@beeos-ai/bma-sdk 1.0.1 → 2.1.0

package/dist/generated/extensions.d.ts

@@ -0,0 +1,3727 @@
+/**
+ * This file was auto-generated by openapi-typescript.
+ * Do not make direct changes to the file.
+ */
+export interface paths {
+    "/organizations/{organization_id}/projects": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /** List the projects the key can see */
+        get: operations["listOrganizationProjects"];
+        put?: never;
+        /** Create a project */
+        post: operations["createOrganizationProject"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/machine_pools": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /** List machine pools */
+        get: operations["listMachinePools"];
+        put?: never;
+        /** Create a machine pool */
+        post: operations["createMachinePool"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/machine_pools/check_connection": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /** Check provider connectivity before creating a pool */
+        post: operations["checkMachinePoolConnection"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/machine_pools/{pool_id}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /** Retrieve a machine pool */
+        get: operations["getMachinePool"];
+        put?: never;
+        /** Update a machine pool */
+        post: operations["updateMachinePool"];
+        /** Delete a machine pool */
+        delete: operations["deleteMachinePool"];
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/machine_pools/{pool_id}/grants": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * List the pool grants of a project
+         * @description The project is the `project_id` query parameter or `x-bma-project-id`.
+         */
+        get: operations["listMachinePoolGrants"];
+        put?: never;
+        /**
+         * Grant a project the use of a pool
+         * @description The body may carry `project_id`; otherwise the project header selects it. `machine_pool_id` comes from the path.
+         */
+        post: operations["createMachinePoolGrant"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/machine_pools/{pool_id}/grants/{grant_id}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /** Retrieve a pool grant */
+        get: operations["getMachinePoolGrant"];
+        put?: never;
+        /** Update a pool grant */
+        post: operations["updateMachinePoolGrant"];
+        /** Delete a pool grant */
+        delete: operations["deleteMachinePoolGrant"];
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/machines": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * List machines
+         * @description `agent_id` lists that agent's machines (project scope, native listAgentMachines).
+         */
+        get: operations["listMachines"];
+        put?: never;
+        /**
+         * Create a machine
+         * @description `agent_id` + `persistent: true` creates an agent persistent machine (createAgentPersistentMachine); `source: byo` connects a BYO machine (connectBYOMachine) and returns the one-time `token`; otherwise createMachine.
+         */
+        post: operations["createMachine"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/machines/{machine_id}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Retrieve a machine
+         * @description Adds `capabilities` (getMachineCapabilities), null when the project cannot use the machine.
+         */
+        get: operations["getMachine"];
+        put?: never;
+        /** Update a machine */
+        post: operations["updateMachine"];
+        /**
+         * Delete a machine
+         * @description With `agent_id` it deletes that agent's persistent machine (deleteAgentMachine).
+         */
+        delete: operations["deleteMachine"];
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/machines/{machine_id}/resume": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /** Resume a paused machine */
+        post: operations["resumeMachine"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/machines/{machine_id}/capabilities": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /** Machine interaction capabilities */
+        get: operations["getMachineCapabilities"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/desktop_sessions": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /** Create a desktop session */
+        post: operations["createDesktopSession"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/desktop_sessions/{desktop_session_id}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /** Retrieve a desktop session (control state in `control`) */
+        get: operations["getDesktopSession"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/desktop_sessions/{desktop_session_id}/close": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /** Close a desktop session */
+        post: operations["closeDesktopSession"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/desktop_sessions/{desktop_session_id}/acquire_control": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /** Take input control */
+        post: operations["acquireDesktopControl"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/desktop_sessions/{desktop_session_id}/renew_control": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /** Renew the control lease */
+        post: operations["renewDesktopControl"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/desktop_sessions/{desktop_session_id}/release_control": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /** Release control */
+        post: operations["releaseDesktopControl"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/desktop_sessions/{desktop_session_id}/handback_control": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /** Hand control back to the agent */
+        post: operations["handbackDesktopControl"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/desktop_sessions/{desktop_session_id}/actions": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /** Send input actions */
+        post: operations["sendDesktopActions"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/desktop_sessions/{desktop_session_id}/screenshot": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /** Capture a screenshot */
+        post: operations["captureDesktopScreenshot"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/desktop_sessions/{desktop_session_id}/resume_agent": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /** Resume the desktop agent */
+        post: operations["resumeDesktopAgent"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/desktop_sessions/{desktop_session_id}/pending_actions/{pending_id}/confirm": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /** Confirm a pending agent action */
+        post: operations["confirmDesktopAction"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/desktop_sessions/{desktop_session_id}/tickets": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Mint a single-use ticket (purpose watch)
+         * @description D-7 unified ticket endpoint. `purpose` defaults to and must be `watch`; the response is a `ticket` object. `watch_tickets` is the deprecated alias that answers `desktop_watch_ticket`.
+         */
+        post: operations["createDesktopSessionTicket"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/terminal_sessions": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /** List the terminal sessions of a machine */
+        get: operations["listTerminalSessions"];
+        put?: never;
+        /** Open a terminal session (body machine_id) */
+        post: operations["createTerminalSession"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/terminal_sessions/{terminal_session_id}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /** Retrieve a terminal session */
+        get: operations["getTerminalSession"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/terminal_sessions/{terminal_session_id}/close": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Close a terminal session
+         * @description Native answers 204; the facade returns the session.
+         */
+        post: operations["closeTerminalSession"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/terminal_sessions/{terminal_session_id}/tickets": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Mint a single-use ticket (purpose connect)
+         * @description D-7 unified ticket endpoint. `purpose` defaults to and must be `connect`; the response is a `ticket` object. `connection_tickets` is the deprecated alias that answers `terminal_connection_ticket`.
+         */
+        post: operations["createTerminalSessionTicket"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/vaults": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * List vaults
+         * @description Vaults of the project selected with `x-bma-project-id`, or of every project the key sees. `limit` is 1-100 (default 20).
+         */
+        get: operations["listVaults"];
+        put?: never;
+        /**
+         * Create a vault
+         * @description Creates a new vault in the selected project (or the default project); it never returns an existing one.
+         */
+        post: operations["createVault"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/vaults/{vault_id}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /** Retrieve a vault */
+        get: operations["getVault"];
+        put?: never;
+        /** Update a vault */
+        post: operations["updateVault"];
+        /**
+         * Delete a vault
+         * @description Deletes the vault and every credential in it.
+         */
+        delete: operations["deleteVault"];
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/vaults/{vault_id}/archive": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /** Archive a vault */
+        post: operations["archiveVault"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/vaults/{vault_id}/credentials": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /** List credentials */
+        get: operations["listVaultCredentials"];
+        put?: never;
+        /**
+         * Create a credential
+         * @description `static_bearer` and `environment_variable` store a generic secret, `mcp_oauth` an oauth_token_set. `injection_location` defaults to header only. `expires_at` and refresh settings are stored as given.
+         */
+        post: operations["createVaultCredential"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/vaults/{vault_id}/credentials/{credential_id}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /** Retrieve a credential */
+        get: operations["getVaultCredential"];
+        put?: never;
+        /**
+         * Update or rotate a credential
+         * @description A new secret value is a new native secret version; `auth.type` must match and `mcp_server_url` and `secret_name` are immutable. Changing an `mcp_oauth` credential rewrites its whole token set (see McpOAuthUpdate).
+         */
+        post: operations["updateVaultCredential"];
+        /** Delete a credential */
+        delete: operations["deleteVaultCredential"];
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/vaults/{vault_id}/credentials/{credential_id}/archive": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /** Archive a credential */
+        post: operations["archiveVaultCredential"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/skills": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /** List skills */
+        get: operations["listSkills"];
+        put?: never;
+        /**
+         * Create a skill
+         * @description Uploading a name that exists for the owner is the next revision of that skill.
+         */
+        post: operations["createSkill"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/skills/{skill_id}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /** Retrieve a skill */
+        get: operations["getSkill"];
+        put?: never;
+        post?: never;
+        /** Delete a skill */
+        delete: operations["deleteSkill"];
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+}
+export type webhooks = Record<string, never>;
+export interface components {
+    schemas: {
+        Error: {
+            /** @constant */
+            type: "error";
+            error: {
+                /** @enum {string} */
+                type: "invalid_request_error" | "authentication_error" | "permission_error" | "not_found_error" | "rate_limit_error" | "api_error";
+                message: string;
+                /** @description BMA reason, kept as the native code. */
+                code?: string;
+            };
+            request_id?: string;
+        };
+        Project: {
+            /** @constant */
+            type: "project";
+            id: components["schemas"]["ProjectID"];
+            org_id: components["schemas"]["OrganizationID"];
+            name: components["schemas"]["ResourceName"];
+            created_at: components["schemas"]["Timestamp"];
+            updated_at: components["schemas"]["Timestamp"];
+        };
+        ListProject: {
+            data: components["schemas"]["Project"][];
+            next_page: string | null;
+        };
+        MachinePool: {
+            /** @constant */
+            type: "machine_pool";
+            id: components["schemas"]["MachinePoolID"];
+            org_id: components["schemas"]["OrganizationID"];
+            name: components["schemas"]["ResourceName"];
+            management_kind: components["schemas"]["ManagementKind"];
+            description: string;
+            provider: string;
+            /** Format: int32 */
+            default_machine_cpu: number | null;
+            /** Format: int32 */
+            default_machine_memory_mb: number | null;
+            /** @description Default environment for pool machines. A machine's environment, including resolved secret_env values, is applied to the provider machine at provisioning, so the provider_options startup_script and the daemon run with it, and is resolved again for each process at launch. */
+            default_machine_env: {
+                [key: string]: string;
+            };
+            /** @description Default secret environment for pool machines, mapping env names to generic secret references. References are resolved to secret values wherever the machine environment is applied. */
+            default_machine_secret_env: {
+                [key: string]: components["schemas"]["SecretID"];
+            };
+            default_machine_provider_options: {
+                [key: string]: unknown;
+            };
+            default_cwd: string;
+            provider_auth_secret_id?: components["schemas"]["SecretID"];
+            provider_config: {
+                [key: string]: unknown;
+            };
+            /** @description Whether BMA deletes this pool's machines when the provider remains running after the daemon becomes inactive. */
+            runtime_protection_enabled: boolean;
+            /**
+             * Format: int32
+             * @description Deprecated, not enforced: how many machines a pool has no longer blocks new machines. Organization and project quotas over in-use machines (org resource limits max_in_use_pool_machines_per_project and max_in_use_pool_machines_per_org) govern capacity.
+             */
+            max_total_machines: number;
+            /**
+             * Format: int32
+             * @description Deprecated, not enforced: organization and project in-use machine CPU quotas govern capacity.
+             */
+            max_total_cpu: number | null;
+            /**
+             * Format: int32
+             * @description Deprecated, not enforced: organization and project in-use machine memory quotas govern capacity.
+             */
+            max_total_memory_mb: number | null;
+            /** Format: int32 */
+            min_machine_cpu: number | null;
+            /** Format: int32 */
+            min_machine_memory_mb: number | null;
+            /** Format: int32 */
+            max_machine_cpu: number | null;
+            /** Format: int32 */
+            max_machine_memory_mb: number | null;
+            /**
+             * Format: int32
+             * @description Idle minutes before deleting a machine from this pool, or null when the pool default is unset.
+             */
+            delete_after_idle_minutes: number | null;
+            /**
+             * Format: int32
+             * @description Idle minutes before pausing a machine from this pool, or null when the pool does not pause idle machines.
+             */
+            pause_after_idle_minutes: number | null;
+            /**
+             * Format: int32
+             * @description Days a machine stays paused before it is archived, or null when the pool does not archive.
+             */
+            archive_after_paused_days: number | null;
+            /**
+             * Format: int32
+             * @description Days a machine stays paused before it is deleted, counted from when it paused, or null when the pool keeps paused machines.
+             */
+            delete_after_paused_days: number | null;
+            metadata: components["schemas"]["Metadata"];
+            created_at: components["schemas"]["Timestamp"];
+            updated_at: components["schemas"]["Timestamp"];
+            /** @description Current quota-consuming usage. Populated when the machine pool is returned by the list or get endpoint. */
+            usage?: components["schemas"]["MachinePoolUsage"];
+        };
+        ListMachinePool: {
+            data: components["schemas"]["MachinePool"][];
+            next_page: string | null;
+        };
+        MachinePoolConnectionCheck: {
+            /** @constant */
+            type: "machine_pool_connection_check";
+            ok: boolean;
+        };
+        MachinePoolDeleted: {
+            id: string;
+            /** @constant */
+            type: "machine_pool_deleted";
+        };
+        MachinePoolGrant: {
+            /** @constant */
+            type: "machine_pool_grant";
+            id: components["schemas"]["ProjectMachinePoolGrantID"];
+            org_id: components["schemas"]["OrganizationID"];
+            project_id: components["schemas"]["ProjectID"];
+            machine_pool_id: components["schemas"]["MachinePoolID"];
+            description: string;
+            /** Format: int32 */
+            default_machine_cpu: number | null;
+            /** Format: int32 */
+            default_machine_memory_mb: number | null;
+            /** @description Env overlay merged over the pool's default_machine_env for machines materialized through this grant; a null entry removes the key. */
+            default_machine_env_overlay: {
+                [key: string]: string | null;
+            };
+            /** @description Secret env overlay merged over the pool's default_machine_secret_env for machines materialized through this grant; a null entry removes the key. */
+            default_machine_secret_env_overlay: {
+                [key: string]: string | null;
+            };
+            default_machine_provider_options_overlay: {
+                [key: string]: unknown;
+            };
+            default_cwd: string;
+            /** Format: int32 */
+            max_total_machines: number | null;
+            /** Format: int32 */
+            max_total_cpu: number | null;
+            /** Format: int32 */
+            max_total_memory_mb: number | null;
+            /** Format: int32 */
+            min_machine_cpu: number | null;
+            /** Format: int32 */
+            min_machine_memory_mb: number | null;
+            /** Format: int32 */
+            max_machine_cpu: number | null;
+            /** Format: int32 */
+            max_machine_memory_mb: number | null;
+            /**
+             * Format: int32
+             * @description Idle minutes before deleting a machine created through this grant. Zero disables deletion for this grant; null inherits the pool default.
+             */
+            delete_after_idle_minutes: never & (0 | number | null);
+            metadata: components["schemas"]["Metadata"];
+            created_at: components["schemas"]["Timestamp"];
+            updated_at: components["schemas"]["Timestamp"];
+            /** @description Present on list items. */
+            machine_pool?: components["schemas"]["NativeMachinePool"];
+        };
+        ListMachinePoolGrant: {
+            data: components["schemas"]["MachinePoolGrant"][];
+            next_page: string | null;
+        };
+        MachinePoolGrantDeleted: {
+            id: string;
+            /** @constant */
+            type: "machine_pool_grant_deleted";
+        };
+        /** @description An org machine, an agent machine (kind, machine_pool_name, cpu, memory_mb, agent_id) or a connected BYO machine (token); the fields of the other families are absent. */
+        Machine: {
+            /** @constant */
+            type: "machine";
+            id: components["schemas"]["MachineID"];
+            org_id?: components["schemas"]["OrganizationID"];
+            source_kind?: components["schemas"]["MachineSourceKind"];
+            machine_pool_id?: components["schemas"]["MachinePoolID"] | null;
+            display_name?: components["schemas"]["ResourceName"];
+            description?: string;
+            provider?: string;
+            lifecycle_state?: components["schemas"]["MachineLifecycleState"];
+            connection_state?: components["schemas"]["MachineConnectionState"];
+            connection_state_reason?: string;
+            power_state?: components["schemas"]["MachinePowerState"];
+            last_observed_at?: components["schemas"]["Timestamp"] | null;
+            cwd?: string;
+            env?: {
+                [key: string]: string;
+            };
+            secret_env?: {
+                [key: string]: components["schemas"]["SecretID"];
+            };
+            lifecycle_reason_code?: string;
+            lifecycle_reason_message?: string;
+            failure_report?: components["schemas"]["MachineFailureReport"];
+            next_reconcile_after?: components["schemas"]["Timestamp"] | null;
+            /** Format: int32 */
+            provision_attempts?: number;
+            /** Format: int32 */
+            delete_attempts?: number;
+            metadata?: components["schemas"]["Metadata"];
+            deleted_at?: components["schemas"]["Timestamp"] | null;
+            created_at?: components["schemas"]["Timestamp"];
+            updated_at?: components["schemas"]["Timestamp"];
+            kind?: components["schemas"]["AgentMachineKind"];
+            machine_pool_name?: components["schemas"]["ResourceName"];
+            /** @description The machine shape BMA reports, or null before the provider resolves it. */
+            cpu?: number | null;
+            /** @description The machine shape BMA reports, or null before the provider resolves it. */
+            memory_mb?: number | null;
+            /** @description Agent machines only: the id /v1/agents uses (never the native agt_ id). */
+            agent_id?: string;
+            /** @description Single read only; null when the project cannot use the machine. */
+            capabilities?: components["schemas"]["MachineCapabilities"] | null;
+            /** @description BYO connect only: the one-time machine token. */
+            token?: string;
+            token_record?: components["schemas"]["MachineDaemonToken"];
+            project_grants?: components["schemas"]["ProjectMachineGrant"][];
+        };
+        ListMachine: {
+            data: components["schemas"]["Machine"][];
+            next_page: string | null;
+        };
+        MachineDeleted: {
+            id: string;
+            /** @constant */
+            type: "machine_deleted";
+        };
+        MachinePowerStatus: {
+            /** @constant */
+            type: "machine_power_status";
+            machine_id: components["schemas"]["MachineID"];
+            connection_state: components["schemas"]["MachineConnectionState"];
+            power_state: components["schemas"]["MachinePowerState"];
+        };
+        MachineCapabilities: {
+            /** @constant */
+            type: "machine_capabilities";
+            machine_id: components["schemas"]["MachineID"];
+            terminal: components["schemas"]["MachineTerminalCapability"];
+            session_files: components["schemas"]["MachineSessionFilesCapability"];
+            desktop: components["schemas"]["MachineDesktopCapability"];
+            permissions: components["schemas"]["MachineInteractionPermissions"];
+            protocol_versions: components["schemas"]["MachineProtocolVersions"];
+        };
+        /** @description The native create body plus the machine the session runs on. */
+        CreateDesktopSessionExtensionRequest: {
+            /** @description The id /v1/agents uses. */
+            agent_id?: string;
+            /** @default false */
+            read_only?: boolean;
+            /** Format: int32 */
+            lease_seconds?: number;
+            capabilities?: components["schemas"]["DesktopCapabilitiesRequest"];
+            machine_id: string;
+        };
+        DesktopSession: {
+            /** @constant */
+            type: "desktop_session";
+            id: components["schemas"]["DesktopSessionID"];
+            org_id: components["schemas"]["OrganizationID"];
+            project_id: components["schemas"]["ProjectID"];
+            machine_id: components["schemas"]["MachineID"];
+            /**
+             * Format: uuid
+             * @description Authenticated user or organization API key that created the session.
+             */
+            owner_id: string;
+            /** @description The id /v1/agents uses (never the native agt_ id). */
+            agent_id?: string;
+            read_only: boolean;
+            closed: boolean;
+            /** Format: date-time */
+            created_at: string;
+            capabilities: components["schemas"]["DesktopCapabilities"];
+            control: components["schemas"]["NativeDesktopControlStatus"];
+        };
+        DesktopWatchTicket: {
+            /** @constant */
+            type: "desktop_watch_ticket";
+            id: string;
+            ticket: string;
+            purpose: string;
+            /** Format: date-time */
+            expires_at: string;
+            ws_url: string;
+            subprotocol: string;
+            permissions: string[];
+            machine_id: string;
+            desktop_session_id: string;
+            owner_route?: string;
+        };
+        DesktopSessionClosed: {
+            id: string;
+            /** @constant */
+            type: "desktop_session_closed";
+        };
+        DesktopControlStatus: {
+            /** @constant */
+            type: "desktop_control_status";
+            /** @enum {string} */
+            mode: "paused" | "agent" | "human";
+            /** Format: int64 */
+            epoch: number;
+            /** Format: int64 */
+            generation: number;
+            holder: string;
+            lease_id?: string;
+            /** Format: date-time */
+            lease_expires_at?: string;
+            agent_state: string;
+        };
+        DesktopScreenshot: {
+            /** @constant */
+            type: "desktop_screenshot";
+            content_type: string;
+            /** Format: int32 */
+            width: number;
+            /** Format: int32 */
+            height: number;
+            /** Format: date-time */
+            captured_at: string;
+            /** @description Base64-encoded image bytes. */
+            image_base64: string;
+        };
+        DesktopActionResult: {
+            /** @constant */
+            type: "desktop_action_result";
+            /** Format: int64 */
+            seq: number;
+        };
+        /** @description The native grant body; the pool is the path and the project is project_id, the x-bma-project-id header or the default. */
+        CreateMachinePoolGrantExtensionRequest: {
+            /** @description Optional note about this grant. */
+            description?: string;
+            /**
+             * Format: int32
+             * @description Default CPU count for machines this project creates from the pool, overriding the pool's default.
+             */
+            default_machine_cpu?: number;
+            /**
+             * Format: int32
+             * @description Default memory in MB for machines this project creates from the pool, overriding the pool's default.
+             */
+            default_machine_memory_mb?: number;
+            /** @description Env overlay merged over the pool's default_machine_env for machines materialized through this grant; a null entry removes the key. */
+            default_machine_env_overlay?: {
+                [key: string]: string | null;
+            };
+            /** @description Secret env overlay merged over the pool's default_machine_secret_env for machines materialized through this grant; a null entry removes the key. */
+            default_machine_secret_env_overlay?: {
+                [key: string]: string | null;
+            };
+            /** @description Provider-specific options layered over the pool's provider options for this project's machines. */
+            default_machine_provider_options_overlay?: {
+                [key: string]: unknown;
+            };
+            /** @description Default working directory for processes on this project's machines from the pool. */
+            default_cwd?: string;
+            /**
+             * Format: int32
+             * @description Maximum number of live machines this project can have from the pool.
+             */
+            max_total_machines?: number;
+            /**
+             * Format: int32
+             * @description Maximum total CPU across this project's live machines from the pool.
+             */
+            max_total_cpu?: number;
+            /**
+             * Format: int32
+             * @description Maximum total memory in MB across this project's live machines from the pool.
+             */
+            max_total_memory_mb?: number;
+            /**
+             * Format: int32
+             * @description Smallest CPU count one of this project's machines can request.
+             */
+            min_machine_cpu?: number;
+            /**
+             * Format: int32
+             * @description Smallest memory in MB one of this project's machines can request.
+             */
+            min_machine_memory_mb?: number;
+            /**
+             * Format: int32
+             * @description Largest CPU count one of this project's machines can request.
+             */
+            max_machine_cpu?: number;
+            /**
+             * Format: int32
+             * @description Largest memory in MB one of this project's machines can request.
+             */
+            max_machine_memory_mb?: number;
+            /**
+             * Format: int32
+             * @description Idle minutes before deleting a machine created through this grant. Use 0 to disable for this grant; omit to inherit the pool default. Values from 1 through 4 are invalid.
+             */
+            delete_after_idle_minutes?: number & (0 | number);
+            metadata?: components["schemas"]["Metadata"];
+            project_id?: string;
+        };
+        /** @description Agent machine (agent_id, persistent, template, ...), BYO connect (source byo, display_name, ...) or org machine (display_name, ...); the native request of that family. */
+        CreateMachineExtensionRequest: {
+            /** @description The id /v1/agents uses; with persistent true and template, creates a persistent machine of that agent. */
+            agent_id?: string;
+            /** @description Must be true when agent_id is set. */
+            persistent?: boolean;
+            template?: string;
+            machine_pool_id?: string;
+            display_name?: string;
+            /**
+             * @description byo connects a bring-your-own machine.
+             * @enum {unknown}
+             */
+            source?: "byo";
+            description?: string;
+            cwd?: string;
+            env?: {
+                [key: string]: string;
+            };
+            secret_env?: {
+                [key: string]: string;
+            };
+            metadata?: {
+                [key: string]: string;
+            };
+            project_ids?: string[];
+            token_name?: string;
+        };
+        DesktopWatchTicketRequest: {
+            origin?: string;
+            ttl_seconds?: number;
+        };
+        /** @description No fields; the body may be omitted. */
+        DesktopEmptyRequest: Record<string, never>;
+        /** @description The native create body plus the machine the session runs on. */
+        CreateTerminalSessionExtensionRequest: {
+            machine_id: components["schemas"]["MachineID"];
+            shell?: string;
+            cwd?: string;
+            /** Format: int32 */
+            cols?: number;
+            /** Format: int32 */
+            rows?: number;
+        };
+        TerminalSession: {
+            /** @constant */
+            type: "terminal_session";
+            id: components["schemas"]["TerminalSessionID"];
+            org_id: components["schemas"]["OrganizationID"];
+            project_id: components["schemas"]["ProjectID"];
+            machine_id: components["schemas"]["MachineID"];
+            /** @enum {string} */
+            state: "starting" | "running" | "closing" | "closed" | "failed";
+            shell?: string;
+            cwd?: string;
+            /** Format: int32 */
+            cols?: number;
+            /** Format: int32 */
+            rows?: number;
+            /** Format: date-time */
+            created_at: string;
+            /** Format: date-time */
+            closed_at?: string;
+            /** Format: int32 */
+            exit_code?: number;
+            close_reason?: string;
+        };
+        ListTerminalSession: {
+            data: components["schemas"]["TerminalSession"][];
+            next_page: string | null;
+        };
+        TicketFields: {
+            id?: string;
+            /** @description Opaque single-use ticket. Returned once and never logged. */
+            ticket?: string;
+            /** Format: date-time */
+            expires_at?: string;
+            /** @description WebSocket URL without the ticket. */
+            ws_url?: string;
+            subprotocol?: string;
+            permissions?: string[];
+            machine_id?: string;
+            desktop_session_id?: string;
+        };
+        /** @description Body of a terminal ticket. `purpose` is optional and must be `connect`. */
+        CreateTicketRequest: {
+            /** @enum {string} */
+            purpose?: "connect";
+            ttl_seconds?: number;
+        };
+        /** @description Body of a desktop ticket. `purpose` is optional and must be `watch`. */
+        CreateDesktopTicketRequest: {
+            /** @enum {string} */
+            purpose?: "watch";
+            origin?: string;
+            ttl_seconds?: number;
+        };
+        /** @description A single-use ticket (D-7). `purpose` names what it opens (`watch`, `connect`; `control` is reserved). */
+        Ticket: components["schemas"]["TicketFields"] & {
+            /** @constant */
+            type: "ticket";
+            /** @enum {string} */
+            purpose: "watch" | "connect" | "control";
+        };
+        TerminalConnectionTicket: {
+            /** @constant */
+            type: "terminal_connection_ticket";
+            id: components["schemas"]["ConnectionTicketID"];
+            ticket: string;
+            /** @enum {string} */
+            purpose: "terminal_connect" | "desktop_watch";
+            /** Format: date-time */
+            expires_at: string;
+            ws_url: string;
+            subprotocol: string;
+            permissions: string[];
+        };
+        Vault: {
+            id: string;
+            /** @constant */
+            type: "vault";
+            display_name: string;
+            metadata: {
+                [key: string]: string;
+            };
+            /** Format: date-time */
+            created_at: string;
+            /** Format: date-time */
+            updated_at: string;
+            /** Format: date-time */
+            archived_at: string | null;
+        };
+        VaultCreateRequest: {
+            display_name: string;
+            metadata?: {
+                [key: string]: string;
+            };
+        };
+        VaultUpdateRequest: {
+            display_name?: string | null;
+            /** @description Patch: a key set to a string is upserted, to null deleted. */
+            metadata?: {
+                [key: string]: string | null;
+            } | null;
+        };
+        VaultDeleted: {
+            id: string;
+            /** @constant */
+            type: "vault_deleted";
+        };
+        ListVault: {
+            data: components["schemas"]["Vault"][];
+            next_page: string | null;
+        };
+        CredentialNetworking: components["schemas"]["CredentialNetworkingUnrestricted"] | components["schemas"]["CredentialNetworkingLimited"];
+        CredentialNetworkingUnrestricted: {
+            /**
+             * @description discriminator enum property added by openapi-typescript
+             * @enum {string}
+             */
+            type: "unrestricted";
+        };
+        CredentialNetworkingLimited: {
+            /**
+             * @description discriminator enum property added by openapi-typescript
+             * @enum {string}
+             */
+            type: "limited";
+            /** @description Bare hostnames, IPv4 addresses or `*.` wildcards. */
+            allowed_hosts: string[];
+        };
+        CredentialInjectionLocation: {
+            header: boolean;
+            body: boolean;
+        };
+        /** @description A location left out keeps its current setting (create: header true, body false). At least one must be enabled. */
+        CredentialInjectionLocationInput: {
+            header?: boolean;
+            body?: boolean;
+        };
+        TokenEndpointAuthNone: {
+            /** @constant */
+            type: "none";
+        };
+        TokenEndpointAuthSecret: {
+            /** @enum {unknown} */
+            type: "client_secret_basic" | "client_secret_post";
+            client_secret: string;
+        };
+        TokenEndpointAuthResponse: {
+            /** @enum {unknown} */
+            type: "none" | "client_secret_basic" | "client_secret_post";
+        };
+        CredentialRefreshInput: {
+            client_id: string;
+            refresh_token: string;
+            token_endpoint: string;
+            token_endpoint_auth: components["schemas"]["TokenEndpointAuthNone"] | components["schemas"]["TokenEndpointAuthSecret"];
+            resource?: string | null;
+            scope?: string | null;
+        };
+        /** @description Required with a new access_token (refresh_token, and the client_secret unless the credential uses none): BMA rewrites the whole token set. */
+        CredentialRefreshUpdate: {
+            refresh_token?: string;
+            token_endpoint_auth?: components["schemas"]["TokenEndpointAuthSecret"];
+            /** @description An empty string clears the scope. */
+            scope?: string;
+        };
+        CredentialRefreshResponse: {
+            client_id: string;
+            token_endpoint: string;
+            token_endpoint_auth: components["schemas"]["TokenEndpointAuthResponse"];
+            resource?: string;
+            scope?: string;
+        };
+        StaticBearerCreate: {
+            /**
+             * @description discriminator enum property added by openapi-typescript
+             * @enum {string}
+             */
+            type: "static_bearer";
+            token: string;
+            mcp_server_url: string;
+        };
+        EnvironmentVariableCreate: {
+            /**
+             * @description discriminator enum property added by openapi-typescript
+             * @enum {string}
+             */
+            type: "environment_variable";
+            secret_name: string;
+            secret_value: string;
+            networking: components["schemas"]["CredentialNetworking"];
+            injection_location?: components["schemas"]["CredentialInjectionLocationInput"];
+        };
+        McpOAuthCreate: {
+            /**
+             * @description discriminator enum property added by openapi-typescript
+             * @enum {string}
+             */
+            type: "mcp_oauth";
+            access_token: string;
+            mcp_server_url: string;
+            /**
+             * Format: date-time
+             * @description Must be in the future.
+             */
+            expires_at?: string | null;
+            refresh?: components["schemas"]["CredentialRefreshInput"] | null;
+        };
+        CredentialAuthCreate: components["schemas"]["StaticBearerCreate"] | components["schemas"]["EnvironmentVariableCreate"] | components["schemas"]["McpOAuthCreate"];
+        StaticBearerUpdate: {
+            /**
+             * @description discriminator enum property added by openapi-typescript
+             * @enum {string}
+             */
+            type: "static_bearer";
+            token?: string | null;
+        };
+        EnvironmentVariableUpdate: {
+            /**
+             * @description discriminator enum property added by openapi-typescript
+             * @enum {string}
+             */
+            type: "environment_variable";
+            secret_value?: string | null;
+            networking?: components["schemas"]["CredentialNetworking"] | null;
+            injection_location?: components["schemas"]["CredentialInjectionLocationInput"];
+        };
+        /** @description expires_at and refresh can change only together with a new access_token. */
+        McpOAuthUpdate: {
+            /**
+             * @description discriminator enum property added by openapi-typescript
+             * @enum {string}
+             */
+            type: "mcp_oauth";
+            access_token?: string | null;
+            /** Format: date-time */
+            expires_at?: string | null;
+            refresh?: components["schemas"]["CredentialRefreshUpdate"];
+        };
+        CredentialAuthUpdate: components["schemas"]["StaticBearerUpdate"] | components["schemas"]["EnvironmentVariableUpdate"] | components["schemas"]["McpOAuthUpdate"];
+        StaticBearerAuth: {
+            /**
+             * @description discriminator enum property added by openapi-typescript
+             * @enum {string}
+             */
+            type: "static_bearer";
+            mcp_server_url: string;
+        };
+        EnvironmentVariableAuth: {
+            /**
+             * @description discriminator enum property added by openapi-typescript
+             * @enum {string}
+             */
+            type: "environment_variable";
+            secret_name: string;
+            networking: components["schemas"]["CredentialNetworking"];
+            injection_location: components["schemas"]["CredentialInjectionLocation"];
+        };
+        McpOAuthAuth: {
+            /**
+             * @description discriminator enum property added by openapi-typescript
+             * @enum {string}
+             */
+            type: "mcp_oauth";
+            mcp_server_url: string;
+            /** Format: date-time */
+            expires_at?: string;
+            refresh?: components["schemas"]["CredentialRefreshResponse"];
+        };
+        CredentialAuth: components["schemas"]["StaticBearerAuth"] | components["schemas"]["EnvironmentVariableAuth"] | components["schemas"]["McpOAuthAuth"];
+        VaultCredential: {
+            id: string;
+            /** @constant */
+            type: "vault_credential";
+            vault_id: string;
+            display_name: string | null;
+            metadata: {
+                [key: string]: string;
+            };
+            auth: components["schemas"]["CredentialAuth"];
+            /** Format: date-time */
+            created_at: string;
+            /** Format: date-time */
+            updated_at: string;
+            /** Format: date-time */
+            archived_at: string | null;
+        };
+        VaultCredentialCreateRequest: {
+            auth: components["schemas"]["CredentialAuthCreate"];
+            display_name?: string | null;
+            metadata?: {
+                [key: string]: string;
+            };
+        };
+        VaultCredentialUpdateRequest: {
+            auth?: components["schemas"]["CredentialAuthUpdate"];
+            display_name?: string | null;
+            /** @description Patch: a key set to a string is upserted, to null deleted. */
+            metadata?: {
+                [key: string]: string | null;
+            } | null;
+        };
+        VaultCredentialDeleted: {
+            id: string;
+            /** @constant */
+            type: "vault_credential_deleted";
+        };
+        ListVaultCredential: {
+            data: components["schemas"]["VaultCredential"][];
+            next_page: string | null;
+        };
+        SkillSource: {
+            /** @constant */
+            type: "custom";
+        };
+        SkillFile: {
+            path: string;
+            size: number;
+        };
+        /** @description Who owns the skill (native SkillOwner). */
+        SkillOwner: {
+            /** @constant */
+            kind: "org";
+        } | {
+            /** @constant */
+            kind: "project";
+            project_id: string;
+        } | {
+            /** @constant */
+            kind: "user";
+        };
+        Skill: {
+            id: string;
+            /** @constant */
+            type: "skill";
+            display_name: string;
+            latest_version_id: string;
+            source: components["schemas"]["SkillSource"];
+            /** Format: date-time */
+            created_at: string;
+            /** Format: date-time */
+            updated_at: string;
+            /** @description The machine-readable skill name from SKILL.md. */
+            bma_name: string;
+            bma_revision: number;
+            bma_description: string;
+            bma_owner: components["schemas"]["SkillOwner"];
+            /** @description Single read only. */
+            bma_skill_md?: string;
+            /** @description Single read only. */
+            bma_files?: components["schemas"]["SkillFile"][];
+        };
+        SkillUploadRequest: {
+            /** @description One part per file; the part's filename is its path. All files share one top-level directory with a SKILL.md. */
+            files: string[];
+            /**
+             * Format: binary
+             * @description A ready zip, instead of files.
+             */
+            archive?: string;
+            /** @description Must equal the SKILL.md name when sent (400 otherwise). */
+            display_name?: string;
+            /** @description Native SkillOwner as JSON; defaults to the current project. */
+            bma_owner?: string;
+        };
+        SkillDeleted: {
+            id: string;
+            /** @constant */
+            type: "skill_deleted";
+        };
+        ListSkill: {
+            data: components["schemas"]["Skill"][];
+            next_page: string | null;
+        };
+        AgentModelOverride: {
+            id: string;
+            agent_id: string;
+            session_id: string;
+            model: string;
+            api_format: string;
+            api_variant?: string;
+            base_url: string;
+            endpoint_path?: string;
+            /** @description First 16 hex chars of sha256(key). */
+            fingerprint: string;
+            /** @description Last 4 characters of the key, never the key. */
+            key_hint?: string;
+            /** @enum {string} */
+            status: "active" | "expired" | "revoked";
+            consume_after_turn?: boolean;
+            /** Format: date-time */
+            created_at: string;
+            /** @description The override stays active until its session is archived. */
+            expires_with_session: boolean;
+            /**
+             * Format: date-time
+             * @description Absent for a session-lifetime override.
+             */
+            expires_at?: string | null;
+            /** Format: date-time */
+            revoked_at?: string;
+        };
+        AgentModelOverridePatch: {
+            model?: string;
+            provider?: components["schemas"]["AgentModelOverrideProvider"];
+            api_key?: string;
+            ttl_seconds?: number;
+        };
+        AgentModelOverrideProvider: {
+            /** @enum {string} */
+            api_format: "openai-responses" | "openai-chat-completions" | "anthropic-messages";
+            /**
+             * @default default
+             * @enum {string}
+             */
+            api_variant: "default" | "openrouter";
+            /**
+             * Format: uri
+             * @description HTTPS origin only; must not contain userinfo, query, fragment or a trailing slash. Private and link-local hosts are rejected by provider validation.
+             */
+            base_url: string;
+            /** @default /v1/chat/completions */
+            endpoint_path: string;
+        };
+        AgentModelOverrideInput: {
+            /** @description Provider model slug (for example deepseek-flash). */
+            model: string;
+            provider?: components["schemas"]["AgentModelOverrideProvider"];
+            /** @description Write-only. Never returned, logged, or emitted; encrypted at rest. */
+            api_key?: string;
+            /** @default 3600 */
+            ttl_seconds: number;
+            /**
+             * @description Keep the override active until the session is archived instead of a TTL.
+             * @default false
+             */
+            expires_with_session: boolean;
+            /** @description Model context window in tokens. When omitted, BMA reads it from the provider's models endpoint, then a public model catalog, and otherwise uses 128000. */
+            context_window_tokens?: number;
+            /** @description Maximum output tokens per response; must be below the context window. When omitted, BMA keeps its default output policy for the API format. */
+            max_output_tokens?: number;
+            /** @description Compact the session as if the context window were this size, to bound per-turn cost and latency on large-window models. Must not exceed the context window. */
+            auto_compact_window_tokens?: number;
+        };
+        /** @description Connection ticket ID (tkt_...). */
+        ConnectionTicketID: string;
+        /** @description Terminal session ID (tsn_...). */
+        TerminalSessionID: string;
+        NativeDesktopControlStatus: {
+            /** @enum {string} */
+            mode: "paused" | "agent" | "human";
+            /** Format: int64 */
+            epoch: number;
+            /** Format: int64 */
+            generation: number;
+            holder: string;
+            lease_id?: string;
+            /** Format: date-time */
+            lease_expires_at?: string;
+            agent_state: string;
+        };
+        DesktopCapabilities: {
+            /** Format: int32 */
+            width: number;
+            /** Format: int32 */
+            height: number;
+            screenshot: boolean;
+            pointer: boolean;
+            keyboard: boolean;
+            text: boolean;
+            webrtc: boolean;
+            rfb_fallback: boolean;
+            takeover: boolean;
+            /** Format: int32 */
+            max_actions_per_second: number;
+            /** Format: int32 */
+            protocol_version: number;
+            /** Format: int32 */
+            control_version: number;
+            /** Format: int64 */
+            transport_fallback_generation: number;
+        };
+        /** @description Desktop session ID (dsn_...). */
+        DesktopSessionID: string;
+        DesktopCapabilitiesRequest: {
+            /**
+             * Format: int32
+             * @description Framebuffer width in pixels. Set together with height; 1280x800 when both are omitted. Values outside 640..1920 are rejected at create time.
+             */
+            width?: number;
+            /**
+             * Format: int32
+             * @description Framebuffer height in pixels. Set together with width; 800 when both are omitted. Values outside 480..1080 are rejected at create time.
+             */
+            height?: number;
+            screenshot?: boolean;
+            pointer?: boolean;
+            keyboard?: boolean;
+            text?: boolean;
+            webrtc?: boolean;
+            rfb_fallback?: boolean;
+            takeover?: boolean;
+        };
+        MachineProtocolVersions: {
+            /** Format: int32 */
+            terminal: number;
+            /** Format: int32 */
+            desktop: number;
+        };
+        MachineInteractionPermissions: {
+            terminal: boolean;
+            desktop_watch: boolean;
+            desktop_control: boolean;
+        };
+        MachineDesktopCapability: {
+            supported: boolean;
+            webrtc: boolean;
+            rfb: boolean;
+            /** @description Why desktop access is unavailable, when supported is false. */
+            reason?: string;
+        };
+        /** @description Whether the machine's executor declared capabilities.session_files at its latest executor.register: each session's files then live in its own directory below the declared root instead of /mnt/session. A Claude Managed Agents compatible self_hosted environment accepts file resources only when this is true (BMA extension; CMA always refuses them). The root path itself is not returned. */
+        MachineSessionFilesCapability: {
+            declared: boolean;
+        };
+        MachineTerminalCapability: {
+            supported: boolean;
+            /** @description Why terminal access is unavailable, when supported is false. */
+            reason?: string;
+        };
+        ProjectMachineGrant: {
+            id: components["schemas"]["ProjectMachineGrantID"];
+            org_id: components["schemas"]["OrganizationID"];
+            project_id: components["schemas"]["ProjectID"];
+            machine_id: components["schemas"]["MachineID"];
+            source_kind: components["schemas"]["ProjectMachineGrantSourceKind"];
+            project_machine_pool_grant_id?: components["schemas"]["ProjectMachinePoolGrantID"] | null;
+            description: string;
+            metadata: components["schemas"]["Metadata"];
+            created_at: components["schemas"]["Timestamp"];
+            updated_at: components["schemas"]["Timestamp"];
+        };
+        /** @enum {string} */
+        ProjectMachineGrantSourceKind: "explicit" | "pool";
+        ProjectMachineGrantID: string;
+        MachineDaemonToken: {
+            id: components["schemas"]["MachineDaemonTokenID"];
+            org_id: components["schemas"]["OrganizationID"];
+            machine_id: components["schemas"]["MachineID"];
+            name: components["schemas"]["ResourceName"];
+            metadata: components["schemas"]["Metadata"];
+            created_at: components["schemas"]["Timestamp"];
+            last_used_at: components["schemas"]["Timestamp"] | null;
+            revoked_at: components["schemas"]["Timestamp"] | null;
+            revoke_reason: string;
+        };
+        MachineDaemonTokenID: string;
+        /**
+         * @description Persistent machines are kept for a person and never deleted for being idle; ephemeral machines serve turns and are deleted after their idle window.
+         * @enum {string}
+         */
+        AgentMachineKind: "persistent" | "ephemeral";
+        /** @description The machine's most recent daemon-reported failure. A single slot, overwritten by newer reports. Runtime crash reports remain as historical diagnostics; recovery may clear other failure stages. */
+        MachineFailureReport: {
+            /** @enum {string} */
+            stage: "startup_script" | "daemon_install" | "daemon_update" | "daemon_runtime" | "daemon_uninstall" | "daemon_uninstalled";
+            exit_status?: number;
+            output_tail: string;
+            output_truncated: boolean;
+            daemon_version?: string;
+            target_version?: string;
+            reported_at: components["schemas"]["Timestamp"];
+        };
+        /**
+         * @description Compute state of a pool machine. paused keeps the disk (and memory when the provider supports it) without compute; resuming means a resume or restore is in flight; archived means the machine image is stored durably and is restored on the next access.
+         * @enum {string}
+         */
+        MachinePowerState: "running" | "pausing" | "paused" | "resuming" | "archiving" | "archived";
+        /** @enum {string} */
+        MachineConnectionState: "online" | "asleep" | "offline";
+        /** @enum {string} */
+        MachineLifecycleState: "provisioning" | "provision_failed" | "active" | "deleting" | "delete_failed" | "deleted";
+        /** @enum {string} */
+        MachineSourceKind: "byo" | "pool";
+        /** @description Machine ID (mch_...). */
+        MachineID: string;
+        NativeMachinePool: {
+            id: components["schemas"]["MachinePoolID"];
+            org_id: components["schemas"]["OrganizationID"];
+            name: components["schemas"]["ResourceName"];
+            management_kind: components["schemas"]["ManagementKind"];
+            description: string;
+            provider: string;
+            /** Format: int32 */
+            default_machine_cpu: number | null;
+            /** Format: int32 */
+            default_machine_memory_mb: number | null;
+            /** @description Default environment for pool machines. A machine's environment, including resolved secret_env values, is applied to the provider machine at provisioning, so the provider_options startup_script and the daemon run with it, and is resolved again for each process at launch. */
+            default_machine_env: {
+                [key: string]: string;
+            };
+            /** @description Default secret environment for pool machines, mapping env names to generic secret references. References are resolved to secret values wherever the machine environment is applied. */
+            default_machine_secret_env: {
+                [key: string]: components["schemas"]["SecretID"];
+            };
+            default_machine_provider_options: {
+                [key: string]: unknown;
+            };
+            default_cwd: string;
+            provider_auth_secret_id?: components["schemas"]["SecretID"];
+            provider_config: {
+                [key: string]: unknown;
+            };
+            /** @description Whether BMA deletes this pool's machines when the provider remains running after the daemon becomes inactive. */
+            runtime_protection_enabled: boolean;
+            /**
+             * Format: int32
+             * @description Deprecated, not enforced: how many machines a pool has no longer blocks new machines. Organization and project quotas over in-use machines (org resource limits max_in_use_pool_machines_per_project and max_in_use_pool_machines_per_org) govern capacity.
+             */
+            max_total_machines: number;
+            /**
+             * Format: int32
+             * @description Deprecated, not enforced: organization and project in-use machine CPU quotas govern capacity.
+             */
+            max_total_cpu: number | null;
+            /**
+             * Format: int32
+             * @description Deprecated, not enforced: organization and project in-use machine memory quotas govern capacity.
+             */
+            max_total_memory_mb: number | null;
+            /** Format: int32 */
+            min_machine_cpu: number | null;
+            /** Format: int32 */
+            min_machine_memory_mb: number | null;
+            /** Format: int32 */
+            max_machine_cpu: number | null;
+            /** Format: int32 */
+            max_machine_memory_mb: number | null;
+            /**
+             * Format: int32
+             * @description Idle minutes before deleting a machine from this pool, or null when the pool default is unset.
+             */
+            delete_after_idle_minutes: number | null;
+            /**
+             * Format: int32
+             * @description Idle minutes before pausing a machine from this pool, or null when the pool does not pause idle machines.
+             */
+            pause_after_idle_minutes: number | null;
+            /**
+             * Format: int32
+             * @description Days a machine stays paused before it is archived, or null when the pool does not archive.
+             */
+            archive_after_paused_days: number | null;
+            /**
+             * Format: int32
+             * @description Days a machine stays paused before it is deleted, counted from when it paused, or null when the pool keeps paused machines.
+             */
+            delete_after_paused_days: number | null;
+            metadata: components["schemas"]["Metadata"];
+            created_at: components["schemas"]["Timestamp"];
+            updated_at: components["schemas"]["Timestamp"];
+            /** @description Current quota-consuming usage. Populated when the machine pool is returned by the list or get endpoint. */
+            usage?: components["schemas"]["MachinePoolUsage"];
+        };
+        ProjectMachinePoolGrantID: string;
+        MachinePoolUsage: {
+            /** Format: int32 */
+            machines: number;
+            /** Format: int64 */
+            cpu: number;
+            /** Format: int64 */
+            memory_mb: number;
+        };
+        /** @description Arbitrary key-value metadata. Maximum 16 pairs, keys up to 64 characters, values must be strings of up to 512 characters. */
+        Metadata: {
+            [key: string]: string;
+        };
+        /** @description Secret ID (sec_...). */
+        SecretID: string;
+        /**
+         * @description Lifecycle owner. Tenant-managed resources can be changed through tenant APIs. Cluster-managed resources are installed and lifecycle-managed by the control plane; individual APIs may explicitly expose tenant-editable settings.
+         * @enum {string}
+         */
+        ManagementKind: "tenant" | "cluster";
+        /** @description Machine pool ID (mpo_...). */
+        MachinePoolID: string;
+        /** Format: date-time */
+        Timestamp: string;
+        /** @description Human-readable name. Spaces and punctuation are allowed; leading or trailing whitespace and invisible or control characters are not. */
+        ResourceName: string;
+        OrganizationID: string;
+        /** @description Project ID (proj_...). */
+        ProjectID: string;
+        DesktopGenerationRequest: {
+            /** Format: int64 */
+            generation: number;
+        };
+        DesktopActionRequest: {
+            /** Format: int64 */
+            seq: number;
+            action: components["schemas"]["DesktopAction"];
+        };
+        DesktopAction: {
+            /** @enum {string} */
+            kind: "pointer_move" | "pointer_button" | "wheel" | "key" | "text";
+            /** Format: int32 */
+            x?: number;
+            /** Format: int32 */
+            y?: number;
+            /** Format: int32 */
+            button?: number;
+            pressed?: boolean;
+            /** Format: int64 */
+            keysym?: number;
+            text?: string;
+            /** Format: int32 */
+            delta_x?: number;
+            /** Format: int32 */
+            delta_y?: number;
+        };
+        DesktopControlLeaseRequest: {
+            /** Format: int32 */
+            lease_seconds?: number;
+        };
+        UpdateMachineRequest: {
+            /** @description Default working directory for processes started on the machine. */
+            cwd?: string;
+            /** @description Environment variables set for processes started on the machine. */
+            env?: {
+                [key: string]: string;
+            };
+            /** @description Environment variable names mapped to secret IDs (sec_...) whose values are set for processes started on the machine. */
+            secret_env?: {
+                [key: string]: components["schemas"]["SecretID"];
+            };
+        };
+        /** @description Update a project machine pool grant. Omitted fields keep their current values. Null clears an override so the grant follows the machine pool again. Overlay objects and metadata are replaced whole when present; send an empty object to clear them. */
+        UpdateProjectMachinePoolGrantRequest: {
+            /** @description Optional note about this grant. */
+            description?: string;
+            /**
+             * Format: int32
+             * @description Default CPU count for machines this project creates from the pool, overriding the pool's default.
+             */
+            default_machine_cpu?: number | null;
+            /**
+             * Format: int32
+             * @description Default memory in MB for machines this project creates from the pool, overriding the pool's default.
+             */
+            default_machine_memory_mb?: number | null;
+            /** @description Env overlay merged over the pool's default_machine_env for machines this project creates from the pool afterward; a null entry removes the key. */
+            default_machine_env_overlay?: {
+                [key: string]: string | null;
+            };
+            /** @description Secret env overlay merged over the pool's default_machine_secret_env for machines this project creates from the pool afterward; a null entry removes the key. */
+            default_machine_secret_env_overlay?: {
+                [key: string]: string | null;
+            };
+            /** @description Provider-specific options layered over the pool's provider options for this project's machines. */
+            default_machine_provider_options_overlay?: {
+                [key: string]: unknown;
+            };
+            /** @description Default working directory for processes on this project's machines created from the pool after this change. */
+            default_cwd?: string;
+            /**
+             * Format: int32
+             * @description Maximum number of live machines this project can have from the pool.
+             */
+            max_total_machines?: number | null;
+            /**
+             * Format: int32
+             * @description Maximum total CPU across this project's live machines from the pool.
+             */
+            max_total_cpu?: number | null;
+            /**
+             * Format: int32
+             * @description Maximum total memory in MB across this project's live machines from the pool.
+             */
+            max_total_memory_mb?: number | null;
+            /**
+             * Format: int32
+             * @description Smallest CPU count one of this project's machines can request.
+             */
+            min_machine_cpu?: number | null;
+            /**
+             * Format: int32
+             * @description Smallest memory in MB one of this project's machines can request.
+             */
+            min_machine_memory_mb?: number | null;
+            /**
+             * Format: int32
+             * @description Largest CPU count one of this project's machines can request.
+             */
+            max_machine_cpu?: number | null;
+            /**
+             * Format: int32
+             * @description Largest memory in MB one of this project's machines can request.
+             */
+            max_machine_memory_mb?: number | null;
+            /**
+             * Format: int32
+             * @description Idle minutes before deleting a machine created through this grant. Use 0 to disable for this grant; null restores inheritance from the pool; omitted leaves it unchanged. Values from 1 through 4 are invalid.
+             */
+            delete_after_idle_minutes?: never & (0 | number | null);
+            metadata?: components["schemas"]["Metadata"];
+        };
+        UpdateMachinePoolRequest: {
+            name?: components["schemas"]["ResourceName"];
+            /** @description Optional description of the pool. */
+            description?: string;
+            /**
+             * Format: int32
+             * @description Default CPU count for new machines in the pool.
+             */
+            default_machine_cpu?: number | null;
+            /**
+             * Format: int32
+             * @description Default memory in MB for new machines in the pool.
+             */
+            default_machine_memory_mb?: number | null;
+            /** @description Default environment for pool machines. A machine's environment, including resolved secret_env values, is applied to the provider machine at provisioning, so the provider_options startup_script and the daemon run with it, and is resolved again for each process at launch. */
+            default_machine_env?: {
+                [key: string]: string;
+            };
+            /** @description Default secret environment for pool machines, mapping env names to generic secret references. References are resolved to secret values wherever the machine environment is applied. */
+            default_machine_secret_env?: {
+                [key: string]: components["schemas"]["SecretID"];
+            };
+            /** @description Provider-specific options applied to new machines in the pool. */
+            default_machine_provider_options?: {
+                [key: string]: unknown;
+            };
+            /** @description Default working directory for processes on machines created from the pool after this change. */
+            default_cwd?: string;
+            /** @description Provider-specific settings for the pool. */
+            provider_config?: {
+                [key: string]: unknown;
+            };
+            provider_auth_secret_id?: components["schemas"]["SecretID"];
+            /** @description Whether BMA should delete a pool machine when its provider remains running after its daemon becomes inactive. */
+            runtime_protection_enabled?: boolean;
+            /**
+             * Format: int32
+             * @description Deprecated, not enforced: how many machines a pool has no longer blocks new machines. Organization and project quotas over in-use machines (org resource limits max_in_use_pool_machines_per_project and max_in_use_pool_machines_per_org) govern capacity.
+             */
+            max_total_machines?: number;
+            /**
+             * Format: int32
+             * @description Deprecated, not enforced: organization and project in-use machine CPU quotas govern capacity.
+             */
+            max_total_cpu?: number | null;
+            /**
+             * Format: int32
+             * @description Deprecated, not enforced: organization and project in-use machine memory quotas govern capacity.
+             */
+            max_total_memory_mb?: number | null;
+            /**
+             * Format: int32
+             * @description Smallest CPU count a single machine in the pool can use.
+             */
+            min_machine_cpu?: number | null;
+            /**
+             * Format: int32
+             * @description Smallest memory in MB a single machine in the pool can use.
+             */
+            min_machine_memory_mb?: number | null;
+            /**
+             * Format: int32
+             * @description Largest CPU count a single machine in the pool can use.
+             */
+            max_machine_cpu?: number | null;
+            /**
+             * Format: int32
+             * @description Largest memory in MB a single machine in the pool can use.
+             */
+            max_machine_memory_mb?: number | null;
+            /**
+             * Format: int32
+             * @description Idle minutes before deleting a machine from this pool. Null clears the pool default; omitted leaves it unchanged.
+             */
+            delete_after_idle_minutes?: number | null;
+            /**
+             * Format: int32
+             * @description Idle minutes before pausing a machine from this pool. Null clears it; omitted leaves it unchanged. Exclusive with delete_after_idle_minutes.
+             */
+            pause_after_idle_minutes?: number | null;
+            /**
+             * Format: int32
+             * @description Days a machine stays paused before it is archived. Null clears it; omitted leaves it unchanged. Requires pause_after_idle_minutes.
+             */
+            archive_after_paused_days?: number | null;
+            /**
+             * Format: int32
+             * @description Days a machine stays paused before it is deleted, counted from when it paused. Null clears it; omitted leaves it unchanged. Requires pause_after_idle_minutes; cannot be combined with archive_after_paused_days.
+             */
+            delete_after_paused_days?: number | null;
+            metadata?: components["schemas"]["MachineMetadata"];
+        };
+        /** @description User-supplied metadata stored on a machine, provided directly or copied from the machine pool that provisions it. A restriction of Metadata that leaves room for one reserved pair - BMA sets observed_platform on the machine to the platform reported by its daemon, so the key is reserved and at most 15 user pairs are accepted. */
+        MachineMetadata: {
+            [key: string]: string;
+        };
+        CheckMachinePoolConnectionRequest: {
+            provider: string;
+            provider_auth_secret_id: components["schemas"]["SecretID"];
+            provider_config?: {
+                [key: string]: unknown;
+            };
+            default_machine_provider_options?: {
+                [key: string]: unknown;
+            };
+        };
+        /** @description Pool definition. name, provider, provider_auth_secret_id, default_machine_provider_options, and max_total_machines are always required; which default machine size and CPU and memory limits are required depends on the provider; Blaxel pools reject CPU fields. */
+        CreateMachinePoolRequest: components["schemas"]["CreateMachinePoolRequestBase"] & ({
+            /** @enum {string} */
+            provider: "arker" | "freestyle" | "modal" | "tenki" | "unikraft";
+            /** Format: int32 */
+            default_machine_cpu: number;
+            /** Format: int32 */
+            default_machine_memory_mb: number;
+            /** Format: int32 */
+            max_total_cpu: number;
+            /** Format: int32 */
+            max_total_memory_mb: number;
+            /** Format: int32 */
+            max_machine_cpu: number;
+            /** Format: int32 */
+            max_machine_memory_mb: number;
+        } | {
+            /** @enum {string} */
+            provider: "boxd" | "createos" | "daytona" | "e2b" | "superserve";
+            /** Format: int32 */
+            max_total_cpu: number;
+            /** Format: int32 */
+            max_total_memory_mb: number;
+            /** Format: int32 */
+            max_machine_cpu: number;
+            /** Format: int32 */
+            max_machine_memory_mb: number;
+        } | {
+            /** @enum {string} */
+            provider: "blaxel";
+            /** Format: int32 */
+            default_machine_memory_mb: number;
+            /** Format: int32 */
+            max_total_memory_mb: number;
+            /** Format: int32 */
+            max_machine_memory_mb: number;
+        });
+        CreateMachinePoolRequestBase: {
+            name: components["schemas"]["ResourceName"];
+            description?: string;
+            provider: string;
+            /** Format: int32 */
+            default_machine_cpu?: number;
+            /** Format: int32 */
+            default_machine_memory_mb?: number;
+            /** @description Default environment for pool machines. A machine's environment, including resolved secret_env values, is applied to the provider machine at provisioning, so the provider_options startup_script and the daemon run with it, and is resolved again for each process at launch. */
+            default_machine_env?: {
+                [key: string]: string;
+            };
+            /** @description Default secret environment for pool machines, mapping env names to generic secret references. References are resolved to secret values wherever the machine environment is applied. */
+            default_machine_secret_env?: {
+                [key: string]: components["schemas"]["SecretID"];
+            };
+            default_machine_provider_options: {
+                [key: string]: unknown;
+            };
+            default_cwd?: string;
+            provider_config?: {
+                [key: string]: unknown;
+            };
+            provider_auth_secret_id: components["schemas"]["SecretID"];
+            /**
+             * @description Whether BMA should delete a pool machine when its provider remains running after its daemon becomes inactive. Defaults to false when omitted.
+             * @default false
+             */
+            runtime_protection_enabled?: boolean;
+            /**
+             * Format: int32
+             * @description Deprecated, not enforced: how many machines a pool has no longer blocks new machines. Organization and project quotas over in-use machines (org resource limits max_in_use_pool_machines_per_project and max_in_use_pool_machines_per_org) govern capacity.
+             */
+            max_total_machines: number;
+            /**
+             * Format: int32
+             * @description Deprecated, not enforced: organization and project in-use machine CPU quotas govern capacity.
+             */
+            max_total_cpu?: number;
+            /**
+             * Format: int32
+             * @description Deprecated, not enforced: organization and project in-use machine memory quotas govern capacity.
+             */
+            max_total_memory_mb?: number;
+            /** Format: int32 */
+            min_machine_cpu?: number;
+            /** Format: int32 */
+            min_machine_memory_mb?: number;
+            /** Format: int32 */
+            max_machine_cpu?: number;
+            /** Format: int32 */
+            max_machine_memory_mb?: number;
+            /**
+             * Format: int32
+             * @description Idle minutes before deleting a machine from this pool. Omit to leave the pool default unset; a grant or agent source may still override it.
+             */
+            delete_after_idle_minutes?: number;
+            /**
+             * Format: int32
+             * @description Idle minutes before pausing a machine from this pool. A paused machine keeps its disk and resumes on the next command, terminal, desktop, or explicit resume. Exclusive with delete_after_idle_minutes; a grant or agent source delete policy still wins.
+             */
+            pause_after_idle_minutes?: number;
+            /**
+             * Format: int32
+             * @description Days a machine stays paused before it is archived. An archived machine is restored on the next access. Requires pause_after_idle_minutes.
+             */
+            archive_after_paused_days?: number;
+            /**
+             * Format: int32
+             * @description Days a machine stays paused before it is deleted, counted from when it paused; a resume ends the paused period and the next pause starts a new one. A session that receives input after its machine was deleted gets a fresh machine. Machines kept for a person (idle deletion disabled with 0 on their binding or grant) are never deleted by it. Requires pause_after_idle_minutes; cannot be combined with archive_after_paused_days.
+             */
+            delete_after_paused_days?: number;
+            metadata?: components["schemas"]["MachineMetadata"];
+        };
+        CreateProjectRequest: {
+            name: components["schemas"]["ResourceName"];
+        };
+    };
+    responses: {
+        /** @description Anthropic error envelope. */
+        Error: {
+            headers: {
+                [name: string]: unknown;
+            };
+            content: {
+                "application/json": components["schemas"]["Error"];
+            };
+        };
+    };
+    parameters: {
+        /** @description Project scope. Required when the API key can access more than one project (alias: anthropic-workspace-id). */
+        ProjectHeader: string;
+        /** @description Replays the first result of a create; the same key with another body is 409. */
+        IdempotencyKey: string;
+        Limit: number;
+        /** @description Opaque cursor from `next_page`. */
+        Page: string;
+        /** @description Include archived records. Defaults to false. */
+        IncludeArchived: boolean;
+    };
+    requestBodies: never;
+    headers: never;
+    pathItems: never;
+}
+export type $defs = Record<string, never>;
+export interface operations {
+    listOrganizationProjects: {
+        parameters: {
+            query?: {
+                limit?: components["parameters"]["Limit"];
+                /** @description Opaque cursor from `next_page`. */
+                page?: components["parameters"]["Page"];
+            };
+            header?: never;
+            path: {
+                organization_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Success. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ListProject"];
+                };
+            };
+            "4XX": components["responses"]["Error"];
+            "5XX": components["responses"]["Error"];
+        };
+    };
+    createOrganizationProject: {
+        parameters: {
+            query?: never;
+            header?: {
+                /** @description Replays the first result of a create; the same key with another body is 409. */
+                "Idempotency-Key"?: components["parameters"]["IdempotencyKey"];
+            };
+            path: {
+                organization_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["CreateProjectRequest"];
+            };
+        };
+        responses: {
+            /** @description Success. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Project"];
+                };
+            };
+            "4XX": components["responses"]["Error"];
+            "5XX": components["responses"]["Error"];
+        };
+    };
+    listMachinePools: {
+        parameters: {
+            query?: {
+                limit?: components["parameters"]["Limit"];
+                /** @description Opaque cursor from `next_page`. */
+                page?: components["parameters"]["Page"];
+                sort?: string;
+            };
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Success. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ListMachinePool"];
+                };
+            };
+            "4XX": components["responses"]["Error"];
+            "5XX": components["responses"]["Error"];
+        };
+    };
+    createMachinePool: {
+        parameters: {
+            query?: never;
+            header?: {
+                /** @description Replays the first result of a create; the same key with another body is 409. */
+                "Idempotency-Key"?: components["parameters"]["IdempotencyKey"];
+            };
+            path?: never;
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["CreateMachinePoolRequest"];
+            };
+        };
+        responses: {
+            /** @description Success. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["MachinePool"];
+                };
+            };
+            "4XX": components["responses"]["Error"];
+            "5XX": components["responses"]["Error"];
+        };
+    };
+    checkMachinePoolConnection: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["CheckMachinePoolConnectionRequest"];
+            };
+        };
+        responses: {
+            /** @description Success. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["MachinePoolConnectionCheck"];
+                };
+            };
+            "4XX": components["responses"]["Error"];
+            "5XX": components["responses"]["Error"];
+        };
+    };
+    getMachinePool: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                pool_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Success. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["MachinePool"];
+                };
+            };
+            "4XX": components["responses"]["Error"];
+            "5XX": components["responses"]["Error"];
+        };
+    };
+    updateMachinePool: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                pool_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["UpdateMachinePoolRequest"];
+            };
+        };
+        responses: {
+            /** @description Success. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["MachinePool"];
+                };
+            };
+            "4XX": components["responses"]["Error"];
+            "5XX": components["responses"]["Error"];
+        };
+    };
+    deleteMachinePool: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                pool_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Success. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["MachinePoolDeleted"];
+                };
+            };
+            "4XX": components["responses"]["Error"];
+            "5XX": components["responses"]["Error"];
+        };
+    };
+    listMachinePoolGrants: {
+        parameters: {
+            query?: {
+                limit?: components["parameters"]["Limit"];
+                /** @description Opaque cursor from `next_page`. */
+                page?: components["parameters"]["Page"];
+                sort?: string;
+                project_id?: string;
+            };
+            header?: {
+                /** @description Project scope. Required when the API key can access more than one project (alias: anthropic-workspace-id). */
+                "x-bma-project-id"?: components["parameters"]["ProjectHeader"];
+            };
+            path: {
+                pool_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Success. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ListMachinePoolGrant"];
+                };
+            };
+            "4XX": components["responses"]["Error"];
+            "5XX": components["responses"]["Error"];
+        };
+    };
+    createMachinePoolGrant: {
+        parameters: {
+            query?: never;
+            header?: {
+                /** @description Project scope. Required when the API key can access more than one project (alias: anthropic-workspace-id). */
+                "x-bma-project-id"?: components["parameters"]["ProjectHeader"];
+                /** @description Replays the first result of a create; the same key with another body is 409. */
+                "Idempotency-Key"?: components["parameters"]["IdempotencyKey"];
+            };
+            path: {
+                pool_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["CreateMachinePoolGrantExtensionRequest"];
+            };
+        };
+        responses: {
+            /** @description Success. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["MachinePoolGrant"];
+                };
+            };
+            "4XX": components["responses"]["Error"];
+            "5XX": components["responses"]["Error"];
+        };
+    };
+    getMachinePoolGrant: {
+        parameters: {
+            query?: {
+                project_id?: string;
+            };
+            header?: {
+                /** @description Project scope. Required when the API key can access more than one project (alias: anthropic-workspace-id). */
+                "x-bma-project-id"?: components["parameters"]["ProjectHeader"];
+            };
+            path: {
+                pool_id: string;
+                grant_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Success. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["MachinePoolGrant"];
+                };
+            };
+            "4XX": components["responses"]["Error"];
+            "5XX": components["responses"]["Error"];
+        };
+    };
+    updateMachinePoolGrant: {
+        parameters: {
+            query?: {
+                project_id?: string;
+            };
+            header?: {
+                /** @description Project scope. Required when the API key can access more than one project (alias: anthropic-workspace-id). */
+                "x-bma-project-id"?: components["parameters"]["ProjectHeader"];
+            };
+            path: {
+                pool_id: string;
+                grant_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["UpdateProjectMachinePoolGrantRequest"];
+            };
+        };
+        responses: {
+            /** @description Success. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["MachinePoolGrant"];
+                };
+            };
+            "4XX": components["responses"]["Error"];
+            "5XX": components["responses"]["Error"];
+        };
+    };
+    deleteMachinePoolGrant: {
+        parameters: {
+            query?: {
+                project_id?: string;
+            };
+            header?: {
+                /** @description Project scope. Required when the API key can access more than one project (alias: anthropic-workspace-id). */
+                "x-bma-project-id"?: components["parameters"]["ProjectHeader"];
+            };
+            path: {
+                pool_id: string;
+                grant_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Success. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["MachinePoolGrantDeleted"];
+                };
+            };
+            "4XX": components["responses"]["Error"];
+            "5XX": components["responses"]["Error"];
+        };
+    };
+    listMachines: {
+        parameters: {
+            query?: {
+                limit?: components["parameters"]["Limit"];
+                /** @description Opaque cursor from `next_page`. */
+                page?: components["parameters"]["Page"];
+                sort?: string;
+                machine_pool_id?: string;
+                agent_id?: string;
+            };
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Success. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ListMachine"];
+                };
+            };
+            "4XX": components["responses"]["Error"];
+            "5XX": components["responses"]["Error"];
+        };
+    };
+    createMachine: {
+        parameters: {
+            query?: never;
+            header?: {
+                /** @description Project scope. Required when the API key can access more than one project (alias: anthropic-workspace-id). */
+                "x-bma-project-id"?: components["parameters"]["ProjectHeader"];
+                /** @description Replays the first result of a create; the same key with another body is 409. */
+                "Idempotency-Key"?: components["parameters"]["IdempotencyKey"];
+            };
+            path?: never;
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["CreateMachineExtensionRequest"];
+            };
+        };
+        responses: {
+            /** @description Success. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Machine"];
+                };
+            };
+            "4XX": components["responses"]["Error"];
+            "5XX": components["responses"]["Error"];
+        };
+    };
+    getMachine: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                machine_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Success. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Machine"];
+                };
+            };
+            "4XX": components["responses"]["Error"];
+            "5XX": components["responses"]["Error"];
+        };
+    };
+    updateMachine: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                machine_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["UpdateMachineRequest"];
+            };
+        };
+        responses: {
+            /** @description Success. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Machine"];
+                };
+            };
+            "4XX": components["responses"]["Error"];
+            "5XX": components["responses"]["Error"];
+        };
+    };
+    deleteMachine: {
+        parameters: {
+            query?: {
+                agent_id?: string;
+            };
+            header?: {
+                /** @description Project scope. Required when the API key can access more than one project (alias: anthropic-workspace-id). */
+                "x-bma-project-id"?: components["parameters"]["ProjectHeader"];
+            };
+            path: {
+                machine_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Success. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["MachineDeleted"];
+                };
+            };
+            "4XX": components["responses"]["Error"];
+            "5XX": components["responses"]["Error"];
+        };
+    };
+    resumeMachine: {
+        parameters: {
+            query?: {
+                project_id?: string;
+            };
+            header?: {
+                /** @description Project scope. Required when the API key can access more than one project (alias: anthropic-workspace-id). */
+                "x-bma-project-id"?: components["parameters"]["ProjectHeader"];
+            };
+            path: {
+                machine_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Success. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["MachinePowerStatus"];
+                };
+            };
+            "4XX": components["responses"]["Error"];
+            "5XX": components["responses"]["Error"];
+        };
+    };
+    getMachineCapabilities: {
+        parameters: {
+            query?: {
+                project_id?: string;
+            };
+            header?: {
+                /** @description Project scope. Required when the API key can access more than one project (alias: anthropic-workspace-id). */
+                "x-bma-project-id"?: components["parameters"]["ProjectHeader"];
+            };
+            path: {
+                machine_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Success. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["MachineCapabilities"];
+                };
+            };
+            "4XX": components["responses"]["Error"];
+            "5XX": components["responses"]["Error"];
+        };
+    };
+    createDesktopSession: {
+        parameters: {
+            query?: never;
+            header?: {
+                /** @description Project scope. Required when the API key can access more than one project (alias: anthropic-workspace-id). */
+                "x-bma-project-id"?: components["parameters"]["ProjectHeader"];
+                /** @description Replays the first result of a create; the same key with another body is 409. */
+                "Idempotency-Key"?: components["parameters"]["IdempotencyKey"];
+            };
+            path?: never;
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["CreateDesktopSessionExtensionRequest"];
+            };
+        };
+        responses: {
+            /** @description Success. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["DesktopSession"];
+                };
+            };
+            "4XX": components["responses"]["Error"];
+            "5XX": components["responses"]["Error"];
+        };
+    };
+    getDesktopSession: {
+        parameters: {
+            query?: never;
+            header?: {
+                /** @description Project scope. Required when the API key can access more than one project (alias: anthropic-workspace-id). */
+                "x-bma-project-id"?: components["parameters"]["ProjectHeader"];
+            };
+            path: {
+                desktop_session_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Success. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["DesktopSession"];
+                };
+            };
+            "4XX": components["responses"]["Error"];
+            "5XX": components["responses"]["Error"];
+        };
+    };
+    closeDesktopSession: {
+        parameters: {
+            query?: never;
+            header?: {
+                /** @description Project scope. Required when the API key can access more than one project (alias: anthropic-workspace-id). */
+                "x-bma-project-id"?: components["parameters"]["ProjectHeader"];
+            };
+            path: {
+                desktop_session_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Success. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["DesktopSessionClosed"];
+                };
+            };
+            "4XX": components["responses"]["Error"];
+            "5XX": components["responses"]["Error"];
+        };
+    };
+    acquireDesktopControl: {
+        parameters: {
+            query?: never;
+            header?: {
+                /** @description Project scope. Required when the API key can access more than one project (alias: anthropic-workspace-id). */
+                "x-bma-project-id"?: components["parameters"]["ProjectHeader"];
+            };
+            path: {
+                desktop_session_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: {
+            content: {
+                "application/json": components["schemas"]["DesktopControlLeaseRequest"];
+            };
+        };
+        responses: {
+            /** @description Success. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["DesktopControlStatus"];
+                };
+            };
+            "4XX": components["responses"]["Error"];
+            "5XX": components["responses"]["Error"];
+        };
+    };
+    renewDesktopControl: {
+        parameters: {
+            query?: never;
+            header?: {
+                /** @description Project scope. Required when the API key can access more than one project (alias: anthropic-workspace-id). */
+                "x-bma-project-id"?: components["parameters"]["ProjectHeader"];
+            };
+            path: {
+                desktop_session_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: {
+            content: {
+                "application/json": components["schemas"]["DesktopControlLeaseRequest"];
+            };
+        };
+        responses: {
+            /** @description Success. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["DesktopControlStatus"];
+                };
+            };
+            "4XX": components["responses"]["Error"];
+            "5XX": components["responses"]["Error"];
+        };
+    };
+    releaseDesktopControl: {
+        parameters: {
+            query?: never;
+            header?: {
+                /** @description Project scope. Required when the API key can access more than one project (alias: anthropic-workspace-id). */
+                "x-bma-project-id"?: components["parameters"]["ProjectHeader"];
+            };
+            path: {
+                desktop_session_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: {
+            content: {
+                "application/json": components["schemas"]["DesktopEmptyRequest"];
+            };
+        };
+        responses: {
+            /** @description Success. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["DesktopControlStatus"];
+                };
+            };
+            "4XX": components["responses"]["Error"];
+            "5XX": components["responses"]["Error"];
+        };
+    };
+    handbackDesktopControl: {
+        parameters: {
+            query?: never;
+            header?: {
+                /** @description Project scope. Required when the API key can access more than one project (alias: anthropic-workspace-id). */
+                "x-bma-project-id"?: components["parameters"]["ProjectHeader"];
+            };
+            path: {
+                desktop_session_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: {
+            content: {
+                "application/json": components["schemas"]["DesktopEmptyRequest"];
+            };
+        };
+        responses: {
+            /** @description Success. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["DesktopControlStatus"];
+                };
+            };
+            "4XX": components["responses"]["Error"];
+            "5XX": components["responses"]["Error"];
+        };
+    };
+    sendDesktopActions: {
+        parameters: {
+            query?: never;
+            header?: {
+                /** @description Project scope. Required when the API key can access more than one project (alias: anthropic-workspace-id). */
+                "x-bma-project-id"?: components["parameters"]["ProjectHeader"];
+            };
+            path: {
+                desktop_session_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["DesktopActionRequest"];
+            };
+        };
+        responses: {
+            /** @description Success. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["DesktopActionResult"];
+                };
+            };
+            "4XX": components["responses"]["Error"];
+            "5XX": components["responses"]["Error"];
+        };
+    };
+    captureDesktopScreenshot: {
+        parameters: {
+            query?: never;
+            header?: {
+                /** @description Project scope. Required when the API key can access more than one project (alias: anthropic-workspace-id). */
+                "x-bma-project-id"?: components["parameters"]["ProjectHeader"];
+            };
+            path: {
+                desktop_session_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: {
+            content: {
+                "application/json": components["schemas"]["DesktopEmptyRequest"];
+            };
+        };
+        responses: {
+            /** @description Success. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["DesktopScreenshot"];
+                };
+            };
+            "4XX": components["responses"]["Error"];
+            "5XX": components["responses"]["Error"];
+        };
+    };
+    resumeDesktopAgent: {
+        parameters: {
+            query?: never;
+            header?: {
+                /** @description Project scope. Required when the API key can access more than one project (alias: anthropic-workspace-id). */
+                "x-bma-project-id"?: components["parameters"]["ProjectHeader"];
+            };
+            path: {
+                desktop_session_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["DesktopGenerationRequest"];
+            };
+        };
+        responses: {
+            /** @description Success. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["DesktopControlStatus"];
+                };
+            };
+            "4XX": components["responses"]["Error"];
+            "5XX": components["responses"]["Error"];
+        };
+    };
+    confirmDesktopAction: {
+        parameters: {
+            query?: never;
+            header?: {
+                /** @description Project scope. Required when the API key can access more than one project (alias: anthropic-workspace-id). */
+                "x-bma-project-id"?: components["parameters"]["ProjectHeader"];
+            };
+            path: {
+                desktop_session_id: string;
+                pending_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["DesktopGenerationRequest"];
+            };
+        };
+        responses: {
+            /** @description Success. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["DesktopActionResult"];
+                };
+            };
+            "4XX": components["responses"]["Error"];
+            "5XX": components["responses"]["Error"];
+        };
+    };
+    createDesktopSessionTicket: {
+        parameters: {
+            query?: never;
+            header?: {
+                /** @description Project scope. Required when the API key can access more than one project (alias: anthropic-workspace-id). */
+                "x-bma-project-id"?: components["parameters"]["ProjectHeader"];
+            };
+            path: {
+                desktop_session_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: {
+            content: {
+                "application/json": components["schemas"]["CreateDesktopTicketRequest"];
+            };
+        };
+        responses: {
+            /** @description Success. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Ticket"];
+                };
+            };
+            "4XX": components["responses"]["Error"];
+            "5XX": components["responses"]["Error"];
+        };
+    };
+    listTerminalSessions: {
+        parameters: {
+            query?: {
+                machine_id?: string;
+            };
+            header?: {
+                /** @description Project scope. Required when the API key can access more than one project (alias: anthropic-workspace-id). */
+                "x-bma-project-id"?: components["parameters"]["ProjectHeader"];
+            };
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Success. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ListTerminalSession"];
+                };
+            };
+            "4XX": components["responses"]["Error"];
+            "5XX": components["responses"]["Error"];
+        };
+    };
+    createTerminalSession: {
+        parameters: {
+            query?: never;
+            header?: {
+                /** @description Project scope. Required when the API key can access more than one project (alias: anthropic-workspace-id). */
+                "x-bma-project-id"?: components["parameters"]["ProjectHeader"];
+                /** @description Replays the first result of a create; the same key with another body is 409. */
+                "Idempotency-Key"?: components["parameters"]["IdempotencyKey"];
+            };
+            path?: never;
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["CreateTerminalSessionExtensionRequest"];
+            };
+        };
+        responses: {
+            /** @description Success. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["TerminalSession"];
+                };
+            };
+            "4XX": components["responses"]["Error"];
+            "5XX": components["responses"]["Error"];
+        };
+    };
+    getTerminalSession: {
+        parameters: {
+            query?: never;
+            header?: {
+                /** @description Project scope. Required when the API key can access more than one project (alias: anthropic-workspace-id). */
+                "x-bma-project-id"?: components["parameters"]["ProjectHeader"];
+            };
+            path: {
+                terminal_session_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Success. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["TerminalSession"];
+                };
+            };
+            "4XX": components["responses"]["Error"];
+            "5XX": components["responses"]["Error"];
+        };
+    };
+    closeTerminalSession: {
+        parameters: {
+            query?: never;
+            header?: {
+                /** @description Project scope. Required when the API key can access more than one project (alias: anthropic-workspace-id). */
+                "x-bma-project-id"?: components["parameters"]["ProjectHeader"];
+            };
+            path: {
+                terminal_session_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Success. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["TerminalSession"];
+                };
+            };
+            "4XX": components["responses"]["Error"];
+            "5XX": components["responses"]["Error"];
+        };
+    };
+    createTerminalSessionTicket: {
+        parameters: {
+            query?: never;
+            header?: {
+                /** @description Project scope. Required when the API key can access more than one project (alias: anthropic-workspace-id). */
+                "x-bma-project-id"?: components["parameters"]["ProjectHeader"];
+                /** @description Replays the first result of a create; the same key with another body is 409. */
+                "Idempotency-Key"?: components["parameters"]["IdempotencyKey"];
+            };
+            path: {
+                terminal_session_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: {
+            content: {
+                "application/json": components["schemas"]["CreateTicketRequest"];
+            };
+        };
+        responses: {
+            /** @description Success. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Ticket"];
+                };
+            };
+            "4XX": components["responses"]["Error"];
+            "5XX": components["responses"]["Error"];
+        };
+    };
+    listVaults: {
+        parameters: {
+            query?: {
+                limit?: components["parameters"]["Limit"];
+                /** @description Opaque cursor from `next_page`. */
+                page?: components["parameters"]["Page"];
+                /** @description Include archived records. Defaults to false. */
+                include_archived?: components["parameters"]["IncludeArchived"];
+            };
+            header?: {
+                /** @description Project scope. Required when the API key can access more than one project (alias: anthropic-workspace-id). */
+                "x-bma-project-id"?: components["parameters"]["ProjectHeader"];
+            };
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Success. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ListVault"];
+                };
+            };
+            "4XX": components["responses"]["Error"];
+            "5XX": components["responses"]["Error"];
+        };
+    };
+    createVault: {
+        parameters: {
+            query?: never;
+            header?: {
+                /** @description Project scope. Required when the API key can access more than one project (alias: anthropic-workspace-id). */
+                "x-bma-project-id"?: components["parameters"]["ProjectHeader"];
+                /** @description Replays the first result of a create; the same key with another body is 409. */
+                "Idempotency-Key"?: components["parameters"]["IdempotencyKey"];
+            };
+            path?: never;
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["VaultCreateRequest"];
+            };
+        };
+        responses: {
+            /** @description Success. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Vault"];
+                };
+            };
+            "4XX": components["responses"]["Error"];
+            "5XX": components["responses"]["Error"];
+        };
+    };
+    getVault: {
+        parameters: {
+            query?: never;
+            header?: {
+                /** @description Project scope. Required when the API key can access more than one project (alias: anthropic-workspace-id). */
+                "x-bma-project-id"?: components["parameters"]["ProjectHeader"];
+            };
+            path: {
+                vault_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Success. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Vault"];
+                };
+            };
+            "4XX": components["responses"]["Error"];
+            "5XX": components["responses"]["Error"];
+        };
+    };
+    updateVault: {
+        parameters: {
+            query?: never;
+            header?: {
+                /** @description Project scope. Required when the API key can access more than one project (alias: anthropic-workspace-id). */
+                "x-bma-project-id"?: components["parameters"]["ProjectHeader"];
+            };
+            path: {
+                vault_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["VaultUpdateRequest"];
+            };
+        };
+        responses: {
+            /** @description Success. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Vault"];
+                };
+            };
+            "4XX": components["responses"]["Error"];
+            "5XX": components["responses"]["Error"];
+        };
+    };
+    deleteVault: {
+        parameters: {
+            query?: never;
+            header?: {
+                /** @description Project scope. Required when the API key can access more than one project (alias: anthropic-workspace-id). */
+                "x-bma-project-id"?: components["parameters"]["ProjectHeader"];
+            };
+            path: {
+                vault_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Success. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["VaultDeleted"];
+                };
+            };
+            "4XX": components["responses"]["Error"];
+            "5XX": components["responses"]["Error"];
+        };
+    };
+    archiveVault: {
+        parameters: {
+            query?: never;
+            header?: {
+                /** @description Project scope. Required when the API key can access more than one project (alias: anthropic-workspace-id). */
+                "x-bma-project-id"?: components["parameters"]["ProjectHeader"];
+            };
+            path: {
+                vault_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: {
+            content: {
+                "application/json": Record<string, never>;
+            };
+        };
+        responses: {
+            /** @description Success. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Vault"];
+                };
+            };
+            "4XX": components["responses"]["Error"];
+            "5XX": components["responses"]["Error"];
+        };
+    };
+    listVaultCredentials: {
+        parameters: {
+            query?: {
+                limit?: components["parameters"]["Limit"];
+                /** @description Opaque cursor from `next_page`. */
+                page?: components["parameters"]["Page"];
+                /** @description Include archived records. Defaults to false. */
+                include_archived?: components["parameters"]["IncludeArchived"];
+            };
+            header?: {
+                /** @description Project scope. Required when the API key can access more than one project (alias: anthropic-workspace-id). */
+                "x-bma-project-id"?: components["parameters"]["ProjectHeader"];
+            };
+            path: {
+                vault_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Success. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ListVaultCredential"];
+                };
+            };
+            "4XX": components["responses"]["Error"];
+            "5XX": components["responses"]["Error"];
+        };
+    };
+    createVaultCredential: {
+        parameters: {
+            query?: never;
+            header?: {
+                /** @description Project scope. Required when the API key can access more than one project (alias: anthropic-workspace-id). */
+                "x-bma-project-id"?: components["parameters"]["ProjectHeader"];
+                /** @description Replays the first result of a create; the same key with another body is 409. */
+                "Idempotency-Key"?: components["parameters"]["IdempotencyKey"];
+            };
+            path: {
+                vault_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["VaultCredentialCreateRequest"];
+            };
+        };
+        responses: {
+            /** @description Success. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["VaultCredential"];
+                };
+            };
+            "4XX": components["responses"]["Error"];
+            "5XX": components["responses"]["Error"];
+        };
+    };
+    getVaultCredential: {
+        parameters: {
+            query?: never;
+            header?: {
+                /** @description Project scope. Required when the API key can access more than one project (alias: anthropic-workspace-id). */
+                "x-bma-project-id"?: components["parameters"]["ProjectHeader"];
+            };
+            path: {
+                vault_id: string;
+                credential_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Success. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["VaultCredential"];
+                };
+            };
+            "4XX": components["responses"]["Error"];
+            "5XX": components["responses"]["Error"];
+        };
+    };
+    updateVaultCredential: {
+        parameters: {
+            query?: never;
+            header?: {
+                /** @description Project scope. Required when the API key can access more than one project (alias: anthropic-workspace-id). */
+                "x-bma-project-id"?: components["parameters"]["ProjectHeader"];
+            };
+            path: {
+                vault_id: string;
+                credential_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["VaultCredentialUpdateRequest"];
+            };
+        };
+        responses: {
+            /** @description Success. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["VaultCredential"];
+                };
+            };
+            "4XX": components["responses"]["Error"];
+            "5XX": components["responses"]["Error"];
+        };
+    };
+    deleteVaultCredential: {
+        parameters: {
+            query?: never;
+            header?: {
+                /** @description Project scope. Required when the API key can access more than one project (alias: anthropic-workspace-id). */
+                "x-bma-project-id"?: components["parameters"]["ProjectHeader"];
+            };
+            path: {
+                vault_id: string;
+                credential_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Success. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["VaultCredentialDeleted"];
+                };
+            };
+            "4XX": components["responses"]["Error"];
+            "5XX": components["responses"]["Error"];
+        };
+    };
+    archiveVaultCredential: {
+        parameters: {
+            query?: never;
+            header?: {
+                /** @description Project scope. Required when the API key can access more than one project (alias: anthropic-workspace-id). */
+                "x-bma-project-id"?: components["parameters"]["ProjectHeader"];
+            };
+            path: {
+                vault_id: string;
+                credential_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: {
+            content: {
+                "application/json": Record<string, never>;
+            };
+        };
+        responses: {
+            /** @description Success. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["VaultCredential"];
+                };
+            };
+            "4XX": components["responses"]["Error"];
+            "5XX": components["responses"]["Error"];
+        };
+    };
+    listSkills: {
+        parameters: {
+            query?: {
+                limit?: components["parameters"]["Limit"];
+                /** @description Opaque cursor from `next_page`. */
+                page?: components["parameters"]["Page"];
+                source?: string;
+                sort?: string;
+                owner_kind?: string;
+                owner_project_id?: string;
+            };
+            header?: {
+                /** @description Project scope. Required when the API key can access more than one project (alias: anthropic-workspace-id). */
+                "x-bma-project-id"?: components["parameters"]["ProjectHeader"];
+            };
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Success. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ListSkill"];
+                };
+            };
+            "4XX": components["responses"]["Error"];
+            "5XX": components["responses"]["Error"];
+        };
+    };
+    createSkill: {
+        parameters: {
+            query?: never;
+            header?: {
+                /** @description Project scope. Required when the API key can access more than one project (alias: anthropic-workspace-id). */
+                "x-bma-project-id"?: components["parameters"]["ProjectHeader"];
+                /** @description Replays the first result of a create; the same key with another body is 409. */
+                "Idempotency-Key"?: components["parameters"]["IdempotencyKey"];
+            };
+            path?: never;
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "multipart/form-data": components["schemas"]["SkillUploadRequest"];
+            };
+        };
+        responses: {
+            /** @description Success. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Skill"];
+                };
+            };
+            "4XX": components["responses"]["Error"];
+            "5XX": components["responses"]["Error"];
+        };
+    };
+    getSkill: {
+        parameters: {
+            query?: never;
+            header?: {
+                /** @description Project scope. Required when the API key can access more than one project (alias: anthropic-workspace-id). */
+                "x-bma-project-id"?: components["parameters"]["ProjectHeader"];
+            };
+            path: {
+                skill_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Success. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Skill"];
+                };
+            };
+            "4XX": components["responses"]["Error"];
+            "5XX": components["responses"]["Error"];
+        };
+    };
+    deleteSkill: {
+        parameters: {
+            query?: never;
+            header?: {
+                /** @description Project scope. Required when the API key can access more than one project (alias: anthropic-workspace-id). */
+                "x-bma-project-id"?: components["parameters"]["ProjectHeader"];
+            };
+            path: {
+                skill_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Success. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["SkillDeleted"];
+                };
+            };
+            "4XX": components["responses"]["Error"];
+            "5XX": components["responses"]["Error"];
+        };
+    };
+}