@keboola/api-client 47.0.0 → 49.0.0

package/dist/{index-XaPb6unB.d.cts → index-BPMr8PQJ.d.ts}

@@ -1,5 +1,5 @@
-import { IStringifyOptions } from "qs";
 import * as z$1 from "zod";
+import { IStringifyOptions } from "qs";
 //#region src/errors/ApiError.d.ts
 declare class ApiError extends Error {
   response: Response;
@@ -61,6 +61,19 @@ declare class HtmlResponseError extends ApiError {
 }
 declare const isHtmlResponseError: (error: unknown) => error is HtmlResponseError;
 //#endregion
+//#region src/constants/manageErrorCodes.d.ts
+declare const ManageErrorCode: {
+  readonly ProgrammaticProjectInvalidClaim: 'manage.programmaticProjects.invalidClaim';
+  readonly ProgrammaticProjectRateLimited: 'manage.programmaticProjects.rateLimited';
+  readonly ProgrammaticProjectProvisioningFailed: 'manage.programmaticProjects.provisioningFailed';
+};
+type ManageErrorCode = (typeof ManageErrorCode)[keyof typeof ManageErrorCode];
+//#endregion
+//#region src/errors/ManageError.d.ts
+/** The Manage API's string code: `code`, `stringCode` or `exception.code`, by which layer threw. */
+declare const manageErrorCode: (error: unknown) => string | null;
+declare const isManageError: (error: unknown, code: ManageErrorCode) => error is ApiError;
+//#endregion
 //#region src/errors/ManagementClientAuthError.d.ts
 declare class ManagementClientAuthError extends ApiError {
   title: string;
@@ -5162,6 +5175,31 @@ type paths = {
     patch?: never;
     trace?: never;
   };
+  '/v2/storage/sharing-targets': {
+    parameters: {
+      query?: never;
+      header?: never;
+      path?: never;
+      cookie?: never;
+    };
+    /**
+     * Sharing targets list
+     * @description Lists the projects and users a bucket of the caller's project can be shared to: every project of
+     *     the organization and every admin of those projects.
+     *
+     *     Requires an admin token whose admin either has the `share` role in the project or is a member
+     *     of the project's organization. A `share`-role admin gets the lists even without organization
+     *     membership.
+     */
+    get: operations['get_/v2/storage/sharing-targets::SharingTargetsListAction'];
+    put?: never;
+    post?: never;
+    delete?: never;
+    options?: never;
+    head?: never;
+    patch?: never;
+    trace?: never;
+  };
   '/v2/storage/snapshots/{snapshotId}': {
     parameters: {
       query?: never;
@@ -6638,7 +6676,8 @@ type paths = {
     /**
      * Refresh token
      * @description Generates a new token value; the old token value becomes immediately invalid.
-     *     Any token can refresh itself; refreshing another token requires the `canManageTokens` permission.
+     *     Any token can refresh itself, except a read-only personal access token; refreshing another token
+     *     requires the `canManageTokens` permission.
      *
      *     The decrypted `token` value is returned when refreshing a non-master token, the token used for authorization,
      *     or when the project has a dedicated project feature enabled.
@@ -6661,10 +6700,15 @@ type paths = {
     put?: never;
     /**
      * Share token
+     * @deprecated
      * @description Use this call whenever you want to securely deliver a token to someone. The link to the token retrieval page will be sent to the
      *     provided email address. The link will expire in 2 hours.
      *
      *     Master tokens and protected-branch tokens cannot be shared; other tokens can be shared only by their creator or the creator's admin.
+     *
+     *     **Deprecated:** this endpoint will be removed. To get a token value again, use `POST /v2/storage/tokens/{id}/refresh`.
+     *     Note that refreshing generates a new token value and the current value becomes immediately invalid, so every existing
+     *     user of the token has to be updated.
      */
     post: operations['post_/v2/storage/tokens/{id}/share::TokenShareAction'];
     delete?: never;
@@ -11505,7 +11549,7 @@ type components = {
       /** @description Name of the output file. */
       fileName: string;
       /**
-       * @description Export file type (csv or parquet).
+       * @description Export file type (csv or parquet). Parquet writes `TIMESTAMP_LTZ` and `TIMESTAMP_TZ` columns as UTC wall-clock `TIMESTAMP_NTZ`; the original offset is not kept.
        * @default null
        * @enum {string|null}
        */
@@ -12930,13 +12974,13 @@ type components = {
         schema: string | null;
         /** @description Warehouse name (for Snowflake). */
         warehouse: string | null;
-        /** @description Username for connecting to the workspace. Empty when loginType is "none". */
+        /** @description Username for connecting to the workspace. Empty when loginType is "none" or "governed". */
         user: string;
         /**
-         * @description Login type used for the connection. Value "none" means the workspace has no direct credentials and is intended for QueryService. Create direct connection credentials later using the workspace credentials endpoint.
+         * @description Login type used for the connection. Value "none" means the workspace has no direct credentials and is intended for QueryService. Value "governed" means the same, and in addition only QueryService can obtain credentials for it. Create direct connection credentials later using the workspace credentials endpoint.
          * @enum {string}
          */
-        loginType: 'default' | 'snowflake-legacy-service' | 'snowflake-person-sso' | 'snowflake-person-keypair' | 'snowflake-service-keypair' | 'none';
+        loginType: 'default' | 'snowflake-legacy-service' | 'snowflake-person-sso' | 'snowflake-person-keypair' | 'snowflake-service-keypair' | 'none' | 'governed';
         /** @description Indicates if SSO login is available. */
         ssoLoginAvailable: boolean;
         /** @description Snowflake account locator. Present only for Snowflake workspaces. */
@@ -12973,11 +13017,26 @@ type components = {
        * @enum {string}
        */
       state: 'active' | 'deactivated';
+      /**
+       * @description Last observed workspace use (backend login or Storage job), ISO 8601 with a `+hhmm` offset. May be a seeded floor for an unused workspace; null when unknown.
+       * @example 2017-02-13T12:01:05+0100
+       */
+      lastActivityAt: string | null;
+      /**
+       * @description Projected date retention would warn this workspace, ISO 8601 with a `+hhmm` offset. It can move when the workspace is used; null when retention does not apply or activity has not been synced recently.
+       * @example 2017-02-13T12:01:05+0100
+       */
+      warnAt: string | null;
       /**
        * @description When retention will deactivate this unused workspace, ISO 8601 with a `+hhmm` offset. Null unless the owner has been warned. Connecting to the workspace cancels it. Can lie in the past while retention only notifies.
        * @example 2017-02-13T12:01:05+0100
        */
       deactivateAt: string | null;
+      /**
+       * @description When retention will delete this deactivated workspace, ISO 8601 with a `+hhmm` offset. Null unless the workspace is deactivated. Support can reactivate it until then.
+       * @example 2017-02-13T12:01:05+0100
+       */
+      deleteAt: string | null;
     };
     /** @description Workspace detail extended with the freshly created secret. The secret is not stored and is returned only once, right after the workspace is created. */
     WorkspaceCreatedResponse: {
@@ -13018,13 +13077,13 @@ type components = {
         schema: string | null;
         /** @description Warehouse name (for Snowflake). */
         warehouse: string | null;
-        /** @description Username for connecting to the workspace. Empty when loginType is "none". Absent for a BigQuery workspace created with a key, which returns `credentials` instead. */
+        /** @description Username for connecting to the workspace. Empty when loginType is "none" or "governed". Absent for a BigQuery workspace created with a key, which returns `credentials` instead. */
         user?: string;
         /**
-         * @description Login type used for the connection. Value "none" means the workspace has no direct credentials and is intended for QueryService. Create direct connection credentials later using the workspace credentials endpoint.
+         * @description Login type used for the connection. Value "none" means the workspace has no direct credentials and is intended for QueryService. Value "governed" means the same, and in addition only QueryService can obtain credentials for it. Create direct connection credentials later using the workspace credentials endpoint.
          * @enum {string}
          */
-        loginType: 'default' | 'snowflake-legacy-service' | 'snowflake-person-sso' | 'snowflake-person-keypair' | 'snowflake-service-keypair' | 'none';
+        loginType: 'default' | 'snowflake-legacy-service' | 'snowflake-person-sso' | 'snowflake-person-keypair' | 'snowflake-service-keypair' | 'none' | 'governed';
         /** @description Indicates if SSO login is available. */
         ssoLoginAvailable: boolean;
         /** @description Snowflake account locator. Present only for Snowflake workspaces. */
@@ -13079,11 +13138,26 @@ type components = {
        * @enum {string}
        */
       state: 'active' | 'deactivated';
+      /**
+       * @description Last observed workspace use (backend login or Storage job), ISO 8601 with a `+hhmm` offset. May be a seeded floor for an unused workspace; null when unknown.
+       * @example 2017-02-13T12:01:05+0100
+       */
+      lastActivityAt: string | null;
+      /**
+       * @description Projected date retention would warn this workspace, ISO 8601 with a `+hhmm` offset. It can move when the workspace is used; null when retention does not apply or activity has not been synced recently.
+       * @example 2017-02-13T12:01:05+0100
+       */
+      warnAt: string | null;
       /**
        * @description When retention will deactivate this unused workspace, ISO 8601 with a `+hhmm` offset. Null unless the owner has been warned. Connecting to the workspace cancels it. Can lie in the past while retention only notifies.
        * @example 2017-02-13T12:01:05+0100
        */
       deactivateAt: string | null;
+      /**
+       * @description When retention will delete this deactivated workspace, ISO 8601 with a `+hhmm` offset. Null unless the workspace is deactivated. Support can reactivate it until then.
+       * @example 2017-02-13T12:01:05+0100
+       */
+      deleteAt: string | null;
     };
     ConfigurationMetadataResponse: {
       /**
@@ -14306,6 +14380,24 @@ type components = {
       metadata?: components['schemas']['MetadataItemResponse'][];
       columnMetadata?: components['schemas']['TableColumnMetadataResponse'];
     };
+    SharingTargetsListResponse: {
+      /** @description Projects of the organization a bucket can be shared to, including the caller's own project. */
+      projects: {
+        /** @example 123 */
+        id: number;
+        /** @example Project name */
+        name: string;
+      }[];
+      /** @description Admins of the organization's projects a bucket can be shared to, sorted by email. */
+      users: {
+        /** @example 5 */
+        id: number;
+        /** @example Jan Developer */
+        name: string;
+        /** @example jan.dev@keboola.com */
+        email: string;
+      }[];
+    };
     /** @description Table snapshot with the snapshotted table settings. */
     SnapshotDetailResponse: {
       /**
@@ -14636,7 +14728,7 @@ type components = {
        */
       includeInternalTimestamp: boolean;
       /**
-       * @description Type of the file created in File Storage. Parquet is supported on Snowflake only.
+       * @description Type of the file created in File Storage. Parquet is supported on Snowflake only. Parquet writes `TIMESTAMP_LTZ` and `TIMESTAMP_TZ` columns as UTC wall-clock `TIMESTAMP_NTZ`; the original offset is not kept.
        * @default csv
        * @enum {string}
        */
@@ -15429,13 +15521,13 @@ type components = {
         schema: string | null;
         /** @description Warehouse name (for Snowflake). */
         warehouse: string | null;
-        /** @description Username for connecting to the workspace. Empty when loginType is "none". Absent for a BigQuery workspace, whose key is in `credentials`. */
+        /** @description Username for connecting to the workspace. Empty when loginType is "none" or "governed". Absent for a BigQuery workspace, whose key is in `credentials`. */
         user?: string;
         /**
-         * @description Login type used for the connection. Value "none" means the workspace has no direct credentials and is intended for QueryService. Create direct connection credentials later using the workspace credentials endpoint.
+         * @description Login type used for the connection. Value "none" means the workspace has no direct credentials and is intended for QueryService. Value "governed" means the same, and in addition only QueryService can obtain credentials for it. Create direct connection credentials later using the workspace credentials endpoint.
          * @enum {string}
          */
-        loginType: 'default' | 'snowflake-legacy-service' | 'snowflake-person-sso' | 'snowflake-person-keypair' | 'snowflake-service-keypair' | 'none';
+        loginType: 'default' | 'snowflake-legacy-service' | 'snowflake-person-sso' | 'snowflake-person-keypair' | 'snowflake-service-keypair' | 'none' | 'governed';
         /** @description Indicates if SSO login is available. */
         ssoLoginAvailable: boolean;
         /** @description Snowflake account locator. Present only for Snowflake workspaces. */
@@ -15504,11 +15596,26 @@ type components = {
        * @enum {string}
        */
       state: 'active' | 'deactivated';
+      /**
+       * @description Last observed workspace use (backend login or Storage job), ISO 8601 with a `+hhmm` offset. May be a seeded floor for an unused workspace; null when unknown.
+       * @example 2017-02-13T12:01:05+0100
+       */
+      lastActivityAt: string | null;
+      /**
+       * @description Projected date retention would warn this workspace, ISO 8601 with a `+hhmm` offset. It can move when the workspace is used; null when retention does not apply or activity has not been synced recently.
+       * @example 2017-02-13T12:01:05+0100
+       */
+      warnAt: string | null;
       /**
        * @description When retention will deactivate this unused workspace, ISO 8601 with a `+hhmm` offset. Null unless the owner has been warned. Connecting to the workspace cancels it. Can lie in the past while retention only notifies.
        * @example 2017-02-13T12:01:05+0100
        */
       deactivateAt: string | null;
+      /**
+       * @description When retention will delete this deactivated workspace, ISO 8601 with a `+hhmm` offset. Null unless the workspace is deactivated. Support can reactivate it until then.
+       * @example 2017-02-13T12:01:05+0100
+       */
+      deleteAt: string | null;
     };
     ExecuteQueryResponse: {
       /** @description Response status. Possible values: ok or error. */
@@ -18448,7 +18555,7 @@ interface operations {
           'application/json': components['schemas']['JobResponse'];
         };
       };
-      /** @description Validation error, the table already exists, the backend does not support the operation (`storage.driver.unsupportedOperation`), or time travel is not available. */
+      /** @description Validation error, the table already exists, the backend does not support the operation (`storage.driver.unsupportedOperation`), time travel is not available, or the source workspace is deactivated (`workspace.workspaceDeactivated`). */
       400: {
         headers: {
           [name: string]: unknown;
@@ -18503,7 +18610,7 @@ interface operations {
           'application/json': components['schemas']['JobResponse'];
         };
       };
-      /** @description Validation error, the table already exists, the backend does not support the operation (`storage.driver.unsupportedOperation`), or time travel is not available. */
+      /** @description Validation error, the table already exists, the backend does not support the operation (`storage.driver.unsupportedOperation`), time travel is not available, or the source workspace is deactivated (`workspace.workspaceDeactivated`). */
       400: {
         headers: {
           [name: string]: unknown;
@@ -23305,7 +23412,8 @@ interface operations {
            *         "readOnlyStorageAccess": false,
            *         "platformUsageType": null,
            *         "state": "active",
-           *         "deactivateAt": null
+           *         "deactivateAt": null,
+           *         "deleteAt": null
            *       }
            *     ]
            */
@@ -23394,7 +23502,8 @@ interface operations {
            *       "readOnlyStorageAccess": true,
            *       "platformUsageType": "user",
            *       "state": "active",
-           *       "deactivateAt": null
+           *       "deactivateAt": null,
+           *       "deleteAt": null
            *     }
            */
           'application/json': components['schemas']['WorkspaceCreatedResponse'];
@@ -23515,7 +23624,8 @@ interface operations {
            *         "readOnlyStorageAccess": false,
            *         "platformUsageType": null,
            *         "state": "active",
-           *         "deactivateAt": null
+           *         "deactivateAt": null,
+           *         "deleteAt": null
            *       }
            *     ]
            */
@@ -23603,7 +23713,8 @@ interface operations {
            *       "readOnlyStorageAccess": true,
            *       "platformUsageType": "user",
            *       "state": "active",
-           *       "deactivateAt": null
+           *       "deactivateAt": null,
+           *       "deleteAt": null
            *     }
            */
           'application/json': components['schemas']['WorkspaceCreatedResponse'];
@@ -29051,6 +29162,33 @@ interface operations {
       };
     };
   };
+  'get_/v2/storage/sharing-targets::SharingTargetsListAction': {
+    parameters: {
+      query?: never;
+      header?: never;
+      path?: never;
+      cookie?: never;
+    };
+    requestBody?: never;
+    responses: {
+      /** @description Projects and users a bucket can be shared to. */
+      200: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          'application/json': components['schemas']['SharingTargetsListResponse'];
+        };
+      };
+      /** @description The token is not an admin token, or its admin has neither the `share` role in the project nor organization membership (`accessDenied`). */
+      403: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+    };
+  };
   'get_/v2/storage/snapshots/{snapshotId}::SnapshotDetailAction': {
     parameters: {
       query?: never;
@@ -30562,7 +30700,7 @@ interface operations {
           'application/json': components['schemas']['JobResponse'];
         };
       };
-      /** @description Validation error, import into an alias table, import from a reader workspace, or the backend does not support the operation (`storage.driver.unsupportedOperation`). */
+      /** @description Validation error, import into an alias table, import from a reader workspace or a deactivated one (`workspace.workspaceDeactivated`), or the backend does not support the operation (`storage.driver.unsupportedOperation`). */
       400: {
         headers: {
           [name: string]: unknown;
@@ -30658,7 +30796,7 @@ interface operations {
           'application/json': components['schemas']['JobResponse'];
         };
       };
-      /** @description Validation error, import into an alias table, import from a reader workspace, or the backend does not support the operation (`storage.driver.unsupportedOperation`). */
+      /** @description Validation error, import into an alias table, import from a reader workspace or a deactivated one (`workspace.workspaceDeactivated`), or the backend does not support the operation (`storage.driver.unsupportedOperation`). */
       400: {
         headers: {
           [name: string]: unknown;
@@ -35422,6 +35560,13 @@ interface operations {
         };
         content?: never;
       };
+      /** @description Returned when the workspace is governed (login type `governed`): no login can be installed on it (`storage.workspace.governedOperationNotAllowed`). */
+      403: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
       /** @description Returned when the workspace is not found (`workspace.workspaceNotFound`). */
       404: {
         headers: {
@@ -35471,6 +35616,13 @@ interface operations {
         };
         content?: never;
       };
+      /** @description Returned when the workspace is governed (login type `governed`): no login can be installed on it (`storage.workspace.governedOperationNotAllowed`). */
+      403: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
       /** @description Returned when the workspace is not found (`workspace.workspaceNotFound`). */
       404: {
         headers: {
@@ -35522,6 +35674,13 @@ interface operations {
         };
         content?: never;
       };
+      /** @description Returned when the workspace is governed (login type `governed`): no login can be installed on it (`storage.workspace.governedOperationNotAllowed`). */
+      403: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
       /** @description Returned when the workspace is not found (`workspace.workspaceNotFound`). */
       404: {
         headers: {
@@ -35572,6 +35731,13 @@ interface operations {
         };
         content?: never;
       };
+      /** @description Returned when the workspace is governed (login type `governed`): no login can be installed on it (`storage.workspace.governedOperationNotAllowed`). */
+      403: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
       /** @description Returned when the workspace is not found (`workspace.workspaceNotFound`). */
       404: {
         headers: {
@@ -35884,7 +36050,8 @@ interface operations {
            *         "readOnlyStorageAccess": true,
            *         "platformUsageType": "user",
            *         "state": "active",
-           *         "deactivateAt": null
+           *         "deactivateAt": null,
+           *         "deleteAt": null
            *       }
            *     ]
            */
@@ -35973,7 +36140,8 @@ interface operations {
            *       "readOnlyStorageAccess": true,
            *       "platformUsageType": "user",
            *       "state": "active",
-           *       "deactivateAt": null
+           *       "deactivateAt": null,
+           *       "deleteAt": null
            *     }
            */
           'application/json': components['schemas']['WorkspaceCreatedResponse'];
@@ -36087,7 +36255,8 @@ interface operations {
            *         "readOnlyStorageAccess": true,
            *         "platformUsageType": "user",
            *         "state": "active",
-           *         "deactivateAt": null
+           *         "deactivateAt": null,
+           *         "deleteAt": null
            *       }
            *     ]
            */
@@ -36175,7 +36344,8 @@ interface operations {
            *       "readOnlyStorageAccess": true,
            *       "platformUsageType": "user",
            *       "state": "active",
-           *       "deactivateAt": null
+           *       "deactivateAt": null,
+           *       "deleteAt": null
            *     }
            */
           'application/json': components['schemas']['WorkspaceCreatedResponse'];
@@ -36295,7 +36465,8 @@ interface operations {
            *       "readOnlyStorageAccess": true,
            *       "platformUsageType": "user",
            *       "state": "active",
-           *       "deactivateAt": null
+           *       "deactivateAt": null,
+           *       "deleteAt": null
            *     }
            */
           'application/json': components['schemas']['WorkspaceDetailResponse'];
@@ -36448,7 +36619,8 @@ interface operations {
            *       "readOnlyStorageAccess": true,
            *       "platformUsageType": "user",
            *       "state": "active",
-           *       "deactivateAt": null
+           *       "deactivateAt": null,
+           *       "deleteAt": null
            *     }
            */
           'application/json': components['schemas']['WorkspaceDetailResponse'];
@@ -37175,6 +37347,13 @@ interface operations {
         };
         content?: never;
       };
+      /** @description Returned when the workspace is governed (login type `governed`), which has no login of its own. */
+      403: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
       /** @description Returned when the workspace is not found (`workspace.workspaceNotFound`). */
       404: {
         headers: {
@@ -37246,7 +37425,8 @@ interface operations {
            *       "readOnlyStorageAccess": true,
            *       "platformUsageType": "user",
            *       "state": "active",
-           *       "deactivateAt": null
+           *       "deactivateAt": null,
+           *       "deleteAt": null
            *     }
            */
           'application/json': components['schemas']['WorkspaceDetailResponseWithSecret'];
@@ -37259,6 +37439,13 @@ interface operations {
         };
         content?: never;
       };
+      /** @description Returned when the workspace is governed (login type `governed`) and the caller is not Query Service (`storage.workspace.governedOperationNotAllowed`). */
+      403: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
       /** @description Returned when the workspace is not found (`workspace.workspaceNotFound`). */
       404: {
         headers: {
@@ -37336,7 +37523,8 @@ interface operations {
            *       "readOnlyStorageAccess": true,
            *       "platformUsageType": "user",
            *       "state": "active",
-           *       "deactivateAt": null
+           *       "deactivateAt": null,
+           *       "deleteAt": null
            *     }
            */
           'application/json': components['schemas']['WorkspaceDetailResponseWithSecret'];
@@ -37349,6 +37537,13 @@ interface operations {
         };
         content?: never;
       };
+      /** @description Returned when the workspace is governed (login type `governed`) and the caller is not Query Service (`storage.workspace.governedOperationNotAllowed`). */
+      403: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
       /** @description Returned when the workspace is not found (`workspace.workspaceNotFound`). */
       404: {
         headers: {
@@ -37427,12 +37622,20 @@ interface operations {
            *       "readOnlyStorageAccess": true,
            *       "platformUsageType": "user",
            *       "state": "active",
-           *       "deactivateAt": null
+           *       "deactivateAt": null,
+           *       "deleteAt": null
            *     }
            */
           'application/json': components['schemas']['WorkspaceDetailResponseWithSecret'];
         };
       };
+      /** @description Returned when the workspace is governed (login type `governed`) and the caller is not Query Service (`storage.workspace.governedOperationNotAllowed`). */
+      403: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
       /** @description Returned when the workspace (`workspace.workspaceNotFound`) or the credentials (`workspace.workspaceCredentialNotFound`) are not found. */
       404: {
         headers: {
@@ -37470,6 +37673,13 @@ interface operations {
         };
         content?: never;
       };
+      /** @description Returned when the workspace is governed (login type `governed`) and the caller is not Query Service (`storage.workspace.governedOperationNotAllowed`). */
+      403: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
       /** @description Returned when the workspace (`workspace.workspaceNotFound`) or the credentials (`workspace.workspaceCredentialNotFound`) are not found. */
       404: {
         headers: {
@@ -37547,12 +37757,20 @@ interface operations {
            *       "readOnlyStorageAccess": true,
            *       "platformUsageType": "user",
            *       "state": "active",
-           *       "deactivateAt": null
+           *       "deactivateAt": null,
+           *       "deleteAt": null
            *     }
            */
           'application/json': components['schemas']['WorkspaceDetailResponseWithSecret'];
         };
       };
+      /** @description Returned when the workspace is governed (login type `governed`) and the caller is not Query Service (`storage.workspace.governedOperationNotAllowed`). */
+      403: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
       /** @description Returned when the workspace (`workspace.workspaceNotFound`) or the credentials (`workspace.workspaceCredentialNotFound`) are not found. */
       404: {
         headers: {
@@ -37589,6 +37807,13 @@ interface operations {
         };
         content?: never;
       };
+      /** @description Returned when the workspace is governed (login type `governed`) and the caller is not Query Service (`storage.workspace.governedOperationNotAllowed`). */
+      403: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
       /** @description Returned when the workspace (`workspace.workspaceNotFound`) or the credentials (`workspace.workspaceCredentialNotFound`) are not found. */
       404: {
         headers: {
@@ -37643,7 +37868,7 @@ interface operations {
           'application/json': components['schemas']['JobResponse'];
         };
       };
-      /** @description Returned when the table is not found in the workspace or the table cannot be exported (`storage.workspace.cannotExportTableFromWorkspace`), or the workspace backend is not supported (`workspace.backendNotSupported`). */
+      /** @description Returned when the table is not found in the workspace or the table cannot be exported (`storage.workspace.cannotExportTableFromWorkspace`), the workspace backend is not supported (`workspace.backendNotSupported`), or the workspace is deactivated (`workspace.workspaceDeactivated`). */
       400: {
         headers: {
           [name: string]: unknown;
@@ -37696,7 +37921,7 @@ interface operations {
           'application/json': components['schemas']['JobResponse'];
         };
       };
-      /** @description Returned when the table is not found in the workspace or the table cannot be exported (`storage.workspace.cannotExportTableFromWorkspace`), or the workspace backend is not supported (`workspace.backendNotSupported`). */
+      /** @description Returned when the table is not found in the workspace or the table cannot be exported (`storage.workspace.cannotExportTableFromWorkspace`), the workspace backend is not supported (`workspace.backendNotSupported`), or the workspace is deactivated (`workspace.workspaceDeactivated`). */
       400: {
         headers: {
           [name: string]: unknown;
@@ -38004,6 +38229,13 @@ interface operations {
         };
         content?: never;
       };
+      /** @description Returned when the workspace is governed (login type `governed`): it can be read only through Query Service (`storage.workspace.governedOperationNotAllowed`). */
+      403: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
       /** @description Returned when the workspace is not found (`workspace.workspaceNotFound`). */
       404: {
         headers: {
@@ -38507,6 +38739,10 @@ type WorkspaceInputMappingLoadPreviewInput = WorkspaceInputMappingLoadPreviewPat
 type Workspace = OpenapiReturnType<paths['/v2/storage/branch/{branchId}/workspaces/{workspaceId}']['get']> & {
   /** When retention deletes a deactivated workspace (ISO 8601); `null` or absent otherwise. */
   deleteAt?: string | null;
+  /** Last observed use of the workspace (ISO 8601); `null` or absent when unknown. */
+  lastActivityAt?: string | null;
+  /** When retention will warn the owner (ISO 8601); `null` or absent when it will not. */
+  warnAt?: string | null;
 };
 /** The spec's `connection` union: a SQL backend, or a file (ABS) container. */
 type WorkspaceConnection = Workspace['connection'];
@@ -39049,5 +39285,5 @@ type FetchClient<Paths extends OpenapiPaths<Paths>> = {
 };
 declare const createOpenapiFetchClient: <Paths extends OpenapiPaths<Paths>>(defaultOptions: CreateFetchClientOptions) => FetchClient<Paths>;
 //#endregion
-export { UnloadWorkspaceInput as $, PullTableAsyncPath as $n, ManagementSessionMintError as $r, SaveBucketMetadataBody as $t, BatchRestoreConfigurationsResult as A, DeleteTableRowsPath as An, DevBranch as Ar, BucketIncludes as At, DeleteWorkspaceObjectInput as B, GetDataPreviewSchemaQuery as Bn, CreateJobBody as Br, CreatedBucket as Bt, isValidationError as C, CreateTableDefinitionSchemaBody as Cn, UpdateTableDefinitionPath as Cr, Bucket as Ct, BatchConfigurationFailure as D, DeleteTablePath as Dn, WhereFilters as Dr, BucketDetailIncludes as Dt, isStorageJobError as E, DeleteTableMetadataPath as En, UpdateTablePath as Er, BucketDetailInclude as Et, JobOperation as F, ExportAsyncPath as Fn, UpdateDevBranchPath as Fr, BucketWith as Ft, GetWorkspacePath as G, GetTablesQuery as Gn, QueueJob as Gr, GetBucketInput as Gt, DeleteWorkspacePath as H, GetTablePath as Hn, KillJobPath as Hr, DeleteBucketInput as Ht, JobUnion as I, FilterOperator as In, components as Ir, CreateBucketBody as It, ResetWorkspacePassword as J, ImportAsyncPath as Jn, SearchGroupedJobsQuery as Jr, GetBucketQuery as Jt, GetWorkspaceSaml2LoginPath as K, GetTablesSchemaQuery as Kn, QueueJobStatus as Kr, GetBucketOwnerInput as Kt, StorageJobStatus as L, GetDataPreviewInput as Ln, paths as Lr, CreateBucketInput as Lt, GetJobsQuery as M, DeleteTableSchemaQuery as Mn, SaveDevBranchMetadataPath as Mr, BucketOwner as Mt, GetJobsSchemaQuery as N, DeleteTablesInput as Nn, UpdateDevBranchBody as Nr, BucketShared as Nt, BatchConfigurationsOutcome as O, DeleteTableRows as On, CreateDevBranchBody as Or, BucketDetailWith as Ot, Job as P, ExportAsyncInput as Pn, UpdateDevBranchInput as Pr, BucketStage as Pt, SetWorkspacePublicKeyPath as Q, PullTableAsyncInput as Qn, components$1 as Qr, GetBucketsSchemaQuery as Qt, SucceededJob as R, GetDataPreviewPath as Rn, QueueJobError as Rr, CreateBucketPath as Rt, formatValidationIssues as S, CreateTableDefinitionPath as Sn, UpdateTableDefinitionInput as Sr, LoginType as St, StorageJobError as T, DeleteTableMetadataInput as Tn, UpdateTableInput as Tr, BucketDetail as Tt, DeleteWorkspacesInput as U, GetTablesInput as Un, OrchestrationRerunPlan as Ur, DeleteBucketMetadataInput as Ut, DeleteWorkspaceObjectPath as V, GetTableInput as Vn, GetQueueJobPath as Vr, DeleteBucketAsyncInput as Vt, GetWorkspaceObjectsPath as W, GetTablesPath as Wn, OrchestrationRerunPlanPath as Wr, DeleteBucketSchemaQuery as Wt, SetWorkspacePublicInput as X, PrevieData as Xn, SearchJobsQuery as Xr, GetBucketsPath as Xt, ResetWorkspacePasswordPath as Y, Metadata as Yn, SearchGroupedJobsResponse as Yr, GetBucketsInput as Yt, SetWorkspacePublicKeyBody as Z, PreviewData as Zn, SearchJobsResponse as Zr, GetBucketsQuery as Zt, isAbortError as _, CreateTableAsyncInput as _n, TableIncludes as _r, CreateConfigurationWorkspaceInput as _t, OpenapiFormDataType as a, HttpMethod as ai, UpdateBucketOwnerInput as an, SetAliasTableFilterBody as ar, WorkspaceInputMappingLoadPreviewBody as at, isTimeoutError as b, CreateTableDefinitionBody as bn, UpdateTableBody as br, CreatedWorkspace as bt, OpenapiQueryType as c, ApiError as ci, CreateAliasTableBody as cn, SetAliasTableFilterSchemaBody as cr, WorkspaceInputMappingLoadPreviewQuery as ct, WithIncludes as d, CreateAliasTableSchemaBody as dn, TableDetail as dr, WorkspaceObject as dt, ManagementClientAuthError as ei, SaveBucketMetadataInput as en, PullTableAsyncSchemaPath as er, UnloadWorkspacePath as et, UploadProgress as f, CreateTableAsyncBody as fn, TableExportAsyncBody as fr, WorkspaceSaml2Login as ft, FetchClientError as g, CreateTableAsyncFromWorkspaceBody as gn, TableInclude as gr, CreateConfigurationWorkspaceBody as gt, HttpHeader as h, CreateTableAsyncFromTimeTravelBody as hn, TableImportAsyncSchemaBody as hr, ConfigurationUseCaseType as ht, OpenapiExcludeQueryType as i, BaseUrl as ii, UpdateBucketOwnerBody as in, SaveTableMetadataSchemaBody as ir, WorkspaceFileConnection as it, GetJobPath as j, DeleteTableRowsSchemaQuery as jn, SaveDevBranchMetadataInput as jr, BucketMetadata as jt, BatchPurgeConfigurationsResult as k, DeleteTableRowsInput as kn, DeleteDevBranchMetadataPath as kr, BucketInclude as kt, OpenapiReturnType as l, CreateAliasTableInput as ln, Table as lr, WorkspaceInputMappingLoadPreviewResponse as lt, HttpContentType as m, CreateTableAsyncFromSnapshotBody as mn, TableImportAsyncBody as mr, BackendType as mt, ArrayElement as n, isHtmlResponseError as ni, UpdateBucketBody as nn, SaveTableMetadataInput as nr, Workspace as nt, OpenapiIncludeQueryType as o, MiddlewareFn as oi, UpdateBucketOwnerPath as on, SetAliasTableFilterInput as or, WorkspaceInputMappingLoadPreviewInput as ot, createGenericFetchClient as p, CreateTableAsyncFromFileBody as pn, TableExportAsyncSchemaBody as pr, WorkspaceSqlConnection as pt, GetWorkspacesPath as q, ImportAsyncInput as qn, SearchAllJobsQuery as qr, GetBucketPath as qt, OpenapiBodyType as r, ApiResponse as ri, UpdateBucketInput as rn, SaveTableMetadataPath as rr, WorkspaceConnection as rt, OpenapiPathType as s, ValidateStatusFn as si, UpdateBucketPath as sn, SetAliasTableFilterPath as sr, WorkspaceInputMappingLoadPreviewPath as st, createOpenapiFetchClient as t, HtmlResponseError as ti, SaveBucketMetadataPath as tn, SaveMetadataBody as tr, UnloadWorkspaceQuery as tt, WithExcludes as u, CreateAliasTablePath as un, TableDefinitionColumn as ur, WorkspaceLoginType as ut, isApiError as v, CreateTableAsyncPath as vn, TableMetadataResponse as vr, CreateConfigurationWorkspacePath as vt, parseOrThrow as w, DeleteTableInput as wn, UpdateTableDefinitionSchemaBody as wr, BucketBackend as wt, ValidationError as x, CreateTableDefinitionInput as xn, UpdateTableDefinitionBody as xr, GetConfigurationWorkspacesPath as xt, isFetchClientError as y, CreateTableAsyncSchemaBody as yn, TableWith as yr, CreateConfigurationWorkspaceSchemaBody as yt, DeleteWorkspaceObjectBody as z, GetDataPreviewQuery as zn, isQueueJobError as zr, CreateBucketSchemaBody as zt };
-//# sourceMappingURL=index-XaPb6unB.d.cts.map
+export { UnloadWorkspaceInput as $, PullTableAsyncPath as $n, ManagementSessionMintError as $r, SaveBucketMetadataBody as $t, BatchRestoreConfigurationsResult as A, DeleteTableRowsPath as An, DevBranch as Ar, BucketIncludes as At, DeleteWorkspaceObjectInput as B, GetDataPreviewSchemaQuery as Bn, CreateJobBody as Br, CreatedBucket as Bt, isValidationError as C, CreateTableDefinitionSchemaBody as Cn, UpdateTableDefinitionPath as Cr, Bucket as Ct, BatchConfigurationFailure as D, DeleteTablePath as Dn, WhereFilters as Dr, BucketDetailIncludes as Dt, isStorageJobError as E, DeleteTableMetadataPath as En, UpdateTablePath as Er, BucketDetailInclude as Et, JobOperation as F, ExportAsyncPath as Fn, UpdateDevBranchPath as Fr, BucketWith as Ft, GetWorkspacePath as G, GetTablesQuery as Gn, QueueJob as Gr, GetBucketInput as Gt, DeleteWorkspacePath as H, GetTablePath as Hn, KillJobPath as Hr, DeleteBucketInput as Ht, JobUnion as I, FilterOperator as In, components as Ir, CreateBucketBody as It, ResetWorkspacePassword as J, ImportAsyncPath as Jn, SearchGroupedJobsQuery as Jr, GetBucketQuery as Jt, GetWorkspaceSaml2LoginPath as K, GetTablesSchemaQuery as Kn, QueueJobStatus as Kr, GetBucketOwnerInput as Kt, StorageJobStatus as L, GetDataPreviewInput as Ln, paths as Lr, CreateBucketInput as Lt, GetJobsQuery as M, DeleteTableSchemaQuery as Mn, SaveDevBranchMetadataPath as Mr, BucketOwner as Mt, GetJobsSchemaQuery as N, DeleteTablesInput as Nn, UpdateDevBranchBody as Nr, BucketShared as Nt, BatchConfigurationsOutcome as O, DeleteTableRows as On, CreateDevBranchBody as Or, BucketDetailWith as Ot, Job as P, ExportAsyncInput as Pn, UpdateDevBranchInput as Pr, BucketStage as Pt, SetWorkspacePublicKeyPath as Q, PullTableAsyncInput as Qn, components$1 as Qr, GetBucketsSchemaQuery as Qt, SucceededJob as R, GetDataPreviewPath as Rn, QueueJobError as Rr, CreateBucketPath as Rt, formatValidationIssues as S, CreateTableDefinitionPath as Sn, UpdateTableDefinitionInput as Sr, LoginType as St, StorageJobError as T, DeleteTableMetadataInput as Tn, UpdateTableInput as Tr, BucketDetail as Tt, DeleteWorkspacesInput as U, GetTablesInput as Un, OrchestrationRerunPlan as Ur, DeleteBucketMetadataInput as Ut, DeleteWorkspaceObjectPath as V, GetTableInput as Vn, GetQueueJobPath as Vr, DeleteBucketAsyncInput as Vt, GetWorkspaceObjectsPath as W, GetTablesPath as Wn, OrchestrationRerunPlanPath as Wr, DeleteBucketSchemaQuery as Wt, SetWorkspacePublicInput as X, PrevieData as Xn, SearchJobsQuery as Xr, GetBucketsPath as Xt, ResetWorkspacePasswordPath as Y, Metadata as Yn, SearchGroupedJobsResponse as Yr, GetBucketsInput as Yt, SetWorkspacePublicKeyBody as Z, PreviewData as Zn, SearchJobsResponse as Zr, GetBucketsQuery as Zt, isAbortError as _, CreateTableAsyncInput as _n, TableIncludes as _r, CreateConfigurationWorkspaceInput as _t, OpenapiFormDataType as a, isHtmlResponseError as ai, UpdateBucketOwnerInput as an, SetAliasTableFilterBody as ar, WorkspaceInputMappingLoadPreviewBody as at, isTimeoutError as b, CreateTableDefinitionBody as bn, UpdateTableBody as br, CreatedWorkspace as bt, OpenapiQueryType as c, HttpMethod as ci, CreateAliasTableBody as cn, SetAliasTableFilterSchemaBody as cr, WorkspaceInputMappingLoadPreviewQuery as ct, WithIncludes as d, ApiError as di, CreateAliasTableSchemaBody as dn, TableDetail as dr, WorkspaceObject as dt, ManagementClientAuthError as ei, SaveBucketMetadataInput as en, PullTableAsyncSchemaPath as er, UnloadWorkspacePath as et, UploadProgress as f, CreateTableAsyncBody as fn, TableExportAsyncBody as fr, WorkspaceSaml2Login as ft, FetchClientError as g, CreateTableAsyncFromWorkspaceBody as gn, TableInclude as gr, CreateConfigurationWorkspaceBody as gt, HttpHeader as h, CreateTableAsyncFromTimeTravelBody as hn, TableImportAsyncSchemaBody as hr, ConfigurationUseCaseType as ht, OpenapiExcludeQueryType as i, HtmlResponseError as ii, UpdateBucketOwnerBody as in, SaveTableMetadataSchemaBody as ir, WorkspaceFileConnection as it, GetJobPath as j, DeleteTableRowsSchemaQuery as jn, SaveDevBranchMetadataInput as jr, BucketMetadata as jt, BatchPurgeConfigurationsResult as k, DeleteTableRowsInput as kn, DeleteDevBranchMetadataPath as kr, BucketInclude as kt, OpenapiReturnType as l, MiddlewareFn as li, CreateAliasTableInput as ln, Table as lr, WorkspaceInputMappingLoadPreviewResponse as lt, HttpContentType as m, CreateTableAsyncFromSnapshotBody as mn, TableImportAsyncBody as mr, BackendType as mt, ArrayElement as n, manageErrorCode as ni, UpdateBucketBody as nn, SaveTableMetadataInput as nr, Workspace as nt, OpenapiIncludeQueryType as o, ApiResponse as oi, UpdateBucketOwnerPath as on, SetAliasTableFilterInput as or, WorkspaceInputMappingLoadPreviewInput as ot, createGenericFetchClient as p, CreateTableAsyncFromFileBody as pn, TableExportAsyncSchemaBody as pr, WorkspaceSqlConnection as pt, GetWorkspacesPath as q, ImportAsyncInput as qn, SearchAllJobsQuery as qr, GetBucketPath as qt, OpenapiBodyType as r, ManageErrorCode as ri, UpdateBucketInput as rn, SaveTableMetadataPath as rr, WorkspaceConnection as rt, OpenapiPathType as s, BaseUrl as si, UpdateBucketPath as sn, SetAliasTableFilterPath as sr, WorkspaceInputMappingLoadPreviewPath as st, createOpenapiFetchClient as t, isManageError as ti, SaveBucketMetadataPath as tn, SaveMetadataBody as tr, UnloadWorkspaceQuery as tt, WithExcludes as u, ValidateStatusFn as ui, CreateAliasTablePath as un, TableDefinitionColumn as ur, WorkspaceLoginType as ut, isApiError as v, CreateTableAsyncPath as vn, TableMetadataResponse as vr, CreateConfigurationWorkspacePath as vt, parseOrThrow as w, DeleteTableInput as wn, UpdateTableDefinitionSchemaBody as wr, BucketBackend as wt, ValidationError as x, CreateTableDefinitionInput as xn, UpdateTableDefinitionBody as xr, GetConfigurationWorkspacesPath as xt, isFetchClientError as y, CreateTableAsyncSchemaBody as yn, TableWith as yr, CreateConfigurationWorkspaceSchemaBody as yt, DeleteWorkspaceObjectBody as z, GetDataPreviewQuery as zn, isQueueJobError as zr, CreateBucketSchemaBody as zt };
+//# sourceMappingURL=index-BPMr8PQJ.d.ts.map