: string | null;
-    features: string[];
-    dataSizeBytes: number;
-    rowsCount: number;
-    hasMysql: boolean;
-    hasSynapse: boolean;
-    hasSnowflake: boolean;
-    hasExasol: boolean;
-    hasTeradata: boolean;
-    hasBigquery: boolean;
-    defaultBackend: string;
-    hasTryModeOn: string;
+type ListProjectJoinRequestsPath = {
+    projectId: number | string;
+};
+type ProjectJoinRequestDetail = components['schemas']['ProjectJoinRequestDetailResponse'];
+type ProjectJoinRequestPath = {
+    projectId: number;
+    joinRequestId: number;
+};
+/**
+ * The base project shape, returned by `updateProject`, `moveProject`, `addProjectFeature` and
+ * `setProjectDisabled`. `GET /manage/projects/{projectId}` and `setProjectLimits` return the richer
+ * {@link Project}.
+ */
+type ProjectBase = Omit<components['schemas']['ProjectResponse'], 'limits' | 'metrics'> & {
     limits: Record<string, ProjectLimit>;
-    isDisabled: boolean;
-    billedMonthlyPrice?: number | null;
-    dataRetentionTimeInDays: number;
-    assignedBackends: string[];
-    fileStorageProvider?: string | null;
-    payAsYouGo?: {
-        purchasedCredits?: number;
-    } | null;
+    metrics: Record<string, unknown>;
+};
+/**
+ * `ProjectDetailResponse` with the parts the swagger under-models replaced:
+ * - `fileStorage` is documented S3-only (`awsKey`/`filesBucket`), so ABS/GCS projects don't fit it
+ * - `backends` is documented as `{ snowflake }` only
+ * - `organization` is missing `mfaRequired`
+ * - `usersCount` isn't documented at all
+ *
+ * Drop each override as the swagger catches up.
+ */
+type Project = Omit<components['schemas']['ProjectDetailResponse'], 'organization' | 'fileStorage' | 'backends' | 'limits' | 'metrics'> & {
     organization: ProjectOrganization;
     fileStorage: ProjectFileStorage;
     backends: ProjectBackends;
+    limits: Record<string, ProjectLimit>;
     metrics: Record<string, unknown>;
-    isBYODB: boolean;
-    timezone?: string | null;
-    disabled?: {
-        reason?: string;
-        estimatedEndTime?: string | null;
-    } | null;
     usersCount?: number;
 };
+type ProjectTemplatePath = OpenapiPathType<paths['/manage/project-templates/{templateId}']['get']>;
+type AssignFeatureBody = components['schemas']['AssignFeatureRequest'];
+type AssignProjectTemplateFeatureInput = ProjectTemplatePath & AssignFeatureBody;
+type RemoveProjectTemplateFeaturePath = OpenapiPathType<paths['/manage/project-templates/{templateId}/features/{featureName}']['delete']>;
+type ProjectPath = OpenapiPathType<paths['/manage/projects/{projectId}']['put']>;
+type JoinProjectBody = OpenapiBodyType<paths['/manage/projects/{projectId}/join-project']['post']>;
+type JoinProjectInput = ProjectPath & JoinProjectBody;
+type RequestProjectAccessBody = OpenapiBodyType<paths['/manage/projects/{projectId}/request-access']['post']>;
+type RequestProjectAccessInput = ProjectPath & RequestProjectAccessBody;
+type RemoveProjectLimitPath = OpenapiPathType<paths['/manage/projects/{projectId}/limits/{limitName}']['delete']>;
+type DeleteProjectMetadataPath = OpenapiPathType<paths['/manage/projects/{projectId}/metadata/{metadataId}']['delete']>;
+type UpdateProjectInput = ProjectPath & UpdateProjectBody;
+type MoveProjectInput = ProjectPath & MoveProjectBody;
+type SetProjectDisabledInput = ProjectPath & SetProjectDisabledBody;
+type SetProjectLimitsInput = ProjectPath & SetProjectLimitsBody;
+type ChangeProjectUserRolePath = ProjectPath & {
+    userId: number;
+};
+type ChangeProjectUserRoleBody = {
+    role: User['role'];
+};
+type ChangeProjectUserRoleInput = ChangeProjectUserRolePath & ChangeProjectUserRoleBody;
 
 /** A storage backend's full detail as returned by `GET /manage/storage-backend/{id}` — id, owner,
  * technical owner, host/URL, stats, creator and backend-kind-specific fields.
@@ -14676,27 +15277,16 @@ type StorageBackendProject = components['schemas']['StorageBackendProjectListRes
 type StorageBackendMaintainer = components['schemas']['StorageBackendMaintainerListResponse'][number];
 /** Query parameters accepted by `GET /manage/storage-backend/{id}/projects`. */
 type GetStorageBackendProjectsQuery = NonNullable<operations['get_/manage/storage-backend/{id}/projects::StorageBackendProjectListAction']['parameters']['query']>;
+type CreateSnowflakeStorageBackendBody = components['schemas']['CreateSnowflakeBackendWithCertRequest'];
+type CreateBigqueryStorageBackendBody = components['schemas']['StorageBackendCreateBigqueryRequest'];
+type StorageBackendPath = OpenapiPathType<paths['/manage/storage-backend/{id}']['patch']>;
+type UpdateStorageBackendBody = components['schemas']['StorageBackendUpdateRequest'];
+type UpdateStorageBackendInput = StorageBackendPath & UpdateStorageBackendBody;
+type UpdateBigqueryStorageBackendBody = components['schemas']['StorageBackendUpdateBigqueryRequest'];
+type UpdateBigqueryStorageBackendInput = StorageBackendPath & UpdateBigqueryStorageBackendBody;
 
-type AddUserFeaturePath = {
-    userIdOrMail: string;
-};
-type AddUserFeatureBody = {
-    feature: string;
-};
-type RemoveUserFeaturePath = {
-    userIdOrMail: string;
-    feature: string;
-};
-type User = {
-    id: number;
-    name: string;
-    email: string;
-    mfaEnabled: boolean;
-    features: string[];
-    canAccessLogs: boolean;
-    role: 'guest' | 'readOnly' | 'admin' | 'share' | 'productionManager' | 'developer' | 'reviewer';
-    isSuperAdmin: boolean;
-    canApproveMergeRequests: boolean;
-};
+type UiApp = components['schemas']['UiAppsListResponse'][number];
+type RegisterUiAppBody = components['schemas']['RegistrationRequest'];
+type ActivateUiAppVersionPath = OpenapiPathType<paths['/manage/ui-apps/{id}/activate/{version}']['post']>;
 
-export type { ProjectTemplate as $, AddMaintainerUserBody as A, GetProjectPath as B, CreateMaintainerBody as C, DeleteProjectInvitationPath as D, GetProjectReviewersPath as E, Feature as F, GetAllFeaturesQuery as G, GetStorageBackendProjectsQuery as H, ListProjectUsersPath as I, MaintainerDetail as J, MaintainerInvitationDetail as K, ListProjectInvitationsPath as L, Maintainer as M, MaintainerUser as N, MetadataItem as O, MoveProjectBody as P, Organization as Q, OrganizationDetail as R, OrganizationInvitationDetail as S, OrganizationListItem as T, OrganizationMaintainer as U, OrganizationProject as V, Project as W, ProjectInvitableRole as X, ProjectInvitationDetail as Y, ProjectMetadataInput as Z, ProjectMetadataItem as _, AddOrganizationUserBody as a, RemoveProjectFeaturePath as a0, RemoveProjectUserPath as a1, RemoveUserFeaturePath as a2, Reviewer as a3, SetMaintainerMetadataBody as a4, SetOrganizationMetadataBody as a5, SetProjectDisabledBody as a6, SetProjectLimitsBody as a7, SetProjectMetadataBody as a8, SetProjectMetadataPath as a9, SetProjectReviewersBody as aa, SetProjectReviewersPath as ab, StorageBackend as ac, StorageBackendMaintainer as ad, StorageBackendProject as ae, UpdateMaintainerBody as af, UpdateOrganizationBody as ag, UpdateProjectBody as ah, User as ai, AddProjectUserBody as b, components as c, AddProjectUserPath as d, AddUserFeatureBody as e, AddUserFeaturePath as f, AdminUser as g, CreateMaintainerInvitationBody as h, CreateMaintainerOrganizationBody as i, CreateOrganizationInvitationBody as j, CreateOrganizationProjectBody as k, CreateProjectFeatureBody as l, CreateProjectFeaturePath as m, CreateProjectInvitationBody as n, CreateProjectInvitationPath as o, DeletedProject as p, DeletedProjectPurgeResult as q, DeletedProjectsListQuery as r, FeatureAdmin as s, FeatureProject as t, FeatureType as u, FileStorage as v, FileStorageAbs as w, FileStorageGcs as x, FileStorageS3 as y, GetProjectMetadataPath as z };
+export type { GetAllFeaturesQuery as $, ActivateUiAppVersionPath as A, CreateOrganizationInvitationInput as B, ChangeProjectUserRoleBody as C, CreateOrganizationProjectBody as D, CreateOrganizationProjectInput as E, CreateProjectFeatureBody as F, CreateProjectFeaturePath as G, CreateProjectInvitationBody as H, CreateProjectInvitationPath as I, CreateSamlConfigBody as J, CreateSamlConfigInput as K, CreateSamlConfigPath as L, CreateSnowflakeStorageBackendBody as M, DeleteProjectInvitationPath as N, DeleteProjectMetadataPath as O, DeleteUserMetadataPath as P, DeletedProject as Q, DeletedProjectPurgeResult as R, DeletedProjectsListQuery as S, Feature as T, FeatureAdmin as U, FeatureProject as V, FeatureType as W, FileStorage as X, FileStorageAbs as Y, FileStorageGcs as Z, FileStorageS3 as _, AddMaintainerUserBody as a, SetOrganizationMetadataBody as a$, GetProjectMetadataPath as a0, GetProjectPath as a1, GetProjectReviewersPath as a2, GetStorageBackendProjectsQuery as a3, GetUsersQuery as a4, JoinProjectBody as a5, JoinProjectInput as a6, ListProjectInvitationsPath as a7, ListProjectJoinRequestsPath as a8, ListProjectUsersPath as a9, ProjectJoinRequestPath as aA, ProjectMetadataInput as aB, ProjectMetadataItem as aC, ProjectPath as aD, ProjectTemplate as aE, ProjectTemplatePath as aF, RegisterUiAppBody as aG, RemoveProjectFeaturePath as aH, RemoveProjectLimitPath as aI, RemoveProjectTemplateFeaturePath as aJ, RemoveProjectUserPath as aK, RemoveUserFeaturePath as aL, RequestProjectAccessBody as aM, RequestProjectAccessInput as aN, Reviewer as aO, RotateFileStorageAbsBody as aP, RotateFileStorageAbsInput as aQ, RotateFileStorageAbsPath as aR, RotateFileStorageGcsBody as aS, RotateFileStorageGcsInput as aT, RotateFileStorageGcsPath as aU, RotateFileStorageS3Body as aV, RotateFileStorageS3Input as aW, RotateFileStorageS3Path as aX, SamlConfigPath as aY, SetMaintainerMetadataBody as aZ, SetMaintainerMetadataInput as a_, Maintainer as aa, MaintainerDetail as ab, MaintainerInvitationDetail as ac, MaintainerInvitationPath as ad, MaintainerMetadataItemPath as ae, MaintainerPath as af, MaintainerUser as ag, MaintainerUserPath as ah, MetadataItem as ai, MoveProjectBody as aj, MoveProjectInput as ak, Organization as al, OrganizationDetail as am, OrganizationInvitationDetail as an, OrganizationInvitationPath as ao, OrganizationListItem as ap, OrganizationMaintainer as aq, OrganizationMetadataItemPath as ar, OrganizationPath as as, OrganizationProject as at, OrganizationUserPath as au, Project as av, ProjectBase as aw, ProjectInvitableRole as ax, ProjectInvitationDetail as ay, ProjectJoinRequestDetail as az, AddMaintainerUserInput as b, SetOrganizationMetadataInput as b0, SetProjectDisabledBody as b1, SetProjectDisabledInput as b2, SetProjectLimitsBody as b3, SetProjectLimitsInput as b4, SetProjectMetadataBody as b5, SetProjectMetadataPath as b6, SetProjectReviewersBody as b7, SetProjectReviewersPath as b8, SetUserMetadataBody as b9, UserProjectMembership as bA, SetUserMetadataInput as ba, StorageBackend as bb, StorageBackendMaintainer as bc, StorageBackendPath as bd, StorageBackendProject as be, UiApp as bf, UpdateBigqueryStorageBackendBody as bg, UpdateBigqueryStorageBackendInput as bh, UpdateMaintainerBody as bi, UpdateMaintainerInput as bj, UpdateOrganizationBody as bk, UpdateOrganizationInput as bl, UpdateProjectBody as bm, UpdateProjectInput as bn, UpdateSamlConfigBody as bo, UpdateSamlConfigInput as bp, UpdateStorageBackendBody as bq, UpdateStorageBackendInput as br, UpdateUserBody as bs, UpdateUserInput as bt, User as bu, UserDetail as bv, UserListItem as bw, UserMaintainerMembership as bx, UserOrganizationMembership as by, UserPath as bz, components as c, AddOrganizationUserBody as d, AddOrganizationUserInput as e, AddProjectUserBody as f, AddProjectUserPath as g, AddUserFeatureBody as h, AddUserFeaturePath as i, AdminUser as j, AssignFeatureBody as k, AssignProjectTemplateFeatureInput as l, ChangeProjectUserRoleInput as m, ChangeProjectUserRolePath as n, CompleteSamlSetupBody as o, CompleteSamlSetupInput as p, CreateBigqueryStorageBackendBody as q, CreateFileStorageAbsBody as r, CreateFileStorageGcsBody as s, CreateFileStorageS3Body as t, CreateMaintainerBody as u, CreateMaintainerInvitationBody as v, CreateMaintainerInvitationInput as w, CreateMaintainerOrganizationBody as x, CreateMaintainerOrganizationInput as y, CreateOrganizationInvitationBody as z };