@burdenoff/microfe-movethewheels 2026.513.1 → 2026.514.1

package/dist/generated/wspace-types.d.ts

@@ -255,7 +255,10 @@ export type AccessShareResult = {
 export type AcquireLockInput = {
     /** Auto-release lock when it expires (default: true) */
     autoRelease?: InputMaybe<Scalars['Boolean']['input']>;
-    /** Lock duration in seconds (default: 3600 = 1 hour) Max: 86400 (24 hours) */
+    /**
+     * Lock duration in seconds (default: 3600 = 1 hour)
+     * Max: 86400 (24 hours)
+     */
     durationSeconds?: InputMaybe<Scalars['Int']['input']>;
     /** File ID to lock */
     fileId: Scalars['ID']['input'];
@@ -270,7 +273,11 @@ export type AcquireLockResponse = {
     message?: Maybe<Scalars['String']['output']>;
     success: Scalars['Boolean']['output'];
 };
-/** A reusable action that can be executed on agents, triggered via webhooks, or orchestrated as workflows. Actions are first-class entities that can be independently managed, shared via store, and referenced by VibeDeck buttons. */
+/**
+ * A reusable action that can be executed on agents, triggered via webhooks,
+ * or orchestrated as workflows. Actions are first-class entities that can be
+ * independently managed, shared via store, and referenced by VibeDeck buttons.
+ */
 export type Action = {
     __typename?: 'Action';
     actionType: VibecontrolsActionType;
@@ -320,7 +327,11 @@ export type Action = {
     workingDirectory?: Maybe<Scalars['String']['output']>;
     workspaceId: Scalars['ID']['output'];
 };
-/** A reusable action that can be executed on agents, triggered via webhooks, or orchestrated as workflows. Actions are first-class entities that can be independently managed, shared via store, and referenced by VibeDeck buttons. */
+/**
+ * A reusable action that can be executed on agents, triggered via webhooks,
+ * or orchestrated as workflows. Actions are first-class entities that can be
+ * independently managed, shared via store, and referenced by VibeDeck buttons.
+ */
 export type ActionRecentExecutionsArgs = {
     limit?: InputMaybe<Scalars['Int']['input']>;
 };
@@ -386,7 +397,10 @@ export type ActionDefinition = {
     /** VIEWER role level includes this action by default */
     viewerDefault: Scalars['Boolean']['output'];
 };
-/** A record of an action execution with full status tracking, output capture, and timing information. Provides a persistent audit trail of all executions. */
+/**
+ * A record of an action execution with full status tracking, output capture,
+ * and timing information. Provides a persistent audit trail of all executions.
+ */
 export type ActionExecution = {
     __typename?: 'ActionExecution';
     action: Action;
@@ -1093,7 +1107,11 @@ export type AgentPluginListResult = {
     /** Installed plugins */
     installed: Array<AgentPlugin>;
 };
-/** Result of probing an agent's tunnel URL for health and identity. Used by the Add Agent wizard (pre-creation) and Agent Detail page to validate connectivity without the frontend calling the agent directly. */
+/**
+ * Result of probing an agent's tunnel URL for health and identity.
+ * Used by the Add Agent wizard (pre-creation) and Agent Detail page
+ * to validate connectivity without the frontend calling the agent directly.
+ */
 export type AgentProbeResult = {
     __typename?: 'AgentProbeResult';
     /** Agent software version from /health */
@@ -1277,7 +1295,10 @@ export declare enum AiPromptStatus {
     Archived = "ARCHIVED",
     Draft = "DRAFT"
 }
-/** An event from an AI coding tool running on an agent. Used to track task completions, tool usage, and other AI tool activities. */
+/**
+ * An event from an AI coding tool running on an agent.
+ * Used to track task completions, tool usage, and other AI tool activities.
+ */
 export type AiToolEvent = {
     __typename?: 'AiToolEvent';
     /** Associated agent */
@@ -2924,7 +2945,10 @@ export type BulkAssignTagsInput = {
     source?: InputMaybe<AssignmentSource>;
     tagIds: Array<Scalars['ID']['input']>;
 };
-/** Input for assigning many tags to many entities in one round-trip. Server applies the cartesian product (tagIds × targets). */
+/**
+ * Input for assigning many tags to many entities in one round-trip.
+ * Server applies the cartesian product (tagIds × targets).
+ */
 export type BulkAssignTagsToEntitiesInput = {
     /** Operation context for scoping (workspaceId, userId, projectId, etc.) */
     context?: InputMaybe<ContextInput>;
@@ -4230,7 +4254,10 @@ export declare enum ConfigScope {
     Vibe = "VIBE",
     Workspace = "WORKSPACE"
 }
-/** Configuration key-value storage with scoping. Supports workspace, vibe, session, and agent-scoped configurations. */
+/**
+ * Configuration key-value storage with scoping.
+ * Supports workspace, vibe, session, and agent-scoped configurations.
+ */
 export type Configuration = {
     __typename?: 'Configuration';
     /** Opaque IDs for cross-service context (organizationId, userId, etc.) */
@@ -5860,7 +5887,10 @@ export type CreateFolderInput = {
     icon?: InputMaybe<Scalars['String']['input']>;
     name: Scalars['String']['input'];
     parentFolderId?: InputMaybe<Scalars['ID']['input']>;
-    /** Universal entity-owned tags (marqueue §251). JSON array of `{key,value,...}` records. Backed by the canonical `Folder.tags` Json column. */
+    /**
+     * Universal entity-owned tags (marqueue §251). JSON array of `{key,value,...}`
+     * records. Backed by the canonical `Folder.tags` Json column.
+     */
     tags?: InputMaybe<Scalars['JSON']['input']>;
     visibility?: InputMaybe<FileVisibility>;
 };
@@ -6924,7 +6954,11 @@ export type CreateSessionInput = {
     /** Operation context for scoping (workspaceId, userId, projectId, etc.) */
     context?: InputMaybe<ContextInput>;
     environmentVariables?: InputMaybe<Scalars['JSON']['input']>;
-    /** Provider-native session name (e.g. tmux session name). When set, the agent attaches to that existing daemon-side session instead of creating a new one. Agent errors if no such session exists. */
+    /**
+     * Provider-native session name (e.g. tmux session name). When set, the
+     * agent attaches to that existing daemon-side session instead of
+     * creating a new one. Agent errors if no such session exists.
+     */
     externalSessionName?: InputMaybe<Scalars['String']['input']>;
     metadata?: InputMaybe<Scalars['JSON']['input']>;
     name: Scalars['String']['input'];
@@ -7350,9 +7384,15 @@ export type CreateVibeInput = {
     name: Scalars['String']['input'];
     parentId?: InputMaybe<Scalars['ID']['input']>;
     path: Scalars['String']['input'];
-    /** Legacy tag input (string array). Use `tagsV2` for the canonical `[{key,value,...}]` shape (marqueue §251). Both fields are still written. */
+    /**
+     * Legacy tag input (string array). Use `tagsV2` for the canonical
+     * `[{key,value,...}]` shape (marqueue §251). Both fields are still written.
+     */
     tags?: InputMaybe<Array<Scalars['String']['input']>>;
-    /** Canonical universal-tag input (marqueue §251). JSON array of `{key,value,...}` records. When provided, takes precedence over legacy `tags`. */
+    /**
+     * Canonical universal-tag input (marqueue §251). JSON array of `{key,value,...}`
+     * records. When provided, takes precedence over legacy `tags`.
+     */
     tagsV2?: InputMaybe<Scalars['JSON']['input']>;
     type: VibeType;
 };
@@ -9516,7 +9556,11 @@ export type EntityList = {
     __typename?: 'EntityList';
     entities: Array<TaggedEntity>;
     hasMore: Scalars['Boolean']['output'];
-    /** Opaque cursor pointing to the entity immediately after the last item in `entities`. Pass it back as `pagination.cursor` to fetch the next page. Null when `hasMore` is false. */
+    /**
+     * Opaque cursor pointing to the entity immediately after the last item in
+     * `entities`. Pass it back as `pagination.cursor` to fetch the next page.
+     * Null when `hasMore` is false.
+     */
     nextCursor?: Maybe<Scalars['String']['output']>;
     total: Scalars['Int']['output'];
 };
@@ -11926,7 +11970,11 @@ export type File = {
     starred: Scalars['Boolean']['output'];
     status: FileStatus;
     tagAssignments: Array<FileTagAssignment>;
-    /** Universal entity-owned tags (marqueue §251). JSON array of `{key, value, ...}` records mirroring `wspace-workspace-svc` Project.tags shape. Lives alongside `tagAssignments` (the wspace-tags-svc-backed structured view). */
+    /**
+     * Universal entity-owned tags (marqueue §251). JSON array of `{key, value, ...}`
+     * records mirroring `wspace-workspace-svc` Project.tags shape. Lives alongside
+     * `tagAssignments` (the wspace-tags-svc-backed structured view).
+     */
     tags: Scalars['JSON']['output'];
     updatedAt: Scalars['DateTime']['output'];
     uploadedById: Scalars['ID']['output'];
@@ -12580,7 +12628,11 @@ export type Folder = {
     subFolders?: Maybe<Array<Folder>>;
     subfoldersCount?: Maybe<Scalars['Int']['output']>;
     tagAssignments: Array<FolderTagAssignment>;
-    /** Universal entity-owned tags (marqueue §251). JSON array of `{key, value, ...}` records mirroring `wspace-workspace-svc` Project.tags shape. Lives alongside `tagAssignments` (the wspace-tags-svc-backed structured view). */
+    /**
+     * Universal entity-owned tags (marqueue §251). JSON array of `{key, value, ...}`
+     * records mirroring `wspace-workspace-svc` Project.tags shape. Lives alongside
+     * `tagAssignments` (the wspace-tags-svc-backed structured view).
+     */
     tags: Scalars['JSON']['output'];
     updatedAt: Scalars['DateTime']['output'];
     visibility: FileVisibility;
@@ -18065,11 +18117,20 @@ export type LockCheckResult = {
     message?: Maybe<Scalars['String']['output']>;
 };
 export declare enum LockType {
-    /** Optimistic locking - last-write-wins with version check Allows multiple users to work, validates on save */
+    /**
+     * Optimistic locking - last-write-wins with version check
+     * Allows multiple users to work, validates on save
+     */
     Optimistic = "OPTIMISTIC",
-    /** Pessimistic locking - exclusive lock Only one user can edit at a time */
+    /**
+     * Pessimistic locking - exclusive lock
+     * Only one user can edit at a time
+     */
     Pessimistic = "PESSIMISTIC",
-    /** Shared read lock - multiple readers allowed Prevents writes while reads are ongoing */
+    /**
+     * Shared read lock - multiple readers allowed
+     * Prevents writes while reads are ongoing
+     */
     Shared = "SHARED"
 }
 export declare enum LogAction {
@@ -18554,7 +18615,10 @@ export type MessageFilter = {
     toDate?: InputMaybe<Scalars['DateTime']['input']>;
     types?: InputMaybe<Array<MessageType>>;
 };
-/** Message permissions for the current user Calculated based on conversation membership, role, and settings */
+/**
+ * Message permissions for the current user
+ * Calculated based on conversation membership, role, and settings
+ */
 export type MessagePermissions = {
     __typename?: 'MessagePermissions';
     canDelete: Scalars['Boolean']['output'];
@@ -18994,7 +19058,16 @@ export type Mutation = {
     addTrackingEvent: TrackingEvent;
     /** Add a vibe to a catalog */
     addVibeToVibecontrolsCatalog: VibecontrolsCatalogVibe;
-    /** Zero-config agent onboarding. Probes the agent via tunnelUrl + apiKey, then chains registerOrUpdateAgent + setupAgentGatewayAuth + pushAgentGatewayAuth in a single mutation so the operator only needs to paste the tunnel URL and the agent's API key shown in its startup banner. On success the agent transitions from 'awaiting-config' to 'ready' inside the POST /api/agent/gateway-auth call invoked during push — so by the time this mutation returns, the agent is fully functional. */
+    /**
+     * Zero-config agent onboarding. Probes the agent via tunnelUrl + apiKey, then
+     * chains registerOrUpdateAgent + setupAgentGatewayAuth + pushAgentGatewayAuth
+     * in a single mutation so the operator only needs to paste the tunnel URL and
+     * the agent's API key shown in its startup banner.
+     *
+     * On success the agent transitions from 'awaiting-config' to 'ready' inside
+     * the POST /api/agent/gateway-auth call invoked during push — so by the time
+     * this mutation returns, the agent is fully functional.
+     */
     addVibecontrolsAgentFromTunnel: AddAgentFromTunnelResult;
     /** Add a new metric to a scorecard */
     addVibecontrolsScorecardMetric: VibecontrolsScorecardMetric;
@@ -19007,9 +19080,17 @@ export type Mutation = {
      */
     addWorkspaceMember: WorkspaceMember;
     adjustInventoryStock: InventoryItem;
-    /** Adopt an orphan agent session. Creates a Session row tracking the existing daemon-side session (tmux/wezterm/zellij) and starts a web terminal so the UI can attach. Idempotent — calling twice returns the same row. */
+    /**
+     * Adopt an orphan agent session. Creates a Session row tracking the
+     * existing daemon-side session (tmux/wezterm/zellij) and starts a web
+     * terminal so the UI can attach. Idempotent — calling twice returns
+     * the same row.
+     */
     adoptAgentSession: Session;
-    /** Proxy a mutating AI request to an agent via the backend. Path must start with /api/ai/. */
+    /**
+     * Proxy a mutating AI request to an agent via the backend.
+     * Path must start with /api/ai/.
+     */
     agentAiMutate: AgentProxyResponse;
     approveExpense: ExpenseEntry;
     approveRequest: TimeApprovalRequest;
@@ -19071,7 +19152,11 @@ export type Mutation = {
     /** Bulk assign a role to multiple actors */
     bulkAssignRole: Scalars['Int']['output'];
     bulkAssignTags: Array<UniversalTagAssignment>;
-    /** Assign N tags across M entities in one round-trip; server applies the cartesian product (tagIds × targets). Replaces the per-entity loop the bulk-operations UI used to do client-side. */
+    /**
+     * Assign N tags across M entities in one round-trip; server applies the
+     * cartesian product (tagIds × targets). Replaces the per-entity loop the
+     * bulk-operations UI used to do client-side.
+     */
     bulkAssignTagsToEntities: Array<UniversalTagAssignment>;
     bulkCreateAllocations: Array<ResourceAllocation>;
     bulkCreateEmailTimeEntries: Array<EmailTimeEntry>;
@@ -19173,7 +19258,10 @@ export type Mutation = {
     categorizeApplication: Array<ApplicationUsage>;
     chatWithAgent: ChatResponse;
     checkInToEvent: EventAttendee;
-    /** Check health of all running sessions by verifying them with their agents. Updates status of dead sessions. Returns summary of the check. */
+    /**
+     * Check health of all running sessions by verifying them with their agents.
+     * Updates status of dead sessions. Returns summary of the check.
+     */
     checkSessionHealth: SessionHealthCheckResult;
     /** Clean up expired batch downloads (admin) */
     cleanupExpiredBatchDownloads: Scalars['Int']['output'];
@@ -19206,9 +19294,19 @@ export type Mutation = {
     confirmBooking: Booking;
     connectAgentToTarget: AgentConnection;
     connectExternalCalendar: ExternalCalendarSync;
-    /** Anonymise the subject's conversations data. With dryRun=true, returns counts without mutating. Message bodies are RETAINED for thread integrity; senderId / mention / reaction / read-receipt records keyed to the subject are anonymised or deleted. Reported back via `retainedForLegalReason: "thread-integrity"`. */
+    /**
+     * Anonymise the subject's conversations data. With dryRun=true, returns
+     * counts without mutating. Message bodies are RETAINED for thread
+     * integrity; senderId / mention / reaction / read-receipt records keyed
+     * to the subject are anonymised or deleted. Reported back via
+     * `retainedForLegalReason: "thread-integrity"`.
+     */
     conversationsEraseSubject: ConversationsEraseResult;
-    /** Export the subject's conversations data: messages authored, conversation memberships, mentions of the subject, reactions, poll votes, call participations, comment activity. Attachments listed by reference only. */
+    /**
+     * Export the subject's conversations data: messages authored, conversation
+     * memberships, mentions of the subject, reactions, poll votes, call
+     * participations, comment activity. Attachments listed by reference only.
+     */
     conversationsExportSubject: Scalars['JSON']['output'];
     /** Convert a lead into a deal */
     convertHeadshotmarketingLead: HeadshotmarketingDeal;
@@ -19240,7 +19338,10 @@ export type Mutation = {
     createAppTemplate: AppTemplate;
     createAsset: Asset;
     createAvailabilityRule: AvailabilityRule;
-    /** Create a new batch download Initiates ZIP archive creation */
+    /**
+     * Create a new batch download
+     * Initiates ZIP archive creation
+     */
     createBatchDownload: CreateBatchDownloadResponse;
     /** Create a new BigConsole dashboard */
     createBigConsoleDashboard: Dashboard;
@@ -19277,7 +19378,11 @@ export type Mutation = {
     createCollectionFromTemplate: Collection;
     createConnection: IntegrationConnection;
     createConversation: CreateConversationPayload;
-    /** Submit an export job for workspace conversations + messages through the central `wspace-export-svc`. The legacy `exportEntityComments` mutation is deprecated in favour of this canonical entry point. */
+    /**
+     * Submit an export job for workspace conversations + messages through
+     * the central `wspace-export-svc`. The legacy `exportEntityComments`
+     * mutation is deprecated in favour of this canonical entry point.
+     */
     createConversationsExportJob: ConversationsExportJobResponse;
     createCrewAnnouncement: CrewAnnouncement;
     createCrewCandidate: CrewCandidate;
@@ -19321,7 +19426,12 @@ export type Mutation = {
     createExportTemplate: ExportTemplate;
     /** Create a new version from current file state */
     createFileVersion: FileVersion;
-    /** Create an export job for workspace files. The export service will asynchronously build a ZIP archive containing all files metadata (and optionally media) in the requested format. Poll the export service for job completion and download URL. */
+    /**
+     * Create an export job for workspace files.
+     * The export service will asynchronously build a ZIP archive containing
+     * all files metadata (and optionally media) in the requested format.
+     * Poll the export service for job completion and download URL.
+     */
     createFilesExportJob: ExportJobResponse;
     /** Create a new filter preset */
     createFilterPreset: FilterPreset;
@@ -19497,7 +19607,11 @@ export type Mutation = {
     createTagRule: UniversalTagRule;
     createTagSegment: UniversalTagSegment;
     createTagTranslation: UniversalTagTranslation;
-    /** Submit an export job for workspace tags + vocabularies through the central `wspace-export-svc`. Returns the job descriptor; the caller polls the export service for completion and download URL. */
+    /**
+     * Submit an export job for workspace tags + vocabularies through the
+     * central `wspace-export-svc`. Returns the job descriptor; the caller
+     * polls the export service for completion and download URL.
+     */
     createTagsExportJob: TagsExportJobResponse;
     createTarget: Target;
     createTask: Task;
@@ -19801,7 +19915,10 @@ export type Mutation = {
     deleteTimeEntry: TimeEntry;
     /** Soft-delete a tunnel (stops it first if active, then sets deletedAt). */
     deleteTunnel: Scalars['Boolean']['output'];
-    /** Delete a domain record. Must be detached first (unless it's a managed subdomain never attached to anything). */
+    /**
+     * Delete a domain record. Must be detached first (unless it's a managed
+     * subdomain never attached to anything).
+     */
     deleteTunnelDomain: Scalars['Boolean']['output'];
     deleteVault: Scalars['Boolean']['output'];
     deleteVaultIntegration: Scalars['Boolean']['output'];
@@ -19876,7 +19993,12 @@ export type Mutation = {
     enableMaintenanceMode: MaintenanceModeStatus;
     enableProvider: IntegrationProvider;
     endCall: CallSession;
-    /** Erase the subject's files-layer data. With dryRun=true, returns counts without mutating. Files owned by the subject are tombstoned (soft-deleted) and their S3 objects scheduled for purge. File rows that have legal-hold flags are retained and reported in `retainedForLegalReason`. */
+    /**
+     * Erase the subject's files-layer data. With dryRun=true, returns counts
+     * without mutating. Files owned by the subject are tombstoned (soft-deleted)
+     * and their S3 objects scheduled for purge. File rows that have legal-hold
+     * flags are retained and reported in `retainedForLegalReason`.
+     */
     eraseSubject: FilesEraseResult;
     eventfullyManagedCreateAttendee: EventfullyManagedAttendee;
     eventfullyManagedCreateCheckInRecord: EventfullyManagedCheckInRecord;
@@ -20055,7 +20177,10 @@ export type Mutation = {
     executeParser: ParserExecutionResult;
     executePipeline: PipelineExecution;
     executePromptNow: PromptResult;
-    /** Execute a button via share token (PUBLIC — no auth required). Only works if the share link has EXECUTE permission. */
+    /**
+     * Execute a button via share token (PUBLIC — no auth required).
+     * Only works if the share link has EXECUTE permission.
+     */
     executeSharedVibeDeckButton: VibeDeckButtonExecution;
     executeVibeDeckButton: VibeDeckButtonExecution;
     /**
@@ -20070,7 +20195,12 @@ export type Mutation = {
     /** @deprecated Use `createGroupsExportJob` (delegates to wspace-export-svc) for workspace-scoped exports. This single-group helper will be removed in a future release. */
     exportGroupData: GroupExportResult;
     exportSandboxes: SandboxExportJob;
-    /** Export the subject's files-layer data: owned files (with metadata, versions, tags), folders, file-shares granted by the subject. Object storage payloads are listed by S3 key but not inlined; the privacy-svc orchestrator includes them via signed URLs in the final DSAR bundle. */
+    /**
+     * Export the subject's files-layer data: owned files (with metadata,
+     * versions, tags), folders, file-shares granted by the subject. Object
+     * storage payloads are listed by S3 key but not inlined; the privacy-svc
+     * orchestrator includes them via signed URLs in the final DSAR bundle.
+     */
     exportSubject: Scalars['JSON']['output'];
     /** Export audit logs matching the filter as CSV or JSON */
     exportVibeAuditLogs: VibeAuditLogExport;
@@ -20258,18 +20388,31 @@ export type Mutation = {
      */
     initializeWorkspaceRoles: InitializeWorkspaceRolesResult;
     initiateOAuth: OAuthInitiationResult;
-    /** Initiate a new upload session Returns session details and initial presigned URLs */
+    /**
+     * Initiate a new upload session
+     * Returns session details and initial presigned URLs
+     */
     initiateUpload: UploadSessionWithUrls;
     /** Install an action from the store (creates a local instance) */
     installActionFromStore: Action;
     installAgentOnTarget: InstallJob;
-    /** Install a plugin on an agent. The backend proxies the request to the agent's REST API (POST /api/plugins/install). */
+    /**
+     * Install a plugin on an agent. The backend proxies the request
+     * to the agent's REST API (POST /api/plugins/install).
+     */
     installAgentPlugin: AgentPluginActionResult;
     installApp: AppInstallation;
     installNode: WorkspaceNodeInstallation;
     installPackage: InstalledPackage;
     installProviderPlugin: IntegrationProvider;
-    /** Install a plugin on an agent sourced from the Burdenoff store. Bridges store-svc ↔ vibecontrols-agent: the backend validates the caller's entitlement via store-svc, reads the product manifest for the npm package name + version, then calls the agent's /api/plugins/install endpoint. Records an AppInstallation in store-svc on success. */
+    /**
+     * Install a plugin on an agent sourced from the Burdenoff store.
+     *
+     * Bridges store-svc ↔ vibecontrols-agent: the backend validates the caller's
+     * entitlement via store-svc, reads the product manifest for the npm package
+     * name + version, then calls the agent's /api/plugins/install endpoint.
+     * Records an AppInstallation in store-svc on success.
+     */
     installStorePluginOnAgent: AgentPluginActionResult;
     /**
      * Install an app in one or more workspaces
@@ -20289,7 +20432,11 @@ export type Mutation = {
     invest: KadaikodiInvestment;
     inviteToGroup: InviteResult;
     invokeSlashCommand: InvokeSlashCommandPayload;
-    /** Issue a short-lived session token for a tunnel. The token is returned exactly once and grants the agent the right to connect its provider subprocess to the tunnel server. */
+    /**
+     * Issue a short-lived session token for a tunnel. The token is returned
+     * exactly once and grants the agent the right to connect its provider
+     * subprocess to the tunnel server.
+     */
     issueTunnelSession: TunnelSessionIssueResult;
     /**
      * Issue a workspace token for the authenticated user.
@@ -20350,7 +20497,14 @@ export type Mutation = {
     muteConversation: ConversationMembership;
     notifyTagAssigned: Scalars['Boolean']['output'];
     notifyTagRemoved: Scalars['Boolean']['output'];
-    /** Notify-on-change hook for plugin lifecycle events. Called by the agent's plugin-mgr immediately after install/remove/reload so the vibecontrolsAgentPluginStream subscription publishes within ms instead of waiting for the next 30s server-side poll. The agent authenticates with its agentApiKey; the svc validates and forwards the new installed-list to the GraphQL pubsub topic for that workspace+agent. */
+    /**
+     * Notify-on-change hook for plugin lifecycle events. Called by the agent's
+     * plugin-mgr immediately after install/remove/reload so the
+     * vibecontrolsAgentPluginStream subscription publishes within ms instead of
+     * waiting for the next 30s server-side poll. The agent authenticates with
+     * its agentApiKey; the svc validates and forwards the new installed-list
+     * to the GraphQL pubsub topic for that workspace+agent.
+     */
     notifyVibecontrolsAgentPluginChange: Scalars['Boolean']['output'];
     openCircuitBreaker: CircuitBreakerState;
     optimizeRoute: Route;
@@ -20593,7 +20747,11 @@ export type Mutation = {
     /** Publish a component as a reusable template (snapshots the component) */
     publishVibecontrolsComponentAsTemplate: VibecontrolsTemplate;
     publishWorkflow: WorkflowDefinition;
-    /** Push gateway auth configuration (OAuth2 credentials) to an agent. The backend proxies the request to the agent's REST API (POST /api/agent/gateway-auth). */
+    /**
+     * Push gateway auth configuration (OAuth2 credentials) to an agent.
+     * The backend proxies the request to the agent's REST API
+     * (POST /api/agent/gateway-auth).
+     */
     pushAgentGatewayAuth: AgentPluginActionResult;
     rateMeeting: MeetingMeta;
     /** Rate a template */
@@ -20606,7 +20764,18 @@ export type Mutation = {
      * Workspace ID is read from gateway context (x-workspace-id header).
      */
     recalculateWorkspaceUsage: WorkspaceResourceUsage;
-    /** Receive a message from an external channel platform (Slack, Teams, WhatsApp, etc.) Called by module-channel-svc via API Gateway when webhook events are received. This mutation will: - Find existing conversation by channelId + externalThreadId, or create new one - Create the message with EXTERNAL author type - Handle deduplication by channelMessageId - Return conversation and message IDs Follows spec: 01-scope-boundaries.md (lines 374-407) */
+    /**
+     * Receive a message from an external channel platform (Slack, Teams, WhatsApp, etc.)
+     * Called by module-channel-svc via API Gateway when webhook events are received.
+     *
+     * This mutation will:
+     * - Find existing conversation by channelId + externalThreadId, or create new one
+     * - Create the message with EXTERNAL author type
+     * - Handle deduplication by channelMessageId
+     * - Return conversation and message IDs
+     *
+     * Follows spec: 01-scope-boundaries.md (lines 374-407)
+     */
     receiveChannelMessage: ReceiveChannelMessagePayload;
     recordAIPromptUsage: AiPrompt;
     /** Record multiple activities in batch */
@@ -20644,7 +20813,10 @@ export type Mutation = {
      * Creates a new generation based on an existing one.
      */
     regenerateDashboard: PromptGeneration;
-    /** Register a user-owned custom domain. Returns the domain with a challenge token; the user must create a TXT record before verification can succeed. */
+    /**
+     * Register a user-owned custom domain. Returns the domain with a challenge
+     * token; the user must create a TXT record before verification can succeed.
+     */
     registerCustomTunnelDomain: TunnelDomain;
     registerDocsBuildImage: VibecontrolsDocsBuildImage;
     /**
@@ -20654,7 +20826,10 @@ export type Mutation = {
      * This prevents duplicate agent records when agents restart.
      */
     registerEventfullymanagedAgent: EventfullymanagedAgent;
-    /** Auto-register a remotely installed agent in the backend. Called after installAgentOnTarget completes to create the agent record. */
+    /**
+     * Auto-register a remotely installed agent in the backend.
+     * Called after installAgentOnTarget completes to create the agent record.
+     */
     registerInstalledAgent: VibecontrolsAgent;
     registerIoTDevice: IoTDevice;
     registerNode: NodeEndpointConfig;
@@ -20666,7 +20841,12 @@ export type Mutation = {
     registerResource: Resource;
     /** Register an uploaded part */
     registerUploadedPart: UploadPartResponse;
-    /** Register or update an agent by hostname (upsert). If an active (non-deleted) agent with the given hostname exists in the workspace, it is updated with the new data. Otherwise a new agent is created. This prevents duplicate agent records when agents restart. */
+    /**
+     * Register or update an agent by hostname (upsert).
+     * If an active (non-deleted) agent with the given hostname exists in the workspace,
+     * it is updated with the new data. Otherwise a new agent is created.
+     * This prevents duplicate agent records when agents restart.
+     */
     registerVibecontrolsAgent: VibecontrolsAgent;
     rejectExpense: ExpenseEntry;
     /**
@@ -20680,7 +20860,10 @@ export type Mutation = {
     releaseFileLock: ReleaseLockResponse;
     /** Release control of a session */
     releaseSessionControl: Scalars['Boolean']['output'];
-    /** Remove a plugin from an agent. The backend proxies the request to the agent's REST API (POST /api/plugins/remove). */
+    /**
+     * Remove a plugin from an agent. The backend proxies the request
+     * to the agent's REST API (POST /api/plugins/remove).
+     */
     removeAgentPlugin: AgentPluginActionResult;
     removeAllTagsFromEntity: Scalars['Boolean']['output'];
     removeAttendee: Scalars['Boolean']['output'];
@@ -20775,7 +20958,10 @@ export type Mutation = {
      * Workspace scope is read from gateway context (x-workspace-id header).
      */
     resendInvitation: Invitation;
-    /** Reserve a managed subdomain under *.vibetunnels.com. The domain is created in VERIFIED state and can be attached immediately. */
+    /**
+     * Reserve a managed subdomain under *.vibetunnels.com. The domain is
+     * created in VERIFIED state and can be attached immediately.
+     */
     reserveTunnelSubdomain: TunnelDomain;
     resetCircuitBreaker: CircuitBreakerState;
     /**
@@ -20783,9 +20969,23 @@ export type Mutation = {
      * Workspace ID is read from gateway context (x-workspace-id header).
      */
     resetMonthlyUsage: WorkspaceResourceUsage;
-    /** Reset settings for a category back to defaults. For user-scoped categories, deletes the user's overrides. For workspace-scoped categories, deletes the workspace overrides. */
+    /**
+     * Reset settings for a category back to defaults.
+     * For user-scoped categories, deletes the user's overrides.
+     * For workspace-scoped categories, deletes the workspace overrides.
+     */
     resetSettings: Scalars['Boolean']['output'];
-    /** Wipe the agent's local state via POST /api/agent/reset on the agent. Deletes config.json, the encrypted Skalex DB, logs, and the plugins manifest, then transitions the agent back to 'awaiting-config' WITHOUT exiting the process — HTTP server + tunnel stay alive so the platform can re-onboard via addVibecontrolsAgentFromTunnel. Returns the new agent API key generated during reset; the platform must rotate its stored agentApiKey to the returned value before re-onboarding, otherwise subsequent calls will get 401. */
+    /**
+     * Wipe the agent's local state via POST /api/agent/reset on the agent.
+     * Deletes config.json, the encrypted Skalex DB, logs, and the plugins
+     * manifest, then transitions the agent back to 'awaiting-config' WITHOUT
+     * exiting the process — HTTP server + tunnel stay alive so the platform
+     * can re-onboard via addVibecontrolsAgentFromTunnel.
+     *
+     * Returns the new agent API key generated during reset; the platform must
+     * rotate its stored agentApiKey to the returned value before re-onboarding,
+     * otherwise subsequent calls will get 401.
+     */
     resetVibecontrolsAgent: ResetAgentResult;
     /** Reset webhook failure count */
     resetWebhookFailures: Webhook;
@@ -20797,7 +20997,10 @@ export type Mutation = {
     respondToReview: KadaikodiReview;
     /** Restart a session */
     restartSession: Session;
-    /** Restart the terminal (stop + start session provider + ttyd) for a session. Use this to recover from dead/orphaned tunnels. */
+    /**
+     * Restart the terminal (stop + start session provider + ttyd) for a session.
+     * Use this to recover from dead/orphaned tunnels.
+     */
     restartSessionTerminal: Session;
     /** Restart a resource */
     restartWorkspaceResource: WorkspaceResource;
@@ -20874,7 +21077,10 @@ export type Mutation = {
     rollbackSecret: Secret;
     rotateEncryptionKey: EncryptionKey;
     rotateSecret: Secret;
-    /** Rotate tunnel credentials (basic auth password, provider secrets). Active sessions are revoked; caller must re-issue. */
+    /**
+     * Rotate tunnel credentials (basic auth password, provider secrets). Active
+     * sessions are revoked; caller must re-issue.
+     */
     rotateTunnelCredentials: Tunnel;
     /**
      * Rotate the workspace secret. Old secret remains valid during grace period.
@@ -20887,9 +21093,16 @@ export type Mutation = {
     saveTimeCampusUISession: TimeCampusUiSession;
     /** Save UI session */
     saveUISession: UiSession;
-    /** Re-run the Trivy CVE scan for an existing image without touching APPROVED state. Returns the row in SCANNING; transitions to PASSED/FAILED happen out-of-band. */
+    /**
+     * Re-run the Trivy CVE scan for an existing image without touching APPROVED
+     * state. Returns the row in SCANNING; transitions to PASSED/FAILED happen
+     * out-of-band.
+     */
     scanDocsBuildImage: VibecontrolsDocsBuildImage;
-    /** Scan SSH config on an agent's environment and return discovered hosts. If configPath is omitted, defaults to ~/.ssh/config. */
+    /**
+     * Scan SSH config on an agent's environment and return discovered hosts.
+     * If configPath is omitted, defaults to ~/.ssh/config.
+     */
     scanSSHConfig: SshConfigScanResult;
     /** Schedule a comment for future posting */
     scheduleComment: ScheduledComment;
@@ -20926,7 +21139,10 @@ export type Mutation = {
      */
     setDefaultFilterPreset: FilterPreset;
     setDefaultVibeDeck: VibeDeck;
-    /** Promote a profile to be the agent's default. The previously-default profile is demoted in the same transaction. */
+    /**
+     * Promote a profile to be the agent's default. The previously-default
+     * profile is demoted in the same transaction.
+     */
     setDefaultVibecontrolsAgentProfile: VibecontrolsAgentProfile;
     /** Set a view as the default */
     setDefaultView: DashboardView;
@@ -20938,14 +21154,28 @@ export type Mutation = {
     setNodeStatus: NodeEndpointConfig;
     /** Set default permission level for a role on a resource type */
     setRoleDefaultPermission: Role;
-    /** Set or update a settings secret value. Secret values are stored encrypted and never returned in full. */
+    /**
+     * Set or update a settings secret value.
+     * Secret values are stored encrypted and never returned in full.
+     */
     setSettingsSecret: SettingsSecret;
     setTimeCampusConfiguration: TimeCampusConfiguration;
-    /** Toggle a single per-vibe feature flag. Persists on the vibe so all viewers see the same enabled/disabled state. The `featureId` must be a known entry in `vibeFeatureCatalog`. */
+    /**
+     * Toggle a single per-vibe feature flag. Persists on the vibe so all viewers
+     * see the same enabled/disabled state. The `featureId` must be a known entry
+     * in `vibeFeatureCatalog`.
+     */
     setVibeFeatureFlag: Vibe;
     /** Enable or disable an installed workspace app */
     setWorkspaceAppEnabled: WorkspaceInstalledApp;
-    /** Set up gateway auth for an agent end-to-end: 1. Creates OAuth app in auth-svc (via internal global gateway) 2. Creates devportal Application linked to the OAuth app 3. Stores appId/appClientId on the agent record 4. Pushes OAuth credentials to the agent via REST proxy Returns the agent with credentials (clientSecret shown once). */
+    /**
+     * Set up gateway auth for an agent end-to-end:
+     * 1. Creates OAuth app in auth-svc (via internal global gateway)
+     * 2. Creates devportal Application linked to the OAuth app
+     * 3. Stores appId/appClientId on the agent record
+     * 4. Pushes OAuth credentials to the agent via REST proxy
+     * Returns the agent with credentials (clientSecret shown once).
+     */
     setupAgentGatewayAuth: SetupAgentGatewayAuthResult;
     shareCalendar: CalendarShare;
     /** Share collection with users */
@@ -20961,14 +21191,23 @@ export type Mutation = {
     startPomodoroSession: PomodoroSession;
     /** Start a session */
     startSession: Session;
-    /** Start a terminal (session provider + ttyd + tunnel) for a session. Calls the agent API server-side, starts ttyd, and saves the tunnel URL as ttydUrl. */
+    /**
+     * Start a terminal (session provider + ttyd + tunnel) for a session.
+     * Calls the agent API server-side, starts ttyd, and saves the tunnel URL as ttydUrl.
+     */
     startSessionTerminal: Session;
     startTerminal: TerminalResult;
     startTimer: TimeEntry;
-    /** Transition a tunnel to ACTIVE: issues a session, instructs the agent to spawn the provider subprocess, registers the managed DNS record if any. */
+    /**
+     * Transition a tunnel to ACTIVE: issues a session, instructs the agent to
+     * spawn the provider subprocess, registers the managed DNS record if any.
+     */
     startTunnel: Tunnel;
     startTyping: Scalars['Boolean']['output'];
-    /** Start an agent process via the backend proxy. Calls POST /api/agent/lifecycle/start on the agent. */
+    /**
+     * Start an agent process via the backend proxy.
+     * Calls POST /api/agent/lifecycle/start on the agent.
+     */
     startVibecontrolsAgent: AgentLifecycleActionResult;
     /** Start a stopped or inactive resource */
     startWorkspaceResource: WorkspaceResource;
@@ -20978,14 +21217,23 @@ export type Mutation = {
     stopSandbox: Sandbox;
     /** Stop a session */
     stopSession: Session;
-    /** Stop the terminal (ttyd + session provider) for a session. Clears ttydUrl and sets session status to STOPPED. */
+    /**
+     * Stop the terminal (ttyd + session provider) for a session.
+     * Clears ttydUrl and sets session status to STOPPED.
+     */
     stopSessionTerminal: Session;
     stopTerminal: Scalars['Boolean']['output'];
     stopTimer: TimeEntry;
-    /** Transition a tunnel to STOPPED: gracefully stops the provider subprocess on the agent and clears the managed DNS record. */
+    /**
+     * Transition a tunnel to STOPPED: gracefully stops the provider subprocess
+     * on the agent and clears the managed DNS record.
+     */
     stopTunnel: Tunnel;
     stopTyping: Scalars['Boolean']['output'];
-    /** Stop an agent process via the backend proxy. Calls POST /api/agent/lifecycle/stop on the agent. */
+    /**
+     * Stop an agent process via the backend proxy.
+     * Calls POST /api/agent/lifecycle/stop on the agent.
+     */
     stopVibecontrolsAgent: AgentLifecycleActionResult;
     /** Stop a running resource */
     stopWorkspaceResource: WorkspaceResource;
@@ -21331,7 +21579,10 @@ export type Mutation = {
     updateNodeEndpoint: NodeEndpointConfig;
     /** Update an existing note */
     updateNote: VibecontrolsNote;
-    /** Update user notification preferences. Merges provided fields with existing values. */
+    /**
+     * Update user notification preferences.
+     * Merges provided fields with existing values.
+     */
     updateNotificationPreferences: NotificationPreferences;
     updateNotificationSettings: ConversationMembership;
     updateOffering: KadaikodiOffering;
@@ -21345,11 +21596,17 @@ export type Mutation = {
     updatePolicyReference: PolicyReference;
     updatePomodoroGoal: PomodoroGoal;
     updatePomodoroSettings: PomodoroSettings;
-    /** Update user UI preferences. Merges provided fields with existing values. */
+    /**
+     * Update user UI preferences.
+     * Merges provided fields with existing values.
+     */
     updatePreferences: UserPreferences;
     updatePresence: Presence;
     updateProduct: Product;
-    /** Update user profile settings. Merges provided fields with existing values. */
+    /**
+     * Update user profile settings.
+     * Merges provided fields with existing values.
+     */
     updateProfile: UserProfile;
     /** Update an existing project */
     updateProject: Project;
@@ -21458,7 +21715,10 @@ export type Mutation = {
     updateWorkflowScheduledJob: ScheduledJobResponse;
     /** Update an existing workspace */
     updateWorkspace: Workspace;
-    /** Update workspace-level defaults. Requires admin permission. Merges provided fields with existing values. */
+    /**
+     * Update workspace-level defaults.
+     * Requires admin permission. Merges provided fields with existing values.
+     */
     updateWorkspaceDefaults: WorkspaceDefaults;
     /** Update an installed workspace app */
     updateWorkspaceInstalledApp: WorkspaceInstalledApp;
@@ -21482,7 +21742,10 @@ export type Mutation = {
     /** Create or update a scorecard for an entity */
     upsertVibecontrolsScorecard: VibecontrolsScorecard;
     validateDocsBuildImage: VibecontrolsDocsBuildImage;
-    /** Force an immediate verification attempt for a custom domain. Normally the background worker polls every 15s; this lets the user retry on-demand. */
+    /**
+     * Force an immediate verification attempt for a custom domain. Normally the
+     * background worker polls every 15s; this lets the user retry on-demand.
+     */
     verifyTunnelDomain: TunnelDomain;
     /** Send heartbeat to mark agent as active */
     vibecontrolsAgentHeartbeat: VibecontrolsAgent;
@@ -32958,7 +33221,10 @@ export type NoteAnalytics = {
     total: Scalars['Int']['output'];
     unpinned: Scalars['Int']['output'];
 };
-/** A tag assignment linking a UniversalTag to a note. Delegated to wspace-tags-svc via the NoteTagAdapter. */
+/**
+ * A tag assignment linking a UniversalTag to a note.
+ * Delegated to wspace-tags-svc via the NoteTagAdapter.
+ */
 export type NoteTagAssignment = {
     __typename?: 'NoteTagAssignment';
     /** When the tag was assigned */
@@ -35807,7 +36073,10 @@ export type PushAgentGatewayAuthInput = {
     globalGatewayUrl: Scalars['String']['input'];
     /** OAuth2 scopes */
     scopes: Array<Scalars['String']['input']>;
-    /** Workspace gateway URL (public) — used by the agent for issueWorkspaceToken and the encryption-key fetch. Must be distinct from globalGatewayUrl. */
+    /**
+     * Workspace gateway URL (public) — used by the agent for issueWorkspaceToken
+     * and the encryption-key fetch. Must be distinct from globalGatewayUrl.
+     */
     workspaceGatewayUrl: Scalars['String']['input'];
     /** Workspace UUID — required for the agent's issueWorkspaceToken step. */
     workspaceId: Scalars['String']['input'];
@@ -35922,15 +36191,29 @@ export type Query = {
     adminAnalyticsModules: Array<AdminAnalyticsModuleSummary>;
     adminAnalyticsOverview: AdminAnalyticsOverview;
     adminAnalyticsTimeline: AdminAnalyticsTimelineResult;
-    /** Proxy a GET request to an agent AI API route via the backend. Path must start with /api/ai/. */
+    /**
+     * Proxy a GET request to an agent AI API route via the backend.
+     * Path must start with /api/ai/.
+     */
     agentAiGet: AgentProxyResponse;
     agentConnectionConfig: AgentConnectionConfig;
     agentGraph: AgentGraph;
-    /** Read the current lifecycle state of an agent via the backend proxy. Calls GET /api/agent/lifecycle/state on the agent. */
+    /**
+     * Read the current lifecycle state of an agent via the backend proxy.
+     * Calls GET /api/agent/lifecycle/state on the agent.
+     */
     agentLifecycleState: AgentLifecycleStateResult;
-    /** List installed and available plugins on an agent. The backend proxies requests to the agent's REST API. */
+    /**
+     * List installed and available plugins on an agent.
+     * The backend proxies requests to the agent's REST API.
+     */
     agentPlugins: AgentPluginListResult;
-    /** List `vibe-*` sessions on the agent host that are NOT currently tracked in agent storage. These are orphan tmux/wezterm/zellij sessions that survived an agent kill or storage wipe and can be reconnected via `adoptAgentSession`. */
+    /**
+     * List `vibe-*` sessions on the agent host that are NOT currently
+     * tracked in agent storage. These are orphan tmux/wezterm/zellij
+     * sessions that survived an agent kill or storage wipe and can be
+     * reconnected via `adoptAgentSession`.
+     */
     agentSessionOrphans: Array<AgentSessionOrphan>;
     /** Get aggregated metrics for a resource */
     aggregatedResourceMetrics: AggregatedMetricResult;
@@ -36050,7 +36333,10 @@ export type Query = {
     discoveryJobs: Array<DiscoveryJob>;
     docsBuildImage?: Maybe<VibecontrolsDocsBuildImage>;
     docsBuildImages: VibecontrolsDocsBuildImageList;
-    /** Get rendered docs HTML content for a specific file path. Used by the frontend to render docs in an iframe via srcdoc. */
+    /**
+     * Get rendered docs HTML content for a specific file path.
+     * Used by the frontend to render docs in an iframe via srcdoc.
+     */
     docsContent?: Maybe<VibecontrolsDocsContentPayload>;
     /** Get a single docs page by ID */
     docsPage?: Maybe<VibecontrolsDocsPage>;
@@ -36348,7 +36634,10 @@ export type Query = {
     getEntitiesByTag: EntityList;
     getEntitiesByTags: EntityList;
     getEntityAuditTrail: Array<VaultAuditLog>;
-    /** Get a single comment by ID @rbac(public: true, scopeType: "wspace") */
+    /**
+     * Get a single comment by ID
+     *   @rbac(public: true, scopeType: "wspace")
+     */
     getEntityComment?: Maybe<EntityComment>;
     /** Get edit history for a comment */
     getEntityCommentEditHistory: Array<EntityCommentEdit>;
@@ -36910,7 +37199,10 @@ export type Query = {
     listSandboxTemplates: SandboxTemplateConfigList;
     listSandboxes: SandboxList;
     listServiceProviders: Array<KadaikodiServiceProvider>;
-    /** List all settings secrets for the current workspace. Returns keys and metadata, but values are redacted for security. */
+    /**
+     * List all settings secrets for the current workspace.
+     * Returns keys and metadata, but values are redacted for security.
+     */
     listSettingsSecrets: Array<SettingsSecret>;
     /** List dashboards shared with a user */
     listSharedWithMe: DashboardShareConnection;
@@ -36968,9 +37260,15 @@ export type Query = {
      * Use this for quick role checks without fetching full permissions.
      */
     myRoles: MyRolesResult;
-    /** Get all settings for the current user in this workspace. Returns a complete bundle with defaults for any missing values. */
+    /**
+     * Get all settings for the current user in this workspace.
+     * Returns a complete bundle with defaults for any missing values.
+     */
     mySettings: SettingsBundle;
-    /** Get settings for a specific category. Returns the typed settings object for that category. */
+    /**
+     * Get settings for a specific category.
+     * Returns the typed settings object for that category.
+     */
     mySettingsByCategory: Scalars['JSON']['output'];
     /**
      * Get workspaces for the current authenticated user
@@ -37135,9 +37433,16 @@ export type Query = {
     previewSchedule: SchedulePreview;
     /** Preview smart collection results without creating */
     previewSmartCollection: CollectionItemList;
-    /** Probe an existing agent's connectivity by its ID. Looks up the agent record and calls /health and /api/agent/identity. */
+    /**
+     * Probe an existing agent's connectivity by its ID.
+     * Looks up the agent record and calls /health and /api/agent/identity.
+     */
     probeAgentConnection: AgentProbeResult;
-    /** Probe an agent tunnel URL for health and identity. Used by the Add Agent wizard before the agent record exists. The backend calls /health and /api/agent/identity on the given URL. */
+    /**
+     * Probe an agent tunnel URL for health and identity.
+     * Used by the Add Agent wizard before the agent record exists.
+     * The backend calls /health and /api/agent/identity on the given URL.
+     */
     probeAgentTunnel: AgentProbeResult;
     problems: Array<Problem>;
     product?: Maybe<Product>;
@@ -37289,7 +37594,10 @@ export type Query = {
     sessions: SessionList;
     /** Get sessions shared with the current user */
     sessionsSharedWithMe: SessionShareConnection;
-    /** Get a shared VibeDeck by token (PUBLIC — no auth required). Returns sanitized deck data if the token is valid. */
+    /**
+     * Get a shared VibeDeck by token (PUBLIC — no auth required).
+     * Returns sanitized deck data if the token is valid.
+     */
     sharedVibeDeck?: Maybe<SharedVibeDeck>;
     shipment?: Maybe<Shipment>;
     shipmentTracking: Array<TrackingEvent>;
@@ -37337,7 +37645,10 @@ export type Query = {
     traverseGraph: Array<GraphPath>;
     /** Get a specific tunnel by ID. */
     tunnel?: Maybe<Tunnel>;
-    /** Audit log entries scoped to a tunnel. Returns entries from the shared AuditLog table filtered by resource type TUNNEL / TUNNEL_DOMAIN / TUNNEL_SESSION. */
+    /**
+     * Audit log entries scoped to a tunnel. Returns entries from the shared
+     * AuditLog table filtered by resource type TUNNEL / TUNNEL_DOMAIN / TUNNEL_SESSION.
+     */
     tunnelAudit: VibeAuditLogList;
     /** Get a tunnel by its workspace-unique slug. */
     tunnelBySlug?: Maybe<Tunnel>;
@@ -37384,7 +37695,10 @@ export type Query = {
     /** Validate a share link (public - for join page, requires login) */
     validateShareLink: ShareLinkValidation;
     validateTagAssignment: TagAssignmentValidation;
-    /** Validate a share link token (PUBLIC — no auth required). Returns whether the link is valid and what it grants. */
+    /**
+     * Validate a share link token (PUBLIC — no auth required).
+     * Returns whether the link is valid and what it grants.
+     */
     validateVibeDeckShareLink: VibeDeckShareLinkValidation;
     vehicle?: Maybe<Vehicle>;
     vehicles: Array<Vehicle>;
@@ -37411,23 +37725,48 @@ export type Query = {
     /** List share links for a specific vibe deck (owner-only) */
     vibeDeckShareLinks: Array<VibeDeckShareLink>;
     vibeDecks: VibeDeckConnection;
-    /** List the catalog of toggleable features that can be enabled/disabled per vibe. Drives the per-vibe feature toggles UI. */
+    /**
+     * List the catalog of toggleable features that can be enabled/disabled per vibe.
+     * Drives the per-vibe feature toggles UI.
+     */
     vibeFeatureCatalog: Array<VibeFeatureDefinition>;
     /** Get vibe hierarchy */
     vibeHierarchy: Array<Vibe>;
     /** Get specific agent by ID */
     vibecontrolsAgent?: Maybe<VibecontrolsAgent>;
-    /** Get the SQLite encryption key for agents in this workspace. One key per workspace regardless of number of agents. Key is auto-generated on first agent registration and stored encrypted in the vault. Agents call this on every startup using their OAuth2 credentials. */
+    /**
+     * Get the SQLite encryption key for agents in this workspace.
+     * One key per workspace regardless of number of agents.
+     * Key is auto-generated on first agent registration and stored encrypted in the vault.
+     * Agents call this on every startup using their OAuth2 credentials.
+     */
     vibecontrolsAgentEncryptionKey: Scalars['String']['output'];
-    /** Probe the health of all agents in the workspace. The backend calls each agent's /health endpoint and returns results. */
+    /**
+     * Probe the health of all agents in the workspace.
+     * The backend calls each agent's /health endpoint and returns results.
+     */
     vibecontrolsAgentHealthProbes: Array<AgentHealthProbeResult>;
-    /** Look up the current tunnel URL + a freshly-minted scoped peer key for a target agent. Used by another agent (the caller) to recover from rotation: when the caller's cached key/url stops working, it asks the platform for the latest values. The caller is identified via the authenticated context (clientId/secret OAuth session); RBAC checks that the caller has been granted peer access to the target. Returns null when the caller has no active grant or the target has no reachable tunnel. */
+    /**
+     * Look up the current tunnel URL + a freshly-minted scoped peer key for a
+     * target agent. Used by another agent (the caller) to recover from
+     * rotation: when the caller's cached key/url stops working, it asks the
+     * platform for the latest values. The caller is identified via the
+     * authenticated context (clientId/secret OAuth session); RBAC checks that
+     * the caller has been granted peer access to the target.
+     *
+     * Returns null when the caller has no active grant or the target has no
+     * reachable tunnel.
+     */
     vibecontrolsAgentNetworkLookup?: Maybe<VibecontrolsAgentNetworkLookupResult>;
     /** List the active (non-deleted) profiles hosted by an agent. */
     vibecontrolsAgentProfiles: Array<VibecontrolsAgentProfile>;
     /** Get all agents in a workspace. Supports optional pagination (limit/offset). */
     vibecontrolsAgents: Array<VibecontrolsAgent>;
-    /** Consolidated analytics for all VibeControls entities. Returns aggregated stats, breakdowns, and time-series data in a single query. Use the entityTypes filter to request only specific entity analytics. */
+    /**
+     * Consolidated analytics for all VibeControls entities.
+     * Returns aggregated stats, breakdowns, and time-series data in a single query.
+     * Use the entityTypes filter to request only specific entity analytics.
+     */
     vibecontrolsAnalytics: VibecontrolsAnalyticsResult;
     /** Get a specific catalog by ID */
     vibecontrolsCatalog?: Maybe<VibecontrolsCatalog>;
@@ -37444,7 +37783,17 @@ export type Query = {
     /** Get docs site by owner type and owner ID */
     vibecontrolsDocsSiteByOwner?: Maybe<VibecontrolsDocsSite>;
     vibecontrolsEntityTags: Array<EntityTagAssignment>;
-    /** Resolve a wspace-integrations-svc connection to a fresh access token for agent plugins. The agent calls this with its OAuth2 client-credential session (actor=app); this resolver re-issues the underlying `getConnectionToken` to integrations-svc as a service actor after validating workspace ownership. Plugins that need third-party credentials (AI provider keys, GitHub OAuth, Slack bot tokens, …) store a `connectionId` instead of raw secrets and call this to materialize a token at runtime. */
+    /**
+     * Resolve a wspace-integrations-svc connection to a fresh access token for
+     * agent plugins. The agent calls this with its OAuth2 client-credential
+     * session (actor=app); this resolver re-issues the underlying
+     * `getConnectionToken` to integrations-svc as a service actor after
+     * validating workspace ownership.
+     *
+     * Plugins that need third-party credentials (AI provider keys, GitHub
+     * OAuth, Slack bot tokens, …) store a `connectionId` instead of raw
+     * secrets and call this to materialize a token at runtime.
+     */
     vibecontrolsResolveIntegrationToken: VibecontrolsIntegrationTokenResult;
     /** Get a scorecard by owner type and owner ID */
     vibecontrolsScorecard?: Maybe<VibecontrolsScorecard>;
@@ -45129,7 +45478,11 @@ export type ReactionSummary = {
     emoji: Scalars['String']['output'];
     userIds: Array<Scalars['ID']['output']>;
 };
-/** Input for receiving a message from an external channel platform. Called by module-channel-svc when a webhook event is received. This follows the spec in 01-scope-boundaries.md (lines 374-407). */
+/**
+ * Input for receiving a message from an external channel platform.
+ * Called by module-channel-svc when a webhook event is received.
+ * This follows the spec in 01-scope-boundaries.md (lines 374-407).
+ */
 export type ReceiveChannelMessageInput = {
     /** File attachments from the platform */
     attachments?: InputMaybe<Array<ChannelAttachmentInput>>;
@@ -45766,17 +46119,26 @@ export type RequestAiPredictionInput = {
 };
 export type ReserveTunnelSubdomainInput = {
     environment: TunnelEnvironment;
-    /** The subdomain label (without the zone suffix). e.g. "demo" reserves "demo.vibetunnels.com" (or "demo.alpha.vibetunnels.com" for alpha). */
+    /**
+     * The subdomain label (without the zone suffix). e.g. "demo" reserves
+     * "demo.vibetunnels.com" (or "demo.alpha.vibetunnels.com" for alpha).
+     */
     label: Scalars['String']['input'];
 };
 /** Result of resetting an agent's local state. */
 export type ResetAgentResult = {
     __typename?: 'ResetAgentResult';
-    /** Updated agent record. `appId`/`appClientId` are cleared; tunnelUrl and agentApiKey are refreshed to the values the agent reports post-reset. */
+    /**
+     * Updated agent record. `appId`/`appClientId` are cleared; tunnelUrl
+     * and agentApiKey are refreshed to the values the agent reports post-reset.
+     */
     agent: VibecontrolsAgent;
     /** Error message if the agent rejected reset or was unreachable. */
     error?: Maybe<Scalars['String']['output']>;
-    /** Newly generated API key. The platform stored this on the agent record; return it once for operator audit so it can also be copied if needed. */
+    /**
+     * Newly generated API key. The platform stored this on the agent record;
+     * return it once for operator audit so it can also be copied if needed.
+     */
     newApiKey: Scalars['String']['output'];
     /** Whether reset succeeded end-to-end (agent reachable + wipe completed). */
     success: Scalars['Boolean']['output'];
@@ -47727,7 +48089,10 @@ export type ServiceProviderFilterInput = {
     search?: InputMaybe<Scalars['String']['input']>;
     type?: InputMaybe<Scalars['String']['input']>;
 };
-/** An interactive or background process running in a development environment. Sessions can be tmux sessions, SSH sessions, terminals, or custom processes. */
+/**
+ * An interactive or background process running in a development environment.
+ * Sessions can be tmux sessions, SSH sessions, terminals, or custom processes.
+ */
 export type Session = {
     __typename?: 'Session';
     /** Agent executing this session */
@@ -48162,7 +48527,10 @@ export type ShareVaultInput = {
     role: VaultMemberRole;
     vaultId: Scalars['ID']['input'];
 };
-/** A read-only representation of a VibeDeck for shared/public access. Exposes only safe fields — no commands, scripts, webhook URLs, or secrets. */
+/**
+ * A read-only representation of a VibeDeck for shared/public access.
+ * Exposes only safe fields — no commands, scripts, webhook URLs, or secrets.
+ */
 export type SharedVibeDeck = {
     __typename?: 'SharedVibeDeck';
     buttonSize?: Maybe<Scalars['String']['output']>;
@@ -48176,7 +48544,10 @@ export type SharedVibeDeck = {
     name: Scalars['String']['output'];
     permission: VibeDeckSharePermission;
 };
-/** A sanitized button representation for shared access. Only display metadata — no executable details exposed. */
+/**
+ * A sanitized button representation for shared access.
+ * Only display metadata — no executable details exposed.
+ */
 export type SharedVibeDeckButton = {
     __typename?: 'SharedVibeDeckButton';
     actionType: VibeDeckButtonActionType;
@@ -48731,7 +49102,10 @@ export type Subscription = {
     exportJobProgress: ExportJob;
     /** Subscribe to file deletion events */
     fileDeleted: FileDeletedEvent;
-    /** Subscribe to all file events in a workspace Real-time updates for file uploads, updates, deletions, etc. */
+    /**
+     * Subscribe to all file events in a workspace
+     * Real-time updates for file uploads, updates, deletions, etc.
+     */
     fileEvents: FileEventUnion;
     /** Subscribe to lock events for a specific file */
     fileLockChanged: FileLock;
@@ -48806,7 +49180,11 @@ export type Subscription = {
     presenceChanged: Presence;
     /** Subscribe to quota warnings for workspace */
     quotaWarning: QuotaWarningEvent;
-    /** Live stream of AI tool events for an agent. Emits the recent-events array (most recent first, capped at `limit`) on every new event so the UI can replace the polling query with a single subscription. */
+    /**
+     * Live stream of AI tool events for an agent. Emits the recent-events
+     * array (most recent first, capped at `limit`) on every new event so
+     * the UI can replace the polling query with a single subscription.
+     */
     recentAiToolEventsStream: Array<AiToolEvent>;
     reportRunUpdates: ReportRun;
     /**
@@ -48853,7 +49231,10 @@ export type Subscription = {
     userActivityUpdates: ActivityLog;
     /** Subscribe to when user is mentioned in comments */
     userMentioned: UserMentionedEvent;
-    /** Subscribe to real-time user presence on a file Useful for showing who's currently viewing/editing a file */
+    /**
+     * Subscribe to real-time user presence on a file
+     * Useful for showing who's currently viewing/editing a file
+     */
     userPresence: UserPresenceEvent;
     /** Real-time audit events for the workspace */
     vibeAuditLogCreated: VibeAuditLog;
@@ -48861,9 +49242,18 @@ export type Subscription = {
     vibeStatusChanged: Vibe;
     /** Subscribe to vibe updates */
     vibeUpdated: Vibe;
-    /** Stream of all agent health probe results for the workspace. Replaces client-side polling of vibecontrolsAgentHealthProbes — emits the full array each time any agent's health changes (or on a 30s heartbeat). */
+    /**
+     * Stream of all agent health probe results for the workspace. Replaces
+     * client-side polling of vibecontrolsAgentHealthProbes — emits the full
+     * array each time any agent's health changes (or on a 30s heartbeat).
+     */
     vibecontrolsAgentHealthProbeStream: Array<AgentHealthProbeResult>;
-    /** Stream of installed plugins on a single agent. Replaces FE polling of the `agentPlugins` query. The svc proxies the agent's /api/plugins every 30s server-side and emits the new list whenever it diverges from the last snapshot. Pass `agentId` to scope to one agent. */
+    /**
+     * Stream of installed plugins on a single agent. Replaces FE polling of
+     * the `agentPlugins` query. The svc proxies the agent's /api/plugins
+     * every 30s server-side and emits the new list whenever it diverges
+     * from the last snapshot. Pass `agentId` to scope to one agent.
+     */
     vibecontrolsAgentPluginStream: Array<AgentPlugin>;
     /** Subscribe to catalog updates */
     vibecontrolsCatalogUpdated: VibecontrolsCatalog;
@@ -49406,7 +49796,11 @@ export type TagAssignmentList = {
     __typename?: 'TagAssignmentList';
     hasMore: Scalars['Boolean']['output'];
     items: Array<UniversalTagAssignment>;
-    /** Opaque cursor pointing to the item immediately after the last item in `items`. Pass it back as `pagination.cursor` to fetch the next page. Null when `hasMore` is false. */
+    /**
+     * Opaque cursor pointing to the item immediately after the last item in
+     * `items`. Pass it back as `pagination.cursor` to fetch the next page.
+     * Null when `hasMore` is false.
+     */
     nextCursor?: Maybe<Scalars['String']['output']>;
     total: Scalars['Int']['output'];
 };
@@ -49534,7 +49928,11 @@ export type TagList = {
     __typename?: 'TagList';
     hasMore: Scalars['Boolean']['output'];
     items: Array<UniversalTag>;
-    /** Opaque cursor pointing to the item immediately after the last item in `items`. Pass it back as `pagination.cursor` to fetch the next page. Null when `hasMore` is false. */
+    /**
+     * Opaque cursor pointing to the item immediately after the last item in
+     * `items`. Pass it back as `pagination.cursor` to fetch the next page.
+     * Null when `hasMore` is false.
+     */
     nextCursor?: Maybe<Scalars['String']['output']>;
     total: Scalars['Int']['output'];
 };
@@ -50364,7 +50762,10 @@ export type TriggerWorkflowInput = {
     version: Scalars['String']['input'];
     workflowKey: Scalars['String']['input'];
 };
-/** A managed tunnel exposing a local service to the public internet. Tunnels are workspace-scoped and bound to an agent machine. */
+/**
+ * A managed tunnel exposing a local service to the public internet.
+ * Tunnels are workspace-scoped and bound to an agent machine.
+ */
 export type Tunnel = {
     __typename?: 'Tunnel';
     /** Currently active sessions for this tunnel. */
@@ -50400,16 +50801,31 @@ export type Tunnel = {
     updatedAt: Scalars['DateTime']['output'];
     workspaceId: Scalars['ID']['output'];
 };
-/** A domain attached to a tunnel. Either a managed subdomain under *.vibetunnels.com (auto-verified at reservation time) or a user-owned custom domain verified via a TXT record challenge. */
+/**
+ * A domain attached to a tunnel. Either a managed subdomain under
+ * *.vibetunnels.com (auto-verified at reservation time) or a user-owned custom
+ * domain verified via a TXT record challenge.
+ */
 export type TunnelDomain = {
     __typename?: 'TunnelDomain';
-    /** Name of the TXT record the user must create for verification (e.g. `_vibetunnels-challenge.example.com`). Only populated for CUSTOM domains in PENDING or VERIFYING state. */
+    /**
+     * Name of the TXT record the user must create for verification
+     * (e.g. `_vibetunnels-challenge.example.com`). Only populated for CUSTOM
+     * domains in PENDING or VERIFYING state.
+     */
     challengeRecordName?: Maybe<Scalars['String']['output']>;
-    /** Verification token value the user must put in the TXT record. Only returned while verification is still in progress — redacted after verification completes. */
+    /**
+     * Verification token value the user must put in the TXT record. Only
+     * returned while verification is still in progress — redacted after
+     * verification completes.
+     */
     challengeToken?: Maybe<Scalars['String']['output']>;
     createdAt: Scalars['DateTime']['output'];
     deletedAt?: Maybe<Scalars['DateTime']['output']>;
-    /** Suggested DNS target (CNAME) the user should point their custom domain at once verification is complete. */
+    /**
+     * Suggested DNS target (CNAME) the user should point their custom domain at
+     * once verification is complete.
+     */
     dnsTargetHint?: Maybe<Scalars['String']['output']>;
     environment?: Maybe<TunnelEnvironment>;
     hostname: Scalars['String']['output'];
@@ -50417,7 +50833,10 @@ export type TunnelDomain = {
     isPrimary: Scalars['Boolean']['output'];
     lastCheckError?: Maybe<Scalars['String']['output']>;
     lastCheckedAt?: Maybe<Scalars['DateTime']['output']>;
-    /** The tunnel this domain is attached to. Null for reserved-but-unattached domains. */
+    /**
+     * The tunnel this domain is attached to. Null for reserved-but-unattached
+     * domains.
+     */
     tunnel?: Maybe<Tunnel>;
     tunnelId?: Maybe<Scalars['ID']['output']>;
     type: TunnelDomainType;
@@ -50474,7 +50893,10 @@ export declare enum TunnelProtocol {
     Tcp = "TCP",
     Udp = "UDP"
 }
-/** A tunnel provider implementation. Seeded rows: VIBETUNNELS (frp-based) and CLOUDFLARE (cloudflared-based). */
+/**
+ * A tunnel provider implementation. Seeded rows: VIBETUNNELS (frp-based) and
+ * CLOUDFLARE (cloudflared-based).
+ */
 export type TunnelProvider = {
     __typename?: 'TunnelProvider';
     capabilities: TunnelProviderCapabilities;
@@ -50513,7 +50935,10 @@ export declare enum TunnelProviderKey {
     Cloudflare = "CLOUDFLARE",
     Vibetunnels = "VIBETUNNELS"
 }
-/** A single tunnel session lifetime. Represents one token-authenticated connection from the agent's provider subprocess to the tunnel server. */
+/**
+ * A single tunnel session lifetime. Represents one token-authenticated
+ * connection from the agent's provider subprocess to the tunnel server.
+ */
 export type TunnelSession = {
     __typename?: 'TunnelSession';
     agentId?: Maybe<Scalars['ID']['output']>;
@@ -50530,12 +50955,20 @@ export type TunnelSession = {
     revokedReason?: Maybe<Scalars['String']['output']>;
     shardId?: Maybe<Scalars['ID']['output']>;
     status: TunnelSessionStatus;
-    /** First 8 hex characters of the token hash — useful for UI identification without exposing the token itself. */
+    /**
+     * First 8 hex characters of the token hash — useful for UI identification
+     * without exposing the token itself.
+     */
     tokenFingerprint: Scalars['String']['output'];
     tunnelId: Scalars['ID']['output'];
     workspaceId: Scalars['ID']['output'];
 };
-/** Result of issuing a tunnel session. The token is returned exactly once — the backend stores only its sha256 hash. The agentConfigHint contains provider- specific connection metadata (frps address, proxy name, etc.) that the agent plugin uses to spawn frpc or cloudflared. */
+/**
+ * Result of issuing a tunnel session. The token is returned exactly once — the
+ * backend stores only its sha256 hash. The agentConfigHint contains provider-
+ * specific connection metadata (frps address, proxy name, etc.) that the agent
+ * plugin uses to spawn frpc or cloudflared.
+ */
 export type TunnelSessionIssueResult = {
     __typename?: 'TunnelSessionIssueResult';
     agentConfigHint: Scalars['JSON']['output'];
@@ -50555,7 +50988,10 @@ export declare enum TunnelSessionStatus {
     Issued = "ISSUED",
     Revoked = "REVOKED"
 }
-/** A tunnel server shard (e.g. an frps instance). Backends select a shard when issuing a session. */
+/**
+ * A tunnel server shard (e.g. an frps instance). Backends select a shard when
+ * issuing a session.
+ */
 export type TunnelShard = {
     __typename?: 'TunnelShard';
     capacity: Scalars['Int']['output'];
@@ -50615,7 +51051,10 @@ export type TypingIndicatorPayload = {
     isTyping: Scalars['Boolean']['output'];
     userId: Scalars['ID']['output'];
 };
-/** Persisted UI state for user sessions. Stores active vibe, panel layout, and user preferences. */
+/**
+ * Persisted UI state for user sessions.
+ * Stores active vibe, panel layout, and user preferences.
+ */
 export type UiSession = {
     __typename?: 'UISession';
     /** Currently active session */
@@ -50650,7 +51089,10 @@ export type UninstallAppPayload = {
     appInstallationId: Scalars['ID']['output'];
     success: Scalars['Boolean']['output'];
 };
-/** UniversalTag type stub - exists in wspace-tags-svc Federation stub for referencing tags from other services */
+/**
+ * UniversalTag type stub - exists in wspace-tags-svc
+ * Federation stub for referencing tags from other services
+ */
 export type UniversalTag = {
     __typename?: 'UniversalTag';
     ancestors: Array<UniversalTag>;
@@ -51685,7 +52127,10 @@ export type UpdateFileInput = {
     description?: InputMaybe<Scalars['String']['input']>;
     folderId?: InputMaybe<Scalars['ID']['input']>;
     name?: InputMaybe<Scalars['String']['input']>;
-    /** Universal entity-owned tags (marqueue §251). JSON array of `{key,value,...}` records. Replaces the row's `File.tags` Json column on update. */
+    /**
+     * Universal entity-owned tags (marqueue §251). JSON array of `{key,value,...}`
+     * records. Replaces the row's `File.tags` Json column on update.
+     */
     tags?: InputMaybe<Scalars['JSON']['input']>;
     visibility?: InputMaybe<FileVisibility>;
 };
@@ -51719,7 +52164,10 @@ export type UpdateFolderInput = {
     description?: InputMaybe<Scalars['String']['input']>;
     icon?: InputMaybe<Scalars['String']['input']>;
     name?: InputMaybe<Scalars['String']['input']>;
-    /** Universal entity-owned tags (marqueue §251). JSON array of `{key,value,...}` records. Replaces the row's `Folder.tags` Json column on update. */
+    /**
+     * Universal entity-owned tags (marqueue §251). JSON array of `{key,value,...}`
+     * records. Replaces the row's `Folder.tags` Json column on update.
+     */
     tags?: InputMaybe<Scalars['JSON']['input']>;
     visibility?: InputMaybe<FileVisibility>;
 };
@@ -52915,15 +53363,25 @@ export type UpdateVibeInput = {
     context?: InputMaybe<ContextInput>;
     description?: InputMaybe<Scalars['String']['input']>;
     environmentVariables?: InputMaybe<Scalars['JSON']['input']>;
-    /** Partial feature flag overrides ({ featureId: boolean }). Provided keys are merged on top of the existing stored value; omitted keys are left untouched. Unknown feature ids are ignored. */
+    /**
+     * Partial feature flag overrides ({ featureId: boolean }). Provided keys are
+     * merged on top of the existing stored value; omitted keys are left untouched.
+     * Unknown feature ids are ignored.
+     */
     featureFlags?: InputMaybe<Scalars['JSON']['input']>;
     gitBranch?: InputMaybe<Scalars['String']['input']>;
     metadata?: InputMaybe<Scalars['JSON']['input']>;
     name?: InputMaybe<Scalars['String']['input']>;
     status?: InputMaybe<VibeStatus>;
-    /** Legacy tag input (string array). Use `tagsV2` for the canonical `[{key,value,...}]` shape (marqueue §251). Both fields are still written. */
+    /**
+     * Legacy tag input (string array). Use `tagsV2` for the canonical
+     * `[{key,value,...}]` shape (marqueue §251). Both fields are still written.
+     */
     tags?: InputMaybe<Array<Scalars['String']['input']>>;
-    /** Canonical universal-tag input (marqueue §251). JSON array of `{key,value,...}` records. When provided, takes precedence over legacy `tags`. */
+    /**
+     * Canonical universal-tag input (marqueue §251). JSON array of `{key,value,...}`
+     * records. When provided, takes precedence over legacy `tags`.
+     */
     tagsV2?: InputMaybe<Scalars['JSON']['input']>;
 };
 export type UpdateVibecontrolsAgentInput = {
@@ -53214,7 +53672,10 @@ export type UploadFileInput = {
     s3Bucket: Scalars['String']['input'];
     s3Key: Scalars['String']['input'];
     size: Scalars['BigInt']['input'];
-    /** Universal entity-owned tags (marqueue §251). JSON array of `{key,value,...}` records. Backed by the canonical `File.tags` Json column. */
+    /**
+     * Universal entity-owned tags (marqueue §251). JSON array of `{key,value,...}`
+     * records. Backed by the canonical `File.tags` Json column.
+     */
     tags?: InputMaybe<Scalars['JSON']['input']>;
     visibility?: InputMaybe<FileVisibility>;
 };
@@ -54080,7 +54541,10 @@ export declare enum VersionStatus {
     Historical = "HISTORICAL",
     Published = "PUBLISHED"
 }
-/** A development project or repository representing a development environment. Vibes can be organized hierarchically and support various types (local, remote, docker, cloud). */
+/**
+ * A development project or repository representing a development environment.
+ * Vibes can be organized hierarchically and support various types (local, remote, docker, cloud).
+ */
 export type Vibe = {
     __typename?: 'Vibe';
     /** Agent managing this vibe */
@@ -54099,11 +54563,18 @@ export type Vibe = {
     deletedAt?: Maybe<Scalars['DateTime']['output']>;
     /** Vibe description */
     description?: Maybe<Scalars['String']['output']>;
-    /** Per-vibe feature toggles after merging stored overrides on top of the catalog defaults. Always returns a value for every known feature id. */
+    /**
+     * Per-vibe feature toggles after merging stored overrides on top of the catalog defaults.
+     * Always returns a value for every known feature id.
+     */
     effectiveFeatureFlags: Scalars['JSON']['output'];
     /** Environment variables */
     environmentVariables?: Maybe<Scalars['JSON']['output']>;
-    /** Raw per-vibe feature toggles as stored on the vibe. Shape: { "<featureId>": boolean }. Missing keys fall back to the catalog default. Use `effectiveFeatureFlags` for the merged view that the UI should drive off. */
+    /**
+     * Raw per-vibe feature toggles as stored on the vibe.
+     * Shape: { "<featureId>": boolean }. Missing keys fall back to the catalog default.
+     * Use `effectiveFeatureFlags` for the merged view that the UI should drive off.
+     */
     featureFlags?: Maybe<Scalars['JSON']['output']>;
     /** Current Git branch */
     gitBranch?: Maybe<Scalars['String']['output']>;
@@ -54131,11 +54602,15 @@ export type Vibe = {
     status: VibeStatus;
     tagAssignments: Array<EntityTagAssignment>;
     /**
-     * Tags for categorization (legacy String[] shape). Backwards-compat projection of the canonical `tagsV2` Json column (marqueue §251).
+     * Tags for categorization (legacy String[] shape).
+     * Backwards-compat projection of the canonical `tagsV2` Json column (marqueue §251).
      * @deprecated Use tagsV2 (canonical Json shape). This field will be removed once consumers migrate.
      */
     tags: Array<Scalars['String']['output']>;
-    /** Universal entity-owned tags (marqueue §251). JSON array of `{key, value, ...}` records mirroring `wspace-workspace-svc` Project.tags shape. */
+    /**
+     * Universal entity-owned tags (marqueue §251). JSON array of `{key, value, ...}`
+     * records mirroring `wspace-workspace-svc` Project.tags shape.
+     */
     tagsV2: Scalars['JSON']['output'];
     /** Vibe type */
     type: VibeType;
@@ -54194,7 +54669,10 @@ export type VibeAuditDayCount = {
     date: Scalars['String']['output'];
 };
 export type VibeAuditDeleteInput = {
-    /** Reason for deleting this audit log entry (required for compliance). This deletion is itself recorded as an audit event. */
+    /**
+     * Reason for deleting this audit log entry (required for compliance).
+     * This deletion is itself recorded as an audit event.
+     */
     reason: Scalars['String']['input'];
 };
 export declare enum VibeAuditExportFormat {
@@ -54205,7 +54683,10 @@ export type VibeAuditExportInput = {
     filter?: InputMaybe<VibeAuditLogFilterInput>;
     format?: InputMaybe<VibeAuditExportFormat>;
 };
-/** An audit log entry recording a single operation within VibeControls. Captures who did what, when, on which resource, with full state snapshots. */
+/**
+ * An audit log entry recording a single operation within VibeControls.
+ * Captures who did what, when, on which resource, with full state snapshots.
+ */
 export type VibeAuditLog = {
     __typename?: 'VibeAuditLog';
     action: VibeAuditAction;
@@ -54512,7 +54993,10 @@ export type VibeDeckShareLinkList = {
     items: Array<VibeDeckShareLink>;
     total: Scalars['Int']['output'];
 };
-/** Result of validating a share link token. Used by the public shared page to determine if the link is valid and what access it grants. */
+/**
+ * Result of validating a share link token. Used by the public shared page
+ * to determine if the link is valid and what access it grants.
+ */
 export type VibeDeckShareLinkValidation = {
     __typename?: 'VibeDeckShareLinkValidation';
     allowIframe?: Maybe<Scalars['Boolean']['output']>;
@@ -54585,7 +55069,10 @@ export declare enum VibecontrolsActionType {
     Webhook = "WEBHOOK",
     Workflow = "WORKFLOW"
 }
-/** A service running on a host machine that manages local development environments. Agents execute sessions and manage vibes. */
+/**
+ * A service running on a host machine that manages local development environments.
+ * Agents execute sessions and manage vibes.
+ */
 export type VibecontrolsAgent = {
     __typename?: 'VibecontrolsAgent';
     /** API key for authenticating with the agent (changes on agent restart) */
@@ -54637,7 +55124,11 @@ export type VibecontrolsAgent = {
     targetId: Scalars['String']['output'];
     /** Tunnel connection status */
     tunnelStatus?: Maybe<Scalars['String']['output']>;
-    /** Tunnel URL for remote access — single canonical URL the platform uses to reach the agent (legacy `apiUrl` was consolidated into this field on 2026-05-01). */
+    /**
+     * Tunnel URL for remote access — single canonical URL the platform uses
+     * to reach the agent (legacy `apiUrl` was consolidated into this field
+     * on 2026-05-01).
+     */
     tunnelUrl?: Maybe<Scalars['String']['output']>;
     /** Timestamp when last updated */
     updatedAt: Scalars['DateTime']['output'];
@@ -54661,7 +55152,11 @@ export type VibecontrolsAgentList = {
     items: Array<VibecontrolsAgent>;
     total: Scalars['Int']['output'];
 };
-/** Result of `vibecontrolsAgentNetworkLookup` — the live tunnel URL and a peer API key the caller can use to talk to the target. The key is minted fresh on every lookup and bound to the operation tag for audit logging. */
+/**
+ * Result of `vibecontrolsAgentNetworkLookup` — the live tunnel URL and a
+ * peer API key the caller can use to talk to the target. The key is minted
+ * fresh on every lookup and bound to the operation tag for audit logging.
+ */
 export type VibecontrolsAgentNetworkLookupResult = {
     __typename?: 'VibecontrolsAgentNetworkLookupResult';
     expiresAt?: Maybe<Scalars['DateTime']['output']>;
@@ -54669,7 +55164,10 @@ export type VibecontrolsAgentNetworkLookupResult = {
     permissions: Array<Scalars['String']['output']>;
     tunnelUrl: Scalars['String']['output'];
 };
-/** A named profile hosted by an agent. The profile's `name` is the path segment used when reaching `/api/profiles/<name>/...` on the agent. */
+/**
+ * A named profile hosted by an agent. The profile's `name` is the path
+ * segment used when reaching `/api/profiles/<name>/...` on the agent.
+ */
 export type VibecontrolsAgentProfile = {
     __typename?: 'VibecontrolsAgentProfile';
     agentId: Scalars['ID']['output'];
@@ -54696,7 +55194,10 @@ export type VibecontrolsAnalyticsInput = {
     /** Optional: filter analytics by specific vibe */
     vibeId?: InputMaybe<Scalars['ID']['input']>;
 };
-/** Consolidated analytics result for all VibeControls entities. Fields are nullable — null means the entity was not requested via entityTypes filter. */
+/**
+ * Consolidated analytics result for all VibeControls entities.
+ * Fields are nullable — null means the entity was not requested via entityTypes filter.
+ */
 export type VibecontrolsAnalyticsResult = {
     __typename?: 'VibecontrolsAnalyticsResult';
     actions?: Maybe<ActionAnalytics>;
@@ -54716,7 +55217,10 @@ export type VibecontrolsAnalyticsResult = {
     vibes?: Maybe<VibeAnalytics>;
     webhooks?: Maybe<WebhookAnalytics>;
 };
-/** A curated collection of components and vibes within a workspace. Catalogs support visibility controls, dependency graphs, and aggregated SBOMs. */
+/**
+ * A curated collection of components and vibes within a workspace.
+ * Catalogs support visibility controls, dependency graphs, and aggregated SBOMs.
+ */
 export type VibecontrolsCatalog = {
     __typename?: 'VibecontrolsCatalog';
     /** Number of components in this catalog */
@@ -54824,7 +55328,10 @@ export type VibecontrolsCloneTemplateInput = {
     /** Target workspace ID (defaults to current workspace) */
     workspaceId?: InputMaybe<Scalars['ID']['input']>;
 };
-/** A software component (microservice, library, API, etc.) registered in the service catalog. Components can be organized into catalogs, scored via scorecards, and published as templates. */
+/**
+ * A software component (microservice, library, API, etc.) registered in the service catalog.
+ * Components can be organized into catalogs, scored via scorecards, and published as templates.
+ */
 export type VibecontrolsComponent = {
     __typename?: 'VibecontrolsComponent';
     /** Number of catalogs this component belongs to */
@@ -54954,7 +55461,12 @@ export type VibecontrolsDocsBuildImageList = {
     items: Array<VibecontrolsDocsBuildImage>;
     total: Scalars['Int']['output'];
 };
-/** Image pull policy for sandbox builder pods (mirrors Kubernetes semantics): - IF_NOT_PRESENT (default): pull only if missing from the node cache. - ALWAYS: pull on every build (use when imageRef is a mutable tag). - DIGEST_ONLY: refuse to schedule unless imageRef is a digest pin (sha256:...). */
+/**
+ * Image pull policy for sandbox builder pods (mirrors Kubernetes semantics):
+ *   - IF_NOT_PRESENT (default): pull only if missing from the node cache.
+ *   - ALWAYS: pull on every build (use when imageRef is a mutable tag).
+ *   - DIGEST_ONLY: refuse to schedule unless imageRef is a digest pin (sha256:...).
+ */
 export declare enum VibecontrolsDocsBuildImagePullPolicy {
     Always = "ALWAYS",
     DigestOnly = "DIGEST_ONLY",
@@ -55133,7 +55645,11 @@ export declare enum VibecontrolsDocsSiteVisibility {
     Private = "PRIVATE",
     Public = "PUBLIC"
 }
-/** Decrypted integration token returned to the agent. Same shape as `ConnectionToken` from wspace-integrations-svc, kept local so we don't have to extend a federated type owned by another subgraph. */
+/**
+ * Decrypted integration token returned to the agent. Same shape as
+ * `ConnectionToken` from wspace-integrations-svc, kept local so we don't
+ * have to extend a federated type owned by another subgraph.
+ */
 export type VibecontrolsIntegrationToken = {
     __typename?: 'VibecontrolsIntegrationToken';
     accessToken: Scalars['String']['output'];
@@ -55144,10 +55660,17 @@ export type VibecontrolsIntegrationToken = {
     scopes: Array<Scalars['String']['output']>;
     tokenType: Scalars['String']['output'];
 };
-/** Result of `vibecontrolsResolveIntegrationToken` — a passthrough of the upstream `ConnectionTokenResult` from wspace-integrations-svc, narrowed to the fields agents actually need at runtime. */
+/**
+ * Result of `vibecontrolsResolveIntegrationToken` — a passthrough of the
+ * upstream `ConnectionTokenResult` from wspace-integrations-svc, narrowed to
+ * the fields agents actually need at runtime.
+ */
 export type VibecontrolsIntegrationTokenResult = {
     __typename?: 'VibecontrolsIntegrationTokenResult';
-    /** Current connection status after resolution (e.g. ACTIVE, EXPIRED, REVOKED). */
+    /**
+     * Current connection status after resolution
+     * (e.g. ACTIVE, EXPIRED, REVOKED).
+     */
     connectionStatus: Scalars['String']['output'];
     /** Error message if `success` is false. */
     error?: Maybe<Scalars['String']['output']>;
@@ -55158,7 +55681,10 @@ export type VibecontrolsIntegrationTokenResult = {
     /** Whether the token was refreshed during this call (OAuth providers). */
     wasRefreshed: Scalars['Boolean']['output'];
 };
-/** A markdown-formatted note associated with a vibe or workspace. Notes support tagging, pinning, and full-text search. */
+/**
+ * A markdown-formatted note associated with a vibe or workspace.
+ * Notes support tagging, pinning, and full-text search.
+ */
 export type VibecontrolsNote = {
     __typename?: 'VibecontrolsNote';
     /** Markdown content */
@@ -55327,7 +55853,10 @@ export declare enum VibecontrolsSessionType {
     Wezterm = "WEZTERM",
     Zellij = "ZELLIJ"
 }
-/** A reusable template created from a component snapshot. Templates can be instantiated to create new components. */
+/**
+ * A reusable template created from a component snapshot.
+ * Templates can be instantiated to create new components.
+ */
 export type VibecontrolsTemplate = {
     __typename?: 'VibecontrolsTemplate';
     /** Template category classification */
@@ -55495,7 +56024,11 @@ export type VocabularyList = {
     __typename?: 'VocabularyList';
     hasMore: Scalars['Boolean']['output'];
     items: Array<TagVocabulary>;
-    /** Opaque cursor pointing to the item immediately after the last item in `items`. Pass it back as `pagination.cursor` to fetch the next page. Null when `hasMore` is false. */
+    /**
+     * Opaque cursor pointing to the item immediately after the last item in
+     * `items`. Pass it back as `pagination.cursor` to fetch the next page.
+     * Null when `hasMore` is false.
+     */
     nextCursor?: Maybe<Scalars['String']['output']>;
     total: Scalars['Int']['output'];
 };
@@ -55632,7 +56165,10 @@ export type WeatherMonthlySummary = {
     totalRainfall: Scalars['Float']['output'];
     year: Scalars['Int']['output'];
 };
-/** Webhook configuration for event notifications. Webhooks receive HTTP POST requests when subscribed events occur. */
+/**
+ * Webhook configuration for event notifications.
+ * Webhooks receive HTTP POST requests when subscribed events occur.
+ */
 export type Webhook = {
     __typename?: 'Webhook';
     /** Scoped agent IDs (empty = all agents) */