Type Alias: AppInstallChange

type AppInstallChange = z.infer<typeof AppInstallChange>;

A save held for another administrator, or an automatic upgrade held for one: the state it asks for, applied as a whole once approved. The install keeps serving as it is meanwhile; a new install waits disabled and without hosts, so its secrets can be stored. One change is open per install, and a newer save withdraws it.