@keboola/api-client 46.0.0 → 48.0.0

package/dist/{types-sI3K5t3w.d.cts → types-Dn1G-qv4.d.cts}

@@ -1,4 +1,4 @@
-import { c as OpenapiReturnType, n as ArrayElement, o as OpenapiPathType, r as OpenapiBodyType, s as OpenapiQueryType } from "./index-BzhLY7el.cjs";
+import { c as OpenapiQueryType, l as OpenapiReturnType, n as ArrayElement, r as OpenapiBodyType, s as OpenapiPathType } from "./index-ChDl6ig5.cjs";
 //#region src/clients/management/__generated__/schema.d.ts
 /**
  * This file was auto-generated by openapi-typescript.
@@ -437,8 +437,11 @@ type paths = {
      *     * *filter[organizationId]* - organization ID
      *     * *filter[name]* - substring of the project name
      *     * *filter[status]* - `deleted` (awaiting purge, default), `purged` or `all`
-     *     * *filter[overdue]* - `true` keeps only projects awaiting purge whose scheduled purge time has passed.
-     *       Combined with `filter[status]=purged` the filters contradict each other and the page is empty (`total` 0);
+     *     * *filter[overdue]* - `true` keeps only projects awaiting purge whose scheduled purge time has passed;
+     *       `false` keeps only projects that are not overdue (still within the purge period, without a `deletedTime`,
+     *       or purged); omitted, overdue is not filtered. `filter[status]=deleted&filter[overdue]=false` and
+     *       `filter[overdue]=true` split the projects awaiting purge without overlap.
+     *       `filter[status]=purged&filter[overdue]=true` contradict each other and the page is empty (`total` 0);
      *       the request is not rejected.
      *
      *     Bare `organizationId` / `name` / `status` / `overdue` parameters are rejected with a validation error.
@@ -1485,6 +1488,26 @@ type paths = {
     patch: operations['patch_/manage/organizations/{id}/force-mfa::OrganizationSetMfaRequiredAction'];
     trace?: never;
   };
+  '/manage/programmatic-projects/claim': {
+    parameters: {
+      query?: never;
+      header?: never;
+      path?: never;
+      cookie?: never;
+    };
+    /**
+     * Read the parked agent-project claim
+     * @description Reports whether the browser carries a claim cookie, with the claim's id and the name of the project it hands over. Never returns the claim secret. Answers `present: true` only to a same-origin request that carries the cookie: `SameSite=Lax` keeps it off cross-site fetches and the wildcard CORS rule allows no credentials.
+     */
+    get: operations['get_/manage/programmatic-projects/claim::ProgrammaticProjectClaimDetailAction'];
+    put?: never;
+    post?: never;
+    delete?: never;
+    options?: never;
+    head?: never;
+    patch?: never;
+    trace?: never;
+  };
   '/manage/programmatic-projects/confirm': {
     parameters: {
       query?: never;
@@ -2247,7 +2270,7 @@ type paths = {
      * Create a new Snowflake backend with certificate authentication
      * @description Create a new Snowflake storage backend with RSA certificate authentication. The backend is created as disabled and returns an SQL template for setting up Snowflake roles and users, along with the public keys. After running the generated query, you can activate the backend using the [Activate Snowflake Storage Backend](#reference/super-storage-backends-management/activate-snowflake-storage-backend/activate-snowflake-backend) endpoint.
      *
-     *     Warehouse name cannot contain warehouse size suffixes (_X-SMALL, _SMALL, etc.) when dynamic backends are enabled. Size suffixes will be automatically added to the warehouse name.
+     *     The warehouse is stored as supplied. With dynamic backends it must be the bare base name (no size suffix): the template creates it together with the sized warehouses `<name>_SMALL`, `<name>_MEDIUM` and `<name>_LARGE`, which projects and workspaces use.
      *
      *     Registration will provide personalized queries based on this template:
      *
@@ -2257,6 +2280,8 @@ type paths = {
      *     GRANT CREATE DATABASE ON ACCOUNT TO ROLE "KBC_STORAGE";
      *     GRANT CREATE ROLE ON ACCOUNT TO ROLE "KBC_STORAGE" WITH GRANT OPTION;
      *     GRANT CREATE USER ON ACCOUNT TO ROLE "KBC_STORAGE" WITH GRANT OPTION;
+     *     CREATE WAREHOUSE "WH" WITH WAREHOUSE_SIZE = 'XSMALL' WAREHOUSE_TYPE = 'STANDARD' AUTO_SUSPEND = 60 AUTO_RESUME = TRUE GENERATION = '1';
+     *     GRANT USAGE ON WAREHOUSE "WH" TO ROLE "KBC_STORAGE" WITH GRANT OPTION;
      *     CREATE WAREHOUSE "WH_SMALL" WITH WAREHOUSE_SIZE = 'SMALL' WAREHOUSE_TYPE = 'STANDARD' AUTO_SUSPEND = 60 AUTO_RESUME = TRUE MIN_CLUSTER_COUNT = 1 MAX_CLUSTER_COUNT = 4 RESOURCE_CONSTRAINT = 'STANDARD_GEN_1';
      *     GRANT USAGE ON WAREHOUSE "WH_SMALL" TO ROLE "KBC_STORAGE" WITH GRANT OPTION;
      *     CREATE USER "KBC_STORAGE" DEFAULT_ROLE = "KBC_STORAGE" RSA_PUBLIC_KEY = 'PUBLICKEY';
@@ -2426,6 +2451,30 @@ type paths = {
     patch?: never;
     trace?: never;
   };
+  '/manage/storage-backend/{id}/policy-tags/enablement-guide': {
+    parameters: {
+      query?: never;
+      header?: never;
+      path?: never;
+      cookie?: never;
+    };
+    /**
+     * BigQuery policy-tag enablement guide
+     * @description Returns what the customer sets up in Google Cloud before Keboola can enable BigQuery policy tags on this backend: the custom roles, the root service account's bindings on the taxonomy, its probe tag, and the enable command with the values filled in. `format=markdown` returns a document, `format=terraform` a module that creates the same resources.
+     *
+     *     A backend uses one taxonomy. Pass the existing one as the single item of `resourceScopes`, or `createTaxonomy=true` for a new one in `roleProject`; a second taxonomy is refused. The taxonomy must be in the backend region, and in `roleProject`: the custom roles are project-level and can be granted only on resources of their own project.
+     *
+     *     Available to a super admin only, the same as creating a BigQuery backend.
+     */
+    get: operations['get_/manage/storage-backend/{id}/policy-tags/enablement-guide::StorageBackendPolicyTagEnablementGuideAction'];
+    put?: never;
+    post?: never;
+    delete?: never;
+    options?: never;
+    head?: never;
+    patch?: never;
+    trace?: never;
+  };
   '/manage/storage-backend/{id}/projects': {
     parameters: {
       query?: never;
@@ -2851,7 +2900,7 @@ type paths = {
     };
     /**
      * Pay-as-you-go billing configuration
-     * @description Stack-wide Stripe tax rates and credit price used by the pay-as-you-go checkout. Authenticated by an admin browser session cookie, a Manage API token (admin or session type), or a programmatic bearer token.
+     * @description Stack-wide Stripe tax rates, credit price and publishable key used by the pay-as-you-go checkout. Authenticated by an admin browser session cookie, a Manage API token (admin or session type), or a programmatic bearer token.
      */
     get: operations['get_/pay-as-you-go/billing/configuration::BillingConfigurationDetailAction'];
     put?: never;
@@ -3725,7 +3774,7 @@ type components = {
        */
       host: string;
       /**
-       * @description Snowflake warehouse name. Warehouse name cannot contain warehouse size suffixes (_X-SMALL, _SMALL, etc.) when dynamic backends are enabled. Size suffixes will be automatically added to the warehouse name.
+       * @description Snowflake warehouse name, stored as supplied. With dynamic backends it must be the bare base name (no size suffix): the sized warehouses <name>_SMALL, <name>_MEDIUM and <name>_LARGE are derived from it.
        * @example KEBOOLA
        */
       warehouse: string;
@@ -3871,6 +3920,42 @@ type components = {
        */
       bqExternalSharingRoleName?: string | null;
     };
+    EnablementGuideRequest: {
+      /**
+       * @description Guide format; the default is `markdown`.
+       * @enum {string|null}
+       */
+      format?: 'markdown' | 'terraform' | null;
+      /**
+       * @description GCP project ID that holds the custom roles (and the new taxonomy when `createTaxonomy` is true).
+       * @example acme-data-governance
+       */
+      roleProject: string;
+      /**
+       * @description Role ID of the custom setter role; the default is `kbcPolicyTagSetter`.
+       * @example kbcPolicyTagSetter
+       */
+      roleName?: string | null;
+      /**
+       * @description Guide the creation of a new taxonomy in `roleProject` instead of using existing ones.
+       * @example false
+       */
+      createTaxonomy?: boolean | null;
+      /**
+       * @description The existing taxonomy, `projects/{project}/locations/{location}/taxonomies/{id}`. A list, but a backend uses one taxonomy, so it takes a single item.
+       * @example [
+       *       "projects/acme-data-governance/locations/europe-west3/taxonomies/1234567890"
+       *     ]
+       */
+      resourceScopes?: string[] | null;
+      /**
+       * @description The probe policy tag in the taxonomy of `resourceScopes`, as a single-item list. If omitted, Markdown provides manual creation instructions and a placeholder; Terraform creates the tag when applied.
+       * @example [
+       *       "projects/acme-data-governance/locations/europe-west3/taxonomies/1234567890/policyTags/987654321"
+       *     ]
+       */
+      probeTags?: string[] | null;
+    };
     StorageBackendProjectListRequest: {
       /** @description Maximum number of projects to return. Default value: 100. */
       limit?: number | null;
@@ -4866,15 +4951,13 @@ type components = {
        */
       id: string;
       /**
-       * Format: date-time
-       * @description Token creation timestamp.
-       * @example 2017-11-13T16:48:28+0100
+       * @description Token creation timestamp, ISO 8601 with a `+hhmm` offset.
+       * @example 2017-02-13T12:01:05+0100
        */
       created: string | null;
       /**
-       * Format: date-time
-       * @description Token last refresh timestamp.
-       * @example 2017-11-13T16:48:28+0100
+       * @description Token last refresh timestamp, ISO 8601 with a `+hhmm` offset.
+       * @example 2017-02-13T12:01:05+0100
        */
       refreshed: string | null;
       /**
@@ -4905,10 +4988,7 @@ type components = {
       canReadAllProjectEvents: boolean;
       /** @description Token permission to manage development branches. */
       canManageDevBranches: boolean;
-      /**
-       * Format: date-time
-       * @description Expiration timestamp of the token; null when the token never expires.
-       */
+      /** @description Expiration timestamp of the token, ISO 8601 with a `+hhmm` offset; null when the token never expires. */
       expires: string | null;
       /** @description Whether the token is expired. */
       isExpired: boolean;
@@ -4964,11 +5044,11 @@ type components = {
         /** @example us-east-1 */
         region: string;
         /**
-         * Format: date-time
-         * @example 2022-08-18T08:47:07+0200
+         * @description ISO 8601 with a `+hhmm` offset.
+         * @example 2017-02-13T12:01:05+0100
          */
         created: string | null;
-        /** Format: date-time */
+        /** @description ISO 8601 with a `+hhmm` offset. */
         expires: string | null;
         features: string[];
         /** @example 112128 */
@@ -5028,7 +5108,7 @@ type components = {
         /** @description Present only when the project is disabled. */
         disabled?: {
           reason: string;
-          /** Format: date-time */
+          /** @description ISO 8601 with a `+hhmm` offset. */
           estimatedEndTime: string | null;
         };
       };
@@ -5036,10 +5116,10 @@ type components = {
       isBYODB: boolean;
       organization: {
         /**
-         * @description ID of the organization the project belongs to.
+         * @description ID of the organization the project belongs to, as a numeric string.
          * @example 123
          */
-        id: number | null;
+        id: string | null;
         /**
          * Format: date-time
          * @description Creation time of the organization. Null when the creation time is unavailable.
@@ -5057,13 +5137,14 @@ type components = {
         /**
          * @description Null when the project membership has no role stored.
          * @example admin
+         * @enum {string|null}
          */
-        role: string | null;
+        role: 'admin' | 'guest' | 'readOnly' | 'share' | 'developer' | 'reviewer' | 'productionManager' | null;
         isActivated: boolean;
-        /** @description Raw SAML attribute statement asserted by the IdP on last login, keyed by IdP-defined attribute name (e.g. a role or group claim); attribute names and count vary per IdP configuration. Present only when SAML is enabled on the stack. */
+        /** @description Raw SAML attribute statement asserted by the IdP on last login, keyed by IdP-defined attribute name (e.g. a role or group claim); attribute names and count vary per IdP configuration. Present only when SAML is enabled on the stack; an empty array `[]` when no attributes are stored. */
         samlParameters?: {
           [key: string]: string[];
-        };
+        } | unknown[];
       };
       /** @description Administrator who owns the token. Present only when an owner can be resolved. */
       adminOwner?: {
@@ -5657,6 +5738,20 @@ type components = {
       };
     };
     OrganizationsListResponse: components['schemas']['OrganizationListResponse'][];
+    ProgrammaticProjectClaimDetailResponse: {
+      /** @description Whether the browser carries a parked claim. */
+      present: boolean;
+      /**
+       * @description The claim's safe-to-log id, never its secret. `null` when the cookie does not parse.
+       * @example 01a00eb0-2b6c-7496-9520-d6f4cae52015
+       */
+      claimId?: string | null;
+      /**
+       * @description The project the claim hands over. `null` when it cannot be resolved.
+       * @example Agent project
+       */
+      projectName?: string | null;
+    };
     ConfirmProgrammaticProjectRequest2: {
       /**
        * Null when the body carried no token. The caller resolves the effective claim - see
@@ -6106,7 +6201,7 @@ type components = {
       isSsoEnabled?: boolean;
       /** @description Whether SAML2 SSO configuration exists for the Snowflake backend. Present only for Snowflake backends. */
       isSsoConfigured?: boolean;
-      /** @description Whether the Snowflake backend certificate is validated and the backend is usable. Present only for Snowflake backends. */
+      /** @description Whether the backend credential is validated and the backend is usable. Snowflake: at least one credential certificate is enabled. BigQuery: the backend is usable — a legacy backend without key rows, or at least one enabled key; a server-side created backend stays false until activated. Absent for other backends. */
       isEnabled?: boolean;
     };
     CreateSnowflakeStorageBackendResponse: {
@@ -6165,7 +6260,7 @@ type components = {
       /** @description Backend region. */
       region: string;
       /** @description Associated GCP account owner (e.g. keboola, client-<name>). */
-      owner: string;
+      owner: string | null;
       /** @description Technical owner who manages the account. One of: keboola, internal, kbdb, byodb. */
       technicalOwner: string;
       /** @description Contact emails of the technical owner. */
@@ -6178,6 +6273,8 @@ type components = {
       bqExternalSharingRoleName: string | null;
       /** @description Whether this backend is provisioned to propagate BigQuery policy tags — the customer granted the configured role on their taxonomy and the grant was verified. False both when the backend was never provisioned and when the capability was disabled. */
       policyTagsEnabled: boolean;
+      /** @description Whether the backend is usable: a legacy backend without key rows, or at least one enabled key. A server-side created backend stays false until activated. */
+      isEnabled: boolean;
     };
     StorageBackendDetailResponse: {
       /** @description Root credentials identifier. */
@@ -6189,7 +6286,7 @@ type components = {
       /** @description Backend region. */
       region: string;
       /** @description Associated legal owner (mostly: keboola, client-<name>). */
-      owner: string;
+      owner: string | null;
       /** @description Associated technical owner (who technically manages the account). One of: keboola, internal, kbdb, byodb. */
       technicalOwner: string;
       /** @description Username used for the connection. */
@@ -6239,7 +6336,7 @@ type components = {
       isSsoEnabled: boolean;
       /** @description Whether SAML2 SSO configuration exists for the Snowflake backend. */
       isSsoConfigured: boolean;
-      /** @description Whether the backend credential certificate is validated and the backend is usable. Snowflake backends only; absent otherwise. */
+      /** @description Whether the backend credential is validated and the backend is usable. Snowflake: at least one credential certificate is enabled. BigQuery: the backend is usable — a legacy backend without key rows, or at least one enabled key; a server-side created backend stays false until activated. Absent for other backends. */
       isEnabled?: boolean;
       /** @description Array of technical owner contact emails for SAML2 certificate rotation notifications. */
       technicalOwnerContactEmails: string[];
@@ -6260,6 +6357,8 @@ type components = {
        * @example something@else.iam.gserviceaccount.com
        */
       serviceAccountEmail?: string | null;
+      /** @description Detail endpoint only (absent on the list endpoint). Whether the BigQuery policy-tag capability is enabled on the backend. BigQuery backends only; absent otherwise. */
+      policyTagsEnabled?: boolean;
     };
     StorageBackendListResponse: components['schemas']['StorageBackendDetailResponse'][];
     StorageBackendMaintainerListResponse: {
@@ -6274,6 +6373,35 @@ type components = {
        */
       name: string;
     }[];
+    PolicyTagEnablementGuideResponse: {
+      /**
+       * @description Format of `content`.
+       * @enum {string}
+       */
+      format: 'markdown' | 'terraform';
+      /** @description The guide: a Markdown document, or a Terraform module. */
+      content: string;
+    };
+    PolicyTagEnablementGuideErrorResponse: {
+      /** @description Human-readable reason, safe to show to the user. */
+      error: string;
+      /**
+       * @description Machine-readable error code.
+       * @example manage.storageBackend.invalidPolicyTagEnablementGuideRequest
+       */
+      code?: string;
+      /** @description Identifier of the error occurrence, for support. */
+      exceptionId?: string;
+      /** @description Per-parameter validation errors, present when a query parameter fails its format check. */
+      errors?: {
+        /**
+         * @description The query parameter.
+         * @example roleProject
+         */
+        key: string;
+        message: string;
+      }[];
+    };
     StorageBackendProjectListResponse: {
       /**
        * @description Project identifier.
@@ -7948,10 +8076,7 @@ interface operations {
            * @enum {string}
            */
           status?: 'deleted' | 'purged' | 'all';
-          /**
-           * @description When `true`, only projects awaiting purge whose scheduled purge time is in the past. With `status=purged` the page is empty.
-           * @default false
-           */
+          /** @description `true`: only projects awaiting purge whose scheduled purge time is in the past (with `status=purged` the page is empty). `false`: only projects that are not overdue. Omitted: no overdue filter. */
           overdue?: boolean;
         };
       };
@@ -12253,6 +12378,26 @@ interface operations {
       };
     };
   };
+  'get_/manage/programmatic-projects/claim::ProgrammaticProjectClaimDetailAction': {
+    parameters: {
+      query?: never;
+      header?: never;
+      path?: never;
+      cookie?: never;
+    };
+    requestBody?: never;
+    responses: {
+      /** @description The parked claim, or `present: false` when the browser carries none. */
+      200: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          'application/json': components['schemas']['ProgrammaticProjectClaimDetailResponse'];
+        };
+      };
+    };
+  };
   'post_/manage/programmatic-projects/confirm::ProgrammaticProjectConfirmAction': {
     parameters: {
       query?: never;
@@ -12502,7 +12647,7 @@ interface operations {
         };
         content?: never;
       };
-      /** @description Returned when the feature is already assigned or request is invalid. */
+      /** @description Returned when the feature is already assigned, the request is invalid, or the feature is `bigquery-policy-tags`, which is assigned per project only. */
       422: {
         headers: {
           [name: string]: unknown;
@@ -12902,7 +13047,7 @@ interface operations {
         };
         content?: never;
       };
-      /** @description Returned when the feature is already assigned or cannot be managed via API. */
+      /** @description Returned when the feature is already assigned, cannot be managed via API, or is `bigquery-policy-tags` on a project whose BigQuery backend lacks the policy-tag capability. */
       422: {
         headers: {
           [name: string]: unknown;
@@ -14509,7 +14654,7 @@ interface operations {
         };
         content?: never;
       };
-      /** @description Returned when the current admin is not a super admin. */
+      /** @description Returned when the current admin is neither a super admin nor holds the can-reactivate-workspaces feature. */
       403: {
         headers: {
           [name: string]: unknown;
@@ -15183,7 +15328,7 @@ interface operations {
           'application/json': components['schemas']['StorageBackendResponse'];
         };
       };
-      /** @description Returned when the backend cannot be activated or validation fails (connection test, missing certificate, already-enabled certificate, unsupported backend). */
+      /** @description Returned when the backend cannot be activated or validation fails (connection test, missing certificate, already-enabled certificate, unsupported backend, or a dynamic backend whose Snowflake account lacks the bare warehouse or a small, medium or large sized warehouse). */
       400: {
         headers: {
           [name: string]: unknown;
@@ -15523,7 +15668,7 @@ interface operations {
           'application/json': components['schemas']['StorageBackendResponse'];
         };
       };
-      /** @description Returned when the backend connection test fails or the request payload is invalid. */
+      /** @description Returned when the backend connection test fails, the request payload is invalid, or `useDynamicBackends` is enabled on a backend whose stored warehouse has a size suffix (`manage.storageBackendWarehouse.hasSizeSuffix`), or the backend was registered but never activated (`manage.storageBackend.notActivated`) or has no active key-pair certificate (`manage.storageCredentialsActiveCertificate.notFound`). */
       400: {
         headers: {
           [name: string]: unknown;
@@ -15634,6 +15779,103 @@ interface operations {
       };
     };
   };
+  'get_/manage/storage-backend/{id}/policy-tags/enablement-guide::StorageBackendPolicyTagEnablementGuideAction': {
+    parameters: {
+      query: {
+        /** @description Guide format. */
+        format?: 'markdown' | 'terraform';
+        /**
+         * @description GCP project ID that holds the custom roles, and the new taxonomy when `createTaxonomy` is true.
+         * @example acme-data-governance
+         */
+        roleProject: string;
+        /**
+         * @description Role ID of the custom setter role.
+         * @example kbcPolicyTagSetter
+         */
+        roleName?: string;
+        /**
+         * @description Guide the creation of a new taxonomy instead of using an existing one.
+         * @example false
+         */
+        createTaxonomy?: boolean;
+        /**
+         * @description The existing taxonomy, `projects/{project}/locations/{location}/taxonomies/{id}`, as a single item.
+         * @example [
+         *       "projects/acme-data-governance/locations/europe-west3/taxonomies/1234567890"
+         *     ]
+         */
+        'resourceScopes[]'?: string[];
+        /**
+         * @description The probe policy tag in the taxonomy of `resourceScopes`, as a single item. If omitted, Markdown provides manual creation instructions and a placeholder; Terraform creates the tag when applied.
+         * @example [
+         *       "projects/acme-data-governance/locations/europe-west3/taxonomies/1234567890/policyTags/987654321"
+         *     ]
+         */
+        'probeTags[]'?: string[];
+      };
+      header?: never;
+      path: {
+        /**
+         * @description Backend ID.
+         * @example 1
+         */
+        id: number;
+      };
+      cookie?: never;
+    };
+    requestBody?: never;
+    responses: {
+      /** @description The enablement guide. */
+      200: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          'application/json': components['schemas']['PolicyTagEnablementGuideResponse'];
+        };
+      };
+      /** @description The backend is not a BigQuery backend, or the taxonomies cannot be enabled as given (e.g. one is outside the backend region or outside `roleProject`). */
+      400: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          'application/json': components['schemas']['PolicyTagEnablementGuideErrorResponse'];
+        };
+      };
+      /** @description Returned when the Manage token is missing or invalid. */
+      401: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Returned when the current admin is not a super admin. */
+      403: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Returned when the storage backend with the given ID does not exist. */
+      404: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Returned when the backend has no valid stored service account or region to render the guide from. */
+      409: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          'application/json': components['schemas']['PolicyTagEnablementGuideErrorResponse'];
+        };
+      };
+    };
+  };
   'get_/manage/storage-backend/{id}/projects::StorageBackendProjectListAction': {
     parameters: {
       query?: {
@@ -16983,7 +17225,7 @@ interface operations {
         };
         content?: never;
       };
-      /** @description Returned when the current admin is not a super admin. */
+      /** @description Returned when the current admin is neither a super admin nor holds the can-reactivate-workspaces feature. */
       403: {
         headers: {
           [name: string]: unknown;
@@ -16997,6 +17239,13 @@ interface operations {
         };
         content?: never;
       };
+      /** @description Returned when a scheduled retention step is changing the workspace at the same moment, or changed it after it was read, including deletion — that case is reported as this 409 as well, not 404. Reload and retry; a deleted workspace can no longer be reactivated. */
+      409: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
     };
   };
   'get_/pay-as-you-go/billing/configuration::BillingConfigurationDetailAction': {
@@ -17015,8 +17264,10 @@ interface operations {
         };
         content: {
           'application/json': {
-            'tax-rates'?: Record<string, never>;
-            'credit-price'?: number;
+            'tax-rates': Record<string, never>;
+            'credit-price': number;
+            /** @description Stripe publishable (`pk_…`) key for initialising Stripe.js; public by design. */
+            'stripe-publishable-key': string;
           };
         };
       };
@@ -17823,6 +18074,7 @@ type ConfirmProgrammaticProjectResult = {
   };
   confirmedByAdminId: number;
 };
+type ProgrammaticProjectClaim = OpenapiReturnType<paths['/manage/programmatic-projects/claim']['get']>;
 //#endregion
 //#region src/clients/management/users/types.d.ts
 type AddUserFeaturePath = {
@@ -18060,6 +18312,8 @@ type StorageBackend = Omit<components['schemas']['StorageBackendDetailResponse']
   loginType?: string;
   /** Whether the backend's credential certificate is validated and the backend is usable. */
   isEnabled?: boolean;
+  /** BigQuery detail only. Overlay until connection#8917 deploys and the schema is regenerated. */
+  policyTagsEnabled?: boolean;
 };
 /** Result of `POST /manage/storage-backend/snowflake`.
  *
@@ -18072,11 +18326,34 @@ type StorageBackendMaintainer = components['schemas']['StorageBackendMaintainerL
 type GetStorageBackendProjectsQuery = NonNullable<operations['get_/manage/storage-backend/{id}/projects::StorageBackendProjectListAction']['parameters']['query']>;
 type CreateSnowflakeStorageBackendBody = components['schemas']['CreateSnowflakeBackendWithCertRequest'];
 type CreateBigqueryStorageBackendBody = components['schemas']['StorageBackendCreateBigqueryRequest'];
+type CreateBigqueryServerSideStorageBackendBody = components['schemas']['StorageBackendCreateBigqueryServerSideRequest'];
+/** Result of the BigQuery create, update and server-side create calls.
+ *
+ * - It echoes the service-account key as `credentials`.
+ * - `isEnabled` overlay: connection#8783 adds it (`false` while a server-side backend awaits
+ *   activation); drop the overlay once the schema is regenerated after that deploy. */
+type StorageBackendBigquery = components['schemas']['StorageBackendBigqueryResponse'] & {
+  isEnabled?: boolean;
+};
 type StorageBackendPath = OpenapiPathType<paths['/manage/storage-backend/{id}']['patch']>;
 type UpdateStorageBackendBody = components['schemas']['StorageBackendUpdateRequest'];
 type UpdateStorageBackendInput = StorageBackendPath & UpdateStorageBackendBody;
 type UpdateBigqueryStorageBackendBody = components['schemas']['StorageBackendUpdateBigqueryRequest'];
 type UpdateBigqueryStorageBackendInput = StorageBackendPath & UpdateBigqueryStorageBackendBody;
+type PolicyTagEnablementGuidePath = OpenapiPathType<paths['/manage/storage-backend/{id}/policy-tags/enablement-guide']['get']>;
+type PolicyTagEnablementGuideSchemaQuery = OpenapiQueryType<paths['/manage/storage-backend/{id}/policy-tags/enablement-guide']['get']>;
+/**
+ * Query for `GET /manage/storage-backend/{id}/policy-tags/enablement-guide`.
+ *
+ * The spec names the repeatable fields `resourceScopes[]` and `probeTags[]`, brackets and all. They
+ * are remapped to clean names; `queryArrayFormat: 'brackets'` builds the same wire format from them.
+ */
+type PolicyTagEnablementGuideQuery = Omit<PolicyTagEnablementGuideSchemaQuery, 'resourceScopes[]' | 'probeTags[]'> & {
+  resourceScopes?: string[];
+  probeTags?: string[];
+};
+type PolicyTagEnablementGuideInput = PolicyTagEnablementGuidePath & PolicyTagEnablementGuideQuery;
+type PolicyTagEnablementGuide = components['schemas']['PolicyTagEnablementGuideResponse'];
 //#endregion
 //#region src/clients/management/uiApps/types.d.ts
 /**
@@ -18144,5 +18421,5 @@ type ProjectRetentionWorkspace = {
 //#region src/clients/management/tokenTypes.d.ts
 type ManagementToken = components['schemas']['ManageTokenVerifyResponse'];
 //#endregion
-export { ProjectMetadataInput as $, RotateFileStorageAbsBody as $n, CreateMaintainerInvitationBody as $t, ChangeProjectUserRolePath as A, CreateOrganizationProjectInput as An, paths as Ar, User as At, JoinProjectBody as B, OrganizationUserPath as Bn, CreditPaymentRequest as Bt, UpdateStorageBackendInput as C, UpdateSamlConfigInput as Cn, ProjectInvitation as Cr, DeleteUserMetadataPath as Ct, AssignProjectTemplateFeatureInput as D, CreateOrganizationInvitationBody as Dn, CreateApplicationTokenBody as Dr, SetUserMetadataInput as Dt, AssignFeatureBody as E, AdminUser as En, ApplicationTokenScope as Er, SetUserMetadataBody as Et, DeleteProjectInvitationPath as F, OrganizationListItem as Fn, UserPath as Ft, MoveProjectBody as G, SetUpBigQueryBody as Gn, TopUpSetting as Gt, ListProjectInvitationsPath as H, SetOrganizationMetadataInput as Hn, PayAsYouGoBillingConfiguration as Ht, DeleteProjectMetadataPath as I, OrganizationMaintainer as In, UserProjectMembership as It, ProjectBase as J, CreateFileStorageS3Body as Jn, AddMaintainerUserBody as Jt, MoveProjectInput as K, CreateFileStorageAbsBody as Kn, UpdateStripeCustomerBody as Kt, GetProjectMetadataPath as L, OrganizationMetadataItemPath as Ln, ConfirmProgrammaticProjectPayload as Lt, CreateProjectFeaturePath as M, OrganizationDetail as Mn, UserListItem as Mt, CreateProjectInvitationBody as N, OrganizationInvitationDetail as Nn, UserMaintainerMembership as Nt, ChangeProjectUserRoleBody as O, CreateOrganizationInvitationInput as On, CreatedApplicationToken as Or, UpdateUserBody as Ot, CreateProjectInvitationPath as P, OrganizationInvitationPath as Pn, UserOrganizationMembership as Pt, ProjectJoinRequestPath as Q, FileStorageS3 as Qn, CreateMaintainerBody as Qt, GetProjectPath as R, OrganizationPath as Rn, ConfirmProgrammaticProjectResult as Rt, UpdateStorageBackendBody as S, UpdateSamlConfigBody as Sn, OrganizationInvitation as Sr, AddUserFeaturePath as St, AddProjectUserPath as T, AddOrganizationUserInput as Tn, ApplicationToken as Tr, RemoveUserFeaturePath as Tt, ListProjectJoinRequestsPath as U, UpdateOrganizationBody as Un, StripeCustomer as Ut, JoinProjectInput as V, SetOrganizationMetadataBody as Vn, CreditPurchase as Vt, ListProjectUsersPath as W, UpdateOrganizationInput as Wn, StripeCustomerCard as Wt, ProjectInvitationDetail as X, FileStorageAbs as Xn, CompleteSamlSetupBody as Xt, ProjectInvitableRole as Y, FileStorage as Yn, AddMaintainerUserInput as Yt, ProjectJoinRequestDetail as Z, FileStorageGcs as Zn, CompleteSamlSetupInput as Zt, StorageBackendMaintainer as _, SamlConfigSummary as _n, DeletedProjectsListQuery as _r, SetProjectReviewersBody as _t, GetUiAppsQuery as a, CreateSamlConfigPath as an, RotateFileStorageS3Body as ar, RemoveProjectLimitPath as at, UpdateBigqueryStorageBackendBody as b, UpdateMaintainerBody as bn, DeletedProjectsStatus as br, UpdateProjectInput as bt, UiApp as c, MaintainerInvitationDetail as cn, UpdateFileStorageBody as cr, RequestProjectAccessBody as ct, UiAppVersion as d, MaintainerPath as dn, FeatureProject as dr, SetProjectDisabledBody as dt, CreateMaintainerInvitationInput as en, RotateFileStorageAbsInput as er, ProjectMetadataItem as et, CreateBigqueryStorageBackendBody as f, MaintainerUser as fn, FeatureType as fr, SetProjectDisabledInput as ft, StorageBackend as g, SamlConfigPath as gn, DeletedProjectsListFilter as gr, SetProjectMetadataPath as gt, GetStorageBackendProjectsQuery as h, SamlConfigDetail as hn, DeletedProjectPurgeResult as hr, SetProjectMetadataBody as ht, ReactivateWorkspaceResult as i, CreateSamlConfigInput as in, RotateFileStorageGcsPath as ir, RemoveProjectFeaturePath as it, CreateProjectFeatureBody as j, Organization as jn, UserDetail as jt, ChangeProjectUserRoleInput as k, CreateOrganizationProjectBody as kn, components as kr, UpdateUserInput as kt, UiAppDetail as l, MaintainerInvitationPath as ln, Feature as lr, RequestProjectAccessInput as lt, CreateSnowflakeStorageBackendResponse as m, MetadataItem as mn, DeletedProject as mr, SetProjectLimitsInput as mt, ProjectRetentionWorkspace as n, CreateMaintainerOrganizationInput as nn, RotateFileStorageGcsBody as nr, ProjectTemplate as nt, RegisterUiAppBody as o, Maintainer as on, RotateFileStorageS3Input as or, RemoveProjectTemplateFeaturePath as ot, CreateSnowflakeStorageBackendBody as p, MaintainerUserPath as pn, GetAllFeaturesQuery as pr, SetProjectLimitsBody as pt, Project as q, CreateFileStorageGcsBody as qn, UpdateTopUpSettingBody as qt, ProjectRetentionWorkspaceState as r, CreateSamlConfigBody as rn, RotateFileStorageGcsInput as rr, ProjectTemplatePath as rt, RenameUiAppBody as s, MaintainerDetail as sn, RotateFileStorageS3Path as sr, RemoveProjectUserPath as st, ManagementToken as t, CreateMaintainerOrganizationBody as tn, RotateFileStorageAbsPath as tr, ProjectPath as tt, UiAppRegistrationResult as u, MaintainerMetadataItemPath as un, FeatureAdmin as ur, Reviewer as ut, StorageBackendPath as v, SetMaintainerMetadataBody as vn, DeletedProjectsPage as vr, SetProjectReviewersPath as vt, AddProjectUserBody as w, AddOrganizationUserBody as wn, ProjectJoinRequest as wr, GetUsersQuery as wt, UpdateBigqueryStorageBackendInput as x, UpdateMaintainerInput as xn, MaintainerInvitation as xr, AddUserFeatureBody as xt, StorageBackendProject as y, SetMaintainerMetadataInput as yn, DeletedProjectsStats as yr, UpdateProjectBody as yt, GetProjectReviewersPath as z, OrganizationProject as zn, CreatePaymentRequestBody as zt };
-//# sourceMappingURL=types-sI3K5t3w.d.cts.map
+export { MoveProjectInput as $, SetUpBigQueryBody as $n, TopUpSetting as $t, UpdateStorageBackendInput as A, UpdateSamlConfigBody as An, OrganizationInvitation as Ar, DeleteUserMetadataPath as At, CreateProjectInvitationBody as B, OrganizationDetail as Bn, UserMaintainerMembership as Bt, StorageBackendBigquery as C, SamlConfigDetail as Cn, DeletedProjectPurgeResult as Cr, SetProjectMetadataPath as Ct, UpdateBigqueryStorageBackendBody as D, SetMaintainerMetadataInput as Dn, DeletedProjectsStats as Dr, UpdateProjectInput as Dt, StorageBackendProject as E, SetMaintainerMetadataBody as En, DeletedProjectsPage as Er, UpdateProjectBody as Et, ChangeProjectUserRoleBody as F, CreateOrganizationInvitationBody as Fn, CreateApplicationTokenBody as Fr, UpdateUserBody as Ft, GetProjectPath as G, OrganizationMetadataItemPath as Gn, ConfirmProgrammaticProjectResult as Gt, DeleteProjectInvitationPath as H, OrganizationInvitationPath as Hn, UserPath as Ht, ChangeProjectUserRoleInput as I, CreateOrganizationInvitationInput as In, CreatedApplicationToken as Ir, UpdateUserInput as It, JoinProjectInput as J, OrganizationUserPath as Jn, CreditPaymentRequest as Jt, GetProjectReviewersPath as K, OrganizationPath as Kn, ProgrammaticProjectClaim as Kt, ChangeProjectUserRolePath as L, CreateOrganizationProjectBody as Ln, components as Lr, User as Lt, AddProjectUserPath as M, AddOrganizationUserBody as Mn, ProjectJoinRequest as Mr, RemoveUserFeaturePath as Mt, AssignFeatureBody as N, AddOrganizationUserInput as Nn, ApplicationToken as Nr, SetUserMetadataBody as Nt, UpdateBigqueryStorageBackendInput as O, UpdateMaintainerBody as On, DeletedProjectsStatus as Or, AddUserFeatureBody as Ot, AssignProjectTemplateFeatureInput as P, AdminUser as Pn, ApplicationTokenScope as Pr, SetUserMetadataInput as Pt, MoveProjectBody as Q, UpdateOrganizationInput as Qn, StripeCustomerCard as Qt, CreateProjectFeatureBody as R, CreateOrganizationProjectInput as Rn, paths as Rr, UserDetail as Rt, StorageBackend as S, MetadataItem as Sn, DeletedProject as Sr, SetProjectMetadataBody as St, StorageBackendPath as T, SamlConfigSummary as Tn, DeletedProjectsListQuery as Tr, SetProjectReviewersPath as Tt, DeleteProjectMetadataPath as U, OrganizationListItem as Un, UserProjectMembership as Ut, CreateProjectInvitationPath as V, OrganizationInvitationDetail as Vn, UserOrganizationMembership as Vt, GetProjectMetadataPath as W, OrganizationMaintainer as Wn, ConfirmProgrammaticProjectPayload as Wt, ListProjectJoinRequestsPath as X, SetOrganizationMetadataInput as Xn, PayAsYouGoBillingConfiguration as Xt, ListProjectInvitationsPath as Y, SetOrganizationMetadataBody as Yn, CreditPurchase as Yt, ListProjectUsersPath as Z, UpdateOrganizationBody as Zn, StripeCustomer as Zt, PolicyTagEnablementGuide as _, MaintainerInvitationPath as _n, Feature as _r, Reviewer as _t, GetUiAppsQuery as a, CompleteSamlSetupInput as an, FileStorageGcs as ar, ProjectJoinRequestPath as at, PolicyTagEnablementGuideQuery as b, MaintainerUser as bn, FeatureType as br, SetProjectLimitsBody as bt, UiApp as c, CreateMaintainerInvitationInput as cn, RotateFileStorageAbsInput as cr, ProjectPath as ct, UiAppVersion as d, CreateSamlConfigBody as dn, RotateFileStorageGcsInput as dr, RemoveProjectFeaturePath as dt, UpdateStripeCustomerBody as en, CreateFileStorageAbsBody as er, Project as et, CreateBigqueryServerSideStorageBackendBody as f, CreateSamlConfigInput as fn, RotateFileStorageGcsPath as fr, RemoveProjectLimitPath as ft, GetStorageBackendProjectsQuery as g, MaintainerInvitationDetail as gn, UpdateFileStorageBody as gr, RequestProjectAccessInput as gt, CreateSnowflakeStorageBackendResponse as h, MaintainerDetail as hn, RotateFileStorageS3Path as hr, RequestProjectAccessBody as ht, ReactivateWorkspaceResult as i, CompleteSamlSetupBody as in, FileStorageAbs as ir, ProjectJoinRequestDetail as it, AddProjectUserBody as j, UpdateSamlConfigInput as jn, ProjectInvitation as jr, GetUsersQuery as jt, UpdateStorageBackendBody as k, UpdateMaintainerInput as kn, MaintainerInvitation as kr, AddUserFeaturePath as kt, UiAppDetail as l, CreateMaintainerOrganizationBody as ln, RotateFileStorageAbsPath as lr, ProjectTemplate as lt, CreateSnowflakeStorageBackendBody as m, Maintainer as mn, RotateFileStorageS3Input as mr, RemoveProjectUserPath as mt, ProjectRetentionWorkspace as n, AddMaintainerUserBody as nn, CreateFileStorageS3Body as nr, ProjectInvitableRole as nt, RegisterUiAppBody as o, CreateMaintainerBody as on, FileStorageS3 as or, ProjectMetadataInput as ot, CreateBigqueryStorageBackendBody as p, CreateSamlConfigPath as pn, RotateFileStorageS3Body as pr, RemoveProjectTemplateFeaturePath as pt, JoinProjectBody as q, OrganizationProject as qn, CreatePaymentRequestBody as qt, ProjectRetentionWorkspaceState as r, AddMaintainerUserInput as rn, FileStorage as rr, ProjectInvitationDetail as rt, RenameUiAppBody as s, CreateMaintainerInvitationBody as sn, RotateFileStorageAbsBody as sr, ProjectMetadataItem as st, ManagementToken as t, UpdateTopUpSettingBody as tn, CreateFileStorageGcsBody as tr, ProjectBase as tt, UiAppRegistrationResult as u, CreateMaintainerOrganizationInput as un, RotateFileStorageGcsBody as ur, ProjectTemplatePath as ut, PolicyTagEnablementGuideInput as v, MaintainerMetadataItemPath as vn, FeatureAdmin as vr, SetProjectDisabledBody as vt, StorageBackendMaintainer as w, SamlConfigPath as wn, DeletedProjectsListFilter as wr, SetProjectReviewersBody as wt, PolicyTagEnablementGuideSchemaQuery as x, MaintainerUserPath as xn, GetAllFeaturesQuery as xr, SetProjectLimitsInput as xt, PolicyTagEnablementGuidePath as y, MaintainerPath as yn, FeatureProject as yr, SetProjectDisabledInput as yt, CreateProjectFeaturePath as z, Organization as zn, UserListItem as zt };
+//# sourceMappingURL=types-Dn1G-qv4.d.cts.map