@alvera-ai/platform-sdk 0.15.0 → 0.16.1

package/dist/index.d.mts

@@ -277,17 +277,17 @@ type DatalakeCloudStorageCustomResponse = CloudStorageCustomResponse & {
  */
 type AgenticWorkflowResponse = {
   /**
-   * Decision actions — rendered as ActionResponse items on reads and accepted as the same shape on create/update. `id` and timestamps are readOnly; clients omit them when creating.
+   * Decision actions attached to this workflow (response — includes id, workflow_id and timestamps)
    */
-  actions?: Array<ActionResponse>;
+  readonly actions?: Array<ActionResponse>;
   /**
    * SHA-256 drift fingerprint over authored fields (server-computed)
    */
   readonly checksum?: string;
   /**
-   * Context-enrichment datasets loaded before the decision stage. Same shape on read and write; readOnly fields (id, timestamps) are omitted by clients on create.
+   * Context-enrichment datasets loaded before the decision stage (response — includes id, workflow_id and timestamps)
    */
-  context_datasets?: Array<ContextDatasetResponse>;
+  readonly context_datasets?: Array<ContextDatasetResponse>;
   datalake?: DatalakeResponse;
   /**
    * Dataset type the workflow listens on (e.g. patient, appointment, generic_table)
@@ -327,6 +327,10 @@ type AgenticWorkflowResponse = {
    * Workflow status. live = auto-fired by event sampling; draft = preview only (dry-run); manual = never auto-fired, but runs for real when an operator explicitly invokes it.
    */
   status: 'live' | 'draft' | 'manual';
+  /**
+   * Operator-authored labels. Free text — no taxonomy, no shared vocabulary. Not read by the execution pipeline, but they DO participate in the workflow checksum, so retagging shifts the drift fingerprint. REQUIRED on every write. Send `[]` for an untagged workflow — deliberately no default, so an omitted key is a 422 rather than a silent reset to empty.
+   */
+  tags: Array<string>;
   /**
    * Last update timestamp
    */
@@ -354,6 +358,24 @@ type ManualToolInvocationResponse = {
    * Creation timestamp
    */
   readonly inserted_at?: string;
+  /**
+   * Provider response payload on success (provider-specific). SQL try-it returns `rows`, `row_count` and `truncated`; other providers return their own shape.
+   */
+  readonly result?: {
+    /**
+     * SQL try-it only — number of rows in `rows`.
+     */
+    row_count?: number;
+    /**
+     * SQL try-it only — result rows, each an array of column values.
+     */
+    rows?: Array<Array<unknown>>;
+    /**
+     * SQL try-it only — `true` when the preview filled its 100-row window, meaning this is a partial view and the query returns at least this many rows. Render it as a partial result, never as the complete answer.
+     */
+    truncated?: boolean;
+    [key: string]: unknown;
+  } | null;
   /**
    * Execution status — server-set. `pending` is the initial state, `success`/`error` reflect provider response.
    */
@@ -368,7 +390,9 @@ type ManualToolInvocationResponse = {
     tool_call_type: 'restapi_request';
   } & ManualToolInvocationRestCallResponse) | ({
     tool_call_type: 'aws_lambda_request';
-  } & ManualToolInvocationAwsLambdaCallResponse);
+  } & ManualToolInvocationAwsLambdaCallResponse) | ({
+    tool_call_type: 'sql_query';
+  } & ManualToolInvocationSqlQueryCallResponse);
   /**
    * Last update timestamp
    */
@@ -471,7 +495,7 @@ type ComplexTemplateConfigRequest = {
 /**
  * DataActivationClientLogResponse
  *
- * One log row per `(batch_id, dataset_table)`. A batch fans out into one log per dataset table — so a single run (one `batch_id`) produces multiple log rows, one per table the DAC writes into. `output_files` carries the merged NDJSON URI once `BatchMergeWorker` has finished; use `/logs/:id/download` to fetch a presigned URL.
+ * One log row per `(batch_id, dataset_table)`. A batch fans out into one log per dataset table — so a single run (one `batch_id`) produces multiple log rows, one per table the DAC writes into. Once `BatchMergeWorker` has finished, `output_files` carries one entry per bucket mode, each an `object_key` — a cloud-storage key, not a URL. To read an archive, presign the key with `POST /datalakes/{datalake_slug}/download-link`.
  */
 type DataActivationClientLogResponse = {
   /**
@@ -490,6 +514,10 @@ type DataActivationClientLogResponse = {
    * Number of existing rows whose checksum changed (trigger-maintained)
    */
   dataset_updated?: number;
+  /**
+   * Structured failure reason when `status` is `failed`; null otherwise.
+   */
+  readonly error?: string | null;
   /**
    * Run log ID
    */
@@ -507,6 +535,10 @@ type DataActivationClientLogResponse = {
    * Total source rows ingested by this slice of the batch
    */
   rows_ingested?: number;
+  /**
+   * `failed` when the batch died before enqueueing any row — the fetch itself errored. `rows_ingested` and `input_files` are 0/[] on such a row; read `error` for the reason.
+   */
+  status?: 'succeeded' | 'failed';
   readonly updated_at?: string;
 };
 /**
@@ -623,6 +655,81 @@ type IngestRequest = {
     [key: string]: unknown;
   };
 };
+/**
+ * WorkflowRunResponse
+ *
+ * A workflow invocation scheduled for a caller-chosen time. Every manual
+ * invocation creates one, including an immediate send, which is simply
+ * `scheduled_at` = now — there is no separate run-now path.
+ *
+ * A run is not a workflow run log. The run is the intent and is cancellable
+ * while `scheduled`; the run log is the outcome it produces, and run logs also
+ * arrive from Data Activation Client ingestion with no run behind them.
+ *
+ * The segment is resolved when the run **fires**, not when it is scheduled.
+ * `matched_count` is the preview the operator saw; the audience is whatever
+ * `execution_user_search_id` resolved to at send time, minus suppressed and
+ * unreachable records.
+ *
+ */
+type WorkflowRunResponse = {
+  /**
+   * Batch identifier for correlating with the workflow run log. Null until the run fires.
+   */
+  readonly batch_id?: string | null;
+  /**
+   * When the run reached a terminal state.
+   */
+  readonly completed_at?: string | null;
+  /**
+   * The search actually resolved when the run fired — its results are the audience that received the send. Null until the run fires; never the same row as `preview_user_search_id`.
+   */
+  readonly execution_user_search_id?: string | null;
+  /**
+   * Why the run could not fan out, when status is 'failed'.
+   */
+  readonly failure_reason?: string | null;
+  /**
+   * When the fan-out began. Null until the run fires.
+   */
+  readonly fired_at?: string | null;
+  /**
+   * Workflow run ID
+   */
+  readonly id?: string;
+  /**
+   * Bypasses dedupe and idempotency checks for every record this run matches.
+   */
+  manual_override?: boolean;
+  /**
+   * Audience size previewed at schedule time. NOT the number that received the send — the segment is resolved again when the run fires, and suppressed records are excluded then.
+   */
+  readonly matched_count?: number | null;
+  /**
+   * 'live' fires real tool calls; 'dry_run' runs the pipeline without making external calls.
+   */
+  mode?: 'live' | 'dry_run';
+  /**
+   * The resolved search this run was scheduled against. Create it with `POST /datasets/:dataset/user-searches`; its `results_count` becomes this run's `matched_count`.
+   */
+  preview_user_search_id: string;
+  /**
+   * When this run fires, in UTC. An immediate send is simply now. Each action still passes through the workflow's action window, so an action may execute later than this.
+   */
+  scheduled_at: string;
+  /**
+   * Run state. Cancellation is refused once processing.
+   */
+  readonly status?: 'scheduled' | 'processing' | 'completed' | 'cancelled' | 'failed';
+  /**
+   * The workflow this run invokes
+   */
+  readonly workflow_id?: string;
+  /**
+   * The run log this run produced. Null until the run fires.
+   */
+  readonly workflow_run_log_id?: string | null;
+};
 /**
  * ToolIntent
  *
@@ -1720,6 +1827,12 @@ type ActionStatusUpdaterRefreshRequest = {
     updater_body_type: 'ActionStatusUpdaterCloudWatchQueryRequest';
   } & ActionStatusUpdaterCloudWatchQueryRequest) | null;
 };
+/**
+ * ToolTwilioRequest
+ */
+type ToolTwilioRequest = TwilioRequest & {
+  tool_body_type: 'twilio';
+};
 /**
  * WorkflowAiAgentResponse
  *
@@ -2013,6 +2126,18 @@ type ManualUploadCallResponse = {
 type ActionStatusUpdaterRestCallResponse = RestCallResponse & {
   updater_body_type: 'restapi_request';
 };
+/**
+ * WorkflowRunListResponse
+ *
+ * Paginated list of workflow runs
+ */
+type WorkflowRunListResponse = {
+  /**
+   * List of workflow runs
+   */
+  data: Array<WorkflowRunResponse>;
+  meta: PaginationMeta;
+};
 /**
  * MinimalAiAgentResponse
  *
@@ -2141,6 +2266,21 @@ type DatasetSearchResponse = {
   };
   user_search: UserSearchResponse;
 };
+/**
+ * InvitationRequest
+ *
+ * Pending tenant invitation — resolved into a Membership on accept. Request
+ */
+type InvitationRequest = {
+  /**
+   * Recipient email address. Must be unique per tenant.
+   */
+  email: string;
+  /**
+   * Tenant-membership role to grant on acceptance. NOT the platform-wide `User.role` enum — `tenant_admin` here is a tenant-scoped admin, not a platform admin.
+   */
+  role: 'member' | 'researcher' | 'admin';
+};
 /**
  * ActionAWSLambdaCallResponse
  */
@@ -2190,10 +2330,18 @@ type EndUserMessagingResponse = {
    * Origination phone number or identity in E.164 format (e.g., +15551234567); must be MMS-capable
    */
   phone_number: string;
+  /**
+   * ID of the primary End User Messaging tool supplying credentials; required when variant_type is variant
+   */
+  primary_tool_id?: string | null;
   /**
    * AWS region (e.g., us-west-2)
    */
   region: string;
+  /**
+   * Whether this tool holds the account credential (primary) or borrows another tool's (variant). Defaults to primary.
+   */
+  variant_type?: 'primary' | 'variant';
 };
 /**
  * ToolS3Response
@@ -2543,6 +2691,33 @@ type SftpResponse = {
 type ToolSnsResponse = SnsResponse & {
   tool_body_type: 'sns';
 };
+/**
+ * UserSearchRequest
+ *
+ * User SQL search resource. Created via `POST /datasets/:dataset/user-searches`
+ * with a `WHERE`-clause body in `search_query`; the platform executes
+ * `INSERT INTO search_results SELECT … WHERE <body>` to populate
+ * `search_results` and reports back `status`, `results_count`, and
+ * `error_message`.
+ *
+ * UserSearch carries no `data_access_mode` of its own — the capability check
+ * runs at query time via `Platform.RegulatedDatalakeRepo.prepare_query/3`,
+ * which reads the ambient session and raises 403 when the ceiling is
+ * insufficient. ExOpenApiUtils derives `UserSearchRequest` (writeable subset)
+ * and `UserSearchResponse` (full readable shape) from this declaration via
+ * the readOnly/writeOnly markers on each property.
+ * Request
+ */
+type UserSearchRequest = {
+  /**
+   * Generic-table identifier. Required when the dataset is a generic table; must be omitted otherwise.
+   */
+  generic_table_id?: string | null;
+  /**
+   * SQL `WHERE`-clause body. The platform wraps it in `INSERT INTO search_results SELECT … WHERE <body>`. Reference the table aliases exposed by the dataset's base decomposed query (see `GET /datasets/:dataset_type/metadata`).
+   */
+  search_query: string;
+};
 /**
  * AdminApiKeyResponse
  *
@@ -2632,6 +2807,16 @@ type ManualToolInvocationAwsLambdaCallResponse = AwsLambdaCallResponse & {
  */
 type PingResponse = {
   database_status: 'connected' | 'disconnected';
+  /**
+   * The platform's own IAM task role — the principal a customer names in the trust policy of
+   * the role they create for the platform to assume (`auth_method: assume_role` on an AWS tool).
+   *
+   * Public by design: it has to reach every customer for onboarding to be possible. The control
+   * against a confused deputy is the per-tool external ID the platform generates, not
+   * concealment of this ARN. `null` where the platform runs without AWS, as in local development.
+   *
+   */
+  iam_role_arn?: string | null;
   status: 'ok' | 'error';
   timestamp: string;
   version: string;
@@ -2700,6 +2885,10 @@ type RunWorkflowRequest = {
    * Execution mode. 'live' fires real tool calls; 'dry_run' runs the full pipeline without making external calls.
    */
   mode?: 'live' | 'dry_run';
+  /**
+   * When the run should fire, as an ISO-8601 timestamp **with an offset** (e.g. "2026-08-12T09:00:00Z"). Omit to fire as soon as a worker picks it up. The segment is resolved when the run fires, not when it is scheduled, so a run scheduled for Friday reaches Friday's matches. Each action still passes through the workflow's action window, so an action may execute later than this.
+   */
+  scheduled_at?: string | null;
   /**
    * SQL WHERE clause to filter dataset records (e.g. "status = 'active'")
    */
@@ -2810,6 +2999,8 @@ type ToolResponse = {
   } & ToolEmailResponse) | ({
     tool_body_type: 'sns';
   } & ToolSnsResponse) | ({
+    tool_body_type: 'twilio';
+  } & ToolTwilioResponse) | ({
     tool_body_type: 'end_user_messaging';
   } & ToolEndUserMessagingResponse) | ({
     tool_body_type: 'rest_api';
@@ -2900,6 +3091,12 @@ type DataSourceListResponse = {
   data: Array<DataSourceResponse>;
   meta: PaginationMeta;
 };
+/**
+ * ActionManualUploadCallRequest
+ */
+type ActionManualUploadCallRequest = ManualUploadCallRequest & {
+  tool_call_type: 'manual_upload';
+};
 /**
  * SharePointExcelCallResponse
  *
@@ -2954,10 +3151,18 @@ type SnsResponse = {
    * Origination phone number in E.164 format (e.g., +15551234567)
    */
   phone_number: string;
+  /**
+   * ID of the primary SNS tool supplying credentials; required when variant_type is variant
+   */
+  primary_tool_id?: string | null;
   /**
    * AWS region (e.g., us-east-1)
    */
   region: string;
+  /**
+   * Whether this tool holds the account credential (primary) or borrows another tool's (variant). Defaults to primary.
+   */
+  variant_type?: 'primary' | 'variant';
 };
 /**
  * InteroperabilityContractAiAgentResponse
@@ -3133,6 +3338,12 @@ type ToolListResponse = {
   data: Array<ToolResponse>;
   meta: PaginationMeta;
 };
+/**
+ * ManualToolInvocationSQLQueryCallResponse
+ */
+type ManualToolInvocationSqlQueryCallResponse = SqlQueryCallResponse & {
+  tool_call_type: 'sql_query';
+};
 /**
  * SQSResponse
  *
@@ -3220,6 +3431,10 @@ type EmailResponse = {
    * Default sender display name
    */
   from_name?: string | null;
+  /**
+   * ID of the primary Email tool supplying credentials; required when variant_type is variant
+   */
+  primary_tool_id?: string | null;
   /**
    * Email provider (mock = in-process dev mailbox, no credentials)
    */
@@ -3244,6 +3459,10 @@ type EmailResponse = {
    * SMTP username
    */
   smtp_username?: string;
+  /**
+   * Whether this tool holds the account credential (primary) or borrows another tool's (variant). Defaults to primary.
+   */
+  variant_type?: 'primary' | 'variant';
 };
 /**
  * ManualToolInvocationMMSCallResponse
@@ -3530,21 +3749,34 @@ type DatalakeListResponse = {
 /**
  * RunWorkflowResponse
  *
- * Response from bulk workflow execution
+ * Acknowledgement that a run has been scheduled.
+ *
+ * **Changed in 0.23.0.** This endpoint used to run the workflow inline and
+ * return `enqueued_count`, `batch_id` and `workflow_run_log_id`. It now records
+ * a workflow run and returns immediately, so none of those three are knowable
+ * yet: the segment is resolved when the run fires, and the batch it produces
+ * does not exist until then. Read them from the run via
+ * `GET /tenants/{tenant_slug}/datalakes/{datalake_slug}/workflow-runs/{id}`
+ * once its status leaves `scheduled`.
+ *
  */
 type RunWorkflowResponse = {
   /**
-   * Batch identifier for tracking this run (format: manual:{user_search_id})
+   * How many records the clause matched **when it was scheduled**. A preview for sanity-checking the clause, not the audience: the segment is resolved again at send time, and suppressed records are excluded then.
    */
-  batch_id: string;
+  matched_count?: number | null;
+  /**
+   * When the run will fire. Echoes the requested time, or the time the request was received when none was given.
+   */
+  scheduled_at: string;
   /**
-   * Number of workflow execution jobs enqueued
+   * Run state at the moment of this response — always `scheduled` here.
    */
-  enqueued_count: number;
+  status: 'scheduled' | 'processing' | 'completed' | 'cancelled' | 'failed';
   /**
-   * ID of the WorkflowRunLog tracking batch progress. Always present — even for zero-match batches a run log is seeded so clients can poll consistently.
+   * The scheduled run. Use it to poll status, or to cancel while still `scheduled`.
    */
-  workflow_run_log_id: string;
+  workflow_run_id: string;
 };
 /**
  * ExecuteActionResponse
@@ -3619,6 +3851,42 @@ type ExecuteSqlResponse = {
 type ToolCloudWatchLogGroupResponse = CloudWatchLogGroupResponse & {
   tool_body_type: 'cloud_watch_log_group';
 };
+/**
+ * TwilioRequest
+ *
+ * Twilio tool configuration for sending SMS via the Programmable Messaging API. A primary holds the account credential; a variant names its primary and carries only its own sender identity. Request
+ */
+type TwilioRequest = {
+  /**
+   * Twilio Account SID (required on a primary; supplied by the primary on a variant)
+   */
+  account_sid?: string | null;
+  base_message?: ComplexTemplateConfigRequest;
+  /**
+   * Custom Twilio API base URL (e.g., http://localhost:8080 for WireMock); leave blank for https://api.twilio.com
+   */
+  base_url?: string | null;
+  /**
+   * Origination phone number in E.164 format (e.g., +15551234567)
+   */
+  from_number?: string | null;
+  /**
+   * Twilio Messaging Service SID, used instead of a from_number
+   */
+  messaging_service_sid?: string | null;
+  /**
+   * ID of the primary Twilio tool supplying credentials; required when variant_type is variant
+   */
+  primary_tool_id?: string | null;
+  /**
+   * Request timeout in milliseconds (1–300000)
+   */
+  timeout_ms?: number | null;
+  /**
+   * Whether this tool holds the account credential (primary) or borrows another tool's (variant). Defaults to primary.
+   */
+  variant_type: 'primary' | 'variant';
+};
 /**
  * CloudWatchQueryRequest
  *
@@ -3715,6 +3983,24 @@ type InteroperabilityContractListResponse = {
 type ToolEndUserMessagingResponse = EndUserMessagingResponse & {
   tool_body_type: 'end_user_messaging';
 };
+/**
+ * TenantRequest
+ *
+ * Tenant resource. The auto-generated `TenantRequest` shape carries only
+ * the writable fields (`name`, `description`); `TenantResponse` returns the
+ * full read surface (`id`, `slug`, `name`, `description`).
+ * Request
+ */
+type TenantRequest = {
+  /**
+   * Optional free-text description; max 1000 chars.
+   */
+  description?: string | null;
+  /**
+   * Human-readable tenant name. Required on create; max 160 chars.
+   */
+  name: string;
+};
 /**
  * ActionStatusUpdaterListResponse
  *
@@ -3925,6 +4211,12 @@ type RunManuallyResponse = {
    */
   batch_id: string;
 };
+/**
+ * ToolTwilioResponse
+ */
+type ToolTwilioResponse = TwilioResponse & {
+  tool_body_type: 'twilio';
+};
 /**
  * ToolSFTPResponse
  */
@@ -4127,9 +4419,9 @@ type CloudStorageR2Response = {
    */
   bucket: string;
   /**
-   * Custom R2 endpoint URL (optional, defaults to account-scoped R2 endpoint)
+   * Account-scoped R2 endpoint URL, e.g. https://<account-id>.r2.cloudflarestorage.com
    */
-  endpoint?: string | null;
+  endpoint: string;
   /**
    * R2 region (defaults to "auto")
    */
@@ -4184,37 +4476,46 @@ type DataSourceResponse = {
   uri: string;
 };
 /**
- * ToolRESTAPIResponse
- */
-type ToolRestapiResponse = RestapiResponse & {
-  tool_body_type: 'rest_api';
-};
-/**
- * ContextDatasetResponse
+ * TwilioResponse
  *
- * Context dataset for a workflow — declares which records the context builder should load (and under what filter) before the enrichment and decision stages.
+ * Twilio tool configuration for sending SMS via the Programmable Messaging API. A primary holds the account credential; a variant names its primary and carries only its own sender identity.
  */
-type ContextDatasetResponseWritable = {
+type TwilioResponse = {
   /**
-   * Dataset type — either a standard industry resource (e.g. "patient", "appointment") or "generic_table" to reference a custom table
+   * Twilio Account SID (required on a primary; supplied by the primary on a variant)
    */
-  dataset_type: string;
+  account_sid?: string | null;
+  base_message?: ComplexTemplateConfigResponse | null;
   /**
-   * Required when `dataset_type == "generic_table"`
+   * Custom Twilio API base URL (e.g., http://localhost:8080 for WireMock); leave blank for https://api.twilio.com
    */
-  generic_table_id?: string | null;
+  base_url?: string | null;
   /**
-   * Max records to load for this context dataset
+   * Origination phone number in E.164 format (e.g., +15551234567)
    */
-  limit?: number | null;
+  from_number?: string | null;
   /**
-   * Ordering within the context-builder pipeline
+   * Twilio Messaging Service SID, used instead of a from_number
    */
-  position?: number;
+  messaging_service_sid?: string | null;
   /**
-   * Liquid-templated SQL WHERE clause for filtering records at runtime. The context builder appends the MDM subject FK automatically.
+   * ID of the primary Twilio tool supplying credentials; required when variant_type is variant
    */
-  where_clause?: string | null;
+  primary_tool_id?: string | null;
+  /**
+   * Request timeout in milliseconds (1–300000)
+   */
+  timeout_ms?: number | null;
+  /**
+   * Whether this tool holds the account credential (primary) or borrows another tool's (variant). Defaults to primary.
+   */
+  variant_type: 'primary' | 'variant';
+};
+/**
+ * ToolRESTAPIResponse
+ */
+type ToolRestapiResponse = RestapiResponse & {
+  tool_body_type: 'rest_api';
 };
 /**
  * DatalakeRequest
@@ -4391,6 +4692,28 @@ type DatalakeRequestWritable = {
 type ToolRestapiRequestWritable = RestapiRequestWritable & {
   tool_body_type: 'rest_api';
 };
+/**
+ * EmailCallRequest
+ *
+ * Email tool-call config — Liquid-templated recipient, subject, and body. Request
+ */
+type EmailCallRequestWritable = {
+  body: SimpleTemplateConfigRequest;
+  subject: SimpleTemplateConfigRequest;
+  to: SimpleTemplateConfigRequest;
+};
+/**
+ * ActionEmailCallRequest
+ */
+type ActionEmailCallRequestWritable = EmailCallRequestWritable & {
+  tool_call_type: 'email_request';
+};
+/**
+ * ActionSMSCallRequest
+ */
+type ActionSmsCallRequestWritable = SmsCallRequestWritable & {
+  tool_call_type: 'sms_request';
+};
 /**
  * DataActivationClientSharePointExcelCallRequest
  */
@@ -4404,13 +4727,13 @@ type DataActivationClientSharePointExcelCallRequestWritable = SharePointExcelCal
  */
 type AgenticWorkflowRequestWritable = {
   /**
-   * Decision actions — rendered as ActionResponse items on reads and accepted as the same shape on create/update. `id` and timestamps are readOnly; clients omit them when creating.
+   * Decision actions to attach to this workflow (request)
    */
-  actions?: Array<ActionResponseWritable>;
+  actions?: Array<ActionRequestWritable>;
   /**
-   * Context-enrichment datasets loaded before the decision stage. Same shape on read and write; readOnly fields (id, timestamps) are omitted by clients on create.
+   * Context-enrichment datasets to load before the decision stage (request)
    */
-  context_datasets?: Array<ContextDatasetResponseWritable>;
+  context_datasets?: Array<ContextDatasetRequestWritable>;
   /**
    * Dataset type the workflow listens on (e.g. patient, appointment, generic_table)
    */
@@ -4445,6 +4768,10 @@ type AgenticWorkflowRequestWritable = {
    * Workflow status. live = auto-fired by event sampling; draft = preview only (dry-run); manual = never auto-fired, but runs for real when an operator explicitly invokes it.
    */
   status: 'live' | 'draft' | 'manual';
+  /**
+   * Operator-authored labels. Free text — no taxonomy, no shared vocabulary. Not read by the execution pipeline, but they DO participate in the workflow checksum, so retagging shifts the drift fingerprint. REQUIRED on every write. Send `[]` for an untagged workflow — deliberately no default, so an omitted key is a 422 rather than a silent reset to empty.
+   */
+  tags: Array<string>;
   /**
    * Last update timestamp
    */
@@ -4471,86 +4798,47 @@ type InteroperabilityContractAiAgentRequestWritable = {
   position: number;
 };
 /**
- * ActionResponse
+ * MMSCallRequest
  *
- * Workflow action — executes when the decision table routes to this `decision_key`. Polymorphic `tool_call` payload is variant-specific via `tool_call_type` discriminator.
+ * MMS tool-call config — Liquid-templated recipient and body, plain public media URL. Request
  */
-type ActionResponseWritable = {
-  action_type: ActionType;
+type MmsCallRequestWritable = {
+  body: SimpleTemplateConfigRequest;
   /**
-   * Hour (0–23) when the action's execution window closes
+   * Public http(s) URL of the media to attach — fetched and re-staged into the tool's S3 media bucket
    */
-  action_window_end?: number | null;
+  media_url: string;
+  to: SimpleTemplateConfigRequest;
+};
+/**
+ * EndUserMessagingRequest
+ *
+ * AWS End User Messaging tool configuration for sending MMS via the SendMediaMessage API. Request
+ */
+type EndUserMessagingRequestWritable = {
   /**
-   * Hour (0–23) when the action's execution window opens (failsafe, typically SMS)
+   * AWS access key ID (used when auth_method is access_key)
    */
-  action_window_start?: number | null;
+  access_key_id?: string | null;
   /**
-   * Optional connected app — when set, the executor mints a per-recipient connected_app_form_url template variable; connected_app_route is required
+   * IAM role ARN to assume in the customer's AWS account (used when auth_method is assume_role)
    */
-  connected_app_id?: string | null;
+  assume_role_arn?: string | null;
   /**
-   * Liquid template rendered to JSON at execution time and stored in the connected-app page token (optional)
+   * External ID for the STS AssumeRole call, unique per customer (auto-generated when auth_method is assume_role)
    */
-  connected_app_metadata_template?: string | null;
+  assume_role_external_id?: string | null;
   /**
-   * Route path within the connected app — required when connected_app_id is set
+   * AWS authentication method
    */
-  connected_app_route?: string | null;
+  auth_method: 'access_key' | 'iam_role' | 'assume_role';
+  base_message?: ComplexTemplateConfigRequest;
   /**
-   * Unique decision_key within the workflow — maps to a decision-table outcome
+   * AWS End User Messaging configuration set that routes delivery events to CloudWatch
    */
-  decision_key: string;
+  configuration_set_name: string;
   /**
-   * Liquid template producing the idempotency key; receives checksum, subject_id, workflow_id, action_id, decision_key
-   */
-  idempotency_template: string;
-  /**
-   * Display order within the workflow
-   */
-  position?: number;
-  /**
-   * Liquid template evaluated at execution time; when falsy, the action is skipped
-   */
-  runtime_filter?: string | null;
-  /**
-   * Tool that executes this action
-   */
-  tool_id: string;
-  /**
-   * Liquid template that determines when this action executes
-   */
-  trigger_template: string;
-};
-/**
- * EndUserMessagingRequest
- *
- * AWS End User Messaging tool configuration for sending MMS via the SendMediaMessage API. Request
- */
-type EndUserMessagingRequestWritable = {
-  /**
-   * AWS access key ID (used when auth_method is access_key)
-   */
-  access_key_id?: string | null;
-  /**
-   * IAM role ARN to assume in the customer's AWS account (used when auth_method is assume_role)
-   */
-  assume_role_arn?: string | null;
-  /**
-   * External ID for the STS AssumeRole call, unique per customer (auto-generated when auth_method is assume_role)
-   */
-  assume_role_external_id?: string | null;
-  /**
-   * AWS authentication method
-   */
-  auth_method: 'access_key' | 'iam_role' | 'assume_role';
-  base_message?: ComplexTemplateConfigRequest;
-  /**
-   * AWS End User Messaging configuration set that routes delivery events to CloudWatch
-   */
-  configuration_set_name: string;
-  /**
-   * Custom sms-voice endpoint URL (e.g. http://localhost:8080 for the WireMock stub); leave blank for real AWS
+   * Custom sms-voice endpoint URL (e.g. http://localhost:8080 for the WireMock stub); leave blank for real AWS
    */
   endpoint_url?: string | null;
   /**
@@ -4565,6 +4853,10 @@ type EndUserMessagingRequestWritable = {
    * Origination phone number or identity in E.164 format (e.g., +15551234567); must be MMS-capable
    */
   phone_number: string;
+  /**
+   * ID of the primary End User Messaging tool supplying credentials; required when variant_type is variant
+   */
+  primary_tool_id?: string | null;
   /**
    * AWS region (e.g., us-west-2)
    */
@@ -4573,6 +4865,10 @@ type EndUserMessagingRequestWritable = {
    * AWS secret access key (used when auth_method is access_key)
    */
   secret_access_key?: string | null;
+  /**
+   * Whether this tool holds the account credential (primary) or borrows another tool's (variant). Defaults to primary.
+   */
+  variant_type?: 'primary' | 'variant';
 };
 /**
  * ToolSharePointRequest
@@ -4591,6 +4887,8 @@ type ToolRequestWritable = {
   } & ToolEmailRequestWritable) | ({
     tool_body_type: 'sns';
   } & ToolSnsRequestWritable) | ({
+    tool_body_type: 'twilio';
+  } & ToolTwilioRequestWritable) | ({
     tool_body_type: 'end_user_messaging';
   } & ToolEndUserMessagingRequestWritable) | ({
     tool_body_type: 'rest_api';
@@ -4680,6 +4978,81 @@ type AwsLambdaRequestWritable = {
 type ToolSqsRequestWritable = SqsRequestWritable & {
   tool_body_type: 'sqs';
 };
+/**
+ * ActionRequest
+ *
+ * Workflow action — executes when the decision table routes to this `decision_key`. Polymorphic `tool_call` payload is variant-specific via `tool_call_type` discriminator. Request
+ */
+type ActionRequestWritable = {
+  action_type: ActionType;
+  /**
+   * Hour (0–23) when the action's execution window closes
+   */
+  action_window_end?: number | null;
+  /**
+   * Hour (0–23) when the action's execution window opens (failsafe, typically SMS)
+   */
+  action_window_start?: number | null;
+  /**
+   * Optional connected app — when set, the executor mints a per-recipient connected_app_form_url template variable; connected_app_route is required
+   */
+  connected_app_id?: string | null;
+  /**
+   * Liquid template rendered to JSON at execution time and stored in the connected-app page token (optional)
+   */
+  connected_app_metadata_template?: string | null;
+  /**
+   * Route path within the connected app — required when connected_app_id is set
+   */
+  connected_app_route?: string | null;
+  /**
+   * Unique decision_key within the workflow — maps to a decision-table outcome
+   */
+  decision_key: string;
+  /**
+   * Action ID — echo it back on update to modify the existing action rather than replace it
+   */
+  id?: string;
+  /**
+   * Liquid template producing the idempotency key; receives checksum, subject_id, workflow_id, action_id, decision_key
+   */
+  idempotency_template: string;
+  /**
+   * Display order within the workflow
+   */
+  position?: number;
+  /**
+   * Liquid template evaluated at execution time; when falsy, the action is skipped
+   */
+  runtime_filter?: string | null;
+  tool_call: ({
+    tool_call_type: 'sms_request';
+  } & ActionSmsCallRequestWritable) | ({
+    tool_call_type: 'mms_request';
+  } & ActionMmsCallRequestWritable) | ({
+    tool_call_type: 'email_request';
+  } & ActionEmailCallRequestWritable) | ({
+    tool_call_type: 'sql_query';
+  } & ActionSqlQueryCallRequestWritable) | ({
+    tool_call_type: 'restapi_request';
+  } & ActionRestCallRequestWritable) | ({
+    tool_call_type: 'sftp_request';
+  } & ActionSftpCallRequestWritable) | ({
+    tool_call_type: 'microsoft_share_point_excel_request';
+  } & ActionSharePointExcelCallRequestWritable) | ({
+    tool_call_type: 'aws_lambda_request';
+  } & ActionAwsLambdaCallRequestWritable) | ({
+    tool_call_type: 'manual_upload';
+  } & ActionManualUploadCallRequest);
+  /**
+   * Tool that executes this action
+   */
+  tool_id: string;
+  /**
+   * Liquid template that determines when this action executes
+   */
+  trigger_template: string;
+};
 /**
  * DatalakeCloudStorageR2Request
  */
@@ -4708,6 +5081,74 @@ type WorkflowAiAgentRequestWritable = {
    */
   position: number;
 };
+/**
+ * AiAgentRequest
+ *
+ * AI Agent configuration — reusable chat-completion resource Request
+ */
+type AiAgentRequestWritable = {
+  /**
+   * Data access level
+   */
+  data_access: 'regulated' | 'unregulated';
+  /**
+   * Agent description
+   */
+  description?: string | null;
+  /**
+   * Whether the agent is enabled
+   */
+  enabled: boolean;
+  /**
+   * AI Agent ID
+   */
+  id?: string;
+  /**
+   * JSON Schema describing the agent's input contract — validated by the runner against caller context on every invocation.
+   */
+  input_schema: {
+    [key: string]: unknown;
+  };
+  /**
+   * Creation timestamp
+   */
+  inserted_at?: string;
+  /**
+   * JSON Schema for LLM response format
+   */
+  llm_response_schema: {
+    [key: string]: unknown;
+  } | null;
+  /**
+   * Maximum tokens for LLM response
+   */
+  max_tokens: number;
+  /**
+   * LLM model identifier
+   */
+  model: string;
+  /**
+   * Agent name
+   */
+  name: string;
+  prompt_config: SimpleTemplateConfigRequest;
+  /**
+   * URL-friendly slug
+   */
+  slug?: string;
+  /**
+   * Sampling temperature (0.0–2.0)
+   */
+  temperature: number;
+  /**
+   * Tool ID
+   */
+  tool_id: string;
+  /**
+   * Last update timestamp
+   */
+  updated_at?: string;
+};
 /**
  * EmailRequest
  *
@@ -4738,6 +5179,10 @@ type EmailRequestWritable = {
    * Default sender display name
    */
   from_name?: string | null;
+  /**
+   * ID of the primary Email tool supplying credentials; required when variant_type is variant
+   */
+  primary_tool_id?: string | null;
   /**
    * Email provider (mock = in-process dev mailbox, no credentials)
    */
@@ -4770,6 +5215,10 @@ type EmailRequestWritable = {
    * SMTP username
    */
   smtp_username?: string;
+  /**
+   * Whether this tool holds the account credential (primary) or borrows another tool's (variant). Defaults to primary.
+   */
+  variant_type?: 'primary' | 'variant';
 };
 /**
  * S3CloudStorageR2Request
@@ -4777,18 +5226,65 @@ type EmailRequestWritable = {
 type S3CloudStorageR2RequestWritable = CloudStorageR2RequestWritable & {
   storage_config_type: 'r2';
 };
+/**
+ * ToolTwilioRequest
+ */
+type ToolTwilioRequestWritable = TwilioRequestWritable & {
+  tool_body_type: 'twilio';
+};
 /**
  * ToolSQLDatabaseRequest
  */
 type ToolSqlDatabaseRequestWritable = SqlDatabaseRequestWritable & {
   tool_body_type: 'sql_database';
 };
+/**
+ * ActionRESTCallRequest
+ */
+type ActionRestCallRequestWritable = RestCallRequestWritable & {
+  tool_call_type: 'restapi_request';
+};
+/**
+ * GenericTableRequest
+ *
+ * Generic Table — custom or system dataset table with column definitions. Request
+ */
+type GenericTableRequestWritable = {
+  /**
+   * Table column definitions
+   */
+  columns?: Array<GenericTableColumnRequest>;
+  /**
+   * Industry data domain. Each value carries a stability tier in the `x-stability` extension — `stable` domains hold their dataset shapes across releases; `experimental` domains may change without notice.
+   */
+  data_domain?: 'healthcare' | 'core_banking' | 'payments' | 'subscription' | 'service_commerce' | 'trading' | 'foundation';
+  /**
+   * Table description
+   */
+  description?: string;
+  /**
+   * User-friendly table title
+   */
+  title?: string;
+};
 /**
  * ToolSFTPRequest
  */
 type ToolSftpRequestWritable = SftpRequestWritable & {
   tool_body_type: 'sftp';
 };
+/**
+ * ActionSQLQueryCallRequest
+ */
+type ActionSqlQueryCallRequestWritable = SqlQueryCallRequestWritable & {
+  tool_call_type: 'sql_query';
+};
+/**
+ * ActionSFTPCallRequest
+ */
+type ActionSftpCallRequestWritable = SftpCallRequest & {
+  tool_call_type: 'sftp_request';
+};
 /**
  * AWSLambdaCallRequest
  *
@@ -4807,6 +5303,12 @@ type AwsLambdaCallRequestWritable = {
 type ToolCloudWatchLogGroupRequestWritable = CloudWatchLogGroupRequestWritable & {
   tool_body_type: 'cloud_watch_log_group';
 };
+/**
+ * ManualToolInvocationSQLQueryCallRequest
+ */
+type ManualToolInvocationSqlQueryCallRequestWritable = SqlQueryCallRequestWritable & {
+  tool_call_type: 'sql_query';
+};
 /**
  * DataActivationClientAWSLambdaCallRequest
  */
@@ -4844,9 +5346,9 @@ type CloudStorageR2RequestWritable = {
    */
   bucket: string;
   /**
-   * Custom R2 endpoint URL (optional, defaults to account-scoped R2 endpoint)
+   * Account-scoped R2 endpoint URL, e.g. https://<account-id>.r2.cloudflarestorage.com
    */
-  endpoint?: string | null;
+  endpoint: string;
   /**
    * R2 region (defaults to "auto")
    */
@@ -4896,6 +5398,32 @@ type SharePointRequestWritable = {
    */
   site_url?: string | null;
 };
+/**
+ * ManualToolInvocationSMSCallRequest
+ */
+type ManualToolInvocationSmsCallRequestWritable = SmsCallRequestWritable & {
+  tool_call_type: 'sms_request';
+};
+/**
+ * ManualToolInvocationRequest
+ *
+ * A manual test invocation of a tool. The request body carries only `tool_call` (polymorphic on `__type__`); all other fields are server-populated and returned in the response. Request
+ */
+type ManualToolInvocationRequestWritable = {
+  tool_call?: ({
+    tool_call_type: 'sms_request';
+  } & ManualToolInvocationSmsCallRequestWritable) | ({
+    tool_call_type: 'mms_request';
+  } & ManualToolInvocationMmsCallRequestWritable) | ({
+    tool_call_type: 'email_request';
+  } & ManualToolInvocationEmailCallRequestWritable) | ({
+    tool_call_type: 'restapi_request';
+  } & ManualToolInvocationRestCallRequestWritable) | ({
+    tool_call_type: 'aws_lambda_request';
+  } & ManualToolInvocationAwsLambdaCallRequestWritable) | ({
+    tool_call_type: 'sql_query';
+  } & ManualToolInvocationSqlQueryCallRequestWritable);
+};
 /**
  * SQLQueryCallRequest
  *
@@ -4971,6 +5499,10 @@ type SnsRequestWritable = {
    * Origination phone number in E.164 format (e.g., +15551234567)
    */
   phone_number: string;
+  /**
+   * ID of the primary SNS tool supplying credentials; required when variant_type is variant
+   */
+  primary_tool_id?: string | null;
   /**
    * AWS region (e.g., us-east-1)
    */
@@ -4979,6 +5511,10 @@ type SnsRequestWritable = {
    * AWS secret access key (used when auth_method is access_key)
    */
   secret_access_key?: string | null;
+  /**
+   * Whether this tool holds the account credential (primary) or borrows another tool's (variant). Defaults to primary.
+   */
+  variant_type?: 'primary' | 'variant';
 };
 /**
  * ToolEmailRequest
@@ -4986,6 +5522,24 @@ type SnsRequestWritable = {
 type ToolEmailRequestWritable = EmailRequestWritable & {
   tool_body_type: 'email';
 };
+/**
+ * ManualToolInvocationMMSCallRequest
+ */
+type ManualToolInvocationMmsCallRequestWritable = MmsCallRequestWritable & {
+  tool_call_type: 'mms_request';
+};
+/**
+ * ActionStatusUpdaterCloudWatchQueryRequest
+ */
+type ActionStatusUpdaterCloudWatchQueryRequestWritable = CloudWatchQueryRequest & {
+  updater_body_type: 'cloud_watch_request';
+};
+/**
+ * ActionStatusUpdaterRESTCallRequest
+ */
+type ActionStatusUpdaterRestCallRequestWritable = RestCallRequestWritable & {
+  updater_body_type: 'restapi_request';
+};
 /**
  * SQSRequest
  *
@@ -5028,6 +5582,12 @@ type SqsRequestWritable = {
 type ToolAwsLambdaRequestWritable = AwsLambdaRequestWritable & {
   tool_body_type: 'aws_lambda';
 };
+/**
+ * ActionSharePointExcelCallRequest
+ */
+type ActionSharePointExcelCallRequestWritable = SharePointExcelCallRequest & {
+  tool_call_type: 'microsoft_share_point_excel_request';
+};
 /**
  * InteroperabilityContractRequest
  *
@@ -5097,6 +5657,37 @@ type RestCallRequestWritable = {
   params?: SimpleTemplateConfigRequest;
   path: SimpleTemplateConfigRequest;
 };
+/**
+ * ContextDatasetRequest
+ *
+ * Context dataset for a workflow — declares which records the context builder should load (and under what filter) before the enrichment and decision stages. Request
+ */
+type ContextDatasetRequestWritable = {
+  /**
+   * Dataset type — either a standard industry resource (e.g. "patient", "appointment") or "generic_table" to reference a custom table
+   */
+  dataset_type: string;
+  /**
+   * Required when `dataset_type == "generic_table"`
+   */
+  generic_table_id?: string | null;
+  /**
+   * Context dataset ID — echo it back on update to modify the existing dataset rather than replace it
+   */
+  id?: string;
+  /**
+   * Max records to load for this context dataset
+   */
+  limit?: number | null;
+  /**
+   * Ordering within the context-builder pipeline
+   */
+  position?: number;
+  /**
+   * Liquid-templated SQL WHERE clause for filtering records at runtime. The context builder appends the MDM subject FK automatically.
+   */
+  where_clause?: string | null;
+};
 /**
  * RESTAPIRequest
  *
@@ -5368,6 +5959,52 @@ type DataActivationClientRequestWritable = {
    */
   tool_id: string;
 };
+/**
+ * ActionAWSLambdaCallRequest
+ */
+type ActionAwsLambdaCallRequestWritable = AwsLambdaCallRequestWritable & {
+  tool_call_type: 'aws_lambda_request';
+};
+/**
+ * TwilioRequest
+ *
+ * Twilio tool configuration for sending SMS via the Programmable Messaging API. A primary holds the account credential; a variant names its primary and carries only its own sender identity. Request
+ */
+type TwilioRequestWritable = {
+  /**
+   * Twilio Account SID (required on a primary; supplied by the primary on a variant)
+   */
+  account_sid?: string | null;
+  /**
+   * Twilio Auth Token (required on a primary; supplied by the primary on a variant)
+   */
+  auth_token?: string | null;
+  base_message?: ComplexTemplateConfigRequest;
+  /**
+   * Custom Twilio API base URL (e.g., http://localhost:8080 for WireMock); leave blank for https://api.twilio.com
+   */
+  base_url?: string | null;
+  /**
+   * Origination phone number in E.164 format (e.g., +15551234567)
+   */
+  from_number?: string | null;
+  /**
+   * Twilio Messaging Service SID, used instead of a from_number
+   */
+  messaging_service_sid?: string | null;
+  /**
+   * ID of the primary Twilio tool supplying credentials; required when variant_type is variant
+   */
+  primary_tool_id?: string | null;
+  /**
+   * Request timeout in milliseconds (1–300000)
+   */
+  timeout_ms?: number | null;
+  /**
+   * Whether this tool holds the account credential (primary) or borrows another tool's (variant). Defaults to primary.
+   */
+  variant_type: 'primary' | 'variant';
+};
 /**
  * DataActivationClientSFTPCallRequest
  */
@@ -5405,18 +6042,71 @@ type RunManuallyRequestWritable = {
 type ToolEndUserMessagingRequestWritable = EndUserMessagingRequestWritable & {
   tool_body_type: 'end_user_messaging';
 };
+/**
+ * ManualToolInvocationEmailCallRequest
+ */
+type ManualToolInvocationEmailCallRequestWritable = EmailCallRequestWritable & {
+  tool_call_type: 'email_request';
+};
 /**
  * DatalakeCloudStorageAwsRequest
  */
 type DatalakeCloudStorageAwsRequestWritable = CloudStorageAwsRequestWritable & {
   cloud_storage_type: 'aws';
 };
+/**
+ * ActionMMSCallRequest
+ */
+type ActionMmsCallRequestWritable = MmsCallRequestWritable & {
+  tool_call_type: 'mms_request';
+};
+/**
+ * ManualToolInvocationAWSLambdaCallRequest
+ */
+type ManualToolInvocationAwsLambdaCallRequestWritable = AwsLambdaCallRequestWritable & {
+  tool_call_type: 'aws_lambda_request';
+};
 /**
  * ToolS3Request
  */
 type ToolS3RequestWritable = S3RequestWritable & {
   tool_body_type: 's3';
 };
+/**
+ * ManualToolInvocationRESTCallRequest
+ */
+type ManualToolInvocationRestCallRequestWritable = RestCallRequestWritable & {
+  tool_call_type: 'restapi_request';
+};
+/**
+ * SignUpRequest
+ *
+ * Register a new user account. Mirrors the `/auth/register` LiveView form
+ * submission shape. The created user is **unconfirmed** — caller must
+ * confirm separately (e.g. via the email confirmation flow, or via
+ * `PUT /api/v1/admin/users/:id/confirm` for tests) before signing in.
+ *
+ * No authentication is required.
+ * Request
+ */
+type SignUpRequestWritable = {
+  /**
+   * User email
+   */
+  email: string;
+  /**
+   * First name
+   */
+  first_name: string | null;
+  /**
+   * Last name
+   */
+  last_name: string | null;
+  /**
+   * Password (8–72 characters; mirrors the `/auth/register` LiveView form)
+   */
+  password: string;
+};
 /**
  * DataActivationClientSQLQueryCallRequest
  */
@@ -5429,6 +6119,60 @@ type DataActivationClientSqlQueryCallRequestWritable = SqlQueryCallRequestWritab
 type ToolSnsRequestWritable = SnsRequestWritable & {
   tool_body_type: 'sns';
 };
+/**
+ * ActionStatusUpdaterRequest
+ *
+ * Action Status Updater — automated polling for delivery status updates. Request
+ */
+type ActionStatusUpdaterRequestWritable = {
+  action_log_config: SimpleTemplateConfigRequest;
+  /**
+   * Cron schedule expression (e.g. "*30 * * * *")
+   */
+  cron_expression: string;
+  /**
+   * Datalake ID
+   */
+  datalake_id: string;
+  /**
+   * JSON Schema the rendered events_template output is validated against on every poll (required for restapi updaters). FLOOR: it must describe an array whose items are objects listing "external_id" in "required" — every event has to name the message it reconciles, so the events_template maps the provider's own id (messageId / id / sid) into external_id. Add whatever else your provider guarantees on top; the platform only enforces the floor.
+   */
+  events_output_schema?: {
+    [key: string]: unknown;
+  } | null;
+  message_config: SimpleTemplateConfigRequest;
+  /**
+   * Updater name
+   */
+  name: string;
+  /**
+   * JSON Schema the rendered pagination_context_template output is validated against on every poll (required for restapi updaters). FLOOR: it must describe an object listing "has_next" in "required" — that key is what ends the page loop. Add the provider's cursor keys on top; the platform only enforces the floor.
+   */
+  pagination_context_output_schema?: {
+    [key: string]: unknown;
+  } | null;
+  /**
+   * IDs of sender tools whose messages this updater monitors
+   */
+  sender_tool_ids?: Array<string> | null;
+  /**
+   * Whether this updater may poll. The server sets cycle_detected when a run re-reads events it has already handled, and every later job then fails without calling the provider. Set it back to active to resume polling — nothing else clears it.
+   */
+  status?: 'active' | 'cycle_detected';
+  updater_body: ({
+    updater_body_type: 'cloud_watch_request';
+  } & ActionStatusUpdaterCloudWatchQueryRequestWritable) | ({
+    updater_body_type: 'restapi_request';
+  } & ActionStatusUpdaterRestCallRequestWritable);
+  /**
+   * Tool providing auth credentials for polling
+   */
+  updater_tool_id: string;
+  /**
+   * Updater type — determines the updater_body shape
+   */
+  updater_type: 'cloud_watch' | 'restapi';
+};
 /**
  * ConnectedAppRequest
  *
@@ -5559,6 +6303,19 @@ type SqlDatabaseRequestWritable = {
    */
   user_name: string;
 };
+/**
+ * SMSCallRequest
+ *
+ * SMS tool-call config — Liquid-templated recipient and body plus transactional/promotional category. Request
+ */
+type SmsCallRequestWritable = {
+  body: SimpleTemplateConfigRequest;
+  /**
+   * SMS category — transactional vs promotional
+   */
+  sms_type?: 'transactional' | 'promotional';
+  to: SimpleTemplateConfigRequest;
+};
 type PlatformApiTenantControllerIndexData = {
   body?: never;
   path?: never;
@@ -5580,7 +6337,7 @@ type PlatformApiTenantControllerIndexData = {
      */
     order_directions?: Array<'asc' | 'desc'>;
     /**
-     * Flop-native filter array. URL shape: `?filters[][field]=status&filters[][op]=equal&filters[][value]=pending` (empty brackets — consecutive `[]` entries group into one filter object per element; indexed brackets parse as a map and fail the array cast with 422). Unknown fields or operators return 422 via Flop validation at the context layer.
+     * Flop-native filter array. URL shape: `?filters[][field]=status&filters[][op]=%3D%3D&filters[][value]=pending` (empty brackets — consecutive `[]` entries group into one filter object per element; indexed brackets parse as a map and fail the array cast with 422). `op` is the symbol, percent-encoded — `%3D%3D` for `==`, `%3E%3D` for `>=` — not a word like `equal`; anything outside the enum above is a 422 before the request reaches Flop. Omit `op` entirely for equality. Unknown fields return 422 via Flop validation at the context layer.
      */
     filters?: Array<{
       /**
@@ -5629,7 +6386,7 @@ type PlatformApiGenericTableControllerIndexData = {
      */
     order_directions?: Array<'asc' | 'desc'>;
     /**
-     * Flop-native filter array. URL shape: `?filters[][field]=status&filters[][op]=equal&filters[][value]=pending` (empty brackets — consecutive `[]` entries group into one filter object per element; indexed brackets parse as a map and fail the array cast with 422). Unknown fields or operators return 422 via Flop validation at the context layer.
+     * Flop-native filter array. URL shape: `?filters[][field]=status&filters[][op]=%3D%3D&filters[][value]=pending` (empty brackets — consecutive `[]` entries group into one filter object per element; indexed brackets parse as a map and fail the array cast with 422). `op` is the symbol, percent-encoded — `%3D%3D` for `==`, `%3E%3D` for `>=` — not a word like `equal`; anything outside the enum above is a 422 before the request reaches Flop. Omit `op` entirely for equality. Unknown fields return 422 via Flop validation at the context layer.
      */
     filters?: Array<{
       /**
@@ -5678,7 +6435,7 @@ type PlatformApiInteroperabilityContractControllerIndexData = {
      */
     order_directions?: Array<'asc' | 'desc'>;
     /**
-     * Flop-native filter array. URL shape: `?filters[][field]=status&filters[][op]=equal&filters[][value]=pending` (empty brackets — consecutive `[]` entries group into one filter object per element; indexed brackets parse as a map and fail the array cast with 422). Unknown fields or operators return 422 via Flop validation at the context layer.
+     * Flop-native filter array. URL shape: `?filters[][field]=status&filters[][op]=%3D%3D&filters[][value]=pending` (empty brackets — consecutive `[]` entries group into one filter object per element; indexed brackets parse as a map and fail the array cast with 422). `op` is the symbol, percent-encoded — `%3D%3D` for `==`, `%3E%3D` for `>=` — not a word like `equal`; anything outside the enum above is a 422 before the request reaches Flop. Omit `op` entirely for equality. Unknown fields return 422 via Flop validation at the context layer.
      */
     filters?: Array<{
       /**
@@ -5723,7 +6480,7 @@ type PlatformApiDatalakeControllerIndexData = {
      */
     order_directions?: Array<'asc' | 'desc'>;
     /**
-     * Flop-native filter array. URL shape: `?filters[][field]=status&filters[][op]=equal&filters[][value]=pending` (empty brackets — consecutive `[]` entries group into one filter object per element; indexed brackets parse as a map and fail the array cast with 422). Unknown fields or operators return 422 via Flop validation at the context layer.
+     * Flop-native filter array. URL shape: `?filters[][field]=status&filters[][op]=%3D%3D&filters[][value]=pending` (empty brackets — consecutive `[]` entries group into one filter object per element; indexed brackets parse as a map and fail the array cast with 422). `op` is the symbol, percent-encoded — `%3D%3D` for `==`, `%3E%3D` for `>=` — not a word like `equal`; anything outside the enum above is a 422 before the request reaches Flop. Omit `op` entirely for equality. Unknown fields return 422 via Flop validation at the context layer.
      */
     filters?: Array<{
       /**
@@ -5772,7 +6529,7 @@ type PlatformApiAiAgentControllerIndexData = {
      */
     order_directions?: Array<'asc' | 'desc'>;
     /**
-     * Flop-native filter array. URL shape: `?filters[][field]=status&filters[][op]=equal&filters[][value]=pending` (empty brackets — consecutive `[]` entries group into one filter object per element; indexed brackets parse as a map and fail the array cast with 422). Unknown fields or operators return 422 via Flop validation at the context layer.
+     * Flop-native filter array. URL shape: `?filters[][field]=status&filters[][op]=%3D%3D&filters[][value]=pending` (empty brackets — consecutive `[]` entries group into one filter object per element; indexed brackets parse as a map and fail the array cast with 422). `op` is the symbol, percent-encoded — `%3D%3D` for `==`, `%3E%3D` for `>=` — not a word like `equal`; anything outside the enum above is a 422 before the request reaches Flop. Omit `op` entirely for equality. Unknown fields return 422 via Flop validation at the context layer.
      */
     filters?: Array<{
       /**
@@ -5791,6 +6548,55 @@ type PlatformApiAiAgentControllerIndexData = {
   };
   url: '/api/v1/tenants/{tenant_slug}/datalakes/{datalake_slug}/ai-agents';
 };
+type PlatformApiWorkflowRunControllerIndexData = {
+  body?: never;
+  path: {
+    /**
+     * Tenant slug
+     */
+    tenant_slug: string;
+    /**
+     * Datalake slug
+     */
+    datalake_slug: string;
+  };
+  query?: {
+    /**
+     * Page number (1-indexed). Defaults to 1 when omitted.
+     */
+    page?: number;
+    /**
+     * Items per page (1-100). Defaults to the resource's Flop default when omitted.
+     */
+    page_size?: number;
+    /**
+     * Fields to sort by, in order of precedence. Must appear in the resource schema's Flop `sortable:` list — unknown fields return 422.
+     */
+    order_by?: Array<string>;
+    /**
+     * Sort direction(s), pair-wise with `order_by`. `asc` or `desc`. Defaults to `asc` per unpaired `order_by` entry.
+     */
+    order_directions?: Array<'asc' | 'desc'>;
+    /**
+     * Flop-native filter array. URL shape: `?filters[][field]=status&filters[][op]=%3D%3D&filters[][value]=pending` (empty brackets — consecutive `[]` entries group into one filter object per element; indexed brackets parse as a map and fail the array cast with 422). `op` is the symbol, percent-encoded — `%3D%3D` for `==`, `%3E%3D` for `>=` — not a word like `equal`; anything outside the enum above is a 422 before the request reaches Flop. Omit `op` entirely for equality. Unknown fields return 422 via Flop validation at the context layer.
+     */
+    filters?: Array<{
+      /**
+       * Filterable field name (must be in the resource's `filterable:`)
+       */
+      field: string;
+      /**
+       * Comparison operator. Defaults to `==` when omitted.
+       */
+      op?: '==' | '!=' | '<' | '<=' | '>' | '>=' | 'empty' | 'not_empty' | 'like' | 'ilike' | 'like_and' | 'like_or' | 'ilike_and' | 'ilike_or' | 'in' | 'not_in' | 'contains' | 'not_contains';
+      /**
+       * Filter value — shape depends on `field` and `op`.
+       */
+      value: unknown;
+    }>;
+  };
+  url: '/api/v1/tenants/{tenant_slug}/datalakes/{datalake_slug}/workflow-runs';
+};
 type PlatformApiAgenticWorkflowOperationsControllerWorkflowLogsIndexData = {
   body?: never;
   path: {
@@ -5825,7 +6631,7 @@ type PlatformApiAgenticWorkflowOperationsControllerWorkflowLogsIndexData = {
      */
     order_directions?: Array<'asc' | 'desc'>;
     /**
-     * Flop-native filter array. URL shape: `?filters[][field]=status&filters[][op]=equal&filters[][value]=pending` (empty brackets — consecutive `[]` entries group into one filter object per element; indexed brackets parse as a map and fail the array cast with 422). Unknown fields or operators return 422 via Flop validation at the context layer.
+     * Flop-native filter array. URL shape: `?filters[][field]=status&filters[][op]=%3D%3D&filters[][value]=pending` (empty brackets — consecutive `[]` entries group into one filter object per element; indexed brackets parse as a map and fail the array cast with 422). `op` is the symbol, percent-encoded — `%3D%3D` for `==`, `%3E%3D` for `>=` — not a word like `equal`; anything outside the enum above is a 422 before the request reaches Flop. Omit `op` entirely for equality. Unknown fields return 422 via Flop validation at the context layer.
      */
     filters?: Array<{
       /**
@@ -5874,7 +6680,7 @@ type PlatformApiDataSourceControllerIndexData = {
      */
     order_directions?: Array<'asc' | 'desc'>;
     /**
-     * Flop-native filter array. URL shape: `?filters[][field]=status&filters[][op]=equal&filters[][value]=pending` (empty brackets — consecutive `[]` entries group into one filter object per element; indexed brackets parse as a map and fail the array cast with 422). Unknown fields or operators return 422 via Flop validation at the context layer.
+     * Flop-native filter array. URL shape: `?filters[][field]=status&filters[][op]=%3D%3D&filters[][value]=pending` (empty brackets — consecutive `[]` entries group into one filter object per element; indexed brackets parse as a map and fail the array cast with 422). `op` is the symbol, percent-encoded — `%3D%3D` for `==`, `%3E%3D` for `>=` — not a word like `equal`; anything outside the enum above is a 422 before the request reaches Flop. Omit `op` entirely for equality. Unknown fields return 422 via Flop validation at the context layer.
      */
     filters?: Array<{
       /**
@@ -5923,7 +6729,7 @@ type PlatformApiActionStatusUpdaterControllerIndexData = {
      */
     order_directions?: Array<'asc' | 'desc'>;
     /**
-     * Flop-native filter array. URL shape: `?filters[][field]=status&filters[][op]=equal&filters[][value]=pending` (empty brackets — consecutive `[]` entries group into one filter object per element; indexed brackets parse as a map and fail the array cast with 422). Unknown fields or operators return 422 via Flop validation at the context layer.
+     * Flop-native filter array. URL shape: `?filters[][field]=status&filters[][op]=%3D%3D&filters[][value]=pending` (empty brackets — consecutive `[]` entries group into one filter object per element; indexed brackets parse as a map and fail the array cast with 422). `op` is the symbol, percent-encoded — `%3D%3D` for `==`, `%3E%3D` for `>=` — not a word like `equal`; anything outside the enum above is a 422 before the request reaches Flop. Omit `op` entirely for equality. Unknown fields return 422 via Flop validation at the context layer.
      */
     filters?: Array<{
       /**
@@ -5972,7 +6778,7 @@ type PlatformApiConnectedAppMgmtControllerIndexData = {
      */
     order_directions?: Array<'asc' | 'desc'>;
     /**
-     * Flop-native filter array. URL shape: `?filters[][field]=status&filters[][op]=equal&filters[][value]=pending` (empty brackets — consecutive `[]` entries group into one filter object per element; indexed brackets parse as a map and fail the array cast with 422). Unknown fields or operators return 422 via Flop validation at the context layer.
+     * Flop-native filter array. URL shape: `?filters[][field]=status&filters[][op]=%3D%3D&filters[][value]=pending` (empty brackets — consecutive `[]` entries group into one filter object per element; indexed brackets parse as a map and fail the array cast with 422). `op` is the symbol, percent-encoded — `%3D%3D` for `==`, `%3E%3D` for `>=` — not a word like `equal`; anything outside the enum above is a 422 before the request reaches Flop. Omit `op` entirely for equality. Unknown fields return 422 via Flop validation at the context layer.
      */
     filters?: Array<{
       /**
@@ -6021,7 +6827,7 @@ type PlatformApiAgenticWorkflowControllerIndexData = {
      */
     order_directions?: Array<'asc' | 'desc'>;
     /**
-     * Flop-native filter array. URL shape: `?filters[][field]=status&filters[][op]=equal&filters[][value]=pending` (empty brackets — consecutive `[]` entries group into one filter object per element; indexed brackets parse as a map and fail the array cast with 422). Unknown fields or operators return 422 via Flop validation at the context layer.
+     * Flop-native filter array. URL shape: `?filters[][field]=status&filters[][op]=%3D%3D&filters[][value]=pending` (empty brackets — consecutive `[]` entries group into one filter object per element; indexed brackets parse as a map and fail the array cast with 422). `op` is the symbol, percent-encoded — `%3D%3D` for `==`, `%3E%3D` for `>=` — not a word like `equal`; anything outside the enum above is a 422 before the request reaches Flop. Omit `op` entirely for equality. Unknown fields return 422 via Flop validation at the context layer.
      */
     filters?: Array<{
       /**
@@ -6074,7 +6880,7 @@ type PlatformApiDataActivationClientControllerLogsIndexData = {
      */
     order_directions?: Array<'asc' | 'desc'>;
     /**
-     * Flop-native filter array. URL shape: `?filters[][field]=status&filters[][op]=equal&filters[][value]=pending` (empty brackets — consecutive `[]` entries group into one filter object per element; indexed brackets parse as a map and fail the array cast with 422). Unknown fields or operators return 422 via Flop validation at the context layer.
+     * Flop-native filter array. URL shape: `?filters[][field]=status&filters[][op]=%3D%3D&filters[][value]=pending` (empty brackets — consecutive `[]` entries group into one filter object per element; indexed brackets parse as a map and fail the array cast with 422). `op` is the symbol, percent-encoded — `%3D%3D` for `==`, `%3E%3D` for `>=` — not a word like `equal`; anything outside the enum above is a 422 before the request reaches Flop. Omit `op` entirely for equality. Unknown fields return 422 via Flop validation at the context layer.
      */
     filters?: Array<{
       /**
@@ -6127,7 +6933,7 @@ type PlatformApiAgenticWorkflowOperationsControllerBatchLogsIndexData = {
      */
     order_directions?: Array<'asc' | 'desc'>;
     /**
-     * Flop-native filter array. URL shape: `?filters[][field]=status&filters[][op]=equal&filters[][value]=pending` (empty brackets — consecutive `[]` entries group into one filter object per element; indexed brackets parse as a map and fail the array cast with 422). Unknown fields or operators return 422 via Flop validation at the context layer.
+     * Flop-native filter array. URL shape: `?filters[][field]=status&filters[][op]=%3D%3D&filters[][value]=pending` (empty brackets — consecutive `[]` entries group into one filter object per element; indexed brackets parse as a map and fail the array cast with 422). `op` is the symbol, percent-encoded — `%3D%3D` for `==`, `%3E%3D` for `>=` — not a word like `equal`; anything outside the enum above is a 422 before the request reaches Flop. Omit `op` entirely for equality. Unknown fields return 422 via Flop validation at the context layer.
      */
     filters?: Array<{
       /**
@@ -6176,7 +6982,7 @@ type PlatformApiDataActivationClientControllerIndexData = {
      */
     order_directions?: Array<'asc' | 'desc'>;
     /**
-     * Flop-native filter array. URL shape: `?filters[][field]=status&filters[][op]=equal&filters[][value]=pending` (empty brackets — consecutive `[]` entries group into one filter object per element; indexed brackets parse as a map and fail the array cast with 422). Unknown fields or operators return 422 via Flop validation at the context layer.
+     * Flop-native filter array. URL shape: `?filters[][field]=status&filters[][op]=%3D%3D&filters[][value]=pending` (empty brackets — consecutive `[]` entries group into one filter object per element; indexed brackets parse as a map and fail the array cast with 422). `op` is the symbol, percent-encoded — `%3D%3D` for `==`, `%3E%3D` for `>=` — not a word like `equal`; anything outside the enum above is a 422 before the request reaches Flop. Omit `op` entirely for equality. Unknown fields return 422 via Flop validation at the context layer.
      */
     filters?: Array<{
       /**
@@ -6225,7 +7031,7 @@ type PlatformApiToolControllerIndexData = {
      */
     order_directions?: Array<'asc' | 'desc'>;
     /**
-     * Flop-native filter array. URL shape: `?filters[][field]=status&filters[][op]=equal&filters[][value]=pending` (empty brackets — consecutive `[]` entries group into one filter object per element; indexed brackets parse as a map and fail the array cast with 422). Unknown fields or operators return 422 via Flop validation at the context layer.
+     * Flop-native filter array. URL shape: `?filters[][field]=status&filters[][op]=%3D%3D&filters[][value]=pending` (empty brackets — consecutive `[]` entries group into one filter object per element; indexed brackets parse as a map and fail the array cast with 422). `op` is the symbol, percent-encoded — `%3D%3D` for `==`, `%3E%3D` for `>=` — not a word like `equal`; anything outside the enum above is a 422 before the request reaches Flop. Omit `op` entirely for equality. Unknown fields return 422 via Flop validation at the context layer.
      */
     filters?: Array<{
       /**
@@ -6802,7 +7608,7 @@ declare function _buildApi(myClient: Client): {
     }>;
   };
   admin: {
-    signUp: (body: Record<string, unknown>) => Promise<{
+    signUp: (body: SignUpRequestWritable) => Promise<{
       data: UserResponse;
       request: Request;
       response: Response;
@@ -6829,7 +7635,7 @@ declare function _buildApi(myClient: Client): {
       request: Request;
       response: Response;
     }>;
-    create: (body: Record<string, unknown>) => Promise<{
+    create: (body: TenantRequest) => Promise<{
       data: TenantResponse;
       request: Request;
       response: Response;
@@ -6841,7 +7647,7 @@ declare function _buildApi(myClient: Client): {
       request: Request;
       response: Response;
     }>;
-    create: (tenantSlug: string, body: Record<string, unknown>) => Promise<{
+    create: (tenantSlug: string, body: InvitationRequest) => Promise<{
       data: InvitationResponse;
       request: Request;
       response: Response;
@@ -6868,7 +7674,7 @@ declare function _buildApi(myClient: Client): {
       request: Request;
       response: Response;
     }>;
-    createUserSearch: (tenantSlug: string, datalakeSlug: string, dataset: string, body: Record<string, unknown>) => Promise<{
+    createUserSearch: (tenantSlug: string, datalakeSlug: string, dataset: string, body: UserSearchRequest) => Promise<{
       data: UserSearchResponse;
       request: Request;
       response: Response;
@@ -6890,7 +7696,7 @@ declare function _buildApi(myClient: Client): {
       request: Request;
       response: Response;
     }>;
-    checksum: (tenantSlug: string, body: Record<string, unknown>) => Promise<{
+    checksum: (tenantSlug: string, body: DatalakeRequestWritable) => Promise<{
       data: ChecksumResponse;
       request: Request;
       response: Response;
@@ -6972,7 +7778,7 @@ declare function _buildApi(myClient: Client): {
       request: Request;
       response: Response;
     }>;
-    checksum: (tenantSlug: string, datalakeSlug: string, body: Record<string, unknown>) => Promise<{
+    checksum: (tenantSlug: string, datalakeSlug: string, body: DataSourceRequest) => Promise<{
       data: ChecksumResponse;
       request: Request;
       response: Response;
@@ -7017,7 +7823,7 @@ declare function _buildApi(myClient: Client): {
       request: Request;
       response: Response;
     }>;
-    checksum: (tenantSlug: string, datalakeSlug: string, body: Record<string, unknown>) => Promise<{
+    checksum: (tenantSlug: string, datalakeSlug: string, body: ToolRequestWritable) => Promise<{
       data: ChecksumResponse;
       request: Request;
       response: Response;
@@ -7032,7 +7838,7 @@ declare function _buildApi(myClient: Client): {
       request: Request;
       response: Response;
     }>;
-    testInvocation: (tenantSlug: string, datalakeSlug: string, id: string, body: Record<string, unknown>) => Promise<{
+    testInvocation: (tenantSlug: string, datalakeSlug: string, id: string, body: ManualToolInvocationRequestWritable) => Promise<{
       data: ManualToolInvocationResponse;
       request: Request;
       response: Response;
@@ -7077,7 +7883,7 @@ declare function _buildApi(myClient: Client): {
       request: Request;
       response: Response;
     }>;
-    checksum: (tenantSlug: string, datalakeSlug: string, body: Record<string, unknown>) => Promise<{
+    checksum: (tenantSlug: string, datalakeSlug: string, body: GenericTableRequestWritable) => Promise<{
       data: ChecksumResponse;
       request: Request;
       response: Response;
@@ -7112,7 +7918,7 @@ declare function _buildApi(myClient: Client): {
       request: Request;
       response: Response;
     }>;
-    checksum: (tenantSlug: string, datalakeSlug: string, body: Record<string, unknown>) => Promise<{
+    checksum: (tenantSlug: string, datalakeSlug: string, body: ActionStatusUpdaterRequestWritable) => Promise<{
       data: ChecksumResponse;
       request: Request;
       response: Response;
@@ -7182,7 +7988,7 @@ declare function _buildApi(myClient: Client): {
       request: Request;
       response: Response;
     }>;
-    checksum: (tenantSlug: string, datalakeSlug: string, body: Record<string, unknown>) => Promise<{
+    checksum: (tenantSlug: string, datalakeSlug: string, body: AiAgentRequestWritable) => Promise<{
       data: ChecksumResponse;
       request: Request;
       response: Response;
@@ -7227,17 +8033,17 @@ declare function _buildApi(myClient: Client): {
       request: Request;
       response: Response;
     }>;
-    create: (tenantSlug: string, datalakeSlug: string, body: Record<string, unknown>) => Promise<{
+    create: (tenantSlug: string, datalakeSlug: string, body: ConnectedAppRequestWritable) => Promise<{
       data: ConnectedAppResponse;
       request: Request;
       response: Response;
     }>;
-    checksum: (tenantSlug: string, datalakeSlug: string, body: Record<string, unknown>) => Promise<{
+    checksum: (tenantSlug: string, datalakeSlug: string, body: ConnectedAppRequestWritable) => Promise<{
       data: ChecksumResponse;
       request: Request;
       response: Response;
     }>;
-    update: (tenantSlug: string, datalakeSlug: string, id: string, body: Record<string, unknown>) => Promise<{
+    update: (tenantSlug: string, datalakeSlug: string, id: string, body: ConnectedAppRequestWritable) => Promise<{
       data: ConnectedAppResponse;
       request: Request;
       response: Response;
@@ -7252,12 +8058,12 @@ declare function _buildApi(myClient: Client): {
       request: Request;
       response: Response;
     }>;
-    resolvePage: (tenantSlug: string, datalakeSlug: string, slug: string, body: Record<string, unknown>) => Promise<{
+    resolvePage: (tenantSlug: string, datalakeSlug: string, slug: string, body: ResolvePageRequest) => Promise<{
       data: ResolvePageResponse;
       request: Request;
       response: Response;
     }>;
-    updateMessageTracking: (tenantSlug: string, datalakeSlug: string, slug: string, body: Record<string, unknown>) => Promise<{
+    updateMessageTracking: (tenantSlug: string, datalakeSlug: string, slug: string, body: UpdatePageRequest) => Promise<{
       data: UpdatePageResponse;
       request: Request;
       response: Response;
@@ -7287,17 +8093,17 @@ declare function _buildApi(myClient: Client): {
       request: Request;
       response: Response;
     }>;
-    create: (tenantSlug: string, datalakeSlug: string, body: Record<string, unknown>) => Promise<{
+    create: (tenantSlug: string, datalakeSlug: string, body: DataActivationClientRequestWritable) => Promise<{
       data: DataActivationClientResponse;
       request: Request;
       response: Response;
     }>;
-    checksum: (tenantSlug: string, datalakeSlug: string, body: Record<string, unknown>) => Promise<{
+    checksum: (tenantSlug: string, datalakeSlug: string, body: DataActivationClientRequestWritable) => Promise<{
       data: ChecksumResponse;
       request: Request;
       response: Response;
     }>;
-    update: (tenantSlug: string, datalakeSlug: string, id: string, body: Record<string, unknown>) => Promise<{
+    update: (tenantSlug: string, datalakeSlug: string, id: string, body: DataActivationClientRequestWritable) => Promise<{
       data: DataActivationClientResponse;
       request: Request;
       response: Response;
@@ -7320,12 +8126,12 @@ declare function _buildApi(myClient: Client): {
       request: Request;
       response: Response;
     }>;
-    runManually: (tenantSlug: string, datalakeSlug: string, slug: string, body?: Record<string, unknown>) => Promise<{
+    runManually: (tenantSlug: string, datalakeSlug: string, slug: string, body?: RunManuallyRequestWritable) => Promise<{
       data: RunManuallyResponse;
       request: Request;
       response: Response;
     }>;
-    ingest: (tenantSlug: string, datalakeSlug: string, slug: string, body: Record<string, unknown>) => Promise<{
+    ingest: (tenantSlug: string, datalakeSlug: string, slug: string, body: IngestRequest) => Promise<{
       data: IngestResponse;
       request: Request;
       response: Response;
@@ -7359,17 +8165,17 @@ declare function _buildApi(myClient: Client): {
       request: Request;
       response: Response;
     }>;
-    create: (tenantSlug: string, datalakeSlug: string, body: Record<string, unknown>) => Promise<{
+    create: (tenantSlug: string, datalakeSlug: string, body: InteroperabilityContractRequestWritable) => Promise<{
       data: InteroperabilityContractResponse;
       request: Request;
       response: Response;
     }>;
-    checksum: (tenantSlug: string, datalakeSlug: string, body: Record<string, unknown>) => Promise<{
+    checksum: (tenantSlug: string, datalakeSlug: string, body: InteroperabilityContractRequestWritable) => Promise<{
       data: ChecksumResponse;
       request: Request;
       response: Response;
     }>;
-    update: (tenantSlug: string, datalakeSlug: string, id: string, body: Record<string, unknown>) => Promise<{
+    update: (tenantSlug: string, datalakeSlug: string, id: string, body: InteroperabilityContractRequestWritable) => Promise<{
       data: InteroperabilityContractResponse;
       request: Request;
       response: Response;
@@ -7392,14 +8198,14 @@ declare function _buildApi(myClient: Client): {
       request: Request;
       response: Response;
     }>;
-    run: (tenantSlug: string, datalakeSlug: string, slug: string, body: Record<string, unknown>) => Promise<{
+    run: (tenantSlug: string, datalakeSlug: string, slug: string, body: InteroperabilityRunRequest) => Promise<{
       data: InteroperabilityRunResponse;
       request: Request;
       response: Response;
     }>;
   };
   mdm: {
-    verify: (tenantSlug: string, datalakeSlug: string, body: Record<string, unknown>) => Promise<{
+    verify: (tenantSlug: string, datalakeSlug: string, body: MdmVerifyRequest) => Promise<{
       data: MdmVerifyResponse;
       request: Request;
       response: Response;
@@ -7416,17 +8222,17 @@ declare function _buildApi(myClient: Client): {
       request: Request;
       response: Response;
     }>;
-    create: (tenantSlug: string, datalakeSlug: string, body: Record<string, unknown>) => Promise<{
+    create: (tenantSlug: string, datalakeSlug: string, body: AgenticWorkflowRequestWritable) => Promise<{
       data: AgenticWorkflowResponse;
       request: Request;
       response: Response;
     }>;
-    checksum: (tenantSlug: string, datalakeSlug: string, body: Record<string, unknown>) => Promise<{
+    checksum: (tenantSlug: string, datalakeSlug: string, body: AgenticWorkflowRequestWritable) => Promise<{
       data: ChecksumResponse;
       request: Request;
       response: Response;
     }>;
-    update: (tenantSlug: string, datalakeSlug: string, id: string, body: Record<string, unknown>) => Promise<{
+    update: (tenantSlug: string, datalakeSlug: string, id: string, body: AgenticWorkflowRequestWritable) => Promise<{
       data: AgenticWorkflowResponse;
       request: Request;
       response: Response;
@@ -7449,12 +8255,12 @@ declare function _buildApi(myClient: Client): {
       request: Request;
       response: Response;
     }>;
-    execute: (tenantSlug: string, datalakeSlug: string, workflowSlug: string, body: Record<string, unknown>) => Promise<{
+    execute: (tenantSlug: string, datalakeSlug: string, workflowSlug: string, body: ExecuteActionRequest) => Promise<{
       data: ExecuteActionResponse;
       request: Request;
       response: Response;
     }>;
-    run: (tenantSlug: string, datalakeSlug: string, workflowSlug: string, body: Record<string, unknown>) => Promise<{
+    run: (tenantSlug: string, datalakeSlug: string, workflowSlug: string, body: RunWorkflowRequest) => Promise<{
       data: RunWorkflowResponse;
       request: Request;
       response: Response;
@@ -7508,11 +8314,28 @@ declare function _buildApi(myClient: Client): {
       }>;
     };
   };
+  workflowRuns: {
+    list: (tenantSlug: string, datalakeSlug: string, query?: PlatformApiWorkflowRunControllerIndexData["query"]) => Promise<{
+      data: WorkflowRunListResponse;
+      request: Request;
+      response: Response;
+    }>;
+    get: (tenantSlug: string, datalakeSlug: string, id: string) => Promise<{
+      data: WorkflowRunResponse;
+      request: Request;
+      response: Response;
+    }>;
+    cancel: (tenantSlug: string, datalakeSlug: string, id: string) => Promise<{
+      data: WorkflowRunResponse;
+      request: Request;
+      response: Response;
+    }>;
+  };
 };
 //# sourceMappingURL=client.d.ts.map
 //#endregion
 //#region src/index.d.ts
 declare function isEnvironmentName(name: string): name is EnvironmentName;
 //#endregion
-export { type ActionStatusUpdaterCloudWatchQueryRequest, type ActionStatusUpdaterResponse, type ActionStatusUpdaterRestCallRequest, ActionType, type AgenticWorkflowListResponse, type AgenticWorkflowRequestWritable, type AgenticWorkflowResponse, type AiAgentResponse, type AlveraApiError, type AlveraClient, type ApiConfig, type ApiDebugConfig, type BatchLogListResponse, type BatchLogResponse, type ConnectedAppListResponse, type ConnectedAppRequestWritable, type ConnectedAppResponse, type CreateActionStatusUpdaterRequest, type CreateAiAgentRequest, type CreateGenericTableRequest, type CreateSessionParams, DEFAULT_ENVIRONMENT, type DataActivationClientListResponse, type DataActivationClientLogListResponse, type DataActivationClientLogResponse, type DataActivationClientRequestWritable, type DataActivationClientResponse, type DataSourceRequest, type DataSourceRequestWritable, type DataSourceResponse, type DatalakeRequestWritable, type DatalakeResponse, type DatasetMetadataOptions, type DatasetSearchOptions, type DatasetSearchResponse, type DownloadUrlResponse, ENVIRONMENTS, type EnvironmentName, type ErrorResponse, type ExecuteActionRequest, type ExecuteActionResponse, type ExecuteSqlMeta, type ExecuteSqlRequest, type ExecuteSqlResponse, type GenericTableColumnRequest, type GenericTableColumnResponse, type GenericTableResponse, type IngestFileRequest, type IngestRequest, type InteroperabilityContractAiAgentRequestWritable, type InteroperabilityContractListResponse, type InteroperabilityContractRequestWritable, type InteroperabilityContractResponse, type InteroperabilityRunRequest, type InteroperabilityRunResponse, type MdmVerifyRequest, type MdmVerifyResponse, type PaginationMeta, type PlatformApi, type ResolvePageRequest, type RunManuallyRequestWritable, type RunManuallyResponse, type RunWorkflowRequest, type RunWorkflowResponse, type SessionResponse, type SessionResult, type SyncRoutesResponse, type TemplateConfig, type TenantListResponse, type TenantResponse, type TextToSqlRequest, type TextToSqlResponse, ToolIntent, type ToolRequest, type ToolRequestWritable, type ToolResponse, type UpdatePageRequest, type UploadLinkRequest, type UploadLinkResponse, type WorkflowAiAgentRequestWritable, type WorkflowLogListResponse, type WorkflowLogResponse, createBootstrapSession, createIsolatedPlatformApi, createPlatformApi, createSession, isEnvironmentName, revokeSession };
+export { type ActionStatusUpdaterCloudWatchQueryRequest, type ActionStatusUpdaterResponse, type ActionStatusUpdaterRestCallRequest, ActionType, type AgenticWorkflowListResponse, type AgenticWorkflowRequestWritable, type AgenticWorkflowResponse, type AiAgentResponse, type AlveraApiError, type AlveraClient, type ApiConfig, type ApiDebugConfig, type BatchLogListResponse, type BatchLogResponse, type ConnectedAppListResponse, type ConnectedAppRequestWritable, type ConnectedAppResponse, type CreateActionStatusUpdaterRequest, type CreateAiAgentRequest, type CreateGenericTableRequest, type CreateSessionParams, DEFAULT_ENVIRONMENT, type DataActivationClientListResponse, type DataActivationClientLogListResponse, type DataActivationClientLogResponse, type DataActivationClientRequestWritable, type DataActivationClientResponse, type DataSourceRequest, type DataSourceRequestWritable, type DataSourceResponse, type DatalakeRequestWritable, type DatalakeResponse, type DatasetMetadataOptions, type DatasetSearchOptions, type DatasetSearchResponse, type DownloadUrlResponse, ENVIRONMENTS, type EnvironmentName, type ErrorResponse, type ExecuteActionRequest, type ExecuteActionResponse, type ExecuteSqlMeta, type ExecuteSqlRequest, type ExecuteSqlResponse, type GenericTableColumnRequest, type GenericTableColumnResponse, type GenericTableResponse, type IngestFileRequest, type IngestRequest, type InteroperabilityContractAiAgentRequestWritable, type InteroperabilityContractListResponse, type InteroperabilityContractRequestWritable, type InteroperabilityContractResponse, type InteroperabilityRunRequest, type InteroperabilityRunResponse, type MdmVerifyRequest, type MdmVerifyResponse, type PaginationMeta, type PlatformApi, type ResolvePageRequest, type RunManuallyRequestWritable, type RunManuallyResponse, type RunWorkflowRequest, type RunWorkflowResponse, type SessionResponse, type SessionResult, type SyncRoutesResponse, type TemplateConfig, type TenantListResponse, type TenantResponse, type TextToSqlRequest, type TextToSqlResponse, ToolIntent, type ToolRequest, type ToolRequestWritable, type ToolResponse, type ToolTwilioRequest, type ToolTwilioRequestWritable, type ToolTwilioResponse, type TwilioRequest, type TwilioRequestWritable, type TwilioResponse, type UpdatePageRequest, type UploadLinkRequest, type UploadLinkResponse, type WorkflowAiAgentRequestWritable, type WorkflowLogListResponse, type WorkflowLogResponse, type WorkflowRunListResponse, type WorkflowRunResponse, createBootstrapSession, createIsolatedPlatformApi, createPlatformApi, createSession, isEnvironmentName, revokeSession };
 //# sourceMappingURL=index.d.mts.map