@ancplua/qyl-api-schema 6.0.0 → 7.1.0

package/generated/json-schema/qyl-api-schema.json

@@ -1021,6 +1021,376 @@
       "maxLength": 256,
       "description": "User identifier (pseudonymized for privacy)"
     },
+    "Diagnostics.AgentDiagnosticCheckId": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 128,
+      "pattern": "^[A-Za-z0-9_][A-Za-z0-9._:/\\[\\]-]{0,127}$",
+      "description": "Stable machine identifier of one diagnostic check. This identifier is a value and must never be promoted to a telemetry key."
+    },
+    "Diagnostics.AgentDiagnosticCheckOutcome": {
+      "type": "string",
+      "enum": [
+        "pass",
+        "fail",
+        "unknown"
+      ],
+      "description": "Machine-computed result of one diagnostic check. For exists, an absent or null actual variable produces fail. For every other operator, missing required operands produce unknown; incompatible operand types also produce unknown. not_evaluated is deliberately not a check outcome."
+    },
+    "Diagnostics.AgentDiagnosticCheckResult": {
+      "type": "object",
+      "required": [
+        "check_id",
+        "operator",
+        "actual",
+        "outcome"
+      ],
+      "properties": {
+        "check_id": {
+          "$ref": "#/$defs/Diagnostics.AgentDiagnosticCheckId"
+        },
+        "operator": {
+          "$ref": "#/$defs/Diagnostics.AgentDiagnosticOperator"
+        },
+        "actual": {
+          "$ref": "#/$defs/Diagnostics.AgentDiagnosticVariableName"
+        },
+        "expected": {
+          "$ref": "#/$defs/Diagnostics.AgentDiagnosticVariableName"
+        },
+        "expected_type": {
+          "$ref": "#/$defs/Diagnostics.AgentDiagnosticValueType"
+        },
+        "outcome": {
+          "$ref": "#/$defs/Diagnostics.AgentDiagnosticCheckOutcome"
+        }
+      },
+      "unevaluatedProperties": {
+        "not": {}
+      },
+      "description": "One structural, machine-computed check result. actual and expected reference variable names only. For equal, not_equal, contains, less_than, and greater_than, expected is required and expected_type is omitted. For exists, both are omitted and an absent or null actual variable produces fail. For type_is, expected is omitted and expected_type is required. For operators other than exists, missing required operands produce unknown; incompatible operand types also produce unknown. not_evaluated is reserved for the snapshot aggregate when checks is empty and is not emitted for an individual check."
+    },
+    "Diagnostics.AgentDiagnosticClassification": {
+      "type": "string",
+      "enum": [
+        "public",
+        "internal",
+        "sensitive",
+        "secret"
+      ],
+      "description": "Data-handling classification assigned before a diagnostic variable is captured."
+    },
+    "Diagnostics.AgentDiagnosticExtensionId": {
+      "type": "string",
+      "enum": [
+        "qyl.agent.diagnostic.snapshot"
+      ],
+      "description": "The versioned extension discriminator for a protected agent diagnostic snapshot."
+    },
+    "Diagnostics.AgentDiagnosticFormatVersion": {
+      "type": "integer",
+      "format": "int32",
+      "minimum": 1,
+      "maximum": 1,
+      "description": "Wire-format version of an agent diagnostic snapshot. Version 1 is the only accepted format."
+    },
+    "Diagnostics.AgentDiagnosticOperator": {
+      "type": "string",
+      "enum": [
+        "equal",
+        "not_equal",
+        "exists",
+        "type_is",
+        "contains",
+        "less_than",
+        "greater_than"
+      ],
+      "description": "Closed operation evaluated by a diagnostic check. Checks are structural and never carry expression strings."
+    },
+    "Diagnostics.AgentDiagnosticOutcome": {
+      "type": "string",
+      "enum": [
+        "pass",
+        "fail",
+        "unknown",
+        "not_evaluated"
+      ],
+      "description": "Machine-computed aggregate result of a diagnostic snapshot. unknown reports one or more unknown check outcomes. not_evaluated is reserved for a snapshot whose checks array is empty."
+    },
+    "Diagnostics.AgentDiagnosticPhase": {
+      "type": "string",
+      "enum": [
+        "input",
+        "output",
+        "error",
+        "checkpoint"
+      ],
+      "description": "Execution boundary at which the state frame was captured."
+    },
+    "Diagnostics.AgentDiagnosticProbeId": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 128,
+      "pattern": "^[A-Za-z0-9_][A-Za-z0-9._:/\\[\\]-]{0,127}$",
+      "description": "Stable machine identifier of the probe that captured a diagnostic snapshot. This identifier is a value and must never be promoted to a telemetry key."
+    },
+    "Diagnostics.AgentDiagnosticSnapshot": {
+      "type": "object",
+      "required": [
+        "extension_id",
+        "format_version",
+        "snapshot_id",
+        "capture_nonce",
+        "probe_id",
+        "phase",
+        "variables",
+        "checks",
+        "outcome"
+      ],
+      "properties": {
+        "extension_id": {
+          "$ref": "#/$defs/Diagnostics.AgentDiagnosticExtensionId"
+        },
+        "format_version": {
+          "$ref": "#/$defs/Diagnostics.AgentDiagnosticFormatVersion"
+        },
+        "snapshot_id": {
+          "$ref": "#/$defs/Diagnostics.AgentDiagnosticSnapshotId"
+        },
+        "capture_nonce": {
+          "type": "string",
+          "minLength": 32,
+          "maxLength": 32,
+          "pattern": "^[0-9a-f]{32}$",
+          "description": "Fresh 128-bit random nonce encoded as exactly 32 lowercase hexadecimal characters. It prevents equality inference across otherwise identical protected captures and must not be used as an identity key."
+        },
+        "probe_id": {
+          "$ref": "#/$defs/Diagnostics.AgentDiagnosticProbeId"
+        },
+        "phase": {
+          "$ref": "#/$defs/Diagnostics.AgentDiagnosticPhase"
+        },
+        "variables": {
+          "type": "array",
+          "items": {
+            "$ref": "#/$defs/Diagnostics.AgentDiagnosticVariable"
+          },
+          "maxItems": 64
+        },
+        "checks": {
+          "type": "array",
+          "items": {
+            "$ref": "#/$defs/Diagnostics.AgentDiagnosticCheckResult"
+          },
+          "maxItems": 64
+        },
+        "outcome": {
+          "$ref": "#/$defs/Diagnostics.AgentDiagnosticOutcome"
+        }
+      },
+      "unevaluatedProperties": {
+        "not": {}
+      },
+      "description": "Version 1 protected JSON state frame captured for an artificial-intelligence agent. extension_id and format_version are its schema identity. capture_nonce is fresh entropy and is not a stable identifier. Variables and checks are bounded, dynamic names remain values, and no human-oriented message or expression text is part of the contract. Overall outcome is not_evaluated only when checks is empty. For a non-empty checks array it is fail if any check fails, otherwise unknown if any check is unknown, otherwise pass."
+    },
+    "Diagnostics.AgentDiagnosticSnapshotId": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 128,
+      "pattern": "^[A-Za-z0-9_][A-Za-z0-9._:/\\[\\]-]{0,127}$",
+      "description": "Stable machine identifier of one diagnostic snapshot. This identifier is a value and must never be promoted to a telemetry key."
+    },
+    "Diagnostics.AgentDiagnosticSnapshotSummary": {
+      "type": "object",
+      "required": [
+        "extension_id",
+        "format_version",
+        "snapshot_id",
+        "probe_id",
+        "phase",
+        "outcome",
+        "variable_count",
+        "check_count",
+        "failed_check_count",
+        "content_ref"
+      ],
+      "properties": {
+        "extension_id": {
+          "$ref": "#/$defs/Diagnostics.AgentDiagnosticExtensionId"
+        },
+        "format_version": {
+          "$ref": "#/$defs/Diagnostics.AgentDiagnosticFormatVersion"
+        },
+        "snapshot_id": {
+          "$ref": "#/$defs/Diagnostics.AgentDiagnosticSnapshotId"
+        },
+        "probe_id": {
+          "$ref": "#/$defs/Diagnostics.AgentDiagnosticProbeId"
+        },
+        "phase": {
+          "$ref": "#/$defs/Diagnostics.AgentDiagnosticPhase"
+        },
+        "outcome": {
+          "$ref": "#/$defs/Diagnostics.AgentDiagnosticOutcome"
+        },
+        "variable_count": {
+          "type": "integer",
+          "format": "int32",
+          "minimum": 0,
+          "maximum": 64
+        },
+        "check_count": {
+          "type": "integer",
+          "format": "int32",
+          "minimum": 0,
+          "maximum": 64
+        },
+        "failed_check_count": {
+          "type": "integer",
+          "format": "int32",
+          "minimum": 0,
+          "maximum": 64
+        },
+        "content_ref": {
+          "$ref": "#/$defs/Workflow.WorkflowContentRef"
+        }
+      },
+      "unevaluatedProperties": {
+        "not": {}
+      },
+      "description": "Value-free event-data projection for a protected agent diagnostic snapshot. Encode this shape in WorkflowEventAppend.data on the existing content_captured event kind. content_ref must also occur in that event's content_refs and identifies UTF-8 JSON conforming to AgentDiagnosticSnapshot. Counts are computed from the referenced snapshot; failed_check_count counts checks whose outcome is fail. No variable names, values, human messages, expressions, nonce, or classifications may appear in this summary."
+    },
+    "Diagnostics.AgentDiagnosticValueType": {
+      "type": "string",
+      "enum": [
+        "null",
+        "boolean",
+        "integer",
+        "number",
+        "string",
+        "json"
+      ],
+      "description": "Declared JSON-level type of a diagnostic variable."
+    },
+    "Diagnostics.AgentDiagnosticVariable": {
+      "anyOf": [
+        {
+          "$ref": "#/$defs/Diagnostics.CapturedAgentDiagnosticVariable"
+        },
+        {
+          "$ref": "#/$defs/Diagnostics.RedactedAgentDiagnosticVariable"
+        },
+        {
+          "$ref": "#/$defs/Diagnostics.OmittedAgentDiagnosticVariable"
+        }
+      ],
+      "description": "One dynamically named variable in a protected diagnostic snapshot. Capture is the discriminator and makes value presence unambiguous."
+    },
+    "Diagnostics.AgentDiagnosticVariableBase": {
+      "type": "object",
+      "required": [
+        "name",
+        "type",
+        "classification"
+      ],
+      "properties": {
+        "name": {
+          "$ref": "#/$defs/Diagnostics.AgentDiagnosticVariableName"
+        },
+        "type": {
+          "$ref": "#/$defs/Diagnostics.AgentDiagnosticValueType"
+        },
+        "classification": {
+          "$ref": "#/$defs/Diagnostics.AgentDiagnosticClassification"
+        }
+      },
+      "description": "Common identity and policy fields for one dynamic diagnostic variable."
+    },
+    "Diagnostics.AgentDiagnosticVariableName": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 128,
+      "pattern": "^[A-Za-z0-9_][A-Za-z0-9._:/\\[\\]-]{0,127}$",
+      "description": "Stable machine name of one dynamically captured variable. Names are data values, never telemetry attribute keys, event names, or span names."
+    },
+    "Diagnostics.CapturedAgentDiagnosticVariable": {
+      "type": "object",
+      "required": [
+        "capture",
+        "value"
+      ],
+      "properties": {
+        "capture": {
+          "type": "string",
+          "enum": [
+            "value"
+          ]
+        },
+        "value": {
+          "anyOf": [
+            {},
+            {
+              "type": "null"
+            }
+          ]
+        }
+      },
+      "unevaluatedProperties": {
+        "not": {}
+      },
+      "allOf": [
+        {
+          "$ref": "#/$defs/Diagnostics.AgentDiagnosticVariableBase"
+        }
+      ],
+      "description": "A variable whose typed JSON value is present in protected snapshot content. The value is required and must match type: null is JSON null; boolean is a JSON boolean; integer is a signed 64-bit JSON integer; number is a finite JSON number; string is a JSON string; json is a JSON object or array. The protected content boundary, not this model, controls access to all captured values."
+    },
+    "Diagnostics.OmittedAgentDiagnosticVariable": {
+      "type": "object",
+      "required": [
+        "capture"
+      ],
+      "properties": {
+        "capture": {
+          "type": "string",
+          "enum": [
+            "omitted"
+          ]
+        }
+      },
+      "unevaluatedProperties": {
+        "not": {}
+      },
+      "allOf": [
+        {
+          "$ref": "#/$defs/Diagnostics.AgentDiagnosticVariableBase"
+        }
+      ],
+      "description": "A variable whose value was unavailable or deliberately not captured. A value field is forbidden."
+    },
+    "Diagnostics.RedactedAgentDiagnosticVariable": {
+      "type": "object",
+      "required": [
+        "capture"
+      ],
+      "properties": {
+        "capture": {
+          "type": "string",
+          "enum": [
+            "redacted"
+          ]
+        }
+      },
+      "unevaluatedProperties": {
+        "not": {}
+      },
+      "allOf": [
+        {
+          "$ref": "#/$defs/Diagnostics.AgentDiagnosticVariableBase"
+        }
+      ],
+      "description": "A variable observed by the probe whose value was replaced by policy. A value field is forbidden."
+    },
     "Domains.Observe.Session.DeviceType": {
       "type": "string",
       "enum": [
@@ -1672,7 +2042,8 @@
           "$ref": "#/$defs/Workflow.WorkflowRunId"
         },
         "node_cursor": {
-          "type": "string"
+          "$ref": "#/$defs/Workflow.WorkflowNodeCursor",
+          "description": "Opaque node continuation. Reuse it unchanged from the preceding snapshot's next_node_cursor; do not parse, construct, or modify it."
         },
         "node_limit": {
           "type": "integer",
@@ -1682,7 +2053,8 @@
           "default": 250
         },
         "edge_cursor": {
-          "type": "string"
+          "$ref": "#/$defs/Workflow.WorkflowEdgeCursor",
+          "description": "Opaque edge continuation. Reuse it unchanged from the preceding snapshot's next_edge_cursor; do not parse, construct, or modify it."
         },
         "edge_limit": {
           "type": "integer",
@@ -1816,7 +2188,7 @@
           "$ref": "#/$defs/Workflow.WorkflowRunId"
         },
         "after_sequence": {
-          "$ref": "#/$defs/Workflow.WorkflowSequence"
+          "$ref": "#/$defs/Workflow.WorkflowJournalPosition"
         },
         "limit": {
           "type": "integer",
@@ -1833,7 +2205,8 @@
           "default": 20000
         },
         "node_cursor": {
-          "type": "string"
+          "$ref": "#/$defs/Workflow.WorkflowNodeCursor",
+          "description": "Opaque node continuation. Reuse it unchanged from the preceding snapshot's next_node_cursor; do not parse, construct, or modify it."
         },
         "node_limit": {
           "type": "integer",
@@ -1843,7 +2216,8 @@
           "default": 250
         },
         "edge_cursor": {
-          "type": "string"
+          "$ref": "#/$defs/Workflow.WorkflowEdgeCursor",
+          "description": "Opaque edge continuation. Reuse it unchanged from the preceding snapshot's next_edge_cursor; do not parse, construct, or modify it."
         },
         "edge_limit": {
           "type": "integer",
@@ -1887,6 +2261,42 @@
       },
       "description": "Structured output for the app-only fetch_workflow_graph_updates tool."
     },
+    "Mcp.Tools.GetActiveWorkflowRunInput": {
+      "type": "object",
+      "unevaluatedProperties": {
+        "not": {}
+      },
+      "description": "Input for get_active_workflow_run."
+    },
+    "Mcp.Tools.GetActiveWorkflowRunOutput": {
+      "type": "object",
+      "required": [
+        "active",
+        "live_controls_available"
+      ],
+      "properties": {
+        "active": {
+          "type": "boolean"
+        },
+        "live_controls_available": {
+          "type": "boolean"
+        },
+        "run_id": {
+          "$ref": "#/$defs/Workflow.WorkflowRunId"
+        },
+        "thread_id": {
+          "type": "string"
+        },
+        "started_at": {
+          "type": "string",
+          "format": "date-time"
+        }
+      },
+      "unevaluatedProperties": {
+        "not": {}
+      },
+      "description": "Structured output for get_active_workflow_run."
+    },
     "Mcp.Tools.GetTraceInput": {
       "type": "object",
       "required": [
@@ -1931,7 +2341,8 @@
           "$ref": "#/$defs/Workflow.WorkflowRunId"
         },
         "node_cursor": {
-          "type": "string"
+          "$ref": "#/$defs/Workflow.WorkflowNodeCursor",
+          "description": "Opaque node continuation. Reuse it unchanged from the preceding snapshot's next_node_cursor; do not parse, construct, or modify it."
         },
         "node_limit": {
           "type": "integer",
@@ -1941,7 +2352,8 @@
           "default": 250
         },
         "edge_cursor": {
-          "type": "string"
+          "$ref": "#/$defs/Workflow.WorkflowEdgeCursor",
+          "description": "Opaque edge continuation. Reuse it unchanged from the preceding snapshot's next_edge_cursor; do not parse, construct, or modify it."
         },
         "edge_limit": {
           "type": "integer",
@@ -1975,6 +2387,58 @@
       },
       "description": "Structured output for get_workflow_graph."
     },
+    "Mcp.Tools.InspectWorkflowEventsInput": {
+      "type": "object",
+      "required": [
+        "run_id",
+        "after_sequence"
+      ],
+      "properties": {
+        "run_id": {
+          "$ref": "#/$defs/Workflow.WorkflowRunId"
+        },
+        "after_sequence": {
+          "$ref": "#/$defs/Workflow.WorkflowJournalPosition"
+        },
+        "limit": {
+          "type": "integer",
+          "format": "int32",
+          "minimum": 1,
+          "maximum": 1000,
+          "default": 250
+        },
+        "content_ref": {
+          "$ref": "#/$defs/Workflow.WorkflowContentRef",
+          "description": "Optional captured payload to retrieve lazily for the selected run."
+        }
+      },
+      "unevaluatedProperties": {
+        "not": {}
+      },
+      "description": "Input for inspect_workflow_events."
+    },
+    "Mcp.Tools.InspectWorkflowEventsOutput": {
+      "type": "object",
+      "required": [
+        "page",
+        "mode"
+      ],
+      "properties": {
+        "page": {
+          "$ref": "#/$defs/Workflow.WorkflowEventPage"
+        },
+        "content": {
+          "$ref": "#/$defs/Workflow.WorkflowContent"
+        },
+        "mode": {
+          "$ref": "#/$defs/Mcp.Tools.McpDataMode"
+        }
+      },
+      "unevaluatedProperties": {
+        "not": {}
+      },
+      "description": "Structured output for inspect_workflow_events."
+    },
     "Mcp.Tools.ListSessionsInput": {
       "type": "object",
       "properties": {
@@ -2061,7 +2525,7 @@
           "$ref": "#/$defs/Workflow.WorkflowRunStatus"
         },
         "cursor": {
-          "type": "string"
+          "$ref": "#/$defs/Workflow.WorkflowRunCursor"
         },
         "limit": {
           "type": "integer",
@@ -2091,7 +2555,7 @@
           }
         },
         "next_cursor": {
-          "type": "string"
+          "$ref": "#/$defs/Workflow.WorkflowRunCursor"
         },
         "has_more": {
           "type": "boolean"
@@ -2313,20 +2777,145 @@
           "minimum": 0,
           "maximum": 1
         },
-        "avg_ms": {
-          "type": "number",
-          "format": "double",
-          "minimum": 0
+        "avg_ms": {
+          "type": "number",
+          "format": "double",
+          "minimum": 0
+        },
+        "p95_ms": {
+          "type": "number",
+          "format": "double",
+          "minimum": 0
+        }
+      },
+      "unevaluatedProperties": {
+        "not": {}
+      }
+    },
+    "Mcp.Tools.RecordDiagnosticSnapshotCheckInput": {
+      "type": "object",
+      "required": [
+        "check_id",
+        "operator",
+        "actual"
+      ],
+      "properties": {
+        "check_id": {
+          "$ref": "#/$defs/Diagnostics.AgentDiagnosticCheckId"
+        },
+        "operator": {
+          "$ref": "#/$defs/Diagnostics.AgentDiagnosticOperator"
+        },
+        "actual": {
+          "$ref": "#/$defs/Diagnostics.AgentDiagnosticVariableName"
+        },
+        "expected": {
+          "$ref": "#/$defs/Diagnostics.AgentDiagnosticVariableName"
+        },
+        "expected_type": {
+          "$ref": "#/$defs/Diagnostics.AgentDiagnosticValueType"
+        }
+      },
+      "unevaluatedProperties": {
+        "not": {}
+      },
+      "description": "One structural diagnostic check submitted for evaluation. equal, not_equal, contains, less_than, and greater_than require expected and forbid expected_type; type_is requires expected_type and forbids expected; exists forbids both."
+    },
+    "Mcp.Tools.RecordDiagnosticSnapshotInput": {
+      "type": "object",
+      "required": [
+        "snapshot_id",
+        "probe_id",
+        "phase",
+        "variables"
+      ],
+      "properties": {
+        "snapshot_id": {
+          "$ref": "#/$defs/Diagnostics.AgentDiagnosticSnapshotId"
+        },
+        "probe_id": {
+          "$ref": "#/$defs/Diagnostics.AgentDiagnosticProbeId"
+        },
+        "phase": {
+          "$ref": "#/$defs/Diagnostics.AgentDiagnosticPhase"
+        },
+        "variables": {
+          "type": "array",
+          "items": {
+            "$ref": "#/$defs/Mcp.Tools.RecordDiagnosticSnapshotVariableInput"
+          },
+          "maxItems": 64
+        },
+        "checks": {
+          "type": "array",
+          "items": {
+            "$ref": "#/$defs/Mcp.Tools.RecordDiagnosticSnapshotCheckInput"
+          },
+          "maxItems": 64,
+          "default": []
+        }
+      },
+      "unevaluatedProperties": {
+        "not": {}
+      },
+      "description": "Input for record_diagnostic_snapshot. Reuse the same snapshot_id and semantic payload when retrying; changing the payload under an existing snapshot_id is a conflict."
+    },
+    "Mcp.Tools.RecordDiagnosticSnapshotOutput": {
+      "type": "object",
+      "required": [
+        "recorded",
+        "code",
+        "snapshot_id"
+      ],
+      "properties": {
+        "recorded": {
+          "type": "boolean"
+        },
+        "code": {
+          "type": "string"
+        },
+        "snapshot_id": {
+          "$ref": "#/$defs/Diagnostics.AgentDiagnosticSnapshotId"
+        },
+        "event_id": {
+          "$ref": "#/$defs/Workflow.WorkflowEventId"
+        },
+        "field": {
+          "type": "string"
+        }
+      },
+      "unevaluatedProperties": {
+        "not": {}
+      },
+      "description": "Structured output for record_diagnostic_snapshot."
+    },
+    "Mcp.Tools.RecordDiagnosticSnapshotVariableInput": {
+      "type": "object",
+      "required": [
+        "name",
+        "classification",
+        "value"
+      ],
+      "properties": {
+        "name": {
+          "$ref": "#/$defs/Diagnostics.AgentDiagnosticVariableName"
+        },
+        "classification": {
+          "$ref": "#/$defs/Diagnostics.AgentDiagnosticClassification"
         },
-        "p95_ms": {
-          "type": "number",
-          "format": "double",
-          "minimum": 0
+        "value": {
+          "anyOf": [
+            {},
+            {
+              "type": "null"
+            }
+          ]
         }
       },
       "unevaluatedProperties": {
         "not": {}
-      }
+      },
+      "description": "One dynamically named JSON value submitted for protected diagnostic capture. Classification is applied before the frame leaves the observer bridge."
     },
     "Mcp.Tools.SearchLogsInput": {
       "type": "object",
@@ -6139,6 +6728,61 @@
       },
       "description": "Request to update mutable MCP workbench workspace metadata."
     },
+    "Workflow.CommittedWorkflowProjectionStatus": {
+      "type": "object",
+      "required": [
+        "state",
+        "generation",
+        "journal_position"
+      ],
+      "properties": {
+        "state": {
+          "type": "string",
+          "enum": [
+            "committed"
+          ]
+        },
+        "generation": {
+          "$ref": "#/$defs/Workflow.WorkflowGeneration"
+        },
+        "journal_position": {
+          "$ref": "#/$defs/Workflow.WorkflowJournalPosition"
+        }
+      },
+      "unevaluatedProperties": {
+        "not": {}
+      },
+      "description": "A valid committed projection that can be served to readers."
+    },
+    "Workflow.CorruptWorkflowProjectionStatus": {
+      "type": "object",
+      "required": [
+        "state",
+        "reason"
+      ],
+      "properties": {
+        "state": {
+          "type": "string",
+          "enum": [
+            "corrupt"
+          ]
+        },
+        "generation": {
+          "$ref": "#/$defs/Workflow.WorkflowGeneration"
+        },
+        "reason": {
+          "type": "string",
+          "enum": [
+            "corrupt_derived_state",
+            "incompatible_derived_state"
+          ]
+        }
+      },
+      "unevaluatedProperties": {
+        "not": {}
+      },
+      "description": "Derived projection state is corrupt or incompatible and cannot currently be served."
+    },
     "Workflow.DerivedWorkflowEdgeProvenance": {
       "type": "object",
       "required": [
@@ -6173,6 +6817,38 @@
       },
       "description": "Derived edge provenance with explicit evidence and confidence."
     },
+    "Workflow.RebuildingWorkflowProjectionStatus": {
+      "type": "object",
+      "required": [
+        "state",
+        "generation",
+        "target_journal_position",
+        "retry_after_ms"
+      ],
+      "properties": {
+        "state": {
+          "type": "string",
+          "enum": [
+            "rebuilding"
+          ]
+        },
+        "generation": {
+          "$ref": "#/$defs/Workflow.WorkflowGeneration"
+        },
+        "target_journal_position": {
+          "$ref": "#/$defs/Workflow.WorkflowJournalPosition"
+        },
+        "retry_after_ms": {
+          "type": "integer",
+          "format": "int32",
+          "minimum": 1
+        }
+      },
+      "unevaluatedProperties": {
+        "not": {}
+      },
+      "description": "The requested generation is being reconstructed from its authoritative journal."
+    },
     "Workflow.RecordedWorkflowEdgeProvenance": {
       "type": "object",
       "required": [
@@ -6199,6 +6875,33 @@
       },
       "description": "Recorded edge provenance directly observed from Codex."
     },
+    "Workflow.UnavailableWorkflowProjectionStatus": {
+      "type": "object",
+      "required": [
+        "state",
+        "retry_after_ms"
+      ],
+      "properties": {
+        "state": {
+          "type": "string",
+          "enum": [
+            "unavailable"
+          ]
+        },
+        "generation": {
+          "$ref": "#/$defs/Workflow.WorkflowGeneration"
+        },
+        "retry_after_ms": {
+          "type": "integer",
+          "format": "int32",
+          "minimum": 1
+        }
+      },
+      "unevaluatedProperties": {
+        "not": {}
+      },
+      "description": "Projection work is temporarily unavailable after a retryable storage failure."
+    },
     "Workflow.WorkflowAgentId": {
       "type": "string",
       "minLength": 1,
@@ -6457,6 +7160,50 @@
       },
       "description": "Adapter acknowledgement or terminal result for one control command."
     },
+    "Workflow.WorkflowCursorError": {
+      "type": "object",
+      "required": [
+        "title",
+        "cursor_kind",
+        "reason"
+      ],
+      "properties": {
+        "title": {
+          "type": "string",
+          "enum": [
+            "Invalid Workflow Cursor"
+          ]
+        },
+        "cursor_kind": {
+          "$ref": "#/$defs/Workflow.WorkflowCursorKind"
+        },
+        "reason": {
+          "$ref": "#/$defs/Workflow.WorkflowCursorFailureReason"
+        },
+        "current_generation": {
+          "$ref": "#/$defs/Workflow.WorkflowGeneration"
+        }
+      },
+      "unevaluatedProperties": {
+        "not": {}
+      },
+      "allOf": [
+        {
+          "$ref": "#/$defs/Common.Errors.ProblemDetails"
+        }
+      ],
+      "description": "Opaque graph cursor is malformed, belongs to another run, or targets a stale generation."
+    },
+    "Workflow.WorkflowCursorFailureReason": {
+      "type": "string",
+      "enum": [
+        "invalid",
+        "wrong_run",
+        "wrong_generation",
+        "stale"
+      ],
+      "description": "Why an opaque graph cursor cannot be reused for this request."
+    },
     "Workflow.WorkflowCursorGapEvent": {
       "type": "object",
       "required": [
@@ -6473,10 +7220,10 @@
           ]
         },
         "oldest_available_sequence": {
-          "$ref": "#/$defs/Workflow.WorkflowSequence"
+          "$ref": "#/$defs/Workflow.WorkflowJournalPosition"
         },
         "high_water_mark": {
-          "$ref": "#/$defs/Workflow.WorkflowSequence"
+          "$ref": "#/$defs/Workflow.WorkflowJournalPosition"
         },
         "timestamp": {
           "type": "string",
@@ -6488,6 +7235,26 @@
       },
       "description": "Signals that the requested cursor predates retained workflow history."
     },
+    "Workflow.WorkflowCursorKind": {
+      "type": "string",
+      "enum": [
+        "node",
+        "edge"
+      ],
+      "description": "Which opaque graph cursor was rejected."
+    },
+    "Workflow.WorkflowEdgeCursor": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 1536,
+      "description": "Opaque edge-page continuation scoped to one workflow run and generation. Reuse it unchanged; clients must not parse or construct it."
+    },
+    "Workflow.WorkflowEdgeId": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 192,
+      "description": "Stable identifier of one graph edge. Endpoint tuples preserve the nodes' structural run-versus-attempt scope and ordinal component boundaries, escape colon as \\c and backslash as \\\\, and never infer scope from a literal component value. A canonical identifier over 192 Unicode scalar values is replaced by its edge kind, a tilde, and the full lowercase 64-hex SHA-256 of the length-prefixed canonical tuple."
+    },
     "Workflow.WorkflowEdgeKind": {
       "type": "string",
       "enum": [
@@ -6623,10 +7390,10 @@
           "$ref": "#/$defs/Workflow.WorkflowSequence"
         },
         "first_journal_sequence": {
-          "$ref": "#/$defs/Workflow.WorkflowSequence"
+          "$ref": "#/$defs/Workflow.WorkflowJournalPosition"
         },
         "last_journal_sequence": {
-          "$ref": "#/$defs/Workflow.WorkflowSequence"
+          "$ref": "#/$defs/Workflow.WorkflowJournalPosition"
         }
       },
       "unevaluatedProperties": {
@@ -6656,10 +7423,10 @@
           }
         },
         "next_sequence": {
-          "$ref": "#/$defs/Workflow.WorkflowSequence"
+          "$ref": "#/$defs/Workflow.WorkflowJournalPosition"
         },
         "high_water_mark": {
-          "$ref": "#/$defs/Workflow.WorkflowSequence"
+          "$ref": "#/$defs/Workflow.WorkflowJournalPosition"
         },
         "cursor_gap": {
           "type": "boolean"
@@ -6670,6 +7437,13 @@
       },
       "description": "A bounded page of workflow journal events."
     },
+    "Workflow.WorkflowGeneration": {
+      "type": "string",
+      "minLength": 32,
+      "maxLength": 32,
+      "pattern": "^[0-9a-f]{12}4[0-9a-f]{3}[89ab][0-9a-f]{15}$",
+      "description": "Opaque incarnation identifier for one workflow run's projected state."
+    },
     "Workflow.WorkflowGraphEdge": {
       "type": "object",
       "required": [
@@ -6681,7 +7455,7 @@
       ],
       "properties": {
         "edge_id": {
-          "type": "string"
+          "$ref": "#/$defs/Workflow.WorkflowEdgeId"
         },
         "source_node_id": {
           "$ref": "#/$defs/Workflow.WorkflowNodeId"
@@ -6699,7 +7473,7 @@
       "unevaluatedProperties": {
         "not": {}
       },
-      "description": "One typed edge in the deterministic workflow graph projection."
+      "description": "One typed edge in the deterministic workflow graph projection. Data, Control, and Gate edges are causal dependencies. Temporal edges describe observed order, Resource edges describe resource use, and Conflict edges describe contention; Temporal, Resource, and Conflict edges are excluded from critical-path causality."
     },
     "Workflow.WorkflowGraphNode": {
       "type": "object",
@@ -6759,6 +7533,7 @@
       "type": "object",
       "required": [
         "run",
+        "projection_status",
         "nodes",
         "edges",
         "statistics",
@@ -6772,6 +7547,9 @@
         "run": {
           "$ref": "#/$defs/Workflow.WorkflowRun"
         },
+        "projection_status": {
+          "$ref": "#/$defs/Workflow.WorkflowProjectionStatus"
+        },
         "nodes": {
           "type": "array",
           "items": {
@@ -6788,13 +7566,15 @@
           "$ref": "#/$defs/Workflow.WorkflowGraphStatistics"
         },
         "journal_sequence": {
-          "$ref": "#/$defs/Workflow.WorkflowSequence"
+          "$ref": "#/$defs/Workflow.WorkflowJournalPosition"
         },
         "next_node_cursor": {
-          "type": "string"
+          "$ref": "#/$defs/Workflow.WorkflowNodeCursor",
+          "description": "Opaque node continuation for the next page. Reuse it unchanged as node_cursor on the next graph request; do not parse, construct, or modify it."
         },
         "next_edge_cursor": {
-          "type": "string"
+          "$ref": "#/$defs/Workflow.WorkflowEdgeCursor",
+          "description": "Opaque edge continuation for the next page. Reuse it unchanged as edge_cursor on the next graph request; do not parse, construct, or modify it."
         },
         "has_more_nodes": {
           "type": "boolean"
@@ -6862,7 +7642,7 @@
       "unevaluatedProperties": {
         "not": {}
       },
-      "description": "Work and critical-path statistics for a workflow graph."
+      "description": "Work and critical-path statistics for a workflow graph. Every ToolCall, Wait, Gate, and duration-bearing Message or Item contributes an independently weighted interval even when it has no Agent owner. An Agent contributes its own-work fragments: its interval minus the union of precisely owned child intervals clipped to the Agent interval. Precisely owned children are Control-linked Agent and ToolCall nodes, Temporal-linked Wait nodes, Gate-linked Gate nodes, and Data-linked duration-bearing Message or Item nodes. Peak concurrency sweeps every positive independently weighted or Agent own-work fragment. Critical-path analysis uses only Data, Control, and Gate edges, condenses each causal strongly connected component, charges every component member exactly once, and expands selected component members in ordinal node-id order."
     },
     "Workflow.WorkflowHeartbeatEvent": {
       "type": "object",
@@ -6879,7 +7659,7 @@
           ]
         },
         "high_water_mark": {
-          "$ref": "#/$defs/Workflow.WorkflowSequence"
+          "$ref": "#/$defs/Workflow.WorkflowJournalPosition"
         },
         "timestamp": {
           "type": "string",
@@ -6906,7 +7686,7 @@
           "type": "string"
         },
         "journal_sequence": {
-          "$ref": "#/$defs/Workflow.WorkflowSequence"
+          "$ref": "#/$defs/Workflow.WorkflowJournalPosition"
         }
       },
       "unevaluatedProperties": {
@@ -6955,11 +7735,24 @@
       ],
       "description": "Immutable journal event kinds accepted from a Codex observer."
     },
+    "Workflow.WorkflowJournalPosition": {
+      "type": "string",
+      "format": "uint64",
+      "description": "Collector-assigned position in the authoritative workflow journal, encoded without JavaScript precision loss.",
+      "pattern": "^(0|[1-9][0-9]*)$",
+      "maxLength": 20
+    },
+    "Workflow.WorkflowNodeCursor": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 1536,
+      "description": "Opaque node-page continuation scoped to one workflow run and generation. Reuse it unchanged; clients must not parse or construct it."
+    },
     "Workflow.WorkflowNodeId": {
       "type": "string",
       "minLength": 1,
       "maxLength": 192,
-      "description": "Stable identifier of one graph node."
+      "description": "Stable identifier of one graph node. Canonical tuples structurally distinguish run scope from attempt scope, escape colon as \\c and backslash as \\\\, and never infer scope from a literal component value. A canonical identifier over 192 Unicode scalar values is replaced by its kind, a tilde, and the full lowercase 64-hex SHA-256 of the length-prefixed canonical tuple."
     },
     "Workflow.WorkflowNodeKind": {
       "type": "string",
@@ -6976,10 +7769,82 @@
       ],
       "description": "Kinds of execution node in the deterministic workflow graph."
     },
+    "Workflow.WorkflowProjectionCorruptError": {
+      "type": "object",
+      "required": [
+        "title",
+        "projection_status"
+      ],
+      "properties": {
+        "title": {
+          "type": "string",
+          "enum": [
+            "Workflow Projection Corrupt"
+          ]
+        },
+        "projection_status": {
+          "$ref": "#/$defs/Workflow.WorkflowProjectionStatus"
+        }
+      },
+      "unevaluatedProperties": {
+        "not": {}
+      },
+      "allOf": [
+        {
+          "$ref": "#/$defs/Common.Errors.ProblemDetails"
+        }
+      ],
+      "description": "Workflow projection is non-retryably corrupt or incompatible. Internal storage details are intentionally omitted."
+    },
+    "Workflow.WorkflowProjectionStatus": {
+      "anyOf": [
+        {
+          "$ref": "#/$defs/Workflow.CommittedWorkflowProjectionStatus"
+        },
+        {
+          "$ref": "#/$defs/Workflow.RebuildingWorkflowProjectionStatus"
+        },
+        {
+          "$ref": "#/$defs/Workflow.UnavailableWorkflowProjectionStatus"
+        },
+        {
+          "$ref": "#/$defs/Workflow.CorruptWorkflowProjectionStatus"
+        }
+      ],
+      "description": "Closed public availability state for one workflow projection. Storage paths, hashes, fingerprints, and database errors remain private."
+    },
+    "Workflow.WorkflowProjectionUnavailableError": {
+      "type": "object",
+      "required": [
+        "title",
+        "projection_status"
+      ],
+      "properties": {
+        "title": {
+          "type": "string",
+          "enum": [
+            "Workflow Projection Unavailable"
+          ]
+        },
+        "projection_status": {
+          "$ref": "#/$defs/Workflow.WorkflowProjectionStatus"
+        }
+      },
+      "unevaluatedProperties": {
+        "not": {}
+      },
+      "allOf": [
+        {
+          "$ref": "#/$defs/Common.Errors.ProblemDetails"
+        }
+      ],
+      "description": "Workflow projection is rebuilding or temporarily unavailable after a retryable storage failure."
+    },
     "Workflow.WorkflowRun": {
       "type": "object",
       "required": [
         "run_id",
+        "generation",
         "status",
         "started_at",
         "latest_journal_sequence"
@@ -6988,6 +7853,9 @@
         "run_id": {
           "$ref": "#/$defs/Workflow.WorkflowRunId"
         },
+        "generation": {
+          "$ref": "#/$defs/Workflow.WorkflowGeneration"
+        },
         "thread_id": {
           "type": "string"
         },
@@ -7006,7 +7874,7 @@
           "format": "date-time"
         },
         "latest_journal_sequence": {
-          "$ref": "#/$defs/Workflow.WorkflowSequence"
+          "$ref": "#/$defs/Workflow.WorkflowJournalPosition"
         },
         "active_attempt_id": {
           "$ref": "#/$defs/Workflow.WorkflowAttemptId"
@@ -7051,6 +7919,39 @@
       },
       "description": "Request to create an observed workflow run before appending journal events."
     },
+    "Workflow.WorkflowRunCursor": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 512,
+      "description": "Opaque workflow-run list continuation scoped to the project and status filter. Reuse it unchanged; clients must not parse or construct it."
+    },
+    "Workflow.WorkflowRunDeletedError": {
+      "type": "object",
+      "required": [
+        "title",
+        "run_id"
+      ],
+      "properties": {
+        "title": {
+          "type": "string",
+          "enum": [
+            "Workflow Run Deleted"
+          ]
+        },
+        "run_id": {
+          "$ref": "#/$defs/Workflow.WorkflowRunId"
+        }
+      },
+      "unevaluatedProperties": {
+        "not": {}
+      },
+      "allOf": [
+        {
+          "$ref": "#/$defs/Common.Errors.ProblemDetails"
+        }
+      ],
+      "description": "Workflow run was durably deleted and can no longer accept events or publish projections."
+    },
     "Workflow.WorkflowRunId": {
       "type": "string",
       "minLength": 1,
@@ -7071,7 +7972,7 @@
           }
         },
         "next_cursor": {
-          "type": "string"
+          "$ref": "#/$defs/Workflow.WorkflowRunCursor"
         },
         "has_more": {
           "type": "boolean"
@@ -8459,6 +9360,9 @@
     "Operations.WorkflowRunsApi_appendEvents.Response.409": {
       "$ref": "#/$defs/Common.Errors.ConflictError"
     },
+    "Operations.WorkflowRunsApi_appendEvents.Response.410": {
+      "$ref": "#/$defs/Workflow.WorkflowRunDeletedError"
+    },
     "Operations.WorkflowRunsApi_appendEvents.Response.500": {
       "$ref": "#/$defs/Common.Errors.InternalServerError"
     },
@@ -8480,6 +9384,9 @@
     "Operations.WorkflowRunsApi_create.Response.409": {
       "$ref": "#/$defs/Common.Errors.ConflictError"
     },
+    "Operations.WorkflowRunsApi_create.Response.410": {
+      "$ref": "#/$defs/Workflow.WorkflowRunDeletedError"
+    },
     "Operations.WorkflowRunsApi_create.Response.500": {
       "$ref": "#/$defs/Common.Errors.InternalServerError"
     },
@@ -8495,6 +9402,9 @@
     "Operations.WorkflowRunsApi_get.Response.404": {
       "$ref": "#/$defs/Common.Errors.NotFoundError"
     },
+    "Operations.WorkflowRunsApi_get.Response.410": {
+      "$ref": "#/$defs/Workflow.WorkflowRunDeletedError"
+    },
     "Operations.WorkflowRunsApi_get.Response.500": {
       "$ref": "#/$defs/Common.Errors.InternalServerError"
     },
@@ -8510,6 +9420,9 @@
     "Operations.WorkflowRunsApi_getContent.Response.404": {
       "$ref": "#/$defs/Common.Errors.NotFoundError"
     },
+    "Operations.WorkflowRunsApi_getContent.Response.410": {
+      "$ref": "#/$defs/Workflow.WorkflowRunDeletedError"
+    },
     "Operations.WorkflowRunsApi_getContent.Response.500": {
       "$ref": "#/$defs/Common.Errors.InternalServerError"
     },
@@ -8528,11 +9441,17 @@
     "Operations.WorkflowRunsApi_getGraph.Response.404": {
       "$ref": "#/$defs/Common.Errors.NotFoundError"
     },
+    "Operations.WorkflowRunsApi_getGraph.Response.409": {
+      "$ref": "#/$defs/Workflow.WorkflowCursorError"
+    },
+    "Operations.WorkflowRunsApi_getGraph.Response.410": {
+      "$ref": "#/$defs/Workflow.WorkflowRunDeletedError"
+    },
     "Operations.WorkflowRunsApi_getGraph.Response.500": {
-      "$ref": "#/$defs/Common.Errors.InternalServerError"
+      "$ref": "#/$defs/Workflow.WorkflowProjectionCorruptError"
     },
     "Operations.WorkflowRunsApi_getGraph.Response.503": {
-      "$ref": "#/$defs/Common.Errors.ServiceUnavailableError"
+      "$ref": "#/$defs/Workflow.WorkflowProjectionUnavailableError"
     },
     "Operations.WorkflowRunsApi_list.Response.200": {
       "$ref": "#/$defs/Workflow.WorkflowRunPage"
@@ -8561,6 +9480,9 @@
     "Operations.WorkflowRunsApi_pollControls.Response.404": {
       "$ref": "#/$defs/Common.Errors.NotFoundError"
     },
+    "Operations.WorkflowRunsApi_pollControls.Response.410": {
+      "$ref": "#/$defs/Workflow.WorkflowRunDeletedError"
+    },
     "Operations.WorkflowRunsApi_pollControls.Response.500": {
       "$ref": "#/$defs/Common.Errors.InternalServerError"
     },
@@ -8579,6 +9501,9 @@
     "Operations.WorkflowRunsApi_readEvents.Response.404": {
       "$ref": "#/$defs/Common.Errors.NotFoundError"
     },
+    "Operations.WorkflowRunsApi_readEvents.Response.410": {
+      "$ref": "#/$defs/Workflow.WorkflowRunDeletedError"
+    },
     "Operations.WorkflowRunsApi_readEvents.Response.500": {
       "$ref": "#/$defs/Common.Errors.InternalServerError"
     },
@@ -8594,6 +9519,9 @@
     "Operations.WorkflowRunsApi_stream.Response.404": {
       "$ref": "#/$defs/Common.Errors.NotFoundError"
     },
+    "Operations.WorkflowRunsApi_stream.Response.410": {
+      "$ref": "#/$defs/Workflow.WorkflowRunDeletedError"
+    },
     "Operations.WorkflowRunsApi_stream.Response.500": {
       "$ref": "#/$defs/Common.Errors.InternalServerError"
     },
@@ -8618,6 +9546,9 @@
     "Operations.WorkflowRunsApi_submitControl.Response.409": {
       "$ref": "#/$defs/Common.Errors.ConflictError"
     },
+    "Operations.WorkflowRunsApi_submitControl.Response.410": {
+      "$ref": "#/$defs/Workflow.WorkflowRunDeletedError"
+    },
     "Operations.WorkflowRunsApi_submitControl.Response.500": {
       "$ref": "#/$defs/Common.Errors.InternalServerError"
     },
@@ -8642,6 +9573,9 @@
     "Operations.WorkflowRunsApi_updateControl.Response.409": {
       "$ref": "#/$defs/Common.Errors.ConflictError"
     },
+    "Operations.WorkflowRunsApi_updateControl.Response.410": {
+      "$ref": "#/$defs/Workflow.WorkflowRunDeletedError"
+    },
     "Operations.WorkflowRunsApi_updateControl.Response.500": {
       "$ref": "#/$defs/Common.Errors.InternalServerError"
     },