let APP_ID = ...;
let TAG_KEY = ...;
let TAG_VALUE = ...; // Remove this and its use below to ignore the value
let TARGET_ID = ...; // Build id (not commit hash)

sdk.pine.patch({
    resource: 'device',
    options: {
        filter: {
            belongs_to__application: APP_ID,
            device_tag: {
                $any: {
                    $alias: 'dt',
                    $expr: {
                        dt: {
                            tag_key: TAG_KEY,
                            value: TAG_VALUE
                        }
                    }
                }
            }
        }
    },
    body: { should_be_running__build: TARGET_ID }
});