windmill-client 1.814.0 → 1.816.0

package/dist/types.gen.d.ts

@@ -189,6 +189,14 @@ export type DbtAssetProvenance = {
 export type UserDraftOverlay = {
     is_draft: boolean;
     draft_saved_at?: string;
+    /**
+     * The deployed version the draft forked from, as text whatever the
+     * kind (script hash, flow version id, app version id). Compare to the
+     * deployed head to tell a draft that is behind. Absent when there is
+     * no draft or it was never forked from a deploy.
+     *
+     */
+    draft_base?: string;
     no_deployed?: boolean;
     draft?: {
         [key: string]: unknown;
@@ -1964,6 +1972,12 @@ export type AIConfig = {
     model_pricing?: {
         [key: string]: ModelPriceOverride;
     };
+    /**
+     * Context window in tokens per `provider:model`, overriding the built-in table the AI chat uses to decide when to compact its history.
+     */
+    context_window_per_model?: {
+        [key: string]: (number);
+    };
     /**
      * Hides the Windmill AI assistant (chat, sessions, code generation, completion, fixes) from the workspace UI. Read from the workspace's own settings even when the providers served fall back to the instance config. AI agent steps and the AI sandbox in flows are unaffected.
      */
@@ -2350,6 +2364,8 @@ export type NewScript = {
 export type ScriptHistory = {
     script_hash: string;
     deployment_msg?: string;
+    created_at?: string;
+    created_by?: string;
 };
 /**
  * The arguments to pass to the script or flow
@@ -4846,8 +4862,170 @@ export type CustomInstanceDbLogs = {
     grant_permissions?: LoggedWizardStatus;
     replication_user?: LoggedWizardStatus;
     replication_user_error?: string;
+    user_connect?: LoggedWizardStatus;
 };
 export type CustomInstanceDbTag = 'ducklake' | 'datatable';
+export type InstanceDatatableRole = {
+    id: string;
+    name: string;
+    enabled: boolean;
+};
+export type DatatableRoleTenants = {
+    id: string;
+    name?: string;
+    tenants: Array<(string)>;
+};
+export type DatatablePermissions = {
+    /**
+     * Whether this data table can be put under roles at all. Only one backed by the instance database can: a role is a login on that cluster.
+     */
+    supported: boolean;
+    permissioned: boolean;
+    default_role: string;
+    roles: Array<DatatableRoleTenants>;
+    governing_workspace_id?: string;
+    /**
+     * for a clone, the data table whose roles it takes
+     */
+    clone_of?: {
+        workspace_id: string;
+        datatable: string;
+    };
+    editable: boolean;
+    available_roles: Array<InstanceDatatableRole>;
+    ungoverned_reachers?: Array<{
+        workspace_id: string;
+        datatable: string;
+    }>;
+};
+/**
+ * what access is read or changed on
+ */
+export type AclTarget = AclTargetDatabase | AclTargetSchema | AclTargetTable;
+export type AclTargetDatabase = {
+    kind: 'database';
+};
+export type AclTargetSchema = {
+    kind: 'schema';
+    schema: string;
+};
+export type AclTargetTable = {
+    kind: 'table';
+    schema: string;
+    table: string;
+};
+/**
+ * one change to plan or apply
+ */
+export type AclChange = AclChangeSetOwner | AclChangeGrant | AclChangeRevoke;
+/**
+ * hands the target to role — for a schema, with everything already in it but an extension's members, which stay with the extension
+ */
+export type AclChangeSetOwner = {
+    type: 'set_owner';
+    /**
+     * a data table role of the instance, or admin
+     */
+    role: string;
+};
+export type AclChangeGrant = {
+    type: 'grant';
+    /**
+     * a data table role of the instance, or admin
+     */
+    role: string;
+    privileges: Array<(string)>;
+    scope: AclGrantScope;
+};
+export type AclChangeRevoke = {
+    type: 'revoke';
+    /**
+     * a data table role of the instance, other than admin
+     */
+    role: string;
+    privileges: Array<(string)>;
+    scope: AclGrantScope;
+    /**
+     * objects inside the target the revoke covers, empty for the target itself. Only with the target scope; a revoke on all objects of a kind is refused, since it cannot say which grants it takes back.
+     */
+    objects?: Array<AclObject>;
+};
+export type AclGrantScope = 'target' | 'all_tables' | 'all_sequences' | 'all_functions' | 'future_tables' | 'future_sequences' | 'future_functions';
+export type AclChangeRequest = {
+    target: AclTarget;
+    change: AclChange;
+    /**
+     * The statements the plan showed. Required to apply, which plans again and refuses if the result differs.
+     */
+    statements?: Array<(string)>;
+};
+export type AclPlan = {
+    statements: Array<(string)>;
+    warnings: Array<(string)>;
+};
+export type AclObject = {
+    name: string;
+    /**
+     * TABLE, SEQUENCE, FUNCTION, PROCEDURE or TYPE — what the object is. A revoke turns it into the keyword it takes, ROUTINE for both routine kinds; a type's grants are read only.
+     */
+    kind: string;
+    /**
+     * identity arguments of a routine, which is what tells two of the same name apart
+     */
+    args?: string;
+};
+export type AclGrant = {
+    grantee: string;
+    privileges: Array<(string)>;
+    object?: AclObject;
+    /**
+     * set for a default privilege, naming the kind of object it covers (TABLES, SEQUENCES, FUNCTIONS, TYPES, or SCHEMAS). On a schema, the defaults set in that schema; on the database, the ones set database-wide, which apply in every schema and which no schema's own defaults take back.
+     */
+    future?: string;
+    /**
+     * the roles the grant comes from, each once — who granted it, or for a default privilege the role whose future objects it covers. A revoke of some of the grant's privileges takes them back from every source that gave them.
+     */
+    sources: Array<AclSource>;
+};
+export type AclSource = {
+    role: string;
+    /**
+     * what role gave of the grant's privileges. A revoke is held back only by a source out of reach that gave some of what it takes back.
+     */
+    privileges: Array<(string)>;
+    /**
+     * whether the data table's connection can take back what role gave. On an object that is the owner, when the connection acts for the owner, and otherwise the connection itself; for a default privilege, a creating role the connection acts for. What a source out of reach gave is not revocable from here; privileges only other sources gave still are.
+     */
+    reachable: boolean;
+};
+export type DatatableAclInfo = {
+    owner: string;
+    /**
+     * the roles a change may name; empty unless the caller may change anything
+     */
+    roles: Array<(string)>;
+    /**
+     * whether the caller may plan and apply changes
+     */
+    editable: boolean;
+    /**
+     * whether this is a clone, whose grants stay as they were copied
+     */
+    clone: boolean;
+    /**
+     * whether the server is Postgres 17+, which added the MAINTAIN table privilege
+     */
+    supports_maintain: boolean;
+    /**
+     * the database the target lives in
+     */
+    dbname: string;
+    grants: Array<AclGrant>;
+    /**
+     * a database's schemas, or a schema's tables
+     */
+    children: Array<(string)>;
+};
 export type CustomInstanceDb = {
     logs: CustomInstanceDbLogs;
     /**
@@ -5617,6 +5795,10 @@ export type UserWorkspaceList = {
         dev_workspace_label?: string | null;
         created_by?: string | null;
         disabled: boolean;
+        /**
+         * Whether this membership is a service account.
+         */
+        is_service_account?: boolean;
     }>;
 };
 export type CreateWorkspace = {
@@ -5642,6 +5824,10 @@ export type CreateWorkspaceFork = {
          * New database name for the fork
          */
         new_dbname: string;
+        /**
+         * What the fork request copies into `new_dbname`, which it creates — with the owners and grants of a data table under roles. This server refuses an entry without it; servers predating it expect `new_dbname` created and filled beforehand.
+         */
+        fork_behavior?: 'schema_only' | 'schema_and_data';
     }>;
     /**
      * Lake names the fork SHARES with the parent (reads and writes the parent's lake directly). Every lake not listed gets the default isolated fork namespace with read-defer to the parent.
@@ -5967,9 +6153,21 @@ export type AppWithLastVersion = {
     bundle_secret?: string;
     labels?: Array<(string)>;
 };
+/**
+ * What a deploy of an existing app answers with. `version` is the one this call wrote, which is what an editor pins as the fork base of the draft it starts next: reading the head back afterwards cannot tell it from a deploy that landed beside it. A metadata-only update writes none and reports the head it kept.
+ */
+export type AppDeployed = {
+    /**
+     * Where the app now lives, which differs from the request path on a rename.
+     */
+    path: string;
+    version: number;
+};
 export type AppHistory = {
     version: number;
     deployment_msg?: string;
+    created_at?: string;
+    created_by?: string;
 };
 export type EmbedTokenResponse = {
     /**
@@ -6013,6 +6211,7 @@ export type FlowVersion = {
     id: number;
     created_at: string;
     deployment_msg?: string;
+    created_by?: string;
 };
 export type SlackToken = {
     access_token: string;
@@ -6113,10 +6312,27 @@ export type DucklakeSettings = {
 export type DataTableSettings = {
     datatables: {
         [key: string]: {
-            database: {
+            /**
+             * Set on an entry that owns its database. Absent on a fork's entry, which points at another workspace's data table instead.
+             */
+            database?: {
                 resource_type: 'postgresql' | 'instance';
                 resource_path?: string;
             };
+            /**
+             * The workspace and data table that govern this one. Server-owned: written by fork creation, and carried across a settings save whatever the request says.
+             */
+            reference?: {
+                workspace_id: string;
+                datatable: string;
+            };
+            /**
+             * On a clone, the data table it was copied from, whose roles it takes. Server-owned like `reference`.
+             */
+            governed_by?: {
+                workspace_id: string;
+                datatable: string;
+            };
             /**
              * Whether the SQL migrations feature is opted in for this data table
              */
@@ -6172,6 +6388,24 @@ export type DataTableTables = {
         [key: string]: Array<(string)>;
     };
     error?: string;
+    /**
+     * on the instance database, the only kind that can be under roles or have its access edited
+     */
+    instance: boolean;
+    permissioned: boolean;
+    /**
+     * the roles the caller may connect as, by name; empty when not under roles
+     */
+    usable_roles: Array<(string)>;
+    default_role: string;
+    /**
+     * whether the role the listing connected as may create schemas
+     */
+    can_create_schema: boolean;
+    /**
+     * the schemas the role the listing connected as may create in
+     */
+    creatable_schemas: Array<(string)>;
 };
 export type DataTableTableSchema = {
     datatable_name: string;
@@ -8538,6 +8772,10 @@ export type GetPublicSettingsResponse = {
      * Whether this workspace admits guest sessions. An app's own `guest` execution mode is inert while this is false.
      */
     guest_access_enabled: boolean;
+    /**
+     * Whether every new fork of this workspace starts with its admins and developers as members, keeping their role.
+     */
+    add_admins_and_developers_to_forks: boolean;
 };
 export type GetSettingsData = {
     workspace: string;
@@ -8591,6 +8829,10 @@ export type GetSettingsResponse = {
      * JWKS URL a guest JWT (`jwt_guest_`) is verified against for this workspace. Mutually exclusive with `guest_jwt_public_key`.
      */
     guest_jwt_jwks_url?: string;
+    /**
+     * Whether every new fork of this workspace starts with its admins and developers as members, keeping their role.
+     */
+    add_admins_and_developers_to_forks?: boolean;
 };
 export type GetDeployToData = {
     workspace: string;
@@ -8929,7 +9171,53 @@ export type ListDataTablesResponse = Array<{
     name: string;
     resource_type: 'postgres' | 'instance';
     resource_path: string;
+    governing_workspace_id?: string;
+    permissioned: boolean;
 }>;
+export type GetDatatablePermissionsData = {
+    datatableName: string;
+    workspace: string;
+};
+export type GetDatatablePermissionsResponse = DatatablePermissions;
+export type SetDatatablePermissionsData = {
+    datatableName: string;
+    requestBody: {
+        permissioned: boolean;
+        default_role?: string;
+        roles?: Array<DatatableRoleTenants>;
+    };
+    workspace: string;
+};
+export type SetDatatablePermissionsResponse = string;
+export type GetDatatableAclData = {
+    datatableName: string;
+    kind: 'database' | 'schema' | 'table';
+    schema?: string;
+    table?: string;
+    workspace: string;
+};
+export type GetDatatableAclResponse = DatatableAclInfo;
+export type PlanDatatableAclData = {
+    datatableName: string;
+    requestBody: AclChangeRequest;
+    workspace: string;
+};
+export type PlanDatatableAclResponse = AclPlan;
+export type ApplyDatatableAclData = {
+    datatableName: string;
+    requestBody: AclChangeRequest;
+    workspace: string;
+};
+export type ApplyDatatableAclResponse = string;
+export type ListUsableDatatableRolesData = {
+    datatableName: string;
+    workspace: string;
+};
+export type ListUsableDatatableRolesResponse = {
+    permissioned: boolean;
+    roles: Array<(string)>;
+    default_role: string;
+};
 export type ListDataTableSchemasData = {
     workspace: string;
 };
@@ -8948,11 +9236,27 @@ export type TestDataTableConnectionResponse = {
     suggested_search_path?: string;
 };
 export type ListDataTableTablesData = {
+    /**
+     * list only this data table; each listed data table opens a connection to its database
+     */
+    datatableName?: string;
+    /**
+     * the role to list `role_for` as; refused, in that entry's `error`, if the caller may not use it
+     */
+    role?: string;
+    /**
+     * the data table `role` applies to; every other one is listed as its default role
+     */
+    roleFor?: string;
     workspace: string;
 };
 export type ListDataTableTablesResponse = Array<DataTableTables>;
 export type GetDataTableTableSchemaData = {
     datatableName: string;
+    /**
+     * the data table role to read the table as; defaults to the data table's default role
+     */
+    role?: string;
     schemaName: string;
     tableName: string;
     workspace: string;
@@ -8988,7 +9292,15 @@ export type EditDataTableConfigData = {
     };
     workspace: string;
 };
-export type EditDataTableConfigResponse = unknown;
+export type EditDataTableConfigResponse = {
+    /**
+     * Data tables in other workspaces that were governed by one this save deleted and no longer resolve.
+     */
+    stranded_references?: Array<{
+        workspace_id: string;
+        datatable: string;
+    }>;
+};
 export type RunDatatableMigrationsData = {
     datatableName: string;
     /**
@@ -9267,6 +9579,16 @@ export type EditGuestAccessData = {
     workspace: string;
 };
 export type EditGuestAccessResponse = string;
+export type EditAddAdminsAndDevelopersToForksData = {
+    /**
+     * Whether new forks start with this workspace's admins and developers
+     */
+    requestBody: {
+        add_admins_and_developers_to_forks: boolean;
+    };
+    workspace: string;
+};
+export type EditAddAdminsAndDevelopersToForksResponse = string;
 export type EditGuestJwtKeyData = {
     /**
      * The guest JWT verification key
@@ -9547,6 +9869,25 @@ export type RefreshCustomInstanceUserPwdResponse = {
 export type ListCustomInstanceDbsResponse = {
     [key: string]: CustomInstanceDb;
 };
+export type ListInstanceDatatableRolesResponse = Array<InstanceDatatableRole>;
+export type CreateInstanceDatatableRoleData = {
+    requestBody: {
+        name: string;
+    };
+};
+export type CreateInstanceDatatableRoleResponse = InstanceDatatableRole;
+export type UpdateInstanceDatatableRoleData = {
+    id: string;
+    requestBody: {
+        name?: string;
+        enabled?: boolean;
+    };
+};
+export type UpdateInstanceDatatableRoleResponse = InstanceDatatableRole;
+export type DeleteInstanceDatatableRoleData = {
+    id: string;
+};
+export type DeleteInstanceDatatableRoleResponse = unknown;
 export type SetupCustomInstanceDbData = {
     /**
      * The name of the database to create
@@ -10864,7 +11205,15 @@ export type ListFlowsResponse = Array<(Flow & {
     }>;
 })>;
 export type GetFlowHistoryData = {
+    /**
+     * which page to return (start at 1, default 1)
+     */
+    page?: number;
     path: string;
+    /**
+     * number of items to return for a given page (default 30, max 100)
+     */
+    perPage?: number;
     workspace: string;
 };
 export type GetFlowHistoryResponse = Array<FlowVersion>;
@@ -11211,7 +11560,15 @@ export type GetAppLiteByPathData = {
 };
 export type GetAppLiteByPathResponse = AppWithLastVersion;
 export type GetAppHistoryByPathData = {
+    /**
+     * which page to return (start at 1, default 1)
+     */
+    page?: number;
     path: string;
+    /**
+     * number of items to return for a given page (default 30, max 100)
+     */
+    perPage?: number;
     workspace: string;
 };
 export type GetAppHistoryByPathResponse = Array<AppHistory>;
@@ -11311,7 +11668,7 @@ export type UpdateAppData = {
     };
     workspace: string;
 };
-export type UpdateAppResponse = string;
+export type UpdateAppResponse = AppDeployed;
 export type CreateAppRawSourceData = {
     /**
      * raw app sources to bundle and deploy
@@ -11390,7 +11747,7 @@ export type UpdateAppRawSourceData = {
     };
     workspace: string;
 };
-export type UpdateAppRawSourceResponse = string;
+export type UpdateAppRawSourceResponse = AppDeployed;
 export type UpdateAppRawData = {
     /**
      * update app
@@ -11423,7 +11780,7 @@ export type UpdateAppRawData = {
     path: string;
     workspace: string;
 };
-export type UpdateAppRawResponse = string;
+export type UpdateAppRawResponse = AppDeployed;
 export type CustomPathExistsData = {
     customPath: string;
     workspace: string;
@@ -11939,7 +12296,15 @@ export type ListTokensOfScriptData = {
 };
 export type ListTokensOfScriptResponse = Array<TruncatedToken>;
 export type GetScriptHistoryByPathData = {
+    /**
+     * which page to return (start at 1, default 1)
+     */
+    page?: number;
     path: string;
+    /**
+     * number of items to return for a given page (default 30, max 100)
+     */
+    perPage?: number;
     workspace: string;
 };
 export type GetScriptHistoryByPathResponse = Array<ScriptHistory>;
@@ -12252,7 +12617,27 @@ export type UpdateDraftData = {
 export type UpdateDraftResponse = {
     status: 'saved' | 'conflict';
     current_timestamp: string;
+    /**
+     * `saved` only, upsert or delete: where the write landed. Differs from the URL path when the item had moved away from it; the editor follows it there. Absent when a delete found nothing to remove and the caller cannot read the path it moved to.
+     */
+    path?: string;
 };
+export type MoveDraftData = {
+    /**
+     * script, flow, app or raw_app only.
+     */
+    kind: 'script' | 'flow' | 'app' | 'raw_app';
+    path: string;
+    requestBody: {
+        new_path: string;
+        /**
+         * Also restate the draft's summary.
+         */
+        summary?: string;
+    };
+    workspace: string;
+};
+export type MoveDraftResponse = string;
 export type MigrateLegacyDraftData = {
     kind: UserDraftItemKind;
     path: string;
@@ -20731,6 +21116,10 @@ export type $OpenApiTs = {
                      * Whether this workspace admits guest sessions. An app's own `guest` execution mode is inert while this is false.
                      */
                     guest_access_enabled: boolean;
+                    /**
+                     * Whether every new fork of this workspace starts with its admins and developers as members, keeping their role.
+                     */
+                    add_admins_and_developers_to_forks: boolean;
                 };
             };
         };
@@ -20793,6 +21182,10 @@ export type $OpenApiTs = {
                      * JWKS URL a guest JWT (`jwt_guest_`) is verified against for this workspace. Mutually exclusive with `guest_jwt_public_key`.
                      */
                     guest_jwt_jwks_url?: string;
+                    /**
+                     * Whether every new fork of this workspace starts with its admins and developers as members, keeping their role.
+                     */
+                    add_admins_and_developers_to_forks?: boolean;
                 };
             };
         };
@@ -21431,10 +21824,108 @@ export type $OpenApiTs = {
                     name: string;
                     resource_type: 'postgres' | 'instance';
                     resource_path: string;
+                    governing_workspace_id?: string;
+                    permissioned: boolean;
                 }>;
             };
         };
     };
+    '/w/{workspace}/workspaces/datatable_permissions/{datatable_name}': {
+        get: {
+            req: {
+                datatableName: string;
+                workspace: string;
+            };
+            res: {
+                /**
+                 * the data table's roles and their tenants
+                 */
+                200: DatatablePermissions;
+            };
+        };
+        post: {
+            req: {
+                datatableName: string;
+                requestBody: {
+                    permissioned: boolean;
+                    default_role?: string;
+                    roles?: Array<DatatableRoleTenants>;
+                };
+                workspace: string;
+            };
+            res: {
+                /**
+                 * status
+                 */
+                200: string;
+            };
+        };
+    };
+    '/w/{workspace}/workspaces/datatable_acl/{datatable_name}': {
+        get: {
+            req: {
+                datatableName: string;
+                kind: 'database' | 'schema' | 'table';
+                schema?: string;
+                table?: string;
+                workspace: string;
+            };
+            res: {
+                /**
+                 * owner and grants
+                 */
+                200: DatatableAclInfo;
+            };
+        };
+    };
+    '/w/{workspace}/workspaces/datatable_acl/{datatable_name}/plan': {
+        post: {
+            req: {
+                datatableName: string;
+                requestBody: AclChangeRequest;
+                workspace: string;
+            };
+            res: {
+                /**
+                 * statements that would run, in a single transaction
+                 */
+                200: AclPlan;
+            };
+        };
+    };
+    '/w/{workspace}/workspaces/datatable_acl/{datatable_name}/apply': {
+        post: {
+            req: {
+                datatableName: string;
+                requestBody: AclChangeRequest;
+                workspace: string;
+            };
+            res: {
+                /**
+                 * change applied
+                 */
+                200: string;
+            };
+        };
+    };
+    '/w/{workspace}/workspaces/datatable_usable_roles/{datatable_name}': {
+        get: {
+            req: {
+                datatableName: string;
+                workspace: string;
+            };
+            res: {
+                /**
+                 * usable roles
+                 */
+                200: {
+                    permissioned: boolean;
+                    roles: Array<(string)>;
+                    default_role: string;
+                };
+            };
+        };
+    };
     '/w/{workspace}/workspaces/list_datatable_schemas': {
         get: {
             req: {
@@ -21473,6 +21964,18 @@ export type $OpenApiTs = {
     '/w/{workspace}/workspaces/list_datatable_tables': {
         get: {
             req: {
+                /**
+                 * list only this data table; each listed data table opens a connection to its database
+                 */
+                datatableName?: string;
+                /**
+                 * the role to list `role_for` as; refused, in that entry's `error`, if the caller may not use it
+                 */
+                role?: string;
+                /**
+                 * the data table `role` applies to; every other one is listed as its default role
+                 */
+                roleFor?: string;
                 workspace: string;
             };
             res: {
@@ -21487,6 +21990,10 @@ export type $OpenApiTs = {
         get: {
             req: {
                 datatableName: string;
+                /**
+                 * the data table role to read the table as; defaults to the data table's default role
+                 */
+                role?: string;
                 schemaName: string;
                 tableName: string;
                 workspace: string;
@@ -21544,7 +22051,15 @@ export type $OpenApiTs = {
                 /**
                  * status
                  */
-                200: unknown;
+                200: {
+                    /**
+                     * Data tables in other workspaces that were governed by one this save deleted and no longer resolve.
+                     */
+                    stranded_references?: Array<{
+                        workspace_id: string;
+                        datatable: string;
+                    }>;
+                };
             };
         };
     };
@@ -22042,6 +22557,25 @@ export type $OpenApiTs = {
             };
         };
     };
+    '/w/{workspace}/workspaces/edit_add_admins_and_developers_to_forks': {
+        post: {
+            req: {
+                /**
+                 * Whether new forks start with this workspace's admins and developers
+                 */
+                requestBody: {
+                    add_admins_and_developers_to_forks: boolean;
+                };
+                workspace: string;
+            };
+            res: {
+                /**
+                 * status
+                 */
+                200: string;
+            };
+        };
+    };
     '/w/{workspace}/workspaces/edit_guest_jwt_key': {
         post: {
             req: {
@@ -22626,6 +23160,57 @@ export type $OpenApiTs = {
             };
         };
     };
+    '/settings/datatable_roles': {
+        get: {
+            res: {
+                /**
+                 * the instance role catalog
+                 */
+                200: Array<InstanceDatatableRole>;
+            };
+        };
+        post: {
+            req: {
+                requestBody: {
+                    name: string;
+                };
+            };
+            res: {
+                /**
+                 * the created role
+                 */
+                200: InstanceDatatableRole;
+            };
+        };
+    };
+    '/settings/datatable_roles/{id}': {
+        post: {
+            req: {
+                id: string;
+                requestBody: {
+                    name?: string;
+                    enabled?: boolean;
+                };
+            };
+            res: {
+                /**
+                 * the updated role
+                 */
+                200: InstanceDatatableRole;
+            };
+        };
+        delete: {
+            req: {
+                id: string;
+            };
+            res: {
+                /**
+                 * deleted
+                 */
+                200: unknown;
+            };
+        };
+    };
     '/settings/setup_custom_instance_pg_database/{name}': {
         post: {
             req: {
@@ -25046,7 +25631,15 @@ export type $OpenApiTs = {
     '/w/{workspace}/flows/history/p/{path}': {
         get: {
             req: {
+                /**
+                 * which page to return (start at 1, default 1)
+                 */
+                page?: number;
                 path: string;
+                /**
+                 * number of items to return for a given page (default 30, max 100)
+                 */
+                perPage?: number;
                 workspace: string;
             };
             res: {
@@ -25681,7 +26274,15 @@ export type $OpenApiTs = {
     '/w/{workspace}/apps/history/p/{path}': {
         get: {
             req: {
+                /**
+                 * which page to return (start at 1, default 1)
+                 */
+                page?: number;
                 path: string;
+                /**
+                 * number of items to return for a given page (default 30, max 100)
+                 */
+                perPage?: number;
                 workspace: string;
             };
             res: {
@@ -25893,7 +26494,7 @@ export type $OpenApiTs = {
                 /**
                  * app updated
                  */
-                200: string;
+                200: AppDeployed;
             };
         };
     };
@@ -25990,7 +26591,7 @@ export type $OpenApiTs = {
                 /**
                  * app updated
                  */
-                200: string;
+                200: AppDeployed;
             };
         };
     };
@@ -26032,7 +26633,7 @@ export type $OpenApiTs = {
                 /**
                  * app updated
                  */
-                200: string;
+                200: AppDeployed;
             };
         };
     };
@@ -26823,7 +27424,15 @@ export type $OpenApiTs = {
     '/w/{workspace}/scripts/history/p/{path}': {
         get: {
             req: {
+                /**
+                 * which page to return (start at 1, default 1)
+                 */
+                page?: number;
                 path: string;
+                /**
+                 * number of items to return for a given page (default 30, max 100)
+                 */
+                perPage?: number;
                 workspace: string;
             };
             res: {
@@ -27333,10 +27942,39 @@ export type $OpenApiTs = {
                 200: {
                     status: 'saved' | 'conflict';
                     current_timestamp: string;
+                    /**
+                     * `saved` only, upsert or delete: where the write landed. Differs from the URL path when the item had moved away from it; the editor follows it there. Absent when a delete found nothing to remove and the caller cannot read the path it moved to.
+                     */
+                    path?: string;
                 };
             };
         };
     };
+    '/w/{workspace}/drafts/move/{kind}/{path}': {
+        post: {
+            req: {
+                /**
+                 * script, flow, app or raw_app only.
+                 */
+                kind: 'script' | 'flow' | 'app' | 'raw_app';
+                path: string;
+                requestBody: {
+                    new_path: string;
+                    /**
+                     * Also restate the draft's summary.
+                     */
+                    summary?: string;
+                };
+                workspace: string;
+            };
+            res: {
+                /**
+                 * move result
+                 */
+                200: string;
+            };
+        };
+    };
     '/w/{workspace}/drafts/migrate_legacy/{kind}/{path}': {
         post: {
             req: {