Variable: AppInstallChange

const AppInstallChange: z.ZodObject<{
  approvalSettings: z.ZodObject<{
     fourEyes: z.ZodBoolean;
     required: z.ZodBoolean;
  }, z.core.$strip>;
  comment: z.ZodNullable<z.ZodString>;
  config: z.ZodRecord<z.ZodString, z.ZodUnknown>;
  decidedAt: z.ZodNullable<z.ZodCoercedDate<unknown>>;
  decidedBy: z.ZodNullable<z.ZodString>;
  decision: z.ZodNullable<z.ZodEnum<{
     approved: "approved";
     rejected: "rejected";
     withdrawn: "withdrawn";
  }>>;
  decisionComment: z.ZodNullable<z.ZodString>;
  enabled: z.ZodBoolean;
  handlesAdded: z.ZodArray<z.ZodEnum<{
     handoff: "handoff";
     webhook: "webhook";
  }>>;
  hosts: z.ZodArray<z.ZodString>;
  hostsAdded: z.ZodArray<z.ZodString>;
  id: z.ZodGUID;
  installId: z.ZodGUID;
  installName: z.ZodString;
  installUpdatedAt: z.ZodCoercedDate<unknown>;
  needsAdded: z.ZodArray<z.ZodEnum<{
     documents: "documents";
  }>>;
  newInstall: z.ZodBoolean;
  origin: z.ZodEnum<{
     auto_upgrade: "auto_upgrade";
     save: "save";
  }>;
  requestedAt: z.ZodCoercedDate<unknown>;
  requestedBy: z.ZodString;
  tenantId: z.ZodGUID;
  versionId: z.ZodGUID;
}, z.core.$strip>;

A save held for another administrator, or an automatic upgrade held for one: the state it asks for, applied as a whole once approved. The install keeps serving as it is meanwhile; a new install waits disabled and without hosts, so its secrets can be stored. One change is open per install, and a newer save withdraws it.