@keboola/api-client 42.0.0 → 43.0.0

package/dist/{types-DinIJ1D_.d.cts → types-CBPKpLTf.d.cts}

@@ -352,6 +352,26 @@ type paths = {
             };
           };
         };
+        /** @description Request body exceeds `CHAT_BODY_LIMIT_BYTES`. A question carries its attachments inside this JSON as base64, so the raw-file ceiling is roughly three quarters of it. Answered before auth runs, so an unauthenticated caller sees this rather than a 401. */
+        413: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            'application/json': {
+              error: {
+                /** @enum {string} */
+                type: 'bad_request' | 'unauthorized' | 'forbidden' | 'not_found' | 'conflict' | 'payload_too_large' | 'rate_limit' | 'offline' | 'bad_response' | 'internal';
+                /** @enum {string} */
+                surface: 'chat' | 'auth' | 'api' | 'stream' | 'database' | 'history' | 'vote' | 'artifact';
+                message: string;
+                /** @enum {string} */
+                subtype?: 'burst' | 'monthly_messages' | 'monthly_credits_user' | 'monthly_credits_project' | 'resolved' | 'timed_out' | 'chat_cancelled' | 'swept' | 'shutdown';
+                exceptionId?: string;
+              };
+            };
+          };
+        };
         /** @description Rate limit exceeded */
         429: {
           headers: {
@@ -992,6 +1012,8 @@ type paths = {
                   createdAt?: string;
                   hidden?: boolean;
                   autoForwarded?: boolean;
+                  /** @enum {string} */
+                  pausedReason?: 'turn-budget';
                   requestContext?: {
                     path?: string;
                     sqlEditorActive?: boolean;
@@ -1844,7 +1866,7 @@ type paths = {
             };
           };
         };
-        /** @description The approval slot existed and is gone. `error.subtype` carries the reason (resolved | timed_out | chat_cancelled | swept | shutdown); the decision is final, so the client must not retry. */
+        /** @description The approval cannot be applied here: the slot existed and is gone, or the pending turn is owned by another process (rolling deploy). `error.subtype` carries the reason (resolved | timed_out | chat_cancelled | swept | shutdown); the decision is final, so the client must not retry. */
         409: {
           headers: {
             [name: string]: unknown;
@@ -2604,6 +2626,11 @@ type paths = {
               /** @enum {string|null} */
               ppuLimitScope: 'user' | 'project' | null;
               projectPpuPercentage: number | null;
+              /** @description The organization's one-time free Kai allowance in PPU — shared by every project and user in the organization, non-expiring, granted once and never refilled. NOT the monthly spend cap (`ppuLimit`/`projectPpuPercentage` above), and clients must not blend the two. `null` when the organization has no allowance at all (created before the rollout boundary, or no billing account resolved); clients hide the allowance UI for null. `remainingPpu` is clamped at zero. */
+              freeAllowance: {
+                grantedPpu: number;
+                remainingPpu: number;
+              } | null;
               /** Format: date-time */
               resetDate: string;
             };
@@ -2708,6 +2735,10 @@ type paths = {
             'application/json': {
               projectId: string;
               customInstructions: string | null;
+              toolPermissions: {
+                [key: string]: 'always_ask' | 'blocked';
+              } | null;
+              canWriteToolPolicy: boolean;
               createdAt: string;
               updatedAt: string;
             };
@@ -2788,6 +2819,10 @@ type paths = {
             'application/json': {
               projectId: string;
               customInstructions: string | null;
+              toolPermissions: {
+                [key: string]: 'always_ask' | 'blocked';
+              } | null;
+              canWriteToolPolicy: boolean;
               createdAt: string;
               updatedAt: string;
             };
@@ -2877,6 +2912,142 @@ type paths = {
     };
     trace?: never;
   };
+  '/api/settings/tool-permissions': {
+    parameters: {
+      query?: never;
+      header?: never;
+      path?: never;
+      cookie?: never;
+    };
+    get?: never;
+    /**
+     * Replace the project Kai tool policy
+     * @description Organization-admin only. Replaces the project-level Kai tool policy.
+     */
+    put: {
+      parameters: {
+        query?: never;
+        header?: never;
+        path?: never;
+        cookie?: never;
+      };
+      requestBody?: {
+        content: {
+          'application/json': {
+            toolPermissions: {
+              [key: string]: 'always_ask' | 'blocked';
+            };
+          };
+        };
+      };
+      responses: {
+        /** @description Updated project tool policy */
+        200: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            'application/json': {
+              projectId: string;
+              customInstructions: string | null;
+              toolPermissions: {
+                [key: string]: 'always_ask' | 'blocked';
+              } | null;
+              canWriteToolPolicy: boolean;
+              createdAt: string;
+              updatedAt: string;
+            };
+          };
+        };
+        /** @description Bad request */
+        400: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            'application/json': {
+              error: {
+                /** @enum {string} */
+                type: 'bad_request' | 'unauthorized' | 'forbidden' | 'not_found' | 'conflict' | 'payload_too_large' | 'rate_limit' | 'offline' | 'bad_response' | 'internal';
+                /** @enum {string} */
+                surface: 'chat' | 'auth' | 'api' | 'stream' | 'database' | 'history' | 'vote' | 'artifact';
+                message: string;
+                /** @enum {string} */
+                subtype?: 'burst' | 'monthly_messages' | 'monthly_credits_user' | 'monthly_credits_project' | 'resolved' | 'timed_out' | 'chat_cancelled' | 'swept' | 'shutdown';
+                exceptionId?: string;
+              };
+            };
+          };
+        };
+        /** @description Unauthorized */
+        401: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            'application/json': {
+              error: {
+                /** @enum {string} */
+                type: 'bad_request' | 'unauthorized' | 'forbidden' | 'not_found' | 'conflict' | 'payload_too_large' | 'rate_limit' | 'offline' | 'bad_response' | 'internal';
+                /** @enum {string} */
+                surface: 'chat' | 'auth' | 'api' | 'stream' | 'database' | 'history' | 'vote' | 'artifact';
+                message: string;
+                /** @enum {string} */
+                subtype?: 'burst' | 'monthly_messages' | 'monthly_credits_user' | 'monthly_credits_project' | 'resolved' | 'timed_out' | 'chat_cancelled' | 'swept' | 'shutdown';
+                exceptionId?: string;
+              };
+            };
+          };
+        };
+        /** @description Forbidden — only an organization admin may write the project tool policy */
+        403: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            'application/json': {
+              error: {
+                /** @enum {string} */
+                type: 'bad_request' | 'unauthorized' | 'forbidden' | 'not_found' | 'conflict' | 'payload_too_large' | 'rate_limit' | 'offline' | 'bad_response' | 'internal';
+                /** @enum {string} */
+                surface: 'chat' | 'auth' | 'api' | 'stream' | 'database' | 'history' | 'vote' | 'artifact';
+                message: string;
+                /** @enum {string} */
+                subtype?: 'burst' | 'monthly_messages' | 'monthly_credits_user' | 'monthly_credits_project' | 'resolved' | 'timed_out' | 'chat_cancelled' | 'swept' | 'shutdown';
+                exceptionId?: string;
+              };
+            };
+          };
+        };
+        /** @description Service unavailable — an upstream dependency is unreachable */
+        503: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            'application/json': {
+              error: {
+                /** @enum {string} */
+                type: 'bad_request' | 'unauthorized' | 'forbidden' | 'not_found' | 'conflict' | 'payload_too_large' | 'rate_limit' | 'offline' | 'bad_response' | 'internal';
+                /** @enum {string} */
+                surface: 'chat' | 'auth' | 'api' | 'stream' | 'database' | 'history' | 'vote' | 'artifact';
+                message: string;
+                /** @enum {string} */
+                subtype?: 'burst' | 'monthly_messages' | 'monthly_credits_user' | 'monthly_credits_project' | 'resolved' | 'timed_out' | 'chat_cancelled' | 'swept' | 'shutdown';
+                exceptionId?: string;
+              };
+            };
+          };
+        };
+      };
+    };
+    post?: never;
+    delete?: never;
+    options?: never;
+    head?: never;
+    patch?: never;
+    trace?: never;
+  };
   '/api/settings/user': {
     parameters: {
       query?: never;
@@ -2910,6 +3081,9 @@ type paths = {
               toolPermissions: {
                 [key: string]: 'always_allow' | 'always_ask' | 'blocked';
               } | null;
+              projectToolPermissions: {
+                [key: string]: 'always_ask' | 'blocked';
+              } | null;
               createdAt: string;
               updatedAt: string;
             };
@@ -2997,6 +3171,9 @@ type paths = {
               toolPermissions: {
                 [key: string]: 'always_allow' | 'always_ask' | 'blocked';
               } | null;
+              projectToolPermissions: {
+                [key: string]: 'always_ask' | 'blocked';
+              } | null;
               createdAt: string;
               updatedAt: string;
             };
@@ -3945,4 +4122,4 @@ type ArtifactResponse = OpenapiReturnType<paths['/api/artifacts/{id}']['get']>;
 type ArtifactListResponse = OpenapiReturnType<paths['/api/artifacts']['get']>;
 //#endregion
 export { ChatWithMessages as a, GetChatPath as c, PrepareChatRequest as d, UsageResponse as f, ChatRequest as i, GetHistoryQuery as l, ArtifactListResponse as n, GetArtifactPath as o, VoteRequest as p, ArtifactResponse as r, GetArtifactsQuery as s, ApprovalBody as t, GetVotesQuery as u };
-//# sourceMappingURL=types-DinIJ1D_.d.cts.map
+//# sourceMappingURL=types-CBPKpLTf.d.cts.map

package/dist/{types-DE9hgr7i.d.cts → types-CgBzm1YR.d.cts}

@@ -62,6 +62,32 @@ type paths = {
     patch?: never;
     trace?: never;
   };
+  '/schedules/migrate': {
+    parameters: {
+      query?: never;
+      header?: never;
+      path?: never;
+      cookie?: never;
+    };
+    get?: never;
+    put?: never;
+    /**
+     * Activate Schedule With A Reused Token
+     * @description Activates a configuration of `keboola.scheduler` so that it becomes an active schedule, reusing the Storage token of an already activated schedule instead of creating a new one.
+     *
+     *     Restricted to migrating a schedule from `keboola.orchestrator` to `keboola.flow`: the source schedule must target `keboola.orchestrator` and the activated configuration must target `keboola.flow`, otherwise the request is rejected with `400`. No Storage token is created, so the caller does not have to be allowed to create tokens - and because this endpoint accepts a role-less token where `POST /schedules` does not, the allowed component pair is deliberately narrow. The token is shared, not moved - the source schedule keeps running under it, and the token is dropped only once the last schedule using it is deleted.
+     *
+     *     If there already is a schedule for the given `configurationId`, it is updated and `sourceConfigurationId` is ignored, so repeated calls stay idempotent.
+     *
+     *     Unlike `POST /schedules`, this endpoint also accepts a role-less (machine-minted) project token, because it mints no token of its own. Everything else about the authorization is the same.
+     */
+    post: operations['migrateSchedule'];
+    delete?: never;
+    options?: never;
+    head?: never;
+    patch?: never;
+    trace?: never;
+  };
   '/schedules/{scheduleId}': {
     parameters: {
       query?: never;
@@ -160,6 +186,38 @@ type components = {
         timezone: string;
         /** @enum {string} */
         state: 'enabled' | 'disabled';
+        /**
+         * Format: date-time
+         * @description ISO-8601 timestamp of the next firing, evaluated in the schedule's timezone.
+         *     Null when the schedule is not enabled or the expression can not be evaluated.
+         *     Reflects the schedule's own state only: a schedule pointing at a disabled target
+         *     configuration still reports its next fire time even though the run would be skipped.
+         * @example 2021-03-13T06:30:00+00:00
+         */
+        nextRunAt: string | null;
+        /**
+         * @description The next four firings, same semantics as nextRunAt (which is the first element).
+         *     Empty when the schedule is not enabled or the expression can not be evaluated.
+         * @example [
+         *       "2021-03-13T06:30:00+00:00",
+         *       "2021-03-14T06:30:00+00:00",
+         *       "2021-03-15T06:30:00+00:00",
+         *       "2021-03-16T06:30:00+00:00"
+         *     ]
+         */
+        nextRunsAt: string[];
+        /**
+         * @description Human-readable prose describing the cron expression, with the timezone appended.
+         *     Falls back to the raw cron expression when it can not be parsed.
+         * @example Every 2 minutes (UTC)
+         */
+        humanCron: string;
+        /**
+         * @description Coarse grouping of the schedule cadence for display purposes.
+         * @example custom
+         * @enum {string}
+         */
+        periodLabel: 'daily' | 'weekly' | 'monthly' | 'custom';
       };
       target: {
         /** @example keboola.ex-db-snowflake */
@@ -237,6 +295,53 @@ interface operations {
       };
     };
   };
+  migrateSchedule: {
+    parameters: {
+      query?: never;
+      header?: never;
+      path?: never;
+      cookie?: never;
+    };
+    requestBody?: {
+      content: {
+        'application/json': {
+          /** @description Id of the `keboola.scheduler` configuration to activate. */
+          configurationId: string;
+          /** @description Id of the `keboola.scheduler` configuration whose schedule owns the Storage token the new schedule will run under. That configuration must already have a schedule in the same project as the caller's token - it is the schedule row that is looked up, so a configuration that was never activated is rejected - and that schedule must target `keboola.orchestrator`. Its state does not matter: a disabled schedule still owns a usable token. */
+          sourceConfigurationId: string;
+        };
+      };
+    };
+    responses: {
+      /** @description Schedule Activated */
+      200: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          'application/json': components['schemas']['Schedule'];
+        };
+      };
+      /** @description There is no schedule for the given `sourceConfigurationId` in this project, or the component pair is not `keboola.orchestrator` to `keboola.flow` */
+      400: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          'application/json': components['schemas']['Error'];
+        };
+      };
+      /** @description Error response */
+      default: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          'application/json': components['schemas']['Error'];
+        };
+      };
+    };
+  };
   getSchedule: {
     parameters: {
       query?: never;
@@ -370,4 +475,4 @@ type SchedulePath = OpenapiPathType<paths['/schedules/{scheduleId}']['get']>;
 type ConfigurationPath = OpenapiPathType<paths['/configurations/{configurationId}']['delete']>;
 //#endregion
 export { SchedulePath as a, Schedule as i, ConfigurationPath as n, Schedules as o, GetSchedulesQuery as r, ActivateScheduleBody as t };
-//# sourceMappingURL=types-DE9hgr7i.d.cts.map
+//# sourceMappingURL=types-CgBzm1YR.d.cts.map

package/dist/{types-B61aCifg.d.cts → types-D9axmt5o.d.cts}

@@ -150,6 +150,9 @@ type components = {
        *
        *     Attributes are part of the variable identity, so two variables with the same key but different attributes
        *     are considered different.
+       *
+       *     The attribute names `key` and `projectId` are reserved and are rejected with a 422 when creating a
+       *     variable. Existing variables that already contain such attributes are still returned unchanged.
        * @default {}
        */
       attributes: {
@@ -383,4 +386,4 @@ type VariableWithHash = Omit<VariableWithHashRaw, 'hash'> & {
 type AnyVariable = VariableWithHash | CreateVariableBody;
 //#endregion
 export { GetVariablesQuery as a, GetVariablesByBranchId as i, CreateVariableBody as n, VariableWithHash as o, DeleteVariablePath as r, AnyVariable as t };
-//# sourceMappingURL=types-B61aCifg.d.cts.map
+//# sourceMappingURL=types-D9axmt5o.d.cts.map

package/dist/{types-CWyXTMwy.d.ts → types-DaMmgW-O.d.ts}

@@ -62,6 +62,32 @@ type paths = {
     patch?: never;
     trace?: never;
   };
+  '/schedules/migrate': {
+    parameters: {
+      query?: never;
+      header?: never;
+      path?: never;
+      cookie?: never;
+    };
+    get?: never;
+    put?: never;
+    /**
+     * Activate Schedule With A Reused Token
+     * @description Activates a configuration of `keboola.scheduler` so that it becomes an active schedule, reusing the Storage token of an already activated schedule instead of creating a new one.
+     *
+     *     Restricted to migrating a schedule from `keboola.orchestrator` to `keboola.flow`: the source schedule must target `keboola.orchestrator` and the activated configuration must target `keboola.flow`, otherwise the request is rejected with `400`. No Storage token is created, so the caller does not have to be allowed to create tokens - and because this endpoint accepts a role-less token where `POST /schedules` does not, the allowed component pair is deliberately narrow. The token is shared, not moved - the source schedule keeps running under it, and the token is dropped only once the last schedule using it is deleted.
+     *
+     *     If there already is a schedule for the given `configurationId`, it is updated and `sourceConfigurationId` is ignored, so repeated calls stay idempotent.
+     *
+     *     Unlike `POST /schedules`, this endpoint also accepts a role-less (machine-minted) project token, because it mints no token of its own. Everything else about the authorization is the same.
+     */
+    post: operations['migrateSchedule'];
+    delete?: never;
+    options?: never;
+    head?: never;
+    patch?: never;
+    trace?: never;
+  };
   '/schedules/{scheduleId}': {
     parameters: {
       query?: never;
@@ -160,6 +186,38 @@ type components = {
         timezone: string;
         /** @enum {string} */
         state: 'enabled' | 'disabled';
+        /**
+         * Format: date-time
+         * @description ISO-8601 timestamp of the next firing, evaluated in the schedule's timezone.
+         *     Null when the schedule is not enabled or the expression can not be evaluated.
+         *     Reflects the schedule's own state only: a schedule pointing at a disabled target
+         *     configuration still reports its next fire time even though the run would be skipped.
+         * @example 2021-03-13T06:30:00+00:00
+         */
+        nextRunAt: string | null;
+        /**
+         * @description The next four firings, same semantics as nextRunAt (which is the first element).
+         *     Empty when the schedule is not enabled or the expression can not be evaluated.
+         * @example [
+         *       "2021-03-13T06:30:00+00:00",
+         *       "2021-03-14T06:30:00+00:00",
+         *       "2021-03-15T06:30:00+00:00",
+         *       "2021-03-16T06:30:00+00:00"
+         *     ]
+         */
+        nextRunsAt: string[];
+        /**
+         * @description Human-readable prose describing the cron expression, with the timezone appended.
+         *     Falls back to the raw cron expression when it can not be parsed.
+         * @example Every 2 minutes (UTC)
+         */
+        humanCron: string;
+        /**
+         * @description Coarse grouping of the schedule cadence for display purposes.
+         * @example custom
+         * @enum {string}
+         */
+        periodLabel: 'daily' | 'weekly' | 'monthly' | 'custom';
       };
       target: {
         /** @example keboola.ex-db-snowflake */
@@ -237,6 +295,53 @@ interface operations {
       };
     };
   };
+  migrateSchedule: {
+    parameters: {
+      query?: never;
+      header?: never;
+      path?: never;
+      cookie?: never;
+    };
+    requestBody?: {
+      content: {
+        'application/json': {
+          /** @description Id of the `keboola.scheduler` configuration to activate. */
+          configurationId: string;
+          /** @description Id of the `keboola.scheduler` configuration whose schedule owns the Storage token the new schedule will run under. That configuration must already have a schedule in the same project as the caller's token - it is the schedule row that is looked up, so a configuration that was never activated is rejected - and that schedule must target `keboola.orchestrator`. Its state does not matter: a disabled schedule still owns a usable token. */
+          sourceConfigurationId: string;
+        };
+      };
+    };
+    responses: {
+      /** @description Schedule Activated */
+      200: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          'application/json': components['schemas']['Schedule'];
+        };
+      };
+      /** @description There is no schedule for the given `sourceConfigurationId` in this project, or the component pair is not `keboola.orchestrator` to `keboola.flow` */
+      400: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          'application/json': components['schemas']['Error'];
+        };
+      };
+      /** @description Error response */
+      default: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          'application/json': components['schemas']['Error'];
+        };
+      };
+    };
+  };
   getSchedule: {
     parameters: {
       query?: never;
@@ -370,4 +475,4 @@ type SchedulePath = OpenapiPathType<paths['/schedules/{scheduleId}']['get']>;
 type ConfigurationPath = OpenapiPathType<paths['/configurations/{configurationId}']['delete']>;
 //#endregion
 export { SchedulePath as a, Schedule as i, ConfigurationPath as n, Schedules as o, GetSchedulesQuery as r, ActivateScheduleBody as t };
-//# sourceMappingURL=types-CWyXTMwy.d.ts.map
+//# sourceMappingURL=types-DaMmgW-O.d.ts.map

package/dist/{types-q-1r_9d1.d.ts → types-DzV6LaZq.d.ts}

@@ -1116,7 +1116,29 @@ type paths = {
     put?: never;
     /**
      * Create app
-     * @description Create a new app under the vendor. After creation, the app id is prefixed by the vendor id (e.g. `keboola.ex-adwords`).
+     * @description Create a new app under the vendor. After creation, the app id is
+     *     prefixed by the vendor id (e.g. `keboola.ex-adwords`).
+     *
+     *     The body is open on purpose: alongside the properties below it takes every
+     *     other writable app field — the same set `PATCH /vendors/{vendor}/apps/{app}`
+     *     takes, with `id` additionally required — so an app can be registered fully
+     *     configured in one request. The properties below are the ones a registration
+     *     typically sets, not the limit.
+     *
+     *     Two things the open schema cannot express:
+     *
+     *     - These keys are **rejected with `422`**, not merely ignored — sending one
+     *       fails the whole request. Set by the service itself: `version`,
+     *       `isPublished`, `createdOn`, `createdBy`, `updatedOn`, `updatedBy`,
+     *       `icon32`, `icon64`, `icon128`, `publishRequestOn`, `publishRequestBy`,
+     *       `publishRequestRejectionReason`. Reserved to an admin, over
+     *       `PATCH /admin/apps/{id}`: `vendor`, `isPublic`, `legacyUri`,
+     *       `repository.digest`, `category`, `categories`, `complexity`, `features`,
+     *       `forwardToken`, `forwardTokenDetails`, `injectEnvironment`,
+     *       `processTimeout`, `requiredMemory`.
+     *
+     *     - Any other unrecognised key is **accepted and then dropped** — validation
+     *       lets it through, the insert filters it out, so it is never stored.
      */
     post: {
       parameters: {
@@ -1133,7 +1155,16 @@ type paths = {
            * @example {
            *       "id": "ex-adwords",
            *       "name": "AdWords Reports",
-           *       "shortDescription": "Reads reports defined by awql queries"
+           *       "type": "extractor",
+           *       "shortDescription": "Reads reports defined by awql queries",
+           *       "uiOptions": [
+           *         "genericDockerUI"
+           *       ],
+           *       "defaultBucket": true,
+           *       "defaultBucketStage": "in",
+           *       "repository": {
+           *         "type": "ecr"
+           *       }
            *     }
            */
           'application/json': {
@@ -1144,6 +1175,13 @@ type paths = {
             type: 'extractor' | 'application' | 'writer' | 'processor' | 'code-pattern' | 'other' | 'transformation' | 'data-app';
             shortDescription?: string;
             longDescription?: string;
+            /** @description Null clears the list, and reads back as `[]`. */
+            uiOptions?: string[] | null;
+            /** @description Null clears the list, and reads back as `[]`. */
+            actions?: string[] | null;
+            defaultBucket?: boolean;
+            /** @enum {string} */
+            defaultBucketStage?: 'in' | 'out';
             repository?: {
               /** @enum {string} */
               type?: 'dockerhub' | 'quay' | 'builder' | 'ecr';
@@ -1152,6 +1190,8 @@ type paths = {
             } & {
               [key: string]: unknown;
             };
+          } & {
+            [key: string]: unknown;
           };
         };
       };
@@ -2283,13 +2323,25 @@ type paths = {
           };
           content: {
             'application/json': ({
-              id?: string;
+              /** @description The app id the change belongs to. */
+              id: string;
               /** Format: date-time */
-              createdOn?: string;
-              createdBy?: string;
-              changes?: {
+              createdOn: string;
+              /** @description Who made the change. Null for a version stored without an author. */
+              createdBy: string | null;
+              /** @description One entry per attribute that differs from the previous version. Empty for a write that changed nothing — a save with no edits still produces a version. */
+              changes: ({
+                /** @description The `App` property that changed. */
+                attribute: string;
+                /** @description The value in the previous version, of whatever type that property has. Null when the attribute was added. */
+                oldValue: unknown;
+                /** @description The value in this version. Null when the attribute was deleted. */
+                newValue: unknown;
+                /** @description A ready-to-render sentence — `Attribute <name> added/changed/deleted`, or `App <id> created` for the synthetic first-version entry. */
+                description: string;
+              } & {
                 [key: string]: unknown;
-              }[];
+              })[];
             } & {
               [key: string]: unknown;
             })[];
@@ -2832,4 +2884,4 @@ type RefreshTokensResult = OpenapiReturnType<paths['/auth/token']['get']>;
 type MfaSetupResult = OpenapiReturnType<paths['/auth/mfa']['post']>;
 //#endregion
 export { ResetPasswordConfirmInput as A, UserRequest as B, MfaConfirmInput as C, Profile as D, PaginationQuery as E, UpdateAppAsAdminInput as F, paths as G, VendorListItem as H, UpdateAppInput as I, UpdateVendorAsAdminInput as L, ServiceIndex as M, SignUpInput as N, RefreshTokensResult as O, Stack as P, UpdateVendorInput as R, LoginSuccess as S, MfaSetupResult as T, Version as U, Vendor as V, components as W, GetVendorUsersQuery as _, AppRepository as a, LoginInput as b, ConfirmAccountInput as c, CreateVendorAsAdminInput as d, CreateVendorInput as f, GetChangesQuery as g, GetAppsQuery as h, AppChange as i, ServiceAccount as j, RejectAppInput as k, CreateAppInput as l, DeveloperPortalError as m, AdminVendor as n, AppVendor as o, DeprecateAppInput as p, App as r, ApproveVendorInput as s, AdminPaginationQuery as t, CreateServiceAccountInput as u, IconUploadLink as v, MfaSetupInput as w, LoginResult as x, LoginChallenge as y, User as z };
-//# sourceMappingURL=types-q-1r_9d1.d.ts.map
+//# sourceMappingURL=types-DzV6LaZq.d.ts.map

package/dist/{types-6kuMW4JW.d.cts → types-c_bsDkV6.d.cts}

@@ -389,7 +389,7 @@ type components = {
   headers: never;
   pathItems: never;
 };
-type operations = {
+interface operations {
   _get_root_get: {
     parameters: {
       query?: never;
@@ -558,7 +558,7 @@ type operations = {
       };
     };
   };
-};
+}
 //#endregion
 //#region src/clients/omnisearch/types.d.ts
 type GetProjectsLineageQuery = OpenapiQueryType<paths['/v1/lineage/projects']['get']>;
@@ -599,4 +599,4 @@ type LineageTable = components['schemas']['TableNode'] & {
 };
 //#endregion
 export { LineageMetadata as a, LineageTable as c, ProjectsLineageResponse as d, TableLineageRelation as f, components as h, LineageConfiguration as i, ProjectLineageRelation as l, TablesLineageResponse as m, GetTablesLineageQuery as n, LineageProject as o, TablesLineage as p, LineageBucket as r, LineageSource as s, GetProjectsLineageQuery as t, ProjectsLineage as u };
-//# sourceMappingURL=types-6kuMW4JW.d.cts.map
+//# sourceMappingURL=types-c_bsDkV6.d.cts.map