@agent-os-sdk/client 0.9.2 → 0.9.3

package/src/generated/openapi.ts

@@ -745,8 +745,7 @@ export interface paths {
         };
         /**
          * Lists all API tokens for the current workspace.
-         * @description Returns token metadata without secrets. Token secrets are only
-         *     available at creation time and cannot be retrieved later.
+         *     Requires `tokens:read` permission.
          */
         get: {
             parameters: {
@@ -757,14 +756,14 @@ export interface paths {
             };
             requestBody?: never;
             responses: {
-                /** @description Returns the list of tokens. */
+                /** @description OK */
                 200: {
                     headers: {
                         [name: string]: unknown;
                     };
                     content?: never;
                 };
-                /** @description Workspace ID header is required. */
+                /** @description Bad Request */
                 400: {
                     headers: {
                         [name: string]: unknown;
@@ -773,11 +772,22 @@ export interface paths {
                         "application/json": components["schemas"]["ProblemDetails"];
                     };
                 };
+                /** @description Forbidden */
+                403: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ProblemDetails"];
+                    };
+                };
             };
         };
         put?: never;
         /**
          * Create a new API token.
+         *     Requires `tokens:write` permission.
+         *     Token scopes cannot exceed the creator's own permissions (scope ceiling).
          *     The token secret is only returned once on creation.
          */
         post: {
@@ -794,16 +804,73 @@ export interface paths {
                     "application/*+json": components["schemas"]["CreateTokenRequest"];
                 };
             };
+            responses: {
+                /** @description Created */
+                201: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content?: never;
+                };
+                /** @description Bad Request */
+                400: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ProblemDetails"];
+                    };
+                };
+                /** @description Forbidden */
+                403: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ProblemDetails"];
+                    };
+                };
+            };
+        };
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/api/tokens/available-scopes": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Lists all available scopes that can be assigned to an API token.
+         *     Scopes are sourced from the canonical Permissions registry.
+         */
+        get: {
+            parameters: {
+                query?: never;
+                header?: never;
+                path?: never;
+                cookie?: never;
+            };
+            requestBody?: never;
             responses: {
                 /** @description OK */
                 200: {
                     headers: {
                         [name: string]: unknown;
                     };
-                    content?: never;
+                    content: {
+                        "application/json": components["schemas"]["ScopeListResponse"];
+                    };
                 };
             };
         };
+        put?: never;
+        post?: never;
         delete?: never;
         options?: never;
         head?: never;
@@ -820,7 +887,10 @@ export interface paths {
         get?: never;
         put?: never;
         post?: never;
-        /** Revoke an API token immediately. */
+        /**
+         * Revoke an API token immediately.
+         *     Requires `tokens:delete` permission.
+         */
         delete: {
             parameters: {
                 query?: never;
@@ -839,6 +909,24 @@ export interface paths {
                     };
                     content?: never;
                 };
+                /** @description Forbidden */
+                403: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ProblemDetails"];
+                    };
+                };
+                /** @description Not Found */
+                404: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ProblemDetails"];
+                    };
+                };
             };
         };
         options?: never;
@@ -857,31 +945,37 @@ export interface paths {
         put?: never;
         /**
          * Rotate an API token - revokes current and issues a new one.
+         *     Requires `tokens:write` permission.
          *     The new token secret is only returned once.
-         * @description Rotation is useful for security hygiene (periodic credential rotation)
-         *     or when a token may have been compromised. The new token inherits
-         *     the same scopes and expiration policy as the original.
          */
         post: {
             parameters: {
                 query?: never;
                 header?: never;
                 path: {
-                    /** @description Token ID to rotate. */
                     id: string;
                 };
                 cookie?: never;
             };
             requestBody?: never;
             responses: {
-                /** @description Token rotated successfully, new secret returned. */
+                /** @description OK */
                 200: {
                     headers: {
                         [name: string]: unknown;
                     };
                     content?: never;
                 };
-                /** @description Token not found or already revoked. */
+                /** @description Forbidden */
+                403: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ProblemDetails"];
+                    };
+                };
+                /** @description Not Found */
                 404: {
                     headers: {
                         [name: string]: unknown;
@@ -1139,6 +1233,72 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/v1/api/auth/bootstrap": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Bootstrap the authenticated user with a default tenant, workspace, and roles.
+         *     Idempotent: returns existing resources if already provisioned.
+         */
+        post: {
+            parameters: {
+                query?: never;
+                header?: never;
+                path?: never;
+                cookie?: never;
+            };
+            requestBody?: never;
+            responses: {
+                /** @description User already bootstrapped — returns existing membership. */
+                200: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["BootstrapResponse"];
+                    };
+                };
+                /** @description First bootstrap — created tenant, workspace, roles, and membership. */
+                201: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["BootstrapResponse"];
+                    };
+                };
+                /** @description Missing or invalid JWT. */
+                401: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ProblemDetails"];
+                    };
+                };
+                /** @description PATs cannot trigger bootstrap. */
+                403: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ProblemDetails"];
+                    };
+                };
+            };
+        };
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/v1/api/builder/{agentId}/chat": {
         parameters: {
             query?: never;
@@ -1645,11 +1805,7 @@ export interface paths {
             };
         };
         put?: never;
-        /**
-         * Creates a new credential.
-         * @description Creates a new encrypted credential for storing API keys or secrets.
-         *     The credential is encrypted at rest using workspace-specific keys.
-         */
+        /** Creates a new credential. */
         post: {
             parameters: {
                 query?: never;
@@ -1657,7 +1813,7 @@ export interface paths {
                 path?: never;
                 cookie?: never;
             };
-            /** @description The credential configuration. */
+            /** @description Credential creation details. */
             requestBody?: {
                 content: {
                     "application/json": components["schemas"]["CreateCredentialRequest"];
@@ -1666,31 +1822,13 @@ export interface paths {
                 };
             };
             responses: {
-                /** @description Credential created successfully. */
+                /** @description Created */
                 201: {
                     headers: {
                         [name: string]: unknown;
                     };
                     content: {
-                        "application/json": components["schemas"]["CredentialCreatedResponse"];
-                    };
-                };
-                /** @description Invalid request (missing TypeId or WorkspaceId). */
-                400: {
-                    headers: {
-                        [name: string]: unknown;
-                    };
-                    content: {
-                        "application/json": components["schemas"]["ProblemDetails"];
-                    };
-                };
-                /** @description Authentication required. */
-                401: {
-                    headers: {
-                        [name: string]: unknown;
-                    };
-                    content: {
-                        "application/json": components["schemas"]["ProblemDetails"];
+                        "application/json": components["schemas"]["CredentialResponse"];
                     };
                 };
             };
@@ -1711,7 +1849,10 @@ export interface paths {
         /** Gets a single credential by ID. */
         get: {
             parameters: {
-                query?: never;
+                query?: {
+                    /** @description Whether to include the decrypted secret values. */
+                    includeValues?: boolean;
+                };
                 header?: never;
                 path: {
                     /** @description The credential ID. */
@@ -1743,7 +1884,28 @@ export interface paths {
         };
         put?: never;
         post?: never;
-        delete?: never;
+        /** Deletes a credential. */
+        delete: {
+            parameters: {
+                query?: never;
+                header?: never;
+                path: {
+                    /** @description Credential ID. */
+                    id: string;
+                };
+                cookie?: never;
+            };
+            requestBody?: never;
+            responses: {
+                /** @description No Content */
+                204: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content?: never;
+                };
+            };
+        };
         options?: never;
         head?: never;
         /** Updates an existing credential. */
@@ -1752,12 +1914,12 @@ export interface paths {
                 query?: never;
                 header?: never;
                 path: {
-                    /** @description The credential ID. */
+                    /** @description Credential ID. */
                     id: string;
                 };
                 cookie?: never;
             };
-            /** @description The update payload. */
+            /** @description Update details. */
             requestBody?: {
                 content: {
                     "application/json": components["schemas"]["UpdateCredentialRequest"];
@@ -1766,22 +1928,13 @@ export interface paths {
                 };
             };
             responses: {
-                /** @description Credential updated successfully. */
+                /** @description OK */
                 200: {
                     headers: {
                         [name: string]: unknown;
                     };
                     content: {
-                        "application/json": components["schemas"]["CredentialUpdatedResponse"];
-                    };
-                };
-                /** @description Credential not found. */
-                404: {
-                    headers: {
-                        [name: string]: unknown;
-                    };
-                    content: {
-                        "application/json": components["schemas"]["ProblemDetails"];
+                        "application/json": components["schemas"]["CredentialResponse"];
                     };
                 };
             };
@@ -1797,18 +1950,18 @@ export interface paths {
         };
         get?: never;
         put?: never;
-        /** Grants access to a credential for a workspace. */
+        /** Grants credential access to a workspace. */
         post: {
             parameters: {
                 query?: never;
                 header?: never;
                 path: {
-                    /** @description The credential ID. */
+                    /** @description Credential ID. */
                     id: string;
                 };
                 cookie?: never;
             };
-            /** @description The grant configuration. */
+            /** @description Grant details. */
             requestBody?: {
                 content: {
                     "application/json": components["schemas"]["GrantAccessRequest"];
@@ -1817,23 +1970,12 @@ export interface paths {
                 };
             };
             responses: {
-                /** @description Access granted successfully. */
+                /** @description OK */
                 200: {
                     headers: {
                         [name: string]: unknown;
                     };
-                    content: {
-                        "application/json": components["schemas"]["CredentialAccessGrantedResponse"];
-                    };
-                };
-                /** @description Credential not found. */
-                404: {
-                    headers: {
-                        [name: string]: unknown;
-                    };
-                    content: {
-                        "application/json": components["schemas"]["ProblemDetails"];
-                    };
+                    content?: never;
                 };
             };
         };
@@ -1853,27 +1995,64 @@ export interface paths {
         get?: never;
         put?: never;
         post?: never;
-        /** Revokes access to a credential. */
+        /**
+         * Revokes credential access from a workspace.
+         *     Revokes credential access from a workspace.
+         */
         delete: {
             parameters: {
                 query?: never;
                 header?: never;
                 path: {
-                    /** @description The access grant ID to revoke. */
+                    /** @description Access Record ID to revoke. */
                     accessId: string;
                 };
                 cookie?: never;
             };
             requestBody?: never;
             responses: {
-                /** @description Access revoked successfully. */
-                204: {
+                /** @description OK */
+                200: {
                     headers: {
                         [name: string]: unknown;
                     };
                     content?: never;
                 };
-                /** @description Access grant not found. */
+            };
+        };
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/api/credentials/{id}/models": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get: {
+            parameters: {
+                query?: never;
+                header?: never;
+                path: {
+                    id: string;
+                };
+                cookie?: never;
+            };
+            requestBody?: never;
+            responses: {
+                /** @description OK */
+                200: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": string[];
+                    };
+                };
+                /** @description Not Found */
                 404: {
                     headers: {
                         [name: string]: unknown;
@@ -1884,6 +2063,9 @@ export interface paths {
                 };
             };
         };
+        put?: never;
+        post?: never;
+        delete?: never;
         options?: never;
         head?: never;
         patch?: never;
@@ -3185,7 +3367,44 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
-    "/v1/api/graphs/validate": {
+    "/v1/api/observability/frontend-log": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        post: {
+            parameters: {
+                query?: never;
+                header?: never;
+                path?: never;
+                cookie?: never;
+            };
+            requestBody?: {
+                content: {
+                    "application/json": components["schemas"]["FrontendLogIngestRequest"];
+                };
+            };
+            responses: {
+                /** @description OK */
+                200: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content?: never;
+                };
+            };
+        };
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/api/graphs/validate": {
         parameters: {
             query?: never;
             header?: never;
@@ -3716,19 +3935,17 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
-    "/v1/api/mcp/tools": {
+    "/v1/api/me": {
         parameters: {
             query?: never;
             header?: never;
             path?: never;
             cookie?: never;
         };
-        /** List available tools from ToolDefinition registry. */
+        /** Get current user identity, tenant and workspace context (lightweight, backward compatible). */
         get: {
             parameters: {
-                query?: {
-                    agentId?: string;
-                };
+                query?: never;
                 header?: never;
                 path?: never;
                 cookie?: never;
@@ -3752,177 +3969,48 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
-    "/v1/api/mcp/tools/{name}": {
+    "/v1/api/me/context": {
         parameters: {
             query?: never;
             header?: never;
             path?: never;
             cookie?: never;
         };
-        /** Get a specific tool definition. */
+        /**
+         * Get full user context: all tenants, workspaces, roles, and permissions.
+         *     This is the canonical endpoint for populating frontend layouts.
+         * @description Returns every membership the user has, with nested tenant, role (including
+         *     canonical permission arrays), and accessible workspaces per membership.
+         *
+         *     **Admin visibility:** Members with wildcard ("*") permission
+         *     see all workspaces in the tenant. Regular members see only their assigned workspaces.
+         */
         get: {
             parameters: {
                 query?: never;
                 header?: never;
-                path: {
-                    name: string;
-                };
-                cookie?: never;
-            };
-            requestBody?: never;
-            responses: {
-                /** @description OK */
-                200: {
-                    headers: {
-                        [name: string]: unknown;
-                    };
-                    content?: never;
-                };
-            };
-        };
-        put?: never;
-        post?: never;
-        delete?: never;
-        options?: never;
-        head?: never;
-        patch?: never;
-        trace?: never;
-    };
-    "/v1/api/mcp/resources": {
-        parameters: {
-            query?: never;
-            header?: never;
-            path?: never;
-            cookie?: never;
-        };
-        /** List resources (files, vector stores) available to an agent. */
-        get: {
-            parameters: {
-                query?: {
-                    agentId?: string;
-                };
-                header?: never;
                 path?: never;
                 cookie?: never;
             };
             requestBody?: never;
             responses: {
-                /** @description OK */
+                /** @description Full user context with all memberships. */
                 200: {
                     headers: {
                         [name: string]: unknown;
                     };
-                    content?: never;
-                };
-            };
-        };
-        put?: never;
-        post?: never;
-        delete?: never;
-        options?: never;
-        head?: never;
-        patch?: never;
-        trace?: never;
-    };
-    "/v1/api/mcp/tools/call": {
-        parameters: {
-            query?: never;
-            header?: never;
-            path?: never;
-            cookie?: never;
-        };
-        get?: never;
-        put?: never;
-        /** Call a tool (experimental - routes to appropriate handler). */
-        post: {
-            parameters: {
-                query?: never;
-                header?: never;
-                path?: never;
-                cookie?: never;
-            };
-            requestBody?: {
-                content: {
-                    "application/json": components["schemas"]["ToolCallRequest"];
-                    "text/json": components["schemas"]["ToolCallRequest"];
-                    "application/*+json": components["schemas"]["ToolCallRequest"];
-                };
-            };
-            responses: {
-                /** @description OK */
-                200: {
-                    headers: {
-                        [name: string]: unknown;
+                    content: {
+                        "application/json": components["schemas"]["UserContextResponse"];
                     };
-                    content?: never;
-                };
-            };
-        };
-        delete?: never;
-        options?: never;
-        head?: never;
-        patch?: never;
-        trace?: never;
-    };
-    "/v1/api/mcp/resources/read": {
-        parameters: {
-            query?: never;
-            header?: never;
-            path?: never;
-            cookie?: never;
-        };
-        /** Read a resource by URI. */
-        get: {
-            parameters: {
-                query?: {
-                    uri?: string;
                 };
-                header?: never;
-                path?: never;
-                cookie?: never;
-            };
-            requestBody?: never;
-            responses: {
-                /** @description OK */
-                200: {
+                /** @description Missing or invalid JWT. */
+                401: {
                     headers: {
                         [name: string]: unknown;
                     };
-                    content?: never;
-                };
-            };
-        };
-        put?: never;
-        post?: never;
-        delete?: never;
-        options?: never;
-        head?: never;
-        patch?: never;
-        trace?: never;
-    };
-    "/v1/api/me": {
-        parameters: {
-            query?: never;
-            header?: never;
-            path?: never;
-            cookie?: never;
-        };
-        /** Get current user identity, tenant and workspace context. */
-        get: {
-            parameters: {
-                query?: never;
-                header?: never;
-                path?: never;
-                cookie?: never;
-            };
-            requestBody?: never;
-            responses: {
-                /** @description OK */
-                200: {
-                    headers: {
-                        [name: string]: unknown;
+                    content: {
+                        "application/json": components["schemas"]["ProblemDetails"];
                     };
-                    content?: never;
                 };
             };
         };
@@ -4754,7 +4842,10 @@ export interface paths {
             };
         };
         put?: never;
-        /** Create a new custom role. */
+        /**
+         * Create a new custom role.
+         *     Permissions are validated against the canonical Permissions registry.
+         */
         post: {
             parameters: {
                 query?: never;
@@ -4917,7 +5008,10 @@ export interface paths {
         };
         get?: never;
         put?: never;
-        /** SEED DEFAULT PERMISSIONS (Temporary/Admin Helper) */
+        /**
+         * Seed default permissions for all roles in the tenant.
+         *     Uses canonical templates from Permissions constants.
+         */
         post: {
             parameters: {
                 query?: never;
@@ -5136,21 +5230,20 @@ export interface paths {
             path?: never;
             cookie?: never;
         };
-        /**
-         * Get run events for timeline display (paged, without SSE).
-         *     Aggregates checkpoints, tool calls, and state changes for UI replay.
-         */
+        /** Get canonical run events from SSOT ledger (polling). */
         get: {
             parameters: {
-                query?: {
-                    /** @description Max events to return. */
+                query: {
+                    /** @description Attempt ID (required). */
+                    attemptId: string;
+                    /** @description Return events with seq greater than this value. */
+                    afterSeq?: number;
+                    /** @description Max events to return (1..500). */
                     limit?: number;
-                    /** @description Pagination offset. */
-                    offset?: number;
                 };
                 header?: never;
                 path: {
-                    /** @description The unique ID of the run. */
+                    /** @description Run ID. */
                     runId: string;
                 };
                 cookie?: never;
@@ -5163,7 +5256,16 @@ export interface paths {
                         [name: string]: unknown;
                     };
                     content: {
-                        "application/json": components["schemas"]["RunEventsResponse"];
+                        "application/json": components["schemas"]["RunEventsPollResponse"];
+                    };
+                };
+                /** @description Bad Request */
+                400: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ProblemDetails"];
                     };
                 };
                 /** @description Not Found */
@@ -5192,39 +5294,32 @@ export interface paths {
             path?: never;
             cookie?: never;
         };
-        /**
-         * .0: Get run events for polling-based replay.
-         *     Returns events after a specific sequence number for incremental polling.
-         * @description This is the recommended endpoint for SDK/UI event consumption.
-         *     Events are ordered by sequence number (ascending) and limited to prevent
-         *     large responses. Use `next_after_seq` for pagination.
-         *
-         *     **Security:** Only returns events for runs in the caller's workspace.
-         */
+        /** Stream canonical run events via SSE using SSOT ledger ordering. */
         get: {
             parameters: {
-                query?: {
-                    /** @description Return events with seq greater than this value (default: 0 = all). */
+                query: {
+                    /** @description Attempt ID (required). */
+                    attemptId: string;
+                    /** @description Start after this sequence number. */
                     afterSeq?: number;
-                    /** @description Max events to return (default: 100, max: 500). */
-                    limit?: number;
                 };
                 header?: never;
                 path: {
-                    /** @description The unique ID of the run. */
+                    /** @description Run ID. */
                     runId: string;
                 };
                 cookie?: never;
             };
             requestBody?: never;
             responses: {
-                /** @description OK */
-                200: {
+                /** @description Bad Request */
+                400: {
                     headers: {
                         [name: string]: unknown;
                     };
                     content: {
-                        "application/json": components["schemas"]["RunEventsPollResponse"];
+                        "text/event-stream": components["schemas"]["ProblemDetails"];
+                        "application/json": components["schemas"]["ProblemDetails"];
                     };
                 };
                 /** @description Not Found */
@@ -5233,6 +5328,7 @@ export interface paths {
                         [name: string]: unknown;
                     };
                     content: {
+                        "text/event-stream": components["schemas"]["ProblemDetails"];
                         "application/json": components["schemas"]["ProblemDetails"];
                     };
                 };
@@ -5359,204 +5455,62 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
-    "/v1/api/runs/{runId}/join": {
+    "/v1/api/runs/{runId}/rerun": {
         parameters: {
             query?: never;
             header?: never;
             path?: never;
             cookie?: never;
         };
-        /** Joins an active run and returns its updates via SSE. */
-        get: {
+        get?: never;
+        put?: never;
+        /** Re-runs an existing run with same inputs (stateless rerun). */
+        post: {
             parameters: {
                 query?: never;
                 header?: never;
                 path: {
-                    /** @description The run ID to join. */
+                    /** @description The original run ID to rerun. */
                     runId: string;
                 };
                 cookie?: never;
             };
-            requestBody?: never;
+            /** @description Optional overrides for the rerun. */
+            requestBody?: {
+                content: {
+                    "application/json": components["schemas"]["RerunRequest"];
+                    "text/json": components["schemas"]["RerunRequest"];
+                    "application/*+json": components["schemas"]["RerunRequest"];
+                };
+            };
             responses: {
-                /** @description OK */
-                200: {
+                /** @description Created */
+                201: {
                     headers: {
                         [name: string]: unknown;
                     };
-                    content?: never;
+                    content: {
+                        "application/json": components["schemas"]["RerunResponse"];
+                    };
+                };
+                /** @description Not Found */
+                404: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ProblemDetails"];
+                    };
                 };
             };
         };
-        put?: never;
-        post?: never;
         delete?: never;
         options?: never;
         head?: never;
         patch?: never;
         trace?: never;
     };
-    "/v1/api/runs/stream": {
-        parameters: {
-            query?: never;
-            header?: never;
-            path?: never;
-            cookie?: never;
-        };
-        get?: never;
-        put?: never;
-        /**
-         * Creates a run and streams real-time updates via Server-Sent Events (SSE).
-         * @description This is the recommended endpoint for interactive applications. It creates
-         *     a run and maintains an open SSE connection to stream events in real-time.
-         *
-         *     **SSE Events:**
-         *     - `start`: Run created and queued
-         *     - `update`: Run status changed
-         *     - `complete`: Run finished successfully (includes output)
-         *     - `error`: Run failed or was canceled (includes error details)
-         *
-         *     **Example Event Stream:**
-         *     ```
-         *     event: start
-         *     data: {"run_id": "...", "status": "queued"}
-         *
-         *     event: update
-         *     data: {"run_id": "...", "status": "running"}
-         *
-         *     event: complete
-         *     data: {"run_id": "...", "status": "completed", "output": {...}}
-         *     ```
-         */
-        post: {
-            parameters: {
-                query?: never;
-                header?: never;
-                path?: never;
-                cookie?: never;
-            };
-            /** @description The run request with agent ID and input. */
-            requestBody?: {
-                content: {
-                    "application/json": components["schemas"]["StreamRunRequest"];
-                    "text/json": components["schemas"]["StreamRunRequest"];
-                    "application/*+json": components["schemas"]["StreamRunRequest"];
-                };
-            };
-            responses: {
-                /** @description OK */
-                200: {
-                    headers: {
-                        [name: string]: unknown;
-                    };
-                    content?: never;
-                };
-            };
-        };
-        delete?: never;
-        options?: never;
-        head?: never;
-        patch?: never;
-        trace?: never;
-    };
-    "/v1/api/runs/{runId}/stream": {
-        parameters: {
-            query?: never;
-            header?: never;
-            path?: never;
-            cookie?: never;
-        };
-        /**
-         * .2: Stream run events via SSE (Server-Sent Events).
-         *     Uses robust internal polling (Cinema V1.2) to ensure strict ordering and reliability.
-         *     Closes connection when run is terminal and all events are delivered.
-         */
-        get: {
-            parameters: {
-                query?: {
-                    after?: number;
-                };
-                header?: never;
-                path: {
-                    runId: string;
-                };
-                cookie?: never;
-            };
-            requestBody?: never;
-            responses: {
-                /** @description OK */
-                200: {
-                    headers: {
-                        [name: string]: unknown;
-                    };
-                    content?: never;
-                };
-            };
-        };
-        put?: never;
-        post?: never;
-        delete?: never;
-        options?: never;
-        head?: never;
-        patch?: never;
-        trace?: never;
-    };
-    "/v1/api/runs/{runId}/rerun": {
-        parameters: {
-            query?: never;
-            header?: never;
-            path?: never;
-            cookie?: never;
-        };
-        get?: never;
-        put?: never;
-        /** Re-runs an existing run with same inputs (stateless rerun). */
-        post: {
-            parameters: {
-                query?: never;
-                header?: never;
-                path: {
-                    /** @description The original run ID to rerun. */
-                    runId: string;
-                };
-                cookie?: never;
-            };
-            /** @description Optional overrides for the rerun. */
-            requestBody?: {
-                content: {
-                    "application/json": components["schemas"]["RerunRequest"];
-                    "text/json": components["schemas"]["RerunRequest"];
-                    "application/*+json": components["schemas"]["RerunRequest"];
-                };
-            };
-            responses: {
-                /** @description Created */
-                201: {
-                    headers: {
-                        [name: string]: unknown;
-                    };
-                    content: {
-                        "application/json": components["schemas"]["RerunResponse"];
-                    };
-                };
-                /** @description Not Found */
-                404: {
-                    headers: {
-                        [name: string]: unknown;
-                    };
-                    content: {
-                        "application/json": components["schemas"]["ProblemDetails"];
-                    };
-                };
-            };
-        };
-        delete?: never;
-        options?: never;
-        head?: never;
-        patch?: never;
-        trace?: never;
-    };
-    "/v1/api/runs/{runId}/checkpoints/{checkpointId}/replay": {
+    "/v1/api/runs/{runId}/checkpoints/{checkpointId}/replay": {
         parameters: {
             query?: never;
             header?: never;
@@ -6117,6 +6071,8 @@ export interface paths {
             parameters: {
                 query?: {
                     workspaceId?: string;
+                    limit?: number;
+                    offset?: number;
                 };
                 header?: never;
                 path?: never;
@@ -7300,7 +7256,249 @@ export interface paths {
                 };
                 cookie?: never;
             };
-            requestBody?: never;
+            requestBody?: never;
+            responses: {
+                /** @description OK */
+                200: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["TriggerSecretResponse"];
+                    };
+                };
+                /** @description Unauthorized */
+                401: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ProblemDetails"];
+                    };
+                };
+                /** @description Not Found */
+                404: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ProblemDetails"];
+                    };
+                };
+            };
+        };
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/api/triggers/invoke/{triggerId}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Invoke a trigger to start an agent run.
+         *     SECURITY: Requires HMAC-SHA256 signature over raw request body.
+         *     Signature format: X-Signature: sha256=[64_lowercase_hex]
+         *     Payload: X-Timestamp + "." + raw_request_body
+         */
+        post: {
+            parameters: {
+                query?: never;
+                header?: never;
+                path: {
+                    triggerId: string;
+                };
+                cookie?: never;
+            };
+            requestBody?: never;
+            responses: {
+                /** @description OK */
+                200: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content?: never;
+                };
+            };
+        };
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/api/triggers/{triggerId}/regenerate-secret": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /** Regenerate secret key for a trigger. */
+        post: {
+            parameters: {
+                query?: never;
+                header?: never;
+                path: {
+                    triggerId: string;
+                };
+                cookie?: never;
+            };
+            requestBody?: never;
+            responses: {
+                /** @description OK */
+                200: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content?: never;
+                };
+            };
+        };
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/api/triggers/{triggerId}/test": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Test a trigger by executing a run directly (no HMAC required).
+         *     SECURITY: Requires authenticated session, no secret leakage.
+         *     Wave 3: Server-side testing with workspace isolation.
+         * @description Executes a run using either the provided payload or the template's example_payload.
+         *     Uses Channel.Test for audit trail differentiation.
+         */
+        post: {
+            parameters: {
+                query?: never;
+                header?: never;
+                path: {
+                    triggerId: string;
+                };
+                cookie?: never;
+            };
+            requestBody?: {
+                content: {
+                    "application/json": components["schemas"]["TestTriggerRequest"];
+                    "text/json": components["schemas"]["TestTriggerRequest"];
+                    "application/*+json": components["schemas"]["TestTriggerRequest"];
+                };
+            };
+            responses: {
+                /** @description OK */
+                200: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content?: never;
+                };
+            };
+        };
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/api/triggers/{triggerId}/contract": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Get the full input contract for a trigger.
+         *     Returns schemas and mapping spec for transformation configuration.
+         */
+        get: {
+            parameters: {
+                query?: never;
+                header?: never;
+                path: {
+                    triggerId: string;
+                };
+                cookie?: never;
+            };
+            requestBody?: never;
+            responses: {
+                /** @description OK */
+                200: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["TriggerInputContractResponse"];
+                    };
+                };
+                /** @description Not Found */
+                404: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ProblemDetails"];
+                    };
+                };
+            };
+        };
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/api/triggers/{triggerId}/test-mapping": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Preview payload transformation using the trigger's input mapping.
+         *     Returns the transformed graph_input without executing a run.
+         */
+        post: {
+            parameters: {
+                query?: never;
+                header?: never;
+                path: {
+                    triggerId: string;
+                };
+                cookie?: never;
+            };
+            requestBody?: {
+                content: {
+                    "application/json": components["schemas"]["TestMappingRequest"];
+                    "text/json": components["schemas"]["TestMappingRequest"];
+                    "application/*+json": components["schemas"]["TestMappingRequest"];
+                };
+            };
             responses: {
                 /** @description OK */
                 200: {
@@ -7308,11 +7506,11 @@ export interface paths {
                         [name: string]: unknown;
                     };
                     content: {
-                        "application/json": components["schemas"]["TriggerSecretResponse"];
+                        "application/json": components["schemas"]["TestMappingResponse"];
                     };
                 };
-                /** @description Unauthorized */
-                401: {
+                /** @description Bad Request */
+                400: {
                     headers: {
                         [name: string]: unknown;
                     };
@@ -7331,15 +7529,13 @@ export interface paths {
                 };
             };
         };
-        put?: never;
-        post?: never;
         delete?: never;
         options?: never;
         head?: never;
         patch?: never;
         trace?: never;
     };
-    "/v1/api/triggers/invoke/{triggerId}": {
+    "/v1/api/triggers/{triggerId}/infer-schema": {
         parameters: {
             query?: never;
             header?: never;
@@ -7349,10 +7545,8 @@ export interface paths {
         get?: never;
         put?: never;
         /**
-         * Invoke a trigger to start an agent run.
-         *     SECURITY: Requires HMAC-SHA256 signature over raw request body.
-         *     Signature format: X-Signature: sha256=[64_lowercase_hex]
-         *     Payload: X-Timestamp + "." + raw_request_body
+         * Infer JSON Schema from a sample payload.
+         *     Returns the inferred schema and flattened paths for UI consumption.
          */
         post: {
             parameters: {
@@ -7363,14 +7557,49 @@ export interface paths {
                 };
                 cookie?: never;
             };
-            requestBody?: never;
+            requestBody?: {
+                content: {
+                    "application/json": components["schemas"]["InferSchemaRequest"];
+                    "text/json": components["schemas"]["InferSchemaRequest"];
+                    "application/*+json": components["schemas"]["InferSchemaRequest"];
+                };
+            };
             responses: {
                 /** @description OK */
                 200: {
                     headers: {
                         [name: string]: unknown;
                     };
-                    content?: never;
+                    content: {
+                        "application/json": components["schemas"]["InferSchemaResponse"];
+                    };
+                };
+                /** @description Bad Request */
+                400: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ProblemDetails"];
+                    };
+                };
+                /** @description Not Found */
+                404: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ProblemDetails"];
+                    };
+                };
+                /** @description Content Too Large */
+                413: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ProblemDetails"];
+                    };
                 };
             };
         };
@@ -7380,7 +7609,7 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
-    "/v1/api/triggers/{triggerId}/regenerate-secret": {
+    "/v1/api/triggers/{triggerId}/input-mapping": {
         parameters: {
             query?: never;
             header?: never;
@@ -7388,9 +7617,8 @@ export interface paths {
             cookie?: never;
         };
         get?: never;
-        put?: never;
-        /** Regenerate secret key for a trigger. */
-        post: {
+        /** Save or update the input mapping override for a trigger. */
+        put: {
             parameters: {
                 query?: never;
                 header?: never;
@@ -7399,24 +7627,60 @@ export interface paths {
                 };
                 cookie?: never;
             };
-            requestBody?: never;
+            requestBody?: {
+                content: {
+                    "application/json": components["schemas"]["SaveMappingRequest"];
+                    "text/json": components["schemas"]["SaveMappingRequest"];
+                    "application/*+json": components["schemas"]["SaveMappingRequest"];
+                };
+            };
             responses: {
                 /** @description OK */
                 200: {
                     headers: {
                         [name: string]: unknown;
                     };
-                    content?: never;
+                    content: {
+                        "application/json": components["schemas"]["SaveMappingResponse"];
+                    };
+                };
+                /** @description Bad Request */
+                400: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ProblemDetails"];
+                    };
+                };
+                /** @description Not Found */
+                404: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ProblemDetails"];
+                    };
+                };
+                /** @description Unprocessable Content */
+                422: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ProblemDetails"];
+                    };
                 };
             };
         };
+        post?: never;
         delete?: never;
         options?: never;
         head?: never;
         patch?: never;
         trace?: never;
     };
-    "/v1/api/triggers/{triggerId}/test": {
+    "/v1/api/triggers/{triggerId}/preview-input-mapping": {
         parameters: {
             query?: never;
             header?: never;
@@ -7426,11 +7690,8 @@ export interface paths {
         get?: never;
         put?: never;
         /**
-         * Test a trigger by executing a run directly (no HMAC required).
-         *     SECURITY: Requires authenticated session, no secret leakage.
-         *     Wave 3: Server-side testing with workspace isolation.
-         * @description Executes a run using either the provided payload or the template's example_payload.
-         *     Uses Channel.Test for audit trail differentiation.
+         * Preview payload transformation without persisting.
+         *     This is the "product magic" - users trust mapping when they see the transform.
          */
         post: {
             parameters: {
@@ -7443,9 +7704,9 @@ export interface paths {
             };
             requestBody?: {
                 content: {
-                    "application/json": components["schemas"]["TestTriggerRequest"];
-                    "text/json": components["schemas"]["TestTriggerRequest"];
-                    "application/*+json": components["schemas"]["TestTriggerRequest"];
+                    "application/json": components["schemas"]["PreviewMappingRequest"];
+                    "text/json": components["schemas"]["PreviewMappingRequest"];
+                    "application/*+json": components["schemas"]["PreviewMappingRequest"];
                 };
             };
             responses: {
@@ -7454,7 +7715,36 @@ export interface paths {
                     headers: {
                         [name: string]: unknown;
                     };
-                    content?: never;
+                    content: {
+                        "application/json": components["schemas"]["PreviewMappingResponse"];
+                    };
+                };
+                /** @description Bad Request */
+                400: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ProblemDetails"];
+                    };
+                };
+                /** @description Not Found */
+                404: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ProblemDetails"];
+                    };
+                };
+                /** @description Content Too Large */
+                413: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ProblemDetails"];
+                    };
                 };
             };
         };
@@ -8367,6 +8657,21 @@ export interface components {
             /** Format: uuid */
             agent_id?: string;
         };
+        BootstrapResponse: {
+            /** @description "existing" if already bootstrapped, "created" if newly provisioned. */
+            status?: string | null;
+            /** Format: uuid */
+            tenant_id?: string;
+            tenant_name?: string | null;
+            tenant_slug?: string | null;
+            /** Format: uuid */
+            workspace_id?: string | null;
+            workspace_name?: string | null;
+            workspace_slug?: string | null;
+            /** Format: uuid */
+            member_id?: string;
+            role_name?: string | null;
+        };
         /**
          * @description KERNEL P0: Request DTO for builder chat.
          *     Contains ONLY intention fields. No graph_spec, no catalogs.
@@ -8493,6 +8798,7 @@ export interface components {
         };
         CreateAgentRequest: {
             name?: string | null;
+            metadata?: components["schemas"]["JsonNode"];
         };
         CreateCheckpointRequest: {
             step_name?: string | null;
@@ -8588,6 +8894,10 @@ export interface components {
             webhook_url?: string | null;
             /** Format: uuid */
             bundle_id?: string | null;
+            thread_key?: string | null;
+            event_key?: string | null;
+            /** Format: uuid */
+            rerun_of_run_id?: string | null;
         };
         CreateTenantRequest: {
             name?: string | null;
@@ -8626,6 +8936,9 @@ export interface components {
             trigger_type?: string | null;
             template_slug?: string | null;
             config?: unknown;
+            payload_variants_json?: unknown;
+            thread_key_spec_json?: unknown;
+            idempotency_spec_json?: unknown;
         };
         CreateVectorStoreRequest: {
             name?: string | null;
@@ -8638,26 +8951,6 @@ export interface components {
         CreateWorkspaceRequest: {
             name?: string | null;
         };
-        /** @description Response after granting access. */
-        CredentialAccessGrantedResponse: {
-            /** Format: uuid */
-            id?: string;
-            status?: string | null;
-        };
-        /** @description Response after creating a credential. */
-        CredentialCreatedResponse: {
-            /** Format: uuid */
-            id?: string;
-            name?: string | null;
-            scope?: string | null;
-            /** Format: uuid */
-            tenant_id?: string;
-            /** Format: uuid */
-            workspace_id?: string | null;
-            status?: string | null;
-            /** Format: date-time */
-            created_at?: string;
-        };
         /** @description Detailed credential response including config. */
         CredentialDetailResponse: {
             /** Format: uuid */
@@ -8675,6 +8968,9 @@ export interface components {
             /** Format: date-time */
             created_at?: string;
             public_config?: unknown;
+            values?: {
+                [key: string]: unknown;
+            } | null;
         };
         /** @description Paginated list of credentials. */
         CredentialListResponse: {
@@ -8698,12 +8994,13 @@ export interface components {
             /** Format: date-time */
             created_at?: string;
         };
-        /** @description Response after updating a credential. */
-        CredentialUpdatedResponse: {
-            /** Format: uuid */
-            id?: string;
-            status?: string | null;
-            sharing_mode?: string | null;
+        CurlCommandParts: {
+            method?: string | null;
+            url?: string | null;
+            headers?: {
+                [key: string]: string;
+            } | null;
+            body_json?: string | null;
         };
         DatasetResponse: {
             /** Format: uuid */
@@ -8790,6 +9087,22 @@ export interface components {
             /** Format: date-time */
             created_at?: string;
         };
+        FrontendLogIngestRequest: {
+            level?: string | null;
+            message?: string | null;
+            stack?: string | null;
+            component?: string | null;
+            route?: string | null;
+            url?: string | null;
+            user_agent?: string | null;
+            correlation_id?: string | null;
+            trace_id?: string | null;
+            run_id?: string | null;
+            session_id?: string | null;
+            context?: {
+                [key: string]: unknown;
+            } | null;
+        };
         GetGraphSpecResponse: {
             /** Format: uuid */
             agent_id?: string;
@@ -8809,6 +9122,16 @@ export interface components {
             workspace_id?: string;
             permission?: string | null;
         };
+        /** @description Request for POST /triggers/{id}/infer-schema */
+        InferSchemaRequest: {
+            sample_payload?: unknown;
+        };
+        /** @description Response for POST /triggers/{id}/infer-schema */
+        InferSchemaResponse: {
+            inferred_schema?: unknown;
+            paths?: components["schemas"]["PathInfoDto"][] | null;
+            warnings?: string[] | null;
+        };
         IntrospectGraphRequest: {
             graph_spec?: {
                 [key: string]: unknown;
@@ -8828,17 +9151,31 @@ export interface components {
             role_id?: string;
             workspace_ids?: string[] | null;
         };
+        JsonNode: {
+            options?: components["schemas"]["JsonNodeOptions"];
+            parent?: components["schemas"]["JsonNode"];
+            root?: components["schemas"]["JsonNode"];
+        };
+        JsonNodeOptions: {
+            property_name_case_insensitive?: boolean;
+        };
         JsonRpcRequest: {
             json_rpc?: string | null;
             id?: unknown;
             method?: string | null;
             params?: unknown;
         };
+        /** @description Structured validation error with path for better UI feedback. */
+        MappingValidationError: {
+            code?: string | null;
+            path?: string | null;
+            message?: string | null;
+        };
         MemberDetailResponse: {
             /** Format: uuid */
             id?: string;
             /** Format: uuid */
-            user_id?: string;
+            user_id?: string | null;
             /** Format: uuid */
             tenant_id?: string;
             /** Format: uuid */
@@ -8867,6 +9204,13 @@ export interface components {
             id?: string;
             name?: string | null;
         };
+        MembershipContextDto: {
+            /** Format: uuid */
+            member_id?: string;
+            tenant?: components["schemas"]["TenantContextDto"];
+            role?: components["schemas"]["RoleContextDto"];
+            workspaces?: components["schemas"]["WorkspaceContextDto"][] | null;
+        };
         NodeCatalogResponse: {
             version: string | null;
             nodes: components["schemas"]["NodeTypeDto"][] | null;
@@ -8877,7 +9221,7 @@ export interface components {
             title: string | null;
             description?: string | null;
             default_config?: unknown;
-            locked_fields?: unknown;
+            locked_fields?: string[] | null;
             ui_variant?: string | null;
         };
         NodePresetsCatalogResponse: {
@@ -8885,13 +9229,19 @@ export interface components {
             presets: components["schemas"]["NodePresetDto"][] | null;
         };
         NodeTypeDto: {
-            id: string | null;
+            kind: string | null;
             title: string | null;
             category: string | null;
             description?: string | null;
-            ports?: unknown;
             config_schema?: unknown;
             default_config?: unknown;
+            inputs?: string[] | null;
+            outputs?: string[] | null;
+        };
+        /** @description A JSONPath with its inferred type. */
+        PathInfoDto: {
+            path?: string | null;
+            kind?: string | null;
         };
         PlaygroundRequest: {
             variables?: {
@@ -8934,6 +9284,17 @@ export interface components {
             expires_in?: number;
             object_key?: string | null;
         };
+        /** @description Request for POST /triggers/{id}/preview-input-mapping */
+        PreviewMappingRequest: {
+            sample_payload?: unknown;
+            input_mapping_override?: unknown;
+        };
+        /** @description Response for POST /triggers/{id}/preview-input-mapping */
+        PreviewMappingResponse: {
+            result_input?: unknown;
+            resolution?: components["schemas"]["ResolutionRowDto"][] | null;
+            warnings?: string[] | null;
+        };
         ProblemDetails: {
             type?: string | null;
             title?: string | null;
@@ -8975,6 +9336,13 @@ export interface components {
             rerun_of_run_id?: string;
             status?: string | null;
         };
+        /** @description Resolution row showing how a mapping was resolved. */
+        ResolutionRowDto: {
+            target?: string | null;
+            source?: string | null;
+            ok?: boolean;
+            note?: string | null;
+        };
         ResumeRequest: {
             input?: unknown;
             message?: string | null;
@@ -9036,6 +9404,13 @@ export interface components {
             data?: components["schemas"]["RevisionListResponse"];
             hints?: components["schemas"]["ApiHint"][] | null;
         };
+        RoleContextDto: {
+            /** Format: uuid */
+            id?: string;
+            name?: string | null;
+            is_system?: boolean;
+            permissions?: string[] | null;
+        };
         RunDetailResponse: {
             /** Format: uuid */
             run_id?: string;
@@ -9049,17 +9424,25 @@ export interface components {
             bundle_id?: string;
             /** Format: uuid */
             thread_id?: string;
+            /** Format: uuid */
+            current_attempt_id?: string | null;
+            /** Format: int32 */
+            current_attempt_no?: number | null;
+            /** Format: int64 */
+            latest_seq?: number | null;
             status?: components["schemas"]["RunStatus"];
-            input_json?: string | null;
-            output_json?: string | null;
-            error_json?: string | null;
-            metrics_json?: string | null;
+            input?: unknown;
+            output?: unknown;
+            error?: unknown;
+            metrics?: unknown;
             /** Format: date-time */
             started_at?: string | null;
             /** Format: date-time */
             completed_at?: string | null;
             /** Format: date-time */
             created_at?: string;
+            /** Format: double */
+            duration_ms?: number | null;
             prompt_hash?: string | null;
             toolset_hash?: string | null;
         };
@@ -9076,13 +9459,6 @@ export interface components {
             payload?: unknown;
             truncated?: boolean;
         };
-        RunEventItem: {
-            id?: string | null;
-            type?: string | null;
-            /** Format: date-time */
-            timestamp?: string;
-            data?: unknown;
-        };
         RunEventsPollResponse: {
             events?: components["schemas"]["RunEventDto"][] | null;
             /** Format: int64 */
@@ -9091,16 +9467,6 @@ export interface components {
             next_after_seq?: number | null;
             has_more?: boolean;
         };
-        RunEventsResponse: {
-            items?: components["schemas"]["RunEventItem"][] | null;
-            /** Format: int32 */
-            total?: number;
-            /** Format: int32 */
-            offset?: number;
-            /** Format: int32 */
-            limit?: number;
-            has_more?: boolean;
-        };
         RunListItem: {
             /** Format: uuid */
             id?: string;
@@ -9139,6 +9505,23 @@ export interface components {
          * @enum {integer}
          */
         RunStatus: 0 | 1 | 2 | 3 | 4 | 5 | 6;
+        /** @description Request for PUT /triggers/{id}/input-mapping */
+        SaveMappingRequest: {
+            input_mapping_override?: unknown;
+        };
+        /** @description Response for PUT /triggers/{id}/input-mapping */
+        SaveMappingResponse: {
+            /** Format: uuid */
+            trigger_id?: string;
+            input_mapping_override?: unknown;
+        };
+        ScopeInfo: {
+            key?: string | null;
+            description?: string | null;
+        };
+        ScopeListResponse: {
+            scopes: components["schemas"]["ScopeInfo"][] | null;
+        };
         SetLiveVersionRequest: {
             /** Format: int32 */
             version_number?: number;
@@ -9175,17 +9558,11 @@ export interface components {
             /** Format: int32 */
             ttl_seconds?: number | null;
         };
-        StreamRunRequest: {
-            /** Format: uuid */
-            tenant_id?: string;
-            /** Format: uuid */
-            workspace_id?: string;
+        TenantContextDto: {
             /** Format: uuid */
-            agent_id?: string | null;
-            thread?: components["schemas"]["ThreadRequest"];
-            idempotency_key?: string | null;
-            input_json?: string | null;
-            stream_mode?: string | null;
+            id?: string;
+            name?: string | null;
+            slug?: string | null;
         };
         TenantListResponse: {
             items?: components["schemas"]["TenantResponse"][] | null;
@@ -9209,12 +9586,34 @@ export interface components {
             name?: string | null;
             is_system?: boolean;
         };
+        /** @description Request for POST /triggers/{id}/test-mapping - Preview payload transformation. */
+        TestMappingRequest: {
+            sample_payload?: unknown;
+        };
+        /**
+         * @description Response for POST /triggers/{id}/test-mapping.
+         *     P0: Separated mapping_configured from mapping_executed for honesty.
+         */
+        TestMappingResponse: {
+            /** @description The original payload as received */
+            original_payload?: unknown;
+            /** @description The transformed payload after mapping */
+            transformed_graph_input?: unknown;
+            /** @description True if a mapping spec is configured (trigger override or template default) */
+            mapping_configured?: boolean;
+            /** @description True if the mapping was actually executed (not just configured) */
+            mapping_executed?: boolean;
+            /** @description Structured validation errors if any */
+            validation_errors?: components["schemas"]["MappingValidationError"][] | null;
+        };
         /**
          * @description Request body for POST /triggers/{id}/test.
          *     Payload is optional - falls back to template example_payload.
          */
         TestTriggerRequest: {
             payload?: unknown;
+            thread_key?: string | null;
+            idempotency_key?: string | null;
         };
         ThreadCopyRequest: {
             copy_history?: boolean;
@@ -9253,9 +9652,16 @@ export interface components {
             /** Format: int32 */
             offset?: number | null;
         };
-        ToolCallRequest: {
-            name?: string | null;
-            arguments?: unknown;
+        /** @description Response for GET /triggers/{id}/contract - Full input contract details. */
+        TriggerInputContractResponse: {
+            /** Format: uuid */
+            trigger_id?: string;
+            template_slug?: string | null;
+            external_body_schema?: unknown;
+            run_input_schema?: unknown;
+            effective_input_mapping_spec?: unknown;
+            example_payload?: unknown;
+            has_input_mapping?: boolean;
         };
         TriggerRequestContract: {
             method?: string | null;
@@ -9267,6 +9673,7 @@ export interface components {
             body_schema_json?: string | null;
             example_payload_json?: string | null;
             curl_example?: string | null;
+            curl_command_parts?: components["schemas"]["CurlCommandParts"];
         };
         TriggerSecretResponse: {
             /** Format: uuid */
@@ -9281,6 +9688,11 @@ export interface components {
             invoke_url?: string | null;
             request_contract?: components["schemas"]["TriggerRequestContract"];
             is_active?: boolean;
+            template_slug?: string | null;
+            config_json?: string | null;
+            payload_variants_json?: string | null;
+            thread_key_spec_json?: string | null;
+            idempotency_spec_json?: string | null;
             /** Format: date-time */
             created_at?: string;
         };
@@ -9301,6 +9713,7 @@ export interface components {
             name?: string | null;
             /** Format: uuid */
             live_bundle_id?: string | null;
+            metadata?: components["schemas"]["JsonNode"];
         };
         UpdateCredentialRequest: {
             name?: string | null;
@@ -9340,10 +9753,23 @@ export interface components {
         UpdateTriggerRequest: {
             name?: string | null;
             is_active?: boolean | null;
+            config?: unknown;
+            payload_variants_json?: unknown;
+            thread_key_spec_json?: unknown;
+            idempotency_spec_json?: unknown;
         };
         UpdateWorkspaceRequest: {
             name?: string | null;
         };
+        UserContextResponse: {
+            user?: components["schemas"]["UserIdentityDto"];
+            memberships?: components["schemas"]["MembershipContextDto"][] | null;
+        };
+        UserIdentityDto: {
+            /** Format: uuid */
+            id?: string;
+            email?: string | null;
+        };
         ValidateGraphRequest: {
             graph_spec?: {
                 [key: string]: unknown;
@@ -9460,6 +9886,12 @@ export interface components {
             /** Format: double */
             duration_ms?: number | null;
         };
+        WorkspaceContextDto: {
+            /** Format: uuid */
+            id?: string;
+            name?: string | null;
+            slug?: string | null;
+        };
         WorkspaceListResponse: {
             items?: components["schemas"]["WorkspaceResponse"][] | null;
         };