pgbeam 0.3.9 → 0.3.11

package/dist/operations.d.cts

@@ -1102,6 +1102,16 @@ type ApprovalRequest = {
      * @type string | undefined
     */
     statement_kind?: string;
+    /**
+     * @description Best-effort estimate of how many rows the statement would affect, attached by the data plane when the statement was held. Either the planner estimate from EXPLAIN or the exact count observed in a rolled-back trial execution. Null when no estimate could be made; treat it as an estimate, not a guarantee.
+     * @type integer
+    */
+    estimated_rows?: number | null;
+    /**
+     * @description Relations the statement touches, from the gateway\'s parse analysis.
+     * @type array | undefined
+    */
+    target_tables?: string[];
     /**
      * @description Current state of the approval request.
      * @type string
@@ -1347,6 +1357,7 @@ type AuditDecisionKey = (typeof auditDecision)[keyof typeof auditDecision];
 declare const auditSource: {
     readonly wire: "wire";
     readonly mcp: "mcp";
+    readonly rest: "rest";
     readonly control: "control";
 };
 type AuditSourceKey = (typeof auditSource)[keyof typeof auditSource];
@@ -1447,7 +1458,7 @@ type AuditLogEntry = {
     */
     session_id?: string;
     /**
-     * @description Statement origin (wire, mcp, or control for control-plane lifecycle events).
+     * @description Statement origin (wire, mcp, rest, or control for control-plane lifecycle events).
      * @type string | undefined
     */
     source?: string;
@@ -1524,7 +1535,7 @@ type ListAuditLogsQueryEvent = string | undefined;
 */
 type ListAuditLogsQueryDecision = AuditDecisionKey | undefined;
 /**
- * @description Filter by statement origin (wire, mcp, or control).
+ * @description Filter by statement origin (wire, mcp, rest, or control).
  * @type string | undefined
 */
 type ListAuditLogsQuerySource = AuditSourceKey | undefined;
@@ -1616,7 +1627,7 @@ type ExportAuditLogsQueryEvent = string | undefined;
 */
 type ExportAuditLogsQueryDecision = AuditDecisionKey | undefined;
 /**
- * @description Filter by statement origin (wire, mcp, or control).
+ * @description Filter by statement origin (wire, mcp, rest, or control).
  * @type string | undefined
 */
 type ExportAuditLogsQuerySource = AuditSourceKey | undefined;
@@ -6828,6 +6839,11 @@ type SelfHostEnrollment = {
      * @type string
     */
     revoked_at?: string | null;
+    /**
+     * @description When the enrollment token expires and stops authenticating new proxy connections. Null means it never expires. Enforcement is fail-closed at the gRPC auth gate the instant this time passes.
+     * @type string
+    */
+    expires_at?: string | null;
 };
 
 /**
@@ -6908,6 +6924,11 @@ type CreateSelfHostEnrollmentRequest = {
      * @type string | undefined
     */
     description?: string;
+    /**
+     * @description Optional expiry. When set, the enrollment token stops authenticating new proxy connections at this time (must be in the future). Omit or set null for a token that never expires.
+     * @type string
+    */
+    expires_at?: string | null;
 };
 
 /**
@@ -6916,7 +6937,7 @@ type CreateSelfHostEnrollmentRequest = {
 */
 
 /**
- * @description Response returned once when an enrollment is created. The token is shown a single time and cannot be retrieved again; set it as GRPC_AUTH_TOKEN on the self-hosted proxy.\n
+ * @description Response returned once when an enrollment is created or its token is rotated. The token is shown a single time and cannot be retrieved again; set it as GRPC_AUTH_TOKEN on the self-hosted proxy.\n
  * @type object
 */
 type SelfHostEnrollmentSecret = {
@@ -6946,7 +6967,7 @@ type SelfHostEnrollmentSecret = {
 */
 type CreateSelfHostEnrollmentPathOrgId = string;
 /**
- * @description Response returned once when an enrollment is created. The token is shown a single time and cannot be retrieved again; set it as GRPC_AUTH_TOKEN on the self-hosted proxy.\n
+ * @description Response returned once when an enrollment is created or its token is rotated. The token is shown a single time and cannot be retrieved again; set it as GRPC_AUTH_TOKEN on the self-hosted proxy.\n
  * @type object
 */
 type CreateSelfHostEnrollmentStatus201 = SelfHostEnrollmentSecret;
@@ -7013,6 +7034,50 @@ type RevokeSelfHostEnrollmentRequestConfig = {
     url: `/v1/organizations/${string}/self-host-enrollments/${string}`;
 };
 
+/**
+* Generated by Kubb (https://kubb.dev/).
+* Do not edit manually.
+*/
+
+/**
+ * @description Unique organization identifier.
+ * @pattern ^[a-zA-Z0-9_.-]+$
+ * @example org_abc123
+ * @type string
+*/
+type RotateSelfHostEnrollmentPathOrgId = string;
+/**
+ * @description Unique enrollment identifier.
+ * @pattern ^[a-zA-Z0-9_.-]+$
+ * @example she_01h455vb4pex5vsknk084sn02q
+ * @type string
+*/
+type RotateSelfHostEnrollmentPathEnrollmentId = string;
+/**
+ * @description Response returned once when an enrollment is created or its token is rotated. The token is shown a single time and cannot be retrieved again; set it as GRPC_AUTH_TOKEN on the self-hosted proxy.\n
+ * @type object
+*/
+type RotateSelfHostEnrollmentStatus200 = SelfHostEnrollmentSecret;
+/**
+ * @type object
+*/
+type RotateSelfHostEnrollmentRequestConfig = {
+    data?: never;
+    /**
+     * @type object
+    */
+    pathParams: {
+        org_id: RotateSelfHostEnrollmentPathOrgId;
+        enrollment_id: RotateSelfHostEnrollmentPathEnrollmentId;
+    };
+    queryParams?: never;
+    headerParams?: never;
+    /**
+     * @type string
+    */
+    url: `/v1/organizations/${string}/self-host-enrollments/${string}/rotate`;
+};
+
 /**
 * Generated by Kubb (https://kubb.dev/).
 * Do not edit manually.
@@ -8498,6 +8563,10 @@ declare const operationsByTag: {
             readonly method: "DELETE";
             readonly path: "/v1/organizations/{org_id}/self-host-enrollments/{enrollment_id}";
         };
+        readonly rotateSelfHostEnrollment: {
+            readonly method: "POST";
+            readonly path: "/v1/organizations/{org_id}/self-host-enrollments/{enrollment_id}/rotate";
+        };
     };
     readonly migrations: {
         readonly lintMigration: {
@@ -8896,6 +8965,11 @@ declare const operationsByPath: {
         readonly path: "/v1/organizations/{org_id}/self-host-enrollments/{enrollment_id}";
         readonly operationId: "revokeSelfHostEnrollment";
     };
+    readonly "POST /v1/organizations/{org_id}/self-host-enrollments/{enrollment_id}/rotate": {
+        readonly method: "POST";
+        readonly path: "/v1/organizations/{org_id}/self-host-enrollments/{enrollment_id}/rotate";
+        readonly operationId: "rotateSelfHostEnrollment";
+    };
     readonly "GET /v1/organizations/{org_id}/support/cases": {
         readonly method: "GET";
         readonly path: "/v1/organizations/{org_id}/support/cases";
@@ -9171,6 +9245,9 @@ type CreateSelfHostEnrollmentParams = {
 type RevokeSelfHostEnrollmentParams = {
     pathParams: NonNullable<RevokeSelfHostEnrollmentRequestConfig["pathParams"]>;
 };
+type RotateSelfHostEnrollmentParams = {
+    pathParams: NonNullable<RotateSelfHostEnrollmentRequestConfig["pathParams"]>;
+};
 type ListSupportCasesParams = {
     pathParams: NonNullable<ListSupportCasesRequestConfig["pathParams"]>;
     queryParams?: NonNullable<ListSupportCasesRequestConfig["queryParams"]>;
@@ -9295,6 +9372,7 @@ interface ApiOperations {
         listSelfHostEnrollments(params: ListSelfHostEnrollmentsParams): Promise<ListSelfHostEnrollmentsStatus200>;
         createSelfHostEnrollment(params: CreateSelfHostEnrollmentParams): Promise<CreateSelfHostEnrollmentStatus201>;
         revokeSelfHostEnrollment(params: RevokeSelfHostEnrollmentParams): Promise<void>;
+        rotateSelfHostEnrollment(params: RotateSelfHostEnrollmentParams): Promise<RotateSelfHostEnrollmentStatus200>;
     };
     migrations: {
         lintMigration(params: LintMigrationParams): Promise<LintMigrationStatus200>;
@@ -9572,6 +9650,10 @@ interface RequestMap {
         params: RevokeSelfHostEnrollmentParams;
         response: void;
     };
+    "POST /v1/organizations/{org_id}/self-host-enrollments/{enrollment_id}/rotate": {
+        params: RotateSelfHostEnrollmentParams;
+        response: RotateSelfHostEnrollmentStatus200;
+    };
     "GET /v1/organizations/{org_id}/support/cases": {
         params: ListSupportCasesParams;
         response: ListSupportCasesStatus200;

package/dist/operations.d.mts

@@ -1102,6 +1102,16 @@ type ApprovalRequest = {
      * @type string | undefined
     */
     statement_kind?: string;
+    /**
+     * @description Best-effort estimate of how many rows the statement would affect, attached by the data plane when the statement was held. Either the planner estimate from EXPLAIN or the exact count observed in a rolled-back trial execution. Null when no estimate could be made; treat it as an estimate, not a guarantee.
+     * @type integer
+    */
+    estimated_rows?: number | null;
+    /**
+     * @description Relations the statement touches, from the gateway\'s parse analysis.
+     * @type array | undefined
+    */
+    target_tables?: string[];
     /**
      * @description Current state of the approval request.
      * @type string
@@ -1347,6 +1357,7 @@ type AuditDecisionKey = (typeof auditDecision)[keyof typeof auditDecision];
 declare const auditSource: {
     readonly wire: "wire";
     readonly mcp: "mcp";
+    readonly rest: "rest";
     readonly control: "control";
 };
 type AuditSourceKey = (typeof auditSource)[keyof typeof auditSource];
@@ -1447,7 +1458,7 @@ type AuditLogEntry = {
     */
     session_id?: string;
     /**
-     * @description Statement origin (wire, mcp, or control for control-plane lifecycle events).
+     * @description Statement origin (wire, mcp, rest, or control for control-plane lifecycle events).
      * @type string | undefined
     */
     source?: string;
@@ -1524,7 +1535,7 @@ type ListAuditLogsQueryEvent = string | undefined;
 */
 type ListAuditLogsQueryDecision = AuditDecisionKey | undefined;
 /**
- * @description Filter by statement origin (wire, mcp, or control).
+ * @description Filter by statement origin (wire, mcp, rest, or control).
  * @type string | undefined
 */
 type ListAuditLogsQuerySource = AuditSourceKey | undefined;
@@ -1616,7 +1627,7 @@ type ExportAuditLogsQueryEvent = string | undefined;
 */
 type ExportAuditLogsQueryDecision = AuditDecisionKey | undefined;
 /**
- * @description Filter by statement origin (wire, mcp, or control).
+ * @description Filter by statement origin (wire, mcp, rest, or control).
  * @type string | undefined
 */
 type ExportAuditLogsQuerySource = AuditSourceKey | undefined;
@@ -6828,6 +6839,11 @@ type SelfHostEnrollment = {
      * @type string
     */
     revoked_at?: string | null;
+    /**
+     * @description When the enrollment token expires and stops authenticating new proxy connections. Null means it never expires. Enforcement is fail-closed at the gRPC auth gate the instant this time passes.
+     * @type string
+    */
+    expires_at?: string | null;
 };
 
 /**
@@ -6908,6 +6924,11 @@ type CreateSelfHostEnrollmentRequest = {
      * @type string | undefined
     */
     description?: string;
+    /**
+     * @description Optional expiry. When set, the enrollment token stops authenticating new proxy connections at this time (must be in the future). Omit or set null for a token that never expires.
+     * @type string
+    */
+    expires_at?: string | null;
 };
 
 /**
@@ -6916,7 +6937,7 @@ type CreateSelfHostEnrollmentRequest = {
 */
 
 /**
- * @description Response returned once when an enrollment is created. The token is shown a single time and cannot be retrieved again; set it as GRPC_AUTH_TOKEN on the self-hosted proxy.\n
+ * @description Response returned once when an enrollment is created or its token is rotated. The token is shown a single time and cannot be retrieved again; set it as GRPC_AUTH_TOKEN on the self-hosted proxy.\n
  * @type object
 */
 type SelfHostEnrollmentSecret = {
@@ -6946,7 +6967,7 @@ type SelfHostEnrollmentSecret = {
 */
 type CreateSelfHostEnrollmentPathOrgId = string;
 /**
- * @description Response returned once when an enrollment is created. The token is shown a single time and cannot be retrieved again; set it as GRPC_AUTH_TOKEN on the self-hosted proxy.\n
+ * @description Response returned once when an enrollment is created or its token is rotated. The token is shown a single time and cannot be retrieved again; set it as GRPC_AUTH_TOKEN on the self-hosted proxy.\n
  * @type object
 */
 type CreateSelfHostEnrollmentStatus201 = SelfHostEnrollmentSecret;
@@ -7013,6 +7034,50 @@ type RevokeSelfHostEnrollmentRequestConfig = {
     url: `/v1/organizations/${string}/self-host-enrollments/${string}`;
 };
 
+/**
+* Generated by Kubb (https://kubb.dev/).
+* Do not edit manually.
+*/
+
+/**
+ * @description Unique organization identifier.
+ * @pattern ^[a-zA-Z0-9_.-]+$
+ * @example org_abc123
+ * @type string
+*/
+type RotateSelfHostEnrollmentPathOrgId = string;
+/**
+ * @description Unique enrollment identifier.
+ * @pattern ^[a-zA-Z0-9_.-]+$
+ * @example she_01h455vb4pex5vsknk084sn02q
+ * @type string
+*/
+type RotateSelfHostEnrollmentPathEnrollmentId = string;
+/**
+ * @description Response returned once when an enrollment is created or its token is rotated. The token is shown a single time and cannot be retrieved again; set it as GRPC_AUTH_TOKEN on the self-hosted proxy.\n
+ * @type object
+*/
+type RotateSelfHostEnrollmentStatus200 = SelfHostEnrollmentSecret;
+/**
+ * @type object
+*/
+type RotateSelfHostEnrollmentRequestConfig = {
+    data?: never;
+    /**
+     * @type object
+    */
+    pathParams: {
+        org_id: RotateSelfHostEnrollmentPathOrgId;
+        enrollment_id: RotateSelfHostEnrollmentPathEnrollmentId;
+    };
+    queryParams?: never;
+    headerParams?: never;
+    /**
+     * @type string
+    */
+    url: `/v1/organizations/${string}/self-host-enrollments/${string}/rotate`;
+};
+
 /**
 * Generated by Kubb (https://kubb.dev/).
 * Do not edit manually.
@@ -8498,6 +8563,10 @@ declare const operationsByTag: {
             readonly method: "DELETE";
             readonly path: "/v1/organizations/{org_id}/self-host-enrollments/{enrollment_id}";
         };
+        readonly rotateSelfHostEnrollment: {
+            readonly method: "POST";
+            readonly path: "/v1/organizations/{org_id}/self-host-enrollments/{enrollment_id}/rotate";
+        };
     };
     readonly migrations: {
         readonly lintMigration: {
@@ -8896,6 +8965,11 @@ declare const operationsByPath: {
         readonly path: "/v1/organizations/{org_id}/self-host-enrollments/{enrollment_id}";
         readonly operationId: "revokeSelfHostEnrollment";
     };
+    readonly "POST /v1/organizations/{org_id}/self-host-enrollments/{enrollment_id}/rotate": {
+        readonly method: "POST";
+        readonly path: "/v1/organizations/{org_id}/self-host-enrollments/{enrollment_id}/rotate";
+        readonly operationId: "rotateSelfHostEnrollment";
+    };
     readonly "GET /v1/organizations/{org_id}/support/cases": {
         readonly method: "GET";
         readonly path: "/v1/organizations/{org_id}/support/cases";
@@ -9171,6 +9245,9 @@ type CreateSelfHostEnrollmentParams = {
 type RevokeSelfHostEnrollmentParams = {
     pathParams: NonNullable<RevokeSelfHostEnrollmentRequestConfig["pathParams"]>;
 };
+type RotateSelfHostEnrollmentParams = {
+    pathParams: NonNullable<RotateSelfHostEnrollmentRequestConfig["pathParams"]>;
+};
 type ListSupportCasesParams = {
     pathParams: NonNullable<ListSupportCasesRequestConfig["pathParams"]>;
     queryParams?: NonNullable<ListSupportCasesRequestConfig["queryParams"]>;
@@ -9295,6 +9372,7 @@ interface ApiOperations {
         listSelfHostEnrollments(params: ListSelfHostEnrollmentsParams): Promise<ListSelfHostEnrollmentsStatus200>;
         createSelfHostEnrollment(params: CreateSelfHostEnrollmentParams): Promise<CreateSelfHostEnrollmentStatus201>;
         revokeSelfHostEnrollment(params: RevokeSelfHostEnrollmentParams): Promise<void>;
+        rotateSelfHostEnrollment(params: RotateSelfHostEnrollmentParams): Promise<RotateSelfHostEnrollmentStatus200>;
     };
     migrations: {
         lintMigration(params: LintMigrationParams): Promise<LintMigrationStatus200>;
@@ -9572,6 +9650,10 @@ interface RequestMap {
         params: RevokeSelfHostEnrollmentParams;
         response: void;
     };
+    "POST /v1/organizations/{org_id}/self-host-enrollments/{enrollment_id}/rotate": {
+        params: RotateSelfHostEnrollmentParams;
+        response: RotateSelfHostEnrollmentStatus200;
+    };
     "GET /v1/organizations/{org_id}/support/cases": {
         params: ListSupportCasesParams;
         response: ListSupportCasesStatus200;

package/dist/operations.mjs

@@ -286,7 +286,7 @@
         ],
         "requestBodyType": "",
         "requestBodyRequired": false,
-        "responseType": "{ approvals: ({ credential_id?: string; decided_at?: string; decided_by?: string; expires_at: string; id: string; normalized_sql?: string; policy_profile_id: string; project_id: string; reason?: string; region?: string; requested_at: string; session_id?: string; sql: string; statement_kind?: string; status: \"pending\" | \"approved\" | \"rejected\" | \"expired\" | \"executed\" | \"failed\" })[]; next_page_token?: string }",
+        "responseType": "{ approvals: ({ credential_id?: string; decided_at?: string; decided_by?: string; estimated_rows?: number; expires_at: string; id: string; normalized_sql?: string; policy_profile_id: string; project_id: string; reason?: string; region?: string; requested_at: string; session_id?: string; sql: string; statement_kind?: string; status: \"pending\" | \"approved\" | \"rejected\" | \"expired\" | \"executed\" | \"failed\"; target_tables?: string[] })[]; next_page_token?: string }",
         "responseStatus": "200"
     },
     "approveApprovalRequest": {
@@ -313,7 +313,7 @@
         ],
         "requestBodyType": "{ reason?: string }",
         "requestBodyRequired": false,
-        "responseType": "{ credential_id?: string; decided_at?: string; decided_by?: string; expires_at: string; id: string; normalized_sql?: string; policy_profile_id: string; project_id: string; reason?: string; region?: string; requested_at: string; session_id?: string; sql: string; statement_kind?: string; status: \"pending\" | \"approved\" | \"rejected\" | \"expired\" | \"executed\" | \"failed\" }",
+        "responseType": "{ credential_id?: string; decided_at?: string; decided_by?: string; estimated_rows?: number; expires_at: string; id: string; normalized_sql?: string; policy_profile_id: string; project_id: string; reason?: string; region?: string; requested_at: string; session_id?: string; sql: string; statement_kind?: string; status: \"pending\" | \"approved\" | \"rejected\" | \"expired\" | \"executed\" | \"failed\"; target_tables?: string[] }",
         "responseStatus": "200"
     },
     "rejectApprovalRequest": {
@@ -340,7 +340,7 @@
         ],
         "requestBodyType": "{ reason?: string }",
         "requestBodyRequired": false,
-        "responseType": "{ credential_id?: string; decided_at?: string; decided_by?: string; expires_at: string; id: string; normalized_sql?: string; policy_profile_id: string; project_id: string; reason?: string; region?: string; requested_at: string; session_id?: string; sql: string; statement_kind?: string; status: \"pending\" | \"approved\" | \"rejected\" | \"expired\" | \"executed\" | \"failed\" }",
+        "responseType": "{ credential_id?: string; decided_at?: string; decided_by?: string; estimated_rows?: number; expires_at: string; id: string; normalized_sql?: string; policy_profile_id: string; project_id: string; reason?: string; region?: string; requested_at: string; session_id?: string; sql: string; statement_kind?: string; status: \"pending\" | \"approved\" | \"rejected\" | \"expired\" | \"executed\" | \"failed\"; target_tables?: string[] }",
         "responseStatus": "200"
     },
     "listAuditLogs": {
@@ -382,8 +382,8 @@
                 "name": "source",
                 "in": "query",
                 "required": false,
-                "type": "\"wire\" | \"mcp\" | \"control\"",
-                "description": "Filter by statement origin (wire, mcp, or control)."
+                "type": "\"wire\" | \"mcp\" | \"rest\" | \"control\"",
+                "description": "Filter by statement origin (wire, mcp, rest, or control)."
             },
             {
                 "name": "start",
@@ -458,8 +458,8 @@
                 "name": "source",
                 "in": "query",
                 "required": false,
-                "type": "\"wire\" | \"mcp\" | \"control\"",
-                "description": "Filter by statement origin (wire, mcp, or control)."
+                "type": "\"wire\" | \"mcp\" | \"rest\" | \"control\"",
+                "description": "Filter by statement origin (wire, mcp, rest, or control)."
             },
             {
                 "name": "start",
@@ -1598,7 +1598,7 @@
         ],
         "requestBodyType": "",
         "requestBodyRequired": false,
-        "responseType": "{ enrollments: ({ created_at: string; created_by?: string; description?: string; id: string; last_seen_at?: string; org_id: string; region_label?: string; revoked_at?: string })[] }",
+        "responseType": "{ enrollments: ({ created_at: string; created_by?: string; description?: string; expires_at?: string; id: string; last_seen_at?: string; org_id: string; region_label?: string; revoked_at?: string })[] }",
         "responseStatus": "200"
     },
     "createSelfHostEnrollment": {
@@ -1616,9 +1616,9 @@
                 "description": "Unique organization identifier."
             }
         ],
-        "requestBodyType": "{ description?: string; region_label?: string }",
+        "requestBodyType": "{ description?: string; expires_at?: string; region_label?: string }",
         "requestBodyRequired": false,
-        "responseType": "{ enrollment: { created_at: string; created_by?: string; description?: string; id: string; last_seen_at?: string; org_id: string; region_label?: string; revoked_at?: string }; token: string }",
+        "responseType": "{ enrollment: { created_at: string; created_by?: string; description?: string; expires_at?: string; id: string; last_seen_at?: string; org_id: string; region_label?: string; revoked_at?: string }; token: string }",
         "responseStatus": "201"
     },
     "revokeSelfHostEnrollment": {
@@ -1648,6 +1648,33 @@
         "responseType": "",
         "responseStatus": "204"
     },
+    "rotateSelfHostEnrollment": {
+        "operationId": "rotateSelfHostEnrollment",
+        "method": "POST",
+        "path": "/v1/organizations/{org_id}/self-host-enrollments/{enrollment_id}/rotate",
+        "summary": "Rotate a self-host enrollment token",
+        "description": "Mints a new enrollment token in place, keeping the same enrollment id, metadata, and expiry. The swap is atomic: the old token stops authenticating new proxy connections the moment this call returns. An already-connected proxy keeps its existing gRPC streams until it disconnects, then must present the new token to reconnect. The new token is returned once and cannot be retrieved again.",
+        "parameters": [
+            {
+                "name": "org_id",
+                "in": "path",
+                "required": true,
+                "type": "string",
+                "description": "Unique organization identifier."
+            },
+            {
+                "name": "enrollment_id",
+                "in": "path",
+                "required": true,
+                "type": "string",
+                "description": "Unique enrollment identifier."
+            }
+        ],
+        "requestBodyType": "",
+        "requestBodyRequired": false,
+        "responseType": "{ enrollment: { created_at: string; created_by?: string; description?: string; expires_at?: string; id: string; last_seen_at?: string; org_id: string; region_label?: string; revoked_at?: string }; token: string }",
+        "responseStatus": "200"
+    },
     "listSupportCases": {
         "operationId": "listSupportCases",
         "method": "GET",
@@ -2281,6 +2308,10 @@
         revokeSelfHostEnrollment: {
             method: "DELETE",
             path: "/v1/organizations/{org_id}/self-host-enrollments/{enrollment_id}"
+        },
+        rotateSelfHostEnrollment: {
+            method: "POST",
+            path: "/v1/organizations/{org_id}/self-host-enrollments/{enrollment_id}/rotate"
         }
     },
     migrations: {
@@ -2680,6 +2711,11 @@ const operationsByPath = {
         path: "/v1/organizations/{org_id}/self-host-enrollments/{enrollment_id}",
         operationId: "revokeSelfHostEnrollment"
     },
+    "POST /v1/organizations/{org_id}/self-host-enrollments/{enrollment_id}/rotate": {
+        method: "POST",
+        path: "/v1/organizations/{org_id}/self-host-enrollments/{enrollment_id}/rotate",
+        operationId: "rotateSelfHostEnrollment"
+    },
     "GET /v1/organizations/{org_id}/support/cases": {
         method: "GET",
         path: "/v1/organizations/{org_id}/support/cases",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pgbeam",
-  "version": "0.3.9",
+  "version": "0.3.11",
   "description": "TypeScript SDK for the PgBeam API — globally distributed PostgreSQL proxy platform",
   "type": "module",
   "exports": {