@keboola/api-client 45.0.0 → 47.0.0

package/dist/{types-DVZpKGBJ.d.ts → types-C2j6Jsie.d.ts}

@@ -1,5 +1,5 @@
-import { S as MetaObject, i as CreateMetaObjectInput } from "./types-B-5ya_L5.js";
-import { n as createMetastoreClient } from "./index-DtuwWYDR.js";
+import { S as MetaObject, i as CreateMetaObjectInput } from "./types-ij6BpTzR.js";
+import { n as createMetastoreClient } from "./index-Dp-a2DdI.js";
 //#region src/sdks/tag/types.d.ts
 type MetastoreClient = ReturnType<typeof createMetastoreClient>;
 type TagData = {
@@ -29,4 +29,4 @@ type UpdateMetaObjectMetaDataInput = {
 };
 //#endregion
 export { TagWithBindings as a, TagData as i, MetastoreClient as n, UpdateMetaObjectMetaDataInput as o, TagBindingData as r, CreateMetaObjectMetaDataInput as t };
-//# sourceMappingURL=types-DVZpKGBJ.d.ts.map
+//# sourceMappingURL=types-C2j6Jsie.d.ts.map

package/dist/{types-BZDV8DZk.d.ts → types-C3IQu1gV.d.ts}

@@ -1,5 +1,5 @@
-import { c as OpenapiReturnType, o as OpenapiPathType, r as OpenapiBodyType, s as OpenapiQueryType } from "./index-BgR5zcjJ.js";
-import "./appLogs-BS6ViVGR.js";
+import { c as OpenapiQueryType, l as OpenapiReturnType, r as OpenapiBodyType, s as OpenapiPathType } from "./index-r6YSe8B-.js";
+import "./appLogs-xW0-JQXg.js";
 //#region src/clients/apps/__generated__/schema.d.ts
 /**
  * This file was auto-generated by openapi-typescript.
@@ -288,8 +288,9 @@ type paths = {
     /**
      * List deployments
      * @description Deployment history. Returns only live deployments by default — set
-     *     `archived=true` to list deleted ones instead. A deleted deployment can no
-     *     longer run or be promoted, but stays listed here.
+     *     `archived=true` to list deleted ones instead, including those archived automatically
+     *     by a newer deployment. A deleted deployment can no longer run or be promoted, but
+     *     stays listed here.
      */
     get: operations['listDeployments'];
     put?: never;
@@ -299,6 +300,10 @@ type paths = {
      *     or a specific past version via `configVersion`. `promote: true` by default —
      *     deploying also promotes to production unless explicitly disabled, in which case
      *     the deployment is staged for a later promotion and never runs in the meantime.
+     *
+     *     An app keeps at most 4 live deployments: the production one(s) and the newest others.
+     *     Creating a deployment archives every older one beyond that, exactly as if it were
+     *     deleted, so rollback can reach up to 3 deployments besides production.
      */
     post: operations['createDeployment'];
     delete?: never;
@@ -652,7 +657,7 @@ type components = {
        * @enum {string}
        */
       runState: 'neverRun' | 'pending' | 'starting' | 'running' | 'stopping' | 'stopped' | 'failed';
-      /** @description `true` once deleted — its running resources and credentials are gone and it can no longer be promoted — but it remains in history. */
+      /** @description `true` once deleted, either explicitly or automatically when newer deployments push it out of the 4 an app keeps — its running resources and credentials are gone and it can no longer be promoted — but it remains in history. */
       archived: boolean;
       /**
        * Format: date-time
@@ -1944,4 +1949,4 @@ type CreateDeploymentBody = OpenapiBodyType<paths['/apps/{appId}/deployments']['
 type CreateCredentialBody = OpenapiBodyType<paths['/apps/{appId}/git-repo/credentials']['post']>;
 //#endregion
 export { components as C, RunId as S, DeploymentRunState as _, AppRun as a, GetDeploymentsQuery as b, CreateCredentialBody as c, Credential as d, CredentialId as f, DeploymentId as g, DeploymentBuildState as h, AppPassword as i, CreateDeploymentBody as l, Deployment as m, AppGitRepo as n, AppState as o, CredentialList as p, AppId as r, CreateAppBody as s, App as t, CreatedCredential as u, GetAppRunsQuery as v, GetLogsTailQuery as x, GetAppsQuery as y };
-//# sourceMappingURL=types-BZDV8DZk.d.ts.map
+//# sourceMappingURL=types-C3IQu1gV.d.ts.map

package/dist/{types-WZBztugL.d.ts → types-C7t_6FLh.d.ts}

@@ -1,4 +1,4 @@
-import { c as OpenapiReturnType, o as OpenapiPathType, r as OpenapiBodyType, s as OpenapiQueryType } from "./index-BgR5zcjJ.js";
+import { c as OpenapiQueryType, l as OpenapiReturnType, r as OpenapiBodyType, s as OpenapiPathType } from "./index-r6YSe8B-.js";
 //#region src/clients/editor/__generated__/schema.d.ts
 /**
  * This file was auto-generated by openapi-typescript.
@@ -1408,4 +1408,4 @@ type PostSqlSessionUnloadPath = OpenapiPathType<paths['/sql/sessions/{id}/unload
 type PostSqlSessionUnloadBody = OpenapiBodyType<paths['/sql/sessions/{id}/unload']['post']>;
 //#endregion
 export { components as C, SqlSession as S, SessionSchema as _, GetSqlSessionTableDdlPath as a, SessionSchemaDatabase as b, PostSqlRunQueryBody as c, PostSqlSessionLoadPath as d, PostSqlSessionUnloadBody as f, Session as g, PostSqlTablePreviewPath as h, GetSqlSessionSchemaQuery as i, PostSqlRunQueryPath as l, PostSqlTablePreviewBody as m, GetSqlSessionPath as n, GetSqlSessionTableDdlQuery as o, PostSqlSessionUnloadPath as p, GetSqlSessionSchemaPath as r, GetSqlSessionsQuery as s, CreateSqlSessionBody as t, PostSqlSessionLoadBody as u, SessionSchemaBucket as v, SessionSchemaTable as x, SessionSchemaColumn as y };
-//# sourceMappingURL=types-WZBztugL.d.ts.map
+//# sourceMappingURL=types-C7t_6FLh.d.ts.map

package/dist/{types-Fs4a3mVs.d.ts → types-CBrNIgEy.d.ts}

@@ -1,5 +1,5 @@
-import { c as OpenapiReturnType, o as OpenapiPathType, r as OpenapiBodyType, s as OpenapiQueryType } from "./index-BgR5zcjJ.js";
-import "./appLogs-BS6ViVGR.js";
+import { c as OpenapiQueryType, l as OpenapiReturnType, r as OpenapiBodyType, s as OpenapiPathType } from "./index-r6YSe8B-.js";
+import "./appLogs-xW0-JQXg.js";
 //#region src/clients/dataScience/__generated__/schema.d.ts
 /**
  * This file was auto-generated by openapi-typescript.
@@ -260,6 +260,21 @@ type paths = {
      *     externally configured repositories only the URL matching the configured
      *     protocol is returned and the other field is `null`; any embedded
      *     credentials are stripped.
+     *
+     *     `parameters.dataApp.git` authenticates in one of three ways: `username` +
+     *     `#password`, `#sshKey`, or `authType: organization`. The last uses the
+     *     Keboola organization's GitHub connection and carries no credential in the
+     *     configuration at all; it is mutually exclusive with the other two, requires
+     *     an `https://{github-host}/{owner}/{repo}` URL on a host the stack is
+     *     configured to accept (`github.com`, plus any GitHub Enterprise host), and
+     *     needs the owner's GitHub organization to have been connected by a member of
+     *     this Keboola organization.
+     *
+     *     `authType: organization` is **not supported for dev-mode apps** and is
+     *     rejected when the configuration is deployed. Dev mode's file watcher
+     *     authenticates once at container start and never re-authenticates, so the
+     *     short-lived token it would be given stops working after about an hour. Use a
+     *     personal access token or an SSH key for dev-mode apps.
      */
     get: operations['getAppGitRepo'];
     put?: never;
@@ -496,10 +511,11 @@ type components = {
   schemas: {
     /**
      * @description Git repository request. Provide SSH key or username/password credentials for private repositories,
-     *     or omit auth fields entirely to access a public HTTP(S) repository.
+     *     set `authType: organization` to use the Keboola organization's GitHub connection without supplying
+     *     any credential, or omit all auth fields to access a public HTTP(S) repository.
      *     Sensitive fields (password, sshKey) are write-only and will not be returned in responses.
      */
-    GitRequest: components['schemas']['GitRequestWithSshKey'] | components['schemas']['GitRequestWithUsernamePassword'] | components['schemas']['GitRequestPublic'];
+    GitRequest: components['schemas']['GitRequestWithSshKey'] | components['schemas']['GitRequestWithUsernamePassword'] | components['schemas']['GitRequestWithOrganizationAuth'] | components['schemas']['GitRequestPublic'];
     /** @description Git request using SSH key authentication. */
     GitRequestWithSshKey: {
       /** @description Git repository URL (HTTP(S) or SSH format) */
@@ -526,6 +542,29 @@ type components = {
        */
       password: string;
     };
+    /** @description Git request authenticated by the Keboola organization's GitHub connection. */
+    GitRequestWithOrganizationAuth: {
+      /**
+       * @description Repository URL, as `https://{github-host}/{owner}/{repo}`. Must be HTTP(S): the credential
+       *     issued is a token used as an HTTP password, so it cannot be carried over SSH. The host must
+       *     be one the stack accepts for organization authentication - `github.com` by default, plus any
+       *     GitHub Enterprise host configured for it - and the owner's GitHub organization must already
+       *     be connected by a member of this Keboola organization.
+       */
+      repository: string;
+      /** @description Optional branch name (default is main for entrypoints) */
+      branch?: string | null;
+      /**
+       * @description Clone using the Keboola organization's GitHub App connection. No credential is supplied
+       *     by the caller - a short-lived, single-repository, read-only token is issued for the
+       *     request. Issued tokens may be reused from an in-process cache for up to 5 minutes, so
+       *     a revoked or uninstalled GitHub App can take that long to take effect here.
+       *     Available only with the Storage token of a project administrator that is not read-only
+       *     (403 otherwise). Mutually exclusive with username/password and with sshKey.
+       * @enum {string}
+       */
+      authType: 'organization';
+    };
     /** @description Git request for a public repository without authentication. */
     GitRequestPublic: {
       /** @description Public Git repository URL. Must be HTTP(S); SSH URLs require an SSH key and are not supported here. */
@@ -969,6 +1008,16 @@ interface operations {
         };
         content?: never;
       };
+      /**
+       * @description `authType: organization` was requested with a Storage token that does not belong to a
+       *     project administrator, or belongs to a read-only one.
+       */
+      403: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
       /** @description Validation Error */
       422: {
         headers: {
@@ -1019,6 +1068,16 @@ interface operations {
         };
         content?: never;
       };
+      /**
+       * @description `authType: organization` was requested with a Storage token that does not belong to a
+       *     project administrator, or belongs to a read-only one.
+       */
+      403: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
       /** @description Validation Error */
       422: {
         headers: {
@@ -2341,4 +2400,4 @@ type PatchDataAppBodyStopped = {
 type PatchDataAppBody = PatchDataAppBodyRunning | PatchDataAppBodyStopped;
 //#endregion
 export { RuntimeImageKey as C, Runtime as S, GetSandboxPath as _, DataAppRun as a, RawAppRun as b, GetAppsQuery as c, GetDataAppLogsTailQuery as d, GetDataAppPasswordPath as f, GetDataAppRunsQuery as g, GetDataAppRunsPath as h, DataAppPreviewLink as i, GetDataAppLogsDownloadPath as l, GetDataAppRunPath as m, CreateDataAppPreviewLinkPath as n, DeleteDataAppPath as o, GetDataAppPath as p, DataApp as r, DeleteSandboxPath as s, CreateDataAppBody as t, GetDataAppLogsTailPath as u, PatchDataAppBody as v, Sandbox as w, ResetDataAppPasswordPath as x, PatchDataAppPath as y };
-//# sourceMappingURL=types-Fs4a3mVs.d.ts.map
+//# sourceMappingURL=types-CBrNIgEy.d.ts.map

package/dist/{types-CZJlLCbA.d.ts → types-CEw2IzWk.d.ts}

@@ -1,4 +1,4 @@
-import { c as OpenapiReturnType, r as OpenapiBodyType } from "./index-BgR5zcjJ.js";
+import { l as OpenapiReturnType, r as OpenapiBodyType } from "./index-r6YSe8B-.js";
 //#region src/clients/telemetry/__generated__/schema.d.ts
 /**
  * This file was auto-generated by openapi-typescript.
@@ -286,4 +286,4 @@ type GetProvisioningTokenBody = NonNullable<OpenapiBodyType<paths['/token']['pos
 type ProvisioningToken = OpenapiReturnType<paths['/token']['post']>;
 //#endregion
 export { ProvisioningToken as n, GetProvisioningTokenBody as t };
-//# sourceMappingURL=types-CZJlLCbA.d.ts.map
+//# sourceMappingURL=types-CEw2IzWk.d.ts.map

package/dist/{types-DdsYv2WG.d.cts → types-CMKIdreQ.d.cts}

@@ -1,5 +1,5 @@
-import { i as CreateMetaObjectInput } from "./types-tgU8XvPs.cjs";
-import { n as createMetastoreClient } from "./index-BKOFRmTB.cjs";
+import { i as CreateMetaObjectInput } from "./types--qQPfxWt.cjs";
+import { n as createMetastoreClient } from "./index-x_kS_5x_.cjs";
 //#region src/sdks/semanticLayer/vocabulary.d.ts
 /**
  * The closed value sets the metastore accepts on a semantic object.
@@ -199,4 +199,4 @@ type SemanticUnreadableObjectRef = {
 };
 //#endregion
 export { CONSTRAINT_TYPES as A, SemanticRuleExpression as C, UpdateSemanticObjectMeta as D, SemanticValidationQuery as E, SQL_DIALECTS as F, RELATIONSHIP_JOIN_TYPES as M, RULE_OPERATORS as N, CONSTRAINT_SCOPES as O, SEMANTIC_OBJECT_SCOPES as P, SemanticRelationshipJoinType as S, SemanticUnreadableObjectRef as T, SemanticObject as _, SemanticChildObjectType as a, SemanticObjectType as b, SemanticConstraintSeverity as c, SemanticFieldData as d, SemanticFieldRole as f, SemanticModelData as g, SemanticModelChildRef as h, SemanticChildObjectDataMap as i, FIELD_ROLES as j, CONSTRAINT_SEVERITIES as k, SemanticConstraintType as l, SemanticMetricData as m, MetastoreClient as n, SemanticConstraintData as o, SemanticGlossaryData as p, SemanticAiMetadata as r, SemanticConstraintScope as s, CreateSemanticObjectMeta as t, SemanticDatasetData as u, SemanticObjectMeta as v, SemanticRuleOperator as w, SemanticRelationshipData as x, SemanticObjectScope as y };
-//# sourceMappingURL=types-DdsYv2WG.d.cts.map
+//# sourceMappingURL=types-CMKIdreQ.d.cts.map

package/dist/{types-AYX7VtS6.d.ts → types-COQOzyac.d.ts}

@@ -1,4 +1,4 @@
-import { c as OpenapiReturnType, o as OpenapiPathType, r as OpenapiBodyType, s as OpenapiQueryType } from "./index-BgR5zcjJ.js";
+import { c as OpenapiQueryType, l as OpenapiReturnType, r as OpenapiBodyType, s as OpenapiPathType } from "./index-r6YSe8B-.js";
 //#region src/clients/kaiAgent/__generated__/schema.d.ts
 /**
  * This file was auto-generated by openapi-typescript.
@@ -255,12 +255,58 @@ type paths = {
                   path?: string;
                   sqlEditorActive?: boolean;
                 };
+                deployPreapproval?: {
+                  configurationId: string;
+                };
                 tableContext?: {
                   tableName: string;
                   tableId: string;
                   bucketId: string;
                   fileName: string;
                 }[];
+                previewSelections?: {
+                  source: string | null;
+                  sourceTrail: string[];
+                  selector: string;
+                  tag: string;
+                  text: string;
+                  html: string;
+                  rect: {
+                    x: number;
+                    y: number;
+                    width: number;
+                    height: number;
+                  };
+                  page: string;
+                  viewport: {
+                    width: number;
+                    height: number;
+                  };
+                  area?: {
+                    inside: {
+                      source: string | null;
+                      tag: string;
+                      text: string;
+                    }[];
+                    within: {
+                      source: string | null;
+                      tag: string;
+                      text: string;
+                    } | null;
+                    above: {
+                      source: string | null;
+                      tag: string;
+                      text: string;
+                    } | null;
+                    below: {
+                      source: string | null;
+                      tag: string;
+                      text: string;
+                    } | null;
+                  };
+                }[];
+                /** @enum {string} */
+                previewIntent?: 'data-source';
               };
             };
             selectedChatModel?: string;
@@ -3243,6 +3289,170 @@ type paths = {
     };
     trace?: never;
   };
+  '/api/settings/user/memories': {
+    parameters: {
+      query?: never;
+      header?: never;
+      path?: never;
+      cookie?: never;
+    };
+    /**
+     * List personal memories
+     * @description The caller's own personal memories in this project, oldest first
+     */
+    get: {
+      parameters: {
+        query?: never;
+        header?: never;
+        path?: never;
+        cookie?: never;
+      };
+      requestBody?: never;
+      responses: {
+        /** @description Personal memories */
+        200: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            'application/json': {
+              memories: {
+                id: string;
+                content: string;
+                createdAt: string;
+              }[];
+            };
+          };
+        };
+        /** @description Unauthorized */
+        401: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            'application/json': {
+              error: {
+                /** @enum {string} */
+                type: 'bad_request' | 'unauthorized' | 'forbidden' | 'not_found' | 'conflict' | 'payload_too_large' | 'rate_limit' | 'offline' | 'bad_response' | 'internal';
+                /** @enum {string} */
+                surface: 'chat' | 'auth' | 'api' | 'stream' | 'database' | 'history' | 'vote' | 'artifact';
+                message: string;
+                /** @enum {string} */
+                subtype?: 'burst' | 'monthly_messages' | 'monthly_credits_user' | 'monthly_credits_project' | 'resolved' | 'timed_out' | 'chat_cancelled' | 'swept' | 'shutdown';
+                exceptionId?: string;
+              };
+            };
+          };
+        };
+      };
+    };
+    put?: never;
+    post?: never;
+    delete?: never;
+    options?: never;
+    head?: never;
+    patch?: never;
+    trace?: never;
+  };
+  '/api/settings/user/memories/{id}': {
+    parameters: {
+      query?: never;
+      header?: never;
+      path?: never;
+      cookie?: never;
+    };
+    get?: never;
+    put?: never;
+    post?: never;
+    /**
+     * Delete a personal memory
+     * @description Delete one of the caller's own personal memories
+     */
+    delete: {
+      parameters: {
+        query?: never;
+        header?: never;
+        path: {
+          id: string;
+        };
+        cookie?: never;
+      };
+      requestBody?: never;
+      responses: {
+        /** @description Memory deleted */
+        204: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content?: never;
+        };
+        /** @description Bad request */
+        400: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            'application/json': {
+              error: {
+                /** @enum {string} */
+                type: 'bad_request' | 'unauthorized' | 'forbidden' | 'not_found' | 'conflict' | 'payload_too_large' | 'rate_limit' | 'offline' | 'bad_response' | 'internal';
+                /** @enum {string} */
+                surface: 'chat' | 'auth' | 'api' | 'stream' | 'database' | 'history' | 'vote' | 'artifact';
+                message: string;
+                /** @enum {string} */
+                subtype?: 'burst' | 'monthly_messages' | 'monthly_credits_user' | 'monthly_credits_project' | 'resolved' | 'timed_out' | 'chat_cancelled' | 'swept' | 'shutdown';
+                exceptionId?: string;
+              };
+            };
+          };
+        };
+        /** @description Unauthorized */
+        401: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            'application/json': {
+              error: {
+                /** @enum {string} */
+                type: 'bad_request' | 'unauthorized' | 'forbidden' | 'not_found' | 'conflict' | 'payload_too_large' | 'rate_limit' | 'offline' | 'bad_response' | 'internal';
+                /** @enum {string} */
+                surface: 'chat' | 'auth' | 'api' | 'stream' | 'database' | 'history' | 'vote' | 'artifact';
+                message: string;
+                /** @enum {string} */
+                subtype?: 'burst' | 'monthly_messages' | 'monthly_credits_user' | 'monthly_credits_project' | 'resolved' | 'timed_out' | 'chat_cancelled' | 'swept' | 'shutdown';
+                exceptionId?: string;
+              };
+            };
+          };
+        };
+        /** @description No memory with this id belongs to the caller in this project */
+        404: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            'application/json': {
+              error: {
+                /** @enum {string} */
+                type: 'bad_request' | 'unauthorized' | 'forbidden' | 'not_found' | 'conflict' | 'payload_too_large' | 'rate_limit' | 'offline' | 'bad_response' | 'internal';
+                /** @enum {string} */
+                surface: 'chat' | 'auth' | 'api' | 'stream' | 'database' | 'history' | 'vote' | 'artifact';
+                message: string;
+                /** @enum {string} */
+                subtype?: 'burst' | 'monthly_messages' | 'monthly_credits_user' | 'monthly_credits_project' | 'resolved' | 'timed_out' | 'chat_cancelled' | 'swept' | 'shutdown';
+                exceptionId?: string;
+              };
+            };
+          };
+        };
+      };
+    };
+    options?: never;
+    head?: never;
+    patch?: never;
+    trace?: never;
+  };
   '/api/settings/spend-caps': {
     parameters: {
       query?: never;
@@ -4122,4 +4332,4 @@ type ArtifactResponse = OpenapiReturnType<paths['/api/artifacts/{id}']['get']>;
 type ArtifactListResponse = OpenapiReturnType<paths['/api/artifacts']['get']>;
 //#endregion
 export { ChatWithMessages as a, GetChatPath as c, PrepareChatRequest as d, UsageResponse as f, ChatRequest as i, GetHistoryQuery as l, ArtifactListResponse as n, GetArtifactPath as o, VoteRequest as p, ArtifactResponse as r, GetArtifactsQuery as s, ApprovalBody as t, GetVotesQuery as u };
-//# sourceMappingURL=types-AYX7VtS6.d.ts.map
+//# sourceMappingURL=types-COQOzyac.d.ts.map

package/dist/{types-BiEh5c_t.d.cts → types-CZCPdPqv.d.cts}

@@ -1,4 +1,4 @@
-import { c as OpenapiReturnType, n as ArrayElement, r as OpenapiBodyType, s as OpenapiQueryType } from "./index-BVhHt5lx.cjs";
+import { c as OpenapiQueryType, l as OpenapiReturnType, n as ArrayElement, r as OpenapiBodyType } from "./index-XaPb6unB.cjs";
 //#region src/clients/developerPortal/__generated__/schema.d.ts
 /**
  * This file was auto-generated by openapi-typescript.
@@ -2086,6 +2086,8 @@ type paths = {
           offset?: number;
           limit?: number;
           filter?: string;
+          /** @description Rollout wave of the calling stack. Overlays the image-coupled fields of the version pinned in `waveTags` for that wave and adds `rolloutWave`. Any other value fails with 422. */
+          wave?: number;
         };
         header?: never;
         path?: never;
@@ -2125,7 +2127,10 @@ type paths = {
      */
     get: {
       parameters: {
-        query?: never;
+        query?: {
+          /** @description Rollout wave of the calling stack. Overlays the image-coupled fields of the version pinned in `waveTags` for that wave and adds `rolloutWave`. Any other value fails with 422. */
+          wave?: number;
+        };
         header?: never;
         path: {
           id: string;
@@ -2152,12 +2157,15 @@ type paths = {
     head?: never;
     /**
      * Update app
-     * @description Update an app across vendors. Requires an admin token.
+     * @description Update an app across vendors. Requires an admin token. Every update creates a new version. With `If-Match` the update is written only when the app's latest version equals the header value; otherwise it fails with 412 and writes nothing. `waveTags` replaces the whole pin set; each pin must name an existing version of this app whose `repository.tag` equals the pinned `tag` (case-sensitive) and whose `repository.uri` equals the one the app has after this update, otherwise it fails with 400. `If-Match` is not an allowed CORS header, so it works for server-to-server callers only.
      */
     patch: {
       parameters: {
         query?: never;
-        header?: never;
+        header?: {
+          /** @description Expected latest version of the app, as an integer, optionally in double quotes. */
+          'If-Match'?: string;
+        };
         path: {
           id: string;
         };
@@ -2182,6 +2190,7 @@ type paths = {
             repository?: {
               [key: string]: unknown;
             };
+            waveTags?: components['schemas']['AppWaveTags'];
           } & {
             [key: string]: unknown;
           };
@@ -2197,8 +2206,88 @@ type paths = {
             'application/json': components['schemas']['App'];
           };
         };
+        /** @description A `waveTags` pin does not match an existing version of the app. */
+        400: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            'application/json': components['schemas']['Error'];
+          };
+        };
+        /** @description The app's latest version differs from `If-Match`; nothing was written. */
+        412: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            'application/json': components['schemas']['Error'];
+          };
+        };
+        /** @description Invalid body (including `waveTags` shape) or malformed `If-Match`. */
+        422: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            'application/json': components['schemas']['Error'];
+          };
+        };
+      };
+    };
+    trace?: never;
+  };
+  '/admin/apps/{id}/versions': {
+    parameters: {
+      query?: never;
+      header?: never;
+      path?: never;
+      cookie?: never;
+    };
+    /**
+     * List app versions
+     * @description List every version of an app, ordered by `version` ascending, including `waveTags` (when non-empty). Requires an admin token.
+     */
+    get: {
+      parameters: {
+        query?: {
+          offset?: number;
+          limit?: number;
+        };
+        header?: never;
+        path: {
+          id: string;
+        };
+        cookie?: never;
+      };
+      requestBody?: never;
+      responses: {
+        /** @description List of versions */
+        200: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            'application/json': components['schemas']['App'][];
+          };
+        };
+        /** @description App does not exist */
+        404: {
+          headers: {
+            [name: string]: unknown;
+          };
+          content: {
+            'application/json': components['schemas']['Error'];
+          };
+        };
       };
     };
+    put?: never;
+    post?: never;
+    delete?: never;
+    options?: never;
+    head?: never;
+    patch?: never;
     trace?: never;
   };
   '/admin/apps/{id}/publish': {
@@ -2641,6 +2730,41 @@ type components = {
       createdOn?: string | null;
       rejectionReason?: string | null;
     } | null;
+    /**
+     * @description Admin-only. The exact app version pinned per rollout wave (keys `1`-`9`). A stack on wave N gets the pin of the largest key not above N. `null` or `{}` means no pins. A write replaces the whole object.
+     * @example {
+     *       "2": {
+     *         "tag": "1.5.4",
+     *         "version": 123
+     *       },
+     *       "3": {
+     *         "tag": "1.5.0",
+     *         "version": 97
+     *       }
+     *     }
+     */
+    AppWaveTags: {
+      1?: components['schemas']['AppWavePin'];
+      2?: components['schemas']['AppWavePin'];
+      3?: components['schemas']['AppWavePin'];
+      4?: components['schemas']['AppWavePin'];
+      5?: components['schemas']['AppWavePin'];
+      6?: components['schemas']['AppWavePin'];
+      7?: components['schemas']['AppWavePin'];
+      8?: components['schemas']['AppWavePin'];
+      9?: components['schemas']['AppWavePin'];
+    } | null;
+    AppWavePin: {
+      /** @description `repository.tag` of the pinned version. */
+      tag: string;
+      version: number;
+    };
+    /** @description Present only when the `wave` query parameter is sent to an admin endpoint; `null` when no pin applies to that wave. */
+    AppRolloutWave: {
+      wave: number;
+      pinnedTag: string;
+      pinnedVersion: number;
+    } | null;
     App: {
       id: string;
       vendor: components['schemas']['AppVendor'];
@@ -2734,6 +2858,9 @@ type components = {
       stackParameters?: {
         [key: string]: unknown;
       };
+      /** @description Returned by admin endpoints only, and only when there are pins. */
+      waveTags?: components['schemas']['AppWaveTags'];
+      rolloutWave?: components['schemas']['AppRolloutWave'];
       /** @description Omitted from public catalog responses. Never null — a null column is normalised to `[]`. */
       permissions?: {
         stack: string;
@@ -2884,4 +3011,4 @@ type RefreshTokensResult = OpenapiReturnType<paths['/auth/token']['get']>;
 type MfaSetupResult = OpenapiReturnType<paths['/auth/mfa']['post']>;
 //#endregion
 export { ResetPasswordConfirmInput as A, UserRequest as B, MfaConfirmInput as C, Profile as D, PaginationQuery as E, UpdateAppAsAdminInput as F, paths as G, VendorListItem as H, UpdateAppInput as I, UpdateVendorAsAdminInput as L, ServiceIndex as M, SignUpInput as N, RefreshTokensResult as O, Stack as P, UpdateVendorInput as R, LoginSuccess as S, MfaSetupResult as T, Version as U, Vendor as V, components as W, GetVendorUsersQuery as _, AppRepository as a, LoginInput as b, ConfirmAccountInput as c, CreateVendorAsAdminInput as d, CreateVendorInput as f, GetChangesQuery as g, GetAppsQuery as h, AppChange as i, ServiceAccount as j, RejectAppInput as k, CreateAppInput as l, DeveloperPortalError as m, AdminVendor as n, AppVendor as o, DeprecateAppInput as p, App as r, ApproveVendorInput as s, AdminPaginationQuery as t, CreateServiceAccountInput as u, IconUploadLink as v, MfaSetupInput as w, LoginResult as x, LoginChallenge as y, User as z };
-//# sourceMappingURL=types-BiEh5c_t.d.cts.map
+//# sourceMappingURL=types-CZCPdPqv.d.cts.map

package/dist/{types-B2w2TtSA.d.ts → types-Cw9UISvM.d.ts}

@@ -1,4 +1,4 @@
-import { E as BaseUrl, O as MiddlewareFn } from "./index-BgR5zcjJ.js";
+import { ii as BaseUrl, oi as MiddlewareFn } from "./index-r6YSe8B-.js";
 //#region src/clients/auth.d.ts
 type AuthStrategy = {
   type: 'sapi-token';
@@ -20,4 +20,4 @@ type ClientInitOptions = {
 };
 //#endregion
 export { ClientInitOptions as n, AuthStrategy as r, BaseClientOptions as t };
-//# sourceMappingURL=types-B2w2TtSA.d.ts.map
+//# sourceMappingURL=types-Cw9UISvM.d.ts.map