@oore/client 0.1.0 → 0.3.0

package/dist/generated/types.gen.d.ts

@@ -46,6 +46,46 @@ export type ApiTokenSummary = {
     prefix: string;
     role: UserRole;
 };
+/**
+ * Where an App Store Connect upload goes once Apple finishes processing it.
+ */
+export type AppStoreDestination = 'testflight' | 'app_store';
+/**
+ * App Store publishing settings for a pipeline, stored as the `app_store`
+ * publish target. Uploads use the App Store Connect API key from the
+ * pipeline's iOS signing settings and require the `app_store` export method.
+ */
+export type AppStorePublishConfig = {
+    destination?: AppStoreDestination;
+    enabled: boolean;
+    /**
+     * Release the approved version with Apple's seven-day phased release.
+     */
+    phased_release?: boolean;
+    /**
+     * TestFlight "What to Test" or App Store "What's New", per locale.
+     */
+    release_notes: Array<AppStoreReleaseNote>;
+    /**
+     * Submit the App Store version for review once the build is attached.
+     */
+    submit_for_review?: boolean;
+    /**
+     * TestFlight group names. Used when `destination` is `testflight`.
+     */
+    testflight_groups: Array<string>;
+    /**
+     * Export compliance answer set on each processed build.
+     */
+    uses_non_exempt_encryption?: boolean;
+};
+/**
+ * Release notes for one App Store Connect locale, such as `en-US`.
+ */
+export type AppStoreReleaseNote = {
+    locale: string;
+    whats_new: string;
+};
 export type AppendBuildLogsRequest = {
     chunks: Array<BuildLogChunk>;
 };
@@ -313,17 +353,22 @@ export type CreateNotificationChannelRequest = {
     channel_type: NotificationChannelType;
     enabled?: boolean;
     /**
-     * Terminal build statuses to notify on. Empty or omitted means all terminal events.
+     * Events to notify on. Empty or omitted means all events.
      */
     events?: Array<string>;
     name: string;
     /**
-     * HMAC secret for signing webhook payloads (webhook only, optional).
+     * Scope the channel to one project. Omit for an instance-wide channel.
+     */
+    project_id?: string | null;
+    /**
+     * Webhook: HMAC secret for signing payloads. Slack: bot token with
+     * `users:read.email`, used to mention the triggering user. Optional.
      */
     secret?: string | null;
     smtp_config?: null | SmtpConfig;
     /**
-     * Webhook/Mattermost incoming webhook URL (required for webhook/mattermost).
+     * Incoming webhook URL (required for webhook, mattermost and slack).
      */
     url?: string | null;
 };
@@ -348,6 +393,22 @@ export type CreateProjectRequest = {
 export type CreateProjectResponse = {
     project: Project;
 };
+export type CreateReleaseRequest = {
+    artifact_id?: string | null;
+    build_id: string;
+    package_name?: string | null;
+    policy?: null | ReleasePolicy;
+    reason?: string | null;
+    /**
+     * Initial fraction; defaults to the first policy step.
+     */
+    rollout_fraction?: number | null;
+    state?: null | ReleaseState;
+    store: ReleaseStore;
+    track: string;
+    version_code?: number | null;
+    version_name?: string | null;
+};
 export type CreateScopedDownloadTokenRequest = {
     /**
      * If true, token is consumed after first download.
@@ -366,6 +427,10 @@ export type CreateScopedDownloadTokenResponse = {
     single_use: boolean;
     token: string;
 };
+export type CreateSecretRequest = {
+    name: string;
+    value: string;
+};
 export type DeleteNotificationChannelResponse = {
     deleted: boolean;
 };
@@ -473,6 +538,49 @@ export type GitLabStartRequest = {
     client_secret?: string | null;
     host_url: string;
 };
+/**
+ * Per-pipeline Google Play upload settings. Credentials are referenced by
+ * secret name and never stored here.
+ */
+export type GooglePlayPublishConfig = {
+    /**
+     * Create a draft release instead of rolling out.
+     */
+    draft?: boolean;
+    enabled?: boolean;
+    /**
+     * In-app update priority, 0 to 5.
+     */
+    in_app_update_priority?: number | null;
+    /**
+     * Expected application id. When omitted, the AAB's package is used.
+     */
+    package_name?: string | null;
+    release_notes?: GooglePlayReleaseNotesSource;
+    release_notes_dir?: string | null;
+    release_notes_locale?: string;
+    /**
+     * Initial staged rollout, 0 < percent <= 100. Omitted means 100.
+     */
+    rollout_percent?: number | null;
+    rollout_policy?: null | ReleasePolicy;
+    /**
+     * Name of the secret holding the service account JSON key.
+     */
+    service_account_secret: string;
+    /**
+     * `internal`, `closed`, `open`, `production`, or a custom track name.
+     */
+    track: string;
+    /**
+     * Upload R8/ProGuard `mapping.txt` when the build produced one.
+     */
+    upload_mapping?: boolean;
+};
+/**
+ * Where Google Play release notes come from.
+ */
+export type GooglePlayReleaseNotesSource = 'none' | 'changelog' | 'repo_files';
 export type HealthResponse = {
     channel: string | null;
     github_repo: string | null;
@@ -548,6 +656,14 @@ export type IosCertificateInput = {
     p12_filename?: string | null;
     p12_password?: string | null;
 };
+/**
+ * How a signed iOS archive is distributed.
+ *
+ * `ad_hoc` IPAs install on registered devices through Oore. `app_store` IPAs
+ * are signed with an App Store distribution profile and can only be uploaded
+ * to App Store Connect for TestFlight or App Store release.
+ */
+export type IosExportMethod = 'ad_hoc' | 'app_store';
 export type IosProvisioningProfileInput = {
     bundle_id: string;
     profile_base64?: string | null;
@@ -626,6 +742,13 @@ export type ListProjectsResponse = {
     projects: Array<Project>;
     total: number;
 };
+export type ListReleaseActivityResponse = {
+    events: Array<ReleaseActivityEvent>;
+};
+export type ListReleasesResponse = {
+    releases: Array<Release>;
+    total: number;
+};
 export type ListRepositoriesResponse = {
     repositories: Array<IntegrationRepository>;
     total: number;
@@ -635,6 +758,9 @@ export type ListRunnersResponse = {
     runners: Array<Runner>;
     total: number;
 };
+export type ListSecretsResponse = {
+    secrets: Array<SecretSummary>;
+};
 export type ListSourceRepositoriesResponse = {
     repositories: Array<SourceRepository>;
     total: number;
@@ -677,11 +803,12 @@ export type NotificationChannel = {
     created_by?: string | null;
     enabled: boolean;
     /**
-     * Which terminal build statuses trigger this channel. Empty means all.
+     * Which events trigger this channel. Empty means all.
      */
     events: Array<string>;
     /**
-     * True if the channel has an HMAC secret configured (webhook only).
+     * True if the channel has a secret configured: the HMAC secret for
+     * webhook channels, or the bot token used for mentions on Slack channels.
      */
     has_secret: boolean;
     /**
@@ -694,12 +821,18 @@ export type NotificationChannel = {
     has_url: boolean;
     id: string;
     name: string;
+    /**
+     * Project this channel is scoped to. Absent means the channel receives
+     * events from every project, plus instance-wide events such as runner
+     * offline.
+     */
+    project_id?: string | null;
     updated_at: number;
 };
 export type NotificationChannelResponse = {
     channel: NotificationChannel;
 };
-export type NotificationChannelType = 'webhook' | 'mattermost' | 'email';
+export type NotificationChannelType = 'webhook' | 'mattermost' | 'email' | 'slack';
 export type NotificationDelivery = {
     attempt_count: number;
     build_id?: string | null;
@@ -709,6 +842,7 @@ export type NotificationDelivery = {
     event_type: string;
     id: string;
     last_error?: string | null;
+    release_id?: string | null;
     status: NotificationDeliveryStatus;
 };
 export type NotificationDeliveryStatus = 'pending' | 'delivered' | 'failed';
@@ -771,6 +905,19 @@ export type PipelineAndroidSigningResponse = {
     pipeline_id: string;
     release: AndroidSigningProfile;
 };
+export type PipelineAppStorePublishResponse = {
+    /**
+     * Whether the pipeline's iOS signing exports App Store IPAs.
+     */
+    app_store_export: boolean;
+    config: AppStorePublishConfig;
+    /**
+     * Whether the pipeline's iOS signing has an App Store Connect API key.
+     */
+    has_api_key: boolean;
+    pipeline_id: string;
+    updated_at?: number | null;
+};
 export type PipelineCommandStages = {
     build: Array<string>;
     post_build: Array<string>;
@@ -786,6 +933,11 @@ export type PipelineEnvVar = {
 };
 export type PipelineExecutionConfig = {
     artifact_patterns: Array<string>;
+    /**
+     * Added to the project build number to form `OORE_VERSION_CODE`, so the
+     * first store upload can start above the store's existing version code.
+     */
+    build_number_offset?: number;
     commands: PipelineCommandStages;
     env?: Array<PipelineEnvVar>;
     flutter_version?: string | null;
@@ -793,12 +945,21 @@ export type PipelineExecutionConfig = {
     platform_commands?: PlatformBuildCommands;
     platforms: Array<BuildPlatform>;
 };
+export type PipelineGooglePlayPublishResponse = {
+    config?: null | GooglePlayPublishConfig;
+    pipeline_id: string;
+    /**
+     * Whether the referenced service account secret exists in a visible scope.
+     */
+    service_account_secret_present: boolean;
+    updated_at?: number | null;
+};
 export type PipelineIosSigningResponse = {
     api_issuer_id?: string | null;
     api_key_id?: string | null;
     bundle_ids: Array<string>;
     enabled: boolean;
-    export_method: string;
+    export_method: IosExportMethod;
     has_api_key: boolean;
     has_p12: boolean;
     has_p12_password: boolean;
@@ -875,6 +1036,7 @@ export type ProjectRetentionOverride = {
     updated_at?: number | null;
 };
 export type ProjectRole = 'maintainer' | 'developer' | 'viewer';
+export type PublishStore = 'google_play' | 'app_store';
 export type ReEnableUserResponse = {
     user: User;
 };
@@ -883,6 +1045,14 @@ export type ReadinessResponse = {
     encryption: boolean;
     migrations: boolean;
     ok: boolean;
+    /**
+     * Version of the running `oored` binary.
+     */
+    package_version: string;
+    /**
+     * Installed release version from the install root's `VERSION` file.
+     */
+    version: string;
 };
 export type RegisterIosDeviceRequest = {
     name: string;
@@ -914,6 +1084,115 @@ export type RegisteredIosDevice = {
     status: string;
     udid: string;
 };
+export type Release = {
+    /**
+     * Actions the caller may take now, from their project role and the state.
+     */
+    allowed_actions: Array<ReleaseAction>;
+    approved_at?: number | null;
+    approved_by_email?: string | null;
+    artifact_id?: string | null;
+    awaiting_approval: boolean;
+    build_id: string;
+    build_number?: number | null;
+    crash_rate?: number | null;
+    crash_rate_threshold?: number | null;
+    created_at: number;
+    health: ReleaseHealth;
+    id: string;
+    next_fraction?: number | null;
+    next_step_at?: number | null;
+    package_name?: string | null;
+    /**
+     * `android` or `ios`, derived from the store.
+     */
+    platform: string;
+    policy: ReleasePolicy;
+    project_id: string;
+    project_name?: string | null;
+    /**
+     * Fraction of users, 0..1.
+     */
+    rollout_fraction: number;
+    state: ReleaseState;
+    store: ReleaseStore;
+    /**
+     * Play track, or TestFlight group / `app_store`.
+     */
+    track: string;
+    updated_at: number;
+    version_code?: number | null;
+    version_name?: string | null;
+};
+/**
+ * Manual controls on a release.
+ */
+export type ReleaseAction = 'raise' | 'pause' | 'resume' | 'halt' | 'complete' | 'approve';
+export type ReleaseActionRequest = {
+    /**
+     * Raise only: target fraction (0..1]. Defaults to the next policy step.
+     */
+    fraction?: number | null;
+    reason?: string | null;
+};
+/**
+ * A history entry with the release it belongs to, for activity feeds.
+ */
+export type ReleaseActivityEvent = ReleaseHistoryEntry & {
+    build_id: string;
+    project_id: string;
+    project_name?: string | null;
+    release_id: string;
+    store: ReleaseStore;
+    track: string;
+    version_name?: string | null;
+};
+/**
+ * Where a maintainer approval is required, if anywhere.
+ */
+export type ReleaseApprovalGate = 'none' | 'before_upload' | 'before_production';
+export type ReleaseDetailResponse = {
+    history: Array<ReleaseHistoryEntry>;
+    release: Release;
+};
+export type ReleaseHealth = 'unknown' | 'healthy' | 'warning' | 'breached';
+export type ReleaseHistoryEntry = {
+    actor_email?: string | null;
+    /**
+     * Null when the daemon or a store made the change.
+     */
+    actor_id?: string | null;
+    at: number;
+    from_fraction?: number | null;
+    from_state?: null | ReleaseState;
+    id: string;
+    reason?: string | null;
+    to_fraction?: number | null;
+    to_state: ReleaseState;
+};
+/**
+ * Staged rollout policy stored with each release.
+ */
+export type ReleasePolicy = {
+    approval?: ReleaseApprovalGate;
+    /**
+     * Crash rate (0..1) at or above which the daemon halts the rollout.
+     */
+    crash_rate_threshold?: number | null;
+    /**
+     * Hours between automatic steps.
+     */
+    interval_hours?: number;
+    /**
+     * Ascending rollout fractions in (0, 1]; the last step must be 1.
+     */
+    steps?: Array<number>;
+};
+export type ReleaseState = 'uploading' | 'processing' | 'in_review' | 'rolling' | 'paused' | 'halted' | 'complete' | 'failed';
+/**
+ * Store a release is published to.
+ */
+export type ReleaseStore = 'google_play' | 'app_store';
 export type RemoteAuthMode = 'oidc' | 'trusted_proxy';
 export type RemoveProjectMemberResponse = {
     ok: boolean;
@@ -926,6 +1205,7 @@ export type ReplaceGitLabTokenRequest = {
  */
 export type RepositoryWorkflowExecutionPreview = {
     artifact_patterns: Array<string>;
+    build_number_offset?: number;
     commands: PipelineCommandStages;
     env_keys: Array<string>;
     flutter_version?: string | null;
@@ -977,6 +1257,12 @@ export type RevokeApiTokenResponse = {
 export type RevokeArtifactDownloadTokenResponse = {
     revoked: boolean;
 };
+/**
+ * Replace a secret's value (rotation).
+ */
+export type RotateSecretRequest = {
+    value: string;
+};
 export type Runner = {
     capabilities: {
         [key: string]: unknown;
@@ -1002,6 +1288,21 @@ export type RunnerAndroidSigningResponse = {
     debug?: null | RunnerAndroidSigningProfile;
     release?: null | RunnerAndroidSigningProfile;
 };
+/**
+ * What the runner needs to upload the job's IPA to App Store Connect.
+ */
+export type RunnerAppStorePublishPlan = {
+    config: AppStorePublishConfig;
+    credentials: RunnerAppStoreUploadCredentials;
+};
+/**
+ * App Store Connect API key handed to the runner for `altool` upload.
+ */
+export type RunnerAppStoreUploadCredentials = {
+    issuer_id: string;
+    key_id: string;
+    private_key_pem: string;
+};
 export type RunnerHeartbeatRequest = {
     capabilities?: {
         [key: string]: unknown;
@@ -1017,7 +1318,7 @@ export type RunnerIosProvisioningProfile = {
 };
 export type RunnerIosSigningBundle = {
     enabled: boolean;
-    export_method: string;
+    export_method: IosExportMethod;
     mode: IosSigningMode;
     p12_base64: string;
     p12_filename: string;
@@ -1028,16 +1329,100 @@ export type RunnerIosSigningBundle = {
 export type RunnerIosSigningResponse = {
     bundle?: null | RunnerIosSigningBundle;
 };
+/**
+ * A resolved secret delivered to the runner assigned to an active job.
+ */
+export type RunnerJobSecret = {
+    name: string;
+    scope: SecretScope;
+    value: string;
+};
+export type RunnerJobSecretsResponse = {
+    secrets: Array<RunnerJobSecret>;
+};
 export type RunnerPolicyBlockReason = 'instance_paused' | 'repository_unavailable';
+/**
+ * Publish work for the runner, fetched with the job-scoped grant.
+ */
+export type RunnerPublishPlan = {
+    app_store?: null | RunnerAppStorePublishPlan;
+    changelog?: string | null;
+    google_play?: null | GooglePlayPublishConfig;
+};
+/**
+ * Outcome of a store upload, reported by the runner.
+ */
+export type RunnerPublishResult = {
+    package_name: string;
+    /**
+     * Staged rollout fraction, 0 < f <= 1. Absent for drafts.
+     */
+    rollout_fraction?: number | null;
+    /**
+     * `completed`, `in_progress` or `draft`.
+     */
+    status: string;
+    store: PublishStore;
+    /**
+     * Store track as sent to the store (for Play: internal, alpha, beta, production or custom).
+     */
+    track: string;
+    version_code: number;
+    version_name?: string | null;
+};
 export type RunnerStatus = 'online' | 'offline' | 'busy' | 'draining';
 export type RuntimeMode = 'local' | 'remote';
+export type RuntimeUpdateCheck = {
+    detail?: string | null;
+    /**
+     * What to run or change on the backend Mac to make the check pass.
+     */
+    fix?: string | null;
+    /**
+     * Stable identifier, for example `updater_definition`.
+     */
+    id: string;
+    label: string;
+    status: RuntimeUpdateCheckStatus;
+};
+export type RuntimeUpdateCheckStatus = 'pass' | 'warn' | 'fail';
 export type RuntimeUpdatePhase = 'idle' | 'updating' | 'restarting' | 'failed';
+export type RuntimeUpdatePreflight = {
+    /**
+     * Unix timestamp, in seconds, of when the checks ran.
+     */
+    checked_at: number;
+    checks: Array<RuntimeUpdateCheck>;
+    /**
+     * True when no check failed, so a one-click backend update can start.
+     */
+    ready: boolean;
+};
 export type RuntimeUpdateStatus = {
     error?: string | null;
     managed_service: boolean;
     phase: RuntimeUpdatePhase;
 };
 export type ScmProvider = 'github' | 'gitlab' | 'local_git';
+export type SecretResponse = {
+    secret: SecretSummary;
+};
+/**
+ * Where a secret is defined. A job sees instance, project and pipeline secrets;
+ * on a name clash the narrower scope wins.
+ */
+export type SecretScope = 'instance' | 'project' | 'pipeline';
+/**
+ * Secret metadata. Values are write-only and never returned by the user API.
+ */
+export type SecretSummary = {
+    created_at: number;
+    name: string;
+    pipeline_id?: string | null;
+    project_id?: string | null;
+    scope: SecretScope;
+    updated_at: number;
+};
 export type SetupCompleteResponse = {
     instance_id: string;
     state: SetupState;
@@ -1214,7 +1599,13 @@ export type UpdateNotificationChannelRequest = {
     events?: Array<string> | null;
     name?: string | null;
     /**
-     * New HMAC secret. Omit to keep existing; pass empty string to clear.
+     * New project scope. Omit to keep existing; pass empty string to make
+     * the channel instance-wide.
+     */
+    project_id?: string | null;
+    /**
+     * New HMAC secret (webhook) or bot token (slack). Omit to keep existing;
+     * pass empty string to clear.
      */
     secret?: string | null;
     smtp_config?: null | UpdateSmtpConfig;
@@ -1232,6 +1623,7 @@ export type UpdatePipelineIosSigningRequest = {
     bundle_ids?: Array<string>;
     certificate?: null | IosCertificateInput;
     enabled?: boolean;
+    export_method?: null | IosExportMethod;
     mode: IosSigningMode;
     provisioning_profiles?: Array<IosProvisioningProfileInput>;
     team_id?: string | null;
@@ -3247,96 +3639,332 @@ export type SyncPipelineIosSigningResponses = {
     200: SyncPipelineIosSigningResponse;
 };
 export type SyncPipelineIosSigningResponse2 = SyncPipelineIosSigningResponses[keyof SyncPipelineIosSigningResponses];
-export type ListProjectsData = {
+export type GetPipelineAppStorePublishData = {
     body?: never;
-    path?: never;
-    query?: {
-        /**
-         * Page size (default 50)
-         */
-        limit?: number;
-        /**
-         * Page offset (default 0)
-         */
-        offset?: number;
-        /**
-         * Filter by name (case-insensitive partial match)
-         */
-        search?: string;
-        /**
-         * Filter by linked integration
-         */
-        integration_id?: string;
-        /**
-         * Sort by created_at, updated_at, or name
-         */
-        sort?: string;
+    path: {
         /**
-         * Sort direction: asc or desc
+         * Pipeline ID
          */
-        direction?: string;
+        pipeline_id: string;
     };
-    url: '/v1/projects';
+    query?: never;
+    url: '/v1/pipelines/{pipeline_id}/publish/app-store';
 };
-export type ListProjectsErrors = {
+export type GetPipelineAppStorePublishErrors = {
     /**
-     * Invalid input
+     * Pipeline not found
      */
-    400: ApiError;
+    404: ApiError;
 };
-export type ListProjectsError = ListProjectsErrors[keyof ListProjectsErrors];
-export type ListProjectsResponses = {
+export type GetPipelineAppStorePublishError = GetPipelineAppStorePublishErrors[keyof GetPipelineAppStorePublishErrors];
+export type GetPipelineAppStorePublishResponses = {
     /**
-     * Project list
+     * App Store publish settings
      */
-    200: ListProjectsResponse;
+    200: PipelineAppStorePublishResponse;
 };
-export type ListProjectsResponse2 = ListProjectsResponses[keyof ListProjectsResponses];
-export type CreateProjectData = {
-    body: CreateProjectRequest;
-    path?: never;
+export type GetPipelineAppStorePublishResponse = GetPipelineAppStorePublishResponses[keyof GetPipelineAppStorePublishResponses];
+export type UpdatePipelineAppStorePublishData = {
+    body: AppStorePublishConfig;
+    path: {
+        /**
+         * Pipeline ID
+         */
+        pipeline_id: string;
+    };
     query?: never;
-    url: '/v1/projects';
+    url: '/v1/pipelines/{pipeline_id}/publish/app-store';
 };
-export type CreateProjectErrors = {
+export type UpdatePipelineAppStorePublishErrors = {
     /**
-     * Invalid input
+     * Invalid settings
      */
     400: ApiError;
+    /**
+     * Pipeline not found
+     */
+    404: ApiError;
 };
-export type CreateProjectError = CreateProjectErrors[keyof CreateProjectErrors];
-export type CreateProjectResponses = {
+export type UpdatePipelineAppStorePublishError = UpdatePipelineAppStorePublishErrors[keyof UpdatePipelineAppStorePublishErrors];
+export type UpdatePipelineAppStorePublishResponses = {
     /**
-     * Project created
+     * App Store publish settings updated
      */
-    201: CreateProjectResponse;
+    200: PipelineAppStorePublishResponse;
 };
-export type CreateProjectResponse2 = CreateProjectResponses[keyof CreateProjectResponses];
-export type DeleteProjectData = {
+export type UpdatePipelineAppStorePublishResponse = UpdatePipelineAppStorePublishResponses[keyof UpdatePipelineAppStorePublishResponses];
+export type GetPipelineGooglePlayPublishData = {
     body?: never;
     path: {
         /**
-         * Project ID
+         * Pipeline ID
          */
-        project_id: string;
+        pipeline_id: string;
     };
     query?: never;
-    url: '/v1/projects/{project_id}';
+    url: '/v1/pipelines/{pipeline_id}/publish/google-play';
 };
-export type DeleteProjectErrors = {
+export type GetPipelineGooglePlayPublishErrors = {
     /**
-     * Not found
+     * Pipeline not found
      */
     404: ApiError;
-    /**
-     * Project has active builds
-     */
-    409: ApiError;
 };
-export type DeleteProjectError = DeleteProjectErrors[keyof DeleteProjectErrors];
-export type DeleteProjectResponses = {
+export type GetPipelineGooglePlayPublishError = GetPipelineGooglePlayPublishErrors[keyof GetPipelineGooglePlayPublishErrors];
+export type GetPipelineGooglePlayPublishResponses = {
     /**
-     * Project deleted
+     * Google Play publish settings
+     */
+    200: PipelineGooglePlayPublishResponse;
+};
+export type GetPipelineGooglePlayPublishResponse = GetPipelineGooglePlayPublishResponses[keyof GetPipelineGooglePlayPublishResponses];
+export type UpdatePipelineGooglePlayPublishData = {
+    body: GooglePlayPublishConfig;
+    path: {
+        /**
+         * Pipeline ID
+         */
+        pipeline_id: string;
+    };
+    query?: never;
+    url: '/v1/pipelines/{pipeline_id}/publish/google-play';
+};
+export type UpdatePipelineGooglePlayPublishErrors = {
+    /**
+     * Invalid settings
+     */
+    400: ApiError;
+    /**
+     * Permission denied
+     */
+    403: ApiError;
+    /**
+     * Pipeline not found
+     */
+    404: ApiError;
+};
+export type UpdatePipelineGooglePlayPublishError = UpdatePipelineGooglePlayPublishErrors[keyof UpdatePipelineGooglePlayPublishErrors];
+export type UpdatePipelineGooglePlayPublishResponses = {
+    /**
+     * Saved settings
+     */
+    200: PipelineGooglePlayPublishResponse;
+};
+export type UpdatePipelineGooglePlayPublishResponse = UpdatePipelineGooglePlayPublishResponses[keyof UpdatePipelineGooglePlayPublishResponses];
+export type ListPipelineSecretsData = {
+    body?: never;
+    path: {
+        /**
+         * Pipeline ID
+         */
+        pipeline_id: string;
+    };
+    query?: never;
+    url: '/v1/pipelines/{pipeline_id}/secrets';
+};
+export type ListPipelineSecretsErrors = {
+    /**
+     * Permission denied
+     */
+    403: ApiError;
+};
+export type ListPipelineSecretsError = ListPipelineSecretsErrors[keyof ListPipelineSecretsErrors];
+export type ListPipelineSecretsResponses = {
+    /**
+     * Secret names
+     */
+    200: ListSecretsResponse;
+};
+export type ListPipelineSecretsResponse = ListPipelineSecretsResponses[keyof ListPipelineSecretsResponses];
+export type CreatePipelineSecretData = {
+    body: CreateSecretRequest;
+    path: {
+        /**
+         * Pipeline ID
+         */
+        pipeline_id: string;
+    };
+    query?: never;
+    url: '/v1/pipelines/{pipeline_id}/secrets';
+};
+export type CreatePipelineSecretErrors = {
+    /**
+     * Invalid name or value
+     */
+    400: ApiError;
+    /**
+     * Permission denied
+     */
+    403: ApiError;
+    /**
+     * A secret with this name already exists in this scope
+     */
+    409: ApiError;
+};
+export type CreatePipelineSecretError = CreatePipelineSecretErrors[keyof CreatePipelineSecretErrors];
+export type CreatePipelineSecretResponses = {
+    /**
+     * Secret created
+     */
+    201: SecretResponse;
+};
+export type CreatePipelineSecretResponse = CreatePipelineSecretResponses[keyof CreatePipelineSecretResponses];
+export type DeletePipelineSecretData = {
+    body?: never;
+    path: {
+        /**
+         * Pipeline ID
+         */
+        pipeline_id: string;
+        /**
+         * Secret name
+         */
+        name: string;
+    };
+    query?: never;
+    url: '/v1/pipelines/{pipeline_id}/secrets/{name}';
+};
+export type DeletePipelineSecretErrors = {
+    /**
+     * Permission denied
+     */
+    403: ApiError;
+    /**
+     * Secret not found
+     */
+    404: ApiError;
+};
+export type DeletePipelineSecretError = DeletePipelineSecretErrors[keyof DeletePipelineSecretErrors];
+export type DeletePipelineSecretResponses = {
+    /**
+     * Secret deleted
+     */
+    200: OkResponse;
+};
+export type DeletePipelineSecretResponse = DeletePipelineSecretResponses[keyof DeletePipelineSecretResponses];
+export type RotatePipelineSecretData = {
+    body: RotateSecretRequest;
+    path: {
+        /**
+         * Pipeline ID
+         */
+        pipeline_id: string;
+        /**
+         * Secret name
+         */
+        name: string;
+    };
+    query?: never;
+    url: '/v1/pipelines/{pipeline_id}/secrets/{name}';
+};
+export type RotatePipelineSecretErrors = {
+    /**
+     * Permission denied
+     */
+    403: ApiError;
+    /**
+     * Secret not found
+     */
+    404: ApiError;
+};
+export type RotatePipelineSecretError = RotatePipelineSecretErrors[keyof RotatePipelineSecretErrors];
+export type RotatePipelineSecretResponses = {
+    /**
+     * Secret rotated
+     */
+    200: SecretResponse;
+};
+export type RotatePipelineSecretResponse = RotatePipelineSecretResponses[keyof RotatePipelineSecretResponses];
+export type ListProjectsData = {
+    body?: never;
+    path?: never;
+    query?: {
+        /**
+         * Page size (default 50)
+         */
+        limit?: number;
+        /**
+         * Page offset (default 0)
+         */
+        offset?: number;
+        /**
+         * Filter by name (case-insensitive partial match)
+         */
+        search?: string;
+        /**
+         * Filter by linked integration
+         */
+        integration_id?: string;
+        /**
+         * Sort by created_at, updated_at, or name
+         */
+        sort?: string;
+        /**
+         * Sort direction: asc or desc
+         */
+        direction?: string;
+    };
+    url: '/v1/projects';
+};
+export type ListProjectsErrors = {
+    /**
+     * Invalid input
+     */
+    400: ApiError;
+};
+export type ListProjectsError = ListProjectsErrors[keyof ListProjectsErrors];
+export type ListProjectsResponses = {
+    /**
+     * Project list
+     */
+    200: ListProjectsResponse;
+};
+export type ListProjectsResponse2 = ListProjectsResponses[keyof ListProjectsResponses];
+export type CreateProjectData = {
+    body: CreateProjectRequest;
+    path?: never;
+    query?: never;
+    url: '/v1/projects';
+};
+export type CreateProjectErrors = {
+    /**
+     * Invalid input
+     */
+    400: ApiError;
+};
+export type CreateProjectError = CreateProjectErrors[keyof CreateProjectErrors];
+export type CreateProjectResponses = {
+    /**
+     * Project created
+     */
+    201: CreateProjectResponse;
+};
+export type CreateProjectResponse2 = CreateProjectResponses[keyof CreateProjectResponses];
+export type DeleteProjectData = {
+    body?: never;
+    path: {
+        /**
+         * Project ID
+         */
+        project_id: string;
+    };
+    query?: never;
+    url: '/v1/projects/{project_id}';
+};
+export type DeleteProjectErrors = {
+    /**
+     * Not found
+     */
+    404: ApiError;
+    /**
+     * Project has active builds
+     */
+    409: ApiError;
+};
+export type DeleteProjectError = DeleteProjectErrors[keyof DeleteProjectErrors];
+export type DeleteProjectResponses = {
+    /**
+     * Project deleted
      */
     200: OkResponse;
 };
@@ -3780,58 +4408,573 @@ export type GetProjectRetentionData = {
     body?: never;
     path: {
         /**
-         * Project ID
+         * Project ID
+         */
+        project_id: string;
+    };
+    query?: never;
+    url: '/v1/projects/{project_id}/retention';
+};
+export type GetProjectRetentionResponses = {
+    /**
+     * Effective project retention
+     */
+    200: EffectiveProjectRetentionResponse;
+};
+export type GetProjectRetentionResponse = GetProjectRetentionResponses[keyof GetProjectRetentionResponses];
+export type UpdateProjectRetentionData = {
+    body: UpdateProjectRetentionOverrideRequest;
+    path: {
+        /**
+         * Project ID
+         */
+        project_id: string;
+    };
+    query?: never;
+    url: '/v1/projects/{project_id}/retention';
+};
+export type UpdateProjectRetentionResponses = {
+    /**
+     * Override updated
+     */
+    200: EffectiveProjectRetentionResponse;
+};
+export type UpdateProjectRetentionResponse = UpdateProjectRetentionResponses[keyof UpdateProjectRetentionResponses];
+export type ListProjectSecretsData = {
+    body?: never;
+    path: {
+        /**
+         * Project ID
+         */
+        project_id: string;
+    };
+    query?: never;
+    url: '/v1/projects/{project_id}/secrets';
+};
+export type ListProjectSecretsErrors = {
+    /**
+     * Permission denied
+     */
+    403: ApiError;
+};
+export type ListProjectSecretsError = ListProjectSecretsErrors[keyof ListProjectSecretsErrors];
+export type ListProjectSecretsResponses = {
+    /**
+     * Secret names
+     */
+    200: ListSecretsResponse;
+};
+export type ListProjectSecretsResponse = ListProjectSecretsResponses[keyof ListProjectSecretsResponses];
+export type CreateProjectSecretData = {
+    body: CreateSecretRequest;
+    path: {
+        /**
+         * Project ID
+         */
+        project_id: string;
+    };
+    query?: never;
+    url: '/v1/projects/{project_id}/secrets';
+};
+export type CreateProjectSecretErrors = {
+    /**
+     * Invalid name or value
+     */
+    400: ApiError;
+    /**
+     * Permission denied
+     */
+    403: ApiError;
+    /**
+     * A secret with this name already exists in this scope
+     */
+    409: ApiError;
+};
+export type CreateProjectSecretError = CreateProjectSecretErrors[keyof CreateProjectSecretErrors];
+export type CreateProjectSecretResponses = {
+    /**
+     * Secret created
+     */
+    201: SecretResponse;
+};
+export type CreateProjectSecretResponse = CreateProjectSecretResponses[keyof CreateProjectSecretResponses];
+export type DeleteProjectSecretData = {
+    body?: never;
+    path: {
+        /**
+         * Project ID
+         */
+        project_id: string;
+        /**
+         * Secret name
+         */
+        name: string;
+    };
+    query?: never;
+    url: '/v1/projects/{project_id}/secrets/{name}';
+};
+export type DeleteProjectSecretErrors = {
+    /**
+     * Permission denied
+     */
+    403: ApiError;
+    /**
+     * Secret not found
+     */
+    404: ApiError;
+};
+export type DeleteProjectSecretError = DeleteProjectSecretErrors[keyof DeleteProjectSecretErrors];
+export type DeleteProjectSecretResponses = {
+    /**
+     * Secret deleted
+     */
+    200: OkResponse;
+};
+export type DeleteProjectSecretResponse = DeleteProjectSecretResponses[keyof DeleteProjectSecretResponses];
+export type RotateProjectSecretData = {
+    body: RotateSecretRequest;
+    path: {
+        /**
+         * Project ID
+         */
+        project_id: string;
+        /**
+         * Secret name
+         */
+        name: string;
+    };
+    query?: never;
+    url: '/v1/projects/{project_id}/secrets/{name}';
+};
+export type RotateProjectSecretErrors = {
+    /**
+     * Permission denied
+     */
+    403: ApiError;
+    /**
+     * Secret not found
+     */
+    404: ApiError;
+};
+export type RotateProjectSecretError = RotateProjectSecretErrors[keyof RotateProjectSecretErrors];
+export type RotateProjectSecretResponses = {
+    /**
+     * Secret rotated
+     */
+    200: SecretResponse;
+};
+export type RotateProjectSecretResponse = RotateProjectSecretResponses[keyof RotateProjectSecretResponses];
+export type GetSetupStatusData = {
+    body?: never;
+    path?: never;
+    query?: never;
+    url: '/v1/public/setup-status';
+};
+export type GetSetupStatusErrors = {
+    /**
+     * Internal error
+     */
+    500: ApiError;
+};
+export type GetSetupStatusError = GetSetupStatusErrors[keyof GetSetupStatusErrors];
+export type GetSetupStatusResponses = {
+    /**
+     * Current setup status
+     */
+    200: SetupStatus;
+};
+export type GetSetupStatusResponse = GetSetupStatusResponses[keyof GetSetupStatusResponses];
+export type ListReleaseEventsData = {
+    body?: never;
+    path?: never;
+    query?: {
+        /**
+         * Filter by project
+         */
+        project_id?: string;
+        /**
+         * Page size, 1 to 200 (default 50)
+         */
+        limit?: number;
+    };
+    url: '/v1/release-events';
+};
+export type ListReleaseEventsErrors = {
+    /**
+     * Invalid input
+     */
+    400: ApiError;
+};
+export type ListReleaseEventsError = ListReleaseEventsErrors[keyof ListReleaseEventsErrors];
+export type ListReleaseEventsResponses = {
+    /**
+     * Release activity
+     */
+    200: ListReleaseActivityResponse;
+};
+export type ListReleaseEventsResponse = ListReleaseEventsResponses[keyof ListReleaseEventsResponses];
+export type ListReleasesData = {
+    body?: never;
+    path?: never;
+    query?: {
+        /**
+         * Filter by project
+         */
+        project_id?: string;
+        /**
+         * Filter by build
+         */
+        build_id?: string;
+        /**
+         * Filter by one state or comma-separated states
+         */
+        state?: string;
+        /**
+         * Page size, 1 to 200 (default 50)
+         */
+        limit?: number;
+        /**
+         * Page offset (default 0)
+         */
+        offset?: number;
+    };
+    url: '/v1/releases';
+};
+export type ListReleasesErrors = {
+    /**
+     * Invalid input
+     */
+    400: ApiError;
+};
+export type ListReleasesError = ListReleasesErrors[keyof ListReleasesErrors];
+export type ListReleasesResponses = {
+    /**
+     * Release list
+     */
+    200: ListReleasesResponse;
+};
+export type ListReleasesResponse2 = ListReleasesResponses[keyof ListReleasesResponses];
+export type CreateReleaseData = {
+    body: CreateReleaseRequest;
+    path?: never;
+    query?: never;
+    url: '/v1/releases';
+};
+export type CreateReleaseErrors = {
+    /**
+     * Invalid input
+     */
+    400: ApiError;
+    /**
+     * Permission denied
+     */
+    403: ApiError;
+    /**
+     * Build not found
+     */
+    404: ApiError;
+    /**
+     * Build has not succeeded
+     */
+    409: ApiError;
+};
+export type CreateReleaseError = CreateReleaseErrors[keyof CreateReleaseErrors];
+export type CreateReleaseResponses = {
+    /**
+     * Created release
+     */
+    200: Release;
+};
+export type CreateReleaseResponse = CreateReleaseResponses[keyof CreateReleaseResponses];
+export type GetReleaseData = {
+    body?: never;
+    path: {
+        /**
+         * Release ID
+         */
+        release_id: string;
+    };
+    query?: never;
+    url: '/v1/releases/{release_id}';
+};
+export type GetReleaseErrors = {
+    /**
+     * Not found
+     */
+    404: ApiError;
+};
+export type GetReleaseError = GetReleaseErrors[keyof GetReleaseErrors];
+export type GetReleaseResponses = {
+    /**
+     * Release detail
+     */
+    200: ReleaseDetailResponse;
+};
+export type GetReleaseResponse = GetReleaseResponses[keyof GetReleaseResponses];
+export type ApproveReleaseData = {
+    /**
+     * Optional reason; `fraction` is accepted by raise only
+     */
+    body?: null | ReleaseActionRequest;
+    path: {
+        /**
+         * Release ID
+         */
+        release_id: string;
+    };
+    query?: never;
+    url: '/v1/releases/{release_id}/approve';
+};
+export type ApproveReleaseErrors = {
+    /**
+     * Invalid input
+     */
+    400: ApiError;
+    /**
+     * Permission denied
+     */
+    403: ApiError;
+    /**
+     * Not found
+     */
+    404: ApiError;
+    /**
+     * Not allowed in the current state
+     */
+    409: ApiError;
+    /**
+     * The store rejected the change
+     */
+    502: ApiError;
+};
+export type ApproveReleaseError = ApproveReleaseErrors[keyof ApproveReleaseErrors];
+export type ApproveReleaseResponses = {
+    /**
+     * Updated release
+     */
+    200: Release;
+};
+export type ApproveReleaseResponse = ApproveReleaseResponses[keyof ApproveReleaseResponses];
+export type CompleteReleaseData = {
+    /**
+     * Optional reason; `fraction` is accepted by raise only
+     */
+    body?: null | ReleaseActionRequest;
+    path: {
+        /**
+         * Release ID
+         */
+        release_id: string;
+    };
+    query?: never;
+    url: '/v1/releases/{release_id}/complete';
+};
+export type CompleteReleaseErrors = {
+    /**
+     * Invalid input
+     */
+    400: ApiError;
+    /**
+     * Permission denied
+     */
+    403: ApiError;
+    /**
+     * Not found
+     */
+    404: ApiError;
+    /**
+     * Not allowed in the current state
+     */
+    409: ApiError;
+    /**
+     * The store rejected the change
+     */
+    502: ApiError;
+};
+export type CompleteReleaseError = CompleteReleaseErrors[keyof CompleteReleaseErrors];
+export type CompleteReleaseResponses = {
+    /**
+     * Updated release
+     */
+    200: Release;
+};
+export type CompleteReleaseResponse = CompleteReleaseResponses[keyof CompleteReleaseResponses];
+export type HaltReleaseData = {
+    /**
+     * Optional reason; `fraction` is accepted by raise only
+     */
+    body?: null | ReleaseActionRequest;
+    path: {
+        /**
+         * Release ID
+         */
+        release_id: string;
+    };
+    query?: never;
+    url: '/v1/releases/{release_id}/halt';
+};
+export type HaltReleaseErrors = {
+    /**
+     * Invalid input
+     */
+    400: ApiError;
+    /**
+     * Permission denied
+     */
+    403: ApiError;
+    /**
+     * Not found
+     */
+    404: ApiError;
+    /**
+     * Not allowed in the current state
+     */
+    409: ApiError;
+    /**
+     * The store rejected the change
+     */
+    502: ApiError;
+};
+export type HaltReleaseError = HaltReleaseErrors[keyof HaltReleaseErrors];
+export type HaltReleaseResponses = {
+    /**
+     * Updated release
+     */
+    200: Release;
+};
+export type HaltReleaseResponse = HaltReleaseResponses[keyof HaltReleaseResponses];
+export type PauseReleaseData = {
+    /**
+     * Optional reason; `fraction` is accepted by raise only
+     */
+    body?: null | ReleaseActionRequest;
+    path: {
+        /**
+         * Release ID
+         */
+        release_id: string;
+    };
+    query?: never;
+    url: '/v1/releases/{release_id}/pause';
+};
+export type PauseReleaseErrors = {
+    /**
+     * Invalid input
+     */
+    400: ApiError;
+    /**
+     * Permission denied
+     */
+    403: ApiError;
+    /**
+     * Not found
+     */
+    404: ApiError;
+    /**
+     * Not allowed in the current state
+     */
+    409: ApiError;
+    /**
+     * The store rejected the change
+     */
+    502: ApiError;
+};
+export type PauseReleaseError = PauseReleaseErrors[keyof PauseReleaseErrors];
+export type PauseReleaseResponses = {
+    /**
+     * Updated release
+     */
+    200: Release;
+};
+export type PauseReleaseResponse = PauseReleaseResponses[keyof PauseReleaseResponses];
+export type RaiseReleaseData = {
+    /**
+     * Optional reason; `fraction` is accepted by raise only
+     */
+    body?: null | ReleaseActionRequest;
+    path: {
+        /**
+         * Release ID
          */
-        project_id: string;
+        release_id: string;
     };
     query?: never;
-    url: '/v1/projects/{project_id}/retention';
+    url: '/v1/releases/{release_id}/raise';
 };
-export type GetProjectRetentionResponses = {
+export type RaiseReleaseErrors = {
     /**
-     * Effective project retention
+     * Invalid input
      */
-    200: EffectiveProjectRetentionResponse;
+    400: ApiError;
+    /**
+     * Permission denied
+     */
+    403: ApiError;
+    /**
+     * Not found
+     */
+    404: ApiError;
+    /**
+     * Not allowed in the current state
+     */
+    409: ApiError;
+    /**
+     * The store rejected the change
+     */
+    502: ApiError;
 };
-export type GetProjectRetentionResponse = GetProjectRetentionResponses[keyof GetProjectRetentionResponses];
-export type UpdateProjectRetentionData = {
-    body: UpdateProjectRetentionOverrideRequest;
+export type RaiseReleaseError = RaiseReleaseErrors[keyof RaiseReleaseErrors];
+export type RaiseReleaseResponses = {
+    /**
+     * Updated release
+     */
+    200: Release;
+};
+export type RaiseReleaseResponse = RaiseReleaseResponses[keyof RaiseReleaseResponses];
+export type ResumeReleaseData = {
+    /**
+     * Optional reason; `fraction` is accepted by raise only
+     */
+    body?: null | ReleaseActionRequest;
     path: {
         /**
-         * Project ID
+         * Release ID
          */
-        project_id: string;
+        release_id: string;
     };
     query?: never;
-    url: '/v1/projects/{project_id}/retention';
+    url: '/v1/releases/{release_id}/resume';
 };
-export type UpdateProjectRetentionResponses = {
+export type ResumeReleaseErrors = {
     /**
-     * Override updated
+     * Invalid input
      */
-    200: EffectiveProjectRetentionResponse;
-};
-export type UpdateProjectRetentionResponse = UpdateProjectRetentionResponses[keyof UpdateProjectRetentionResponses];
-export type GetSetupStatusData = {
-    body?: never;
-    path?: never;
-    query?: never;
-    url: '/v1/public/setup-status';
-};
-export type GetSetupStatusErrors = {
+    400: ApiError;
     /**
-     * Internal error
+     * Permission denied
      */
-    500: ApiError;
+    403: ApiError;
+    /**
+     * Not found
+     */
+    404: ApiError;
+    /**
+     * Not allowed in the current state
+     */
+    409: ApiError;
+    /**
+     * The store rejected the change
+     */
+    502: ApiError;
 };
-export type GetSetupStatusError = GetSetupStatusErrors[keyof GetSetupStatusErrors];
-export type GetSetupStatusResponses = {
+export type ResumeReleaseError = ResumeReleaseErrors[keyof ResumeReleaseErrors];
+export type ResumeReleaseResponses = {
     /**
-     * Current setup status
+     * Updated release
      */
-    200: SetupStatus;
+    200: Release;
 };
-export type GetSetupStatusResponse = GetSetupStatusResponses[keyof GetSetupStatusResponses];
+export type ResumeReleaseResponse = ResumeReleaseResponses[keyof ResumeReleaseResponses];
 export type ListRunnersData = {
     body?: never;
     path?: never;
@@ -4261,6 +5404,143 @@ export type AppendBuildLogsResponses = {
     200: AppendBuildLogsResponse;
 };
 export type AppendBuildLogsResponse2 = AppendBuildLogsResponses[keyof AppendBuildLogsResponses];
+export type GetJobPublishPlanData = {
+    body?: never;
+    headers: {
+        /**
+         * Job-scoped signing grant
+         */
+        'x-oore-signing-token': string;
+    };
+    path: {
+        /**
+         * Runner ID
+         */
+        runner_id: string;
+        /**
+         * Build/Job ID
+         */
+        job_id: string;
+    };
+    query?: never;
+    url: '/v1/runners/{runner_id}/jobs/{job_id}/publish';
+};
+export type GetJobPublishPlanErrors = {
+    /**
+     * Runner authentication or signing grant is missing or invalid
+     */
+    401: ApiError;
+    /**
+     * Runner does not match the active assignment
+     */
+    403: ApiError;
+    /**
+     * Job is not active
+     */
+    409: ApiError;
+};
+export type GetJobPublishPlanError = GetJobPublishPlanErrors[keyof GetJobPublishPlanErrors];
+export type GetJobPublishPlanResponses = {
+    /**
+     * Publish plan
+     */
+    200: RunnerPublishPlan;
+};
+export type GetJobPublishPlanResponse = GetJobPublishPlanResponses[keyof GetJobPublishPlanResponses];
+export type ReportJobPublishResultData = {
+    body: RunnerPublishResult;
+    headers: {
+        /**
+         * Job-scoped signing grant
+         */
+        'x-oore-signing-token': string;
+    };
+    path: {
+        /**
+         * Runner ID
+         */
+        runner_id: string;
+        /**
+         * Build/Job ID
+         */
+        job_id: string;
+    };
+    query?: never;
+    url: '/v1/runners/{runner_id}/jobs/{job_id}/publish-results';
+};
+export type ReportJobPublishResultErrors = {
+    /**
+     * Runner authentication or signing grant is missing or invalid
+     */
+    401: ApiError;
+    /**
+     * Runner does not match the active assignment
+     */
+    403: ApiError;
+    /**
+     * Job is not active
+     */
+    409: ApiError;
+};
+export type ReportJobPublishResultError = ReportJobPublishResultErrors[keyof ReportJobPublishResultErrors];
+export type ReportJobPublishResultResponses = {
+    /**
+     * Recorded
+     */
+    200: OkResponse;
+};
+export type ReportJobPublishResultResponse = ReportJobPublishResultResponses[keyof ReportJobPublishResultResponses];
+export type GetJobSecretsData = {
+    body?: never;
+    headers: {
+        /**
+         * Job-scoped signing grant
+         */
+        'x-oore-signing-token': string;
+    };
+    path: {
+        /**
+         * Runner ID
+         */
+        runner_id: string;
+        /**
+         * Build/Job ID
+         */
+        job_id: string;
+    };
+    query?: never;
+    url: '/v1/runners/{runner_id}/jobs/{job_id}/secrets';
+};
+export type GetJobSecretsErrors = {
+    /**
+     * Runner authentication or signing grant is missing or invalid
+     */
+    401: ApiError;
+    /**
+     * Runner does not match the active assignment
+     */
+    403: ApiError;
+    /**
+     * Build not found
+     */
+    404: ApiError;
+    /**
+     * Job is not active
+     */
+    409: ApiError;
+    /**
+     * Secrets could not be loaded
+     */
+    500: ApiError;
+};
+export type GetJobSecretsError = GetJobSecretsErrors[keyof GetJobSecretsErrors];
+export type GetJobSecretsResponses = {
+    /**
+     * Resolved secrets
+     */
+    200: RunnerJobSecretsResponse;
+};
+export type GetJobSecretsResponse = GetJobSecretsResponses[keyof GetJobSecretsResponses];
 export type UpdateJobStatusData = {
     body: UpdateJobStatusRequest;
     path: {
@@ -4290,6 +5570,112 @@ export type UpdateJobStatusResponses = {
     200: BuildDetailResponse;
 };
 export type UpdateJobStatusResponse = UpdateJobStatusResponses[keyof UpdateJobStatusResponses];
+export type ListInstanceSecretsData = {
+    body?: never;
+    path?: never;
+    query?: never;
+    url: '/v1/secrets';
+};
+export type ListInstanceSecretsErrors = {
+    /**
+     * Permission denied
+     */
+    403: ApiError;
+};
+export type ListInstanceSecretsError = ListInstanceSecretsErrors[keyof ListInstanceSecretsErrors];
+export type ListInstanceSecretsResponses = {
+    /**
+     * Secret names
+     */
+    200: ListSecretsResponse;
+};
+export type ListInstanceSecretsResponse = ListInstanceSecretsResponses[keyof ListInstanceSecretsResponses];
+export type CreateInstanceSecretData = {
+    body: CreateSecretRequest;
+    path?: never;
+    query?: never;
+    url: '/v1/secrets';
+};
+export type CreateInstanceSecretErrors = {
+    /**
+     * Invalid name or value
+     */
+    400: ApiError;
+    /**
+     * Permission denied
+     */
+    403: ApiError;
+    /**
+     * A secret with this name already exists in this scope
+     */
+    409: ApiError;
+};
+export type CreateInstanceSecretError = CreateInstanceSecretErrors[keyof CreateInstanceSecretErrors];
+export type CreateInstanceSecretResponses = {
+    /**
+     * Secret created
+     */
+    201: SecretResponse;
+};
+export type CreateInstanceSecretResponse = CreateInstanceSecretResponses[keyof CreateInstanceSecretResponses];
+export type DeleteInstanceSecretData = {
+    body?: never;
+    path: {
+        /**
+         * Secret name
+         */
+        name: string;
+    };
+    query?: never;
+    url: '/v1/secrets/{name}';
+};
+export type DeleteInstanceSecretErrors = {
+    /**
+     * Permission denied
+     */
+    403: ApiError;
+    /**
+     * Secret not found
+     */
+    404: ApiError;
+};
+export type DeleteInstanceSecretError = DeleteInstanceSecretErrors[keyof DeleteInstanceSecretErrors];
+export type DeleteInstanceSecretResponses = {
+    /**
+     * Secret deleted
+     */
+    200: OkResponse;
+};
+export type DeleteInstanceSecretResponse = DeleteInstanceSecretResponses[keyof DeleteInstanceSecretResponses];
+export type RotateInstanceSecretData = {
+    body: RotateSecretRequest;
+    path: {
+        /**
+         * Secret name
+         */
+        name: string;
+    };
+    query?: never;
+    url: '/v1/secrets/{name}';
+};
+export type RotateInstanceSecretErrors = {
+    /**
+     * Permission denied
+     */
+    403: ApiError;
+    /**
+     * Secret not found
+     */
+    404: ApiError;
+};
+export type RotateInstanceSecretError = RotateInstanceSecretErrors[keyof RotateInstanceSecretErrors];
+export type RotateInstanceSecretResponses = {
+    /**
+     * Secret rotated
+     */
+    200: SecretResponse;
+};
+export type RotateInstanceSecretResponse = RotateInstanceSecretResponses[keyof RotateInstanceSecretResponses];
 export type GetArtifactStorageSettingsData = {
     body?: never;
     path?: never;
@@ -5130,6 +6516,30 @@ export type StartRuntimeUpdateResponses = {
     202: RuntimeUpdateStatus;
 };
 export type StartRuntimeUpdateResponse = StartRuntimeUpdateResponses[keyof StartRuntimeUpdateResponses];
+export type GetRuntimeUpdatePreflightData = {
+    body?: never;
+    path?: never;
+    query?: never;
+    url: '/v1/system/update/preflight';
+};
+export type GetRuntimeUpdatePreflightErrors = {
+    /**
+     * Not authenticated
+     */
+    401: ApiError;
+    /**
+     * Owner role required
+     */
+    403: ApiError;
+};
+export type GetRuntimeUpdatePreflightError = GetRuntimeUpdatePreflightErrors[keyof GetRuntimeUpdatePreflightErrors];
+export type GetRuntimeUpdatePreflightResponses = {
+    /**
+     * Backend update preflight checks
+     */
+    200: RuntimeUpdatePreflight;
+};
+export type GetRuntimeUpdatePreflightResponse = GetRuntimeUpdatePreflightResponses[keyof GetRuntimeUpdatePreflightResponses];
 export type ListUsersData = {
     body?: never;
     path?: never;